Personal identification method, personal identification device, and personal identification program

Abstract

To provide a personal identification method capable of performing identity verification with high reliability when writing information from a second identification document into a writeable area of an IC chip on a first identification document.SOLUTION: The personal identification method is a method of verifying the identity of a person based on an identity verification document. The method includes the following steps of: performing a first collation of collating photographed facial image information of the face of the person and first facial image information based on a first identification document; and when the first collation is successful, entering the information for a second identification document that is different from the first identification document into a writeable area of an IC chip on the first identification document.SELECTED DRAWING: Figure 5

Description

[Technical Field]

[0001] The present disclosure relates to an identity verification method, an identity verification device, and an identity verification program. [Background technology]

[0002] Patent Document 1 discloses an application acceptance system comprising an application acceptance device and a management terminal device connected to the application acceptance device via a communication network and monitoring the status of the application acceptance device, wherein the application acceptance device comprises a reading unit that reads first personal information and a facial image recorded on an IC (Integrated Circuit) chip provided on a card and reads second personal information including a card number written on the card, a facial image acquisition unit that acquires a facial image of the applicant, a determination unit that determines whether the first personal information and the second personal information are normal and whether the applicant is a target applicant based on the result of authentication for the IC chip, the result of authentication based on the check digit of the card number, and the result of facial authentication performed by comparing the acquired facial image with the read facial image, and a generation unit that generates report data for an application form if the determination unit determines that at least one of the first personal information and the second personal information is normal and that the applicant is a target applicant. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Publication No. 2022-169476 [Non-patent literature]

[0004] [Non-Patent Document 1] “About My Number Cards”, [online], [searched February 14, 2024], Internet<URL:https: / / www5.cao.go.jp / keizai-shimon / kaigi / special / reform / wg6 / 20221026 / pdf / shiryou1-2.pdf> Summary of the Invention [Problem to be solved by the invention]

[0005] When writing personal certificate information of other types into a personal certificate equipped with a writable IC chip, it is necessary to perform more strict and accurate identity verification to prevent other people's information from being written. [Means for solving the problem]

[0006] An identity verification method according to one embodiment of the present disclosure is a method for verifying the identity of a person based on an identity verification document, which performs a first comparison to compare photographed facial image information of the person's face with first facial image information based on a first identity verification document, and if the first comparison is successful, writes information of a second identity verification document different from the first identity verification document into a writable area of ​​an IC chip on the first identity verification document.

[0007] These comprehensive or specific aspects may be realized as a system, an apparatus, a method, an integrated circuit, a computer program, or a recording medium, or may be realized as any combination of a system, an apparatus, a method, an integrated circuit, a computer program, and a recording medium. [Brief explanation of the drawings]

[0008] [Figure 1] Table showing the main information contained in the My Number Card [Figure 2] A diagram showing an example of the My Number Card (front and back) [Figure 3] A diagram outlining the My Number Card Application (AP) [Figure 4]Diagram explaining the AP free space on the IC chip of the My Number Card [Figure 5] A block diagram showing an example of the configuration of an identity verification system according to the present embodiment. [Figure 6] A flowchart showing an example of license renewal operation according to the present embodiment. [Figure 7] FIG. 1 is a sequence diagram showing an example of the operation of issuing an application form and collecting a license in the personal identification system according to the present embodiment. [Figure 8] A sequence diagram showing an example of processing in the identity verification system according to the present embodiment. [Figure 9] Sequence diagram showing a continuation of the processing example in Figure 8 [Figure 10] Sequence diagram showing a continuation of the processing example in Figure 9 [Figure 11] FIG. 10 is a diagram showing a first example of a screen displayed on the business terminal according to the present embodiment; [Figure 12] FIG. 10 is a diagram showing a second example of a screen displayed by the business terminal according to the embodiment; [Figure 13] FIG. 10 is a diagram showing a third example of a screen displayed on the business terminal according to the embodiment; [Figure 14] FIG. 10 is a diagram showing a fourth example of a screen displayed by the business terminal according to the present embodiment; [Figure 15] FIG. 10 is a diagram showing a fifth example of a screen displayed by the business terminal according to the present embodiment; [Figure 16] FIG. 10 is a diagram showing a sixth example of a screen displayed by the business terminal according to the present embodiment; [Figure 17] FIG. 10 is a diagram showing a first example of a screen displayed by the authentication terminal according to the present embodiment; [Figure 18] FIG. 10 is a diagram showing a second example of a screen displayed by the authentication terminal according to the present embodiment. [Figure 19] FIG. 10 is a diagram showing a third example of a screen displayed by the authentication terminal according to the present embodiment. [Figure 20] FIG. 10 is a diagram showing a fourth example of a screen displayed by the authentication terminal according to the present embodiment. [Figure 21] FIG. 10 is a diagram showing a fifth example of a screen displayed by the authentication terminal according to the present embodiment. [Figure 22]FIG. 10 is a diagram showing a sixth example of a screen displayed by the authentication terminal according to the present embodiment. [Figure 23] FIG. 1 is a diagram for explaining a first method of first verification and second verification according to the present embodiment; [Figure 24] FIG. 1 is a diagram for explaining a second method of the first and second collation according to the present embodiment; DETAILED DESCRIPTION OF THE INVENTION

[0009] Hereinafter, embodiments of the present disclosure will be described in detail with appropriate reference to the drawings. However, more detailed description than necessary may be omitted. For example, detailed descriptions of well-known matters and redundant descriptions of substantially identical configurations may be omitted. This is to avoid unnecessary redundancy in the following description and to facilitate understanding by those skilled in the art. Note that the accompanying drawings and the following description are provided to enable those skilled in the art to fully understand the present disclosure, and are not intended to limit the subject matter described in the claims.

[0010] (Embodiment 1) <My Number Card> 1 is a table showing main information contained in the My Number Card 31. FIG. 2 is a diagram showing an example of the card face (front and back) of the My Number Card 31.

[0011] As shown in FIG. 2, at least the name, address, date of birth, gender, security code, and expiration date are printed as text information 23 (see FIG. 2) on the front of the My Number card 31. Information including the name, address, date of birth, and gender is also referred to as the four pieces of information. In this embodiment, the four pieces of information may also be referred to as personal information. A facial image 22 is printed on the front of the My Number card 31. A two-dimensional code is printed on the back of the My Number card 31.

[0012] The My Number card 31 is readable without contact and has a secure IC chip 21. The IC chip 21 stores personal information of the owner of the My Number card 31.

[0013] At least the name, address, date of birth, gender, facial image data, and personal number are stored in the IC chip 21 of the My Number Card 31. The facial image data is image data of the face of the owner of the My Number Card 31.

[0014] The My Number card 31 has at least the following information used to control access to the IC chip 21: verification number A, verification number B, signature electronic certificate PIN, user certificate PIN, card information input assistance PIN, and resident register PIN.

[0015] As shown in Figure 2, verification number B is a number printed on the surface of the My Number card 31, which is a combination of a six-digit date of birth, a four-digit year portion of the expiration date, and a four-digit security code. By using verification number B, it is possible to access the four pieces of information and facial photo data stored in the IC chip 21 of the My Number card 31. In other words, by obtaining verification number B printed on the surface of the My Number card 31, it is possible to access the four pieces of information and facial photo data stored in the IC chip 21 of the My Number card 31.

[0016] The above-described My Number card 31 is merely an example, and in the present embodiment, if the specifications of the My Number card 31 are changed, various pieces of information stored in the My Number card 31 can be read based on the changed specifications. For example, gender does not need to be printed on the face of the My Number card 31. In this case, the present embodiment may acquire the three pieces of information excluding gender and facial image data from the IC chip 21. Furthermore, the verification number B may be a number of a predetermined number of digits different from the 14-digit number combining the six-digit date of birth, the four-digit year portion of the expiration date, and the four-digit security code. In this case, the present embodiment may read the number of digits based on the specifications of the My Number card 31 and use it as the verification number B.

[0017] <My Number Card Application> FIG. 3 is a diagram illustrating an outline of the application (AP) of the My Number card 31.

[0018] As shown in FIG. 3, the IC chip 21 of the My Number card 31 has four APs registered therein, roughly divided into (B1) to (B4) below. (B1) Card Application (Card AP) The card AP contains image data of the front information (four pieces of information (address, name, date of birth, gender) + photo) and the back information (personal identification number). (B2) Digital Certificate Application by Public Personal Identification Service (JPKI-AP) JPKI-AP records information on "signature digital certificates" and "user digital certificates." (B3) Application for assisting input of information on the card (AP for assisting input of information on the card) The card information input assistance AP stores information for using the personal number and the four pieces of information as text data when carrying out administrative tasks that use the personal number and the four pieces of information. The information to be recorded or used is as follows: (1) Personal information number and four pieces of information (and their electronic signature data) (2) Personal identification number (and its electronic signature data) (3) 4 Information (and its electronic data) (B4) Resident Registration Application (Resident Registration AP) The Resident Registration AP records information for using resident registration codes as text data when handling Resident Registration Network-related affairs.

[0019] When using (2) or (3) of the card AP or the card information input assistance AP, you can use the verification number based on the information printed on the card. However, when using the two electronic certificates of JPKI-AP, (1) of the card information input assistance AP, or the Resident Registration AP, you will use the PIN number set when the My Number Card31 is issued.

[0020] FIG. 4 is a diagram for explaining the AP free area of ​​the IC chip 21 of the My Number card 31.

[0021] The IC chip 21 of the My Number Card 31 has a free area (referred to as an AP free area) in which an AP can be registered later. The AP free area may have, for example, a local resident area in which an AP for local residents can be registered, and an extended use area in which any AP can be registered.

[0022] In the area for local residents, for example, a library card AP, an automatic application form creation AP, and other service APs for local residents may be registered.

[0023] For example, a private AP, a prefectural AP, an administrative agency AP, or a city AP may be registered in the extended use area. Also, as will be described later, a licensed AP may be registered in the extended use area.

[0024] <Integrating driver's license into My Number card> It is being considered to register information from a driver's license 32 (see FIG. 5) in the IC chip 21 of the My Number card 31 and integrate the driver's license 32 with the My Number card 31. Hereinafter, the information on the driver's license 32 may be referred to as license information. For example, Non-Patent Document 1 describes that integration with the My Number card will begin at the end of fiscal year 2024 (Reiwa 6), and that prior to this, the systems for managing driver's licenses of the National Police Agency and prefectural police departments will be consolidated onto a common platform (for example, a police common platform) to be established by the National Police Agency by the end of fiscal year 2024 (Reiwa 6).

[0025] The license information includes the name, date of birth, address, license issue date, expiration date, license type, license number, registered domicile, and photograph.

[0026] It is being considered to share the name, date of birth, and address information of the Individual Number Card with the license information. It is also being considered to secure a license AP (see FIG. 4) in the extended use area of ​​the IC chip 21 of the Individual Number Card 31 and register license-specific information (hereinafter referred to as "specific license information"), such as the license issuance date, expiration date, license type, license number, registered domicile, and facial photograph, in the license AP. In other words, it is being considered to integrate the driver's license 32 with the Individual Number Card 31 by registering the specific license information in the IC chip 21 of the Individual Number Card 31. However, the above explanation is merely an example, and the specific license information is defined as certain information related to the driver's license of the person whose driver's license it is issued, and may be registered in the license AP as information including the person's name, date of birth, and address. In other words, some of the specific license information registered in the Individual Number Card and the license AP may overlap.

[0027] In this embodiment, a method of identity verification will be described when integrating a driver's license 32 with an Individual Number Card 31. The identity verification may be performed when a renewal or new driver's license is issued and / or when a license AP is secured in the extended use area of ​​the IC chip 21 of the Individual Number Card 31.

[0028] <System configuration> FIG. 5 is a block diagram showing an example of the configuration of the personal identification system 2 according to this embodiment.

[0029] 5, the identity verification system 2 includes an authentication terminal 10, a reception terminal 40, a code reader 45, a business terminal 50, and a database server 60. However, the identity verification system 2 may not include some of these components, for example, the reception terminal 40 or the code reader 45 may not be included.

[0030] The authentication terminal 10 and the code reader 45 are connected to the business terminal 50 via, for example, a USB cable. However, at least one of the authentication terminal 10 and the code reader 45 may be connected to the business terminal 50 via a communication network (for example, a wired LAN, a wireless LAN, or Bluetooth (registered trademark)).

[0031] The business terminal 50 can transmit and receive data to and from the reception terminal 40 and the database server 60 via, for example, a communication network (for example, a wired LAN, a wireless LAN, the Internet, a mobile communication network, etc.).

[0032] The reception terminal 40 is a terminal that receives license renewal applications from users. The reception terminal 40 receives license renewal applications from users and issues license renewal application forms. A two-dimensional code (e.g., a QR code (registered trademark)) is printed on the application form. The two-dimensional code has code information corresponding to the user who made the application (i.e., the user's license). Note that a one-dimensional code (e.g., a barcode) may also be printed on the application form.

[0033] The code reader 45 reads the two-dimensional code printed on the application form and transmits code information corresponding to the read two-dimensional code to the business terminal 50. The code reader 45 may also read a one-dimensional code.

[0034] The database server 60 manages, as a license information DB 61, the license information of all persons to whom a license is issued or renewed.

[0035] The business terminal 50 is a terminal used by an operator who is in charge of the task of integrating the driver's license 32 with the My Number card 31. The business terminal 50 includes a processor 51, a memory 52, an operation unit 53, and a display unit 54.

[0036] The processor 51 executes computer programs stored in the memory 52 to realize the functions of the business terminal 50. The functions of the business terminal 50 will be described as appropriate. The processor 51 may be interpreted as other terms such as a controller, a central processing unit (CPU), or a control unit. The processor 51 may also include at least one of a graphics processing unit (GPU) or a neural processing unit (NPU). The processes described in this embodiment with the business terminal 50 as the main body may be interpreted as processes with the processor 51 as the main body.

[0037] The memory 52 stores computer programs and data that realize the functions of the business terminal 50. The memory 52 may be configured by a volatile storage medium and / or a non-volatile storage medium.

[0038] The operation unit 53 is an interface that accepts operations from an operator, and is, for example, a keyboard, a mouse, a touch panel, a microphone, etc.

[0039] The display unit 54 is, for example, a liquid crystal display or an organic EL display, and displays a screen. The screen of the display unit 54 is visible to the operator.

[0040] The authentication terminal 10 includes a processor 11, a memory 12, a face photographing camera 13, a card face photographing camera 14, an IC reader / writer 15, a display unit 16, and a mounting unit 17. Although not shown in Fig. 5, the authentication terminal 10 may further include an input unit that accepts input operations from the user.

[0041] The processor 11 executes a computer program stored in the memory 12 to realize the functions of the authentication terminal 10. The processor 11 may be interpreted as other terms such as a controller, a CPU, or a control unit. The processor 11 may also include at least one of a GPU or an NPU. The processes described in this embodiment with the authentication terminal 10 as the main body may be interpreted as processes with the processor 11 as the main body.

[0042] The memory 12 stores computer programs and data that implement the functions of the authentication terminal 10. The memory 12 may be configured by a volatile storage medium and / or a non-volatile storage medium.

[0043] The placement section 17 is a portion on which the My Number card 31 is placed.

[0044] The face photographing camera 13 photographs the face of the user and generates a photographed face image.

[0045] The card face photographing camera 14 photographs the face of the My Number card 31 placed on the placement section 17 and generates a photographed image of the card face.

[0046] The IC reader / writer 15 reads data stored in the IC chip 21 of the My Number card 31 placed on the placing section 17 in a contactless manner (for example, by Near Field Communication (NFC) method). The IC reader / writer 15 also writes data in a contactless manner to the IC chip 21 of the My Number card 31 placed on the placing section 17. Note that writing the data may involve adding new data to the IC chip 21, or may involve overwriting (updating) existing data with the new data.

[0047] The display unit 16 is, for example, a liquid crystal display or an organic EL display, and displays a screen for the user to check. The screen of the display unit 16 is visible to the user.

[0048] The My Number Card 31 may be read as the first identification document. The driver's license 32 may be read as the second identification document. The facial image data recorded in the IC chip 21 of the My Number Card 31 or the facial image printed on the face of the card may be read as the first facial image information. The facial image recorded on or printed on the face of the driver's license 32 (hereinafter referred to as the license facial image) may be read as the second facial image information.

[0049] <License renewal procedures> Fig. 6 is a flowchart showing an example of license renewal operations according to this embodiment. Next, with reference to Fig. 6, an overview of license renewal and the operations for integrating the driver's license 32 with the My Number card 31 at that time will be described. Note that although this embodiment will be described using license renewal as an example, the same applies to the issuance of a new license.

[0050] A user who wishes to renew their license visits a predetermined facility (e.g., a license center or a police station) and submits an application for license renewal to the reception terminal 40 (S11). At this time, the user can select whether or not to integrate the driver's license 32 with the My Number card 31. In this embodiment, the user selects to integrate the driver's license 32 with the My Number card 31. At this time, the authentication terminal 10 may prompt the user to place the My Number card 31 with which the driver's license 32 will be integrated, and the license AP may be secured in advance in the IC chip 21 of the My Number card 31. Note that in step S11, instead of the user directly operating the reception terminal 40 to apply for license renewal (issue an application form), the user may instead present a license renewal postcard or the like to a staff member or operator, and the staff member or operator may operate the reception terminal 40 to apply for license renewal (issue an application form).

[0051] The user undergoes an aptitude test (S13), has his / her photograph taken (S14), and attends a training course (S15), similar to normal license renewal. The facial image of the user taken in step S14 may be linked to the specific license information of the user and registered in the license information DB 61 of the database server 60.

[0052] The user is issued a driver's license 32 (S15). At this time, the operator has the user place the My Number card 31 on the authentication terminal 10, and the authentication terminal 10 writes the user's specific license information into the license AP of the IC chip 21 of the My Number card 31. As a result, the user is issued a My Number card 31 with an integrated driver's license.

[0053] <Sequence diagram> 7 is a sequence diagram showing an example of the operation of issuing an application form and collecting a license in the identity verification system 2 according to this embodiment. This process corresponds to the details of the process of applying for license renewal to the reception terminal in step S11 in FIG.

[0054] The reception terminal 40 displays a menu screen (S101).

[0055] The user selects the license renewal procedure from the menu screen of the reception terminal 40 (S102).

[0056] The reception terminal 40 displays a screen for selecting whether or not to integrate the driver's license 32 into the My Number card 31, and the user selects to integrate the driver's license 32 into the My Number card 31 (S103).

[0057] Since integration was selected in step S103, the reception terminal 40 transmits an instruction to place the My Number card to the authentication terminal 10 (S104).

[0058] The authentication terminal 10 receives the instruction to place the My Number card from the reception terminal 40, and displays a screen prompting the user to place the My Number card (S105). The user places the My Number card 31 on the authentication terminal 10.

[0059] The authentication terminal 10 photographs the user's face with the face camera 13 and performs face matching to confirm whether the user is the person who claims the My Number card (S106). For example, the authentication terminal 10 compares the photographed face image taken by the face camera 13 with the face image data in the IC chip 21 of the My Number card 31 or the face image printed on the face of the My Number card 31.

[0060] If the face matching fails (S107: NO), the authentication terminal 10 performs a predetermined error process (S108). At this time, the authentication terminal 10 may notify the operator of this fact via the business terminal 50, or may re-perform the face matching in step S106.

[0061] If the face matching is successful (S107: YES), the authentication terminal 10 transmits a notification of the success of face matching to the business terminal 50 (S109).

[0062] The business terminal 50 receives a notification of successful face authentication from the authentication terminal 10 and sends an instruction to the authentication terminal 10 to reserve a license AP in the extended usage area of ​​the IC chip 21 of the My Number card 31 (hereinafter referred to as a license AP reservation instruction) (S110).

[0063] The authentication terminal 10 receives the license AP reservation instruction from the business terminal 50, and reserves the license AP in the extended use area of ​​the IC chip 21 of the My Number card 31 (S111).

[0064] After completing the reservation of the licensed AP, the authentication terminal 10 transmits a reservation completion notification to the operations terminal 50 (S111). The business terminal 50 receives the reservation completion notification from the authentication terminal 10, and transmits an end notification to the authentication terminal 10 (S113).

[0065] The authentication terminal 10 receives the completion notification from the business terminal 50 and transmits the completion notification to the reception terminal 40 (S114). The authentication terminal 10 also displays on the display unit 16 an image indicating that the writing of the license AP has been completed and prompting the user to remove the My Number card (S115), and ends this process.

[0066] The reception terminal 40 receives the completion notification from the authentication terminal 10 and issues an application form on which a two-dimensional code corresponding to the user (or the driver's license 32) is printed (S116).

[0067] The reception terminal 40 displays a screen indicating that the driver's license 32 will be collected (S117), and ends this process.

[0068] By the above process, an area for the license AP is reserved in advance in the IC chip 21 of the My Number card 31.

[0069] FIG. 8 is a sequence diagram showing an example of processing by the identity verification system 2 according to this embodiment. FIG. 9 is a sequence diagram showing a continuation of the processing example of FIG. 8. FIG. 10 is a sequence diagram showing a continuation of the processing example of FIG. 9. FIG. 11 is a diagram showing an example of a first screen displayed by the business terminal 50 according to this embodiment. FIG. 12 is a diagram showing an example of a second screen displayed by the business terminal 50 according to this embodiment. FIG. 13 is a diagram showing an example of a third screen displayed by the business terminal 50 according to this embodiment. FIG. 14 is a diagram showing an example of a fourth screen displayed by the business terminal 50 according to this embodiment. FIG. 15 is a diagram showing an example of a fifth screen displayed by the business terminal 50 according to this embodiment. FIG. 16 is a diagram showing an example of a sixth screen displayed by the business terminal 50 according to this embodiment. FIG. 17 is a diagram showing an example of a first screen displayed by the authentication terminal 10 according to this embodiment. FIG. 18 is a diagram showing an example of a second screen displayed by the authentication terminal 10 according to this embodiment. FIG. 19 is a diagram showing an example of a third screen displayed by the authentication terminal 10 according to this embodiment. FIG. 20 is a diagram showing an example of a fourth screen displayed by the authentication terminal 10 according to this embodiment. Fig. 21 is a diagram showing a fifth example of a screen displayed by the authentication terminal 10 according to this embodiment. Fig. 22 is a diagram showing a sixth example of a screen displayed by the authentication terminal 10 according to this embodiment. Next, with reference to Figs. 8 to 22, the process of writing specific license information to the My Number card 31 by the identity verification system 2 and the identity verification process at that time will be described in detail. Note that the processes in Figs. 8 to 10 correspond to the details of the license issuance process in step S15 in Fig. 6.

[0070] The authentication terminal 10 displays an image prompting the user to place the My Number card, as shown in Fig. 17 (S201). The user places the My Number card 31 on the placement unit 17 of the authentication terminal 10 (S202).

[0071] The business terminal 50 displays an initial screen as shown in FIG. 11 (S203).

[0072] The user causes the code reader 45 to read the two-dimensional code printed on the application form (S204). The code reader 45 transmits code information corresponding to the read two-dimensional code to the business terminal 50, and the business terminal 50 receives the code information (S205). The code information may be, for example, the license number of the user's driver's license 32.

[0073] The business terminal 50 transmits a request for specific license information corresponding to the code information to the database server 60, and the database server 60 receives the request (S206).

[0074] The database server 60 searches the license information DB 61 for specific license information corresponding to the received code information (S207). The specific license information includes a licensed face image of the user's driver's license 32. The licensed face image may be recorded or printed on the driver's license 32, or may be a new image taken in step S13 of FIG. 6.

[0075] The database server 60 transmits the specific license information including the licensed face image found in the search to the business terminal 50, and the business terminal 50 receives the information (S208).

[0076] The business terminal 50 extracts facial features from the licensed face image (S209).

[0077] The business terminal 50 temporarily stores the specific license information including the licensed face image and the facial feature amount of the licensed face image extracted in step S209 in the memory 52 (S210). At this time, the business terminal 50 displays the licensed face image in the display area of ​​the specific license information, as shown in FIG.

[0078] After the operator confirms that the My Number card 31 is placed on the authentication terminal 10, the operator presses the button 301 to execute integration from the screen displayed on the business terminal 50 shown in FIG. 12 (S211).

[0079] When the button 301 for executing the integration is pressed in step S211, the business terminal 50 transmits a read instruction to the authentication terminal 10 (S212).

[0080] The authentication terminal 10 receives the reading instruction in step S212, photographs the face of the My Number card 31 with the face photographing camera 14 to generate a photographed image of the face, performs OCR processing on the photographed image of the face, and obtains face information (S213).

[0081] Next, the continuation of FIG. 8 will be described with reference to FIG.

[0082] The authentication terminal 10 determines whether or not the verification number B has been acquired from the card face information acquired in step S213 (S221).

[0083] If the authentication terminal 10 is unable to acquire the verification number B (S221: NO), it performs a predetermined error process (S222). At this time, the authentication terminal 10 may notify the operator (service terminal 50) of the error, or may re-execute step S213.

[0084] If the authentication terminal 10 can acquire the verification number B (S221: YES), it accesses the IC chip 21 of the My Number card 31 using the verification number B as a key (S223).

[0085] The authentication terminal 10 determines whether or not the IC chip 21 has been accessed (S224).

[0086] If the authentication terminal 10 is unable to access the IC chip 21 (S224: NO), it performs a predetermined error process (S225). At this time, the authentication terminal 10 may notify the operator (service terminal 50) of the error, or may re-execute step S213.

[0087] If the authentication terminal 10 can access the IC chip 21 (S224: YES), it acquires personal information and facial image data from the IC chip 21 (S226).

[0088] The authentication terminal 10 extracts facial features from the acquired facial image data (S227). Note that instead of the method of acquiring facial image data from the IC chip 21 described above, the authentication terminal 10 may acquire personal information and a facial image of the face of the card from the image of the face of the card captured in step S213, and extract facial features from the facial image.

[0089] The authentication terminal 10 transmits the personal information, the facial image data, and the facial feature amounts of the facial image data to the business terminal 50, which receives this information (S228).

[0090] The business terminal 50 temporarily stores the received personal information, facial image data, and facial feature amounts of the facial image data in the memory 52 (S229).

[0091] The authentication terminal 10 photographs the user's face with the face photographing camera 13 and generates a photographed face image (S230). At this time, the authentication terminal 10 may display a screen requesting the user to place their face within a frame, as shown in Fig. 19, and may also display the face image being photographed by the face photographing camera 13.

[0092] The authentication terminal 10 extracts facial features from the captured facial image (S231).

[0093] The authentication terminal 10 transmits the photographed face image and the facial feature amounts of the photographed face image extracted in step S231 to the business terminal 50, and the business terminal 50 receives the information (S232).

[0094] The business terminal 50 temporarily stores the received photographed face image and the facial feature amount of the photographed face image in the memory 52 (S233).

[0095] The processes of steps S230 to S233 may be executed before step S213 shown in FIG.

[0096] The business terminal 50 compares the facial feature values ​​of the license face image temporarily saved in step S210 with the facial feature values ​​of the facial image data of the My Number Card 31 temporarily saved in step S229 and the facial feature values ​​of the photographed face image temporarily saved in step S233 (S234). At this time, the business terminal 50 may display the screen shown in FIG. 13 and first compare the facial feature values ​​of the license face image with the facial feature values ​​of the facial image data of the My Number Card 31 as a first comparison. If the first comparison is successful, the business terminal 50 may then display the screen shown in FIG. 14 and compare the facial feature values ​​of the facial image data of the My Number Card 31 with the facial feature values ​​of the photographed face image as a second comparison. This allows the operator to know the progress of the comparison and whether the comparison was successful or failed. At this time, the authentication terminal 10 may display an image indicating that identity verification is in progress, as shown in FIG. 20. This allows the user to know that identity verification is in progress.

[0097] The business terminal 50 determines whether or not all of the features of the license face image, the face features of the face image data of the My Number Card 31, and the face features of the photographed face image have been successfully matched (S235). In other words, the business terminal 50 determines whether or not both the driver's license 32 and the My Number Card 31 belong to the user.

[0098] If the verification in step S234 fails (S235: NO), the business terminal 50 executes a predetermined error process (S236). At this time, the business terminal 50 may instruct the authentication terminal 10 to execute step S226 and subsequent steps again.

[0099] If the verification in step S234 is successful (S235: YES), the business terminal 50 transmits a notification of successful verification to the authentication terminal 10 (S237).

[0100] The authentication terminal 10 receives the notification of successful matching and displays a screen indicating that the identity verification has been successful and a screen indicating that writing of the specific license information to the My Number card will begin (S238).The authentication terminal 10 then transmits a request to start writing to the business terminal 50 (S239).

[0101] Next, the continuation of FIG. 9 will be described with reference to FIG.

[0102] When the business terminal 50 receives the request to start writing in step S239, it transmits the specific license information to the authentication terminal 10, and the authentication terminal 10 receives the specific license information (S251). Note that, immediately before step S251, the business terminal 50 may execute the same processes as steps S204 to S208 shown in Fig. 8 to acquire the specific license information from the database server 60.

[0103] The authentication terminal 10 writes the received specific license information into the license AP secured in the IC chip 21 of the My Number card 31 (S252). At this time, the authentication terminal 10 may display a screen indicating that the license information is being written, as shown in FIG.

[0104] After completing the writing of the specific license information, the authentication terminal 10 may display a screen indicating that the writing of the license information has been completed (S253).

[0105] The authentication terminal 10 transmits a write completion notification to the operations terminal 50 (S254).

[0106] The business terminal 50 receives the write completion notification from the authentication terminal 10, and displays a screen indicating the write completion as shown in FIG. 15 (S255).

[0107] When the operator presses the take out button 390 on the screen shown in FIG. 15 (S256), the business terminal 50 transmits an end instruction to the authentication terminal 10 (S257).

[0108] The authentication terminal 10 receives the end instruction from the business terminal 50, and displays a screen such as that shown in FIG. 22 indicating that writing of the license information has been completed and prompting the user to remove the My Number card (S258).

[0109] The user removes the My Number card 31 from the authentication terminal 10 (S259).

[0110] Thereafter, the authentication terminal 10 may return the process to step S201. The business terminal 50 may return the process to step S203.

[0111] Through the above process, if it is possible to authenticate that the driver's license 32 and My Number card 31 belong to the user, the specific license information is written to the My Number card 31, so that when integrating the driver's license 32 with the My Number card 31, the user's identity can be verified with high reliability, preventing fraud by another user and / or preventing the erroneous integration of another user's information.

[0112] <Matching process variations> FIG. 23 is a diagram for explaining the first method of the first collation and the second collation according to this embodiment.

[0113] 9, the business terminal 50 first compares the license facial image with the facial image data (or the facial image on the face of the card) of the My Number card 31 as the first comparison, and then compares the facial image data (or the facial image on the face of the card) of the My Number card 31 with the photographed facial image as the second comparison. However, the order and combination of the first comparison and the second comparison may be any. For example, the photographed facial image may be compared with the facial image data (or the facial image on the face of the card) of the My Number card 31 as the first comparison, and then compares the facial image data (or the facial image on the face of the card) of the My Number card 31 with the license facial image as the second comparison.

[0114] In the first comparison, the photographed facial image is compared with the facial image data of the My Number Card 31 (or the facial image on the face of the card) or the facial image on the license to confirm the identity of the person, and in the second comparison, instead of comparing the facial image, the name, date of birth, etc. recorded in the IC chip 21 of the My Number Card 31 (or printed on the face of the card) may be compared with the name, date of birth, etc. associated with the license information to confirm the person's identity.

[0115] FIG. 24 is a diagram for explaining the second method of the first collation and the second collation according to this embodiment.

[0116] In the second method, the first verification may be performed by comparing the photographed face image with the face image data (or the face image on the card) of the My Number card 31, and the second verification may be performed by comparing the photographed face image with the face image on the license. In the second method, the first verification may be performed first, and then the second verification may be performed. However, the first verification and the second verification may be performed simultaneously (in parallel). This can shorten the verification time.

[0117] Furthermore, the business terminal 50 may store the photographed facial image used in the first matching in the memory 52 and reuse it in the second matching. In this case, the business terminal 50 may delete the photographed facial image that was temporarily stored from the memory 52 after using it in the second matching.

[0118] 9 (for example, at least one of the first and second verifications) may be performed by the authentication terminal 10. In this case, the authentication terminal 10 may transmit the verification result to the business terminal 50, and the business terminal 50 may determine whether the verification in step S235 is successful or not based on the received verification result.

[0119] Furthermore, (C1) if the business terminal 50 (or authentication terminal 10) succeeds in matching the photographed face image with the face image data (or face image on the face of the card) of the My Number card 31 as the first matching, it may write the specific license information to the license AP of the IC chip 21 of the My Number card 31, and then, as the second matching, it may perform a matching between the face image data (or face image on the face of the card) of the My Number card 31 and the license face image included in the specific license information.

[0120] Furthermore, (C2) after writing the specific license information into the license AP of the IC chip 21 of the My Number card 31, the business terminal 50 (or the authentication terminal 10) may perform a first comparison between the photographed face image and the face image data of the My Number card 31 (or the face image on the card), and a second comparison between the face image data of the My Number card 31 (or the face image on the card) and the license face image included in the specific license information.

[0121] Furthermore, when the above (C1) or (C2) is adopted, the licensed face image contained in the specific license information written in the IC chip 21 of the My Number card 31 can be used, so the business terminal 50 (or the authentication terminal 10) does not need to re-obtain the specific license information and the licensed face image from the database server 60 in the second matching.

[0122] <Modification> In the above, an example has been described in which information on a driver's license 32 is written to the IC chip 21 of the My Number card 31, but the information written to the IC chip 21 of the My Number card 31 is not limited to information on a driver's license 32. For example, this embodiment can also be applied to a case in which information on a card used for personal identification, such as information on a residence card, is written to the My Number card 31.

[0123] Furthermore, the My Number Card 31 and the driver's license 32 may be electronically registered, for example, as a wallet application in a user terminal such as a smartphone. For example, the digital certificate A of the My Number Card 31 and the digital certificate B of the driver's license 32 are stored in advance in the wallet application of the user's user terminal. When updating the data in the digital certificate B, the photographed facial image of the user himself / herself, the facial image data in the digital certificate A, and the licensed facial image in the specific license information or the licensed facial image data stored in the digital certificate B may be compared, and if all comparisons are successful, the data in the digital certificate B may be updated.

[0124] (Summary of this embodiment) The above description of the present embodiment discloses the following techniques.

[0125] <Technology 1> A method for verifying the identity of a person based on an identification document performs a first verification by comparing photographed facial image information of the person's face with first facial image information based on a first identification document, and if the first verification is successful, writes information of a second identification document different from the first identification document into a writable area of ​​an IC chip on the first identification document. This means that if the first matching is successful, that is, if identity verification is successful, the information of the second identity verification document is written into the IC chip of the first identity verification document, thereby preventing fraud by another person or erroneous writing of another person's information.

[0126] <Technology 2> In the identity verification method described in Technology 1, a second verification is performed to compare the first facial image information with second facial image information based on the second identity verification document, and if the first verification and the second verification are successful, information from the second identity verification document is written to a writable area of ​​an IC chip on the first identity verification document. As a result, if the first and second matching are successful, i.e., if identity verification is successful, the information from the second identity verification document is written into the IC chip of the first identity verification document, allowing identity verification to be performed with high reliability and preventing fraud by another person and / or preventing the erroneous writing of another person's information.

[0127] <Technology 3> In the identity verification method described in Technology 1, a second verification is performed to compare the photographed face image information with second face image information based on the second identity verification document, and if the first verification and the second verification are successful, information from the second identity verification document is written to a writable area of ​​an IC chip on the first identity verification document. As a result, if the first and second matching are successful, i.e., if identity verification is successful, the information of the second identity verification document is written into the IC chip of the first identity verification document, thereby preventing fraud by another person or the mistaken writing of another person's information.

[0128] <Technology 4> In the personal identification method described in Technology 3, the photographed face image information used in the first matching is temporarily stored, and the second matching is performed using the temporarily stored photographed face image information. This allows the photographed face image information temporarily stored for use in the first verification to be reused in the second verification.

[0129] <Technology 5> In the personal identification method described in Technology 3, if the first verification is successful, the second verification is performed. As a result, if the first verification fails, the second verification becomes unnecessary, thereby preventing unnecessary processing from being executed.

[0130] <Technology 6> In the identity verification method according to any one of techniques 1 to 5, the first identity verification document is a My Number card, and the second identity verification document is a driver's license or a residence card. This allows a driver's license or residence card to be integrated into the My Number card.

[0131] <Technology 7> An identity verification device that verifies the identity of a person based on an identity verification document comprises a processor and a memory, and the processor works in cooperation with the memory to perform a first comparison that compares photographed facial image information of the person's face with first facial image information based on a first identity verification document, and if the first comparison is successful, writes information of a second identity verification document that is different from the first identity verification document into a writable area of ​​an IC chip on the first identity verification document. This means that if the first matching is successful, that is, if identity verification is successful, the information of the second identity verification document is written into the IC chip of the first identity verification document, thereby preventing fraud by another person or erroneous writing of another person's information.

[0132] <Technology 8> An identity verification program for verifying the identity of a person based on an identity verification document causes a device to perform a first comparison to compare photographed facial image information of the person's face with first facial image information based on a first identity verification document, and if the first comparison is successful, to write information of a second identity verification document different from the first identity verification document into a writable area of ​​an IC chip of the first identity verification document. This means that if the first matching is successful, that is, if identity verification is successful, the information of the second identity verification document is written into the IC chip of the first identity verification document, thereby preventing fraud by another person or erroneous writing of another person's information.

[0133] Although the embodiments have been described above with reference to the accompanying drawings, the present disclosure is not limited to such examples. It is clear that a person skilled in the art can conceive of various modifications, alterations, substitutions, additions, deletions, and equivalents within the scope of the claims, and it is understood that these also fall within the technical scope of the present disclosure. Furthermore, the components in the above-described embodiments may be combined in any manner without departing from the spirit of the invention. [Industrial Applicability]

[0134] The technology of the present disclosure is useful for identity verification when integrating multiple identity verification documents. [Explanation of symbols]

[0135] 2. Identity Verification System 10 Authentication terminal 11 processors 12 Memory 13 Face Camera 14 Ticket face camera 15 IC reader / writer 16 Display section 17 Placement section 21 IC chip 22 Facial images 31 My Number Card 32 Driver's License 40 Reception terminal 45 Code Reader 50 Business terminals 51 processors 52 memory 53 Operation section 54 Display section 60 Database Server 61 License Information DB 301,390 buttons

Claims

1. A method for verifying the identity of a person based on an identification document, comprising: performing a first comparison in which photographed face image information of the person's face is compared with first face image information based on a first personal identification document; If the first verification is successful, write information of a second identification document different from the first identification document into a writable area of ​​an IC chip of the first identification document. Identity verification method.

2. performing a second comparison in which the first facial image information is compared with second facial image information based on the second personal identification document; If the first verification and the second verification are successful, write information of the second identification document into a writable area of ​​an IC chip of the first identification document. The method of claim 1 .

3. performing a second comparison of the photographed face image information with second face image information based on the second personal identification document; If the first verification and the second verification are successful, write information of the second identification document into a writable area of ​​an IC chip of the first identification document. The method of claim 1 .

4. temporarily storing the photographed face image information used in the first matching; The second matching is performed using the temporarily stored photographed face image information. The method for verifying identity according to claim 3.

5. If the first verification is successful, the second verification is performed. The method for verifying identity according to claim 3.

6. The first identification document is a My Number card, and the second identification document is a driver's license or a residence card. The method for verifying identity according to any one of claims 1 to 5.

7. 1. An identity verification device for verifying the identity of a person based on an identity document, comprising: a processor and a memory, the processor cooperating with the memory to: performing a first comparison in which photographed face image information of the person's face is compared with first face image information based on a first personal identification document; If the first verification is successful, write information of a second identification document different from the first identification document into a writable area of ​​an IC chip of the first identification document. Identity verification device.

8. An identity verification program for verifying the identity of a person based on an identity verification document, performing a first comparison in which photographed face image information of the person's face is compared with first face image information based on a first personal identification document; If the first verification is successful, write information of a second identification document different from the first identification document into a writable area of ​​an IC chip of the first identification document. An identity verification program that causes the device to perform the following:

Images