Authentication program, information processing device, information processing system, and information processing method

Abstract

To provide an authentication program, an information processing device, an information processing system and an information processing method that perform authentication processing based on whether or not a user possesses an article that should be possessed by the user.SOLUTION: An authentication program enables a computer equipped with a processor and a storage unit to execute prescribed authentication processing. The processor performs: a condition acquisition step S102 of acquiring possession conditions that include a condition related to an article that should be possessed by the user; a possession information acquisition step S103 of acquiring one or multiple pieces of article information to specify the one or multiple articles possessed by the user; and an authentication processing step S105 of executing the prescribed authentication processing for the user on the basis of the possession conditions acquired in the condition acquisition step S102 and the one or multiple pieces of article information acquired in the possession information acquisition step S103.SELECTED DRAWING: Figure 12

Description

[Technical field]

[0001] The present disclosure relates to an authentication program, an information processing device, an information processing system, and an information processing method. [Background technology]

[0002] 2. Description of the Related Art There is known a technique for authenticating a user by using a portable information processing terminal or the like carried by the user. Patent Document 1 discloses a technique for grasping the manner in which users exit a facility. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2020-187431 A Summary of the Invention [Problem to be solved by the invention]

[0004] There is a problem in that authentication processing cannot be performed according to whether or not the user is carrying an item that he or she should carry. Therefore, the present disclosure has been made to solve the above problem, and its purpose is to provide a technology that executes authentication processing depending on whether or not a user is carrying an item that should be carried by the user. [Means for solving the problem]

[0005] An authentication program that causes a computer having a processor and a memory unit to execute a specified authentication process, wherein the processor executes the following authentication steps: a possession condition acquisition step for acquiring possession conditions including conditions regarding items that the user should possess; an item information acquisition step for acquiring one or more item information that identifies one or more items possessed by the user; and an authentication step for executing a specified authentication process for the user based on the possession conditions acquired in the possession condition acquisition step and the one or more item information acquired in the item information acquisition step. Effect of the Invention

[0006] According to the present disclosure, it is possible to execute authentication processing according to whether or not a user possesses an item that the user should possess. [Brief description of the drawings]

[0007] [Figure 1] FIG. 2 is a block diagram showing the functional configuration of the system 1. [Diagram 2] FIG. 2 is a block diagram showing the functional configuration of the server 10. [Diagram 3] 2 is a block diagram showing the functional configuration of a user terminal 20. FIG. [Figure 4] 2 is a block diagram showing a functional configuration of the authentication terminal 30. FIG. [Diagram 5] FIG. 13 is a diagram showing the data structure of a user table 1012. [Figure 6] FIG. 13 is a diagram showing the data structure of a condition table 1013. [Figure 7] FIG. 13 is a diagram showing the data structure of a device table 1014. [Figure 8] FIG. 13 is a diagram showing the data structure of an area table 1015. [Figure 9] FIG. 13 is a diagram showing the data structure of a belongings table 1016. [Figure 10] FIG. 13 is a diagram showing the data structure of a state table 1017. [Figure 11] FIG. 13 is a diagram showing the data structure of a decision table 1018. [Figure 12] 13 is a flowchart showing operations in an authentication process. [Figure 13] FIG. 2 is a block diagram showing the basic hardware configuration of a computer 90. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0008] Hereinafter, an embodiment of the present disclosure will be described with reference to the drawings. In all the drawings explaining the embodiment, the same reference numerals are given to common components, and repeated explanations are omitted. Note that the following embodiment does not unduly limit the contents of the present disclosure described in the claims. In addition, not all of the components shown in the embodiment are essential components of the present disclosure. In addition, each figure is a schematic diagram and is not necessarily illustrated strictly.

[0009] <System 1 Configuration> The system 1 in the present disclosure is an information processing system for realizing an authentication service that provides a user with authentication when operating a specific device or facility, or when moving to a service, room, region, area, or the like. For example, system 1 in the present disclosure is an information processing system that provides an authentication service to authenticate whether or not a user is permitted to operate (drive) a vehicle (mobility) such as a passenger car, commercial vehicle, train, airplane, drone, bicycle, motorcycle, construction machinery, heavy machinery, etc. For example, system 1 in the present disclosure is an information processing system that provides an authentication service to authenticate whether or not a user is permitted to move (enter, enter) inside a room, area, region, vehicle, etc. The system 1 includes information processing devices, a server 10, a user terminal 20, and an authentication terminal 30, which are connected via a network N. FIG. 1 is a block diagram showing the functional configuration of the system 1. FIG. 2 is a block diagram showing the functional configuration of the server 10. As shown in FIG. FIG. 3 is a block diagram showing the functional configuration of the user terminal 20. As shown in FIG. FIG. 4 is a block diagram showing the functional configuration of the authentication terminal 30. As shown in FIG.

[0010] Each information processing device is configured by a computer equipped with a calculation device and a storage device. The basic hardware configuration of the computer and the basic functional configuration of the computer realized by the hardware configuration will be described later. For each of the server 10, the user terminal 20, and the authentication terminal 30, descriptions that overlap with the basic hardware configuration and basic functional configuration of the computer described later will be omitted.

[0011] <Server 10 Configuration> The server 10 is an information processing device capable of providing a predetermined authentication service related to a device, facility, service, room, area, or the like. The server 10 includes a storage unit 101 and a control unit 104 .

[0012] <Configuration of the storage unit 101 of the server 10> The memory unit 101 of the server 10 includes an application program 1011 , a user table 1012 , a condition table 1013 , a device table 1014 , an area table 1015 , a possessions table 1016 , a status table 1017 , and a judgment table 1018 .

[0013] The application program 1011 is a program for causing the control unit 104 of the server 10 to function as each functional unit. Application programs 1011 include applications such as a web browser application.

[0014] User table 1012 is a table that stores and manages information about member users (hereinafter, users) who use the service. When a user registers to use the service, the user's information is stored in a new record in user table 1012. This allows the user to use the service according to the present disclosure. The user table 1012 is a table having columns of user ID and user name, with the user ID as the primary key. FIG. 5 is a diagram showing the data structure of the user table 1012. As shown in FIG.

[0015] The user ID is an item for storing user identification information for identifying a user. The user identification information is an item for which a unique value is set for each user. The user name is an item for storing the name of the user. The user name may be set to any character string such as a nickname instead of a name.

[0016] The condition table 1013 is a table for storing and managing information (condition information) relating to conditions when performing authentication processing. The condition table 1013 is a table having columns of condition ID, condition type, and condition data. FIG. 6 is a diagram showing the data structure of the condition table 1013. As shown in FIG.

[0017] The condition ID is an item for storing condition identification information for identifying a condition. The condition type is an item for storing condition type information related to the type of condition. The condition type information stores information for identifying either a possession condition, which is a condition related to possessions that the user should possess, or a biological condition, which is a condition related to a biological condition that the user should satisfy. The condition data is an item for storing the contents of the conditions when the authentication process is executed. When the condition type is a possession condition, the condition data stores information on the item ID, item type, and number of items by item name of the items that the user should possess. For example, the condition data includes the number of each type of information processing terminal, the number of each name of documents, and the number of each container such as a bag that the user should possess. When the condition type is a biological condition, the condition data stores biological information that the user should satisfy. For example, the condition data includes information that specifies the ranges of values ​​that the user should satisfy, such as body temperature, blood pressure, heart rate, and breath alcohol concentration.

[0018] The device table 1014 is a table for storing and managing conditions for permitting authentication for operation for each device or device type in association with each other. The device table 1014 may also store conditions for not permitting authentication for operation in association with each other. The device table 1014 is a table that stores condition identification information related to authentication conditions for operating a device in association with each piece of device identification information (a device ID that identifies each individual device). The device table 1014 is a table that stores, in association with each piece of device type information (device type or device type that identifies the type), condition identification information related to authentication conditions for operating a device belonging to the device type information. In the device table 1014, at least one of a device ID and a device type is stored in association with a condition ID. The device table 1014 is a table having columns for device ID, device type, and condition ID. FIG. 7 is a diagram showing the data structure of the device table 1014. As shown in FIG.

[0019] The device ID is an item that stores device identification information for identifying a device. Specifically, the device ID includes information for identifying an individual device. For example, if the device is a car, the device ID may be the car registration number written on the license plate or the like. The device type is an item for storing device type information relating to the type of device. The device type information stores information that specifies the type of device, facility, etc. When the device is a mobility, the device type information stores information that specifies the type of mobility, such as a passenger car, a commercial vehicle, a train, an airplane, a drone, a bicycle, a motorcycle, etc. The condition ID is an item for storing condition identification information.

[0020] The area table 1015 is a table for storing and managing conditions for permitting authentication for moving to each area or area type in association with each other. The area table 1015 may also store conditions for not permitting authentication for moving to each area in association with each other. The area table 1015 is a table that stores condition identification information related to authentication conditions for moving to each area (area ID for identifying each area) in association with each area identification information. The area table 1015 is a table that stores condition identification information related to authentication conditions for moving to an area belonging to each area type information (area type, area type that specifies the type) in association with the area type information. In the area table 1015, at least one of an area ID and an area type is stored in association with a condition ID. The area table 1015 is a table having columns for area ID, area type, and condition ID. FIG. 8 is a diagram showing the data structure of the area table 1015. As shown in FIG.

[0021] The area ID is an item for storing area identification information for identifying an area. An area refers to any physical area in which a user can be located, such as a part or the whole of a space such as a room or a hallway, a seat placed in a room, a predetermined area range in an outdoor space, a part or the whole of a vehicle space such as an automobile, a bus, a train, a seat in an automobile, a bus, a train, etc. Area identification information is information for identifiably specifying the physical area. For example, when the area is each room in a building, etc., the area ID includes identification information for identifying each room, such as a room number. When the area is a vehicle interior space of a mobility, etc., the area ID includes identification information for identifying one or more vehicle interior spaces or seats for each mobility. The area type is an item for storing area type information relating to the type of area. The area type information stores information for specifying the type of area, such as a room, a hallway, a driver's seat of a mobility vehicle, a passenger seat of a mobility vehicle, etc. The condition ID is an item for storing condition identification information.

[0022] The belongings table 1016 is a table for storing and managing information (belongings information) on items possessed by the user. The belongings table 1016 stores the user ID and the item ID in association with each other, thereby expressing that the user possesses an item identified by the item ID. The belongings table 1016 is periodically updated by a belongings update process, which will be described later. The belongings table 1016 is a table having an item ID as a primary key, and columns of item ID, user ID, item type, item name, and update date and time. FIG. 9 is a diagram showing the data structure of the belongings table 1016.

[0023] The item ID is an item for storing item identification information for identifying an item. The item identification information is an item in which a unique value is set for each individual item. The user ID is an item for storing user identification information. The item type is an item that stores item type information regarding the type of item identified by the item identification information. The item type information stores information for identifying the type of item, such as a license card, driver's license, ID card, type of information processing terminal, type of document, type of container such as a bag, tool, etc. A plurality of item type information may be stored in association with one item. The item name is an item that stores the name of an item identified by the item identification information. Any character string can be set as the item name. Multiple item names may be stored in association with one item. The update date and time is an item for storing the date and time when a record is newly stored or updated in the belongings table.

[0024] The status table 1017 is a table for storing and managing information (biometric information) related to the biometric status and physical status of the user. The status table 1017 stores the user ID of the user in association with the status data, thereby expressing that the biometric status of the user is the status stored in the status data. The status table 1017 is periodically updated by a status update process, which will be described later. The status table 1017 is a table having columns for user ID, status data, and update date and time. FIG. 10 is a diagram showing the data structure of the state table 1017.

[0025] The user ID is an item for storing user identification information. The condition data is an item for storing biological condition information related to the biological condition of the user. For example, the condition data includes at least one value of the user's body temperature, blood pressure, heart rate, and breath alcohol concentration. The update date and time is an item for storing the date and time when a record is newly stored or updated in the status table.

[0026] The determination table 1018 is a table for storing and managing information related to determination (determination information). The determination table 1018 is a table for storing, when an authentication process described later is executed, an authentication result of the authentication process for each user in association with the authentication result. The determination table 1018 is a table having columns for user ID, authentication result, and determination date and time. FIG. 11 is a diagram showing the data structure of the judgment table 1018. As shown in FIG.

[0027] The user ID is an item for storing user identification information for identifying a user. The authentication result is an item for storing the authentication result that is the result of executing authentication processing for a user. The authentication result includes information indicating whether authentication is permitted or not (permitted), device identification information that identifies the device to be operated that is the subject of the authentication process, and area identification information that identifies the area to be moved in that is the subject of the authentication process. The judgment date and time is an item for storing the storage date and time when a record is newly stored or updated in the judgment table.

[0028] <Configuration of the control unit 104 of the server 10> The control unit 104 of the server 10 includes a user registration control unit 1041 and an authentication unit 1042. The control unit 104 executes an application program 1011 stored in the storage unit 101, thereby realizing each functional unit.

[0029] The user registration control unit 1041 performs processing to store, in the user table 1012, information on users who wish to use the service according to the present disclosure. The information stored in the user table 1012 is generated when a user opens a web page operated by a service provider from any information processing terminal, enters information into a specific input form, and transmits the information to the server 10. The user registration control unit 1041 stores the received information in a new record in the user table 1012, completing the user registration. This allows the user stored in the user table 1012 to use the service. Before the user registration control unit 1041 registers user information in the user table 1012, the service provider may carry out a predetermined examination to restrict whether or not the user is permitted to use the service. The user ID may be any character string or number that can identify the user, any character string or number desired by the user, or an arbitrary character string or number may be automatically set by the user registration control unit 1041.

[0030] The authentication unit 1042 executes authentication processing, the details of which will be described later.

[0031] <Configuration of User Terminal 20> The user terminal 20 is an information processing device operated by a user who uses the authentication service. The user terminal 20 may be, for example, a mobile terminal such as a smartphone or a tablet, a stationary PC (Personal Computer), or a laptop PC. It may also be a wearable terminal such as an HMD (Head Mount Display) or a wristwatch-type terminal. The user terminal 20 includes a storage unit 201 , a control unit 204 , an input device 206 , and an output device 208 .

[0032] <Configuration of the storage unit 201 of the user terminal 20> The storage unit 201 of the user terminal 20 includes a user ID 2011 and an application program 2012 .

[0033] The user ID 2011 is an account ID of the user. The user transmits the user ID 2011 from the user terminal 20 to the server 10. The server 10 identifies the user based on the user ID 2011 and provides the user with the service according to the present disclosure. The user ID 2011 includes information such as a session ID temporarily assigned by the server 10 when identifying the user who is using the user terminal 20.

[0034] The application program 2012 may be stored in advance in the storage unit 201, or may be configured to be downloaded from a web server operated by a service provider via a communication IF. The application programs 2012 include applications such as a web browser application. The application program 2012 includes an interpreted programming language such as JavaScript™ that runs on a web browser application stored on the user terminal 20 .

[0035] <Configuration of the control unit 204 of the user terminal 20> The control unit 204 of the user terminal 20 includes an input control unit 2041 and an output control unit 2042. The control unit 204 executes an application program 2012 stored in the storage unit 201, thereby realizing each functional unit.

[0036] <Configuration of the input device 206 of the user terminal 20> The input device 206 of the user terminal 20 includes a camera 2061 , a microphone 2062 , a position information sensor 2063 , a motion sensor 2064 , and a touch device 2065 .

[0037] <Configuration of the output device 208 of the user terminal 20> The output device 208 of the user terminal 20 includes a display 2081 and a speaker 2082 .

[0038] <Configuration of authentication terminal 30> The authentication terminal 30 is an information processing terminal previously associated with a device or an area, and is an information processing device for permitting or prohibiting (restricting) a user's operation of the device or movement to a predetermined area, etc. The authentication terminal 30 may be, for example, a mobile terminal such as a smartphone or tablet, or a stationary PC (Personal Computer) or laptop PC. It may also be a wearable terminal such as an HMD (Head Mount Display) or a wristwatch-type terminal. The authentication terminal 30 includes a storage unit 301 , a control unit 304 , an input device 306 , and an output device 308 .

[0039] <Configuration of the storage unit 301 of the authentication terminal 30> The storage unit 301 of the authentication terminal 30 includes an application program 3012 .

[0040] The application program 3012 may be prestored in the storage unit 301, or may be downloaded from a web server operated by a service provider via a communication IF. The application program 3012 includes an interpreter-type programming language such as JavaScript (registered trademark) that is executed on a web browser application stored in the authentication terminal 30.

[0041] <Configuration of the control unit 304 of the authentication terminal 30> The control unit 304 of the authentication terminal 30 includes an input control unit 3041 and an output control unit 3042. The control unit 304 executes an application program 3012 stored in the storage unit 301, thereby realizing each functional unit.

[0042] <Configuration of input device 306 of authentication terminal 30> The input device 306 of the authentication terminal 30 includes a camera 3061 .

[0043] <Configuration of output device 308 of authentication terminal 30> The output device 308 of the authentication terminal 30 includes a display 3081 , a speaker 3082 , and a gate 3083 .

[0044] The gate 3083 is a door (passage gate) for permitting or prohibiting a user from moving inside a predetermined area such as a room. The gate 3083 is controlled to open and close by the control unit 304, and this makes it possible to prohibit a user from passing inside the predetermined area. Specifically, when the gate is open, the user can pass inside the predetermined area, and when the gate is closed, the user cannot pass inside the predetermined area. Passage gates include gate bars, which restrict vehicle movement by raising and lowering a rod-shaped bar, and rising bollards, which restrict vehicle movement by raising and lowering a pole (bollard).

[0045] <System 1 Operation> Each process of the system 1 will be described below. FIG. 12 is a flowchart showing the operation of the authentication process.

[0046] <Inventory update process> The belongings update process is a process for updating information (belongings information) about items possessed by the user. Specifically, the control unit 204 of the user terminal 20 periodically acquires the item ID, item type, and item name of the items possessed by the user. For example, it is assumed that an item is equipped with a short-range wireless communication means such as an RFID tag, Bluetooth (registered trademark), or WiFi, and that an item ID is assigned to each item. The control unit 204 of the user terminal 20 receives and acquires the item ID of an item that is carried by the user and located near the user terminal 20 through short-range wireless communication. The item type and item name of the item identified by the item ID may be acquired through short-range wireless communication, or may be acquired by querying a table, an external server, or the like (not shown) based on the received item ID. The item ID, item type, and item name carried by the user may be input by the user operating the input device 206 of the user terminal 20. The control unit 204 of the user terminal 20 transmits the acquired item ID, item type, and item name of the item possessed by the user to the server 10 together with the user ID 2011. The control unit 104 of the server 10 stores the received item ID, item type, item name, and user ID 2011 in the item ID, item type, item name, and user ID fields of the possessions table 1016. As a result, information on the items possessed by the user is stored in the possessions table 1016 in association with the user. The belongings table 1016 stores in real time the item ID, item type, item name, etc. of items possessed by the user.

[0047] <Status update process> The status update process is a process for updating information (biometric information) related to the biometric status of the user. Specifically, the control unit 204 of the user terminal 20 periodically acquires status data related to the biometric status of the user. For example, the user is assumed to be wearing a wristwatch-type portable information terminal (such as a smart watch) capable of measuring biological conditions such as body temperature, blood pressure, and heart rate. The user is also assumed to possess an information terminal capable of measuring the alcohol concentration in the breath, such as an alcohol checker. Alternatively, an information terminal capable of measuring biological conditions (measurement terminal) may be provided on a device that the user intends to operate, an area in which the user moves, or the like. The control unit 204 of the user terminal 20 periodically acquires biological condition information related to biological conditions such as body temperature, blood pressure, heart rate, and breath alcohol concentration from the measurement terminal. The control unit 204 of the user terminal 20 transmits the acquired biological condition information to the server 10 together with a user ID 2011. The control unit 104 of the server 10 stores the received biological condition information and user ID 2011 in the items of state data and user ID in the state table 1017. As a result, the user's biological information is stored in the state table 1017 in association with the user. The status table 1017 stores the user's biometric information in real time.

[0048] <Authentication process> The authentication process is a process for determining whether or not the user should be authenticated based on whether or not the user satisfies possession conditions, which are conditions related to possessions of the user, and biometric conditions, which are conditions related to the biometric state.

[0049] <Authentication process overview> The authentication process is a series of steps in which conditions such as possession conditions and biometric conditions are obtained based on the user's operation of a device or movement to a specified area, possession information about the user's possessions is obtained, biometric information about the user's biometric status is obtained, and whether or not authentication should be granted is determined based on whether the possession information and biometric information satisfy the conditions, and the determination result is output as the authentication result. In the present disclosure, the authentication process is configured to be executed by the server 10, but the authentication process may be configured such that the user terminal 20 or the authentication terminal 30 executes all or part of the steps included in the authentication process.

[0050] <Authentication process details> The authentication process will be described in detail below.

[0051] <Authentication start process> In step S101, the user operates the input device 206 of the user terminal 20 to execute the application program 2012 for executing authentication processing.

[0052] The authentication unit 1042 of the server 10 may receive and accept either an operation request including a device ID or a movement request including an area ID, or both at the same time.

[0053] <Authentication Start Processing (First Embodiment)> In step S101, the authentication unit 1042 of the server 10 executes an operation receiving step of receiving an operation request for operating (including driving) a predetermined device from a user. Specifically, the control unit 204 of the user terminal 20 obtains information (device information) about one or more devices that the user can operate from a server (not shown) or the like, and displays a list of the information on the display 2081 of the user terminal 20. For example, based on the position information of the user terminal 20, information on one or more mobility vehicles (mobility information) that the user is riding in or in the vicinity may be obtained, and displayed as a list on the display 2081 of the user terminal 20. The user operates the input device 206 of the user terminal 20, and selects device information to be operated from one or more pieces of device information displayed on the display 2081. For example, the user selects a predetermined piece of mobility information from one or more pieces of mobility information displayed on the display 2081 as a mobility to be driven. The control unit 204 of the user terminal 20 transmits an operation request including device identification information (device ID) that identifies the selected device information or mobility information, and a user ID 2011, to the server 10. The authentication unit 1042 of the server 10 receives and accepts the operation request including the device ID and user ID 2011.

[0054] <Authentication Start Processing (Second Embodiment)> In step S101, the authentication unit 1042 of the server 10 executes a movement receiving step of receiving a movement request for moving to a predetermined area from a user. Specifically, the user moves in front of a gate 3083 for moving into a predetermined room while carrying the user terminal 20. Note that the user may move not only in front of the gate 3083, but also in front of a corridor for moving into a predetermined room, or in front of a door for moving into a predetermined area, etc.

[0055] The control unit 204 of the user terminal 20 or the authentication unit 1042 of the server 10 identifies the area ID of a predetermined area to which the user is to move. The control unit 204 of the user terminal 20 may identify the area ID of the specified area to which the user intends to move by communicating with an authentication terminal 30 located near a gate 3083 or the like for moving to the specified area. The control unit 204 of the user terminal 20 may use the camera 2061 of the user terminal 20 to photograph a two-dimensional barcode such as a QR code (registered trademark) placed near a gate 3083, etc., and analyze the photographed image data to identify the area ID of a specific area to which the user is moving. The control unit 204 of the user terminal 20 may identify the area ID of a predetermined area to which the user is moving, based on the position information acquired by the position information sensor 2063. The control unit 204 of the user terminal 20 periodically transmits location information acquired by the location information sensor 2063 of the user terminal 20 to the server 10. The authentication unit 1042 of the server 10 may identify the area ID of a predetermined area to which the user is moving based on the location information received from the user terminal 20 and based on a table (not shown) in which location information and area IDs are associated with each other. The control unit 204 of the user terminal 20 acquires information (area information) about one or more areas near the user based on the position information acquired by the position information sensor 2063, and displays a list of the area information on the display 2081 of the user terminal 20. The user operates the input device 206 of the user terminal 20 to select area information of a predetermined region to which the user intends to move from the one or more pieces of area information displayed on the display 2081. The control unit 204 of the user terminal 20 identifies the area ID associated with the selected area information.

[0056] The control unit 204 of the user terminal 20 transmits a movement request including the identified area ID and user ID 2011 to the server 10. The authentication unit 1042 of the server 10 receives and accepts the movement request including the area ID and user ID 2011.

[0057] <Condition Acquisition Process (Possession Conditions)> In step S102, the authentication unit 1042 of the server 10 executes a possession condition acquisition step of acquiring possession conditions including conditions related to items that the user should possess. The possession condition acquisition step executes a step of acquiring possession conditions including at least one of one or more information processing terminals, one or more documents, and one or more containers that the user should possess. Specifically, when the authentication unit 1042 of the server 10 receives an operation request including a device ID, it searches the device ID item in the device table 1014 based on the device ID and acquires a condition ID. Note that when the authentication unit 1042 of the server 10 receives a movement request without receiving an operation request including a device ID, it may skip this process.

[0058] <Condition acquisition process (biological conditions)> In step S102, the authentication unit 1042 of the server 10 executes a biological condition acquisition step of acquiring biological conditions including conditions related to the biological state of the user. The biological condition acquisition step executes a step of acquiring biological conditions including at least one of the user's body temperature, blood pressure, heart rate, and breath alcohol concentration. Specifically, when the authentication unit 1042 of the server 10 receives a movement request including an area ID, it searches the area ID item of the area table 1015 based on the area ID and acquires a condition ID. Note that when the authentication unit 1042 of the server 10 receives an operation request without receiving a movement request including an area ID, it may skip this process.

[0059] <Condition acquisition process (schedule)> In step S102, a possession condition acquisition step executes a step of acquiring at least one of a possession condition and a biological condition specified based on schedule information stored in association with the user. Specifically, the authentication unit 1042 of the server 10 inquires of a table (not shown) or an external server that stores schedule information related to the user's daily plans based on the received user ID 2011, and acquires schedule information related to the user's plans for the day on which the condition acquisition process was executed. Note that if schedule information is not stored in association with the user, this process may be skipped.

[0060] For example, the user's schedule information may include a driving schedule for a specific automobile, construction machine, heavy machine, etc. (mobility). In this case, the authentication unit 1042 of the server 10 acquires and identifies one or more device identification information (device IDs) that identify the mobility to be driven by the user in the driving task included in the schedule. The authentication unit 1042 of the server 10 searches the device ID item of the device table 1014 based on the device ID, and acquires a condition ID. In this case, the conditions for a user to drive a mobility vehicle are that the user possesses the license or driving permit required to drive the mobility vehicle, and that the user's physical condition, such as the alcohol concentration in the breath, is within a specified range (not intoxicated).

[0061] For example, the schedule information of the user may include meeting information about a meeting to be held in a specific room (conference room). In this case, the authentication unit 1042 of the server 10 acquires and identifies one or more area identification information (area IDs) that identify the room the user is scheduled to enter from the meeting information included in the schedule. The authentication unit 1042 of the server 10 searches the area ID item of the area table 1015 based on the area ID, and acquires a condition ID. In this case, the conditions for a user to move to the conference room are that they possess the materials, stationery, information terminal, etc. necessary to participate in the conference room, and that their physical condition, such as body temperature, is within a specified range (no fever, etc.).

[0062] The authentication unit 1042 of the server 10 searches the item of the condition ID in the condition table 1013 based on the acquired one or more condition IDs, and acquires the condition type and condition data. As a result, the authentication unit 1042 of the server 10 acquires conditions related to either one or both of the possession condition and the biometric condition.

[0063] In step S103, the authentication unit 1042 of the server 10 executes an article information acquisition step of acquiring one or more pieces of article information that identifies one or more articles possessed by the user. Specifically, the authentication unit 1042 of the server 10 searches the user ID item in the possession table 1016 based on the received user ID 2011, and acquires the items of item ID, item type, and item name. In other words, the authentication unit 1042 of the server 10 acquires possession information regarding the items possessed by the user, that is, what items the user possesses.

[0064] In step S104, the authentication unit 1042 of the server 10 executes a biometric information acquisition step of acquiring biometric information relating to the biometric condition of the user. Specifically, the authentication unit 1042 of the server 10 searches the user ID item of the status table 1017 based on the received user ID 2011, and acquires the status data item. That is, the authentication unit 1042 of the server 10 acquires biometric information related to the biometric status of the user.

[0065] The authentication unit 1042 of the server 10 may be configured to acquire the latest piece of personal item information or biometric information at the update date and time from among the personal item information and biometric information stored in association with the user ID 2011, or acquire a piece of personal item information or biometric information within a predetermined period from the current date and time (the date and time when the authentication process was executed). This allows the authentication unit 1042 of the server 10 to execute the authentication process based on the personal item information on the items carried by the user and the biometric information on the biometric condition of the user before and after the date and time when the authentication process was executed. The authentication unit 1042 of the server 10 can avoid the authentication process based on old personal item information and old biometric information. If the authentication unit 1042 of the server 10 is unable to acquire the user's belongings information and biometric information, the authentication unit 1042 does not permit authentication in step S105.

[0066] In step S105, the authentication unit 1042 of the server 10 determines whether or not one or more conditions acquired in step S102 are satisfied, and permits authentication if all conditions are satisfied. On the other hand, does not permit authentication if all conditions are not satisfied. Note that a configuration may be adopted in which authentication is permitted if some of the conditions are satisfied.

[0067] In step S105, the authentication unit 1042 of the server 10 executes an authentication step in which a predetermined authentication process is performed for the user based on the possession conditions acquired in the possession condition acquisition step and one or more pieces of item information acquired in the item information acquisition step. The authentication step includes steps including a step of comparing the possession conditions with one or more item information, and allowing authentication if it is determined that the user is possessing an item that should be possessed by the user, and a step of not allowing authentication if it is determined that the user is not possessing an item that should be possessed by the user.

[0068] Specifically, when the condition acquired in step S102 is a possession condition, the authentication unit 1042 of the server 10 compares the possession condition with the possession information acquired in step S103. For example, if the condition data of the possession condition is "two items with item ID M001" and "one item with item ID M002", the authentication unit 1042 of the server 10 searches for the item IDs included in the possession information acquired in step S103, and determines whether the user possesses two or more items with item ID M001 or one or more items with item ID M002. If the authentication unit 1042 of the server 10 determines that the user possesses the items specified in the condition data, it allows authentication. On the other hand, if the authentication unit 1042 of the server 10 determines that the user does not possess the items specified in the condition data, it does not allow authentication. Similarly, the condition data may be defined based on the item name and item type instead of the item ID. In this case, the authentication unit 1042 of the server 10 allows authentication when it determines that the user possesses an item with the item name and item type defined in the condition data by comparing the item name and item type of the item possessed by the user acquired in step S103 with the condition data. On the other hand, the authentication unit 1042 of the server 10 does not allow authentication when it determines that the user does not possess an item with the item name and item type defined in the condition data.

[0069] In step S105, an authentication step executes a step of executing a predetermined authentication process for the user based on the biometric conditions acquired in the biometric condition acquisition step and the biometric information acquired in the biometric information acquisition step. The authentication step includes steps of comparing the biometric conditions with the biometric information, and permitting authentication if it is determined that the biometric information satisfies the biometric conditions, and not permitting authentication if it is determined that the biometric information does not satisfy the biometric conditions.

[0070] Specifically, when the condition acquired in step S102 is a biometric condition, the authentication unit 1042 of the server 10 compares the biometric condition with the biometric information acquired in step S104. For example, if the condition data of the biological condition is "breath alcohol concentration is A% or less," the authentication unit 1042 of the server 10 compares the breath alcohol concentration included in the biological information acquired in step S104 and determines whether the user's breath alcohol concentration is A% or less. If the authentication unit 1042 of the server 10 determines that the user has a breath alcohol concentration specified in the condition data, it allows authentication. On the other hand, if the authentication unit 1042 of the server 10 determines that the user does not have a breath alcohol concentration specified in the condition data, it does not allow authentication.

[0071] The authentication unit 1042 of the server 10 may compare the acquisition date and time (update date and time) of the possession information and biometric information with the current date and time, and if the acquisition date and time are older than the current date and time by a predetermined period or more, may not permit authentication regardless of the contents of the possession information and biometric information. For example, if the possession information and biometric information are older than a predetermined period, the authentication unit 1042 of the server 10 does not permit authentication because they are not the possession information and biometric information of the current user.

[0072] The authentication unit 1042 of the server 10 stores the user ID 2011 and the authentication result in the user ID and authentication result items of the determination table 1018. The authentication result includes information indicating the determined authentication permission (permitted or not permitted), the device ID accepted in the authentication start process (first embodiment) of step S101, and the area ID accepted in the authentication start process (second embodiment) of step S101. The authentication unit 1042 of the server 10 transmits the authentication result to the user terminal 20.

[0073] In addition, if the authentication result includes information indicating that authentication is not permitted, the authentication result may include the reason why authentication was not permitted or information necessary to permit authentication. For example, in the judgment process of step S105, if the authentication unit 1042 of the server 10 determines that the user does not possess an item that should be possessed by the user, the authentication result includes one or more item information identifying one or more items that the user does not possess among the items that the user should possess. For example, if the authentication unit 1042 of the server 10 determines in the determination process of step S105 that the biometric information does not satisfy the biometric conditions, the authentication result includes the biometric information that the user does not satisfy among the biometric conditions that the user should satisfy.

[0074] As a result, in the authentication start process (first embodiment) in step S101, when an operation request to operate a specific device is received from a user, the authentication step executes authentication processing regarding the operation of the specific device for the user in accordance with the operation request received in the operation reception step. As a result, in the authentication start process (second embodiment) in step S101, when a movement request to move to a specified area is received from the user, the authentication step executes authentication processing for the user to move to the specified area in response to the movement request received in the movement reception step.

[0075] <Authentication Result Output Processing (First Embodiment)> In step S106, the control unit 204 of the user terminal 20 executes a result output step of outputting, on a display, an image including an authentication result relating to the predetermined authentication process executed in the authentication step. The control unit 204 of the user terminal 20 displays the received authentication result on the display 2081 of the user terminal 20, and presents it to the user. For example, when the authentication result received from the server 10 includes information indicating that authentication has been permitted, the control unit 204 of the user terminal 20 generates a two-dimensional barcode such as a QR code (registered trademark) in which the information indicating that authentication has been permitted, the device ID and area ID included in the authentication result are encoded, and displays it on the display 2081 of the user terminal 20.

[0076] The user causes the camera 3061 of the authentication terminal 30 to capture an image of the authentication result displayed on the display 2081 of the user terminal 20. The control unit 304 of the authentication terminal 30 decodes the captured QR code (registered trademark) and acquires and identifies information related to the authentication result.

[0077] In the authentication result output process (first embodiment), the authentication process is executed in advance by the user terminal 20 and the server 10, so that the processing time of the authentication process in the authentication terminal 30 can be shortened. For example, when the authentication terminal 30 is an information processing terminal for restricting entry to a specific room, and multiple users plan to enter the room, each user executes the authentication process in advance using his / her own user terminal 20. Each user can complete the authentication process by simply presenting a QR code (registered trademark) relating to the authentication result displayed on the display 2081 of the user terminal 20 to the camera 3061 of the authentication terminal 30. Specifically, a gate for entering the room is opened. In this way, the authentication process can be executed efficiently in the authentication service according to the present disclosure.

[0078] <Authentication Result Output Processing (Second Embodiment)> In step S106, the authentication unit 1042 of the server 10 executes a result transmission step of transmitting an authentication result relating to the predetermined authentication process executed in the authentication step to an external computer different from the computer. Specifically, the control unit 204 of the user terminal 20 transmits the received authentication result to the authentication terminal 30 via wireless communication means such as an RFID tag, Bluetooth (registered trademark), or WiFi. The control unit 304 of the authentication terminal 30 acquires and identifies information related to the authentication result.

[0079] <Authentication permission process> In step 106, if the acquired authentication result includes information indicating that authentication has been permitted, the control unit 304 of the authentication terminal 30 permits the user to operate the device identified based on the device ID included in the authentication result. For example, the control unit 304 of the authentication terminal 30 executes control to remove restrictions on the user's operation of the device. For example, when the device is a mobility device, the control unit 304 of the authentication terminal 30 executes control to start up the mobility device. For example, when the device is a mobility, the control unit 304 of the authentication terminal 30 executes control to open a key case or the like (not shown) that stores a key for starting the mobility, and to hand over the key to the user. The user receives the key from the key case or the like, starts the mobility, and becomes able to drive the mobility.

[0080] If the acquired authentication result includes information indicating that authentication has been permitted, the control unit 304 of the authentication terminal 30 permits the user to move to an area identified based on the area ID included in the authentication result. For example, the control unit 304 of the authentication terminal 30 executes control to open a specific gate 3083 associated with one or more area IDs, thereby allowing the user to move inside the gate 3083 (inside the area identified based on the area ID). For example, when the specified area is a room, the control unit 304 of the authentication terminal 30 unlocks the door for entering the room, allowing the user to enter the room by opening the door.

[0081] <Authentication prohibition process> In step S106, if authentication is not permitted in the authentication step, the authentication unit 1042 of the server 10 executes an authentication proposal step to present to the user the reason why authentication was not permitted for the user or information necessary to permit authentication. Specifically, if the authentication result received from the server 10 does not include information indicating that authentication has been permitted, the control unit 204 of the user terminal 20 notifies the user that authentication has failed by displaying a message or the like indicating that authentication has failed on the display 2081 of the user terminal 20. Furthermore, the control unit 204 of the user terminal 20 displays on the display 2081 of the user terminal 20 a message or the like indicating the reason why authentication was not permitted, which is included in the authentication result, or information necessary to permit authentication. This allows the user to check the reason why authentication was not permitted for the user, or the conditions required for authorization, etc.

[0082] In step S106, if authentication is not permitted in the authentication step, the control unit 204 of the user terminal 20 executes an item presentation step in which one or more item information items identifying one or more items that the user does not possess among the items that the user should possess are presented to the user. Specifically, the control unit 204 of the user terminal 20 displays on the display 2081 of the user terminal 20 a message or the like indicating one or more item information identifying one or more items that the user does not possess among the items that the user should possess and are included in the authentication result. This allows the user to check what items, among those that the user does not currently possess, are required to possess in order to obtain authorization for authentication. For example, the user can obtain authorization for authentication by possessing an item required to obtain authorization for authentication.

[0083] In step S106, if authentication is not permitted in the authentication step, the authentication unit 1042 of the server 10 executes a status presenting step of presenting to the user biometric information that the user does not satisfy among the biometric conditions that the user should satisfy. Specifically, the control unit 204 of the user terminal 20 displays on the display 2081 of the user terminal 20 a message or the like indicating the biometric information that the user does not satisfy among the biometric conditions that the user should satisfy and that are included in the authentication result. This allows the user to check what kind of biometric information is required to obtain permission for authentication. For example, the user can obtain permission for authentication by obtaining a biometric state required for obtaining permission for authentication.

[0084] <Basic computer hardware configuration> 13 is a block diagram showing the basic hardware configuration of a computer 90. The computer 90 includes at least a processor 901, a main storage device 902, an auxiliary storage device 903, and a communication IF 991 (interface). These are electrically connected to each other by a communication bus 921.

[0085] The processor 901 is hardware for executing an instruction set described in a program, and is composed of an arithmetic unit, a register, a peripheral circuit, and the like.

[0086] The main memory device 902 is for temporarily storing programs, data to be processed by the programs, etc. For example, it is a volatile memory such as a DRAM (Dynamic Random Access Memory).

[0087] The auxiliary storage device 903 is a storage device for saving data and programs, such as a flash memory, a hard disk drive (HDD), a magneto-optical disk, a CD-ROM, a DVD-ROM, or a semiconductor memory.

[0088] The communication IF 991 is an interface for inputting and outputting signals for communicating with other computers via a network using a wired or wireless communication standard. The network is composed of the Internet, a LAN, various mobile communication systems constructed by wireless base stations, etc. For example, the network includes 3G, 4G, 5G mobile communication systems, LTE (Long Term Evolution), wireless networks that can connect to the Internet via a specified access point (e.g., Wi-Fi (registered trademark)), etc. In the case of wireless connection, communication protocols include, for example, Z-Wave (registered trademark), ZigBee (registered trademark), Bluetooth (registered trademark), etc. In the case of wired connection, the network also includes a network that is directly connected by a USB (Universal Serial Bus) cable or the like.

[0089] It should be noted that the computer 90 can be virtually realized by distributing all or part of each hardware configuration among multiple computers 90 and connecting them together via a network. In this way, the computer 90 is a concept that includes not only a computer 90 housed in a single housing or case, but also a virtualized computer system.

[0090] <Basic functional configuration of computer 90> A description will now be given of the functional configuration of a computer realized by the basic hardware configuration (FIG. 13) of a computer 90. The computer comprises at least the functional units of a control unit, a storage unit, and a communication unit.

[0091] The functional units of the computer 90 can also be realized by distributing all or part of the functional units among multiple computers 90 connected to each other via a network. The computer 90 is a concept that includes not only a single computer 90 but also a virtualized computer system.

[0092] The control unit is realized by the processor 901 reading out various programs stored in the auxiliary storage device 903, expanding the programs in the main storage device 902, and executing processes according to the programs. The control unit can realize functional units that perform various information processing depending on the type of program. In this way, the computer is realized as an information processing device that performs information processing.

[0093] The storage unit is realized by a main storage device 902 and an auxiliary storage device 903. The storage unit stores data, various programs, and various databases. Furthermore, the processor 901 can secure a storage area corresponding to the storage unit in the main storage device 902 or the auxiliary storage device 903 in accordance with a program. Furthermore, the control unit can cause the processor 901 to execute processes of adding, updating, and deleting data stored in the storage unit in accordance with the various programs.

[0094] The term database refers to a relational database, which is used to manage sets of data called masters and tables in a tabular format structurally defined by rows and columns, by associating them with each other. In a database, a table is called a table or master, a column in a table is called a column, and a row in a table is called a record. In a relational database, relationships between tables and masters can be set and associated. Usually, a column that serves as a primary key for uniquely identifying a record is set in each table and each master, but setting a primary key in a column is not essential. The control unit can cause the processor 901 to add, delete, or update records in a specific table or master stored in the storage unit according to various programs. Furthermore, by storing data, various programs, and various databases in the storage unit, it can be considered that the information processing device and information processing system according to the present disclosure have been manufactured.

[0095] In addition, the database and master in this disclosure may include any data structure (such as a list, a dictionary, an associative array, or an object) in which information is structurally defined. The data structure also includes data that can be considered as a data structure by combining data with a function, class, method, or the like written in any programming language.

[0096] The communication unit is realized by the communication IF 991. The communication unit realizes a function of communicating with other computers 90 via a network. The communication unit can receive information transmitted from other computers 90 and input the information to the control unit. The control unit can cause the processor 901 to execute information processing on the received information in accordance with various programs. In addition, the communication unit can transmit information output from the control unit to other computers 90.

[0097] <Additional Notes> The matters described in the above embodiments will be supplemented below.

[0098] (Appendix 1) An authentication program that causes a computer having a processor and a memory unit to execute a specified authentication process, wherein the processor executes a possession condition acquisition step (S102) in which it acquires possession conditions including conditions regarding items that the user should possess, an item information acquisition step (S103) in which it acquires one or more item information identifying one or more items possessed by the user, and an authentication step (S105) in which it executes a specified authentication process for the user based on the possession conditions acquired in the possession condition acquisition step and the one or more item information acquired in the item information acquisition step. This allows authentication processing to be performed according to whether or not the user is carrying an item that should be carried by the user. For example, when a user operates a specific device, the user can be permitted to operate the specific device only if the user has an item required for the operation.

[0099] (Appendix 2) The authentication step (S105) is a step including a step of comparing the possession conditions with one or more item information, and allowing authentication if it is determined that the user is carrying an item that should be carried by the user, and a step of not allowing authentication if it is determined that the user is not carrying an item that should be carried by the user, the authentication program described in Appendix 1. As a result, if the user is carrying an item that should be carried by the user, authentication is permitted, and if the user is not carrying an item that should be carried by the user, authentication is not permitted. For example, when a user performs a task related to a specific device, the user can be permitted to perform the task only if the user possesses an item necessary to perform the task.

[0100] (Appendix 3) An authentication program as described in Appendix 2, in which the processor executes an item presentation step (S106) of presenting to the user, if authentication is not permitted in the authentication step, one or more items of item information identifying one or more items that the user does not possess among the items that the user should possess. This allows the user to check what items, among those that the user does not currently possess, he or she needs to possess in order to obtain authorization for authentication. For example, a user can obtain authorization for authentication by possessing an item required for obtaining authorization for authentication.

[0101] (Appendix 4) The authentication program of Appendix 2, wherein the possession condition acquisition step (S102) is a step of acquiring possession conditions including at least one of one or more information processing terminals, one or more documents, and one or more containers that the user should possess. For example, if a user does not have necessary items such as an information processing terminal, documents, or containers when moving to a specified area, the user may not be permitted to move to the specified area. For example, if a user is planning to attend a certain conference, but forgets an information processing terminal, documents, bag, or other container that is necessary for attending the conference, the user may not be permitted to attend the conference. In addition, the details of the forgotten items may be notified and presented to the user.

[0102] (Appendix 5) An authentication program as described in Appendix 1, which executes a biometric condition acquisition step (S102) of acquiring biometric conditions including conditions related to the user's biometric condition, and a biometric information acquisition step (S104) of acquiring biometric information related to the user's biometric condition, and an authentication step (S105) of executing a predetermined authentication process for the user based on the biometric conditions acquired in the biometric condition acquisition step and the biometric information acquired in the biometric information acquisition step. As a result, authentication processing is executed according to whether or not the user satisfies predetermined biometric conditions. For example, when a user operates a specific device, the user can be permitted to operate the specific device only if the user satisfies a biological condition, such as a health condition, required for the user to operate the device.

[0103] (Appendix 6) The authentication program described in Appendix 5, wherein the authentication step (S105) includes a step of comparing biometric conditions with the biometric information, and allowing authentication if it is determined that the biometric information satisfies the biometric conditions, and a step of not allowing authentication if it is determined that the biometric information does not satisfy the biometric conditions. This allows the user to operate a specific device only if the user satisfies the biometric conditions, such as health condition, required for the user to operate the device.

[0104] (Appendix 7) The authentication program according to claim 6, wherein the processor executes a status presentation step (S106) of presenting to the user biometric information that the user does not satisfy among the biometric conditions that the user should satisfy if authentication is not permitted in the authentication step. This allows the user to check what kind of biometric information is required to obtain permission for authentication. For example, the user can obtain permission for authentication by attaining a biometric state required for obtaining permission for authentication.

[0105] (Appendix 8) The authentication program according to claim 6, wherein the biometric condition acquisition step (S102) is a step of acquiring a biometric condition including at least one of the user's body temperature, blood pressure, heart rate, and breath alcohol concentration. This makes it possible to permit a user to operate a specific device only if the user's health state satisfies a specific condition for operating the device. For example, if the user's health condition does not meet the safety standards for operating the device, the user may not be permitted to operate the device.

[0106] (Appendix 9) An authentication program as described in Appendix 1, in which a processor executes an operation receiving step (S101) of receiving an operation request from a user to operate a specified device, and an authentication step (S105) is a step of executing authentication processing regarding the operation of the specified device for the user in response to the operation request received in the operation receiving step. This makes it possible to permit a user to operate a specific device only when the user is carrying an item required for the operation. For example, a user can be permitted to operate a specific device only if he or she possesses a specific license card, driver's license, ID card, or the like.

[0107] (Appendix 10) 10. The authentication program according to claim 9, wherein the operation receiving step (S101) is a step of receiving an operation request for operating a predetermined device. This allows a user to be permitted to drive a specified vehicle such as a passenger car, commercial vehicle, train, airplane, drone, bicycle, motorcycle, etc. only if the user possesses the items necessary for such driving. For example, a user may be permitted to drive a specific vehicle only if he or she possesses a specific license card, driver's license, ID card, or the like.

[0108] (Appendix 11) An authentication program as described in Appendix 1, in which a processor executes a movement reception step (S101) in which a movement request to move to a specified area is received from a user, and an authentication step (S105) is a step in which an authentication process is executed for the user to move to the specified area in response to the movement request received in the movement reception step. This allows a user to be permitted to move to a specified area only if the user is carrying the items necessary for moving to the specified area. For example, only if a user has a specified identification document, driver's license, ID card, or the like, entry or admission to a specified area, room, or the like can be permitted.

[0109] (Appendix 12) 2. The authentication program according to claim 1, further comprising: a result transmitting step (S106) of transmitting an authentication result relating to a predetermined authentication process executed in the authentication step to an external computer different from the computer. In this way, the external computer can receive a notification that authentication of the user has been permitted. For example, if authentication of the user has been permitted, the external computer can provide a predetermined service to the user. Furthermore, a user can authenticate himself / herself using his / her own information processing terminal and transmit the authentication result to an external computer, thereby omitting the authentication process in the external computer. For example, the time required for the authentication process in the external computer can be saved, and the authentication process can be executed efficiently.

[0110] (Appendix 15) The authentication program according to claim 1, further comprising: a result output step (S106) of outputting, to a display, an image including an authentication result relating to a predetermined authentication process executed in the authentication step. This allows the user to check the authentication result on an output device such as a display. For example, the user can check the authentication result displayed on his / her own information processing terminal, and can also present the authentication result to a third party. In addition, in the case of a specific device such as an automobile, heavy machinery, a bus, or a train, the user may be permitted to operate the device based on the output authentication result screen.

[0111] (Appendix 16) An authentication program as described in Appendix 1, in which the processor executes an authentication proposal step (S106) of, if authentication is not permitted in the authentication step, presenting to the user the reason why the authentication was not permitted or information necessary to permit the authentication. This allows the user to check the reason why authentication was not permitted for the user, or the conditions required for authorization, etc. [Explanation of symbols]

[0112] 1 system, 10 server, 101 memory unit, 104 control unit, 106 input device, 108 output device, 20 user terminal, 201 memory unit, 204 control unit, 206 input device, 208 output device, 30 authentication terminal, 301 memory unit, 304 control unit, 306 input device, 308 output device

Claims

1. An authentication program for causing a computer having a processor and a storage unit to execute a predetermined authentication process, The processor, a possession condition acquisition step of acquiring possession conditions including conditions regarding items that the user should possess; An item information acquisition step of acquiring one or more item information identifying one or more items possessed by the user; an authentication step of executing a predetermined authentication process for the user based on the possession condition acquired in the possession condition acquisition step and the one or more pieces of item information acquired in the item information acquisition step; An authentication program that runs.

2. The authentication step includes comparing the possession condition with the one or more pieces of item information, permitting authentication when it is determined that the user is carrying an item that the user should carry; not permitting authentication when it is determined that the user does not possess an item that the user should possess; The steps include: The authentication program according to claim 1.

3. The processor, an item presenting step of presenting, to the user, one or more pieces of item information that identify one or more items that the user does not possess among items that the user should possess in the case where authentication is not permitted in the authentication step; Execute The authentication program according to claim 2.

4. The possession condition acquisition step is a step of acquiring the possession condition including at least one of one or more information processing terminals, one or more documents, and one or more containers that the user should possess. The authentication program according to claim 2.

5. a biometric condition acquisition step of acquiring a biometric condition including a condition related to a biometric state of a user; a biometric information acquiring step of acquiring biometric information relating to the biometric condition of the user; Run the authentication step is a step of executing the predetermined authentication process for the user based on the biometric condition acquired in the biometric condition acquisition step and the biometric information acquired in the biometric information acquisition step; The authentication program according to claim 1.

6. The authentication step includes comparing the biometric condition with the biometric information, permitting authentication when it is determined that the biometric information satisfies the biometric condition; not permitting authentication when it is determined that the biometric information does not satisfy the biometric condition; The steps include: The authentication program according to claim 5.

7. The processor, a status presenting step of presenting to the user, when authentication is not permitted in the authentication step, the biometric information that is not satisfied by the user among the biometric conditions that the user should satisfy; Execute The authentication program according to claim 6.

8. The biological condition acquiring step is a step of acquiring the biological condition including at least one of a body temperature, a blood pressure, a heart rate, and an alcohol concentration in the breath of the user. The authentication program according to claim 6.

9. The processor, an operation receiving step of receiving an operation request for operating a predetermined device from the user; Run the authentication step is a step of executing an authentication process for the user regarding the operation of the predetermined device in response to the operation request accepted in the operation acceptance step; The authentication program according to claim 1.

10. The operation receiving step is a step of receiving an operation request for operating the predetermined device. The authentication program according to claim 9.

11. The processor, a movement receiving step of receiving a movement request from the user to move to a predetermined area; Run The authentication step is a step of executing an authentication process for the user to move to the predetermined area in response to the movement request accepted in the movement acceptance step. The authentication program according to claim 1.

12. The processor, a result transmission step of transmitting an authentication result regarding the predetermined authentication process executed in the authentication step to an external computer different from the computer; Execute The authentication program according to claim 1.

13. The possession condition acquisition step is a step of acquiring the possession condition specified based on schedule information associated with the user and stored. The authentication program according to claim 1.

14. the biometric condition acquiring step is a step of acquiring the biometric condition identified based on schedule information associated with the user and stored. The authentication program according to claim 5.

15. The processor, a result output step of outputting, on a display, an image including an authentication result relating to the predetermined authentication process executed in the authentication step; Execute The authentication program according to claim 1.

16. The processor, an authentication suggestion step of, when authentication is not permitted in the authentication step, presenting to the user a reason why the authentication was not permitted for the user or information required to permit the authentication; Execute The authentication program according to claim 1.

17. An information processing device including a processor and a storage unit, The processor executes an authentication program according to any one of claims 1 to 16. Information processing device.

18. An information processing system including an information processing device having a processor and a storage unit, The processor executes an authentication program according to any one of claims 1 to 16. Information processing system.

19. An information processing method executed by a computer including a processor and a storage unit, The computer executes an authentication program according to any one of claims 1 to 16. Information processing methods.

Images