Information processing method and system

Abstract

To simplify an identity verification procedure when using a service requiring identity verification while protecting privacy of a service user.SOLUTION: An information processing device comprises: an acquisition unit; a verification unit; and a provision unit. The acquisition unit acquires, from a user terminal used by a user who is a request source for a service, proof information that is for proving, by zero knowledge proof, that a user is an identity verified user, and that is generated by using secret information that only the identity verified user is allowed to know. A verification unit executes a verification process of the proof information acquired by the acquisition unit by using encrypted information of identity verification information used in an identity verification process of the identity verified user managed in a block chain system, where the encrypted information is encrypted using the secret information. The provision unit executes a process for providing the service to the user who is the request source for the service on condition that the user is proved to be the identity verified user as a result of the verification process by the verification unit.SELECTED DRAWING: Figure 4

Description

[Technical field]

[0001] The present disclosure relates to an information processing device and an information processing method. [Background technology]

[0002] In recent years, a wide variety of services require identity verification. When a user starts using a service, the user must go through identity verification processing for each service. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent No. 6504639 [Patent Document 2] JP 2004-229071 A Summary of the Invention [Problem to be solved by the invention]

[0004] The identity verification process may be complicated and inconvenient for users. In addition, the identity verification process may require the provision of personal information, which calls for the protection of user privacy.

[0005] Therefore, the present disclosure proposes an information processing device and an information processing method that can protect the privacy of a service user and simplify the identity verification procedure when using a service that requires identity verification. [Means for solving the problem]

[0006] In order to solve the above problem, an information processing device according to an embodiment of the present disclosure is an information processing device that provides a service that requires identity verification processing, and includes an acquisition unit, a verification unit, and a provision unit. The acquisition unit acquires, from a user terminal used by a user who is a requester of the service, proof information for proving, by zero-knowledge proof, that the user is a verified user who has completed identity verification processing, and the proof information is generated using secret information that only the verified user can know. The proof information is proof information for proving, by zero-knowledge proof, that the user is a verified user who has completed identity verification processing. The verification unit executes a verification process of the proof information acquired by the acquisition unit, using encrypted information of the identity verification information used in the identity verification process of the verified user that is encrypted using the secret information and managed in the blockchain system. The provision unit executes a process of providing the service to the user who is a requester of the service, on condition that the user is proven to be a verified user as a result of the verification process by the verification unit. [Brief description of the drawings]

[0007] [Figure 1] FIG. 1 is a diagram illustrating an example of an information processing system according to an embodiment. [Diagram 2] FIG. 2 is a diagram illustrating an example of a functional configuration of a user terminal according to an embodiment. [Diagram 3] FIG. 2 is a diagram illustrating an example of a functional configuration of an identity verification processing device according to an embodiment. [Figure 4] FIG. 2 is a diagram illustrating an example of a functional configuration of a payment processing device according to an embodiment. [Diagram 5] 11 is a diagram showing an example of a procedure of a process related to identity verification processing and registration of encrypted information according to the embodiment; FIG. [Figure 6] FIG. 11 is a diagram showing an example of a procedure of a process related to generation and verification of proof information according to the embodiment. [Figure 7] FIG. 11 is a diagram illustrating an example of a procedure of a user registration process according to the embodiment. [Figure 8] FIG. 11 is a diagram illustrating an example of a procedure of a user registration process according to the embodiment. [Figure 9] FIG. 11 is a diagram showing an example of a procedure of a remittance process according to the embodiment. [Figure 10] FIG. 11 is a diagram showing an example of a procedure of a process related to identity verification processing and registration of encrypted information according to a modified example. [Figure 11] A diagram showing an example of a procedure for loan screening processing related to a modified example. [Figure 12] FIG. 13 is a diagram showing an overview of the use of multiple identity verification service providers according to a modified example. [Figure 13] 13 is a flowchart showing an example of a procedure of a verification process of an entity according to a modified example. [Figure 14] FIG. 2 is a hardware configuration diagram illustrating an example of a computer that realizes the functions of a payment processing device. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0008] Hereinafter, the embodiments of the present disclosure will be described in detail with reference to the drawings. In each of the following embodiments, the same parts or components having substantially the same functions may be assigned the same reference numerals and duplicated descriptions may be omitted. For example, when there is no need to distinguish between the user terminals 10a, 10b, and 10c, they will simply be referred to as the user terminal 10.

[0009] The present disclosure will be described in the following order. 1. Introduction 2. Functional configuration example 3. Example of processing procedure 4. Variations 5.Other 6.Effects 7.Hardware Configuration

[0010] <<1. Introduction>> Financial institutions are legally obligated to verify the identity of customers who conduct certain transactions. For this reason, banks and other institutions assume that transactions will be made between accounts for which identity verification has been completed. On the other hand, a distributed ledger system that uses blockchain to manage cryptocurrency transaction history allows anonymous transactions, but identity verification as stipulated by law is required when converting cryptocurrency into legal tender. For this reason, many cryptocurrency exchanges require identity verification when converting cryptocurrency into legal tender.

[0011] In addition, there are a wide variety of services that require identity verification, such as issuing credit cards, buying and selling second-hand goods, online payment and remittance services, etc. To use such services, each service requires a cumbersome identity verification process.

[0012] For example, the identity verification procedure may require a user to upload a copy of their ID to the service provider's system, fill out a document sent by the service provider, and then return it to the service provider by mail. Alternatively, the identity verification procedure may require a user to upload a copy of their ID together with their bank account information. In addition, the identity verification procedure may require a user to upload an image of their ID and video data that captures both the user and their ID. In this way, the identity verification procedure is cumbersome for users.

[0013] Furthermore, personal information such as ID and bank account information is often required for identity verification, which can cause users some anxiety in terms of privacy protection.

[0014] Therefore, in this embodiment, an information processing device and an information processing method are proposed that can protect user privacy while simplifying identity verification when using a service that requires identity verification.

[0015] <<2. Example of functional configuration>> Fig. 1 is a diagram showing an example of an information processing system according to an embodiment. As shown in Fig. 1, the information processing system 1 includes a block chain system 2, user terminals 10a, 10b, and 10c, an identity verification processing device 30, and a payment processing device 100. Note that the configuration of the information processing system 1 according to the embodiment does not need to be particularly limited to the example shown in Fig. 1, and may include, for example, a plurality of identity verification processing devices 30 and a plurality of payment processing devices 100.

[0016] The blockchain system 2, user terminal 10, identity verification processing device 30, and payment processing device 100 are connected to a predetermined communication network 3. The communication network 3 includes a LAN (Local Area Network), a WAN (Wide Area Network), a telephone network (mobile phone network, landline telephone network, etc.), a regional IP (Internet Protocol) network, the Internet, etc. The blockchain system 2, user terminal 10, identity verification processing device 30, and payment processing device 100 can communicate via the communication network 3 by wired or wireless means.

[0017] The blockchain system 2 executes processing related to the blockchain. For example, the blockchain system 2 manages blocks in which the identity verification processing device 30 collects data related to identity verification processing of the user of the user terminal 10, as a blockchain configured by linking the blocks in the order of processing.

[0018] The user terminal 10 is a user device used by a user who is a user of various services that require identity verification. For example, the user terminal 10a is used by a user Ua, the user terminal 10b is used by a user Ub, and the user terminal 10c is used by a user Uc. The user terminal 10 is realized by an information processing device such as a mobile phone including a smartphone, a tablet terminal, a desktop PC, a notebook PC, or a PDA (Personal Digital Assistant).

[0019] The identity verification processing device 30 is an information processing device operated by an identity verification service provider that provides an online identity verification service, so-called eKYC (electric Know Your Customer) service. The identity verification processing device 30 is realized by a desktop PC, a notebook PC, a server, or the like.

[0020] The payment processing device 100 is an information processing device operated by a business that provides online payment services. The payment processing device 100 functions as an example of an information processing device that provides a service that requires identity verification processing for use. The payment processing device 100 is realized by a desktop PC, a notebook PC, a server, etc.

[0021] Services that require identity verification upon use are not necessarily limited to payment services. For example, they can include various financial services such as credit card issuance and account opening, insurance services, asset management and asset management finance services, social lending services, etc.

[0022] <2-1. Blockchain System> The blockchain system 2 generates and manages a blockchain that links together data blocks organized in predetermined units by appropriately using various conventional blockchain-related technologies such as "Hyperledger Fabric." The blockchain system 2 may have any configuration as long as it can realize the processing according to the embodiment of the present disclosure.

[0023] The form of the blockchain of the blockchain system 2 may be various forms, such as a public type (public chain) or a private type (private chain).

[0024] Consensus algorithms in the blockchain system 2 may use various conventional technologies as necessary. Examples of consensus algorithms include Practical Byzantine Fault Tolerance (PBFT), Proof of Consensus (PoC), Proof of Stake (PoS), and Proof of Importance (PoI). When Practical Byzantine Fault Tolerance (PBFT) is used, a core node that functions as a specific administrator for consensus is required.

[0025] The blockchain system 2 executes processing related to the blockchain. For example, the blockchain system 2 manages blocks in which the identity verification processing device 30 collects data related to identity verification processing of the user of the user terminal 10, as a blockchain configured by linking the blocks in the order of processing.

[0026] In the example shown in Fig. 1, the blockchain system 2 is configured to include multiple nodes 20 (20a, 20b, 20c, 20d). Note that the number of nodes that configure the blockchain system 2 does not need to be particularly limited to the example shown in Fig. 1, and may include less than four nodes, or five or more nodes.

[0027] Each node 20 constituting the blockchain system 2 is an information processing device that executes various processes such as generating blocks and sharing the blockchain. The node 20 has a communication unit realized by, for example, a NIC (Network Interface Card) or a communication circuit, and is connected to a communication network 3 (such as the Internet) by wire or wirelessly. Each node 20 transmits and receives information to and from other devices such as the identity verification processing device 30 and the payment processing device 100 via the communication network 3. Each node 20 communicates information related to the blockchain with other nodes 20.

[0028] Each node 20 has a control unit realized by, for example, a microcomputer. The microcomputer is equipped with a processor such as a CPU (Central Processing Unit) or an MPU (Micro Processing Unit), and a storage device such as a ROM (Read Only Memory) or a RAM (Random Access Memory). The ROM stores a program for controlling each part of the node 20. The processor such as the CPU executes the program stored in the ROM, thereby realizing the control of the node 20 by the microcomputer. The RAM is used as a memory area required for the execution of calculations by the processor such as the CPU. Each node 20 also has a storage unit realized by, for example, a semiconductor memory element such as a RAM (Random Access Memory) or a flash memory, or a storage device such as a hard disk or an optical disk. Each node 20 stores the blockchain in the storage unit. The control unit may be realized by an integrated circuit such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array).

[0029] Each node 20 executes processing for sharing in the blockchain each block related to the identity verification processing executed by the identity verification processing device 30. Each block related to the identity verification processing includes user identification information uniquely assigned to each user (identification-completed user) of the user terminal 10 who has completed the identity verification processing, encrypted information obtained by encrypting the identity verification information used in the identity verification processing, and the like.

[0030] In addition, each node 20 executes a process of extracting corresponding information in response to a request from an external device such as the user terminal 10 or the payment processing device 100, and transmitting the corresponding information to the request source. For example, when each node 20 receives a request to acquire encrypted information from an external device such as the user terminal 10 or the payment processing device 100, the node 20 transmits encrypted information corresponding to the user identification information included in the acquisition request to the request source. That is, each node 20 appropriately uses various techniques such as a block (blockchain) explorer for searching the blockchain to search (extract) information corresponding to the request from the request source from the blockchain stored in the storage unit, and transmits the searched (extracted) information to the request source. Note that the blockchain system 2 may include a service providing device that performs various processes such as acquiring corresponding information from the node 20 in response to a request from an external device and transmitting the information to the request source.

[0031] In the information processing system 1 according to the first embodiment, the block chain system 2 manages data related to identity verification processing of the user of the user terminal 10, thereby preventing tampering with the data related to identity verification and facilitating data recovery.

[0032] <2-2. User terminal> 2 is a diagram illustrating an example of a functional configuration of a user terminal according to an embodiment. As illustrated in FIG. 2, the user terminal 10 includes a communication unit 11, an input unit 12, an output unit 13, an imaging unit 14, a positioning unit 15, a detection unit 16, a storage unit 17, and a control unit 18.

[0033] The communication unit 11 is realized by, for example, a network interface card (NIC) or a communication module. The communication unit 11 is connected to the communication network 3 by wire or wirelessly, and transmits and receives information between the block chain system 2, the identity verification processing device 30, the payment processing device 100, and the like via the communication network 3. The information transmitted and received by the communication unit 11 includes encrypted information, random numbers, and user identification information received from the identity verification processing device 30, as well as proof information ([Proof]) to be transmitted to the payment processing device 100. The encrypted information is information obtained by encrypting the identity verification information used in the identity verification processing. The random number is information received by the communication unit 11 only when the identity verification processing is completed in the identity verification processing device 30. The proof information ([Proof]) is information for proving by zero-knowledge proof that the user is an identity-verified user who has completed the identity verification processing. The proof information includes identity verification information used in the identity verification processing, proof information ([Proof]) for proving by zero-knowledge proof that the user is an identity-verified user who has completed the identity verification processing, and the like.

[0034] The input unit 12 includes a keyboard, a mouse, and the like, and accepts various operations from the user of the user terminal 10. The operations that the input unit 12 accepts from the user terminal 10 include an operation for requesting identity verification from the identity verification processing device 30, an operation for requesting the payment processing device 100 to use a payment service, and the like. The input unit 12 may include an audio input device such as a microphone, and accepts input such as the user's voice.

[0035] The output unit 13 includes a display, a speaker, etc., and outputs various information. The information output by the output unit 13 includes a user interface for identity verification processing provided by the identity verification processing device 30, a user interface for using a payment service provided by the payment processing device 100, etc.

[0036] The imaging unit 14 includes a device such as a camera and captures an image. The imaging unit 14 can obtain an image of the user's ID card, a video including the user and the ID card, and the like, as identity verification information that can be used in identity verification processing.

[0037] The positioning unit 15 includes a GPS (Global Positioning System) or the like, and acquires the position of the user terminal 10. The positioning unit 15 can acquire position information of the user's home or parent's home as personal identification information that can be used in personal identification processing.

[0038] The detection unit 16 includes an acceleration sensor, a gyro sensor, a biometric sensor, and the like, and detects various information acting on the user terminal 10. The detection unit 16 can acquire biometric information such as features corresponding to the user's gait, a heartbeat waveform, and fingerprint features as identity verification information that can be used in identity verification processing.

[0039] The storage unit 17 stores programs and data for implementing various processing functions executed by the control unit 18. The storage unit 17 is implemented by, for example, a semiconductor memory element such as a random access memory (RAM) or a flash memory, or a storage device such as a hard disk or an optical disk. The programs stored in the storage unit 17 include programs for implementing processing corresponding to each unit of the control unit 18. One of the functions provided by this program includes a function for causing the user terminal 10 to execute processing for identity verification using zero-knowledge proof, which will be described below.

[0040] As shown in FIG. 2, the storage unit 17 includes a personal identification information storage unit 17a and a secret information storage unit 17b.

[0041] The personal identification information storage unit 17a stores personal identification information used in personal identification processing. The personal identification information stored in the personal identification information storage unit 17a includes image information of identification cards such as a driver's license, an insurance card, and a My Number card (My Number notification card), and various personal information such as a credit card number, account information of a financial institution, an address, a name, an age, a date of birth, and a telephone number. In addition, the personal identification information storage unit 17a may store various types of biometric information acquired by the detection unit 16 and location information acquired by the positioning unit 15 as personal identification information. The various personal information stored in the personal identification information storage unit 17a functions as secret information that can be known only to a user who has completed the personal identification processing and has been identified.

[0042] The private information storage unit 17b stores a random number transmitted from the identity verification processing device 30 to the user terminal 10 on the condition that identity verification processing has been completed. The random number stored in the private information storage unit 17b is generated by the identity verification processing device 30. The random number generated by the identity verification processing device 30 is a private value associated with the user of the user terminal 10 who has requested identity verification processing. This random number is used to generate proof information ([Proof]) for proving by zero-knowledge proof that the user is an identified user who has completed identity verification processing.

[0043] The control unit 18 executes various processes in the user terminal 10. The control unit 18 is realized by a microcomputer or the like. The microcomputer is realized by a processor such as a CPU (Central Processing Unit) or an MPU (Micro Processing Unit). The microcomputer is equipped with a processor such as a CPU (Central Processing Unit) or an MPU (Micro Processing Unit), as well as a storage device such as a ROM (Read Only Memory) or a RAM (Random Access Memory). The ROM stores a program for controlling each part of the user terminal 10. The microcomputer controls the user terminal 10 by executing the program stored in the ROM by the processor such as the CPU. The RAM is used as a memory area required for the processor such as the CPU to execute calculations. The program for controlling each part of the user terminal 10 may be stored in the storage unit 17, and the microcomputer controls the user terminal 10 by executing the program stored in the storage unit 17 by the processor. The control unit 18 may be realized by an integrated circuit such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array).

[0044] As shown in FIG. 2, the control unit 18 includes an identity verification request unit 18a and a service request unit 18b.

[0045] The identity confirmation requesting unit 18a requests the identity confirmation processing device 30 to perform identity confirmation processing. When transmitting an identity confirmation request to the identity confirmation processing device 30, the identity confirmation requesting unit 18a can enclose identity confirmation information to be used in the identity confirmation request. Alternatively, after transmitting an identity confirmation request to the identity confirmation processing device 30 to request identity confirmation processing, the identity confirmation requesting unit 18a may again transmit identity confirmation information according to the request returned from the identity confirmation processing device 30. As identity confirmation information, image information of an identification card such as a driver's license, insurance card, or My Number card (My Number notification card) may be adopted.

[0046] When the identity verification processing is completed in the identity verification processing device 30, the identity verification requesting unit 18a receives a random number transmitted from the identity verification processing device 30 on the condition that the identity verification processing is completed together with user identification information uniquely assigned to each identified user. The identity verification requesting unit 18a associates the user identification information with the random number received from the identity verification processing device 30 and stores them in the storage unit 17.

[0047] The service request unit 18b requests the provision of various services by sending a service request to the payment processing device 100. When sending a service request to the payment processing device 100, the service request unit 18b uses proof information ([Proof]) for proving by zero-knowledge proof that the user is a verified user who has completed identity verification processing. The service request unit 18b requests the payment processing device 100 to provide a service by sending a service request to the payment processing device 100 enclosing user identification information assigned by the identity verification processing device 30 and the proof information.

[0048] Service request unit 18b executes a "Zero-Knowledge Proof (ZKP)-Prove" process to generate proof information ([Proof]) for proving by zero-knowledge proof that the user is a verified user when requesting provision of a service from payment processing device 100. The "ZKP-Prove" process includes a "WitnessReduction" process.

[0049] The "WitnessRedution" process is executed based on identity verification information (personal information) and random numbers, which are information that can only be known by a verified user, and encrypted information managed in the blockchain system 2 as public information. The identity verification information is obtained from the identity verification information storage unit 17a. The random numbers are obtained from the private information storage unit 17b. The encrypted information is obtained from the blockchain system 2 based on user identification information linked to the random numbers obtained from the private information storage unit 17b. The encrypted information managed in the blockchain system 2 is information generated by the identity verification processing device 30 encrypting the identity verification information using random numbers during identity verification processing.

[0050] The "WitnessReduction" process can generate a polynomial that cannot be generated in polynomial time without, for example, a random number and identity verification information, which are secret information (Witness) that only the user can know. In other words, in the "WitnessReduction" process, unless the random number and the encrypted information match, the correct "polynomial h" cannot be generated.

[0051] For example, the service request unit 18b can generate a "polynomial h" generated by the "WitnessReduction" process as proof information for proving, by zero-knowledge proof, that the user is a verified user who has completed identity verification processing. Note that the algorithm for generating proof information for proving, by zero-knowledge proof, that the user is a verified user who has completed identity verification processing does not need to be particularly limited to one that generates a "polynomial h". Various algorithms for generating proof information for proving, by zero-knowledge proof, that the user is a verified user who has completed identity verification processing can be used.

[0052] <2-3. Personal Identification Processing Device> 3 is a diagram showing an example of a functional configuration of an identity verification processing device according to an embodiment. As shown in FIG. 3, an identity verification processing device 30 includes a communication unit 31, a storage unit 32, and a control unit 33.

[0053] The communication unit 31 is realized by, for example, a network interface card (NIC). The communication unit 31 is connected to the communication network 3 by wire or wirelessly, and transmits and receives information between the block chain system 2 and the user terminal 10 via the communication network 3. The information transmitted and received by the communication unit 31 includes identity verification information received from the user terminal 10, user identification information and random numbers transmitted to the user terminal 10, and encrypted information transmitted to the block chain system 2. The identity verification information is information used for identity verification processing of the user of the user terminal 10. The user identification information is information uniquely assigned to a user whose identity has been verified and whose identity verification processing has been completed. The random number is secret information transmitted to the user terminal 10 on the condition that the identity verification processing is completed. The encrypted information is information obtained by encrypting identity verification information using a random number.

[0054] The storage unit 32 stores programs and data for implementing various processing functions executed by the control unit 33. The storage unit 32 is implemented by, for example, a semiconductor memory element such as a random access memory (RAM) or a flash memory, or a storage device such as a hard disk or an optical disk. The programs stored in the storage unit 32 include programs for implementing processing corresponding to each unit of the control unit 33. One of the functions provided by this program includes a function for causing the identity verification processing device 30 to execute identity verification processing described below.

[0055] The control unit 33 executes various processes in the identity verification processing device 30. The control unit 33 is realized by a microcomputer or the like. The microcomputer is realized by a processor such as a CPU (Central Processing Unit) or an MPU (Micro Processing Unit). The microcomputer is equipped with a processor such as a CPU (Central Processing Unit) or an MPU (Micro Processing Unit), as well as a storage device such as a ROM (Read Only Memory) or a RAM (Random Access Memory). The ROM stores a program for controlling each part of the identity verification processing device 30. The microcomputer controls the identity verification processing device 30 by executing the program stored in the ROM by the processor such as the CPU. The RAM is used as a memory area required for the processor such as the CPU to execute calculations. The program for controlling each part of the identity verification processing device 30 may be stored in the storage unit 32, and the processor executes the program stored in the storage unit 32 to control the identity verification processing device 30 by the microcomputer. The control unit 33 may be realized by an integrated circuit such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array).

[0056] As shown in FIG. 3, the control unit 33 includes an identity verification processing unit 33a and a registration processing unit 33b.

[0057] In response to a personal identification request received from the user terminal 10, the personal identification processing unit 33a executes online personal identification processing.

[0058] Specifically, when the identity verification processing unit 33a receives an identity verification request from the user terminal 10, it establishes, for example, a communication session for the identity verification processing, and sends an upload request for identity verification information to be used for identity verification to the user terminal 10 through the established communication session.

[0059] Next, the identity verification processing unit 33a executes identity verification processing using the identity verification information uploaded by the user terminal 10. The identity verification processing unit 33a also generates a random number associated with the user of the user terminal 10 who has requested the identity verification processing. This random number is a secret value associated with the user of the user terminal 10 who has requested the identity verification processing. This random number may be any information associated with the user of the user terminal 10 who has requested the identity verification processing, and various information may be used.

[0060] Next, the identity verification processing unit 33a uses the generated random number to generate encrypted information by encrypting the identity verification information uploaded by the user terminal 10. For example, the identity verification processing unit 33a calculates a hash value using the identity verification information and the random number as input, and sets the calculated hash value as encrypted information.

[0061] The registration processing unit 33b executes registration processing for the blockchain system 2. When encrypted information is generated in the identity verification processing unit 33a, the registration processing unit 33b generates unique user identification information to be assigned to the user of the user terminal 10 that is the requester of the identity verification processing. Then, the registration processing unit 33b associates the user identification information with the encrypted information and registers them in the blockchain system 2. As a result, the user identification information and the encrypted information are set up in the blockchain system 2 as public information for proving by zero-knowledge proof that the identity verification processing has been completed.

[0062] Furthermore, the registration processing unit 33b returns the user identification information and a random number associated with the user of the user terminal 10 that has requested the identity verification process to the user terminal 10 that has requested the identity verification process. As a result, the random number used to generate proof information for proving by zero-knowledge proof that the user is a verified user who has completed the identity verification process is set up in the user terminal 10.

[0063] <2-4. Payment processing device> 4 is a diagram showing an example of a functional configuration of the payment processing device according to the embodiment. As shown in FIG. 4, the payment processing device 100 includes a communication unit 110, a storage unit 120, and a control unit .

[0064] The communication unit 110 is realized by, for example, a network interface card (NIC). The communication unit 110 is connected to the communication network 3 by wire or wirelessly, and transmits and receives information between the block chain system 2, the user terminal 10, and the like via the communication network 3. The information transmitted and received by the communication unit 110 includes proof information ([Proof]) received from the user terminal 10 and encrypted information obtained from the block chain system 2. The proof information ([Proof]) is information for proving by zero-knowledge proof that the user is a confirmed user who has completed the identity verification process. The encrypted information is information obtained by encrypting the identity verification information used by the user of the user terminal 10 in the identity verification process.

[0065] The storage unit 120 stores programs and data for implementing various processing functions executed by the control unit 130. The storage unit 120 is implemented, for example, by a semiconductor memory element such as a random access memory (RAM) or a flash memory, or a storage device such as a hard disk or an optical disk. The programs stored in the storage unit 120 include programs for implementing processing corresponding to each unit of the control unit 130. One of the functions provided by this program includes a function for causing the payment processing device 100 to execute a verification process described below.

[0066] The control unit 130 executes various processes in the payment processing device 100. The control unit 130 is realized by a microcomputer or the like. The microcomputer is realized by a processor such as a CPU (Central Processing Unit) or an MPU (Micro Processing Unit). The microcomputer is equipped with a processor such as a CPU (Central Processing Unit) or an MPU (Micro Processing Unit), as well as a storage device such as a ROM (Read Only Memory) or a RAM (Random Access Memory). The ROM stores a program for controlling each part of the payment processing device 100. The processor such as the CPU executes the program stored in the ROM, thereby realizing the control of the payment processing device 100 by the microcomputer. The RAM is used as a memory area required for the processor such as the CPU to execute calculations, etc. Note that the program for controlling each part of the payment processing device 200 may be stored in the storage unit 120, and the processor executes the program stored in the storage unit 120, thereby realizing the control of the payment processing device 100 by the microcomputer. Note that the control unit 130 may be realized by an integrated circuit such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array).

[0067] As shown in FIG. 4, the control unit 130 includes an acquisition unit 131, a verification unit 132, and a provision unit 133.

[0068] The acquisition unit 131 acquires, from the user who has made a service request, proof information generated using secret information that only the authenticated user can know. Here, the proof information is proof information for proving by zero-knowledge proof that the user is an authenticated user who has completed the identity verification process, and is enclosed in a service request transmitted from the user terminal 10. In addition, the acquisition unit 131 acquires user identification information enclosed in the service request together with the proof information. Note that the secret information that only the authenticated user can know corresponds to, for example, the identity verification information used in the identity verification process and a random number that is information linked to the user of the user terminal 10 that has made the request for the identity verification process.

[0069] The verification unit 132 executes a verification process ("ZKP-Verify" process) of the proof information acquired by the acquisition unit 131, using the encrypted information that has been encrypted using secret information and managed in the blockchain system 2. The encrypted information managed in the blockchain system 2 is encrypted identity verification information used in the identity verification process of a user whose identity has been verified. The encrypted information is generated by the identity verification processing device 30 by encrypting the identity verification information using a random number generated by the identity verification processing device 30 itself, and is registered in the blockchain system 2 by the identity verification processing device 30.

[0070] The "ZKP-Verify" process is executed by obtaining, from the block chain system 2, encrypted information associated with the user identification information obtained by the obtaining unit 131. The "ZKP-Verify" process verifies whether or not the proof information obtained from the user terminal 10 is created based on a random number, which is secret information that can only be known by the user whose identity has been verified. Specifically, for example, when a "polynomial h" is generated as proof information in the user terminal 10, the "ZKP-Verify" process compares, for example, a calculation result based on the encrypted information obtained from the block chain system 2 with the proof information. Then, the "ZKP-Verify" process verifies whether or not the proof information is generated from a correct "polynomial h". That is, the "ZKP-Verify" process verifies whether or not the service request is from a user whose identity has been verified and whose identity has been verified.

[0071] In the "ZKP-Verify" process, if the verification proves that the proof information was generated from a correct "polynomial h," a verification result is derived that the user of user terminal 10 that requested the service is a genuine user whose identity has been verified. A correct "polynomial h" means that the polynomial is generated from the same random numbers as those used to generate the encrypted information. On the other hand, in the "ZKP-Verify" process, if the verification fails to prove that the proof information was generated from a correct "polynomial h," a verification result is derived that the user of user terminal 10 that sent the proof information is not a genuine user whose identity has been verified.

[0072] The providing unit 133 executes a process for providing a service to a user who uses the user terminal 10 that is the service request source, on condition that it is proven that the user who is the service request source has completed the identity verification process as a result of the verification process by the verifying unit 132. The providing unit 133 may notify the service request source that the verification process has been successfully completed.

[0073] <<3. Processing procedure example>> <3-1. Procedures for identity verification and registration of encrypted information> A procedure of a process related to identity verification processing and registration of encrypted information according to the embodiment will be described with reference to Fig. 5. Fig. 5 is a diagram showing an example of a procedure of a process related to identity verification processing and registration of encrypted information according to the embodiment.

[0074] 5, the user terminal 10 transmits an identity verification request for requesting the execution of identity verification processing to the identity verification processing device 30 (step S11). When transmitting the identity verification request, the user terminal 10 can enclose identity verification information to be used in the identity verification processing, for example.

[0075] The identity verification processing device 30 that has received the identity verification request performs identity verification processing (step S12). In addition, the identity verification processing device 30 generates secret information (random number) associated with the user of the user terminal 10 that has requested the identity verification processing (step S13).

[0076] Next, the identity verification processing device 30 generates encrypted information ([Encrypted PII]) by encrypting the identity verification information used in the identity verification process in step S12 using the random number ([Secret]), which is the secret information generated in step S13 (step S14).

[0077] After generating the encrypted information ([Encrypted PII]), the identity verification processing device 30 transmits a registration request for the encrypted information to the block chain system 2 (step S15). When transmitting the registration request for the encrypted information, the identity verification processing device 30 generates user identification information ([PII-ID]) unique to the user of the user terminal 10, who is a user whose identity has been verified, and encloses it together with the encrypted information ([Encrypted PII]) in the registration request. In the block chain system 2, the user identification information ([PII-ID]) and the encrypted information ([Encrypted PII]) are managed in a mutually linked state.

[0078] Then, the identity verification processing device 30 returns the random number ([Secret]) which is the secret information generated in step S13 to the user terminal 10 (step S16). When returning the random number ([Secret]) which is the secret information to the user terminal 10, the identity verification processing device 30 also transmits the user identification information ([PII-ID]).

[0079] When the user terminal 10 receives the random number ([Secret]) which is secret information from the identity verification processing device 30, it associates it with the user identification information ([PII-ID]) received together with the secret information and stores it in the storage unit 17 (step S17). This completes the identity verification process and the process related to registration of encrypted information in the information processing system 1.

[0080] In this way, according to the information processing system 1 of the embodiment, encrypted information ([Encrypted PII]) obtained by encrypting the identity verification information used in the identity verification process is managed as public information in the blockchain system 2. This allows the encrypted information managed in the blockchain system 2 to be shared among multiple services that require identity verification. Therefore, a service user can simplify the procedures for using multiple services that require identity verification by verifying their identity once using the identity verification service. Meanwhile, the service provider can obtain and use the encrypted information from the blockchain system 2 as necessary, so there is no need to go through the procedure of obtaining identity verification information from the service user, and the identity verification procedure can be simplified.

[0081] <3-2. Procedures for generating and verifying certification information> A procedure of a process related to generation and verification of proof information according to the embodiment will be described with reference to Fig. 6. Fig. 6 is a diagram showing an example of a procedure of a process related to generation and verification of proof information according to the embodiment.

[0082] As shown in Figure 6, the user terminal 10 executes a "ZKP-Prove" process to generate proof information ([Proof]) for proving by zero-knowledge proof that identity verification has been completed when requesting the use of a service from the payment processing device 100 (step S21). The "ZKP-Prove" process is executed based on identity verification information ([PII]), a random number ([Secret]), and encrypted information ([Encrypted PII]). The encrypted information ([Encrypted PII]) is obtained from the blockchain system 2 based on the user identification information ([PII-ID]).

[0083] After generating proof information ([Proof]) through the "ZKP-Prove" process, the user terminal 10 transmits a service usage request to the payment processing device 100 (step S22). For example, the user terminal 10 encloses the proof information ([Proof]) generated in step S21 and the user identification information ([PII-ID]) assigned by the identity verification processing device 30 in the service usage request.

[0084] The payment processing device 100 that has received the service use request executes a verification process ("ZKP-Verify" process) of the proof information ([Proof]) included in the service use request (step S23). The "ZKP-Verify" process is executed by acquiring, from the blockchain system 2, the encrypted information ([Encrypted PII]) associated with the user identification information ([PII-ID]) acquired by the acquisition unit 131. The "ZKP-Verify" process verifies whether or not the proof information acquired from the user terminal 10 has been created based on a random number, which is secret information known only to the user whose identity has been verified. In other words, the "ZKP-Verify" process verifies whether or not the service use request is from a user whose identity has been verified and whose identity verification process has been completed. When it is verified that the user who made the service request has completed the identity verification process, the payment processing device 100 executes a process for providing the service to the user who made the service request. This is the end of the process procedure related to the generation and verification of proof information in the information processing system 1.

[0085] In this way, according to the information processing system 1 according to the embodiment, the encrypted information ([Encrypted PII]) obtained by encrypting the identity verification information used in the identity verification process is managed as public information in the blockchain system 2. That is, since the identity verification information managed as public information in the blockchain system 2 is encrypted, the privacy of the service user can be protected. In addition, by using zero-knowledge proof, the service user can prove to the service provider that the identity verification has been completed, using proof information corresponding to the encrypted information managed in the blockchain system 2, without making the identity verification information itself public. Meanwhile, the service provider can obtain the encrypted information required for identity verification from the encrypted information managed in the blockchain system 2, and verify whether the service user has been identified by the zero-knowledge proof. Therefore, the identity verification procedure can be simplified for both the service user and the service provider while protecting the privacy of the service user.

[0086] <3-3. User registration process> A procedure of a user registration process according to an embodiment will be described with reference to Fig. 7. Fig. 7 is a diagram showing an example of a procedure of a user registration process according to an embodiment. The procedure of the process shown in Fig. 7 may be executed, for example, when a user of the user terminal 10 uses a service provided by the payment processing device 100.

[0087] As shown in FIG. 7, the user terminal 10 executes "ZKP-Prove" processing when sending a user registration request to the payment processing device 100 (step S31). The "ZKP-Prove" processing is similar to the example shown in FIG. 6 above, and is a processing for generating proof information ([Proof]) for proving by zero-knowledge proof that the identity of the user has been verified. The "ZKP-Prove" processing is executed based on the identity verification information ([PII]), a random number ([Secret]), and encrypted information ([Encrypted PII]). The encrypted information ([Encrypted PII]) is obtained from the blockchain system 2 based on the user identification information ([PII-ID]).

[0088] After generating proof information ([Proof]) through the "ZKP-Prove" process, the user terminal 10 transmits a user registration request to the payment processing device 100 (step S32). For example, the user terminal 10 encloses the proof information ([Proof]) generated in step S31 and the user identification information ([PII-ID]) assigned by the identity verification processing device 30 in the user registration request.

[0089] Upon receiving the user registration request, the payment processing device 100 executes a verification process ("ZKP-Verify" process) of the proof information ([Proof]) included in the user registration request (step S33). The "ZKP-Verify" process is executed by obtaining, from the blockchain system 2, encrypted information ([Encrypted PII]) linked to the user identification information ([PII-ID]) obtained by the obtaining unit 131. The "ZKP-Verify" process verifies whether or not the proof information ([Proof]) obtained from the user terminal 10 has been created based on a random number ([Secret]), which is secret information known only to a user whose identity has been verified. In other words, the "ZKP-Verify" process verifies whether or not the user registration request is from a user whose identity has been verified and whose identity has been verified.

[0090] When it is verified that the user of the user terminal 10 that requested user registration has completed identity verification processing, the payment processing device 100 transmits to the user terminal 10 a request to input user basic information for user registration (step S34). When transmitting the request to input the user basic information, the payment processing device 100 includes session information for identifying a session established with the user terminal 10 in the request to input the user basic information. The payment processing device 100 acquires the user basic information from the user terminal 10, for example, through an input form provided to the user of the user terminal 10 via the session.

[0091] The user terminal 10 that has received the input request for user basic information notifies the user that the input request for user basic information has been received, and accepts the input of the user basic information input by the user (step S35).

[0092] When the user has completed inputting the user basic information, the user terminal 10 transmits a request to register the user basic information to the payment processing device 100 through the session established by the payment processing device 100 (step S36). The request to register the user basic information includes session information for identifying the session established by the payment processing device 100.

[0093] Upon receiving the request to register the user basic information, the payment processing device 100 executes the user registration process (step S37). The above is an example of the procedure of the user registration process executed in the information processing system 1.

[0094] In this way, according to the information processing system 1 according to the embodiment, when making a user registration request when using a service, the service user can prove that the identity has been verified by zero-knowledge proof without disclosing the identity verification information itself. Furthermore, the service provider can appropriately obtain and use encrypted information from the blockchain system 2 when verifying the identity of the user in the user registration request. Therefore, in the identity verification when registering a user when using a service, the identity verification can be simplified for both the service user and the service provider while protecting the privacy of the service user.

[0095] <3-4. Anonymous user registration process> The procedure of the user registration process according to the embodiment will be described with reference to Fig. 8. Fig. 8 is a diagram showing an example of the procedure of the user registration process according to the embodiment. The procedure of the process shown in Fig. 8 may be executed, for example, when a user of the user terminal 10 uses a service provided by the payment processing device 100.

[0096] As shown in FIG. 8, the user terminal 10 executes "ZKP-Prove" processing when sending an anonymous user registration request to the payment processing device 100 (step S41). The "ZKP-Prove" processing is similar to the example shown in FIG. 6 above, and is a processing for generating proof information ([Proof]) for proving by zero-knowledge proof that the identity of the user has been verified. The "ZKP-Prove" processing is executed based on the identity verification information ([PII]), a random number ([Secret]), and encrypted information ([Encrypted PII]). The encrypted information ([Encrypted PII]) is obtained from the blockchain system 2 based on the user identification information ([PII-ID]).

[0097] After generating proof information ([Proof]) through the "ZKP-Prove" process, the user terminal 10 transmits an anonymous user registration request to the payment processing device 100 (step S42). For example, the user terminal 10 encloses the proof information ([Proof]) generated in step S41 and the user identification information ([PII-ID]) assigned by the identity verification processing device 30 in the anonymous user registration request.

[0098] Upon receiving the user registration request, the payment processing device 100 executes a verification process ("ZKP-Verify" process) of the proof information ([Proof]) included in the user registration request (step S43). The "ZKP-Verify" process is executed by obtaining, from the blockchain system 2, encrypted information ([Encrypted PII]) linked to the user identification information ([PII-ID]) obtained by the obtaining unit 131. The "ZKP-Verify" process verifies whether or not the proof information ([Proof]) obtained from the user terminal 10 was created based on a random number ([Secret]), which is secret information known only to a user whose identity has been verified. In other words, the "ZKP-Verify" process verifies whether or not the anonymous user registration request is from a user whose identity has been verified and whose identity has been verified.

[0099] When it is verified that identity verification processing has been completed for the user of the user terminal 10 that requested the anonymous user registration, the payment processing device 100 executes the anonymous user registration processing (step S44). The payment processing device 100 generates an anonymous ID and an anonymous session ID unique to the user that requested the anonymous user registration, and manages them in association with the user identification information ([PII-ID]) included in the anonymous user registration request. The anonymous session ID is information for identifying an anonymous session.

[0100] Following the anonymous user registration process, the payment processing device 100 transmits anonymous session information to the user terminal 10 (step S45). The anonymous session information includes an anonymous ID and an anonymous session ID.

[0101] The user terminal 10 that has received the anonymous session information stores the anonymous session information (step S46), and transmits a service use request to the payment processing device 100 by using the anonymous session information (step S47).

[0102] Upon receiving the service use request, the payment processing device 100 verifies the anonymous session information included in the service use request (step S48). If the payment processing device 100 successfully verifies the anonymous session information, the payment processing device 100 provides the service to the user terminal 10 through the anonymous session.

[0103] Thus, according to the information processing system 1 according to the embodiment, when making an anonymous user registration request when using a service, the service user can prove that the identity has been verified by zero-knowledge proof without disclosing the identity verification information itself. Furthermore, the service provider can appropriately obtain and use encrypted information from the blockchain system 2 when verifying the identity of the user in response to the anonymous user registration request. Therefore, in identity verification for anonymous user registration when using a service, the privacy of the service user can be protected, while identity verification can be simplified for both the service user and the service provider.

[0104] <3-5. Remittance Processing> The procedure of the remittance process according to the embodiment will be described with reference to Fig. 9. Fig. 9 is a diagram showing an example of the procedure of the remittance process according to the embodiment.

[0105] As shown in FIG. 9, the user terminal 10 executes "ZKP-Prove" processing when sending a remittance request to the payment processing device 100 (step S51). The "ZKP-Prove" processing is similar to the example shown in FIG. 6 above, and is a processing for generating proof information ([Proof]) for proving by zero-knowledge proof that the identity of the user has been verified. The "ZKP-Prove" processing is executed based on the identity verification information ([PII]), a random number ([Secret]), and encrypted information ([Encrypted PII]). The encrypted information ([Encrypted PII]) is obtained from the blockchain system 2 based on the user identification information ([PII-ID]).

[0106] After generating proof information ([Proof]) through the "ZKP-Prove" process, the user terminal 10 transmits a remittance request to the payment processing device 100 (step S52). The user terminal 10 encloses, for example, the proof information ([Proof]) generated in step S51, the user identification information ([PII-ID]) assigned by the personal identification processing device 30, and information related to the remittance of digital currency in the transmission request.

[0107] Upon receiving the remittance request, the payment processing device 100 executes a verification process ("ZKP-Verify" process) of the proof information ([Proof]) included in the user registration request (step S53). The "ZKP-Verify" process is executed by obtaining, from the blockchain system 2, the encrypted information ([Encrypted PII]) linked to the user identification information ([PII-ID]) obtained by the obtaining unit 131. The "ZKP-Verify" process verifies whether or not the proof information ([Proof]) obtained from the user terminal 10 was created based on a random number ([Secret]), which is secret information known only to a user whose identity has been verified. In other words, the "ZKP-Verify" process verifies whether or not the remittance request is from a user whose identity has been verified and whose identity has been verified.

[0108] When it is verified that the identity verification process has been completed for the user of user terminal 10 that has requested user registration, payment processing device 100 executes the remittance process of the digital currency included in the remittance request (step S54).

[0109] Thus, according to the information processing system 1 according to the embodiment, when using the remittance service provided by the payment processing device 100, the service user can prove that his / her identity has been verified by zero-knowledge proof without disclosing the identity verification information itself. Furthermore, the service provider can appropriately obtain and use encrypted information from the blockchain system 2 when verifying the identity of the user in response to a remittance request. Therefore, in identity verification for the remittance service, the privacy of the service user can be protected, while identity verification can be simplified for both the service user and the service provider.

[0110] <<4. Modifications>> <4-1. Credit score registration> In the above embodiment, when the encrypted information of the user of the user terminal 10 is registered in the block chain system 2, the credit score of the user terminal 10 may also be registered. FIG. 10 is a diagram showing an example of a processing procedure related to identity verification processing and registration of encrypted information according to a modified example. The processing procedure shown in FIG. 10 is basically the same as the processing procedure shown in FIG. 5, but differs from the processing procedure shown in FIG. 5 in that the credit score of the user of the user terminal 10 is registered in the block chain system 2.

[0111] 10, the user terminal 10 transmits an identity verification request for requesting the execution of identity verification processing to the identity verification processing device 30 (step S61). When transmitting the identity verification request, the user terminal 10 can enclose identity verification information to be used in the identity verification processing, for example.

[0112] The identity verification processing device 30 that has received the identity verification request performs identity verification processing (step S62). The identity verification processing device 30 also generates secret information (random numbers) associated with the user of the user terminal 10 that has requested the identity verification processing (step S63). In addition, the identity verification processing device 30 executes a credit score calculation process that calculates the credit score of the user of the user terminal 10 in the identity verification processing. The credit score is used, for example, in a loan screening process (see FIG. 11) in the payment processing device 100.

[0113] Next, the identity verification processing device 30 generates encrypted information ([Encrypted PII]) by encrypting the identity verification information used in the identity verification process in step S62 using the random number ([Secret]), which is the secret information generated in step S13 (step S64).

[0114] After generating the encrypted information ([Encrypted PII]), the identity verification processing device 30 transmits a registration request for the encrypted information to the block chain system 2 (step S65). When transmitting the registration request for the encrypted information, the identity verification processing device 30 generates user identification information ([PII-ID]) unique to the user of the user terminal 10, who is a user whose identity has been verified, and encloses it in the registration request together with the encrypted information ([Encrypted PII]) and the credit score. In the block chain system 2, the user identification information ([PII-ID]), the encrypted information ([Encrypted PII]), and the credit score are managed in a mutually linked state.

[0115] Then, the identity verification processing device 30 returns the random number ([Secret]) which is the secret information generated in step S63 to the user terminal 10 (step S66). When returning the random number ([Secret]) which is the secret information to the user terminal 10, the identity verification processing device 30 also transmits the user identification information ([PII-ID]).

[0116] When the user terminal 10 receives the random number ([Secret]) which is secret information from the personal identification processing device 30, it associates it with the user identification information ([PII-ID]) received together with the secret information and stores it in the memory unit 17 (step S67).

[0117] <4-2. Loan screening process> The procedure of the remittance process according to the embodiment will be described with reference to Fig. 11. Fig. 11 is a diagram showing an example of the procedure of the loan examination process according to the modified example.

[0118] As shown in FIG. 11, the user terminal 10 executes "ZKP-Prove" processing when sending a remittance request to the payment processing device 100 (step S71). The "ZKP-Prove" processing is similar to the example shown in FIG. 6 above, and is a process for generating proof information ([Proof]) for proving by zero-knowledge proof that the user's identity has been verified. The "ZKP-Prove" processing is executed based on the identity verification information ([PII]), a random number ([Secret]), and encrypted information ([Encrypted PII]). The encrypted information ([Encrypted PII]) is obtained from the blockchain system 2 based on the user identification information ([PII-ID]).

[0119] After generating the proof information ([Proof]) through the "ZKP-Prove" process, the user terminal 10 transmits a loan examination request to the payment processing device 100 (step S72). For example, the user terminal 10 encloses the proof information ([Proof]) generated in step S71 and the user identification information ([PII-ID]) assigned by the personal identification processing device 30 in the loan examination request.

[0120] Upon receiving the loan examination request, the payment processing device 100 executes a verification process ("ZKP-Verify" process) of the proof information ([Proof]) included in the loan examination request (step S73). The "ZKP-Verify" process is executed by obtaining, from the blockchain system 2, the encrypted information ([Encrypted PII]) linked to the user identification information ([PII-ID]) obtained by the obtaining unit 131. The "ZKP-Verify" process verifies whether or not the proof information ([Proof]) obtained from the user terminal 10 was created based on a random number ([Secret]), which is secret information known only to a user whose identity has been verified. In other words, the "ZKP-Verify" process verifies whether or not the remittance request is from a user whose identity has been verified and whose identity has been verified.

[0121] When it is verified that the identity verification process has been completed for the user of the user terminal 10 that has requested the loan examination, the payment processing device 100 executes the loan examination process based on the credit score of the user of the user terminal 10 that has requested the loan examination (step S74). The credit score is obtained from the blockchain system 2 based on the user identification information ([PII-ID]).

[0122] Thus, according to the information processing system 1 according to the embodiment, when using the loan service provided by the payment processing device 100, the service user can prove that his / her identity has been verified by zero-knowledge proof without disclosing the identity verification information itself. Furthermore, when performing identity verification to respond to a loan examination request, the service provider can appropriately obtain and use a credit score together with encrypted information from the blockchain system 2. Therefore, in identity verification for the remittance service, identity verification can be simplified for both the service user and the service provider while protecting the privacy of the service user.

[0123] <4-3. Use of multiple identity verification service providers> Depending on the service requiring identity verification, it may be necessary to use a specific business among multiple businesses providing identity verification services, or the available businesses may be restricted depending on the social credibility of the business. In this case, the user of the user terminal 10 who is the service user may each carry out identity verification processing using multiple businesses providing identity verification services, and the results of identity verification processing by each business may be managed in the blockchain system 2. FIG. 12 is a diagram showing an overview of the use of multiple identity verification service businesses according to the modified example.

[0124] As shown in FIG. 12, for example, a user Ua of a user terminal 10a can use identity verification service providers X, Y, and Z by sending an identity verification request to each of the identity verification service providers X, Y, and Z (for example, see FIG. 5).

[0125] Identity verification service providers X, Y, and Z exist as businesses capable of carrying out identity verification processing according to the identity verification method required by each service that requires identity verification. The authentication level required by each service may be determined based on any criteria, such as whether multi-step authentication or multi-factor authentication (MFA) is required, or whether a method required by law is required.

[0126] For example, a service that does not require identity verification using multi-factor authentication can be a service that does not require a high authentication level ("authentication level: low"). A service that requires identity verification using multi-factor authentication can be a service that requires a medium authentication level ("authentication level: medium"). A service that requires identity verification as stipulated by law can be a service that requires a high authentication level ("authentication level: high"). In the example shown in FIG. 12, identity verification service providers X, Y, and Z are providers that can implement identity verification according to a service that does not require a high authentication level, a service that requires a medium authentication level, and a service that requires a high authentication level, respectively.

[0127] For services that do not require identity verification using multi-factor authentication (services with "authentication level: low"), basic personal information such as name, address, and date of birth is assumed to be used in identity verification processing. It is also assumed that the information provided by the user will be used unconditionally as a method of identity verification.

[0128] A service provider offering a service that does not require identity verification through multi-factor authentication (a service with an "authentication level: low") is expected to require the service user to undergo identity verification by an identity verification service provider X. For example, when a payment service provider A offers a service that does not require identity verification through multi-factor authentication (a service with an "authentication level: low"), it is expected to require the user Ua to undergo identity verification by an identity verification service provider X.

[0129] Therefore, the user Ua of the user terminal 10a requests the identity verification process from the identity verification service provider X. The identity verification processing device 30X operated by the identity verification service provider X executes the identity verification process for the user Ua. The identity verification processing device 30X converts the encrypted information ([Encrypted PII]) obtained as a result of the identity verification process into X ]), and user identification information uniquely assigned to user Ua ([PII-ID X ]) to the blockchain system 2.

[0130] When the blockchain system 2 receives an identity verification registration request from the identity verification processing device 30X, the blockchain system 2 transmits a unique business ID (eKYC business ID x ]) is issued and assigned to the blockchain system 2. The blockchain system 2 stores, for example, user identification information ([PII-ID X ]) and Encrypted PII ([Encrypted PII X ]) and business ID ([eKYC business ID x ]) are linked and managed with each other.

[0131] When a user Ua of a user terminal 10a uses a service provided by a payment service provider A, the user Ua uses user identification information ([PII-ID X ]) to send a service request to payment service provider A. Payment service provider A uses the user identification information ([PII-ID X ]) from the blockchain system 2, X ]) and business ID ([eKYC business ID x ]) to validate the service request.

[0132] In a service that requires identity verification by multi-factor authentication (a service with "medium authentication level"), it is assumed that some information from among knowledge information, possession information, and biometric information is combined and used in identity verification processing. For example, examples of knowledge information include a password, PIN code, and secret questions, possession information includes a mobile phone (phone number and email address), hardware token, and IC card, and biometric information includes a fingerprint, vein, and voiceprint. In addition, examples of identity verification methods include a method in which after logging in using knowledge information, an email with an authentication code is sent to a registered email address, and receipt of the email is confirmed by presenting the authentication code. Logging in to a service can be performed using any identity verification algorithm set by the user. Examples of identity verification algorithms include matching a name and a password, matching a name and multiple secret passwords, matching a name and the position of a face image, matching a name and a fingerprint, and the like. Examples of login methods that can be adopted include matching a name and a password, matching a name and multiple secret passwords, matching a name and a face image, matching a name and a fingerprint, and the like. In addition to the above, examples of data that can be used as an identity verification algorithm include other information such as secret information such as a card number, a combination of publicly known information, sensing data, My Number, credit card information, etc. Examples of combinations of publicly known information include names of family members, home addresses and telephone numbers, parents' addresses and telephone numbers, parents' maiden names, etc. Examples of sensing data include the above-mentioned fingerprints, as well as position information of a specific location such as a home, and biometric information such as irises, faces, and gait.

[0133] The identity verification algorithm may employ a conditional expression such as exact match, fuzzy match, size comparison, or inclusion relationship as appropriate depending on the data exchanged in the identity verification algorithm. In the case of an identity verification algorithm in which a password, secret password, or biometric information is exchanged, an exact match may be employed as the conditional expression. In the case of an identity verification algorithm in which biometric information or secret password is exchanged, a fuzzy match may be employed as the conditional expression. In the case of an identity verification algorithm in which location information is exchanged, for example, an inclusion relationship, such as whether the location information is included in a specific area, may be employed as the conditional expression. The combination of data exchanged in the identity verification algorithm and conditional expressions may be an AND condition or an OR condition.

[0134] A service provider offering a service requiring identity verification through multi-factor authentication (a service with "authentication level: medium") is expected to request identity verification of the service user by identity verification service provider Y. For example, when a payment service provider B provides a service requiring identity verification through multi-factor authentication (a service with "authentication level: medium"), it is expected to request identity verification of user Ua by identity verification service provider Y.

[0135] Therefore, the user Ua of the user terminal 10a requests the identity verification process from the identity verification service provider Y. The identity verification processing device 30Y operated by the identity verification service provider Y executes the identity verification process for the user Ua. The identity verification processing device 30Y converts the encrypted information ([Encrypted PII]) obtained as a result of the identity verification process into Y ]), and user identification information uniquely assigned to user Ua ([PII-ID Y ]) to the blockchain system 2.

[0136] When the blockchain system 2 receives an identity verification registration request from the identity verification processing device 30Y, the blockchain system 2 transmits a unique business ID (eKYC business ID YThe blockchain system 2 issues and assigns user identification information ([PII-ID Y ]) and Encrypted PII ([Encrypted PII Y ]) and business ID ([eKYC business ID Y ]) are linked and managed with each other.

[0137] When a user Ua of the user terminal 10a uses a service provided by the payment service provider B, the user Ua uses the user identification information ([PII-ID Y ]) to send a service request to payment service provider A. Payment service provider A uses the user identification information ([PII-ID Y ]) from the blockchain system 2, Y ]) and business ID ([eKYC business ID Y ]) to validate the service request.

[0138] In services that require identity verification as stipulated by law (services with "authentication level: high"), it is expected that identity verification documents with a face photo will be combined with identity verification documents without a face photo, such as a health insurance card or a copy of a resident's card, and used in the identity verification process. Examples of identity verification documents with a face photo include a My Number card, driver's license, and passport. Examples of identity verification documents without a face photo include a health insurance card or a copy of a resident's card. In addition, methods of identity verification that are expected to be used include uploading a video of the identity verification document and the person in the identity verification document, or sending a copy of the identity verification document by mail.

[0139] A service provider offering a service requiring identity verification as stipulated by law (a service with an "authentication level: high") is expected to require the service user to have the identity verified by an identity verification service provider Z. For example, when a payment service provider C provides a service requiring identity verification as stipulated by law (a service with an "authentication level: high"), it is expected to require the user Ua to have the identity verified by an identity verification service provider Z.

[0140] Therefore, the user Ua of the user terminal 10a requests the identity verification process from the identity verification service provider Z. The identity verification processing device 30Z operated by the identity verification service provider Z executes the identity verification process for the user Ua. The identity verification processing device 30Z converts the encrypted information ([Encrypted PII Z ]), and user identification information uniquely assigned to user Ua ([PII-ID Z ]) to the blockchain system 2.

[0141] When the blockchain system 2 receives an identity verification registration request from the identity verification processing device 30Z, the blockchain system 2 transmits a unique business ID (eKYC business ID Z The blockchain system 2 issues and assigns user identification information ([PII-ID Z ]) and Encrypted PII ([Encrypted PII Z ]) and business ID ([eKYC business ID Z ]) are linked and managed with each other.

[0142] When a user Ua of the user terminal 10a uses a service provided by the payment service provider C, the user Ua uses the user identification information ([PII-ID Z ]) to send a service request to the payment service provider C. The payment service provider C uses the user identification information ([PII-ID Z]) from the blockchain system 2, Z ]) and business ID ([eKYC business ID Z ]) to validate the service request.

[0143] In this way, by performing identity verification processing with different identity verification providers, the user Ua, who is a service user, can simplify identity verification when using a service even if the identity verification required by the service is different. Meanwhile, each of the payment service providers A to C, who are service providers, can obtain and confirm from the blockchain system 2 whether the identity verification required by each of them has been performed, thereby simplifying identity verification while protecting the privacy of the service users.

[0144] In the example shown in Figure 12, user Ua may obtain information on the identity verification service providers designated by payment service providers A to C from each provider in advance before requesting a service, or may obtain the information from each provider at the time of requesting a service.

[0145] <4-4. Verification of business operators> As shown in FIG. 12 above, in the blockchain system 2, multiple pieces of encrypted information associated with the same user are managed by being associated with unique user identification information and the business ID that performed the identity verification process. For this reason, in the blockchain system 2, it is necessary to prevent the business ID from being forged. An example of a method for verifying a business ID will be described below. FIG. 13 is a flowchart showing an example of the procedure of the business verification process according to the modified example.

[0146] As shown in Fig. 13, when the blockchain system 2 receives an identity verification registration request from the identity verification processing device 30, it verifies the signature added to the identity verification registration request (step S81). The signature is generated, for example, by the identity verification processing device 30 using a signature key that it possesses. The signature corresponds to, for example, a private key included in the signature key. The blockchain system 2 obtains the public key for signature verification of the identity verification processing device 30 from a trusted database and attempts to decrypt the signature.

[0147] If the signature verification is successful (step S81; Yes), the blockchain system 2 determines whether the signer matches the business ID ([eKYC business ID]) associated with the public key for signature verification in the trusted database (step S82). That is, it determines whether the combination of the signer of the identity verification registration request and the business is correct.

[0148] If the blockchain system 2 determines that the business IDs match (step S82; Yes), it executes registration of encrypted information in response to the identity verification registration request (step S83) and ends the processing shown in FIG.

[0149] On the other hand, if the blockchain system 2 determines that the business IDs do not match (step S82; No), it rejects the identity verification registration request (step S84) and ends the processing shown in FIG.

[0150] In addition, in the above step S81, if the signature verification fails (step S81; No), the block chain system 2 proceeds to the processing procedure of the above step S84. That is, the block chain system 2 rejects the identity verification registration request (step S84) and ends the processing shown in FIG.

[0151] In the process shown in Fig. 13, an X.509 certificate may be used as the signature attached to the identity verification registration request. Then, by determining whether the business ID matches the owner ([Subject]) of the X.509 certificate, it may be determined whether the combination of the signer of the identity verification registration request and the business is correct.

[0152] <<5.Other>> The processing in the information processing system 1 according to the embodiment described above can be used for various services that require identity verification. For example, it can be used for identity verification at the time of admission to a concert or event, identity verification for various contracts, identity verification for various services such as student discounts, etc. In addition, by linking it with the processing of various game applications, it can be used for processing related to the progress of the game, for example, as a condition for generating a user secret key that is generated only when identity verification is successful as a key for obtaining secret information that causes an event to occur or for reaching a secret place.

[0153] Furthermore, among the processes described in the above embodiments, all or part of the processes described as being performed automatically can be performed manually, or all or part of the processes described as being performed manually can be performed automatically by a known method. In addition, the information including the processing procedures, specific names, various data and parameters shown in the above documents and drawings can be changed arbitrarily unless otherwise specified. For example, the various information shown in each drawing is not limited to the illustrated information.

[0154] Furthermore, each component of each device shown in the figure is a functional concept, and does not necessarily have to be physically configured as shown in the figure. In other words, the specific form of distribution and integration of each device is not limited to that shown in the figure, and all or part of them can be functionally or physically distributed and integrated in any unit depending on various loads, usage conditions, etc. For example, the identity verification processing device 30 shown in FIG. 1 and the payment processing device 100 may be integrated. In other words, identity verification processing and payment processing may be realized by one information processing device.

[0155] Furthermore, the above-described embodiments and modifications can be appropriately combined as long as the processing contents are not contradictory.

[0156] Furthermore, the effects described in this specification are merely examples and are not limiting, and other effects may also be present.

[0157] <<6. Effects>> As described above, the payment processing device 100 according to the present disclosure is an information processing device that provides a service that requires identity verification processing for use, and includes an acquisition unit 131, a verification unit 132, and a provision unit 133. The acquisition unit 131 acquires, from a user who is a requester of the service, proof information for proving by zero-knowledge proof that the user is a verified user who has completed identity verification processing, and the proof information is generated using secret information that only the verified user can know. The secret information is, for example, a secret value (for example, a random number) associated with the user of the user terminal 10 that is the requester of the identity verification processing. The verification unit 132 executes a verification process of the proof information acquired by the acquisition unit 131, using the encrypted information that is encrypted using the secret information and managed in the blockchain system 2. The encrypted information is the identity verification information used in the identity verification processing of the verified user encrypted by a random number. The provision unit 133 executes a process for providing the service to the user who is a requester of the service, on the condition that the user is verified to be a verified user as a result of the verification process by the verification unit 132. As described above, according to the embodiment of the present disclosure, the encrypted information obtained by encrypting the personal identification information is managed as public information in the block chain system 2, and can be shared among service providers of services that require personal identification when used. This can simplify the procedures for personal identification when using services that require personal identification when used. Furthermore, according to the embodiment of the present disclosure, the encrypted information obtained by encrypting the personal identification information, rather than the personal identification information itself, is managed as public information in the block chain system 2. This can protect the privacy of service users of services that require personal identification when used.

[0158] In the present disclosure, the secret information is a secret value (for example, a random number) associated with the user of the user terminal 10 that is the requester of the identity verification process. This makes it possible to set up information for proving that identity verification has been completed by zero-knowledge proof.

[0159] Furthermore, in the blockchain system 2 of the present disclosure, encrypted information is managed in association with user identification information uniquely assigned to each user whose identity has been verified. The acquisition unit 131 acquires the user identification information together with the certification information, and the verification unit acquires the encrypted information from the blockchain system 2 using the user identification information acquired by the acquisition unit 131. This allows information for proving that identity verification has been completed by zero-knowledge proof to be managed for each user, and makes it possible to easily acquire information corresponding to the user who has made a service request.

[0160] Also, in the present disclosure, the acquisition unit 131 acquires a user registration request for requesting user registration for a service from the user terminal 10 used by the identified user. The provision unit 133 executes the user registration process of the identified user using the session information returned to the identified user, on condition that the verification process by the verification unit 132 proves that the identity verification process has been completed. This can simplify the user registration of the identified user.

[0161] Also, in the present disclosure, the acquisition unit 131 acquires an anonymous user registration request requesting anonymous user registration to a service from the user terminal 10 used by the identified user. The provision unit 133 executes anonymous user registration processing of the identified user using anonymous session information returned to the identified user, on condition that the verification processing by the verification unit 132 proves that the identity verification processing has been completed. This can simplify anonymous user registration for the identified user.

[0162] In addition, in the present disclosure, the acquisition unit 131 acquires a remittance request in a cashless service provided as a service from the user terminal 10 used by a user whose identity has been verified. The provision unit 133 executes a remittance process corresponding to the remittance request on the condition that the verification process by the verification unit 132 proves that the identity verification process has been completed. This can simplify remittances for users whose identity has been verified.

[0163] Furthermore, in the blockchain system 2 of the present disclosure, the credit score calculated in the identity verification process is managed in association with the user identification information. The acquisition unit 131 acquires a loan screening request for receiving a loan service provided as a service from the user terminal 10 used by the identity-verified user. The provision unit 133 executes the loan screening process in response to the loan screening request using the credit score associated with the user identification information, on condition that the result of the verification process by the verification unit 132 proves that the identity verification process has been completed. This can simplify the loan screening for the identity-verified user.

[0164] In addition, in the present disclosure, encrypted information is generated by each business that performs identity verification processing using a different method. In addition, in the blockchain system 2, encrypted information linked to the same identified user is managed by linking it to user identification information uniquely assigned to the identified user by each business and business identification information unique to the business. This allows the results of identity verification by multiple businesses for the same user to be managed, and the payment processing device 100 can use the results of identity verification by the business it desires to perform verification of the user who has made a service request.

[0165] In addition, in the present disclosure, the identity verification process performed by each business is performed by a different method corresponding to the authentication level required by the service. This allows the payment processing device 100 to perform verification of the user who has requested the service using the result of identity verification by the business corresponding to the authentication level required by the payment processing device 100.

[0166] Furthermore, in the present disclosure, when encrypted information is registered by each business in the blockchain system 2, the request for such registration is verified by signature information between each business and the blockchain system 2. This makes it possible to prevent tampering with business identification information and impersonation of a business.

[0167] The effects described above are not necessarily limited to those described above, and may be at least one of the effects described in this disclosure, or may have other effects.

[0168] <<7. Hardware Configuration>> The payment processing device 100 according to each of the above-described embodiments is realized by a computer 1000 having a configuration as shown in Fig. 14, for example. Fig. 14 is a hardware configuration diagram showing an example of a computer that realizes the functions of the payment processing device. The computer 1000 has a CPU 1100, a RAM 1200, a ROM (Read Only Memory) 1300, a HDD (Hard Disk Drive) 1400, a communication interface 1500, and an input / output interface 1600. The various components of the computer 1000 are connected by a bus 1050.

[0169] The CPU 1100 operates and controls each unit based on programs stored in the ROM 1300 or the HDD 1400. For example, the CPU 1100 loads the programs stored in the ROM 1300 or the HDD 1400 into the RAM 1200 and executes processes corresponding to the various programs.

[0170] The ROM 1300 stores boot programs such as a basic input output system (BIOS) executed by the CPU 1100 when the computer 1000 is started, and programs that depend on the hardware of the computer 1000.

[0171] The HDD 1400 is a recording medium that non-temporarily records programs executed by the CPU 1100 and data used by the programs, and is readable by the computer 1000. Specifically, the HDD 1400 is a recording medium that records a program for implementing the antenna switching process shown in FIG.

[0172] The communication interface 1500 is an interface for connecting the computer 1000 to an external network 1550 (e.g., the Internet). For example, the CPU 1100 receives data from other devices and transmits data generated by the CPU 1100 to other devices via the communication interface 1500.

[0173] The input / output interface 1600 is an interface for connecting the input / output device 1650 and the computer 1000. For example, the CPU 1100 receives data from an input device such as a keyboard or a mouse via the input / output interface 1600. The CPU 1100 also transmits data to an output device such as a display, a speaker, or a printer via the input / output interface 1600. The input / output interface 1600 may also function as a media interface for reading a program or the like recorded on a predetermined recording medium. The medium may be, for example, an optical recording medium such as a DVD (Digital Versatile Disc) or a PD (Phase change rewritable Disk), a magneto-optical recording medium such as an MO (Magneto-Optical disk), a tape medium, a magnetic recording medium, or a semiconductor memory.

[0174] For example, when computer 1000 functions as payment processing device 100 according to an embodiment, CPU 1100 of computer 1000 executes a program (such as a program for implementing "ZKP-Verify" processing) loaded onto RAM 1200. This realizes functions such as various processes executed by control unit 130 of payment processing device 100. HDD 1400 also stores programs for implementing the processing of payment processing device 100 according to the present disclosure, data to be stored in memory unit 111, and the like. CPU 1100 reads and executes program data 1450 from HDD 1400, but as another example, may obtain these programs from other devices via external network 1550.

[0175] The present technology can also be configured as follows. (1) An information processing device that provides a service that requires identity verification processing, an acquisition unit that acquires, from a user terminal used by a user who is a requester of a service, proof information for proving by zero-knowledge proof that the user is a verified user who has completed the identity verification process, the proof information being generated using secret information that only the verified user can know; a verification unit that executes a verification process of the certification information acquired by the acquisition unit, using encrypted information of the identity verification information used in the identity verification process of the identified user, the identity of which is verified by using the encrypted information and managed in a block chain system; a providing unit that executes a process for providing a service to a user who has requested the service, on condition that the user is certified as having been identified as a result of the verification process by the verifying unit; An information processing device comprising: (2) The confidential information is A secret value associated with the user of the user terminal that is the requester of the identity verification process The information processing device according to (1). (3) In the blockchain system, The encrypted information is managed in association with user identification information that is uniquely assigned to each of the authenticated users; The acquisition unit is Obtaining the user identification information together with the authentication information; The verification unit is The encrypted information is acquired from the block chain system using the user identification information acquired by the acquisition unit. The information processing device according to (2). (4) The acquisition unit is acquiring a user registration request for user registration to the service from a user terminal used by the user whose identity has been verified; The providing unit is On condition that the verification process by the verification unit proves that the identity verification process has been completed, the verification unit executes a user registration process corresponding to the user registration request using session information returned to the user whose identity has been verified. The information processing device according to (3). (5) The acquisition unit is acquiring an anonymous user registration request from a user terminal used by the authenticated user, the anonymous user registration request requesting anonymous user registration to the service; The providing unit is On condition that the verification process by the verification unit proves that the identity verification process has been completed, anonymous session information is returned to the user whose identity has been verified, and an anonymous user registration process corresponding to the anonymous user registration request is executed. The information processing device according to (3). (6) The acquisition unit is Obtaining a remittance request for the cashless service provided as the service from a user terminal used by the user whose identity has been verified; The providing unit is On condition that the verification process by the verification unit proves that the identity verification process has been completed, the remittance process corresponding to the remittance request is executed. The information processing device according to (3). (7) In the blockchain system, The credit score calculated in the identity verification process is managed in association with the user identification information; The acquisition unit is A loan examination request for receiving the loan service provided as the service is acquired from a user terminal used by the user who has been identified; The providing unit is On condition that it is proven that the identity verification process has been completed as a result of the verification process of the certification information in the verification unit, an examination process corresponding to the loan examination request is executed using the credit score linked to the user identification information. The information processing device according to (3). (8) The encrypted information is The IDs are generated by businesses that perform the identity verification process in different ways, In the blockchain system, The encrypted information associated with the same authenticated user is managed in association with the user identification information uniquely assigned to the authenticated user by each of the businesses and with business identification information unique to the business. The information processing device according to (3). (9) The identity verification process carried out by each of the businesses is as follows: This is done in different ways depending on the level of authentication required by the service. The information processing device according to (8). (10) When the encrypted information is registered in the blockchain system by each of the businesses, the request for registration is verified by signature information between each of the businesses and the blockchain system. The information processing device according to (9). (11) An information processing device that provides a service that requires identity verification processing using identity verification information, obtaining, from a user terminal used by a user who is a requester of a service, proof information for proving by zero-knowledge proof that the user is a verified user who has completed the identity verification process, the proof information being generated using secret information that only the verified user can know; A verification process of the certification information is performed using encrypted information of the identity verification information used in the identity verification process of the identified user, the encrypted information being encrypted using the secret information and managed in a block chain system; On condition that the result of the verification process proves that the user is an identified user, a process is executed to provide the service to the user who has requested the service. Information processing methods. [Explanation of symbols]

[0176] 1. Information Processing Systems 2. Blockchain System 3. Communication Network 10 User terminal 11 Communications Department 12 Input section 13 Output section 14 Imaging unit 15 Positioning unit 16 Detection section 17 Memory section 17a Personal information storage section 17b Secret information storage section 18 Control Unit 18a Identity Verification Request Department 18b Service Request Section 20 nodes 30 Personal identification processing device 31 Communications Department 32 Storage section 33 Control Unit 33a Identity verification processing section 33b Registration processing section 100 Payment processing device 110 Communications Department 120 Storage section 130 Control section 131 Acquisition Department 132 Verification Department 133 Provision Department

Claims

1. An information processing device that provides a service that requires identity verification processing, an acquisition unit that acquires, from a user terminal used by a user who is a requester of a service, proof information for proving by zero-knowledge proof that the user is a verified user who has completed the identity verification process, the proof information being generated using secret information that only the verified user can know; a verification unit that executes a verification process of the certification information acquired by the acquisition unit, using encrypted information of the identity verification information used in the identity verification process of the identified user, the identity of which is encrypted using the secret information and managed in a block chain system; a providing unit that executes a process for providing a service to a user who has requested the service, on condition that the user is identified as the identified user as a result of the verification process by the verifying unit; An information processing device comprising:

2. The confidential information is A secret value associated with the user of the user terminal that is the requester of the identity verification process The information processing device according to claim 1 .

3. In the blockchain system, The encrypted information is managed in association with user identification information that is uniquely assigned to each of the authenticated users; The acquisition unit is Obtaining the user identification information together with the authentication information; The verification unit is The encrypted information is acquired from the block chain system using the user identification information acquired by the acquisition unit. The information processing device according to claim 2 .

4. The acquisition unit is acquiring a user registration request for user registration to the service from a user terminal used by the user whose identity has been verified; The providing unit is On condition that the verification process by the verification unit proves that the identity verification process has been completed, the verification unit executes a user registration process corresponding to the user registration request using session information returned to the user whose identity has been verified. The information processing device according to claim 3 .

5. The acquisition unit is acquiring an anonymous user registration request from a user terminal used by the authenticated user, the anonymous user registration request requesting anonymous user registration to the service; The providing unit is On condition that the verification process by the verification unit proves that the identity verification process has been completed, anonymous session information is returned to the user whose identity has been verified, and an anonymous user registration process corresponding to the anonymous user registration request is executed. The information processing device according to claim 3 .

6. The acquisition unit is Obtaining a remittance request for the cashless service provided as the service from a user terminal used by the user whose identity has been verified; The providing unit is On condition that the verification process by the verification unit proves that the identity verification process has been completed, the remittance process corresponding to the remittance request is executed. The information processing device according to claim 3 .

7. In the blockchain system, The credit score calculated in the identity verification process is managed in association with the user identification information; The acquisition unit is A loan examination request for receiving the loan service provided as the service is acquired from a user terminal used by the user who has been identified; The providing unit is On condition that it is proven that the identity verification process has been completed as a result of the verification process of the certification information in the verification unit, an examination process corresponding to the loan examination request is executed using the credit score linked to the user identification information. The information processing device according to claim 3 .

8. The encrypted information is The IDs are generated by businesses that perform the identity verification process in different ways, In the blockchain system, The encrypted information associated with the same authenticated user is managed in association with the user identification information uniquely assigned to the authenticated user by each of the businesses and with business identification information unique to the business. The information processing device according to claim 3 .

9. The identity verification process carried out by each of the businesses is as follows: This is done in different ways depending on the level of authentication required by the service. The information processing device according to claim 8.

10. When the encrypted information is registered in the blockchain system by each of the businesses, the request for registration is verified by signature information between each of the businesses and the blockchain system. The information processing device according to claim 9.

11. An information processing device that provides a service that requires identity verification processing using identity verification information, obtaining, from a user terminal used by a user who is a requester of a service, proof information for proving by zero-knowledge proof that the user is a verified user who has completed the identity verification process, the proof information being generated using secret information that only the verified user can know; A verification process of the certification information is performed using encrypted information of the identity verification information used in the identity verification process of the identified user, the encrypted information being encrypted using the secret information and managed in a block chain system; On condition that the result of the verification process proves that the user is an identified user, a process is executed to provide the service to the user who has requested the service. Information processing methods.

Images