Information processing program, information processing system, and information processing method

Abstract

To provide an information processing program, an information processing system, and an information processing method capable of reducing a security risk while preventing user convenience deterioration when providing services.SOLUTION: An authentication management system (10) comprises management database, a request part, an extraction part, and a notification part. The management database manages in associating biometric authentication means capable of using for the authentication of the user using a special service with the application to urge the user to take the action to acquire the biometric data used in the biometric authentication means; the request part requests the user to take the action using the application associated with the biometric authentication means in the management database; the extraction part extracts the biometric data based on the response information from the user using the application; the notification part notifies the specific service provider of the user authentication result using the biometric authentication means based on the biometric data.SELECTED DRAWING: Figure 7

Description

[Technical field]

[0001] The present invention relates to an information processing program, an information processing system, and an information processing method. [Background technology]

[0002] In recent years, while many electronic services have been provided to users, the problem of reduced user convenience caused by the requirement for user authentication each time the electronic service is used has become a problem. For example, Patent Document 1 describes a method of partially omitting user authentication with the user's consent in order to solve the reduced convenience caused by the need to input authentication information for logging into an electronic payment service each time the electronic payment service is used and the resulting need for multiple screen transitions to complete payment. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent No. 7085700 Summary of the Invention [Problem to be solved by the invention]

[0004] However, if part of the authentication process is omitted with the user's consent in order to improve user convenience, as in the technology described in Patent Document 1, there is a concern that security risks may arise when providing services.

[0005] The present disclosure has been made in consideration of the above circumstances, and one of its objectives is to provide an information processing program, an information processing system, and an information processing method that can reduce security risks while preventing a decrease in user convenience when providing services. [Means for solving the problem]

[0006] An information processing program according to one aspect of the present disclosure causes a computer to function as: a management database that associates and manages a biometric authentication means that can be used to authenticate a user who uses a specific service with an application that prompts the user to take an action to obtain biometric data to be used by the biometric authentication means; a request unit that requests the user to take an action using the application associated with the biometric authentication means in the management database; an extraction unit that extracts the biometric data based on response information from the user who has used the application; and a notification unit that notifies a provider of the specific service of the result of authentication of the user performed using the biometric authentication means based on the biometric data.

[0007] An information processing system according to another aspect of the present disclosure includes a management database that associates and manages a biometric authentication means that can be used to authenticate a user who uses a specific service and an application that prompts the user to take an action to obtain biometric data to be used by the biometric authentication means, a request unit that requests the user to take an action using the application associated with the biometric authentication means in the management database, an extraction unit that extracts the biometric data based on response information from the user who has used the application, and a notification unit that notifies a provider of the specific service of the result of authentication of the user performed using the biometric authentication means based on the biometric data.

[0008] An information processing method according to another aspect of the present disclosure includes a computer requesting the user to take an action using an application associated with a biometric authentication means in a management database that associates and manages a biometric authentication means that can be used to authenticate a user who uses a specific service with an application that prompts the user to take an action to obtain biometric data to be used by the biometric authentication means, extracting the biometric data based on response information from the user who has used the application, and notifying a provider of the specific service of the result of authentication of the user performed using the biometric authentication means based on the biometric data. Effect of the Invention

[0009] According to one aspect of the present disclosure, it is possible to prevent a decrease in user convenience when providing services, while reducing security risks. [Brief description of the drawings]

[0010] [Figure 1] 1 is a diagram showing a schematic configuration of an information processing system according to an embodiment of the present invention. [Diagram 2] FIG. 2 is a diagram illustrating an example of a hardware configuration of each information processing device in the information processing system according to the present embodiment. [Diagram 3] FIG. 2 is a diagram illustrating an example of a functional configuration of an information processing system according to the present embodiment. [Figure 4] FIG. 4 is a diagram showing an example of biometric authentication means information according to the embodiment; [Diagram 5] FIG. 4 is a diagram illustrating an example of application information according to the embodiment. [Figure 6] 11A and 11B are diagrams illustrating an example of biometric data extracted from request and response information for an operation using the biometric data extraction application according to the embodiment. [Figure 7] FIG. 2 is a diagram illustrating an example of an operation of the information processing system according to the present embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0011] Hereinafter, an information processing system according to an embodiment of the present invention will be described in detail with reference to the drawings. In the following description of the drawings, the same or similar parts are denoted by the same or similar reference numerals.

[0012] (overview) An overview of an information processing system according to this embodiment will be described with reference to Fig. 1. Fig. 1 is a diagram showing an overview of an information processing system according to this embodiment.

[0013] As shown in FIG. 1, the information processing system 1 includes an authentication management system 10, a biometric authentication system 20, an application providing system 30, a service providing system 40, a user terminal 50, and a network 60.

[0014] The authentication management system 10 is an information processing system that manages biometric authentication of users who use a specific service. Specifically, the authentication management system 10 manages authentication of users of a specific service provided by a service providing system 40, using a biometric authentication means provided by a biometric authentication system 20.

[0015] The biometric authentication system 20 is an information processing system that provides a biometric authentication means. The biometric authentication means is, for example, at least one of voiceprint authentication, face authentication, iris authentication, behavior authentication, vein authentication, and fingerprint authentication, but is not limited to these. The biometric authentication means is not limited to the above as long as it is a means for performing authentication using data related to the user's body (hereinafter referred to as "biometric data"). The biometric data is, for example, image data of a part of the user's body (for example, face, palm, fingers, etc.), voice data input by the user, user operation data, etc., but is not limited to these.

[0016] The application providing system 30 is an information processing system that provides an application (hereinafter, referred to as a "biometric data extraction application") that prompts a user to take an action to extract biometric data used in a biometric authentication means. The biometric data extraction application is, for example, an application that prompts a user to input voice (for example, a voice recognition application), an application that captures a part of a user's body (for example, a face, a palm, a finger, etc.) (for example, a mirror application, a palm reading application, etc.), an application that accepts an operation from a user (for example, a game application), etc., but is not limited thereto. The biometric data extraction application may be any information processing means that can acquire biometric data used in the biometric authentication means without making the user aware of the authentication action using the biometric authentication means, and is not limited to the above-mentioned applications, and may of course include, for example, a Web application, a script, etc.

[0017] The service providing system 40 is an information processing system that provides a specific service requiring user authentication to the user. The specific service may be any service provided to the user via the network 60, such as electronic commerce, games, digital banking, etc.

[0018] The user terminal 50 is, for example, a smartphone, a tablet, a personal computer, a game console, VR (Virtual Reality) goggles, a VR headset, etc. The user terminal 50 includes hardware (for example, a camera, a microphone, a keyboard, a controller, etc.) capable of acquiring biometric data of a user.

[0019] The network 60 is a wireless and / or wired network, and may include at least one of the Internet, an intranet, and a bus. At least two of the authentication management system 10, the biometric authentication system 20, the application providing system 30, the service providing system 40, and the user terminal 50 are connected via the network 60.

[0020] The authentication management system 10, the biometric authentication system 20, the application providing system 30, and the service providing system 40 may each be a single information processing device, or may be configured with multiple information processing devices. Furthermore, at least two of the authentication management system 10, the biometric authentication system 20, the application providing system 30, and the service providing system 40 may be provided as different functions of the same information processing system or information processing device. For example, the application providing system 30 and the service providing system 40 may be different functions of the same information processing system or information processing device, and a part of a means for providing a specific service (for example, a Web application, a game application, or the like) may be used as the application for extracting biometric data.

[0021] Furthermore, the authentication management system 10, the biometric authentication system 20, the application providing system 30, and the service providing system 40 may be provided by different businesses, or at least two of them may be provided by the same business. For example, the authentication management system 10 and the biometric authentication system 20 may be provided by the same business. Furthermore, the application providing system 30 and the service providing system 40 may be provided by the same business.

[0022] 1, an authentication management system 10 manages a biometric authentication means provided by a biometric authentication system 20 and a biometric data extraction application provided by an application providing system 30 in association with each other. The authentication management system 10 requests a user to take an action using the biometric data extraction application associated with the biometric authentication means, extracts biometric data based on response information from the user who has used the biometric data extraction application, and notifies a service providing system 40 of the result of authentication of the user performed using the biometric authentication means based on the acquired biometric data.

[0023] In this way, the authentication management system 10 extracts biometric data based on response information from a user who uses a biometric data extraction app, without the user being aware that it is an authentication process, and performs authentication using a biometric authentication means based on the extracted biometric data, thereby preventing a decrease in user convenience when providing services and reducing security risks.

[0024] (composition) The configuration of the information processing system 1 will be described with reference to Figs. 2 and 3. Fig. 2 is a diagram showing an example of the hardware configuration of each information processing device in the information processing system 1 according to this embodiment. Each device in the information processing system 1 (for example, one or more information processing devices constituting each of the authentication management system 10, the biometric authentication system 20, the application providing system 30, and the service providing system 40, the user terminal 50, etc.) has a processor 11 such as a CPU (Central Processing Unit) equivalent to a calculation device, a storage unit 12, a transmission / reception unit 13, and an input / output unit 14. Each of these components is connected to each other via a bus so as to be able to transmit and receive data to and from each other.

[0025] The processor 11 is, for example, a CPU, and controls each device in the information processing system 1. The processor 11 may execute various processes described in this embodiment by reading and executing a program from the storage unit 12. Each device in the information processing system 1 may include one or more processors 11. Furthermore, each of the devices may be called a computer.

[0026] The storage unit 12 is configured with, for example, storage such as a memory, a hard disk drive (HDD) and / or a solid state drive (SSD), etc. The storage unit 12 may store various information necessary for the processor 11 to execute processing (for example, an information processing program executed by the processor 11, etc.).

[0027] The transceiver 13 is a device that communicates via a network, and may include, for example, a network card, a communication module, a chip, an antenna, etc. The transceiver 13 may include a transmitter that transmits various information via the network, and / or a receiver that receives various information via the network.

[0028] The input / output unit 14 includes an input unit such as a keyboard, a touch panel, a mouse, and / or a microphone, and an output unit such as a display and / or a speaker. The input unit receives input of various information from a user. The output unit may include a display unit that displays various information for the user.

[0029] The hardware configuration described above is merely an example. Each device in the information processing system 1 may omit some of the hardware shown in Fig. 2, or may include hardware not shown in Fig. 2. Furthermore, the hardware shown in Fig. 2 may be configured by one or more chips.

[0030] The hardware configuration described above is merely an example. Each information processing device may omit some of the hardware shown in FIG. 2, or may include hardware not shown in FIG. 2. The hardware shown in FIG. 2 may be configured with one or more chips. When an information processing device is configured with multiple devices, each device may include at least some of the hardware.

[0031] Fig. 3 is a diagram showing an example of the functional configuration of the information processing system according to this embodiment. Note that Fig. 3 is merely an example, and it goes without saying that each device in the information processing system may have a configuration not shown.

[0032] 3, the authentication management system 10 includes a reception unit 101, a registration unit 102, a management database 103, a presentation unit 104, a request unit 105, an extraction unit 106, and a notification unit 107. The reception unit 101, the registration unit 102, the management database 103, the presentation unit 104, the request unit 105, the extraction unit 106, and the notification unit 107 are realized by at least a part of the information processing program executed by the processor 11, the storage unit 12, the transmission / reception unit 13, and the input / output unit 14, respectively, which are shown in FIG.

[0033] The receiving unit 101 receives information related to a biometric authentication means (hereinafter referred to as "biometric authentication means information") and information related to an application for extracting biometric data (hereinafter referred to as "application information"). Specifically, the receiving unit 101 receives the biometric authentication means information provided by the biometric authentication system 20. On the other hand, the receiving unit 101 receives the application information provided by the application providing system 30.

[0034] 4 is a diagram showing an example of biometric authentication means information according to this embodiment. The biometric authentication means information includes at least (1) information indicating requirements for authentication using a biometric authentication means (hereinafter referred to as "requirements information"), and may include at least one of (2) information regarding a provider of the biometric authentication means (hereinafter referred to as "authentication provider information"), (3) information for identifying the biometric authentication means (hereinafter referred to as "biometric authentication ID"), (4) information indicating the type of biometric authentication means (hereinafter referred to as "biometric authentication type"), and (5) information regarding the conditions for using the biometric authentication means (hereinafter referred to as "use conditions information").

[0035] (1) The requirement information may include at least one of the requirements of a biometric data extraction application for providing biometric data to a biometric authentication means (e.g., requirements for hardware such as a microphone and a camera, and requirements for data acquired using the hardware), and requirements for connecting to the biometric data extraction application (e.g., requirements for an API (Application Program Interface) and information on an SDK (Software Development Kit)). For example, FIG. 4 shows that "voice data of one second or more" is required as a requirement for voiceprint authentication of biometric authentication ID "001". Similarly, it shows that "image data with a resolution of X or more" is required as a requirement for face authentication of biometric authentication ID "002", and "image data with a resolution of Y or more" is required as a requirement for iris authentication of biometric authentication ID "003". Note that, in FIG. 4, the resolution X is less than the resolution Y, but this is not limited to this. Also, the biometric authentication means information in FIG. 4 is merely an example, and the biometric authentication means information is not limited to that shown in the figure.

[0036] (2) The authentication provider information may include the name, attributes, etc. of the business that provides the biometric data extraction app. (3) The biometric authentication ID may be any information that identifies the biometric authentication means and is not limited to the number shown in Fig. 4. (4) The biometric authentication type indicates the type of biometric authentication means, such as voiceprint authentication, face authentication, iris authentication, behavior authentication, vein authentication, and fingerprint authentication. (5) The usage condition information may include at least one of the contract conditions and fee conditions for using the biometric authentication means.

[0037] 5 is a diagram showing an example of application information according to the present embodiment. The application information may include at least one of the following: (1) information for identifying an application for extracting biometric data (hereinafter referred to as "application ID"), (2) information on a provider of the application for extracting biometric data (hereinafter referred to as "application provider information"), (3) information on a type of the application for extracting biometric data (hereinafter referred to as "application type"), (4) information on a business entity that uses the application for extracting biometric data (hereinafter referred to as "application user business entity information"), and (5) information on biometric data that can be acquired using the application for extracting biometric data (hereinafter referred to as "biometric data information").

[0038] (1) The application ID may be information for identifying the biometric data extraction application and is not limited to that shown in Fig. 5. (2) The application provider information may include the name, attributes, etc. of the business providing the biometric data extraction application. (3) The application type indicates the type of the biometric data extraction application, such as a game application, a mirror application, a voice recognition application, a palm reading application, and a photography application. (4) The application user application information may include the name, attributes, and information regarding the contract with the provider of the biometric authentication means of the business using the biometric data extraction application.

[0039] (5) Biometric data information is information on biometric data corresponding to an application type. The biometric data information may indicate that, for example, image data showing facial features can be acquired in a mirror application or a photography application, voice data in a voice recognition application, operation data in an application involving a certain operation such as a game application, and image data showing veins and / or fingerprints can be acquired in a palm reading application. For example, in FIG. 5, "operation data for 3 seconds" is shown as biometric data information that can be acquired in a game application with application ID "#0". Similarly, "image data with resolution X or higher showing facial features" is shown as biometric data information that can be acquired in a mirror application with application ID "#1", "voice data for 1 second" is shown as biometric data information that can be acquired in a voice recognition application with application ID "#2", and "image data with resolution Y showing veins and / or fingerprints" is shown as biometric data information that can be acquired in a palm reading application with application ID "#3". Note that, in FIG. 5, the resolution X is less than the resolution Y, but this is not limited to this. Also, the application information in FIG. 5 is merely an example, and the application information is not limited to that shown in the figure.

[0040] The registration unit 102 associates the biometric authentication means with a biometric data extraction application based on the biometric authentication means information and the application information accepted by the acceptance unit 101, and registers them in the management database 103. Specifically, the registration unit 102 may specify a biometric data extraction application that satisfies the requirements indicated by the requirement information included in the biometric authentication means information, based on the application information, and register the specified biometric data extraction application in the management database 103 in association with the biometric authentication means.

[0041] For example, the biometric data information in the app information shown in Fig. 5 indicates that image data with resolution X showing the user's appearance can be acquired by a mirror app with app ID "#1". On the other hand, the requirement information in the biometric authentication means information shown in Fig. 4 indicates that image data with resolution X or higher is required for face authentication of biometric authentication ID "002". In this case, since the mirror app with app ID "#1" satisfies the requirements for face authentication of biometric authentication ID "002", the registration unit 102 may associate the mirror app with app ID "#1" with face authentication of biometric authentication ID "002" and register them in the management database 103.

[0042] 4 and 5, if resolution X<resolution Y, the mirror application with application ID "#1" does not satisfy the requirements of the iris authentication, vein authentication, and fingerprint authentication of biometric authentication IDs "003", "005", and "006", which respectively require image data with a resolution of Y or higher. Therefore, registration unit 102 does not associate the mirror application with application ID "#1" with each of the iris authentication, vein authentication, and fingerprint authentication of biometric authentication IDs "003", "005", and "006".

[0043] The management database 103 associates the biometric authentication means with the biometric data extraction application. Specifically, the management database 103 associates and stores biometric authentication means information with application information according to registration in the registration unit 102.

[0044] The presentation unit 104 may present information for adjusting the settings of the biometric data extraction application (hereinafter, referred to as "application adjustment information") to a provider of the biometric data extraction application. Specifically, the presentation unit 104 transmits the application adjustment information to the application providing system 30 via the transmission / reception unit 13. The application adjustment information may include, for example, matters related to adjustment of the resolution of image data, adjustment of the input period of voice data, or adjustment of the input period of operation data. For example, when the registration unit 102 does not identify a biometric data extraction application that satisfies the requirements indicated by the requirement information included in the biometric authentication means information based on the application information, the presentation unit 104 may transmit application adjustment information set to satisfy the requirements to the application providing system 30. Furthermore, when authentication using biometric data extracted using the biometric data extraction application results in an error, the presentation unit 104 may transmit application adjustment information set to improve the accuracy of the extracted biometric data to the application providing system 30.

[0045] Furthermore, the presenting unit 104 may present information for adjusting the settings of the biometric authentication means (hereinafter, referred to as "authentication means adjustment information") to the provider of the biometric authentication means. Specifically, the presenting unit 104 transmits the authentication means adjustment information to the biometric authentication system 20 via the transmitting / receiving unit 13. The authentication means adjustment information may include, for example, adjustment items such as relaxing requirements for biometric data. For example, when the registration unit 102 does not identify a biometric data extraction application that satisfies the requirements indicated by the requirement information included in the biometric authentication means information based on the application information, the presenting unit 104 may transmit authentication means adjustment information for relaxing the requirements to the biometric authentication system 20. Furthermore, when authentication using biometric data extracted using the biometric data extraction application results in an error, the presenting unit 104 may transmit authentication means adjustment information for relaxing the authentication requirements to the biometric authentication system 20.

[0046] The request unit 105 requests the user to perform an operation using a biometric data extraction application associated with a biometric authentication means used for authenticating a user of a specific service in the management database 103. Specifically, the request unit 105 may transmit information requesting an operation using the biometric data extraction application (hereinafter referred to as "request information") to the user terminal 50 via the transmission / reception unit 13.

[0047] For example, when the biometric data extraction application is a mirror application, the request unit 105 may request the user to capture an image of the user's face as an action using the mirror application. When the biometric data extraction application is a voice recognition application, the request unit 105 may request the user to input voice as an action using the voice recognition application. When the biometric data extraction application is a game application, the request unit 105 may request the user to perform a predetermined operation as an action using the game application.

[0048] The extraction unit 106 extracts biometric data based on response information from a user who uses the biometric data extraction application. The extraction unit 106 provides the extracted biometric data to the biometric authentication system 20. Specifically, the extraction unit 106 may receive the response information from the user terminal 50 via the transmission / reception unit 13, and transmit the biometric data extracted from the response information to the biometric authentication system 20 via the transmission / reception unit 13.

[0049] For example, the extraction unit 106 may extract image data showing facial features based on response information from a user who uses a mirror app. The extraction unit 106 may also extract image data showing veins and / or fingerprints based on response information from a user who uses a palm reading app. The extraction unit 106 may also extract image data showing at least one of facial features, veins, and fingerprints based on response information from a user who uses a photography app. The extraction unit 106 may also extract operation data based on response information from a user who uses a game app.

[0050] Fig. 6 is a diagram showing an example of biometric data extracted from a request for an operation using a biometric data extraction application according to this embodiment and response information. For example, in Fig. 6, the specific service requesting user authentication is a game, the biometric authentication means for the authentication is fingerprint authentication, and the biometric data extraction application associated with the fingerprint authentication is a palm reading application. Note that Fig. 6 is merely an example, and the specific service, biometric authentication means, and biometric data extraction application are of course not limited to those shown in the figure.

[0051] For example, in FIG. 6, the request unit 105 requests the user to perform an operation using a palm reading app associated with fingerprint authentication used for game authentication. For example, the request unit 105 may display a screen D1 prompting the user to read the palm on the display unit of the user terminal 50 when stage 1 of the game is completed. The user taps on an area R1 of the screen D1 to advance the game to stage 2. This causes the palm reading app provided by the application providing system 30 to be launched, and a screen D2 of the palm reading app is displayed on the display unit of the user terminal 50. On the screen D2 of the palm reading app, the user taps on an area R2 according to an instruction of the palm reading app to capture an image of the user's palm. Image data I1 of the palm may be fed back from the user terminal 50 to the authentication management system 10 as response information from the user who used the palm reading app. The extraction unit 106 extracts at least a part of the image data I1 (here, image data I2 showing the index finger) as biometric data.

[0052] In Fig. 6, the user is aware that he / she is reading the palm of his / her hand to continue the game, but is not aware that an authentication action is performed based on the palm of his / her hand. In other words, biometric data (e.g., image data I2) can be extracted by using a palm reading app to advance to the next stage 2 of the game, without the user being aware of the authentication action, and fingerprint authentication can be performed using the biometric data. In this way, one or more authentication actions can be performed while the game is in progress without the user being aware of it, so that the user's convenience is not reduced and the security risk when providing the game to the user can be reduced.

[0053] The notification unit 107 notifies the service provider of the result of user authentication performed using the biometric authentication means based on the biometric data in response to a request by the request unit 105. Specifically, the notification unit 107 may notify the service providing system 40 of the result of the authentication.

[0054] If the result of the authentication indicates a successful authentication, the service providing system 40 may provide a specific service to the user terminal 50. For example, in the case shown in Fig. 6, if the authentication management system 10 notifies the user that the authentication is successful as a result of the fingerprint authentication based on the image data I2, the service providing system 40 may advance the game to stage 2 and allow the user to continue playing the game on the user terminal 50. On the other hand, if the authentication management system 10 notifies the user that the authentication is unsuccessful as a result of the fingerprint authentication based on the image data I2, the service providing system 40 may not advance the game to stage 2 and allow the user to stop playing the game on the user terminal 50.

[0055] (operation) The operation of the information processing system 1 according to this embodiment will be described with reference to Fig. 7. Fig. 7 is a diagram showing an example of the operation of the information processing system 1 according to this embodiment. Note that Fig. 7 is merely an example, and the order of some steps may be changed, some steps may not be performed, or steps not shown may be added.

[0056] In step S101, the receiving unit 101 of the authentication management system 10 receives biometric authentication means information from the biometric authentication system 20. In step S102, the receiving unit 101 receives application information from the application providing system 30.

[0057] In step S103, the registration unit 102 of the authentication management system 10 associates the biometric data extraction application with the biometric authentication means based on the biometric authentication means information accepted in step S101 and the application information accepted in step S102, and registers the application in the management database 103. Specifically, the registration unit 102 may identify a biometric data extraction application that satisfies the requirements indicated by the requirement information included in the biometric authentication means information, based on the application information, and register the identified biometric data extraction application in the management database 103 in association with the biometric authentication means.

[0058] In step S104, the request unit 105 of the authentication management system 10 requests the user to perform an operation using a biometric data extraction app (for example, taking an image of the palm using a palm reading app in FIG. 6) associated with the biometric authentication means used for authenticating the user of a specific service in the management database 103. Specifically, the request unit 105 may transmit request information for the operation using the biometric data extraction app to the user terminal 50 via the transmission / reception unit 13.

[0059] In step S105, the user terminal 50 accepts input of response information from the user who used the biometric data extraction application in response to the request information received in step S104, and transmits the response information to the authentication management system 10. In step S106, the application providing system 30 acquires the response information from the authentication management system 10, and controls the operation of the biometric data extraction application based on the response information. For example, in FIG. 6, palm image data I1 is fed back from the user terminal 50 to the authentication management system 10 as response information from the user who used the palm reading application, and the image data I1 is acquired by the application providing system 30. The application providing system 30 may notify the user terminal 50 of the fortune telling result based on the image data I1.

[0060] In step S107, the extraction unit 106 of the authentication management system 10 extracts biometric data (for example, finger image data I2 in FIG. 6) based on the response information. In step S108, the extraction unit 106 provides the extracted biometric data to the biometric authentication system 20. In step S109, the biometric authentication system 20 performs authentication using a biometric authentication means based on the biometric data provided by the authentication management system 10.

[0061] In step S110, the biometric authentication system 20 notifies the authentication management system 10 of the result of the authentication of the user using the biometric authentication means in step S109. In step S111, the notification unit 107 of the authentication management system 10 acquires the authentication result notified from the biometric authentication system 20, and notifies the service providing system 40 of the authentication result.

[0062] In step S112, the service providing system 40 provides the service to the user based on the authentication result notified by the notifying unit 107.

[0063] As described above, in the information processing system 1 according to the present embodiment, the user is made to use a biometric data extraction application that does not explicitly indicate authentication actions (for invisible biometric authentication), and the biometric data of the user is extracted, and biometric authentication using the biometric data is performed. This allows one or more authentication actions to be performed to provide a specific service to the user without the user being aware of it, and therefore, the convenience for the user is not reduced, and the security risk when providing a game to the user can be reduced.

[0064] (Other embodiments) As shown in FIG. 6, this embodiment may be premised on the premise that the service provision (e.g., the provision of a game service) and the authentication app (e.g., a palm reading app as an app for extracting biometric data as biometric data associated with fingerprint authentication) are in a continuous flow, or the service provision and the authentication app do not have to be in a continuous flow. For example, when a user regularly uses a specific app for extracting biometric data, authentication of the service associated with the specific app for extracting biometric data may be skipped. Furthermore, the specific app for extracting biometric data may be the app for providing the service itself. For example, voiceprint authentication may be performed based on the user's voice input in response to an instruction from a game app as the specific app for extracting biometric data, and whether or not to provide the game service may be determined.

[0065] The above-described embodiments are intended to facilitate understanding of the present invention, and are not intended to limit the present invention. The elements of the embodiments, as well as their arrangements, materials, conditions, shapes, sizes, etc., are not limited to those shown as examples and can be changed as appropriate. In addition, configurations shown in different embodiments can be partially substituted or combined with each other. [Explanation of symbols]

[0066] 1...information processing system, 10...authentication management system, 20...biometric authentication system, 30...application providing system, 40...service providing system, 50...user terminal, 60...network, 11...processor, 12...storage unit, 13...transmission / reception unit, 14...input / output unit, 101...reception unit, 102...registration unit, 103...management database, 104...presentation unit, 105...request unit, 106...extraction unit, 107...notification unit

Claims

1. Computer, a management database that manages, in association with each other, a biometric authentication means that can be used to authenticate a user who uses a specific service and an application that prompts the user to take an action to obtain biometric data to be used in the biometric authentication means; a request unit that requests the user to take an action using the application associated with the biometric authentication means in the management database; an extraction unit that extracts the biometric data based on response information from the user who uses the application; a notification unit that notifies a provider of the specific service of a result of authentication of the user performed using the biometric authentication means based on the biometric data; An information processing program that enables the device to function.

2. The computer, a reception unit that receives biometric authentication means information related to the biometric authentication means and application information related to the application; a registration unit that associates the application with the biometric authentication means based on the biometric authentication means information and the application information, and registers the application in the management database; 2. The information processing program according to claim 1, further functioning as a

3. the biometric authentication means includes requirement information indicating requirements for authentication using the biometric authentication means; the registration unit identifies an application that satisfies the requirements indicated by the requirement information based on the app information, associates the identified application with the biometric authentication means, and registers the application in the management database.

3. The information processing program according to claim 2.

4. The computer, a presentation unit that presents information for adjusting settings of the application to a provider of the application and / or presents information for adjusting settings of the biometric authentication means to a provider of the biometric authentication means; 4. The information processing program according to claim 3, further functioning as:

5. a management database that manages, in association with each other, a biometric authentication means that can be used to authenticate a user who uses a specific service and an application that prompts the user to take an action to obtain biometric data to be used in the biometric authentication means; a request unit that requests the user to take an action using the application associated with the biometric authentication means in the management database; an extraction unit that extracts the biometric data based on response information from the user who uses the application; a notification unit that notifies a provider of the specific service of a result of authentication of the user performed using the biometric authentication means based on the biometric data; An information processing system comprising:

6. The computer a management database that manages biometric authentication means that can be used to authenticate a user who uses a specific service and an application that prompts the user to take an action to obtain biometric data to be used by the biometric authentication means in association with the biometric authentication means, and requests the user to take an action using the application associated with the biometric authentication means; Extracting the biometric data based on response information from the user using the application; notifying a provider of the specific service of a result of authentication of the user performed using the biometric authentication means based on the biometric data; Information processing methods.

Images