Voting processing apparatus, voting processing program, and voting processing system

Abstract

To allow reduction of risk of failure when purchasing a voting ticket by reducing an operation burden on a member.SOLUTION: A control unit 3 notifies an authentication processing apparatus 4 of identification information "001" and "010" among identification information "001", "011", "010" and "100" acquired at a first timing and identification information "001", "010" and "100" acquired at a second timing. The control unit 3 notifies the authentication processing apparatus 4 of a password "PW001" input by a member to be an operation target. A control unit 5 receives one or more pieces of member information detected by a voting processing apparatus 2 and notification (authentication request) of the password input by the member to be the operation target from the voting processing apparatus 2 for authentication. The control unit 5 responds with member information matched with the password input by the member to be the operation target among the one or more pieces of member information notified from the voting processing apparatus 2.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a voting processing device, a voting processing program, and a voting processing system. [Background technology]

[0002] To enable cashless betting in publicly managed races, there are betting terminal devices that identify members by membership cards with built-in IC chips. Membership cards with built-in IC chips require the card to be held up to a reader to read data from the IC chip, and this cumbersome operation can lead to the risk of missing out on a ticket just before the sales deadline. In addition, because membership cards with built-in IC chips are expensive, there is a demand for further cost reduction.

[0003] Therefore, there is a proposal to use RFID (Radio Frequency Identifier) ​​instead of membership cards with built-in IC chips. Because RFID can identify many members at once, the voting terminal device narrows down the members who will vote from the many members it identifies by biometric authentication. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2022-119583 A Summary of the Invention [Problem to be solved by the invention]

[0005] However, biometric authentication involves a trade-off between processing speed and accuracy, and the time required for authentication processing can pose a risk of missing out on purchasing a ballot ticket just before the sales deadline. One aspect is to reduce the operational burden on members and reduce the risk of missing out on purchasing voting tickets. [Means for solving the problem]

[0006] In order to achieve the above object, a voting processing device as described below is provided. The voting processing device acquires identification information and a communication distance between the device and a device held by one or more users located in the vicinity, and is capable of narrowing down target users based on the magnitude of the communication distance for each identification information, is capable of narrowing down target users based on identification information acquired at a first timing and identification information acquired at a second timing different from the first timing, is capable of narrowing down target users based on identification information corresponding to first authentication information input by the target users, and has a control unit that enables a voting process by the target users to be executed when the target users have been narrowed down to one.

[0007] In order to achieve the above object, a voting processing system is provided as described below. The voting processing system includes a voting processing device and an authentication processing device. The voting processing device acquires identification information and a communication distance between the device and a device held by one or more users located in the vicinity, and is capable of narrowing down target users based on the magnitude of the communication distance for each identification information, and is capable of narrowing down target users based on the identification information acquired at a first timing and the identification information acquired at a second timing different from the first timing, and has a control unit that notifies the authentication processing device of first authentication information input by the target users and identification information corresponding to the narrowed down target users, and enables the target users to execute voting processing when the target users are narrowed down to one based on the response result from the authentication processing device. The authentication processing device has a control unit that receives notification of one or more identification information and the first authentication information from the voting processing device and responds with one identification information that matches the first authentication information. Effect of the Invention

[0008] According to one embodiment, the operational burden on members can be reduced, thereby reducing the risk of missing out on purchasing a voting ticket. [Brief description of the drawings]

[0009] [Figure 1]FIG. 1 illustrates an example of a vote processing system according to a first embodiment. [Diagram 2] FIG. 11 is a diagram illustrating an example of a voting processing system according to a second embodiment. [Diagram 3] A figure showing an example of the hardware configuration of a control unit of a voting terminal of the second embodiment. [Figure 4] FIG. 11 is a diagram illustrating an example of a functional block of a voting terminal of the second embodiment. [Diagram 5] FIG. 11 illustrates an example of a functional block of an authentication server according to a second embodiment; [Figure 6] FIG. 11 illustrates an example of a flowchart of an operation reception waiting process according to the second embodiment. [Figure 7] FIG. 11 illustrates an example of a flowchart of an operation reception process according to the second embodiment. [Figure 8] FIG. 11 is a diagram illustrating an example of a first authentication sequence according to the second embodiment. [Figure 9] FIG. 11 is a diagram illustrating an example of a second authentication sequence according to the second embodiment. [Figure 10] FIG. 11 is a diagram illustrating an example of an RFID read image according to the second embodiment. [Figure 11] FIG. 11 is a diagram showing an example of voting terminal acquisition information in the second embodiment. [Figure 12] FIG. 11 is a diagram illustrating an example of a member authentication table according to the second embodiment; [Figure 13] FIG. 11 is a diagram illustrating an example of a matching target determination according to the second embodiment. [Figure 14] 13A to 13C are diagrams illustrating examples of matching (parts 1 to 3) according to the second embodiment. [Figure 15] 13A to 13C are diagrams illustrating examples of matching (Nos. 4 to 6) according to the second embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] Hereinafter, the present embodiment will be described with reference to the drawings. Note that each embodiment can be implemented in combination with a plurality of other embodiments within a range that does not cause inconsistency. [First embodiment] First, the first embodiment will be described with reference to Fig. 1. Fig. 1 is a diagram showing an example of a voting processing system according to the first embodiment. The voting processing system 1 is a system that provides services such as voting and refunds to members at a public racetrack.

[0011] The voting processing system 1 includes a voting processing device 2 and an authentication processing device 4. For example, the voting processing system 1 is installed in public racetracks such as horse racing tracks, boat racing tracks, bicycle racing tracks, and auto racing tracks, and related facilities. For example, multiple voting processing devices 2 are installed at on-site polling stations within the public racetrack and off-site polling stations outside the public racetrack. One or multiple authentication processing devices 4 are installed within the public racetrack or in a managed area outside the public racetrack. The voting processing device 2 and authentication processing device 4 are connected so that they can communicate with each other.

[0012] The voting processing device 2 performs voting and refunds as a service for members. The voting processing device 2 is cashless compatible, and allows voting tickets to be purchased without handling cash, and can debit the purchase price and transfer refunds from the member's account. The voting processing device 2 may also be capable of handling cash, or may be dedicated to handling cash.

[0013] The voting processing device 2 includes a control unit 3. The control unit 3 is capable of acquiring, via a scanner, member information (identification information) set in an RFID tag (device) held by a member (user) located around the voting processing device 2 (reading range 9), and also capable of acquiring the communication distance between the scanner and the RFID tag (the communication distance between the voting processing device 2 and the RFID tag).

[0014] For example, the RFID tag is hung from the member's neck by a neck strap, and the voting processing device 2 is capable of suitably acquiring member information from the RFID tag hanging from the neck.

[0015] The control unit 3 can narrow down members (target users) who are the targets of operations for voting or refunding based on the size of the communication distance for each member information. For example, when users A, B, C, and D (first timing) around the voting processing device 2 are within the reading range 9, the control unit 3 can narrow down to users A, B, and C, excluding user D who is within the communication distance "5", by setting the communication distance within the threshold value of "3". Specifically, the control unit 3 acquires acquisition information at the first timing from four RFID tags within the reading range 9. The acquisition information at the first timing includes identification information "001" with a communication distance of "1", identification information "011" with a communication distance of "2", identification information "010" with a communication distance of "3", and identification information "100" with a communication distance of "5", but the identification information to be operated is narrowed down to identification information "001", "011", and "010" whose communication distance is within the threshold value. This allows the control unit 3 to exclude the identification information detected from members who are in the vicinity of the voting processing device 2 but cannot be the target of operation.

[0016] The control unit 3 can narrow down target users from the member information acquired at the first timing and the member information acquired at the second timing different from the first timing. For example, the control unit 3 can narrow down to users A, B, and D who overlap with users A, B, and D (first timing) and users A, B, and D (second timing) around the voting processing device 2. This allows the control unit 3 to eliminate identification information temporarily detected from members who have passed around the voting processing device 2.

[0017] The control unit 3 notifies the authentication processing device 4 of the password (first authentication information) input by the member (target user) to be operated and the narrowed down member information. For example, the control unit 3 notifies the authentication processing device 4 of the identification information "001", "011", "010", "100" acquired at the first timing and the identification information "001", "010", "100" acquired at the second timing, of the identification information "001", "010", "100". The control unit 3 also notifies the authentication processing device 4 of the password "PW001" input by the member to be operated. This allows the control unit 3 to obtain the password without requesting the member to be operated to input the member information. Such a voting processing device 2 can simplify the member operation because it does not require the member card to be held up to a card reader. In addition, generally, the medium cost of an RFID tag is one order of magnitude lower than that of an IC card, so that the cost can be reduced more than that of an operation using an IC card.

[0018] The control unit 3 enables the target user to execute a voting process when the target users are narrowed down to 1 based on the response result from the authentication processing device 4. For example, the control unit 3 obtains the authenticated identification information "001" as the response result from the authentication processing device 4, and guides the member to be operated on as the member corresponding to the identification information "001" to execute the voting process.

[0019] The authentication processing device 4 registers and authenticates members. The authentication processing device 4 includes a control unit 5. The control unit 5 performs authentication upon receiving notification (authentication request) from the voting processing device 2 of one or more pieces of member information detected by the voting processing device 2 and a password entered by the member to be operated. The control unit 5 responds with member information that matches the password entered by the member to be operated from among the one or more pieces of member information notified from the voting processing device 2.

[0020] As a result, the voting processing device 2, or the voting processing system 1 including the voting processing device 2, reduces the operational burden on the member and makes it possible to reduce the risk of missing out on purchasing a voting ticket. Also, the voting processing device 2, or the voting processing system 1 including the voting processing device 2, makes it possible to execute authentication processing that prioritizes processing speed by using authentication information (a password entered by the target member) that is not based on the member's biometric information, making it possible to reduce the risk of missing out on purchasing a voting ticket.

[0021] Second Embodiment Next, a second embodiment will be described. The second embodiment relates to a vote processing system. First, the system configuration of the vote processing system will be described with reference to Fig. 2. Fig. 2 is a diagram showing an example of the vote processing system of the second embodiment.

[0022] The voting processing system 50 comprises voting terminals 100 (100a, 100b, ..., 100c) and an authentication server 200. The voting terminals 100 and the authentication server 200 are connected via a network 30. The voting processing system 50 corresponds to the voting processing system 1 shown in the first embodiment, the voting terminals 100 correspond to the voting processing device 2 shown in the first embodiment, and the authentication server 200 corresponds to the authentication processing device 4 shown in the first embodiment. Multiple voting terminals 100 (100a, 100b, ..., 100c) are provided at on-site polling stations within the public racecourse and at off-site polling stations outside the public racecourse.

[0023] Next, the hardware configuration of the control unit of the voting terminal 100 will be described with reference to FIG. 3. FIG. 3 is a diagram showing an example of the hardware configuration of the control unit of the voting terminal of the second embodiment. The voting terminal 100 is entirely controlled by a processor 101. A memory 102 and a plurality of peripheral devices are connected to the processor 101 via a bus 106. The processor 101 may be a multiprocessor. The processor 101 is, for example, a CPU (Central Processing Unit), an MPU (Micro Processing Unit), or a DSP (Digital Signal Processor). At least a part of the functions realized by the processor 101 executing a program may be realized by an electronic circuit such as an ASIC (Application Specific Integrated Circuit) or a PLD (Programmable Logic Device).

[0024] The memory 102 is used as a main storage device of the voting terminal 100. The memory 102 temporarily stores at least a part of the OS (Operating System) program and application programs to be executed by the processor 101. The memory 102 also stores various data used in the processing by the processor 101. As the memory 102, for example, a volatile semiconductor storage device such as a RAM (Random Access Memory) is used.

[0025] The peripheral devices connected to the bus 106 include a network interface 103 , a graphics interface 104 , and an input / output interface 105 . The network interface 103 is connected to the network 30. The network interface 103 transmits and receives data via the network 30 to and from other computers or communication devices.

[0026] A monitor is connected to the graphic interface 104. The graphic interface 104 displays an image on the screen of the monitor in accordance with an instruction from the processor 101. The monitor may be a display device using an organic EL (Electro Luminescence) display device, a liquid crystal display device, or the like.

[0027] Required input devices and output devices are connected to the input / output interface 105. The input / output interface 105 also transmits signals sent from the input devices to the processor 101. The input / output interface 105 also transmits signals sent from the processor 101 to the output devices.

[0028] The voting terminal 100 can realize the processing functions of the second embodiment with the above hardware configuration. The voting processing device 2 and the authentication processing device 4 shown in the first embodiment, and the authentication server 200 shown in the second embodiment can also be realized with the same hardware as the voting terminal 100 shown in FIG.

[0029] The voting terminal 100 realizes the processing function of the second embodiment by, for example, executing a program recorded in a computer-readable recording medium. The program describing the processing contents to be executed by the voting terminal 100 can be recorded in various recording media. For example, the program to be executed by the voting terminal 100 can be stored in a storage device (not shown). The processor 101 loads at least a part of the program in the storage device into the memory 102 and executes the program. The program to be executed by the voting terminal 100 can also be recorded in a portable recording medium (not shown), such as an optical disk, memory device, or memory card. The program stored in the portable recording medium becomes executable after being installed in the storage device, for example, under the control of the processor 101. The processor 101 can also read and execute the program directly from the portable recording medium.

[0030] Next, the functional blocks of the voting terminal 100 will be explained with reference to Fig. 4. Fig. 4 is a diagram showing an example of the functional blocks of a voting terminal of the second embodiment. The voting terminal 100 comprises a control unit 110, a memory unit 111, a display processing unit 112, an operation input unit 113, a communication interface unit 114, an authentication processing unit 120, a voting processing unit 130, and a deposit / withdrawal processing unit 140. The control unit 110 realizes the functions of the control unit 3 shown in the first embodiment.

[0031] The control unit 110 comprehensively controls the memory unit 111 , the display processing unit 112 , the operation input unit 113 , the communication interface unit 114 , the authentication processing unit 120 , the voting processing unit 130 , and the deposit / withdrawal processing unit 140 .

[0032] The authentication processing unit 120 includes an RFID scanner (RFID reader) 121. The RFID scanner 121 scans RF (Radio Frequency) tags located around the voting terminal 10 for member identification information (identification ID, member information) embedded in the RF tags. The RFID scanner 121 uses, for example, any of USB (Universal Serial Bus) / LAN (Local Area Network) / RS-232C as an interface, and can use a 24V power source. The RFID scanner 121 is mounted in a position that is unlikely to be affected by the metal housing of the voting terminal 100. The RFID scanner 121 is also mounted in a position where it can suitably read identification information from an RFID tag hanging from the neck.

[0033] The RFID tag may be, for example, a passive RF tag (no built-in power source) that uses radio waves (UHF (Ultra High Frequency)) and has a tag shape that can be easily supported by a neck strap. The RFID tag should be a model that is not easily affected by metal, and as long as it is equipped with these functions, it may be of any type, such as a card-type tag like a membership card or various goods.

[0034] The voting processing unit 130 includes a mark card reading unit 131, a betting ticket reading unit 132, a QR (Quick Response) code reader 133, and a ticket issuance processing unit 134. The mark card reading unit 131 reads a mark card on which the voting details are written. The betting ticket reading unit 132 reads a winning betting ticket. The QR code reader 133 reads a QR code (registered trademark). This allows the voting terminal 100 to read the voting details from either the mark card or the QR code. The ticket issuance processing unit 134 prints the betting ticket and issues (issues) the betting ticket.

[0035] The deposit / withdrawal processing unit 140 includes a deposit / withdrawal unit 141. The deposit / withdrawal unit 141 is cashless and withdraws purchase amounts from members' accounts and transfers refunds. Note that the deposit / withdrawal processing unit 140 may also be capable of handling cash.

[0036] The memory unit 111 stores temporary data by the control unit 110, as well as programs and data for the control unit 110 to realize the functions of the voting terminal 100, control information related to device operation, etc. The display processing unit 112 displays information to members on a display unit such as a display. The operation input unit 113 accepts operation input from members. The communication interface unit 114 connects to the network 30 and controls the communication interface with the authentication server 200.

[0037] Next, the functional blocks of the authentication server 200 will be described with reference to Fig. 5. Fig. 5 is a diagram showing an example of the functional blocks of the authentication server of the second embodiment. The authentication server 200 includes a control unit 210, a storage unit 211, a communication interface unit 212, and a matching processing unit 220. The control unit 210 realizes the function of the control unit 5 shown in the first embodiment.

[0038] The control unit 210 comprehensively controls the storage unit 211 , the communication interface unit 212 , and the matching processing unit 220 . The matching processing unit 220 includes a first matching unit 221 and a second matching unit 222. The first matching unit 221 executes matching that is always performed when member information is detected, and the second matching unit 222 executes matching that is performed when the first matching unit 221 fails to identify the member. The matching processing unit 220 allows the first matching unit 221 to permit execution of a voting process, and allows the second matching unit 222 to permit execution of a deposit process and a withdrawal process. The first matching unit 221 and the second matching unit 222 use different authentication information. For example, the first matching unit 221 uses a four-digit number as authentication information for matching, and the second matching unit 222 uses a combination of eight alphanumeric characters or an answer to a secret question provided in advance as authentication information.

[0039] The memory unit 211 stores temporary data for the control unit 210, as well as programs and data for the control unit 210 to realize the functions of the authentication server 200, control information related to device operation, etc. The communication interface unit 212 is connected to the network 30 and performs communication interface control for the voting terminal 100.

[0040] Next, the operation reception waiting process executed by the voting terminal 100 will be described with reference to Fig. 6. Fig. 6 is a diagram showing an example of a flowchart of the operation reception waiting process of the second embodiment. The operation reception waiting process is a process executed by the control unit 110 of the voting terminal 100, and is a process executed when waiting for a member operation.

[0041] [Step S11] The control unit 110 (authentication processing unit 120) waits for the detection of member information read by the RFID scanner 121. If member information is detected, the control unit 110 proceeds to step S12.

[0042] [Step S12] The control unit 110 (authentication processing unit 120) notifies the authentication server 200 of the detected member information. The detected member information is not limited to one, but may be two or more. The authentication server 200 can reduce the processing time for authentication processing by extracting the notified member information in advance.

[0043] [Step S13] The control unit 110 (authentication processing unit 120) detects and determines whether a member (target candidate member) who is a candidate for operation of the voting terminal 100 is detected. If the control unit 110 detects a target candidate member, it proceeds to step S14, and if it does not detect a target candidate member, it proceeds to step S11. A target candidate member is a member who is not identified as a member (target member) who is the target of operation of the voting terminal 100. The detection of a target candidate member can be performed by continuously detecting a member for a predetermined time or a predetermined number of times in the reading range, or by detecting a member within a predetermined communication distance. The detection of a target candidate member may be performed by image detection used in conjunction with the RFID scanner 121 or detection by a proximity sensor. By detecting a target candidate member, the voting terminal 100 does not identify a member who is trying to operate the voting terminal 100, but can detect his / her presence.

[0044] [Step S14] The control unit 110 (voting processing unit 130 or deposit / withdrawal processing unit 140) executes an operation reception process. The operation reception process is a process for identifying a member who is attempting to operate the voting terminal 100, and enabling the provision of a service based on the operation of the identified member. After executing the operation reception process, the control unit 110 proceeds to step S11.

[0045] Next, the operation reception process executed by the voting terminal 100 will be described with reference to Fig. 7. Fig. 7 is a diagram showing an example of a flowchart of the operation reception process of the second embodiment. The operation reception process is a process executed by the control unit 110 of the voting terminal 100 in step S14 of the operation reception waiting process.

[0046] [Step S21] The control unit 110 (authentication processing unit 120) executes a first authentication process. In the first authentication process, a user interface implemented by the display processing unit 112 and the operation input unit 113 guides the member to input first PIN data (a first password, for example, authentication information consisting of a four-digit number) and accepts the input of the PIN data. The control unit 110 notifies the authentication server 200 of the input first PIN data and member information that is a candidate for operation, and receives a response of the authentication result.

[0047] It is desirable that the first PIN data be easy for members to input. First PIN data that is easy for members to input reduces the time it takes to vote and makes it possible to reduce the risk of missing out on purchasing a ballot ticket. Meanwhile, with conventional biometric authentication, it is not easy to obtain stable biometric information from members who are pressed for time. Also, in biometric authentication, prompting members to re-read the data is a heavy burden on members. The first PIN data does not use biometric information, which reduces the burden on members. The security risks caused by the reduced burden are addressed by two-step authentication.

[0048] [Step S22] The control unit 110 (authentication processing unit 120) identifies the operation target of the voting terminal 100 from the response of the authentication result. [Step S23] The control unit 110 (authentication processing unit 120) determines whether or not the operation target has been identified. If the operation target has not been identified, the process proceeds to step S24; if the operation target has been identified, the process proceeds to step S25.

[0049] [Step S24] The control unit 110 (authentication processing unit 120) executes the second authentication process. In the second authentication process, the control unit 110 guides the member to input second PIN data (a second password, for example, authentication information consisting of a combination of eight alphanumeric characters, or an answer to a secret question provided in advance) through a user interface realized by the display processing unit 112 and the operation input unit 113, and accepts the input of the second PIN data. The control unit 110 notifies the authentication server 200 of the input second PIN data and obtains a response of the authentication result. Note that if the control unit 110 receives a response from the authentication server 200 indicating that the authentication has failed, it ends the operation reception process, and if the control unit 110 receives a response from the authentication server 200 indicating that the authentication has succeeded, it proceeds to step S25.

[0050] [Step S25] The control unit 110 guides the member through the service to be processed (purchasing betting tickets, refunding betting tickets, depositing and withdrawing funds from a specific account, etc.) and accepts the member's selection through a user interface realized by the display processing unit 112 and the operation input unit 113. If the target process based on the member's selection is a voting process (voting), the control unit 110 proceeds to step S26, and if the target process is a deposit / withdrawal process (deposit / withdrawal), the control unit 110 proceeds to step S27.

[0051] [Step S26] The control unit 110 (voting processing unit 130) executes the voting process, and ends the operation reception process after the voting process is executed. The control unit 110 acquires the voting contents prepared in advance by the member in the voting process. For example, the control unit 110 acquires the voting contents by reading, from the mark card reading unit 131, a mark card on which the voting contents are written.

[0052] [Step S27] The control unit 110 (deposit / withdrawal processing unit 140) determines whether or not the second authentication process has been executed. If the second authentication process has not been executed, the control unit 110 proceeds to step S28, and if the second authentication process has been executed, the control unit 110 proceeds to step S29.

[0053] [Step S28] The control unit 110 (authentication processing unit 120) executes a second authentication process. If the second authentication process fails, the control unit 110 ends the operation reception process, and if the second authentication process succeeds, the control unit 110 proceeds to step S29.

[0054] [Step S29] The control unit 110 (deposit / withdrawal processing unit 140) executes the deposit / withdrawal process, and terminates the operation reception process after executing the deposit / withdrawal process. The control unit 110 acquires the voting details prepared in advance by the member in the deposit / withdrawal process. In this way, the voting terminal 100 requires higher security in the deposit / withdrawal process than in the voting process, achieving both convenience for players and high safety.

[0055] Next, the execution sequence of the first authentication process by the voting terminal 100 and the authentication server 200 will be described with reference to Fig. 8. Fig. 8 is a diagram showing an example of the first authentication sequence of the second embodiment.

[0056] [Step S100] When an RFID tag is within the reading range, the voting terminal 100 notifies the authentication server 200 of the identification ID of the RFID tag and the communication distance for each identification ID. In other words, when the voting terminal 100 detects the member information of a member to be operated (target member) and a member not to be operated (non-target member) in the reading range (detection range) (entering the detection range), it notifies the authentication server 200 of the detected member information and the communication distance for each member information. The voting terminal 100 may notify the authentication server 200 of the member information and communication distance of all members in the reading range, or may notify the authentication server 200 of the member information and communication distance of members within a communication distance within a predetermined threshold. The authentication server 200 extracts the notified member information and prepares for an authentication request from the voting terminal 100, thereby reducing the processing time required for authentication.

[0057] [Step S101] The voting terminal 100 requests the target member to input a PIN (first PIN data). The request for input of the PIN can be made by displaying a required guide on the display unit.

[0058] [Step S102] The voting terminal 100 accepts the PIN number entered by the target member. [Step S103] Since it is not easy to narrow down the members to be operated, the voting terminal 100 sets the members to be operated and the members to be non-operation as candidates to be operated. Note that the non-operation target members may continue to be in the reading range of the voting terminal 100, but may also disappear from the reading range (detection range) (exit from the detection range). The voting terminal 100 can determine the members who have disappeared from the reading range as non-operation target members and exclude them from the candidates to be operated. The voting terminal 100 can also determine the members whose communication distance is longer than other members as non-operation target members and exclude them from the candidates to be operated. The voting terminal 100 can also determine the members whose communication distance is unstable (members who are considered to be moving) as non-operation target members and exclude them from the candidates to be operated. The voting terminal 100 can also determine the members who comply with required determination rules as non-operation target members. This allows the voting terminal 100 to narrow down the operation target candidates to one or more members who were in the reading range or are in the reading range. If the voting terminal 100 can narrow down the operation target candidates to one, it can also determine that the operation target candidate is the operation target member.

[0059] [Step S104] The voting terminal 100 notifies the authentication server 200 of the member information of the operation target candidate, the communication distance, and the input PIN, and requests a match confirmation. [Step S105] When there is one operation target candidate, the authentication server 200 checks whether the member information of the operation target candidate matches the input PIN. When there are two or more operation target candidates, the authentication server 200 checks whether any of the member information of the operation target candidates matches the input PIN. When there are two or more operation target candidates, the authentication server 200 checks whether the member information matching the PIN has the shortest communication distance.

[0060] [Step S106] The authentication server 200 notifies the voting terminal 100 of the confirmation result. The confirmation result includes result information on whether or not there is a match between the input PIN and the member information of the operation target candidate, and the member information whose PIN matches (if there is a match).

[0061] [Step S107] If there is member information with a matching PIN, the voting terminal 100 re-reads the member information and rechecks whether it can detect member information with a matching PIN. That is, the voting terminal 100 re-determines whether the target of operation is still present. Note that if there is no member information with a matching PIN, the voting terminal 100 may return to step S100 a limited number of times. Also, the voting terminal 100 may proceed to two-step authentication if there is no member information with a matching PIN, or if there is member information with a matching PIN but it is doubtful that it is a target of operation in light of the communication distance.

[0062] The object of re-reading by the voting terminal 100 may be limited to the member information with a matching PIN. This allows the voting terminal 100 to reduce the processing load involved in re-reading. [Step S108] If the voting terminal 100 detects member information with a matching PIN, that is, if the confirmation result from the authentication server matches the member information of the target operation, it notifies the authentication server 200 of the matching result.

[0063] Note that the voting terminal 100 may omit step S108 depending on the service provided to the member. For example, the voting terminal 100 may be able to execute the voting process without notifying the authentication server 200 of the matching result. This allows the voting terminal 100 to reduce the burden of confirmation during the process leading up to purchasing a betting ticket, and reduce the risk of missing out on purchasing a betting ticket in a timely manner. In addition, the voting terminal 100 may require the notification of the matching result to the authentication server 200 regarding the deposit / withdrawal process. This allows the voting terminal 100 to prevent unexpected disadvantages to members.

[0064] In addition, if the voting terminal 100 judges that it should return to step S100 or proceed to two-step authentication, the voting terminal 100 may notify the authentication server 200 of the judgment.

[0065] Next, an execution sequence of the second authentication process by the voting terminal 100 and the authentication server 200 will be described with reference to Fig. 9. Fig. 9 is a diagram showing an example of the second authentication sequence of the second embodiment.

[0066] [Step S110] When executing two-step authentication, the authentication server 200 notifies the voting terminal 100 of information (two-step authentication information) required to execute two-step authentication. The authentication server 200 executes two-step authentication when the authentication in step S105 fails, when the member information that was successfully authenticated in step S105 is suspected to be an operation target in light of the communication distance even if the authentication is successful, or when the success of the two-step authentication is a condition for providing the service. Examples of the two-step authentication information include information prompting the user to enter a second PIN (a combination of eight alphanumeric characters) and information prompting the user to answer a secret question submitted in advance.

[0067] [Step S111] The voting terminal 100 requests the target member to perform two-step authentication based on the two-step authentication information. [Step S112] The voting terminal 100 accepts a response input from the target member.

[0068] [Step S113] The voting terminal 100 notifies the authentication server 200 of the response received from the target member. [Step S114] The authentication server 200 verifies the response received from the voting terminal 100 by checking against pre-stored verification information linked to the member information.

[0069] [Step S115] The authentication server 200 notifies the voting terminal 100 of the confirmation result. The voting terminal 100 executes processing based on the confirmation result notified by the authentication server 200. For example, if the two-step authentication is successful, the voting terminal 100 proceeds to the service provision processing. If the two-step authentication is unsuccessful, the voting terminal 100 ends the operation reception processing and returns to the operation reception waiting processing.

[0070] Next, a more specific authentication process will be described with reference to Fig. 10. Fig. 10 is a diagram showing an example of an RFID reading image according to the second embodiment. The voting terminal 100 is equipped with an RFID scanner 121 so that the RFID reading range 61 is located in the direction in which the operation unit and display panel of the voting terminal 100 face. The voting terminal 100 is installed in the polling station so that the back side, where the communication lines and power lines are routed, is in contact with the wall. Therefore, no member is positioned on the back side of the voting terminal 100 during normal operation.

[0071] According to the RFID reading image 60, there are four members A, B, C, and D around the voting terminal 100. The three members A, B, and C are within the RFID reading range 61, but the member D is not within the RFID reading range 61.

[0072] Therefore, the voting terminal 100 can obtain member information (identification ID) "0000000A" from the RFID device (RFID tag) worn by member A. Similarly, the voting terminal 100 can obtain member information "0000000B" from member B, and member information "0000000C" from member C. Note that the voting terminal 100 cannot obtain member information "0000000D" from member D.

[0073] In addition, when the voting terminal 100 receives input of the PIN "1111" (PW:1111) from the target of operation, it cannot immediately link the target of operation to member A, but it can determine that the target of operation is one of members A, B, or C.

[0074] In addition, the voting terminal 100 can narrow down the operation targets by comparing the communication distances of members A, B, and C and the information obtained at different times based on the member information. In addition, the voting terminal 100 can specify (narrow down) the operation targets by requesting two-step authentication.

[0075] Next, the information (voting terminal acquired information) that the voting terminal 100 notifies the authentication server 200 in step S104 will be described with reference to Fig. 11. Fig. 11 is a diagram showing an example of the voting terminal acquired information in the second embodiment.

[0076] The voting terminal acquisition information 65 is information acquired from the RFID read image 60. The voting terminal acquisition information 65 includes member information "0000000A", member information "0000000B", and member information "0000000C". The voting terminal acquisition information 65 also includes a communication distance "0.2" corresponding to member information "0000000A", a communication distance "0.3" corresponding to member information "0000000B", and a communication distance "2.0" corresponding to member information "0000000C". The voting terminal acquisition information 65 also includes a PIN number "1111" received from the operation target.

[0077] In addition, the voting terminal 100 evaluates the communication distance based on the reception strength when reading the RFID, but it may also evaluate the communication distance based on the response time, or may evaluate based on two or more indicators.

[0078] The voting terminal 100 may also use a specific calculated distance (for example, 0 m to 3 m (reading range)) as the evaluation value, or may use a value obtained by evaluating the specific calculated distance according to a predetermined standard (for example, a 5-point evaluation) as the evaluation value. The voting terminal 100 may also add the stability of the calculated distance at different times to the evaluation value.

[0079] In addition, the voting terminal acquisition information 65 may include the narrowing down result by the voting terminal 100. For example, the voting terminal acquisition information 65 may include information evaluating that the member information "0000000A" and the member information "0000000B" may be targets for manipulation (query target "target"), and information evaluating that the member information "0000000C" is not a target for manipulation (query target "non-target").

[0080] For example, the voting terminal 100 can read the member information twice at different times, and designate the member information that is successfully read both times as the "target" reference subject, and only one of the pieces of member information as the "non-target" reference subject. Furthermore, even if the voting terminal 100 reads the member information successfully both times, it can designate the member information where the evaluation difference between the two communication distances is within a predetermined threshold as the "target" reference subject, and designate the member information outside the threshold as the "non-target" reference subject.

[0081] This allows the vote processing system 50 to reduce the processing load on the authentication server 200. Furthermore, the vote processing system 50 can improve the accuracy of determining the operation target. Next, the member authentication table held by authentication server 200 will be described with reference to Fig. 12. Fig. 12 is a diagram showing an example of the member authentication table of the second embodiment. Authentication server 200 holds information related to the authentication of all members. For example, authentication server 200 holds member authentication table 70 in memory unit 211 or an external storage device.

[0082] The member authentication table 70 includes member information (identification ID) for each member, first authentication information, and second authentication information. The first authentication information is information used by the first matching unit 221 for matching, and the second authentication information is information used by the second matching unit 222 for matching.

[0083] For example, the member authentication table 70 has, as the information of member A, member information "0000000A", a first authentication number "1111", and a second PIN number "0001", and as the information of member B, member information "0000000B", a first authentication number "1112", and a second PIN number "0002". The member authentication table 70 also has, as the information of member C, member information "0000000C", a first authentication number "1113", and a second PIN number "0003", and as the information of member D, member information "0000000D", a first authentication number "1114", and a second PIN number "0004". The first authentication number and the second authentication number are not limited to the PIN numbers themselves, but may be any data capable of authentication, such as a hash value.

[0084] The authentication server 200 may prepare a member authentication table for each voting terminal 100. For example, a member authentication table may be prepared that is limited to the range of member information detected by the voting terminal 100 within a predetermined period of time.

[0085] More specifically, the authentication server 200 registers all members, including members A, B, C, and D, in the member authentication table 70, which is a general-purpose member authentication table. The authentication server 200 extracts from the member authentication table 70 and creates a member authentication table (dedicated member authentication table) limited to members A, B, C, and D detected within a specified time by the voting terminal 100 of the RFID reading image 60. The authentication server 200 updates the dedicated member authentication table as needed based on the member information notified from the voting terminal 100. When an authentication request is made from the voting terminal 100 of the RFID reading image 60, the authentication server 200 can limit the objects to be matched.

[0086] Next, authentication target determination by the authentication server 200 will be described with reference to Fig. 13. Fig. 13 is a diagram showing an example of matching target determination in the second embodiment. When the authentication server 200 is notified of the voting terminal acquisition information 75 from the voting terminal 100, it selects one or more objects to be compared from the member authentication table 70 (second authentication information is omitted from the figure) that it holds. Note that the voting terminal acquisition information 75 is an example of information that the voting terminal 100 notifies the authentication server 200 in step S104.

[0087] The authentication server 200 uses the member information "0000000A" and member information "0000000B" contained in the voting terminal acquisition information 75 as the targets for matching the PIN "1111". The authentication server 200 refers to the member authentication table 70 and matches the member information "0000000A" and member information "0000000B" with the PIN "1111" notified by the voting terminal 100 for the member information "0000000A" and member information "0000000B". The authentication server 200 notifies the voting terminal 100 that the matching was successful for the member information "0000000A" of the member information "0000000A" and the member information "0000000B".

[0088] Although the voting terminal 100 was able to estimate whether the target of the operation was member A or member B, it was unable to identify this. However, the notification from the authentication server 200 enables the voting terminal 100 to identify that the target of the operation is member A.

[0089] Although such authentication involves a certain degree of risk of erroneous authentication in the voting processing system 50, it reduces the operational burden on members and makes it possible to reduce the risk of missing out on purchasing a voting ticket. Also, the risk of erroneous authentication is made to an acceptable level when compared with the risk of missing out on purchasing a voting ticket. On the other hand, the voting processing system 50 ensures a high level of security by requiring two-step authentication for deposit and withdrawal processing, a service for which the risk of erroneous authentication cannot be tolerated.

[0090] Next, examples of authentication in the vote processing system 50 will be described with reference to Fig. 14 and Fig. 15. Fig. 14 is a diagram showing examples of matching (Nos. 1 to 3) in the second embodiment. Fig. 15 is a diagram showing examples of matching (Nos. 4 to 6) in the second embodiment.

[0091] The comparison example 80 shown in Figure 14 (1) shows the result of the authentication server 200 comparing the member information "0000000A" and the first PIN "1111" of one member notified from the voting terminal 100 as voting terminal acquired information. Since the member information "0000000A" is the only member information, it has the first comparison rank. The authentication server 200 determines as a comparison result that there was a match with the first PIN for the member information "0000000A" which has the first comparison rank. The authentication server 200 does not compare the second PIN if the voting terminal 100 does not provide a service requiring a high level of security for the member information "0000000A".

[0092] Matching example 82 shown in Figure 14 (2) shows the result of matching performed by authentication server 200 after receiving membership information of two members, the communication distance for each piece of membership information, and the first PIN number from voting terminal 100 as voting terminal acquired information. The membership information of the two members is member information "0000000A" and member information "0000000B", the communication distance for each piece of membership information is such that member information "0000000A" is closer than member information "0000000B", and the first PIN number is "1111". Member information "0000000A" has the first matching rank based on communication distance, and member information "0000000B" has the second matching rank based on communication distance. The authentication server 200 determines that the matching result is a match with the first PIN for the member information "0000000A" ranked first in the matching order, and a mismatch with the first PIN for the member information "0000000B" ranked second in the matching order. The authentication server 200 does not check the second PIN because the communication distance and the matching result are consistent. Furthermore, the authentication server 200 does not check the second PIN if the voting terminal 100 does not provide a service requiring a high level of security for the member information "0000000A".

[0093] The comparison example 84 shown in Figure 14 (3) shows the result of a two-stage comparison performed by the authentication server 200 after the voting terminal 100 notifies the voting terminal 100 of the membership information of two members, the communication distance for each member information, and the first PIN number as voting terminal acquired information. The authentication server 200 compares the second PIN number when the voting terminal 100 provides a service that requires a high level of security. If the second PIN number matches, the authentication server 200 permits the voting terminal 100 to provide a service that requires a high level of security for the member information "0000000A".

[0094] Comparison example 86 shown in FIG. 15(1) shows the result of a comparison performed by authentication server 200 after receiving membership information of two members, the communication distance for each member information, and the first PIN number from voting terminal 100 as voting terminal acquired information. The membership information of the two members, the communication distance for each member information, and the first PIN number are the same as those in comparison example 82. Member information "0000000A" is ranked first in the comparison based on communication distance, and member information "0000000B" is ranked second in the comparison based on communication distance. Authentication server 200 determines as a comparison result that there was a match with the first PIN number for member information "0000000A" ranked first in the comparison, and also determines as a comparison result that there was a match with the first PIN number for member information "0000000B" ranked second in the comparison. Since the authentication server 200 cannot identify the operation target from the result of the first PIN verification, it performs verification of the second PIN. If the second PIN verification matches, the authentication server 200 permits the voting terminal 100 to provide services including services requiring a high security level for the member information "0000000A".

[0095] Comparison example 88 shown in FIG. 15(2) shows the result of a comparison performed by authentication server 200 after receiving membership information of two members, the communication distance for each member information, and the first PIN number from voting terminal 100 as voting terminal acquired information. The membership information of the two members, the communication distance for each member information, and the first PIN number are the same as those in comparison example 82. Member information "0000000A" is ranked first in the comparison based on communication distance, and member information "0000000B" is ranked second in the comparison based on communication distance. Authentication server 200 determines as a comparison result that there was a mismatch in the first PIN number for member information "0000000A" ranked first in the comparison, and also determines as a comparison result that there was a mismatch in the first PIN number for member information "0000000B" ranked second in the comparison. Since the authentication server 200 cannot identify the operation target from the result of the first PIN verification, it performs verification of the second PIN. If the second PIN verification matches, the authentication server 200 permits the voting terminal 100 to provide services including services requiring a high security level for the member information "0000000A".

[0096] A comparison example 90 shown in FIG. 15(3) shows the result of the authentication server 200 comparing the member information of two members, the communication distance for each member information, and the first PIN number notified from the voting terminal 100 as the voting terminal acquired information. The member information of the two members, the communication distance for each member information, and the first PIN number are the same as those in the comparison example 82. The member information "0000000A" has the first matching rank based on the communication distance, and the member information "0000000B" has the second matching rank based on the communication distance. The authentication server 200 determines as a result of the comparison that there is a mismatch in the first PIN number for the member information "0000000A" with the first matching rank, and determines as a result of the comparison that there is a match in the first PIN number for the member information "0000000B" with the second matching rank. Since the communication distance and the comparison result do not match, the authentication server 200 performs a comparison of the second PIN number. If the second PIN matches, the authentication server 200 permits the voting terminal 100 to provide services, including services that require a high level of security, for the member information "0000000A."

[0097] In the above embodiment, the determination of whether the communication distance and the comparison result match or not is performed by the authentication server 200, but the voting terminal 100 may perform this determination. The case of comparison example 86 may occur due to a coincidence of the first PIN. Furthermore, the case of comparison example 88 may occur due to an incorrect input of the first PIN. Furthermore, the case of comparison example 90 may occur due to a combination of an incorrect input of the first PIN and a coincidence. Since the first PIN is required to be easier to input in consideration of convenience compared to the second PIN, this may occur with a frequency that cannot be ignored.

[0098] Even in such a case, the voting processing system 50 reduces the operational burden on members and reduces the risk of missing out on purchasing a voting ticket. Furthermore, such a voting processing system 50 allows RFID tags to be used at a lower cost than using IC cards while ensuring a high level of security. Furthermore, when the voting terminal 100 is a cashless terminal, such a voting processing system 50 can contribute to further improving the convenience of members and promote the use of cashless voting.

[0099] Furthermore, the voting processing system 50 including the voting terminal 100 can execute authentication processing that prioritizes processing speed by using authentication information (password entered by the target member) that does not depend on the member's biometric information, making it possible to reduce the risk of missing out on purchasing a voting ticket. The voting processing system 50 including the voting terminal 100 can ensure a high level of security and reduce the risk of missing out on purchasing a voting ticket, while using two-step authentication that does not use biometric authentication as the first step.

[0100] It should be noted that the disclosed embodiments are illustrative in all respects and should not be considered as limiting. In addition, the above-mentioned embodiments and each configuration of the modified examples may be combined and applied. The scope of the present invention is indicated by the claims, not the above description, and is intended to include all modifications within the meaning and scope of the claims. [Explanation of symbols]

[0101] 1,50 Voting Processing System 2. Voting Processing Device 4 Authentication processing device 30 Network 100 Voting Terminals 200 Authentication Server

Claims

1. Acquire identification information set in devices held by one or more users located in the vicinity and a communication distance between the device and the device; A target user can be narrowed down based on the size of the communication distance for each of the identification information, The target user can be narrowed down based on the identification information acquired at a first timing and the identification information acquired at a second timing different from the first timing, The target user can be narrowed down based on the identification information corresponding to the first authentication information input by the target user, a control unit that enables a voting process by the target users when the target users are narrowed down to one; A voting processing device having the following.

2. When the control unit acquires one or more pieces of identification information, if the communication distance of the one or more pieces of identification information is smaller than a predetermined threshold, the control unit narrows down the target users. The voting processing device according to claim 1 .

3. the control unit notifies an authentication processing device of the first authentication information and the one or more pieces of identification information whose communication distance is smaller than the predetermined threshold, and narrows down the target users based on a response from the authentication processing device. The voting processing device according to claim 2 .

4. the control unit notifies the authentication processing device of the identification information acquired at the first timing and the identification information acquired at the second timing. The voting processing device according to claim 3 .

5. the control unit notifies the authentication processing device of second authentication information different from the first authentication information input by the target user based on the response from the authentication processing device, and enables a voting process by the target user to be executed when the target users are narrowed down to one. The voting processing device according to claim 3 .

6. the control unit notifies the authentication processing device of one of the identification information narrowed down as the target user and second authentication information different from the first authentication information input by the target user, and enables the target user to execute a deposit process or a withdrawal process based on a response from the authentication processing device. The voting processing device according to claim 1 .

7. the device is an RFID tag; The control unit sets the predetermined threshold value so that, when the user is in a position where the user can perform an input operation from the target user, the communication distance between the user and the device held by the user is smaller than the predetermined threshold value. The voting processing device according to claim 2 .

8. On the computer, Acquire identification information set in devices held by one or more users located in the vicinity and a communication distance between the device and the device; A target user can be narrowed down based on the size of the communication distance for each of the identification information, The target user can be narrowed down based on the identification information acquired at a first timing and the identification information acquired at a second timing different from the first timing, The target user can be narrowed down based on the identification information corresponding to the first authentication information input by the target user, When the target users are narrowed down to one, a voting process can be executed by the target users. A voting processing program that executes the process.

9. A voting processing system including a voting processing device and an authentication processing device, The voting processing device includes: Acquire identification information set in devices held by one or more users located in the vicinity and a communication distance between the device and the device; A target user can be narrowed down based on the size of the communication distance for each of the identification information, The target user can be narrowed down based on the identification information acquired at a first timing and the identification information acquired at a second timing different from the first timing, notifying the authentication processing device of first authentication information input by the target user and the identification information corresponding to the narrowed-down target user; a control unit that enables a voting process by the target user to be executed when the target user is narrowed down to one based on a response result from the authentication processing device; The authentication processing device includes: a control unit that receives notification of one or more of the identification information and the first authentication information from the voting processing device and responds with one of the identification information that matches the first authentication information; Voting processing system.

Images