Terminal, information processing method and program

Abstract

To improve the usability and security of authentication processing for electronic signature or the like.SOLUTION: An information processing device comprises: an acquisition part which acquires first individual specification information and terminal specification information from a portable recording medium where the first individual specification information and terminal specification information are recorded; an authentication part which uses the first individual specification information and terminal specification information acquired from the recording medium to authenticate second individual specification information that a sensor mounted on a terminal acquires and terminal specification information on the terminal; and an execution part which executes predetermined processing when the authentication is successful.SELECTED DRAWING: Figure 3

Description

[Technical field]

[0001] The present invention relates to an information processing device, an information processing method, and a program, and more particularly to an information processing device, an information processing method, and a program for electronic procedures. [Background technology]

[0002] In recent years, the digitization of documents has become widespread. Electronic signatures are used in documents to authenticate the identity of the person and to prove that the document has not been tampered with. In the unlikely event that a key is stolen, it is known to generate an electronic signature based on face recognition, as described in Patent Document 1.

[0003] Furthermore, Patent Document 2 describes an identity verification system in which a user photographs their own identity verification document with the camera on their mobile device to obtain an identity verification image, which is then stored on the mobile device as a match image; when using a service, the camera obtains an image of the user's face, which is matched against a match layer and transmitted to an identity authentication server; and the identity authentication server permits use of the service based on the match result.

[0004] Patent document 3 describes a system that provides services using membership cards, in which card ID information and terminal ID are associated with each other and registered and updated in a database so that services can be received in the same way using a mobile terminal device other than the membership card. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] JP 2001-265738 A [Patent Document 2] JP 2020-87461 A [Patent Document 3] JP 2007-80006 A Summary of the Invention [Problem to be solved by the invention]

[0006] However, electronic document submission is still limited to a limited number of people in general. This is thought to be because many people feel uncomfortable using computers or mobile devices and are unsure about security, so they believe that submitting paper documents is safer and easier.

[0007] The present invention has been made in view of the above circumstances, and an object of the present invention is to improve the usability and security of authentication processing such as electronic signatures. [Means for solving the problem]

[0008] In order to solve the above-mentioned problems, each aspect of the present invention employs the following configuration.

[0009] The first aspect relates to an information processing device. An information processing device according to a first aspect includes: an acquisition means for acquiring the first individual identifying information and the terminal identifying information from a portable recording medium on which the first individual identifying information and the terminal identifying information are recorded; an authentication means for authenticating second individual identifying information acquired by a sensor mounted on the terminal and the terminal identifying information of the terminal by using the first individual identifying information and the terminal identifying information acquired from the recording medium; and an execution means for executing a predetermined process when the authentication is successful.

[0010] A second aspect relates to an information processing method implemented by at least one computer. An information processing method according to a second aspect of the present invention comprises: An information processing device, Acquire the first individual identifying information and the terminal identifying information from a portable recording medium on which the first individual identifying information and the terminal identifying information are recorded; authenticating second individual identifying information acquired by a sensor mounted on the terminal and the terminal identifying information of the terminal using the first individual identifying information and the terminal identifying information acquired from the recording medium; When the authentication is successful, executing a predetermined process.

[0011] Another aspect of the present invention may be a program for causing at least one computer to execute the method of the second aspect, or a computer-readable recording medium having such a program recorded thereon. This recording medium includes a non-transitory tangible medium. The computer program includes computer program code which, when executed by a computer, causes the computer to carry out the information processing method on an information processing device.

[0012] Any combination of the above components, and any transformation of the present invention into a method, device, system, recording medium, computer program, etc., are also effective as aspects of the present invention.

[0013] Furthermore, the various components of the present invention do not necessarily have to be independent entities, but may be formed as a single member by multiple components, one component may be formed from multiple components, one component may be a part of another component, or part of one component may overlap with part of another component, etc.

[0014] In addition, although the method and computer program of the present invention describe a number of steps in a sequential order, the order does not limit the order in which the steps are executed. Therefore, when implementing the method and computer program of the present invention, the order of the steps can be changed as long as it does not affect the content.

[0015] Furthermore, the steps of the method and computer program of the present invention are not limited to being executed at different timings, and therefore a step may occur while another step is being executed, or the execution timing of a step may overlap partially or entirely with the execution timing of another step, etc. Effect of the Invention

[0016] According to the above aspects, it is possible to improve the usability and security of authentication processing such as electronic signatures. [Brief description of the drawings]

[0017] [Figure 1] 1 is a diagram conceptually showing the system configuration of an electronic procedure system according to an embodiment of the present invention; [Diagram 2] FIG. 2 is a block diagram illustrating a hardware configuration of a computer that realizes an information processing device according to an embodiment of the present invention. [Diagram 3] 1 is a functional block diagram showing a logical configuration of an information processing device according to an embodiment of the present invention; [Figure 4] FIG. 1 is a diagram for explaining an identification card equipped with an IC chip. [Diagram 5] FIG. 2 is a diagram showing an example of a data structure of a memory in an IC chip of an identification card. [Figure 6] 5 is a flowchart illustrating an example of the operation of the information processing device according to the present embodiment. [Figure 7] 1 is a functional block diagram showing a logical configuration of an information processing apparatus according to an embodiment of the present invention. [Figure 8] FIG. 1 is a diagram showing an example of a usage flow of an electronic procedure system. [Figure 9] FIG. 2 is a diagram for explaining a flow of applying for issuance of a digital certificate. [Figure 10] 4 is a diagram illustrating an example of a data structure of a storage device of an AP server. [Figure 11] 2 is a diagram for explaining data stored in the memory of an IC chip of an identification card. FIG. [Figure 12]FIG. 4 is a diagram illustrating an example of a data structure of a storage unit of a user terminal. [Figure 13] FIG. 13 is a diagram for explaining a personal identification procedure. [Figure 14] FIG. 13 is a diagram showing a flow of an initial registration procedure. [Figure 15] 13 is a flowchart showing an example of a procedure for identity verification processing; [Figure 16] FIG. 11 is a diagram illustrating another example of the flow of the initial registration procedure. [Figure 17] FIG. 13 is a diagram showing yet another example of the flow of the initial registration procedure. [Figure 18] FIG. 13 is a diagram showing a detailed flow of an electronic signature procedure. [Figure 19] FIG. 1 is a diagram showing an example of a usage flow of an electronic procedure system using an identification card without an IC chip. [Figure 20] FIG. 13 is a diagram showing a flow of an initial registration procedure. [Figure 21] 5 is a flowchart illustrating an example of the operation of the information processing device according to the present embodiment. [Figure 22] FIG. 11 is a diagram showing a detailed flow of a login process to a portal site. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0018] Hereinafter, the embodiments of the present invention will be described with reference to the drawings. In all the drawings, the same components are given the same reference numerals, and the description will be omitted as appropriate. In the following drawings, the configuration of the parts that are not related to the essence of the present invention is omitted and is not shown.

[0019] In the embodiment, "acquisition" includes at least one of the following: a device goes to retrieve data or information stored in another device or storage medium (active acquisition), and inputs data or information output from another device to the device (passive acquisition). Examples of active acquisition include making a request or inquiry to another device and receiving a reply, and accessing and reading information from another device or storage medium. Examples of passive acquisition include receiving information that is distributed (or transmitted, push notification, etc.). Furthermore, "acquisition" may mean selecting and acquiring data or information from received data or information, or selecting and receiving distributed data or information.

[0020] (First embodiment) <System Overview> 1 is a diagram conceptually showing a system configuration of an electronic procedure system 1 according to an embodiment of the present invention. The electronic procedure system 1 has an AP server 10 and an information processing device 100. The AP server 10 may include a certificate authority 50 that issues an electronic certificate (e.g., X.509), or may use a certificate authority 50 external to the AP server 10. The information processing device 100 is a mobile terminal owned or used by a user U, such as a smartphone, a tablet terminal, or a personal computer. Hereinafter, the information processing device 100 will also be referred to as a user terminal 100.

[0021] The information processing device 100 can be realized by installing and starting the application program 40 in the user terminal 100. The certificate authority 50 issues the private key for electronic signature 52 and the public key for electronic signature 54 of the public key pair for electronic signature together with an electronic certificate in accordance with an application from the user U. The public key for electronic signature 54 and its electronic certificate may be (A) registered in the storage device 20 of the AP server 10 without being recorded in the identification card 30, or (B) recorded in the memory of the IC chip of the identification card 30. In the case of (B), when the public key for electronic signature 54 and its electronic certificate recorded in the memory of the IC chip of the identification card 30 are received, the AP server 10 has the certificate authority 50 verify the electronic certificate of the public key for electronic signature 54. The private key for electronic signature 52 is recorded, for example, together with the electronic certificate in the memory of the IC chip of the identification card 30 of the user U. The user U can use the private key 52 for electronic signature recorded on the identification card 30 to affix an electronic signature 82 to an electronic document 80 and submit it from the user terminal 100 via the communication network 3 to a predetermined destination.

[0022] <Hardware configuration example> 2 is a block diagram illustrating a hardware configuration of a computer 1000 that realizes an information processing device (user terminal) 100 described later. The AP server 10 and the certificate authority 50 in FIG.

[0023] The computer 1000 has a bus 1010, a processor 1020, a memory 1030, a storage device 1040, an input / output interface 1050, and a network interface 1060.

[0024] The bus 1010 is a data transmission path for transmitting and receiving data among the processor 1020, memory 1030, storage device 1040, input / output interface 1050, and network interface 1060. However, the method of connecting the processor 1020 and the like to each other is not limited to a bus connection.

[0025] The processor 1020 is implemented by a central processing unit (CPU) or a graphics processing unit (GPU).

[0026] The memory 1030 is a main storage device realized by a RAM (Random Access Memory) or the like.

[0027] The storage device 1040 is an auxiliary storage device realized by a hard disk drive (HDD), a solid state drive (SSD), a memory card, a read only memory (ROM), or the like. The storage device 1040 stores program modules that realize each function of the information processing device (user terminal) 100 (for example, an acquisition unit 102, an authentication unit 104, an execution unit 106, a registration unit 108, etc., which will be described later). The processor 1020 loads each of these program modules onto the memory 1030 and executes them, thereby realizing each function corresponding to the program module. The storage device 1040 may also store each data of the memory unit 120 of the information processing device (user terminal) 100 or the memory device 20 of the AP server 10.

[0028] The program module may be recorded in a recording medium. The recording medium for recording the program module may include a non-transitory tangible medium usable by the computer 1000, and the program code readable by the computer 1000 (processor 1020) may be embedded in the medium.

[0029] The input / output interface 1050 is an interface for connecting the computer 1000 to various input / output devices. The input / output interface 1050 also functions as a communication interface for performing short-range wireless communication such as Bluetooth (registered trademark) and NFC (Near Field Communication).

[0030] The network interface 1060 is an interface for connecting the computer 1000 to a communication network 3 (FIG. 1). The communication network 3 is, for example, a local area network (LAN) or a wide area network (WAN). Alternatively, the network interface 1060 may be an interface for connecting to the communication network 3 using a public line via a base station by using various communication methods such as 4th Generation (4G), 5th Generation (5G), and Worldwide Interoperability for Microwave Access (WiMAX). The method for connecting the network interface 1060 to the communication network 3 may be a wireless connection or a wired connection.

[0031] The computer 1000 then connects to necessary equipment (e.g., the display (touch panel) of the user terminal 100, operation buttons, a speaker, a microphone, and sensors for acquiring personal identification information such as a camera and / or a fingerprint sensor) via the input / output interface 1050 or the network interface 1060.

[0032] As described later, the information processing device 100 acquires personal identification information such as a facial photograph used to perform authentication processing for confirming the identity of the user U. In this embodiment, the authentication processing is performed using a person's facial image, but the authentication processing may be performed using other biometric authentication information. The biometric authentication information includes at least one feature of, for example, the iris, vein, auricle, fingerprint, voiceprint, etc. The authentication processing may be performed by combining a plurality of pieces of biometric authentication information.

[0033] In this embodiment, since authentication processing is performed using a face image, a guidance screen for photographing the face of user U using the camera of user terminal 100 is displayed on the display of user terminal 100. When authentication processing is performed using other biometric authentication information, a sensor suitable for acquiring the biometric authentication information is used. For example, when a fingerprint is used, acquisition unit 102 acquires fingerprint information using a fingerprint sensor of user terminal 100. When a voiceprint is used, acquisition unit 102 collects the voice of user U using a microphone of user terminal 100 and acquires voiceprint information.

[0034] The camera includes a lens and an imaging element such as a CCD (Charge Coupled Device) image sensor. Images generated by the camera are preferably moving images, but may be frame images captured at a predetermined interval or may be still images.

[0035] 3 is a functional block diagram showing a logical configuration of the information processing device 100 according to the present embodiment. As described above, the information processing device 100 is realized by installing the application program 40 in the user terminal 100 and executing the application program 40.

[0036] Each component of the information processing device 100 (user terminal) of this embodiment shown in Fig. 3 is realized by any combination of hardware and software of the computer 1000 shown in Fig. 2. Those skilled in the art will understand that there are various variations in the realization method and device. The functional block diagram showing the information processing device of each embodiment described below shows logical functional blocks rather than a hardware-based configuration.

[0037] The information processing device 100 includes an acquisition unit 102, an authentication unit 104, and an execution unit 106. The acquisition unit 102 acquires the first individual identifying information and the terminal identifying information from a portable recording medium on which the first individual identifying information and the terminal identifying information are recorded. The authentication unit 104 authenticates the second individual identifying information acquired by a sensor mounted on the terminal and the terminal identifying information of the terminal, using the first individual identifying information and the terminal identifying information acquired from the recording medium. The execution unit 106 executes a predetermined process when the authentication is successful.

[0038] The first individual identifying information stored in the storage unit 120 of the user terminal 100 is, for example, face photograph data or facial feature amounts of the individual who has been identified in advance by eKYC (electronic Know Your Customer) or the like.

[0039] The terminal identification information is identification information capable of uniquely identifying the user terminal 100. As an example, the terminal identification information is identification information assigned by the AP server 10 to each user terminal 100 (or each application software installed in the user terminal 100). For example, the terminal identification information may be assigned by the AP server 10 when the user terminal 100 installs the application program 40 of the electronic procedure system 1.

[0040] In another example, the terminal identification information may be a unique identification number assigned to each individual mobile terminal, such as the user terminal 100's unique identifier (UID: Unique Identifier), an IMEI (International Mobile Equipment Identifier), or a MAC (Media Access Control) address.

[0041] The portable recording medium is, for example, an identification card such as a driver's license, a health insurance card, a My Number card, or a passport, and is shown as an identification card 30 in FIG. 1 and other figures. The shape of the portable recording medium is not particularly limited, and may be a card, a sheet, a booklet, or the like. It is preferable that the person's face photograph is printed on the recording medium. It is preferable that the identification card 30 is equipped with an IC chip including a memory capable of recording information.

[0042] Taking the My Number Card as an example, it is a plastic card of a certain thickness with a photograph and name on one side and a personal number (also called My Number) on the other side.

[0043] FIG. 4 is a diagram for explaining an identification card 30 (my number card) equipped with an IC chip 32. The IC chip 32 includes a memory 34, a processor 36, and an NFC communication unit 38 that communicates with a user terminal 100 such as a smartphone by NFC. The memory 34 stores a private key for electronic signature 52, first personal identification information (facial feature amount 42), a personal identification number (PIN) code 44, and terminal identification information (terminal ID 46). The private key for electronic signature 52 is used when applying a digital signature 82 to an electronic document 80 as a predetermined process, which will be described in detail in an embodiment below. In this embodiment, a process for identity verification is performed in order to safely read out the private key for electronic signature 52 from the identification card 30 and use it.

[0044] The first individual identifying information (facial feature amount 42) recorded in the memory 34 is also, for example, facial photograph data or facial feature amount of the individual whose identity has been verified in advance by eKYC or the like. In an embodiment described later, the first individual identifying information is facial feature amount authenticated in a procedure (step P5 in FIG. 8) of recording identity verification information in the user terminal 100. The terminal identifying information (terminal ID 46) recorded in the memory 34 is information written in advance from the user terminal 100 to the identification card 30 by a process of linking the user terminal 100 and the identification card 30, which will be described in detail in an embodiment described later.

[0045] The PIN code 44 is a secret number consisting of a predetermined number of digits (e.g., 4 digits, 6 digits, etc.) of numbers (or may include English letters and symbols) preset by the user U, which must be input when reading out information recorded in the memory 34. The PIN code 44 is set by the user U, for example, when registering an electronic certificate in the My Number card at a government office, and is recorded in the memory 34. For example, when reading out information recorded in the memory 34, the user first inputs the PIN code in the user terminal 100 and transmits it to the IC chip 32. The processor 36 compares the received PIN code with the PIN code 44 recorded in the memory 34. If the authentication is successful, reading out of the information recorded in the memory 34 is permitted, and if the authentication is unsuccessful, reading out is not permitted.

[0046] The acquisition unit 102 of the user terminal 100 transmits the PIN code to perform NFC communication with the NFC communication unit 38 of the IC chip 32, and if authentication is successful, the acquisition unit 102 can read and acquire the information recorded in the memory 34. In this way, the PIN code can prevent unauthorized reading of the information recorded in the memory 34 in the identification card 30.

[0047] Furthermore, the user terminal 100 may read and write information from and to the memory 34 via a reader / writer for reading and writing information recorded in the memory 34. That is, the acquiring unit 102 may acquire the first individual identifying information and the terminal identifying information from the IC chip 32 of the identification card 30 via the reader / writer.

[0048] Fig. 5 is a diagram showing a specific example of data stored in the memory 34 of the IC chip 32 of the identification card 30. Fig. 5(a) shows an example of the data structure of the memory 34 in a form in which the above-mentioned (A) public key for electronic signature 54 is not recorded in the identification card 30. Fig. 5(b) shows an example of the data structure of the memory 34 in a form in which the above-mentioned (B) public key for electronic signature 54 is recorded in the identification card 30.

[0049] The memory 34 has a basic area 35a and an expansion area 35b. The basic area 35a is an area used by the issuer or management organization of the identification card 30, and mainly stores information necessary for the original purpose of using the identification card 30. The expansion area 35b is an area permitted to be used by various organizations (e.g., private businesses) that provide various services including electronic procedures using the identification card 30, and mainly stores information necessary to provide the various services. It is desirable that the basic area 35a is structured so that it cannot be used by private businesses or the like.

[0050] The basic area 35a of memory 34 in Figure 5(a) stores image data of a facial photograph of user U printed on the face of the identification card 30, a first PIN code (e.g., a four-digit number) (shown as "PIN1" in the figure) for reading the image data of the facial photograph from memory 34, a private key for electronic signature, and a second PIN code (e.g., six or more alphanumeric characters) (shown as "PIN2" in the figure) for reading the private key for electronic signature.

[0051] In addition, if it is determined that an attempt has been made to illegally read the private key for electronic signature recorded in the basic area 35a by tampering or the like without inputting the PIN code, the memory 34 may be configured to be locked, the data in the memory 34 may be erased, or the IC chip 32 including the memory 34 may be destroyed.

[0052] The extension area 35b stores information obtained by encrypting the terminal ID, the facial feature amount, and the first and second PIN codes. The terminal ID also functions as a PIN code that permits access to the extension area 35b. The encrypted first PIN code stored in the extension area 35b can be decrypted when the facial authentication of the user U is successful by matching the facial feature amount stored in the extension area 35b with the facial image of the user U captured by the user terminal 100. In other words, when the facial authentication is successful, it becomes possible to read a facial photo from the basic area 35a using the decrypted first PIN code. The encrypted second PIN code stored in the extension area 35b is the same as the encrypted first PIN code described above, and when the facial authentication is successful, it becomes possible to read a private key for electronic signature from the basic area 35a using the decrypted second PIN code. Writing information from the electronic procedure system 1 to the extension area 35b will be described later.

[0053] Fig. 5(b) shows an example in which a public key for electronic signature and its electronic certificate are stored in the basic area 35a in addition to the information stored in the basic area 35a of the memory 34 in Fig. 5(a). The second PIN code is used as a PIN code for reading not only the private key for electronic signature, but also the public key for electronic signature and the electronic certificate. As with the encrypted first PIN code described above, when face authentication is successful, the private key for electronic signature, the public key for electronic signature, and the electronic certificate can be read from the basic area 35a using the decrypted second PIN code.

[0054] The predetermined process executed by the execution unit 106 is, for example, a process that requires identity verification, such as a process of applying an electronic signature 82 to an electronic document 80 to be submitted to a predetermined institution. For example, a process of applying an electronic signature 82 to an electronic document 80 and sending the electronic document 80 to a predetermined destination when electronically submitting a tax return document. Alternatively, the predetermined process may include authentication processes required to receive various services using the identification card 30, such as when the identification card 30 (for example, in the case of a My Number card) is used as a health insurance card, a driver's license, or identification, when carrying out administrative procedures related to My Number, when using an online contract for a mortgage or real estate transaction, when using a service for receiving a resident's card or family register at a convenience store, etc.

[0055] In the example of filing a tax return, a user U starts a predetermined browser using a user terminal 100 and accesses a predetermined web page of the National Tax Agency. After inputting the necessary information, the user affixes a digital signature 82 to an electronic document 80 of the tax return documents, and then transmits the tax return documents via a communication network 3 such as the Internet.

[0056] When digitally signing an electronic document 80 on such a tax return web page of the National Tax Agency, the information processing device 100 (application program 40) of this embodiment is started. Then, after identity verification is performed according to the procedure described below, the electronic signature 82 is applied to the electronic document 80 using the private key for electronic signature 52 recorded in the memory 34 of the identification card 30, and the electronic document 80 can be sent to a specified destination for submission.

[0057] <Example of operation> FIG. 6 is a flowchart showing an example of the operation of the information processing device 100 of this embodiment. First, the acquisition unit 102 acquires the first individual identifying information and the terminal identifying information from the IC chip 32 of the identification card 30 (step S1). In this example, the first individual identifying information is a facial image or facial features of the user U. The terminal identifying information is a terminal ID assigned when the application program 40 is installed in the user terminal 100.

[0058] Specifically, the acquisition unit 102 displays a guidance screen on the display for prompting the user U to read information from the identification card 30. The user U follows the instructions on the guidance screen and brings the identification card 30 close to a predetermined position on the user terminal 100. The acquisition unit 102 communicates with the NFC communication unit 38 of the identification card 30 to read and acquire the facial feature amount 42 and the terminal ID 46 recorded in the memory 34 of the IC chip 32. As described above, the facial feature amount 42 is a facial feature amount that has been verified in advance.

[0059] Normally, when reading information from the memory 34 of the identification card 30, it is necessary to input a preset PIN code to be successfully authenticated. As will be described in the embodiment described later, in the electronic procedure system 1, the PIN code 44 is input in advance to link the identification card 30 with the user terminal 100, so that input of the PIN code can be omitted when performing a specified process later.

[0060] Next, the authentication unit 104 acquires the second individual identification information using a sensor (step S3). Specifically, the camera of the user terminal 100 is started, and a guidance screen for taking a face image of the user U is displayed on the display. The user U can take a face image by operating according to the instructions on the guidance screen. As described above, liveness verification may be used in combination to prevent fraudulent acts such as impersonation using a life-size face photo of another person.

[0061] Then, the authentication unit 104 compares the first individual identifying information (the facial feature amount 42 read from the IC chip 32) acquired in step S1 with the second individual identifying information (the facial image (facial feature amount) captured by the user terminal 100) acquired in step S3, and also compares the terminal identifying information (the terminal ID 46 read from the IC chip 32) acquired in step S1 with the terminal identifying information stored in the storage unit 120 (step S5). If the authentication is successful for both the individual identifying information and the terminal identifying information (YES in step S7), the execution unit 106 executes a predetermined process (step S9). If the authentication is unsuccessful for at least one of the individual identifying information and the terminal identifying information (NO in step S7), the process is terminated by bypassing step S9. That is, the execution unit 106 does not execute the predetermined process.

[0062] As described above, the predetermined process is, for example, a process of applying a digital signature 82 to a digital document 80. Details will be described later in the second embodiment.

[0063] As described above, in this embodiment, the acquisition unit 102 reads out the first individual identifying information (facial feature amount) and the terminal identifying information (terminal ID) from the identification card 30 or the like, and the authentication unit 104 compares the second individual identifying information (facial image and facial feature amount) acquired by a sensor such as a camera of the user terminal 100 with the first individual identifying information acquired by the acquisition unit 102, and also compares the terminal identifying information of the user terminal 100 with the terminal identifying information acquired by the acquisition unit 102. Then, when the authentication by the authentication unit 104 is successful, the execution unit 106 can perform a predetermined process, for example, a digital signature 82 on the digital document 80.

[0064] Thus, according to the configuration of this embodiment, by performing authentication processing for identity confirmation using the identification card 30 and the user terminal 100, it is possible to prevent fraudulent acts such as impersonation and legitimately execute predetermined processing that requires identity confirmation. Then, by simply performing identity confirmation on the user terminal 100, it becomes possible to perform predetermined processing such as applying a digital signature 82 to a digital document 80 without performing complicated operations. This improves the usability and security of the digital signature.

[0065] Second embodiment Fig. 7 is a functional block diagram showing a logical configuration of the information processing device 100 of this embodiment. The information processing device 100 of this embodiment is similar to the above-mentioned embodiment except that it has a configuration for performing a process of linking the identification card 30, on which the private key for electronic signature 52 required for a predetermined process is recorded, with the user terminal 100. The information processing device 100 of this embodiment further has a registration unit 108 in addition to the configuration of Fig. 3. However, the configuration of this embodiment may be combined with at least one of the configurations of the other embodiments to the extent that no contradiction occurs.

[0066] The registration unit 108, when the authentication unit 104 performs authentication using the first personal identification information (facial image) and the second personal identification information (facial features) that has been identified and stored in the memory unit 120 of the user terminal 100, stores the terminal identification information (terminal ID 46) in a recording medium (IC chip 32 of the identification card 30).

[0067] <Electronic procedure system usage flow> A user U needs to go through a certain procedure before using the electronic procedure system 1. The following describes the preparations required to carry out the procedure of applying a digital signature 82 to an electronic document 80 using the information processing device 100 and an identification card 30 equipped with an IC chip 32, such as a My Number card.

[0068] 8 is a diagram showing an example of a usage flow of the electronic procedure system 1. An example in which an individual number card equipped with an IC chip 32 is used as the identification card 30 will be described below. Here, the identification card 30 is also called an individual number card 30a. An example in which an identification card 30 not equipped with an IC chip 32 is used will be described in the fourth embodiment described later.

[0069] First, user U goes to a predetermined application location with the My Number Card 30a and conducts an application procedure for issuing an electronic certificate (procedure P1). At this time, registration for using the electronic procedure system 1 (user registration) is also performed, and the account information of user U required when logging in to the electronic procedure system 1 is also set. Then, the application program 40 of the electronic procedure system 1 is installed on the user terminal 100 (procedure P3).

[0070] Next, a face image (face feature amount) confirmed to be the user himself / herself by eKYC or the like is stored in the storage unit 120 of the user terminal 100 (procedure P5). Then, an initial registration procedure for using the electronic procedure system 1 is performed via the application 40 (procedure P7). Through the above processing, the identity card 30, the user terminal 100, and the application program 40 can be associated with each other by the terminal ID 46.

[0071] When the preparation up to this point is completed, it becomes possible to perform electronic procedures such as an electronic signature procedure when necessary (procedure P11). Hereinafter, the details of each procedure will be described.

[0072] <P1: Electronic Certificate Issuance Application Flow> FIG. 9 is a diagram for explaining the electronic certificate issuance application flow. There are two types of electronic certificates: one for electronic signatures and one for user authentication for identity verification when using various services. Here, the issuance of an electronic certificate for electronic signature will be described, but an application for issuing an electronic certificate for user authentication can also be made by the same process.

[0073] First, the user U takes his / her identification card 30 (for example, a My Number card 30a equipped with an IC chip 32) to a predetermined application location. There, he / she applies for issuance of an electronic certificate (step S101). For example, a person in charge at the counter operates an operation terminal (not shown) for the AP server 10 to accept the application. When the information required for the application is input from the operation terminal, the AP server 10 issues a user ID to the user U and performs user registration (step S103). The user ID is account information required to log in to the electronic procedure system 1 when using the electronic procedure system 1. When logging in, the user U is asked to input an arbitrary password and user ID set by the user U as the account information of the user U. The password may be changed by the user U as appropriate to improve security. As shown in FIG. 10(a), the account information of the user U (user ID and password) is stored in the storage device 20.

[0074] Issuance of a user ID is not necessarily required, and a configuration may be adopted in which login is performed using terminal identification information (terminal ID 46) assigned to each user terminal 100 by the AP server 10. In other words, the face of the user U is photographed using the user terminal 100, and when facial authentication is successful, the terminal ID 46 may be acquired and used as login information for the AP server 10. Since the terminal ID 46 is acquired by successful facial authentication, input of a password may not be required to log in to the AP server 10.

[0075] Furthermore, the AP server 10 makes the certificate authority 50 issue a pair of the public key 54 for electronic signature and the private key 52 for electronic signature, and an electronic certificate (step S105). Note that step S105 may be performed after the user ID is issued in step S103 and the user registration is completed. Furthermore, the AP server 10 makes the user U set a personal identification number (also called a PIN code) to be entered when the electronic certificate is issued, and has the user U enter the number using the operation terminal (step S107).

[0076] The AP server 10 records the electronic signature private key 52 issued by the certificate authority 50 and the PIN code 44 entered by the user U in the memory 34 of the IC chip 32 of the My Number card 30a of the user U (step S109). FIG. 11(a) shows the data recorded in the memory 34 of the IC chip 32 of the My Number card 30a. This information is recorded in a predetermined area of ​​the memory 34 of the IC chip 32, in particular. As described above, the data recorded in the memory 34 can be read when the input of the PIN code 44 is accepted. In other words, even if the identification card 30 is lost or stolen, the information recorded in the identification card 30 is highly likely not to be read unless the PIN code 44 is known.

[0077] Furthermore, the AP server 10 stores the electronic signature public key 54 paired with the electronic signature private key 52 of the user U in the storage device 20 (FIG. 10(b)) in association with the user ID of the user U (step S111).

[0078] The memory 34 of the IC chip 32 in Figure 11 (b) may further store facial feature values ​​42 indicating facial photograph data printed on the face of the My Number card 30a or facial features extracted from the facial photograph.

[0079] <P3:アプリケーションのインストール> In step P3 in FIG. 8, an application program 40 for using the electronic procedure system 1 is downloaded to the user terminal 100 of the user U. A pair of a common challenge public key 58 and a challenge private key 56 is associated with the application program 40 downloaded to the user terminal 100 of each user U, and the identification information of the application program 40 and the challenge public key 58 are stored in association with each other in the storage device 20 (FIG. 10(d)). The identification information of the application program 40 may be, for example, information indicating the version of the application program 40. In addition, the challenge public key 58 may be changed to another challenge public key 58 after a predetermined period of time has elapsed or at any timing in order to avoid risks such as hacking caused by continuously using the same application program 40, even if the application program 40 is of the same version. Therefore, for example, information such as the acquisition date and time of the challenge public key 58 (acquisition date and time from the certification authority 50) may be associated and stored in the storage device 20 (FIG. 10(d)).

[0080] The downloaded application is installed in the user terminal 100. After the installation, the information processing device 100 displays a login screen on the display of the user terminal 100, requesting the user to enter account information (user ID and password) in order to log in to the electronic procedure system 1. Then, upon receiving the account information, the AP server 10 performs authentication processing for the user U, and stores the terminal identification information (indicated as terminal ID in the figure) of the user terminal 100 of the user U in association with the user ID of the user U in the storage device 20 (FIG. 10(c)). The terminal ID assigned by the AP server 10 is stored in the security area 122 of the storage unit 120 (FIG. 12(a)).

[0081] Furthermore, when the application program 40 is installed on the user terminal 100, the challenge secret key 56 is also downloaded together and stored in the storage unit 120 of the user terminal 100. The challenge secret key 56 may be encoded and stored using white box cryptography, or may be stored in a predetermined area of the storage unit 120. The predetermined area is preferably a security area 122 (FIG. 12(b)) that cannot be accessed by the OS (Operating System) or other applications. <P5: Identity verification procedure> FIG. 13 is a diagram for explaining the identity verification procedure. As shown in FIG. 13(a), the user U uses the camera of the user terminal 100 to take a picture of his / her face together with the face photo posted on the face of the My Number card 30a. FIG. 13(b) shows a state where the image of the user's face taken and the image of the My Number card 30a including the face photo on the face of the My Number card 30a are captured by the user terminal 100. This identity verification process may be performed by installing an application for identity verification on the user terminal 100, or may be performed on a predetermined website via a browser.

[0082] In order to ensure that the face being photographed is not a "disguise" using a photo or the like and that the person actually exists, it is preferable to take a video and perform liveness verification.

[0083] Then, the face feature amounts extracted from the face image of the user U himself / herself and the face photo of the My Number card 30a are compared. If the result of the comparison is that the user is authenticated, the authenticated face feature amount is stored in the security area 122 (FIG. 12(c)) of the storage unit 120 of the user terminal 100. Furthermore, the authenticated face feature amount is written into the memory 34 of the IC chip 32 of the identity card 30.

[0084] <P7: Application initial registration procedure> Fig. 14 is a diagram showing a flow for initial setting in step P7 in Fig. 8, which is executed when the program is started for the first time after the application is downloaded to the user terminal 100 of the user U in step P3 in Fig. 8. However, this process may also be executed when the program is deleted after being downloaded and used, or when the application is downloaded and started again. Also, in a case where the user U changes the user terminal 100 to a different model, this process is executed when the application is downloaded again to the new model and started.

[0085] In this flow, as initial settings for using an application of the electronic procedure system 1, identity verification of the user U and registration procedures for the user terminal 100 that runs the application are performed. First, when the application is started on the user terminal 100, an initial registration screen is displayed and the user U starts the initial registration process by inputting account information (step S201). When the AP server 10 receives the account information of the user U, it executes challenge / response authentication for the user terminal 100 (step S203). Specifically, the AP server 10 generates a random number (challenge) 60 and transmits it to the user terminal 100.

[0086] Before responding to the challenge from the AP server 10, the user terminal 100 performs a process (steps S205 to S225) of associating the identification card 30 with the user terminal 100 after identity verification. First, the acquisition unit 102 displays on the display of the user terminal 100 a screen for prompting the user to enter a PIN code 44 for accessing the identification card 30.

[0087] When the input of the PIN code 44 is accepted (step S205), the acquiring unit 102 performs NFC communication with the identification card 30, transmits the PIN code 44, and reads and acquires the facial feature amount 42 and the private key for electronic signature 52 recorded in the identification card 30 (step S207). In an example in which different PIN codes are set for the facial feature amount and the private key for electronic signature, respectively (the PIN code is not encrypted in the example of FIG. 5(a)), the input of the first PIN code and the second PIN code may be accepted. The facial feature amount may be read from the identification card 30 using the first PIN code, and the private key for electronic signature may be read from the identification card 30 using the second PIN code.

[0088] At this time, the identification card 30 compares the PIN code 44 received from the user terminal 100 with the PIN code 44 recorded on the identification card 30, and if they match, allows reading of the information recorded on the identification card 30. If the comparison result shows a mismatch, reading of the information recorded on the identification card 30 is not allowed.

[0089] Then, the user terminal 100 executes identity verification processing (step S210).

[0090] FIG. 15 is a flowchart showing an example of a procedure for identity verification processing. First, the acquisition unit 102 activates the camera of the user terminal 100 and displays a guidance screen on the display of the user terminal 100 to allow the user U to photograph the face of the user. Then, the face is photographed and a face image is acquired (step S211). The authentication unit 104 compares the facial feature amount extracted from the face image captured by the camera with the facial feature amount 42 read and acquired from the identification card 30 in step S207 (step S213). In addition, when acquiring the face image of the user by camera shooting, the acquisition unit 102 preferably shoots a video to prevent impersonation, and the authentication unit 104 preferably performs liveness verification.

[0091] Here, the information for identity verification may be the following combinations, but is not limited to these. Identity verification processing may be performed in at least one of the following patterns, or a combination of multiple patterns may be used, or the pattern may be changed at a predetermined timing. (Pattern 1) Facial features extracted from a facial image captured by a camera are compared with facial features 42 acquired from an identification card 30. (Pattern 2) Facial features extracted from a facial image captured by a camera are compared with facial features recorded in the security area 122 of the memory unit 120 of the user terminal 100 when the user's identity was verified through eKYC (step P5 in Figure 8). (Pattern 3) Facial features extracted from a face image captured by a camera are compared with facial features extracted from an image of the face photograph on the face of the identification card 30 captured by a camera. (Pattern 4) The facial features extracted from the image of the face photo on the face of the identification card 30 taken with a camera are compared with the facial features recorded in the security area 122 of the memory unit 120 of the user terminal 100 when the user's identity was verified through eKYC (step P5 in Figure 8).

[0092] 14, if the result of the matching process indicates that the authentication has been successful (YES in step S221), the acquisition unit 102 stores the acquired facial feature amount 42 and private key for electronic signature 52 in the security area 122 (FIG. 12(d)) of the storage unit 120 (step S223). If the authentication has failed (NO in step S221), the user U is notified that the authentication has failed and the process is interrupted, and the process ends.

[0093] Furthermore, after the authentication is successful in step S221, the registration unit 108 displays on the display a guidance screen for writing the terminal identification information of the user terminal 100, in this case the terminal ID assigned when the application program 40 is installed in the user terminal 100 by the AP server 10, into the memory 34 of the IC chip 32 of the identification card 30. The user U follows the instructions on the guidance screen and brings the identification card 30 close to a predetermined position of the user terminal 100. The registration unit 108 communicates with the NFC communication unit 38 of the identification card 30 and writes the terminal ID 46 into the memory 34 (FIG. 11(c)) of the IC chip 32 (step S225).

[0094] In this example, the acquisition unit 102 reads out the private key for electronic signature 52 from the identification card 30 in step S207, but it is also possible to read out only the facial features 42 in step S207, and after successful authentication in step S221, the acquisition unit 102 reads out the private key for electronic signature 52 from the identification card 30 and store it in the memory unit 120 in step S223.

[0095] Then, the execution unit 106 performs a process of applying a digital signature 62 to the random number (challenge) 60 transmitted from the AP server 10 in step S203 using the challenge public key 58 and transmitting the result to the AP server 10 (step S227).

[0096] When the AP server 10 receives the random number (challenge) 60 with the digital signature 62 from the user terminal 100, it verifies the challenge response (step S229). The challenge public key 58 stored in the storage device 20 is used for the challenge response verification. The AP server 10 may notify the user terminal 100 of the result of the challenge verification. For example, it may notify that the challenge was successful, and that the user will be able to perform identity verification using the identification card 30 and execute a specified process in the future. Alternatively, it may notify that the challenge was unsuccessful, and therefore the specified process cannot be executed.

[0097] Fig. 16 is a flowchart showing another example of the application initial registration procedure of Fig. 14. In this example, instead of the PIN input in step S205 of Fig. 14, face authentication is used to enable access to the memory 34 of the IC chip 32 of the identification card 30. When the initial registration process is started in step S201 of Fig. 14, the user terminal 100 executes identity verification processing (step S210) (Fig. 15).

[0098] The acquisition unit 102 reads and acquires the face image of the user U captured by the camera of the user terminal 100 in step S211 of Fig. 15 and the face feature amount 42 of the user U stored in the basic area 35a of the memory 34 of the identification card 30. The captured face image is compared with the face feature amount 42 read from the identification card 30 (step S213 of Fig. 15), and if the result of the comparison process indicates that the identity authentication has been successful (YES in step S221), the acquisition unit 102 decrypts the encrypted second PIN code from the extended area 35b of the memory 34 of the identification card 30, and uses the second PIN code to access the basic area 35a of the memory 34 of the identification card 30 to read and acquire the private key for electronic signature 52 (step S222).

[0099] The acquisition unit 102 then stores the facial feature amount 42 and the private key for electronic signature 52 acquired from the identification card 30 in the security area 122 (FIG. 12(d)) of the storage unit 120 (step S223). If the personal authentication fails (NO in step S221), the acquisition unit 102 notifies the user U that the authentication has failed and the processing is to be interrupted, and ends the processing. Steps after S223 are the same as those in FIG. 14, and therefore will not be described.

[0100] Fig. 17 is a flowchart showing yet another example of the application initial registration procedure of Fig. 16. This example shows the operation when the electronic certificate 55 of the public key for electronic signature 54 is stored in the memory 34 of the IC chip 32 of the identification card 30 (Fig. 5(b)).

[0101] The process up to step S221 is the same as in Fig. 16. If the result of the matching process in step S221 indicates that the identity authentication has been successful (YES in step S221), the acquisition unit 102 decrypts the encrypted second PIN code from the extended area 35b of the memory 34 of the identification card 30, and uses the second PIN code to access the basic area 35a of the memory 34 of the identification card 30 to read and acquire the private key for electronic signature 52, the public key for electronic signature 54, and their electronic certificate 55 (step S231).

[0102] The acquisition unit 102 then stores the facial feature amount 42, the private key for electronic signature 52, the public key for electronic signature 54, and the electronic certificate 55 acquired from the identification card 30 in the security area 122 (FIG. 12(d)) of the storage unit 120 (step S233). If the personal authentication fails (NO in step S221), the acquisition unit 102 notifies the user U that the authentication has failed and the processing is to be interrupted, and ends the processing.

[0103] The registration unit 108 communicates with the NFC communication unit 38 of the identification card 30 and writes the terminal ID 46 in the memory 34 (extension area 35b in FIG. 5(b)) of the IC chip 32 (step S225). Then, the execution unit 106 performs a process of applying an electronic signature 62 to the random number (challenge) 60 transmitted from the AP server 10 in step S203, using the challenge public key 58, and transmitting the result to the AP server 10. At this time, the electronic signature public key 54 and the electronic certificate 55 obtained from the identification card 30 in step S231 are also transmitted to the AP server 10 (step S235).

[0104] When the AP server 10 receives the random number (challenge) 60 with the digital signature 62 from the user terminal 100, it verifies the challenge response. At this time, the AP server 10 verifies the digital certificate 55 of the digital signature public key 54 received from the user terminal 100 by inquiring of the certificate authority 50 (step S237).

[0105] In this embodiment, when the registration unit 108 successfully authenticates using the face image (second personal identification information) captured by the camera mounted on the user terminal 100 and the face feature amount (first personal identification information) of the user that has been confirmed and stored in the storage unit 120 of the user terminal 100 by the authentication unit 104, it writes the terminal ID 46 (terminal specific information) to the IC chip 32 of the identification card 30 and registers the user terminal 100 with the identification card 30.

[0106] As described above, according to this embodiment, since the terminal ID 46 of the user terminal 100 is recorded on the identification card 30, even if the identification card 30 is lost or stolen and another terminal tries to use the present electronic procedure system 1, the AP server 10 can detect a mismatch between the terminal ID of the terminal and the terminal ID registered on the identification card 30, thus preventing unauthorized use.

[0107] (Third Embodiment) The information processing apparatus 100 of this embodiment is the same as the above-described embodiment except that it has a configuration for performing personal confirmation using the identification card 30 prepared in advance in the above-described second embodiment and performing predetermined processing. Since the user terminal 100 of this embodiment has the same configuration as the information processing apparatus 100 in FIG. 7, it will be described with reference to FIG. 7. However, the configuration of this embodiment may be combined as long as it does not conflict with at least any one of the configurations of other embodiments.

[0108] <P11: Electronic Signature Procedure> FIG. 18 is a diagram showing a detailed flow of the electronic signature procedure of step P11 in FIG. 8. Here, a process of applying an electronic signature 82 to an electronic document 80 using the identification card 30 that has been initially registered and the user terminal 100 (the associated user terminal 100 and identification card 30) by the procedure P7 shown in FIG. 14 will be described.

[0109] Procedure P11 in Fig. 18 includes steps S203, S227, and S229 that are the same as those of procedure P7 in Fig. 14, and further includes steps S301 to S305. In addition, before issuing an electronic signature, a process of verifying the identity of the user and the association of the user terminal 100 with the identification card 30 is performed according to the procedure in Fig. 6.

[0110] First, when the application program 40 is started on the user terminal 100, a login screen is displayed. Account information entered by the user U on the login screen is sent to the AP server 10 as an authentication request (step S301). Alternatively, if automatic login is permitted by the user U, the account information may be automatically sent to the AP server 10 as an authentication request using account information previously stored in the storage unit 120 of the user terminal 100.

[0111] The application program 40 may be launched by operation of the user U, or may be launched from a specified website with the consent of the user U when adding an electronic signature 82 to an electronic document 80 to be submitted on the specified website as described above.

[0112] Upon receiving the account information of the user U, the AP server 10 executes challenge / response authentication with the user terminal 100 (step S203). Specifically, the AP server 10 generates a random number (challenge) 60 and transmits it to the user terminal 100.

[0113] Before responding to the challenge from the AP server 10, the user terminal 100 proceeds to step S1 in FIG. 6. First, the acquisition unit 102 acquires the facial feature amount 42 and the terminal ID 46 from the IC chip 32 of the identification card 30 (step S1). Next, the authentication unit 104 starts the camera of the user terminal 100 and displays a guidance screen on the display for taking a facial image of the user U. The user U performs operations according to the instructions on the guidance screen to take a facial image. In this way, the authentication unit 104 acquires the facial image of the user U captured by the camera (step S3). As described above, liveness verification may be used in combination to prevent fraudulent activities such as impersonation.

[0114] The authentication unit 104, for example, compares the facial image (facial features) captured by the user terminal 100 in step S1 with the facial features 42 read from the IC chip 32 in step S3, and also compares the terminal ID 46 read from the IC chip 32 in step S1 with the terminal ID stored in the memory unit 120 (step S5).

[0115] The identity matching process using the face image in step S5 can be performed in at least one of the above-mentioned patterns 1 to 4. If authentication is successful for both the individual identifying information and the terminal identifying information (YES in step S7), the process returns to Fig. 18, and the execution unit 106 performs a process of applying a digital signature 62 to the random number (challenge) 60 transmitted from the AP server 10 in step S203 using the challenge public key 58 and transmitting the result to the AP server 10 (step S227).

[0116] When the AP server 10 receives the random number (challenge) 60 with the digital signature 62 from the user terminal 100, it verifies the challenge response (step S229). The challenge public key 58 stored in the storage device 20 is used for the challenge response verification.

[0117] If the challenge is successful, the AP server 10 transmits a message to that effect to the user terminal 100, and the execution unit 106 reads the private key for electronic signature 52 from the security area 122 of the storage unit 120, applies the electronic signature 82 to the electronic document 80, and transmits the electronic document 80 to the AP server 10 (step S303). When the AP server 10 receives the electronic document 80 from the user terminal 100, it reads the public key for electronic signature 54 (FIG. 10(c)) associated with the terminal ID of the user U stored in the storage device 20, and verifies the electronic signature 82 (step S305).

[0118] The verification result may be transmitted to the user terminal 100, or the electronic document 80 may be transmitted to a predetermined destination if the verification of the electronic signature 82 confirms the validity of the electronic certificate. If the verification confirms that the electronic certificate is invalid, the user terminal 100 may be notified that the electronic signature 82 of the electronic document 80 is invalid and therefore the electronic document 80 cannot be submitted (transmitted). Furthermore, if the electronic certificate is confirmed to be invalid, the AP server 10 may request the certificate authority 50 to revoke the pair of the electronic signature public key 54 and the electronic signature private key 52.

[0119] Furthermore, if the user U realizes that his / her identification card 30 has been lost or stolen, he / she can report this to the AP server 10 (by inputting the necessary information on a specific screen) in a specific menu of the application program 40, thereby causing the AP server 10 to request the certification authority 50 to revoke the pair of the electronic signature public key 54 and the electronic signature private key 52.

[0120] According to this embodiment, the same effects as those of the above embodiment can be achieved. That is, according to the configuration of this embodiment, the identity verification process is performed using the identification card 30 and the user terminal 100 that are associated in advance, so that it is possible to prevent fraudulent acts such as spoofing and apply the digital signature 82 to the digital document 80 using the digital signature private key 52 read from the identification card 30 using the user terminal 100 that has been properly identified.

[0121] By recording the terminal ID 46 in advance on the identification card 30, the identification card 30 and the user terminal 100 can be associated with each other, so that there is no need to input a PIN code when the user terminal 100 reads information on the identification card 30. In this way, the present embodiment also improves the usability and security of electronic signatures.

[0122] (Fourth embodiment) In the above embodiment, an identification card 30 equipped with an IC chip 32 is used. In the present embodiment, a configuration in which an identification card 30 not equipped with an IC chip 32 can be used to apply an electronic signature 82 to an electronic document 80 will be described.

[0123] In the above embodiment, a procedure was performed to record an electronic certificate in advance in the IC chip 32 of the identification card 30, but in this embodiment, the identification card 30 is not equipped with an IC chip 32, so it is not possible to record an electronic certificate in advance. Therefore, in this embodiment, a pair of an electronic signature public key 54 and an electronic signature private key 52 is dynamically generated in the user terminal 100 at the time of user registration.

[0124] FIG. 19 is a diagram showing an example of a usage flow of the electronic procedure system 1 using an identification card 30 that does not have an IC chip 32 mounted thereon. First, the application program 40 of the electronic procedure system 1 is installed in the user terminal 100 (step P23). Next, a face image (facial feature amount) that has been identified by eKYC or the like is stored in the storage unit 120 of the user terminal 100 (step P5). Step P5 is the same as in FIG. 8.

[0125] Then, the user performs an initial registration procedure for using the electronic procedure system 1 via the application 40 (step P27). Once the preparations up to this point are complete, the user can perform an electronic signature procedure when necessary (step P31). Each step will be described in detail below.

[0126] <P23:アプリケーションのインストール> In procedure P23 of FIG. 19, an application program 40 for using the electronic procedure system 1 is downloaded to the user terminal 100 of the user U. A pair of a common challenge public key 58 and a challenge private key 56 is associated with the application program 40 downloaded to each user terminal 100 of the user U, and the identification information of the application program 40 and the challenge public key 58 are stored in the storage device 20 in an associated manner (FIG. 10(d)).

[0127] The downloaded application is installed on the user terminal 100. After installation, the information processing device 100 causes the user registration screen for using the electronic procedure system 1 to be displayed on the display of the user terminal 100. When the information necessary for user registration is input on the user registration screen, the AP server 10 issues a user ID to the user U and performs user registration. The user ID is account information necessary for logging in to the electronic procedure system 1 when using the electronic procedure system 1. At the time of login, the input of an arbitrary password set by the user U and the user ID is required as the account information of the user U. The password may be appropriately changed by the user U for security improvement. As shown in FIG. 10(a), the account information (user ID and password) of the user U is stored in the storage device 20.

[0128] Furthermore, when the application program 40 is installed on the user terminal 100, the challenge private key 56 is also downloaded and stored in the storage unit 120 of the user terminal 100. The challenge private key 56 may be stored encoded with white box encryption, or may be stored in the security area 122 (FIG. 12(a)) of the storage unit 120.

[0129] <P5: Identity verification procedure> This is the same as the above embodiment. By this procedure P5, the authenticated face feature amount is stored in the security area 122 (FIG. 12(c)) of the storage unit 120 of the user terminal 100.

[0130] <P27: Application Initial Registration Procedure> FIG. 20 is a diagram showing a flow for initial settings of step P27 in FIG. 19, which is executed when the program is started for the first time after the application is downloaded to the user terminal 100 of user U in step P23 of FIG. 19. However, this process may be executed even when the program is deleted after downloading and using the program, or when the application is downloaded and started again. Also, this process is executed when the user U changes the user terminal 100 to another model and the application is downloaded and started again for the new model.

[0131] The flow in FIG. 20 includes the same steps S201, S203, S210, S221, S227, and S229 as the flow in FIG. 14, and further includes steps S401 to S407.

[0132] In this flow, as an initial setting for using the application of the electronic procedure system 1, identity verification of user U and acquisition of an electronic certificate to be used for electronic signature hereafter are performed. First, when the application is started on the user terminal 100, an initial registration screen is displayed, and user U inputs account information and starts the initial registration process (step S201). When the AP server 10 receives the account information of user U, it executes challenge / response authentication on the user terminal 100 (step S203). Specifically, the AP server 10 generates a random number (challenge) 60 and transmits it to the user terminal 100.

[0133] Before the user terminal 100 responds to the challenge from the AP server 10, it performs identity verification and electronic certificate registration processing. First, the user terminal 100 executes identity verification processing (step S210). The identity verification processing in step S210 is the same as the flow in FIG. 15 described above. However, since the identity card 30 does not have an IC chip 32, the verification process is performed using at least one of patterns 2 to 4 other than pattern 1 that uses the face feature amount 42 from the identity card 30.

[0134] If the result of the identity verification process in step S210 indicates that identity authentication has been successful (YES in step S221), the authentication unit 104 generates a pair of the public key for electronic signature 54 and the private key for electronic signature 52 (step S401). Specifically, the registration unit 108 applies for issuance of an electronic certificate to an arbitrary certificate authority (not shown) or the certificate authority 50, and obtains the pair of the public key for electronic signature 54 and the private key for electronic signature 52. On the other hand, if identity authentication has failed (NO in step S221), the registration unit 108 notifies the user U that the process will be interrupted due to the failure of authentication, and ends this process.

[0135] Then, the registration unit 108 transmits the acquired public key 54 for electronic signature and its electronic certificate 55 to the AP server 10 (step S403). Furthermore, the registration unit 108 stores the acquired private key 52 for electronic signature in the security area 122 (FIG. 12(d)) of the storage unit 120 (step S405).

[0136] Then, the execution unit 106 performs a process of applying a digital signature 62 to the random number (challenge) 60 transmitted from the AP server 10 in step S203 using the challenge private key 56 and transmitting the result to the AP server 10 (step S227).

[0137] When the AP server 10 receives the random number (challenge) 60 with the digital signature 62 from the user terminal 100, it verifies the challenge response (step S229). The challenge response verification uses the challenge public key 58 stored in the storage device 20. The AP server 10 may notify the user terminal 100 of the result of the challenge verification. For example, it may notify that the challenge was successful and that the user will be able to execute the specified process after verifying his / her identity. Alternatively, it may notify that the challenge was unsuccessful and therefore the specified process cannot be executed.

[0138] Furthermore, if the challenge is successful, the AP server 10 stores the public key for electronic signature 54 received from the user terminal 100 in the storage device 20 (FIG. 10(e)) in association with the user ID (step S407). However, the public key for electronic signature 54 does not have to be stored in the storage device 20. In that case, similar to the example described in FIG. 17, the AP server 10 can inquire of the certificate authority 50 about verification of the electronic certificate 55 of the public key for electronic signature 54 sent from the user terminal 100.

[0139] After the advance preparation is completed in this manner, the electronic signature procedure can be performed in step P31. Step P31 can be performed in the same flow as in Fig. 18 of the above embodiment. The following will be described with reference to Fig. 18.

[0140] First, when the application program 40 is started on the user terminal 100, a login screen is displayed. Account information entered by the user U on the login screen is sent to the AP server 10 as an authentication request (step S301). Alternatively, if automatic login is permitted by the user U, the account information may be automatically sent to the AP server 10 as an authentication request using account information previously stored in the storage unit 120 of the user terminal 100.

[0141] Upon receiving the account information of the user U, the AP server 10 executes challenge / response authentication with the user terminal 100 (step S203). Specifically, the AP server 10 generates a random number (challenge) 60 and transmits it to the user terminal 100.

[0142] Before responding to the challenge from the AP server 10, the user terminal 100 proceeds to step S43 in Fig. 21. Fig. 21 is a flowchart showing an example of the operation of the information processing device 100 of this embodiment. The flow in Fig. 21 includes steps S7 and S9 similar to those in Fig. 6, as well as steps S43 and S45.

[0143] First, the authentication unit 104 activates the camera of the user terminal 100 and displays on the display a guidance screen for taking a facial image of the user U. The user U operates according to the instructions on the guidance screen to take a facial image and a facial photograph on the face of the identification card 30. In this way, the authentication unit 104 acquires the facial image of the user U captured by the camera and the facial photograph on the face of the identification card 30 (step S43). As described above, liveness verification may be used in combination to prevent fraudulent activities such as impersonation.

[0144] The authentication unit 104 compares the facial feature amounts extracted from the facial image of the user U captured in step S43 with the facial feature amounts extracted from the facial photograph on the face of the identification card 30 (step S45). This is pattern 3 of the identity matching process described above, but the matching process may be performed using at least one of patterns 2 to 4 other than pattern 1.

[0145] If the authentication of the personal identification information is successful (YES in step S7), returning to FIG. 18, the execution unit 106 performs a process of applying an electronic signature 62 to the random number (challenge) 60 sent from the AP server 10 in step S203 using the challenge public key 58 and sending the result to the AP server 10 (step S227).

[0146] When the AP server 10 receives the random number (challenge) 60 with the digital signature 62 from the user terminal 100, it verifies the challenge response (step S229). The challenge public key 58 stored in the storage device 20 is used for the challenge response verification.

[0147] If the challenge is successful, the AP server 10 transmits a message to that effect to the user terminal 100, and the execution unit 106 reads the private key for electronic signature 52 from the security area 122 of the storage unit 120, applies the electronic signature 82 to the electronic document 80, and transmits the electronic document 80 to the AP server 10 (step S303). When the AP server 10 receives the electronic document 80 from the user terminal 100, it reads the public key for electronic signature 54 (FIG. 10(c)) associated with the terminal ID of the user U stored in the storage device 20, and verifies the electronic signature 82 (step S305).

[0148] The verification result may be transmitted to the user terminal 100, or the electronic document 80 may be transmitted to a predetermined destination if the verification of the electronic signature 82 confirms the validity of the electronic certificate. If the verification confirms that the electronic certificate is invalid, the user terminal 100 may be notified that the electronic signature 82 of the electronic document 80 is invalid and therefore the electronic document 80 cannot be submitted (transmitted). Furthermore, if the electronic certificate is confirmed to be invalid, a request can be made to the certification authority 50 to revoke the pair of the electronic signature public key 54 and the electronic signature private key 52.

[0149] According to this embodiment, by performing authentication processing for identity confirmation using an identification card 30 that does not have an IC chip 32 mounted thereon, it is possible to prevent fraudulent acts such as impersonation and legitimately execute predetermined processing that requires identity confirmation. Then, by simply performing identity confirmation on the user terminal 100, it becomes possible to execute predetermined processing such as applying a digital signature 82 to a digital document 80 without performing complicated operations. This improves the usability and security of the digital signature.

[0150] Although the embodiments of the present invention have been described above with reference to the drawings, these are merely examples of the present invention, and various configurations other than those described above can also be adopted. For example, in the above embodiment, the configuration has been described in which the application program 40 is installed in the user terminal 100 to realize the information processing device 100. However, in another embodiment, the application program 40 may be executed on a server on a cloud or on SaaS (Software as a Service), and the user terminal 100 may function as an operation terminal of the server. However, the above embodiment in which identity verification is performed on the user terminal 100 has the advantage of being able to further reduce the risk of personal information leakage. Therefore, a configuration in which some of the functions of the information processing device 100 (excluding identity verification, etc.) are executed on the server may also be used.

[0151] In the above embodiment, an example of applying a digital signature to an electronic document as the predetermined process has been described. In another example, the predetermined process may be a process in which the user U receives various services using the identity verification information recorded in the identification card 30, for example, a user authentication process when logging in to a portal site for the user U to receive various services related to My Number that do not involve electronic documents.

[0152] Although the same private key and public key pair as the private key and public key pair for electronic signature may be used, it is preferable to use a private key and public key pair different from the private key and public key pair for electronic signature because electronic signature processing and other processing are subject to different laws, etc. Hereinafter, they are referred to as user authentication private key 92, user authentication public key 94, and its electronic certificate 95.

[0153] FIG. 22 is a flowchart showing an example of an operation when a login process to a portal site is performed instead of the electronic signature procedure of step P11 in FIG. First, a menu screen is displayed when the application program 40 is started on the user terminal 100. When the user U selects logging in to the portal site on the menu screen, a login request is transmitted to the AP server 10 (step S331).

[0154] The application program 40 may be started by an operation of the user U, or may be started by accessing a specific portal site using a browser and then pressing a login request button for the portal site.

[0155] When the AP server 10 receives the login request, it executes challenge / response authentication for the user terminal 100 (step S203). Specifically, the AP server 10 generates a random number (challenge) 60 and transmits it to the user terminal 100.

[0156] 6 before responding to the challenge from the AP server 10. The identity verification process in step S1 is the same as that described above, so a description thereof will be omitted here.

[0157] If authentication of both the individual identification information and the terminal identification information is successful (YES in step S7 in FIG. 7), the execution unit 106 performs processing to apply a digital signature 62 to the random number (challenge) 60 transmitted from the AP server 10 in step S203 using the challenge public key 58 and transmit the result to the AP server 10 (step S333). At this time, the user authentication public key 94 and its digital certificate 95 stored in the storage unit 120 in step P1 are also transmitted to the AP server 10.

[0158] When the AP server 10 receives the random number (challenge) 60 with the digital signature 62 from the user terminal 100, it verifies the challenge response (step S229). The challenge public key 58 stored in the storage device 20 is used for the challenge response verification.

[0159] If the challenge is successful, the electronic certificate 95 of the received user authentication public key 94 is verified by inquiring of the certificate authority 50 (step S337). If the verification is successful, login processing to the portal site is performed (step S339). The user ID used when logging in may be, for example, the issue number of the electronic certificate 95. In this way, the user U can log in without inputting a login ID or password during the login processing.

[0160] Although the present invention has been described above with reference to the embodiments and examples, the present invention is not limited to the above-mentioned embodiments and examples. Various modifications that can be understood by those skilled in the art can be made to the configuration and details of the present invention within the scope of the present invention. In the present invention, when information about a user (user U) is acquired and used, this is done lawfully.

[0161] A part or all of the above-described embodiments can be described as, but are not limited to, the following supplementary notes. 1. A computer that realizes a terminal is an acquisition means for acquiring the first individual identifying information and the terminal identifying information from a portable recording medium on which the first individual identifying information and the terminal identifying information are recorded; an authentication means for authenticating second personal identification information acquired by a sensor mounted on the terminal and the terminal identification information of the terminal by using the first personal identification information and the terminal identification information acquired from the recording medium; an execution means for executing a predetermined process when the authentication is successful; and a program for realizing the process. 2. In the program described in 1., The predetermined process includes a process of transmitting data to which a digital signature has been added. 3. In the program according to 1. or 2., A program for causing a computer to realize a registration means for storing the terminal identification information in the recording medium when the authentication means successfully authenticates the second personal identification information using the first personal identification information.

[0162] 4. An acquisition means for acquiring the first individual identifying information and the terminal identifying information from a portable recording medium on which the first individual identifying information and the terminal identifying information are recorded; an authentication means for authenticating second individual identifying information acquired by a sensor mounted on a terminal and the terminal identifying information of the terminal, using the first individual identifying information and the terminal identifying information acquired from the recording medium; and an execution unit that executes a predetermined process when the authentication is successful. 5. In the information processing device according to 4., The predetermined process includes a process of transmitting data to which a digital signature has been added. 6. In the information processing device according to 4. or 5., The information processing device further comprises a registration means for storing the terminal identification information in the recording medium when the authentication means succeeds in authenticating the second individual identification information using the first individual identification information.

[0163] 7. An information processing device, Acquire the first individual identifying information and the terminal identifying information from a portable recording medium on which the first individual identifying information and the terminal identifying information are recorded; authenticating second individual identifying information acquired by a sensor mounted on the terminal and the terminal identifying information of the terminal using the first individual identifying information and the terminal identifying information acquired from the recording medium; and executing a predetermined process when the authentication is successful. 8. In the information processing method according to 7., The information processing method, wherein the predetermined process includes a process of transmitting data to which a digital signature has been added. 9. In the information processing method according to 7. or 8., The information processing device, When the authentication means has succeeded in authenticating the second individual identifying information using the first individual identifying information, the information processing method stores the terminal identifying information in the recording medium. [Explanation of symbols]

[0164] 1. Electronic Procedures System 3. Communication Network 10 AP Server 20 Storage device 30 Identification Card 30a My Number Card 32 IC chip 34 Memory 36 processors 38 NFC communication unit 40 Application Programs 42 Facial Features 44 PIN Code 46 Device ID 50 Certificate Authorities 52 Private key for electronic signature 54 Public Key for Digital Signature 56 Challenge secret key 58 Challenge public key 62 Electronic Signature 80 Electronic Documents 82 Electronic Signature 100 Information processing device, user terminal 102 Acquisition Department 104 Authentication Section 106 Executive Department 108 Registration Department 120 Storage section 122 Security Area 1000 Computers 1010 Bus 1020 Processor 1030 Memory 1040 Storage Device 1050 Input / Output Interface 1060 Network Interface

Claims

[Claim 1] A computer that realizes a terminal, an acquisition means for acquiring the first individual identifying information and the terminal identifying information from a portable recording medium on which the first individual identifying information and the terminal identifying information are recorded; an authentication means for authenticating second individual identifying information acquired by a sensor mounted on the terminal and terminal identifying information stored in a storage unit of the terminal, using the first individual identifying information acquired from the recording medium and the terminal identifying information, respectively; an execution means for executing a predetermined process when the authentication is successful; and a program for realizing the process.

Images