Terminal, control method of terminal, and program

Abstract

To provide a terminal that can smoothly perform reception for residents in a place of refuge, or the like.SOLUTION: A terminal includes user registration control means and reception control means. The user registration control means is configured to perform control regarding first identity verification based on an identity card carried by a user, and acquire, when the first identity verification is successful, basic information from the identification card. The user registration control means stores the acquired basic information and first biometric information used for the first identity verification. The reception control means performs, when a user asks for reception in a predetermined facility, control regarding second identity verification using the stored first biometric information and biometric information of a user who asks for the reception. The reception control means performs, when the second identity verification is successful, control to submit form information including the stored basic information to a manager of the predetermined facility.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a terminal, a terminal control method, and a program. [Background technology]

[0002] When a large-scale disaster such as a storm, flood, or earthquake is predicted, residents will evacuate to evacuation shelters. Various technologies that can be applied to evacuating residents have been developed.

[0003] For example, Patent Document 1 describes that a server device is provided that guides residents to suitable evacuation shelters. The server device of Patent Document 1 includes a resident information database, a receiving unit, an authentication unit, and a determination unit. The resident information database stores biometric information of each of a plurality of residents. The receiving unit receives an evacuation destination determination request including biometric information of the evacuation seeker and location information of the first terminal from a first terminal operated by the evacuation seeker who wishes to evacuate to the evacuation shelter. The authentication unit identifies the evacuation seeker from among the plurality of residents by biometric authentication using the biometric information of the evacuation seeker and the biometric information stored in the resident information database. The determination unit determines an evacuation shelter to be the evacuation destination for the identified evacuation seeker from among the plurality of evacuation shelters based on at least the location information of the first terminal. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] International Publication No. 2022 / 044196 Summary of the Invention [Problem to be solved by the invention]

[0005] When residents evacuate to a shelter, they need to record information such as their name and address in a ledger. If residents are required to enter this information, congestion may occur at the shelter's reception desk if many evacuees visit the shelter at the same time. In other words, entering this information hinders the smooth reception of evacuees.

[0006] Note that the congestion at the reception desk of evacuation shelters cannot be resolved even if the technology disclosed in Patent Document 1 is applied. Patent Document 1 only predicts evacuation behavior when a disaster occurs using a computer simulation.

[0007] A primary object of the present invention is to provide a terminal, a control method for the terminal, and a program that contribute to realizing a smooth reception of residents at evacuation shelters and the like. [Means for solving the problem]

[0008] According to a first aspect of the present invention, there is provided a terminal comprising: a user registration control means for controlling a first identity verification based on an identification card held by a user, and, if the first identity verification is successful, acquiring basic information from the identification card and storing the acquired basic information and the first biometric information used for the first identity verification; and a reception control means for controlling a second identity verification using the stored first biometric information and the biometric information of the user at the reception when the user checks in at a designated facility, and, if the second identity verification is successful, controlling the submission of report information including the stored basic information to an administrator of the designated facility.

[0009] According to a second aspect of the present invention, there is provided a method for controlling a terminal, in which a first identity verification is performed based on an identification card held by a user, and if the first identity verification is successful, basic information is obtained from the identification card, and the obtained basic information and first biometric information used for the first identity verification are stored, and when the user checks in at a designated facility, a second identity verification is performed using the stored first biometric information and the biometric information of the user checking in, and if the second identity verification is successful, a control is performed to submit report information including the stored basic information to an administrator of the designated facility.

[0010] According to a third aspect of the present invention, there is provided a program for causing a computer mounted on a terminal to execute the following processes: control over first identity verification based on an identification card held by a user, and, if the first identity verification is successful, acquire basic information from the identification card and store the acquired basic information and the first biometric information used for the first identity verification; and, when the user checks in at a designated facility, control over second identity verification using the stored first biometric information and the biometric information of the user checking in, and, if the second identity verification is successful, control the submission of report information including the stored basic information to an administrator of the designated facility. Effect of the Invention

[0011] According to each aspect of the present invention, a terminal, a control method for a terminal, and a program are provided that contribute to realizing a smooth reception of residents at an evacuation shelter or the like. Note that the effects of the present invention are not limited to the above. The present invention may achieve other effects instead of or in addition to the effects. [Brief description of the drawings]

[0012] [Figure 1] FIG. 1 is a diagram for explaining an overview of an embodiment. [Diagram 2] FIG. 2 is a flowchart showing an example of the operation of an embodiment. [Diagram 3] FIG. 3 is a diagram illustrating an example of a schematic configuration of an information processing system according to an embodiment of the present disclosure. [Figure 4] FIG. 4 is a diagram for explaining the operation of the information processing system according to the embodiment of the present disclosure. [Diagram 5] FIG. 5 is a diagram for explaining the operation of the information processing system according to the embodiment of the present disclosure. [Figure 6] FIG. 6 is a diagram for explaining the operation of the information processing system according to the embodiment of the present disclosure. [Figure 7] FIG. 7 is a diagram illustrating an example of a processing configuration of a terminal according to an embodiment of the present disclosure. [Figure 8]FIG. 8 is a diagram illustrating an example of a display of a terminal according to an embodiment of the present disclosure. [Figure 9] FIG. 9 is a flowchart illustrating an example of the operation of the reception control unit according to the embodiment of the present disclosure. [Figure 10] FIG. 10 is a diagram illustrating an example of a display of a terminal according to an embodiment of the present disclosure. [Figure 11] FIG. 11 is a diagram illustrating an example of a display of a terminal according to an embodiment of the present disclosure. [Figure 12] FIG. 12 is a diagram illustrating an example of a processing configuration of a server device according to an embodiment of the present disclosure. [Figure 13] FIG. 13 is a diagram illustrating an example of the evacuee management database according to an embodiment of the present disclosure. [Figure 14] FIG. 14 is a sequence diagram illustrating an example of the operation of the information processing system according to the embodiment of the present disclosure. [Figure 15] FIG. 15 is a diagram illustrating an example of a display of a terminal according to a modified example of the embodiment of the present disclosure. [Figure 16] FIG. 16 is a diagram illustrating an example of a display of a terminal according to a modified example of the embodiment of the present disclosure. [Figure 17] FIG. 17 is a diagram illustrating an example of a display of a terminal according to a modified example of the embodiment of the present disclosure. [Figure 18] FIG. 18 is a diagram illustrating an example of a processing configuration of a server device according to a modified example of the embodiment of the present disclosure. [Figure 19] FIG. 19 is a diagram illustrating an example of a display on an employee terminal according to a modified example of the embodiment of the present disclosure. [Figure 20] FIG. 20 is a diagram illustrating an example of a display on an employee terminal according to a modified example of the embodiment of the present disclosure. [Figure 21] FIG. 21 is a diagram illustrating an example of a hardware configuration of a terminal according to the present disclosure. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0013] First, an outline of one embodiment will be described. The reference numerals in the drawings are added to each element for convenience as an example to aid in understanding, and the description of the outline is not intended to be limiting. Furthermore, unless otherwise specified, the blocks shown in each drawing represent functional units rather than hardware units. The connection lines between the blocks in each drawing include both bidirectional and unidirectional. The unidirectional arrows are used to diagrammatically indicate the flow of the main signal (data) and do not exclude bidirectionality. In this specification and the drawings, elements that can be similarly described may be given the same reference numerals to avoid redundant description.

[0014] The terminal 100 according to an embodiment includes a user registration control means 101 and an acceptance control means 102 (see FIG. 1). The user registration control means 101 controls the first identity verification based on an identification card held by the user, and if the first identity verification is successful, acquires basic information from the identification card (step S1 in FIG. 2). The user registration control means 101 stores the acquired basic information and the first biometric information used in the first identity verification (step S2). When the user checks in at a specified facility, the acceptance control means 102 controls the second identity verification using the stored first biometric information and the biometric information of the user who checks in (step S3). If the second identity verification is successful, the acceptance control means 102 controls the submission of form information including the stored basic information to the manager of the specified facility (step S4).

[0015] When the terminal 100 held by the user is successful in the first identity verification, it stores basic information (four basic pieces of information consisting of name, sex, date of birth, and address) obtained from the identification card and biometric information (e.g., face image) used for identity verification. When the user is checked in at a predetermined facility such as a shelter, the terminal 100, when the second identity verification is successful, transmits form information (information for managing and understanding users who have evacuated to the shelter) including the stored basic information to the manager of the shelter (e.g., local government). The local government can use the received form information to create a list of residents who have evacuated to the shelter (evacuee list), etc. In this way, since the process related to reception at the shelter is completed by the terminal 100, there is no congestion of evacuees at the reception of the shelter. As a result, smooth reception of residents at the shelter is realized. Also, unlike existing systems, the system including the terminal 100 does not centrally manage personal information of residents (personal information including biometric information) on the server side. In this system, each resident manages personal information on their own terminal 100, and when it is necessary to utilize the personal information, the personal information (document information) is provided to the server based on the resident's judgment. Since personal information is managed in a decentralized manner, a system that is robust against information leaks is realized.

[0016] Specific embodiments will be described in more detail below with reference to the drawings.

[0017] [First embodiment] The first embodiment will be described in more detail with reference to the drawings.

[0018] [System configuration] 3 is a diagram illustrating an example of a schematic configuration of an information processing system (disaster prevention system) according to an embodiment of the present disclosure. As illustrated in FIG. 3, the information processing system includes a disaster prevention center and at least one evacuation shelter.

[0019] Disaster prevention centers are managed and operated by local governments. Disaster prevention centers are set up in city halls, for example. Local schools, community centers, and other facilities qualify as evacuation shelters. Schools, community centers, and other facilities are used as "evacuation shelters" in the event of a disaster.

[0020] The disaster prevention center manages and operates the server device 10. The server device 10 is a server that is responsible for managing disaster prevention for local residents, operating evacuation shelters, supporting evacuees, etc. The server device 10 may be installed in the same building as the disaster prevention center, or may be installed on a network (on the cloud).

[0021] A user (resident) has a terminal 20 such as a smartphone. The resident operates the terminal 20 to access the server device 10.

[0022] The configuration of the information processing system shown in Fig. 3 is an example, and is not intended to be limiting. For example, a disaster prevention center may include multiple server devices 10. Load balancing and redundancy may be achieved by multiple server devices 10. Furthermore, the number of evacuation shelters included in the information processing system is not intended to be limited to "3".

[0023] [General operation] Next, an outline of the operation of the information processing system according to the first embodiment will be described.

[0024] <Advance preparation> Residents make advance preparations for disaster occurrence before a disaster occurs. Specifically, residents install an evacuation application on terminal 20. A detailed description of the installation of the application will be omitted.

[0025] The resident launches the evacuation application. The resident registers as a user for the evacuation application.

[0026] When a resident performs a predetermined operation (e.g., pressing a user registration button), terminal 20 performs identity verification of the resident. Specifically, terminal 20 performs identity verification using an identification card issued by a public institution that lists biometric information, such as a My Number card, driver's license, passport, or residence card.

[0027] Examples of biometric information include data (feature amounts) calculated from physical characteristics unique to an individual, such as a face, fingerprint, voiceprint, veins, retina, or iris pattern. Alternatively, the biometric information may be image data such as a face image or fingerprint image. The biometric information may include information on the physical characteristics of a resident. In this disclosure, a case where biometric information related to a person's "face" (a face image or feature amounts generated from a face image) is used will be described.

[0028] Below, we will explain how to use a My Number card for identity verification.

[0029] The terminal 20 reads a face image from a My Number card held by a resident. The terminal 20 instructs the user to bring the My Number card close to a specified position on the terminal 20. The terminal 20 acquires a face image from an IC (Integrated Circuit) chip of the My Number card using an NFC (Near Field Communication) reader.

[0030] Furthermore, the terminal 20 instructs the resident to take a selfie. The terminal 20 photographs the resident and acquires a face image.

[0031] The terminal 20 transmits an "identification request" including the face image acquired from the My Number card and the face image acquired by taking a selfie to the server device 10 (see FIG. 4).

[0032] The server device 10 that has received the identity verification request performs identity verification using the two face images. The server device 10 determines whether the two face images are of the same person and performs identity verification. The server device 10 notifies the terminal 20 of the identity verification result (identity verification success, identity verification failure).

[0033] When the terminal 20 (evacuation application) receives a notification of successful identity verification, it acquires basic information (so-called basic four pieces of information) consisting of name, sex, date of birth, and address from the My Number card held by the resident. At that time, the terminal 20 acquires a four-digit personal identification number for assisting in inputting card details from the resident, and reads out the basic four pieces of information from the IC chip using the acquired personal identification number as a password.

[0034] The terminal 20 stores therein the four basic pieces of information and biometric information (a face image acquired from a My Number card or a face image acquired by taking a selfie).

[0035] <Evacuate to evacuation shelter> When a disaster occurs or is expected to occur, residents start evacuation behavior. The residents operate the terminal 20 to start up an evacuation application.

[0036] When the terminal 20 detects a predetermined action by a resident (for example, pressing an evacuation start button), the terminal 20 acquires its own location information. The terminal 20 displays a map including evacuation shelters established in the vicinity of the resident (terminal 20).

[0037] The resident checks the map displayed on the terminal 20 and decides where to evacuate. For example, the resident evacuates to the nearest evacuation shelter from the current location. Alternatively, if there is no evacuation shelter nearby, the resident selects his / her home or personal car as the evacuation destination.

[0038] If a resident selects a shelter as their evacuation destination, they move toward the selected shelter. When the resident arrives at the shelter, a reception desk is set up to receive the evacuee (see Figure 5).

[0039] Staff members (such as local government officials) waiting at the reception desk of the evacuation shelter will instruct evacuees to use the evacuation application to complete the registration process for entering the shelter.

[0040] In response to the instruction, the evacuee starts an evacuation application by operating the terminal 20. When the terminal 20 detects a predetermined action by the evacuee (for example, pressing a reception button), it performs identity verification of the evacuee (the holder of the terminal 20).

[0041] Specifically, the terminal 20 acquires a facial image of the evacuee by taking a selfie. The terminal 20 transmits an "identification request" including the facial image acquired by taking a selfie and a facial image stored in advance (a facial image acquired before the disaster occurs) to the server device 10 (step S01 in FIG. 6).

[0042] The server device 10 transmits the identity verification result (identity verification success, identity verification failure) to the terminal 20 (step S02).

[0043] When the notification of successful identity verification is received, the terminal 20 (evacuation application) acquires the current location of the terminal itself.

[0044] When the terminal 20 acquires its current location, the terminal 20 acquires information necessary for the local government to grasp the details of each evacuee. In the following description, the information necessary for the local government to grasp the details of each evacuee is referred to as "document information."

[0045] The terminal 20 acquires the evacuees' name, sex, date of birth, address, level of care, health condition, damage to their homes, and information about their families (whether they have family or not), using form input via a GUI (Graphical User Interface) or the like.

[0046] The terminal 20 (evacuation application) may apply previously acquired information for the four basic pieces of information, name, sex, date of birth, and address, to the form input. In other words, information previously acquired from an identification card (My Number card) may be used for the four basic pieces of information in the form information. By automatically reflecting the four basic pieces of information in this way, the efficiency of information input is improved.

[0047] The terminal 20 transmits a "refugee registration request" including the acquired form information and location information to the server device 10 (step S03).

[0048] The server device 10, which has received the evacuee registration request, identifies the evacuation destination (shelter) of the evacuee based on the location information included in the evacuee registration request. The server device 10 registers information of the evacuee in a evacuee management database that manages the evacuee. Specifically, the server device 10 stores the identified shelter and the form information included in the evacuee registration request in the evacuee management database.

[0049] The server device 10 generates a list of evacuees by storing the evacuation destination and document information in a refugee management database. The details of the refugee management database will be described later.

[0050] The server device 10 transmits a processing result of the evacuee registration request to the terminal 20 (step S04). When the server device 10 successfully stores the information of the evacuee in the evacuee management database, it notifies the terminal 20 that the registration of the evacuee has been completed.

[0051] The terminal 20 (evacuation application) that has received the notification that the evacuee registration has been completed displays that fact. The evacuee shows the display to the staff waiting at the reception desk. After the staff confirms that the evacuee registration has been completed normally, they allow the evacuee to enter the evacuation shelter.

[0052] Next, each device included in the information processing system according to the first embodiment will be described in detail.

[0053] [Device] Examples of the terminal 20 include mobile terminal devices such as smartphones, mobile phones, game consoles, tablets, etc. The terminal 20 may be any equipment or device that can accept operations from residents and communicate with the server device 10, etc.

[0054] 7 is a diagram illustrating an example of a processing configuration (processing module) of the terminal 20 according to the embodiment of the present disclosure. Referring to FIG. 7, the terminal 20 includes a communication control unit 201, a user registration control unit 202, an evacuation support unit 203, a reception control unit 204, and a storage unit 205.

[0055] The communication control unit 201 is a means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the server device 10. The communication control unit 201 also transmits data to the server device 10. The communication control unit 201 passes the data received from the other devices to the other processing modules. The communication control unit 201 transmits data acquired from the other processing modules to the other devices. In this way, the other processing modules transmit and receive data to and from the other devices via the communication control unit 201. The communication control unit 201 has a function as a receiving unit that receives data from the other devices and a function as a transmitting unit that transmits data to the other devices.

[0056] The user registration control unit 202, the evacuation support unit 203, and the reception control unit 204 realize the evacuation application.

[0057] The user registration control unit 202 is a means for controlling user registration before a disaster occurs.

[0058] The user registration control unit 202 controls the first identity verification based on the identification card held by the user. If the first identity verification is successful (if the first identity verification is determined to be successful), the user registration control unit 202 acquires basic information from the identification card. The user registration control unit 202 stores the acquired basic information and the first biometric information used in the first identity verification (a face image obtained from a My Number card or a face image obtained by a selfie).

[0059] When the user registration control unit 202 detects a predetermined action by a resident (for example, pressing a user registration button), it performs control related to identity verification of the resident.

[0060] Specifically, the user registration control unit 202 acquires biometric information (face image) from an identification card such as a My Number card. When a My Number card is used for identity verification, the user registration control unit 202 acquires a face image from an IC chip mounted on the My Number card using an NFC reader.

[0061] Furthermore, the user registration control unit 202 instructs the resident to take a selfie. The user registration control unit 202 photographs the resident in response to an operation by the resident and acquires a face image.

[0062] The user registration control unit 202 transmits an identity verification request including two face images (a face image acquired from a My Number card and a face image acquired by a selfie) to the server device 10.

[0063] The user registration control unit 202 receives a response (positive response, negative response) to the identity verification request from the server device 10.

[0064] When a negative response indicating failure of identity verification is received, the user registration control unit 202 notifies the resident accordingly. Alternatively, the user registration control unit 202 reacquires a face image of the resident and requests the server device 10 to re-perform identity verification using the reacquired face image and a face image read from the My Number card.

[0065] When receiving an affirmative response indicating successful identity verification, the user registration control unit 202 acquires the four basic pieces of information from the identification card such as the My Number card. For example, the user registration control unit 202 acquires a four-digit personal identification number for assisting in inputting information on the card from the resident, and uses the acquired personal identification number as a password to read out the four basic pieces of information from the IC chip mounted on the My Number card.

[0066] The user registration control unit 202 stores the four basic pieces of information and biometric information (a face image obtained from a My Number card or a face image obtained by taking a selfie) in the storage unit 205.

[0067] In this manner, the user registration control unit 202 transmits the biometric information obtained from the identification card and the biometric information obtained by photographing the user to a server operated by a manager of a predetermined facility (server device 10 managed and operated by a local government). By transmitting the two pieces of biometric information to the server, the user registration control unit 202 requests the server to perform the first identity verification.

[0068] The evacuation support unit 203 is a means for supporting residents in deciding on an evacuation destination.

[0069] When the evacuation support unit 203 detects a predetermined action by a resident (for example, pressing an evacuation start button), it calculates the position information (latitude, longitude) of the own device.

[0070] For example, the evacuation support unit 203 receives a GPS signal from a GPS (Global Positioning System) satellite to perform positioning and generate location information including the latitude, longitude, and altitude of the device. Alternatively, the evacuation support unit 203 may communicate with a wireless access point and treat the location of the wireless access point as the location of the device. Alternatively, the evacuation support unit 203 may generate location information based on the strength of radio waves received from the wireless access point.

[0071] When the location information is acquired, the evacuation support unit 203 displays a map including the evacuation shelters established around the device. For example, the evacuation support unit 203 displays map information (including the locations of the evacuation shelters) as shown in FIG. 8.

[0072] The information on each evacuation shelter (e.g., the name and location information of the evacuation shelter) may be preinstalled in the terminal 20 (evacuation application). Alternatively, the evacuation support unit 203 may request the server device 10 to provide the latest evacuation shelter information before displaying as shown in Fig. 8. The evacuation support unit 203 may obtain information on currently opened evacuation shelters (e.g., the name and location information of the evacuation shelter) from the server device 10.

[0073] The reception control unit 204 is a means for controlling reception for evacuees to enter the evacuation shelter.

[0074] When a user checks in at a predetermined facility (shelter), the reception control unit 204 controls the second identity verification using the stored first biometric information (a facial image stored at the time of user registration) and the biometric information of the user checking in (a selfie facial image). If the second identity verification is successful, the reception control unit 204 controls the submission of form information including the stored basic information to the administrator of the predetermined facility (the local government or the server device 10 managed by the local government).

[0075] 9 is a flowchart showing an example of the operation of the admission control unit 204 according to the embodiment of the present disclosure. The operation of the admission control unit 204 will be described with reference to FIG.

[0076] When the reception control unit 204 detects a predetermined action by an evacuee (for example, pressing a reception button), it requests the server device 10 to verify the identity of the evacuee (the person carrying the terminal 20) (step S101).

[0077] Specifically, the reception control unit 204 instructs the evacuee to take a selfie. The reception control unit 204 transmits an “identification request” including the face image acquired by the selfie and the face image stored in the storage unit 205 to the server device 10.

[0078] The reception control unit 204 receives a response (positive response, negative response) to the identity verification request from the server device 10.

[0079] If the identity verification fails (if a negative response is received; step S102, No branch), the reception control unit 204 notifies the evacuee of that fact (step S103). Alternatively, the reception control unit 204 may re-request the server device 10 to verify the identity of the evacuee as necessary.

[0080] If the identity verification is successful (if a positive response is received; step S102, Yes branch), the reception control unit 204 acquires the current location of the device (step S104). The reception control unit 204 calculates the location information of the device using a GPS signal or the like.

[0081] After acquiring the location information, the reception control unit 204 acquires form information from the evacuee (step S105). The reception control unit 204 acquires the name, sex, date of birth, address, level of care, health condition, damage status of the house, information about the family (whether the evacuee has a family), etc., of the evacuee using a GUI (information input form) as shown in Fig. 10.

[0082] At that time, the reception control unit 204 applies the previously acquired information for the four basic pieces of information, name, sex, date of birth, and address, to the form input. In the example of Fig. 10, the name and sex obtained from the four basic pieces of information stored in the storage unit 205 are set.

[0083] In this way, when the reception control unit 204 obtains report information using a form for inputting information, it uses the basic information stored in the memory unit 205, thereby eliminating the need for users checking in at the evacuation shelter to enter basic information.

[0084] The reception control unit 204 requests the server device 10 to register the evacuees (step S106). Specifically, the reception control unit 204 transmits to the server device 10 a "refugee registration request" including the acquired form information and the generated location information.

[0085] The reception control unit 204 receives a response (positive response, negative response) to the evacuee registration request from the server device 10.

[0086] If the evacuee registration fails (if a negative response is received; step S107, No branch), the reception control unit 204 notifies the evacuee accordingly (step S108). Alternatively, the reception control unit 204 instructs the evacuee to consult with a staff member waiting at the reception desk.

[0087] When the evacuee registration is completed (when a positive response is received; step S107, Yes branch), the reception control unit 204 notifies the evacuee of the completion (step S109). For example, the reception control unit 204 displays a message as shown in FIG.

[0088] In this way, the reception control unit 204 requests the server device 10 to execute the second identity verification by transmitting the first biometric information stored in the storage unit 205 and the biometric information obtained by photographing the user who makes the reception to the server device 10. Furthermore, if the second identity verification is successful, the reception control unit 204 obtains location information of its own device and transmits the obtained location information and form information to the server device 10.

[0089] The storage unit 205 is a means for storing information necessary for the operation of the terminal 20 .

[0090] [Server device] 12 is a diagram illustrating an example of a processing configuration (processing module) of the server device 10 according to the embodiment of the present disclosure. Referring to FIG. 12, the server device 10 includes a communication control unit 301, an identity verification unit 302, an evacuee registration unit 303, and a storage unit 304.

[0091] The communication control unit 301 is a means for controlling communication with other devices. For example, the communication control unit 301 receives data (packets) from the terminal 20. The communication control unit 301 also transmits data to the terminal 20. The communication control unit 301 passes the data received from the other devices to the other processing modules. The communication control unit 301 transmits the data acquired from the other processing modules to the other devices. In this way, the other processing modules transmit and receive data to and from the other devices via the communication control unit 301. The communication control unit 301 has a function as a receiving unit that receives data from the other devices and a function as a transmitting unit that transmits data to the other devices.

[0092] The identity verification unit 302 is a means for processing an identity verification request received from the terminal 20 .

[0093] When the identity verification unit 302 receives an identity verification request from the terminal 20, it performs identity verification of the user (a resident who registers as a user, or an evacuee who is evacuating to a shelter). The identity verification unit 302 performs identity verification using two face images included in the identity verification request.

[0094] The identity verification unit 302 generates feature quantities from each of the two face images included in the identity verification request.

[0095] Since existing technology can be used for the generation of feature amounts, detailed description thereof will be omitted. For example, the identity verification unit 302 extracts the eyes, nose, mouth, etc. as feature points from the face image. After that, the identity verification unit 302 calculates the positions of the feature points and the distances between the feature points as feature amounts (generating a feature vector consisting of multiple feature amounts).

[0096] Next, the identity verification unit 302 executes a matching process (one-to-one matching) using the two generated feature amounts. Specifically, the identity verification unit 302 calculates the similarity between corresponding face images using the two feature amounts. Based on the result of threshold processing on the calculated similarity, the identity verification unit 302 determines whether the two images are face images of the same person. Note that the similarity can be calculated using a chi-square distance, Euclidean distance, or the like. The greater the distance, the lower the similarity, and the closer the distance, the higher the similarity.

[0097] If the similarity is greater than a predetermined value (if the distance is shorter than a predetermined value), the personal identification unit 302 determines that the personal identification is successful. If the similarity is equal to or less than the predetermined value, the personal identification unit 302 determines that the personal identification is unsuccessful.

[0098] The identity verification unit 302 notifies the terminal 20 of the result of identity verification. If identity verification is successful, the identity verification unit 302 transmits a positive response indicating that to the terminal 20. If identity verification is unsuccessful, the identity verification unit 302 transmits a negative response indicating that to the terminal 20.

[0099] The refugee registration unit 303 is a means for processing a refugee registration request received from the terminal 20 .

[0100] When receiving a request for evacuee registration, the evacuee registration unit 303 identifies an evacuation shelter based on the location information included in the request. The evacuee registration unit 303 identifies the evacuation destination of the evacuee by referring to table information that stores information on the evacuation shelter (e.g., the name of the evacuation shelter, the location information of the evacuation shelter, etc.).

[0101] After that, the evacuee registration unit 303 stores the document information and the evacuation destination of the evacuee included in the evacuee registration request in the evacuee management database (see FIG. 13). Note that the evacuee management database shown in FIG. 13 is an example, and is not intended to limit the items to be stored.

[0102] The evacuee registration unit 303 transmits a response to the evacuee registration request to the terminal 20. If the evacuee registration is normally completed, the evacuee registration unit 303 transmits a positive response indicating that to the terminal 20. If the evacuee registration is unsuccessful, the evacuee registration unit 303 transmits a negative response indicating that to the terminal 20. For example, if an evacuation shelter cannot be identified from the location information included in the evacuee registration request, the evacuee registration fails.

[0103] The storage unit 304 is a means for storing information necessary for the operation of the server device 10.

[0104] [System Operation] Next, the operation of the information processing system according to the first embodiment will be described. Fig. 14 is a sequence diagram showing an example of the operation of the information processing system according to the embodiment of the present disclosure. The operation of the information processing system regarding the reception of evacuees will be described with reference to Fig. 14.

[0105] The terminal 20 transmits an identity verification request including two face images to the server device 10 (step S11).

[0106] The server device 10 performs identity verification using the two face images (step S12).

[0107] The server device 10 transmits the result of the identity verification to the terminal 20 (step S13).

[0108] If the identity verification is successful, the terminal 20 acquires location information and form information to be submitted to the server device 10 (step S14).

[0109] The terminal 20 transmits a request for evacuee registration including the form information and the position information to the server device 10 (step S15).

[0110] The server device 10 stores the document information and the like in the evacuee management database and registers the evacuee (step S16).

[0111] The server device 10 transmits the result of the evacuee registration to the terminal 20 (step S17).

[0112] Next, a modification of the first embodiment will be described.

[0113] <Variation 1> The terminal 20 may handle cases where residents evacuate to places other than evacuation shelters. For example, the evacuation support unit 203 may display GUIs as shown in Fig. 15 and Fig. 16 in response to an operation by a resident, and acquire an evacuation destination of the resident who evacuates to a place other than evacuation shelters. When "Evacuate to a place other than evacuation shelters" is selected in Fig. 15, the evacuation support unit 203 acquires the evacuation destination of the resident (home, personal car, etc.) using a GUI as shown in Fig. 16.

[0114] Even if a resident (refugee) evacuates to a place other than a shelter, the resident may register as an evacuee. In this case, the reception control unit 204 requests the server device 10 to verify the identity of the evacuee, as in the case of evacuating to the above-mentioned shelter. If the identity verification is successful, the reception control unit 204 sends an evacuee registration request to the server device 10, which includes the evacuation destination selected by the resident (e.g., home, personal car, etc.) and document information.

[0115] The server device 10 sets the evacuation destination of the evacuee as "home," "private car," or "other," and stores the form information in the evacuee management database.

[0116] In this way, the evacuation application can handle situations where residents evacuate to their homes or cars, in addition to evacuation shelters.

[0117] Alternatively, the reception control unit 204 may transmit an evacuee registration request including the location information of the device itself in addition to the evacuation destination selected by the resident to the server device 10. The server device 10 may store a more accurate evacuation location (location information) of the evacuee in the evacuee management database.

[0118] In this way, location information calculated from GPS and other devices can be used not only to provide information about evacuation shelters as shown in Figure 8, but also by local governments to determine the whereabouts of residents who have evacuated to their homes or cars.

[0119] <Variation 2> In the above embodiment, it is assumed that when a disaster occurs, residents will evacuate to an evacuation shelter carrying the terminal 20. However, it is not always the case that residents have the terminal 20 with them when a disaster occurs.

[0120] If a resident arrives at an evacuation shelter without possessing the terminal 20 for which user registration has been completed, the resident can complete user registration using someone else's terminal 20 and then check in at the evacuation shelter (register as a refugee).

[0121] In other words, if a resident is unable to use the terminal 20 on which they have registered as a user for some reason, and the resident has a My Number card or similar, they may borrow the terminal 20 of a local government employee or a nearby acquaintance to register as a user and as an evacuee.

[0122] <Variation 3> Furthermore, if a resident evacuates to an evacuation shelter without the terminal 20 and his / her My Number card, the resident may use a terminal installed at the reception desk to register the report information in the server device 10 from a dedicated information input page.

[0123] <Variation 4> When transmitting the evacuee registration request, the terminal 20 may transmit to the server device 10 contact information of people (for example, family members, friends, acquaintances) to whom the evacuee wishes to notify of his or her safety.

[0124] For example, when registering a user, the user registration control unit 202 of the terminal 20 acquires the contact information (safety contact information; for example, a telephone number, an email address, etc.) of a person to whom the user wishes to notify the safety of the person. The user registration control unit 202 stores the acquired safety contact information together with the four basic information items of the resident and a face image.

[0125] After successfully verifying the identity of the evacuee, the reception control unit 204 of the terminal 20 transmits to the server device 10 a request for evacuee registration that includes the stored safety contact information together with the location information and document information.

[0126] The evacuee registration unit 303 of the server device 10 stores the safety contact information together with the document information of the evacuee in the evacuee management database. The evacuee registration unit 303 also transmits a "safety confirmation notice" to the safety contact information. The evacuee registration unit 303 transmits the safety confirmation notice including the name of the evacuated resident, information on the evacuation shelter (the name and address of the evacuation shelter), etc.

[0127] Specifically, the evacuee registration unit 303 sends a short message to the telephone number listed in the safety contact information, or sends text data or the like to the email address listed in the safety contact information.

[0128] For example, upon receiving the safety confirmation notification email, the terminal 20 displays, in response to a user's operation, a display as shown in Fig. 17. Alternatively, the evacuation application and the mailer may be linked, and the evacuation application that receives the safety confirmation notification via the mailer may display a pop-up containing the contents of the notification.

[0129] The terminal 20 may acquire the safety contact information when acquiring the document information from the evacuees. The server device 10 may transmit a safety confirmation notification to the terminal 20, including the contact information (phone number) of the evacuation shelter where the evacuees are taking refuge, map information centered on the evacuation shelter, and the like.

[0130] In this way, the user registration control unit 202 of the terminal 20 acquires the contact information of the person to whom the user should contact when evacuating to a shelter, and stores the acquired contact information as the safety contact information. The reception control unit 204 of the terminal 20 transmits the stored safety contact information to the server device 10 together with the location information and the form information.

[0131] According to the fourth modification of the first embodiment, the server device 10 installed in the cloud can notify the contacts selected by the resident in advance of the resident's safety (already evacuated to a shelter) based on the safety contact information transmitted from the evacuation application. The terminal 20 that receives the notification can push to the user the fact that the user's related parties (e.g., family, friends, acquaintances) have safely evacuated, or can notify the user on the evacuation application. For example, an elderly parent registers the email address of his / her child as a safety contact information in the terminal 20 when registering as a user. When the elderly parent evacuates to a shelter, the child's terminal 20 is notified of the fact. In addition, since the user registers the safety contact information in the terminal 20 when registering as a user before a disaster occurs, the user can register accurate contact information in the terminal 20 under calm circumstances.

[0132] <Variation 5> The server device 10 may have a function of supporting evacuation shelter management and operation by local government officials, etc. For example, the server device 10 may have a function of providing information on evacuees at each evacuation shelter.

[0133] In this case, the server device 10 includes an operation support unit 305 as shown in FIG.

[0134] For example, the operation support unit 305 generates various information in response to requests from local government officials and provides the generated information to the local government officials.

[0135] A local government employee or the like operates an employee terminal (not shown in FIG. 3, etc.) installed in a disaster prevention center to access the server device 10. For example, the operation support unit 305 provides an interface (website) for the local government employee or the like to input information that he or she wishes to provide.

[0136] The operation support unit 305 generates information according to the information input by the local government employee or the like, and presents the generated information to the local government employee or the like.

[0137] For example, when a local government employee requests the number of evacuees at each evacuation shelter, the operation support unit 305 displays information such as that shown in FIG. 19 on the employee terminal.

[0138] <Variation 6> The evacuee may transmit his / her own medical record information (medical treatment information) to the server device 10. The reception control unit 204 of the terminal 20 connects to an API (Application Programming Interface) for acquiring medical insurance information of the My Number, and acquires the information of the health insurance card linked to the evacuee's My Number card and further the medical record information linked to the health insurance card from the hospital. The reception control unit 204 transmits an evacuee registration request including the location information, the form information, and the medical record information to the server device 10.

[0139] The server device 10 stores the medical record information included in the refuge registration request in the refuge management database.

[0140] The server device 10 may use the stored medical record information to support the operation of evacuation shelters by local government officials, etc. For example, the operation support unit 305 of the server device 10 calculates the required amount of medicine (amount required per day) required at each evacuation shelter based on the medical record information of the evacuees evacuated to each evacuation shelter in response to a request from the local government officials, etc. For example, the operation support unit 305 displays the required amount of medicine calculated based on the medical record information on the staff terminal (see FIG. 20).

[0141] As described above, the terminal 20 according to the first embodiment controls the initial identity verification at the time of user registration and verifies the authenticity of the resident who is to be registered as a user. The terminal 20 also controls the second identity verification when the evacuee is to be accepted at an evacuation shelter or the like and verifies the authenticity of the evacuee. If the identity verification of the evacuee is successful, the terminal 20 transmits to the server device 10 the form information including the four basic pieces of information acquired from the My Number card or the like and requests the server device 10 to register the evacuee. The server device 10 can generate a list of residents evacuated to the evacuation shelter (evacuee list) based on the acquired form information. In other words, when the server device 10 completes the evacuee registration, the reception of the evacuee is completed. The evacuee can enter the evacuation shelter by notifying the local government employee or the like waiting at the reception of the evacuation shelter of the fact that the server device 10 has completed the evacuee registration. As a result, the evacuee does not need to handwrite his / her name, etc. into a ledger at the reception of the evacuation shelter, and the reception (acceptance) of the evacuee is carried out smoothly. Furthermore, the server device 10 does not store information about residents before acquiring the form information (before registering evacuees), which improves the robustness of the information processing system against information leaks.

[0142] Next, the hardware of each device constituting the information processing system will be described.

[0143] The terminal 20 can be configured by an information processing device (so-called a computer), and has the configuration exemplified in Fig. 21. For example, the terminal 20 has a processor 311, a memory 312, an input / output interface 313, a communication interface 314, etc. The components such as the processor 311 are connected by an internal bus or the like, and are configured to be able to communicate with each other.

[0144] However, the configuration shown in Fig. 21 is not intended to limit the hardware configuration of the terminal 20. The terminal 20 may include hardware not shown, and may not include the input / output interface 313 as necessary. In addition, the number of processors 311 and the like included in the terminal 20 is not intended to be limited to the example shown in Fig. 21, and for example, the terminal 20 may include multiple processors 311.

[0145] The processor 311 is, for example, a programmable device such as a central processing unit (CPU), a micro processing unit (MPU), or a digital signal processor (DSP). Alternatively, the processor 311 may be a device such as a field programmable gate array (FPGA), or an application specific integrated circuit (ASIC). The processor 311 executes various programs including an operating system (OS).

[0146] The memory 312 is a random access memory (RAM), a read only memory (ROM), a hard disk drive (HDD), a solid state drive (SSD), etc. The memory 312 stores an OS program, application programs, and various data.

[0147] The input / output interface 313 is an interface for a display device and an input device (not shown). The display device is, for example, a liquid crystal display, etc. The input device is, for example, a keyboard, a mouse, etc. that accepts user operations.

[0148] The communication interface 314 is a circuit, a module, etc. that communicates with other devices. For example, the communication interface 314 includes a network interface card (NIC).

[0149] The functions of the terminal 20 are realized by various processing modules. The processing modules are realized, for example, by the processor 311 executing a program stored in the memory 312. The program can be recorded in a computer-readable storage medium. The storage medium can be a non-transitory medium such as a semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. That is, the present invention can also be embodied as a computer program product. The program can be downloaded via a network, or updated using a storage medium storing the program. The processing modules may also be realized by a semiconductor chip.

[0150] Incidentally, the server device 10 can also be configured by an information processing device, like the terminal 20, and the basic hardware configuration is no different from that of the terminal 20, so a description thereof will be omitted.

[0151] The terminal 20, which is an information processing device, is equipped with a computer, and the computer executes a program to realize the functions of the terminal 20. The terminal 20 also executes a control method for the terminal 20 by the program.

[0152] [Variations] The configuration, operation, etc. of the information processing system described in the above embodiment are merely examples, and are not intended to limit the system configuration, etc.

[0153] In the above embodiment, the operation of the information processing system disclosed in the present application has been described using the example of a case where a user evacuates to an evacuation shelter. The information processing system disclosed in the present application can also be applied to a case where a user checks in at a facility other than an evacuation shelter. For example, the information processing system disclosed in the present application can be applied to a reception when a resident uses a community center or the like. In this case, the terminal 20 transmits form information including location information and the four basic information to the server device 10 at the time of reception for use of the community center. The server device 10 identifies the community center used by the resident based on the location information, and identifies the resident using the community center based on the form information.

[0154] Alternatively, the server device 10 may use the accounting information (basic four information) acquired at the time of reception at the community center, etc., to bill for the use of the community center, etc. In this case, the server device 10 may give preferential treatment such as a discount on the use of the community center, etc., to a resident of the local government that manages the community center, etc. The server device 10 may determine whether or not the user is a resident of the local government based on the basic four information acquired at the time of reception.

[0155] In the above embodiment, the case where the server device 10 performs identity verification has been described. However, the identity verification may be performed by the terminal 20. The terminal 20 may perform either one of the two identity verifications and request the server device 10 to perform the other identity verification. For example, the terminal 20 may request the server device 10 to perform the first identity verification and perform the second identity verification on its own device. Here, there is a concern that the number of identity verification requests to the server device 10 will increase sharply when a disaster occurs because many residents evacuate at the same time. However, by having the terminal 20 carried by each resident perform the second identity verification, no identity verification request is generated for the server device 10 in association with evacuation reception when a disaster occurs. As a result, the load on the server device 10 does not increase sharply, and the availability of the information processing system is maintained.

[0156] The terminal 20 may request the server device 10 to distinguish between the first identity verification (identity verification at the time of user registration) and the second identity verification (identity verification at the time of evacuation shelter reception). The server device 10 may count the number of times the first identity verification is processed (the number of times identity verification is successful) and grasp the number of residents who have registered as users. In other words, the server device 10 may grasp the number of residents who have installed an evacuation application on a smartphone or the like and registered as users. Municipal staff and the like may use the number of residents grasped by the server device 10 for educational activities regarding disaster prevention and the like.

[0157] The information processing system may include a reception terminal installed at the reception of the evacuation shelter. In this case, the terminal 20 may transmit a facial image stored in advance to the reception terminal when receiving the evacuee. The reception terminal may transmit the received facial image and a facial image obtained by photographing the evacuee in front of the reception terminal to the server device 10 to request identity verification. The reception terminal that has been notified of successful identity verification from the server device 10 may obtain form information from the evacuee and transmit the form information to the server device 10 to register the evacuee.

[0158] In the above embodiment, the terminal 20 has been described as acquiring a face image for identity verification from a My Number card. When an identification card other than a My Number card (e.g., a driver's license) is used for identity verification, the terminal 20 may extract a face area from image data obtained by photographing the identification card. The terminal 20 may transmit the extracted face area (face image) and a face image obtained by a selfie to the server device 10.

[0159] In the above embodiment, the terminal 20 displays map information as shown in FIG. 8 in response to an operation by a resident. Here, the terminal 20 may provide detailed information on each shelter displayed on the map to the resident. For example, the terminal 20 may display the capacity of each shelter, the current number of evacuees, the status of facilities (e.g., the presence or absence of wheelchairs, etc.), etc. As a result, the resident can select the shelter that best suits his or her situation as the evacuation destination, taking into account the characteristics of each shelter.

[0160] Alternatively, when a resident selects an evacuation destination on the map screen shown in FIG. 8 (for example, when the resident clicks on an icon corresponding to the evacuation shelter), the terminal 20 may provide the resident with route guidance to the selected evacuation shelter.

[0161] The terminal 20 may complete the evacuee registration within a predetermined time after identity verification is performed at the time of evacuation reception of the user. For example, the terminal 20 may not transmit the evacuee registration request if the terminal 20 is unable to acquire the form information within a predetermined time (e.g., several minutes) after receiving a notification of successful identity verification from the server device 10. Such an operation of the terminal 20 prevents residents from verifying their identity at a different location before arriving at the evacuation shelter and then registering as an evacuee (transmitting an evacuee registration request including location information) after arriving at the evacuation shelter. Alternatively, the operation of the terminal 20 prevents fraudulent acts such as handing the terminal 20 over to another person and allowing the other person to enter the evacuation shelter.

[0162] The terminal 20 does not need to transmit location information when registering an evacuee. For example, when the terminal 20 receives a notification of successful identity verification from the server device 10, it displays a list of evacuation shelters. The evacuee selects the evacuation shelter to which he or she is going to evacuate from the listed evacuation shelters. The terminal 20 transmits to the server device 10 a request for evacuee registration including information on the evacuation shelter selected by the evacuee. By such an operation of the terminal 20, the server device 10 can identify the evacuation shelter to which the evacuee is going to evacuate even if many evacuees are crowded at the evacuation shelter or if a failure occurs in the GPS function.

[0163] In the above embodiment, a case has been described in which the evacuee management database is configured inside the server device 10, but the database may also be constructed in an external database server or the like. That is, some of the functions of the server device 10 may be implemented in another server. More specifically, the above-described "identification unit (identification means)", "evacuee registration unit (evacuee registration means)", etc. may be implemented in any of the devices included in the system.

[0164] Although the format of data transmission between the devices (server device 10, terminal 20) is not particularly limited, the data transmitted between these devices may be encrypted. Personal information of residents and the like is transmitted between these devices, and in order to appropriately protect this information, it is desirable to transmit and receive encrypted data.

[0165] In the flow charts (flow charts, sequence diagrams) used in the above description, multiple steps (processes) are described in order, but the order of execution of the steps executed in the embodiments is not limited to the order described. In the embodiments, the order of the steps shown in the figures can be changed to a degree that does not interfere with the content, such as executing each process in parallel.

[0166] The above-mentioned embodiments have been described in detail to facilitate understanding of the present disclosure, and it is not intended that all of the configurations described above are necessary. In addition, when a plurality of embodiments are described, each embodiment may be used alone or in combination. For example, it is possible to replace a part of the configuration of an embodiment with the configuration of another embodiment, or to add the configuration of another embodiment to the configuration of an embodiment. Furthermore, it is possible to add, delete, or replace a part of the configuration of an embodiment with another configuration.

[0167] From the above explanation, the industrial applicability of the present invention is clear, and the present invention can be suitably applied to an information processing system that supports the evacuation of residents.

[0168] A part or all of the above-described embodiments can be described as, but is not limited to, the following supplementary notes. [Appendix 1] a user registration control means for controlling a first identity verification based on an identification card held by a user, and, if the first identity verification is successful, acquiring basic information from the identification card and storing the acquired basic information and the first biometric information used in the first identity verification; a reception control means for controlling a second identity verification process using the stored first biometric information and the biometric information of the user when the user checks in at a specified facility, and for controlling the submission of form information including the stored basic information to an administrator of the specified facility when the second identity verification process is successful; A terminal comprising: [Appendix 2] The user registration control means 2. The terminal described in Appendix 1, which requests a server operated by an administrator of the specified facility to perform the first identity verification by transmitting biometric information obtained from the identification card and biometric information obtained by photographing the user to the server. [Appendix 3] The reception control means The terminal described in Appendix 2, which requests the server to perform the second identity verification by transmitting the stored first biometric information and biometric information obtained by photographing the user at the reception desk to the server. [Appendix 4] The terminal described in Appendix 3, wherein the reception control means, when obtaining the report information using a form for information input, uses the stored basic information to omit the input of the basic information by the user making the reception. [Appendix 5] The specified facility is an evacuation shelter, The server is operated by a local government; The terminal according to claim 4, wherein the reception control means, when the second identity verification is successful, acquires location information of the device itself and transmits the acquired location information and the form information to the server. [Appendix 6] The user registration control means acquires contact information of a person to be contacted by the user when the user evacuates to a shelter, and stores the acquired contact information as a safety contact information; The terminal according to claim 5, wherein the reception control means transmits the stored safety contact information together with the location information and the form information to the server. [Appendix 7] The terminal described in Appendix 5, wherein the reception control means acquires medical record information of the user making the reception using a My Number card held by the user making the reception, and transmits the acquired medical record information to the server together with the location information and the report information. [Appendix 8] The terminal according to any one of appendices 1 to 7, wherein the basic information is name, gender, date of birth and address. [Appendix 9] The terminal described in Appendix 2, wherein the server does not store information about the user before acquiring the report information. [Appendix 10] On the terminal, performing control over a first identity verification based on an identification card held by a user, and if the first identity verification is successful, acquiring basic information from the identification card, and storing the acquired basic information and the first biometric information used in the first identity verification; A terminal control method which, when the user checks in at a designated facility, controls a second identity verification using the stored first biometric information and the biometric information of the user making the check-in, and, if the second identity verification is successful, controls the submission of report information including the stored basic information to an administrator of the designated facility. [Appendix 11] The computer installed in the terminal a process of controlling a first identity verification based on an identification card held by a user, acquiring basic information from the identification card when the first identity verification is successful, and storing the acquired basic information and the first biometric information used in the first identity verification; a process of performing control regarding a second identity verification using the stored first biometric information and the biometric information of the user at the reception when the user checks in at a specified facility, and, if the second identity verification is successful, performing control to submit form information including the stored basic information to an administrator of the specified facility; A program for executing the above.

[0169] In addition, some or all of the configurations described in Supplementary Notes 2 to 9 that are dependent on Supplementary Note 1 may also be dependent on Supplementary Notes 10 and 11 in the same dependent relationship as Supplementary Notes 2 to 9. Furthermore, not limited to Supplementary Notes 1, 10, and 11, but also to various hardware, software, various recording means for recording software, or systems, some or all of the configurations described as supplementary notes may be made dependent thereon within the scope of each of the above-mentioned embodiments.

[0170] The disclosures of the above cited prior art documents are incorporated herein by reference. Although the embodiments of the present invention have been described above, the present invention is not limited to these embodiments. It will be understood by those skilled in the art that these embodiments are merely illustrative and that various modifications are possible without departing from the scope and spirit of the present invention. In other words, the present invention naturally includes various modifications and amendments that a person skilled in the art can make in accordance with the entire disclosure, including the scope of the claims, and the technical ideas. [Explanation of symbols]

[0171] 10. Server device 20 Terminals 100 devices 101 User registration control means 102 Admission control means 201 Communication control section 202 User registration control unit 203 Evacuation Support Department 204 Reception control unit 205 Storage section 301 Communication Control Unit 302 Identification Department 303 Evacuee Registration Department 304 Storage section 305 Operational Support Department 311 Processor 312 Memory 313 Input / Output Interface 314 Communication Interface

Claims

1. a user registration control means for controlling a first identity verification based on an identification card held by a user, and, if the first identity verification is successful, acquiring basic information from the identification card and storing the acquired basic information and the first biometric information used in the first identity verification; a reception control means for controlling a second identity verification using the stored first biometric information and the biometric information of the user when the user checks in at a specified facility, and for controlling the submission of form information including the stored basic information to a manager of the specified facility when the second identity verification is successful; A terminal comprising:

2. The user registration control means The terminal according to claim 1, further comprising: a terminal device configured to transmit biometric information obtained from the identification card and biometric information obtained by photographing the user to a server operated by an administrator of the specified facility, and requesting the server to perform the first identity verification.

3. The reception control means The terminal according to claim 2, wherein the terminal requests the server to perform the second identity verification by transmitting the stored first biometric information and biometric information obtained by photographing the user at the reception desk to the server.

4. The terminal according to claim 3, wherein the reception control means, when acquiring the form information using a form for inputting information, uses the stored basic information to omit the input of the basic information by the user making the reception.

5. The specified facility is an evacuation shelter, The server is operated by a local government; The terminal according to claim 4 , wherein the reception control means, when the second identity verification is successful, acquires location information of the terminal itself, and transmits the acquired location information and the form information to the server.

6. The user registration control means acquires contact information of a person to be contacted by the user when the user evacuates to a shelter, and stores the acquired contact information as a safety contact information; The terminal according to claim 5 , wherein the reception control means transmits the stored safety contact information together with the location information and the form information to the server.

7. The terminal according to claim 5, wherein the reception control means acquires medical record information of the user making the reception using a My Number card held by the user making the reception, and transmits the acquired medical record information to the server together with the location information and the report information.

8. The terminal according to claim 1 , wherein the basic information includes name, sex, date of birth, and address.

9. The terminal according to claim 2 , wherein the server does not store information about the user before acquiring the form information.

10. On the terminal, performing control over first identity verification based on an identification card held by a user, and if the first identity verification is successful, acquiring basic information from the identification card, and storing the acquired basic information and the first biometric information used in the first identity verification; A terminal control method, which performs control regarding a second identity verification using the stored first biometric information and the biometric information of the user making the reception when the user checks in at a designated facility, and, if the second identity verification is successful, performs control to submit report information including the stored basic information to an administrator of the designated facility.

11. The computer installed in the terminal a process of controlling a first identity verification based on an identification card held by a user, acquiring basic information from the identification card when the first identity verification is successful, and storing the acquired basic information and the first biometric information used in the first identity verification; a process of performing control regarding a second identity verification using the stored first biometric information and the biometric information of the user at the reception when the user checks in at a specified facility, and, if the second identity verification is successful, performing control to submit form information including the stored basic information to an administrator of the specified facility; A program for executing.

Images