Identification reading system, identification reading method, and identification reading program

Abstract

To provide an identification reading system, identification reading method, and identification reading program that enable even a user not getting used to an operation of a smart phone to easily perform personal authentication.SOLUTION: An identification reading system 100 is the identification reading system 100 that uses a communication terminal 200 to read an identification card 900, in which a user does not install dedicated application software to the communication terminal beforehand from a platform disclosing and distributing a dedicated digital content to the communication terminal, but installs and starts up the dedicated application software to the communication terminal 200 by an operation on a WEB browser 220, and reads the identification card 900.SELECTED DRAWING: Figure 2

Description

[Technical Field]

[0001] The present invention relates to an identification reading system, an identification reading method, and an identification reading program for reading an identification card using a communication terminal. [Background technology]

[0002] Patent Document 1 (Japanese Patent Application Laid-Open No. 2023-22618) discloses a user authentication system for an online conference that performs highly reliable identity verification of users participating in the conference.

[0003] The authentication system described in Patent Document 1 is an authentication system that authenticates users participating in a video-based online conference, and includes a client terminal used by the user to participate in the conference, and a web server that provides conference-related services to conference participants. The web server includes an application providing unit that provides an authentication application that can be installed on the client terminal in response to access from the client terminal, and an authentication unit that authenticates the user. The client terminal includes an IC data acquisition unit that acquires personal information including data of the user's face photo from an IC card owned by the user, and a data transmission unit that transmits the personal information to the web server using the authentication application as identity verification data. The authentication unit of the web server receives the personal information transmitted from the client terminal to authenticate the user as a user of the client terminal and verify their identity.

[0004] Patent Document 2 (JP Patent Publication No. 2022-11538) discloses an identification information management system and an identification information management method that use electronic certificates to more safely manage and utilize identification information unique to users.

[0005] The identification information management system described in Patent Document 2 comprises a reception unit that receives a confirmation request for identification information issued to the subject of an electronic certificate; an acquisition unit that queries a certification authority system using characteristic information of the electronic certificate included in the confirmation request and acquires characteristic information included in one or more electronic certificates linked to the subject related to the confirmation request; a candidate generation unit that generates candidate information using the characteristic information acquired by the acquisition unit and predetermined key information; and an output unit that, when searching a database that manages identification information generated based on the characteristic information and key information of the electronic certificate based on the candidate information, outputs the candidate information in response to the confirmation request if identification information matching the candidate information is registered in the database.

[0006] Also, in Patent Document 3 (JP 2022-532677 A), disclosed embodiments include an identity verification and management service in which a user authenticates their identity during a registration process and can access and modify their identity information via a secure portal. The registration process includes collecting various identification and biometric data of the user. A live interview portion of the registration process is used to confirm activity and verify the collected identification and biometric data. Once a user is registered, the user's identity can be verified with multiple entities using the same registered identity, and the user can manage the specific data used to verify their identity with different entities. This allows users to use their authenticated / verified identity across various industries, markets, locations, etc. while maintaining their identity data confidential. An identity verification and management system is disclosed, and other embodiments may be described and / or claimed.

[0007] The identity verification and management system described in Patent Document 3 is a method of operating a computer system to provide identity verification services, including the steps of acquiring primary biometric data and secondary biometric data different from the primary biometric data from the client system via a secure channel between the computer system and the client system, establishing a secure channel between the computer system and the client system in response to receiving a request to verify the identity of a user of the client system, identifying one or more matching users from a set of other users based on the primary biometric data, determining a set of candidate identities through modification of one or more matching users based on the secondary biometric data, and The method includes the steps of calculating a confidence score for each candidate identity in the original set, sending a registration resume message to the client system if a user identifier (ID) matching the candidate identity having the highest calculated confidence score among the calculated confidence scores of the set of candidate identities has initiated a registration process to register with the identity verification service, sending a new registration message to the client system if the user ID matching the candidate identity having the highest calculated confidence score has not initiated the registration process, and sending a member authentication indication message to the client system if the user ID matching the candidate identity having the highest calculated confidence score is a member of the identity verification service.

[0008] In addition, Patent Document 4 (JP 2020-13525 A) discloses an authentication device, authentication system, and authentication method that can improve the accuracy of identity verification and prevent the leakage of biometric information.

[0009] The authentication device described in Patent Document 4 includes a first acquisition unit that reads and acquires first biometric information, which is the biometric information of a subject, from a medium on which the biometric information is recorded; a second acquisition unit that acquires second biometric information from the subject's body; a third acquisition unit that acquires third biometric information from an identification document possessed by the subject; and an authentication unit that performs biometric authentication using the first biometric information, the second biometric information, and the third biometric information, and performs the acquisition of the first biometric information, the second biometric information, and the third biometric information and the biometric authentication offline.

[0010] In addition, Patent Document 5 (JP 2020-13333 A) discloses a terminal device, an authentication server, an identity verification management system, and an identity verification management program that can reduce the effort required to manage application software related to applications.

[0011] The terminal device described in Patent Document 5 is equipped with a memory unit that stores an application app including authentication information, which is application software that performs processing for inputting application information, which is information necessary for an application, and sending the application information to a server that accepts applications, and an identity verification app including the authentication information, which is application software that performs processing for verifying the identity of the application applicant, a control unit that includes an application progress unit that functions by executing the application app and an identity verification progress unit that functions by executing the identity verification app, and a communication unit that sends the authentication information to an authentication server that authenticates the application app and the identity verification app using the authentication information, and when the identity verification progress unit receives a call from the application progress unit, it causes the communication unit to send the authentication information of the application app and the authentication information of the identity verification app to the authentication server, and when the authentication of the application app and the authentication of the identity verification app at the authentication server is successful, it proceeds with processing for identity verification and hands over the processing to the application progress unit.

[0012] Furthermore, Patent Document 6 (JP Patent Publication No. 2003-60890) discloses a method for providing a means of certification that can be issued to everyone, is difficult to counterfeit, has high reliability, can store various personal information about the holder, and is suitable for official documents.

[0013] The personal authentication system described in Patent Document 6 is a personal authentication system in which an authentication-seeking terminal and an authenticating terminal are connected to a management server via a communication network, and the management server is equipped with: a means for creating a print data file, when receiving personal authentication information from the authentication-seeking terminal, in which an ID pattern, which is a graphic representation of at least a part of the authentication information through encryption definition, is made hidden when printed; a means for storing the print data file in a memory unit and distributing it to the authentication-seeking terminal; a means for comparing, when receiving the print data file from the authenticating terminal, the print data file received from the authenticating terminal with the print data file of the authentication seeker stored in the memory unit; and a means for distributing the comparison result to the authenticating terminal.

[0014] APPCLIP, described in Non-Patent Document 1, is a program technology developed by APPLE.Inc. and installed on iPhones. [Prior art documents] [Patent documents]

[0015] [Patent Document 1] Japanese Patent Publication No. 2023-22618 [Patent Document 2] Japanese Patent Publication No. 2022-11538 [Patent Document 3] Special Publication No. 2022-532677 [Patent Document 4] Japanese Patent Publication No. 2020-13525 [Patent Document 5] Japanese Patent Publication No. 2020-13333 [Patent Document 6] Japanese Patent Application Laid-Open No. 2003-60890 [Non-patent literature]

[0016] [Non-Patent Document 1] https: / / developer.apple.com / jp / app-clips / Summary of the Invention [Problem to be solved by the invention]

[0017] In recent years, with the expansion of online banking and online shopping, the importance of identity authentication via a network (non-face-to-face) rather than face-to-face has increased. Identity authentication often uses identification documents such as driver's licenses and My Number cards. Furthermore, when identity documents are used for identity authentication, it is becoming more common to read the data from the IC chip embedded in the identity authentication document. In addition, there is already a growing need to perform identity authentication using communication terminals, particularly mobile phones and smartphones, and identity authentication can also be performed using NFC on My Number Portal and other systems.

[0018] As described in Patent Documents 1 to 6, there are techniques that use application software programs (hereinafter simply referred to as apps) or two-step authentication, etc. These methods of installing apps on smartphones are becoming increasingly popular.

[0019] However, for users who are not familiar with using smartphones, it can be somewhat difficult to install apps required for reading identification documents such as My Number Portal on their smartphones, and as a result, they often give up on performing identity authentication using smartphones such as eKYC. On the other hand, even users who are not familiar with using smartphones are increasingly able to view the homepages they want to see on a web browser. Therefore, in order to encourage widespread use of smartphone-based identity authentication such as eKYC among users who are not familiar with using smartphones, an identity reading system, an identity reading method, and an identity reading program are needed that can perform identity authentication based on reading an identity document simply by operating on a web browser. However, in order to read the information on the IC chip built into the identification card, it is necessary to use the near field communication (NFC) built into the smartphone, but since near field communication (NFC) cannot be used from a web application, the information on the IC chip built into the identification card cannot be read using a web application alone.

[0020] An object of the present invention is to provide an identification reading system, an identification reading method, and an identification reading program that allow even users who are not familiar with operating smartphones to easily perform identity authentication using a smartphone. Another object of the present invention is to provide an identification reading system, an identification reading method, and an identification reading program that can easily perform identity authentication on a smartphone in a short time by operating on a web browser from a platform that publishes and distributes dedicated digital content without the need for prior installation, i.e., without the need for prior installation of an app. [Means for solving the problem]

[0021] (1) An identification reading system according to one aspect is an identification reading system that reads an identification card using a communication terminal, in which a user installs and starts dedicated application software on the communication terminal by operating a web browser from a platform that publishes and distributes dedicated digital content, without having to install the software in advance, and reads the identification card.

[0022] In this case, users can read their identification card from a web browser on their communication device without having to install any software from the platform in advance. As a result, even users who are not familiar with smartphone operations can easily perform identity authentication using their smartphone. Furthermore, the user can avoid the trouble of installing an application and can easily perform authentication in a short time.

[0023] (2) An identification reading system according to another aspect is an identification reading system that uses a communication terminal to read an identification document, and a user installs and starts dedicated application software on the communication terminal by operating on a web browser, without going through a platform that publishes and distributes dedicated digital content, and then reads the identification document.

[0024] In this case, users can read their identification card from a web browser on their communication device without having to install any software from the platform in advance. As a result, even users who are not familiar with smartphone operations can easily perform identity authentication using their smartphone. Furthermore, the user can avoid the trouble of installing an application and can easily perform authentication in a short time.

[0025] (3) An identification reading system according to a third aspect of the present invention may be an identification reading system according to one aspect or another aspect, wherein the communication terminal is an iPhone (registered trademark), the communication terminal has a short-range communication function, the operating system of the communication terminal is iOS, the web browser is Safari, and the dedicated application software is application software on a web application of the communication terminal that reads the IC chip of the identification card via short-range communication.

[0026] In this case, users of iPhones (registered trademark) can complete identity verification in a short time.

[0027] (4) An identification reading system according to a fourth aspect of the present invention is an identification reading system according to one aspect or another, wherein the dedicated application software is realized as an APPCLIP that compactly provides part of the functions of an application; The dedicated application software may be launched by tapping an installation and launch button displayed on the web browser.

[0028] In this case, the APPCLIP can provide a compact portion of the application's functions, allowing the user to complete identification card authentication in a short amount of time.

[0029] (5) An identification reading system according to a fifth aspect of the present invention is an identification reading system according to one aspect or another aspect, which includes an IC chip built into an identification card, a reading unit built into a communication terminal that reads data from the IC chip, and a display unit that can display information from the communication terminal, and when the identification card is placed on the back side of the communication terminal and the reading unit is able to read the data from the IC chip, the display unit of the communication terminal may notify the user that the reading was successful.

[0030] In this case, the user can recognize on the web browser that the communication terminal has read the information on the ID card. Also, the user can be made to recognize that the communication terminal has read the information on the IC chip of the ID card.

[0031] (6) In an identification reading system according to a sixth aspect of the present invention, in the identification reading system according to the one aspect or the other aspect, the communication terminal may include an NFC reader.

[0032] In this case, the detection range of the NFC reader, a short-range wireless communication technology using the 13.56 MHz frequency band, is limited to a certain extent, so users can verify their identity without being mixed in with others.

[0033] (7) Another aspect of the identification reading method is an identification reading method for reading an identification document using a communication terminal, and includes an APPCLIP process for compactly providing some of the functions of the communication terminal's application, a browser process for using a web browser, which is software for viewing web pages over the Internet, via the APPCLIP process, and a reading process for reading the identification document in the browser process.

[0034] In this case, the APPCLIP can provide a compact portion of the application's functions, allowing the user to complete identification card authentication in a short amount of time.

[0035] (8) Another aspect of the identification reading method is an identification reading program that reads an identification card using a communication terminal, and includes an APPCLIP process that compactly provides some of the functions of the communication terminal's application, a browser process that uses a web browser, which is software for viewing web pages over the Internet, through the APPCLIP process, and a reading process that reads the identification card in the browser process.

[0036] In this case, the APPCLIP can provide a compact portion of the application's functions, allowing the user to complete identification card authentication in a short amount of time. [Brief explanation of the drawings]

[0037] [Figure 1] 1 is a schematic diagram showing an example of an identification reading system according to an embodiment of the present invention; [Figure 2] FIG. 2 is a schematic diagram showing an example of the operation of the identification reading system. [Figure 3] FIG. 2 is a schematic diagram illustrating an example of a display unit of a communication terminal. [Figure 4] FIG. 2 is a schematic diagram illustrating an example of a display unit of a communication terminal. [Figure 5] FIG. 2 is a schematic diagram illustrating an example of a display unit of a communication terminal. [Figure 6] FIG. 2 is a schematic diagram illustrating an example of a display unit of a communication terminal. [Figure 7] FIG. 2 is a schematic diagram illustrating an example of a display unit of a communication terminal. [Figure 8] FIG. 2 is a schematic diagram illustrating an example of a display unit of a communication terminal. [Figure 9] FIG. 2 is a schematic diagram illustrating an example of a display unit of a communication terminal. [Figure 10] FIG. 2 is a schematic diagram illustrating an example of a display unit of a communication terminal. [Figure 11] FIG. 2 is a schematic diagram illustrating an example of a display unit of a communication terminal. [Figure 12] FIG. 2 is a schematic diagram illustrating an example of a display unit of a communication terminal. [Figure 13] FIG. 2 is a schematic diagram illustrating an example of a display unit of a communication terminal. [Figure 14] FIG. 2 is a schematic diagram illustrating an example of a display unit of a communication terminal. DETAILED DESCRIPTION OF THE INVENTION

[0038] Hereinafter, an embodiment of the present invention will be described with reference to the drawings. In the following description, the same components are denoted by the same reference numerals. The names and functions of the components are also the same. Therefore, detailed description thereof will not be repeated.

[0039] [Present embodiment] FIG. 1 is a schematic diagram showing an example of an identification reading system 100 according to this embodiment, and FIG. 2 is a schematic diagram showing an example of the operation of the identification reading system 100. As shown in FIG.

[0040] [Identification reading system 100] As shown in FIG. 1, the identification reading system 100 mainly includes a communication terminal 200, an official certification server 300, an identity authentication request server 400, and an identification card 900.

[0041] In this embodiment, the communication terminal 200 of the identification reading system 100 is an iPhone (registered trademark). As shown in Fig. 1, the communication terminal 200 includes an OS (iOS) 210, a web browser 220, an app clip 230, a reading unit 240, a display unit 250, and an operation unit 260.

[0042] (APP CLIP230) APP CLIP230 is a compact portion of an application software that is displayed on a website when needed, allowing users to quickly perform app tasks even if they do not have the full version of the app installed. That is, even if dedicated application software is not explicitly installed in communication terminal 200, part of the application software can be executed using web browser 220 (see FIGS. 5 to 13). In this embodiment, a case where official authentication is performed using a web browser 220 will be described.

[0043] Next, a description will be given of an example of the operation of the identification reading system 100 shown in Fig. 2. Figs. 3 to 12 are schematic diagrams showing an example of the display unit 250 of the communication terminal 200.

[0044] First, the user performs a predetermined operation using communication terminal 200. Here, the predetermined operation refers to a case where any predetermined authentication is required, such as job hunting, license renewal, My Number registration, or passport renewal or acquisition.

[0045] First, it is assumed that the user connects via the web browser 220 of the communication terminal 200 to a site that requires official authentication, such as that of a manufacturer, government office, travel agency, or tax office. In this case, the identity authentication request server 400 of the site sends a URL (Uniform Resource Locator) of the authentication request to the communication terminal 200 (step S1). The communication terminal 200 displays on the display unit 250 that the URL has been received.

[0046] When the user selects the URL on the display unit 250, the APP CLIP 230 on the WEB browser 220 is displayed on the display unit 250 as shown in Fig. 3 (step S2). At this stage, the APP CLIP 230 is being prepared. Next, when the user selects APP CLIP 230 using operation unit 260, the display on display unit 250 changes as shown in Figures 4, 5, and 6. As shown in Figure 5, an attention-calling display is displayed, and as shown in Figure 6, a guidance display is displayed (step S3). The user looks at the display unit 250 shown in FIGS. 5 and 6 and checks the warning and guidance displays.

[0047] Here, the communication terminal (iPhone (registered trademark)) 200 can run the application using the APP CLIP 230, without explicitly running the application, without being displayed on the display unit 250, and at a timing that makes it appear as if the application is present on the WEB browser 220. As a result, the user can recognize that authentication is starting on the WEB browser 220.

[0048] Next, the display on display unit 250 of WEB browser 220 of communication terminal 200 changes as shown in Figures 7, 8, and 9. The user uses operation unit 260 to input a PIN into the secret information input display (step S4).

[0049] When communication terminal 200 determines that input of the personal identification number has been completed, it activates the NFC reader (step S5). 10 and 11, the display on display unit 250 of communication terminal 200 changes. The user reads the IC chip of identification card 900 in accordance with the instructions on display unit 250 (step S6). The user places communication terminal 200 over identification card 900 and holds it there for about five seconds.

[0050] Here, an IC chip is built into an official identification card 900 such as a driver's license or a My Number card, and the IC chip stores the same information as that printed on the card, such as the name, date of birth, and photograph. In addition to applying for identity verification (eKYC) by taking a photograph of the official identification card 900, an application by reading the information on the IC chip can also be made at the same identity verification level. In addition, the current identity verification (eKYC) method is mainly based on taking a photo of an official ID card900, and the method of reading an IC chip is not widely used. On the other hand, the Act on Prevention of Transfer of Criminal Proceeds defines the method of taking a photo as Method E, and the method of reading an IC chip as Method F or Method Wa.

[0051] Also, the display unit 250 may display an instruction to slowly move the card that is the official identification card 900 from the top to the bottom of the communication terminal 200. The user may slowly move the card that is the identification card 900 toward the bottom of the communication terminal 200 in accordance with the display.

[0052] 12, communication terminal 200 displays on display unit 250 whether the reading was successful or an instruction to reread (step S7). In the case of rereading, the audio output unit may provide audio guidance to the user to change the position. The display on the display unit 250 of the communication terminal 200 changes as shown in Figures 13 and 14. As shown in Figure 13, when the official identification is completed, a message indicating that authentication is complete is displayed on the web browser 220 (step S8), and then the authentication information is sent from the communication terminal 200 to the identity authentication request server 400 (step S9).

[0053] In the embodiment of the present invention, the communication terminal 200 corresponds to a "communication terminal, iPhone (registered trademark)", the identification card 900 corresponds to an "identification card", and the identification reading system 100 corresponds to an "identification reading system". Furthermore, the web browser 220 corresponds to a "web browser, Safari", and the OS 210 corresponds to an "operating system, iOS". Furthermore, the APP CLIP 230 corresponds to an "APP CLIP", the reading unit (NFC) 240 corresponds to a "reading unit, NFC reader", and the display unit 250 corresponds to a "display unit".

[0054] Although a preferred embodiment of the present invention has been described above, the present invention is not limited thereto. It will be understood that various other embodiments can be made without departing from the spirit and scope of the present invention. Furthermore, although the actions and effects of the configuration of the present invention are described in this embodiment, these actions and effects are merely examples and do not limit the present invention. [Explanation of symbols]

[0055] 100 ID reading system 200 Communication terminal 210 OS (iOS) 220 Web Browser 230 APP CLIP 240 Reading unit (NFC) 250 Display section 900 Identification Card

Claims

1. An identification reading system that reads an identification card using a communication terminal, The user can download dedicated digital content from a platform that publishes and distributes it to the communication terminal without installing it in advance. The identification reading system installs and starts dedicated application software on the communication terminal by operating a web browser, and reads the identification card.

2. An identification reading system that reads an identification card using a communication terminal, The identification reading system allows a user to install and start dedicated application software on the communication terminal by operating a web browser without going through a platform for publishing and distributing dedicated digital contents, and reads the identification card.

3. the communication terminal is an iPhone (registered trademark), the communication terminal has a short-range communication function, the operating system of the communication terminal is iOS; the web browser is Safari, 3. The identification reading system according to claim 1, wherein the dedicated application software is application software that reads an IC chip of an identification card by short-range communication on a web application of the communication terminal.

4. The dedicated application software is realized as an APPCLIP that provides a part of the app's functions in a compact form.

3. The identification reading system according to claim 1, wherein the dedicated application software is started by tapping an installation and start button displayed on a web browser.

5. an IC chip embedded in the identification card; a reading unit that is built into the communication terminal and that reads data from the IC chip; a display unit capable of displaying information about the communication terminal; 3. The identification reading system according to claim 1, wherein when the identification card is placed on the back side of the communication terminal and slid, and the reading unit is able to read the data on the IC chip, the display unit of the communication terminal notifies the user that the reading was successful.

6. 3. The identification reading system according to claim 1, wherein the communication terminal includes an NFC reader.

7. An identification reading method for reading an identification card using a communication terminal, comprising: an APPCLIP step of compactly providing part of the functions of the application of the communication terminal; a browser step using a web browser, which is software for viewing web pages via the Internet, according to the APPCLIP step; a reading step of reading the identification card in the browsing step.

8. An identification reading program for reading an identification card using a communication terminal, an APPCLIP process that provides a part of the application functions of the communication terminal in a compact manner; The APPCLIP process performs a browser process using a web browser, which is software for viewing web pages over the Internet; a reading process for reading the identification card in the browser process.

Images