Authentication terminal, system, control method of authentication terminal, and program

Abstract

To provide an authentication terminal that contributes to allowing a person who does not carry a smartphone to make contact with others.SOLUTION: An authentication terminal includes first control means and second control means. The first control means transmits biometric information of a person to be authenticated, to a server device that stores biometric information of a plurality of users and contact address information regarding at least one contract address, to obtain contact address information of the person to be authenticated, from the server device. The second control means connects to a contact address selected by the person to be authenticated from among the at least one contact address, using the acquired one or more pieces of contact address information.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to an authentication terminal, a server device, a system, a control method for an authentication terminal, and a program. [Background technology]

[0002] There is technology for searching for people using biometric authentication.

[0003] For example, Patent Document 1 describes a system that can more reliably search for cases such as when an elderly person wanders away. The system in Patent Document 1 includes a bulletin board device equipped with a screen and a camera, and a server device connected to the bulletin board device. The server device includes a captured image processing unit, a searched person registration information unit, an image storage unit, and a face recognition engine. The captured image processing unit recognizes faces from images captured by the camera. The searched person registration information unit registers registration information including a facial image of a specific person to be searched. The image storage unit stores images to be displayed on the bulletin board device. The face recognition engine compares the captured facial image with the facial image in the registration information and calculates a recognition rate. If the detected person is determined to be a specific person based on the recognition rate, an image tailored to the person's hobbies and preferences from the registration information is displayed to keep the specific person in front of the bulletin board device, allowing a family member or other person to come and pick them up. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Laid-Open No. 2015-176220 Summary of the Invention [Problem to be solved by the invention]

[0005] Children and the elderly often do not own devices such as smartphones. If such a person without a smartphone gets into trouble, they may not have the means to ask for help from others.

[0006] It should be noted that the above problem cannot be solved by applying the technology disclosed in Patent Document 1. Patent Document 1 merely discloses a method for keeping a person who appears in front of a bulletin board device in front of the device.

[0007] The main purpose of the present invention is to provide an authentication terminal, a server device, a system, a control method for an authentication terminal, and a program that contribute to enabling people who do not have a smartphone or the like to contact others. [Means for solving the problem]

[0008] According to a first aspect of the present invention, there is provided an authentication terminal comprising: a first control means for acquiring contact information of a person to be authenticated from a server device that stores biometric information of each of a plurality of users and contact information relating to at least one contact; and a second control means for connecting to a contact selected by the person to be authenticated from the at least one contact using the acquired at least one contact information.

[0009] According to a second aspect of the present invention, there is provided a server device comprising: a storage means for storing biometric information of each of a plurality of users and contact information relating to at least one or more contact points; and an authentication means for, upon receiving biometric information of a person to be authenticated from an authentication terminal, performing a matching process using the received biometric information and the stored biometric information to identify the person to be authenticated from among the plurality of users, and transmitting the at least one or more contact information of the identified person to the authentication terminal.

[0010] According to a third aspect of the present invention, there is provided a system including a server device that stores biometric information for each of a plurality of users and contact information for at least one contact, and an authentication terminal, wherein the authentication terminal is equipped with a first control means that acquires the contact information for the person to be authenticated from the server device by transmitting the biometric information of the person to be authenticated to the server device, and a second control means that uses the acquired at least one contact information to connect to a contact selected by the person to be authenticated from the at least one contact.

[0011] According to a fourth aspect of the present invention, there is provided a control method for an authentication terminal, comprising: a first control step of transmitting biometric information of a person to be authenticated to a server device that stores biometric information of each of a plurality of users and contact information relating to at least one or more contacts, thereby acquiring the contact information of the person to be authenticated from the server device; and a second control step of connecting to a contact selected by the person to be authenticated from the at least one or more contacts using the acquired at least one or more contact information.

[0012] According to a fifth aspect of the present invention, there is provided a program for causing a computer installed in an authentication terminal to execute a first control process of acquiring contact information for the person to be authenticated from a server device that stores biometric information for each of a plurality of users and contact information for at least one contact, by transmitting the biometric information of the person to be authenticated to the server device, and a second control process of connecting to a contact selected by the person to be authenticated from the at least one contact using the acquired at least one contact information. [Effects of the Invention]

[0013] According to each aspect of the present invention, there are provided an authentication terminal, a server device, a system, a method for controlling an authentication terminal, and a program that contribute to enabling a person who does not have a smartphone or the like to contact others. Note that the effects of the present invention are not limited to those described above. The present invention may achieve other effects instead of or in addition to the effects described above. [Brief explanation of the drawings]

[0014] [Figure 1] FIG. 1 is a diagram for explaining an outline of an embodiment. [Figure 2] FIG. 2 is a flowchart illustrating the operation of one embodiment. [Figure 3] FIG. 3 is a diagram illustrating an example of a schematic configuration of an information processing system according to an embodiment of the present disclosure. [Figure 4] FIG. 4 is a diagram for explaining the operation of the information processing system according to the embodiment of the present disclosure. [Figure 5] FIG. 5 is a diagram for explaining the operation of the information processing system according to the embodiment of the present disclosure. [Figure 6] FIG. 6 is a diagram illustrating an example of a display on the authentication terminal according to an embodiment of the present disclosure. [Figure 7] FIG. 7 is a diagram illustrating an example of a display on the authentication terminal according to an embodiment of the present disclosure. [Figure 8] FIG. 8 is a diagram illustrating an example of a display on the authentication terminal according to an embodiment of the present disclosure. [Figure 9] FIG. 9 is a diagram for explaining the operation of the information processing system according to the embodiment of the present disclosure. [Figure 10] FIG. 10 is a diagram illustrating an example of a processing configuration of a server device according to an embodiment of the present disclosure. [Figure 11] FIG. 11 is a diagram illustrating an example of a user management database according to an embodiment of the present disclosure. [Figure 12] FIG. 12 is a flowchart illustrating an example of the operation of the authentication unit according to an embodiment of the present disclosure. [Figure 13] FIG. 13 is a diagram illustrating an example of a processing configuration of an authentication terminal according to an embodiment of the present disclosure. [Figure 14] FIG. 14 is a flowchart illustrating an example of the operation of the service provision control unit according to an embodiment of the present disclosure. [Figure 15] FIG. 15 is a sequence diagram illustrating an example of the operation of the information processing system according to an embodiment of the present disclosure. [Figure 16] FIG. 16 is a diagram illustrating an example of a display of a user terminal according to an embodiment of the present disclosure. [Figure 17] FIG. 17 is a diagram for explaining the operation of the information processing system according to the embodiment of the present disclosure. [Figure 18] FIG. 18 is a diagram for explaining the operation of the information processing system according to an embodiment of the present disclosure. [Figure 19] FIG. 19 is a diagram illustrating an example of a hardware configuration of an authentication terminal according to the present disclosure. DETAILED DESCRIPTION OF THE INVENTION

[0015] First, an overview of one embodiment will be described. Note that the reference numerals in the drawings are added to each element for convenience as an example to facilitate understanding, and the description of this overview is not intended to be limiting in any way. Furthermore, unless otherwise specified, the blocks shown in each drawing represent functional units, not hardware units. Connection lines between blocks in each drawing include both bidirectional and unidirectional lines. Unidirectional arrows are used to schematically indicate the flow of main signals (data) and do not exclude bidirectionality. Note that in this specification and drawings, elements that can be similarly described may be assigned the same reference numerals to avoid redundant explanation.

[0016] An authentication terminal 100 according to one embodiment includes a first control means 101 and a second control means 102 (see FIG. 1). The first control means 101 acquires contact information of the person to be authenticated from a server device that stores biometric information of each of a plurality of users and contact information relating to at least one contact (step S1 in FIG. 2). The second control means 102 uses the acquired at least one or more pieces of contact information to connect to a contact selected by the person to be authenticated from among at least one or more contacts (step S2).

[0017] When the authentication terminal 100 detects a user (person to be authenticated) in front of it, it transmits the biometric information of the person to be authenticated to the server device. The server device identifies the person to be authenticated from among multiple users by performing an authentication process (matching process) using the biometric information. The server device transmits contact information stored in association with the identified person to the authentication terminal 100. The authentication terminal 100 uses the received contact information to connect to a contact selected by the person to be authenticated from contacts pre-registered in the server device. As a result, even if the user does not have a smartphone or the like, if the user encounters a problem, the user can contact an individual, organization, etc. to resolve the problem.

[0018] Specific embodiments will be described in more detail below with reference to the drawings.

[0019] [First embodiment] The first embodiment will be described in more detail with reference to the drawings.

[0020] The information processing system according to the first embodiment provides a contact service that enables a user to talk with a predetermined contact person, etc. Furthermore, the information processing system provides a message service that enables the user to check messages from others or to register messages for others.

[0021] In the information processing system according to the first embodiment, the main users of the authentication terminal 20 are assumed to be elderly people, children, and the like who do not own a smartphone or the like.

[0022] [System Configuration] As shown in FIG. 3, the information processing system according to the first embodiment includes a server device 10 and an authentication terminal 20.

[0023] The server device 10 is a server that provides the above-mentioned contact service and message service. The server device 10 is managed and operated by a local government or a business operator entrusted with the business by the local government. The server device 10 may be installed in a building such as a city hall, or may be installed on a network (cloud).

[0024] The authentication terminal 20 is a terminal that serves as an interface when the server device 10 provides contact services and message services. The authentication terminal 20 is installed in various places such as city halls, schools, community centers, libraries, stations, and commercial facilities. For example, the authentication terminal 20 is a signage or tablet equipped with a camera, speaker, microphone, etc.

[0025] The devices shown in Fig. 3 are interconnected. Specifically, the server device 10 and the authentication terminal 20 are connected by wired or wireless communication means and are configured to be able to communicate with each other.

[0026] 3 is an example and is not intended to limit the configuration. For example, the information processing system may include multiple server devices 10. The multiple server devices 10 may achieve load balancing and redundancy.

[0027] [General operation] Next, the general operation of the information processing system according to the first embodiment will be described.

[0028] <User registration> In order to receive services from the system, users are required to register as users. If a child or elderly person does not have a smartphone, a guardian or other person will register as a user on their behalf.

[0029] A user operates a terminal 30 such as a smartphone to access the server device 10. The server device 10 acquires the user's name, sex, date of birth, address, biometric information, login information (ID, password), contact information, etc. from a predetermined website (a site for user registration) (see FIG. 4).

[0030] Examples of biometric information include data (features) calculated from physical characteristics unique to an individual, such as a face, fingerprint, voiceprint, veins, retina, or iris pattern. Alternatively, the biometric information may be image data such as a face image or fingerprint image. The biometric information may be any information that includes the user's physical characteristics. In the embodiment disclosed herein, a case where biometric information related to a person's "face" (a face image or features generated from a face image) is used will be described.

[0031] Contact information is information used for the contact service, and is information related to a predetermined contact (for example, the name of the contact, connection information). Examples of predetermined contacts include family members (for example, guardians), relatives, friends and acquaintances (for example, friends and acquaintances in the neighborhood, or friends and acquaintances in the same neighborhood association), police, fire department (ambulance), etc. Examples of connection information include telephone numbers, email addresses, etc.

[0032] When the server device 10 acquires the user's name, etc., it generates a user ID for identifying the user. After generating the user ID, the server device 10 associates the user ID, login information, name, biometric information, etc., and stores them in a user management database to create an account. The user management database will be described in detail later.

[0033] A user who knows the login information (for example, a parent who has registered their child) can use the login information to access the account and leave or check messages for the account holder. Messages for each user are managed using a user management database.

[0034] <Provision of services> When a user (e.g., a child or an elderly person) encounters a problem, the user moves in front of the authentication terminal 20. When the authentication terminal 20 detects the user in front of it, it acquires biometric information (e.g., a facial image) of the user.

[0035] Upon acquiring the biometric information, the authentication terminal 20 transmits the biometric information of the person to be authenticated to the server device 10. Specifically, the authentication terminal 20 transmits an "authentication request" including the acquired biometric information to the server device 10 (see FIG. 5).

[0036] The server device 10 executes a matching process using the biometric information included in the authentication request and the biometric information stored in the user management database.

[0037] If the verification process fails, the server device 10 transmits a negative response indicating authentication failure to the authentication terminal 20. If the verification process is successful, the server device 10 transmits an affirmative response indicating authentication success to the authentication terminal 20.

[0038] Furthermore, if the authentication is successful, the server device 10 transmits an affirmative response including all or part of the information stored in the account of the user identified by the matching process to the authentication terminal 20. For example, the server device 10 transmits to the authentication terminal 20 the user ID, name, sex, date of birth, address, at least one or more pieces of contact information, and message data (voice data) for the user of the user (person to be authenticated) identified by the matching process.

[0039] When the authentication is successful (positive response), the authentication terminal 20 acquires whether the user wishes to receive the contact service or the message service. For example, the authentication terminal 20 acquires the user's preference using a GUI (Graphical User Interface) as shown in FIG.

[0040] If the user wishes to receive the contact service, the authentication terminal 20 displays a GUI that allows the user to select a contact with which the user wishes to connect from among the multiple pieces of contact information (multiple contacts) that have been received. For example, the authentication terminal 20 displays a GUI such as that shown in FIG. 7.

[0041] When the user selects a contact, the authentication terminal 20 connects to the selected contact. For example, the authentication terminal 20 calls the selected contact. The user can talk to the person in the selected contact and solve the problem or the like.

[0042] In this way, if a problem occurs, such as an incident, accident, or not knowing the way home, the user can contact a contact person (e.g., parent / guardian, police, fire department, etc.) that has been registered in the system in advance by using the authentication terminal 20. As a result, the user's problem (incident, accident, getting lost) can be resolved quickly.

[0043] When a user wishes to use the message service, the authentication terminal 20 acquires whether the user wishes to check messages left by others (e.g., guardians) or to register messages for others. For example, the authentication terminal 20 acquires the user's preference (message confirmation, message registration) using a GUI such as that shown in Fig. 8.

[0044] When the user desires to check the message (when the message check button is pressed), the authentication terminal 20 plays back the message data (audio data) acquired from the server device 10.

[0045] When the user wishes to register a message (when the message registration button is pressed), the authentication terminal 20 acquires message data (voice data) from the user using a microphone. Upon acquiring the message data, the authentication terminal 20 transmits a "message registration request" including the user's user ID and the acquired message data to the server device 10 (see FIG. 9).

[0046] The server device 10 searches the user management database using the user ID as a key to identify the corresponding entry (account), and stores the acquired message data in the identified entry.

[0047] The server device 10 transmits a response to the message registration request to the authentication terminal 20. If the message data could not be registered successfully, the server device 10 transmits a negative response indicating this to the authentication terminal 20. If the message data could be registered successfully, the server device 10 transmits an affirmative response indicating this to the authentication terminal 20.

[0048] The authentication terminal 20 outputs a message or the like according to the response (successful or unsuccessful message registration).

[0049] In this way, when a user stands in front of the authentication terminal 20, biometric authentication is performed, and a message from another person (for example, a guardian) is conveyed to the user, or a message from the user to another person is registered in the system. The authentication terminal 20 is used as a message board for non-urgent communications (for example, to inform the user of their expected arrival time or where they are going) and in the event of a disaster or emergency.

[0050] Next, details of each device included in the information processing system according to the first embodiment will be described.

[0051] [Server device] 10 is a diagram illustrating an example of a processing configuration (processing module) of the server device 10 according to the embodiment of the present disclosure. Referring to FIG. 10, the server device 10 includes a communication control unit 201, a user registration control unit 202, a message control unit 203, an authentication unit 204, and a storage unit 205.

[0052] The communication control unit 201 is a means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the authentication terminal 20. The communication control unit 201 also transmits data to the authentication terminal 20. The communication control unit 201 passes data received from other devices to other processing modules. The communication control unit 201 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 201. The communication control unit 201 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0053] The user registration control unit 202 is a means for controlling user registration.

[0054] When a user operates terminal 30 to access a site for user registration, user registration control unit 202 displays a GUI on terminal 30. Using the GUI, user registration control unit 202 acquires the account holder's name, sex, date of birth, address, biometric information, etc. Furthermore, user registration control unit 202 acquires login information (ID, password) for logging in to the account and at least one piece of contact information, etc.

[0055] When the user registration control unit 202 acquires a facial image as biometric information, it generates feature quantities from the facial image. The feature quantity generation process by the user registration control unit 202 can use existing technology, so a detailed description thereof will be omitted. For example, the user registration control unit 202 extracts the eyes, nose, mouth, etc. from the facial image as feature points. The user registration control unit 202 then calculates the positions of the feature points and the distances between the feature points as feature quantities (generating a feature vector consisting of multiple feature quantities).

[0056] After generating the feature, the user registration control unit 202 generates a user ID to identify the user. The user ID may be any information that can uniquely identify the user. For example, the user registration control unit 202 may assign a unique value each time user information is acquired and use this number as the user ID.

[0057] When the user ID is generated, the user registration control unit 202 adds a new entry to the user management database and generates an account. The user registration control unit 202 stores the user ID, name, sex, biometric information (features), contact information, etc. in the added entry (see FIG. 11).

[0058] The user management database shown in Figure 11 is an example and is not intended to limit the items stored therein. For example, a "face image" may be registered as biometric information in the user management database. In addition, the contact information field of the user management database contains the name and connection information (e.g., phone number) of at least one contact designated in advance by the user (account creator).

[0059] The message control unit 203 is a means for executing control relating to messages.

[0060] When a user who has logged in to an account wishes to register a message, the message control unit 203 acquires the message data via the user's terminal 30. The message control unit 203 stores the acquired message data in the account.

[0061] At this time, the message control unit 203 stores (manages) the acquired message data as a message directly acquired by the server device 10. For example, a message left by a parent or guardian for their child after logging in to an account corresponds to a message directly acquired by the server device 10.

[0062] Furthermore, the message control unit 203 processes a message registration request received from the authentication terminal 20 .

[0063] When a message registration request is received, the message control unit 203 searches the user management database using the user ID included in the message registration request as a key to identify the corresponding entry (account). The message control unit 203 stores the acquired message data in the identified entry.

[0064] At this time, the message control unit 203 stores (manages) the message data included in the message registration request as a message acquired via the authentication terminal 20. For example, a message input by a child to the authentication terminal 20 for a parent corresponds to the message acquired via the authentication terminal 20.

[0065] The message control unit 203 transmits a response to the message registration request to the authentication terminal 20.

[0066] For example, if the message data cannot be registered successfully because the user ID obtained from the authentication terminal 20 is not stored in the user management database, the message control unit 203 sends a negative response to the authentication terminal 20 indicating that the message registration has failed.

[0067] If the message data has been successfully registered, the message control unit 203 transmits an affirmative response to that effect to the authentication terminal 20.

[0068] When a user who has logged in to an account wishes to listen to a message, the message control unit 203 reproduces, on the terminal 30, the message data stored in the account and acquired via the authentication terminal 20.

[0069] Note that the control of message acquisition and playback will be clear to those skilled in the art, and will not be described in detail since it is outside the scope of the present disclosure.

[0070] The authentication unit 204 is a means for authenticating a user (for example, a child or an elderly person) who is trying to use the authentication terminal 20.

[0071] When the authentication unit 204 receives the biometric information of the person to be authenticated from the authentication terminal 20, it executes a matching process using the received biometric information and the biometric information stored in the user management database. By executing the matching process, the authentication unit 204 identifies the person to be authenticated from among multiple users, and transmits at least one or more pieces of contact information (contact name, telephone number) of the identified person to the authentication terminal 20.

[0072] 12 is a flowchart showing an example of the operation of the authentication unit 204 according to an embodiment of the present disclosure. The operation of the authentication unit 204 will be described with reference to FIG.

[0073] When receiving an authentication request, the authentication unit 204 executes a matching process using the biometric information included in the request and the biometric information stored in the user management database (step S101).

[0074] More specifically, the authentication unit 204 generates features from the facial image included in the authentication request. Since existing technology can be used for the feature generation process, a detailed description thereof will be omitted. For example, the authentication unit 204 extracts the eyes, nose, mouth, etc. from the facial image as feature points. The authentication unit 204 then calculates the positions of the feature points and the distances between the feature points as feature amounts (generating a feature vector consisting of multiple feature amounts).

[0075] The authentication unit 204 sets the generated feature amount as a matching target, and performs matching processing (1:N matching; N is a positive integer, the same applies below) with the feature amount stored in the user management database.

[0076] The authentication unit 204 calculates the similarity between the feature to be matched and each of the multiple feature values ​​on the registration side. The similarity can be calculated using chi-square distance, Euclidean distance, or the like. Note that the greater the distance, the lower the similarity, and the closer the distance, the higher the similarity.

[0077] The authentication unit 204 determines that the matching process has failed if there is no feature among the multiple feature amounts stored in the user management database that has a similarity with the feature amount to be matched that is equal to or greater than a predetermined value.

[0078] The authentication unit 204 determines that the matching process is successful if there is a feature among the multiple feature amounts stored in the user management database whose similarity with the feature amount to be matched is equal to or greater than a predetermined value. In this case, the entry with the highest similarity is identified as the entry of the person to be authenticated (the user who is trying to use the authentication terminal 20).

[0079] If the matching process fails (step S102, No branch), the authentication unit 204 sets the authentication result to "authentication failure" (step S103).

[0080] If the matching process is successful (step S102, Yes branch), the authentication unit 204 sets the authentication result to "authentication success" (step S104).

[0081] The authentication unit 204 transmits the authentication result (authentication success, authentication failure) to the authentication terminal 20 (step S105).

[0082] If the authentication fails, the authentication unit 204 transmits a negative response to that effect to the authentication terminal 20.

[0083] If the authentication is successful, the authentication unit 204 transmits an affirmative response indicating this to the authentication terminal 20. Furthermore, if the authentication is successful, the authentication unit 204 transmits an affirmative response including all or part of the information stored in the account of the user identified by the matching process to the authentication terminal 20. For example, the authentication unit 204 transmits to the authentication terminal 20 the user ID, name, contact information, message data (message data directly acquired by the server device 10; for example, message data left by a parent for their child) and the like of the user (person to be authenticated) identified by the matching process.

[0084] The storage unit 205 is a means for storing information necessary for the operation of the server device 10. The storage unit 205 stores biometric information of each of a plurality of users and contact information relating to at least one or more contact points.

[0085] [Authentication terminal] 13 is a diagram illustrating an example of a processing configuration (processing module) of the authentication terminal 20 according to an embodiment of the present disclosure. Referring to FIG. 13, the authentication terminal 20 includes a communication control unit 301, an authentication control unit 302, a service provision control unit 303, and a storage unit 304.

[0086] The communication control unit 301 is a means for controlling communication with other devices. For example, the communication control unit 301 receives data (packets) from the server device 10. The communication control unit 301 also transmits data to the server device 10. The communication control unit 301 passes data received from other devices to other processing modules. The communication control unit 301 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 301. The communication control unit 301 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0087] Authentication control unit 302 is a means (first control means) that controls the authentication of a user (person to be authenticated).

[0088] The authentication control unit 302 obtains the contact information of the person to be authenticated from the server device 10 by transmitting the biometric information of the person to be authenticated to the server device 10, which stores the biometric information of each of multiple users and contact information for at least one contact.

[0089] More specifically, the authentication control unit 302 is a means for controlling the authentication of a user who is attempting to use the contact service or message service via the authentication terminal 20 .

[0090] The authentication control unit 302 controls the camera periodically or at a predetermined timing to acquire image data. Alternatively, the authentication control unit 302 acquires image data in response to a user's operation. The authentication control unit 302 determines whether the acquired image data includes a human face image, and if a face image is included, extracts the face image from the acquired image data.

[0091] Note that since existing technology can be used for the facial image extraction process by the authentication control unit 302, detailed description will be omitted. For example, the authentication control unit 302 may extract a facial image (face area) from image data using a learning model trained by a CNN (Convolutional Neural Network). Alternatively, the authentication control unit 302 may extract a facial image using a method such as template matching.

[0092] If the facial image is successfully extracted, the authentication control unit 302 transmits an authentication request including the biometric information (extracted facial image) to the server device 10.

[0093] The authentication control unit 302 receives a response (positive response, negative response) to the authentication request from the server device 10.

[0094] If a negative response indicating authentication failure is received, the authentication control unit 302 notifies the user that the authentication has failed. For example, the authentication control unit 302 outputs a message indicating that the user cannot receive the service because the user has not been registered.

[0095] When an affirmative response indicating successful authentication is received, the authentication control unit 302 passes information about the user (person to be authenticated) included in the affirmative response to the service provision control unit 303 .

[0096] In this way, the authentication control unit 302 acquires contact information of the person to be authenticated by transmitting an authentication request (biometric information) to the server device 10. Furthermore, the authentication control unit 302 further acquires a first message (message data) intended for the person to be authenticated by another person by transmitting the biometric information of the person to be authenticated to the server device 10.

[0097] The service provision control unit 303 is a means (second control means) that executes control relating to the provision of the contact service or message service.

[0098] 14 is a flowchart showing an example of the operation of the service provision control unit 303 according to an embodiment of the present disclosure. The operation of the service provision control unit 303 will be described with reference to FIG.

[0099] When the information about the authenticatee is acquired from the authentication control unit 302, the service provision control unit 303 acquires the type of service desired by the user (acquisition of desired service; step S201). For example, the service provision control unit 303 identifies the service desired by the user using a GUI (Graphical User Interface) as shown in FIG.

[0100] If the user desires to receive the contact service, the service provision control unit 303 acquires information about the contacts with which the user desires to connect (acquire contacts; step S202). For example, the service provision control unit 303 identifies the contacts desired by the user using a GUI such as that shown in FIG.

[0101] When the user specifies the desired contact, the service provision control unit 303 makes a call to the telephone number of the specified contact (connect to the contact; step S203).

[0102] The explanation after making the call to the contact person will be omitted. The authentication terminal 20 only needs to send and receive voice data between the user and the contact person's guardian and person in charge.

[0103] If the user wishes to receive a message service, the service provision control unit 303 acquires the type of message service desired by the user (acquire service type; step S204). For example, the service provision control unit 303 acquires the user's request (message confirmation, message registration) using a GUI such as that shown in Fig. 8. Note that in Figs. 6 to 8, etc., a GUI in which kanji characters are converted into hiragana characters may be displayed to enable the user (for example, a young child) to easily understand the content displayed on the authentication terminal 20.

[0104] If the user desires to check the message, the service provision control unit 303 plays back the message data acquired from the server device 10 (step S205).

[0105] If the user wishes to register a message, the service provision control unit 303 acquires message data from the user using a microphone and transmits the acquired message data to the server device 10 (step S206). Specifically, the service provision control unit 303 transmits a "message registration request" including the user's user ID and the acquired message data to the server device 10.

[0106] The service provision control unit 303 receives a response (positive response or negative response) to the message registration request, and outputs a message or the like according to the received response (step S207).

[0107] After completing the provision of the contact service and message service, the service provision control unit 303 returns the screen to the GUI as shown in FIG. 6, and the user specifies the service he or she desires again.

[0108] In this way, the service provision control unit 303 connects to a contact selected by the person to be authenticated from among the at least one or more contacts, using information about at least one or more contacts acquired by the authentication control unit 302. The service provision control unit 303 also transmits to the person to be authenticated a first message (e.g., a message left by a guardian for a child) acquired by the authentication control unit 302. Furthermore, the service provision control unit 303 acquires a second message from the person to be authenticated (e.g., a child) to another person (e.g., a guardian), and registers the acquired second message in the server device 10.

[0109] The storage unit 304 is a means for storing information necessary for the operation of the authentication terminal 20 .

[0110] [Device] Examples of the terminal 30 include a smartphone, a mobile phone, a game console, a mobile terminal device such as a tablet, a computer (personal computer, laptop computer), etc. The terminal 30 can be any equipment or device that can accept user operations and communicate with the server device 10, etc. Furthermore, the configuration of the terminal 30 is clear to those skilled in the art, so a detailed description thereof will be omitted.

[0111] [System Operation] Next, the operation of the information processing system according to the first embodiment will be described.

[0112] 15 is a sequence diagram showing an example of the operation of the information processing system according to the embodiment of the present disclosure. The operation of the information processing system according to the first embodiment will be described with reference to FIG.

[0113] When a person to be authenticated (for example, a child or an elderly person) is detected, authentication terminal 20 acquires biometric information of the person to be authenticated, and transmits an authentication request including the acquired biometric information to server device 10 (step S01).

[0114] The server device 10 executes authentication processing using the biometric information included in the received authentication request and the biometric information stored in the user management database (step S02).

[0115] The server device 10 transmits the authentication result (authentication success, authentication failure) to the authentication terminal 20 (step S03). If the authentication is success, the server device 10 transmits all or part of the information stored in the account of the person to be authenticated identified by the matching process to the authentication terminal 20.

[0116] When the authentication terminal 20 receives the successful authentication, it provides the service desired by the user (contact service, message service) (step S04).

[0117] Next, a modified example of the first embodiment will be described.

[0118] <Variation 1> In the above embodiment, the case where the user and the predetermined contact person have a conversation by voice has been described. However, the predetermined contact person and the user may have a conversation by text.

[0119] When a user desires to communicate by text, the authentication terminal 20 acquires characters entered by the user using an interface that resembles a keyboard. The authentication terminal 20 then sends the acquired characters (text data) to a contact point specified by the user (for example, by sending a message to a predetermined phone number). The authentication terminal 20 then displays the text data acquired from the contact point.

[0120] In this way, the authentication terminal 20 may be provided with a character input function in consideration of hearing-impaired users. That is, the service provision control unit 303 controls so that the person to be authenticated and the person in the contact list selected by the person to be authenticated can converse with each other using text or voice.

[0121] <Variation 2> In the above embodiment, the case where the user selects a contact in the contact service has been described. However, the authentication terminal 20 may automatically select a contact. For example, the authentication terminal 20 may automatically determine a contact based on the user's attribute information (e.g., age) and make a call to the determined contact.

[0122] For example, if the user is a young child such as a preschooler, the authentication terminal 20 may call the phone number of the parent or guardian, whereas if the user is a school-age child, the authentication terminal 20 may call a contact number selected by the user.

[0123] That is, the authentication control unit 302 acquires attribute information (e.g., age) of the person to be authenticated by transmitting the biometric information of the person to be authenticated to the server device 10. The service provision control unit 303 may determine a contact to connect to from at least one or more contacts based on the attribute information acquired by the authentication control unit 302.

[0124] <Variation 3> When a message service is selected and message data is received from the server device 10, the authentication terminal 20 may acquire whether or not the user wishes to register a message after playing back the message data. That is, the service provision control unit 303 may acquire a second message after conveying the first message acquired by the authentication control unit 302 to the person to be authenticated.

[0125] As described above, in the information processing system according to the first embodiment, when a user with a problem stands in front of the authentication terminal 20, biometric authentication of the user is performed, and a list of predetermined contacts is transmitted to the authentication terminal 20. The authentication terminal 20 presents the acquired list of contacts to the user and connects to the contacts selected by the user. As a result, the user can request a solution to the problem from a predetermined contact person (e.g., a parent or friend) or organization (e.g., the police or fire department) without having to carry a smartphone or the like.

[0126] The information processing system according to the first embodiment also provides a messaging service to users and their relatives. For example, when a child stands in front of the authentication terminal 20, the child is authenticated by biometric authentication and can listen to or leave messages for their guardians.

[0127] The information processing system according to the first embodiment is intended to be primarily used by preschool children, children in the early elementary school years, and elderly people. The information processing system according to the first embodiment takes into consideration the possibility that these children may become involved in crimes or incidents if they possess smartphones or the like.

[0128] The operation of the information processing system according to the first embodiment allows children and others to rely on their parents or the police when they are in trouble, allowing them to live with peace of mind. Parents can also use messaging services to keep track of their children's situations, eliminating the need for children to carry high-risk devices such as smartphones, thereby reducing the financial burden. Furthermore, in municipalities where authentication terminals 20 are installed in various locations, many residents can live with peace of mind, and it is expected that many residents, especially families with children, will gather and become lively towns. Furthermore, with many residents living in these municipalities, it is expected that tax revenues for the municipalities will increase. Furthermore, since children and others can quickly contact the police, fire department, etc., incidents and other incidents can be prevented and damage can be minimized.

[0129] Furthermore, in the information processing system according to the first embodiment, the person to be authenticated is identified by biometric authentication, and therefore it is possible to provide personalized services using attribute information and the like of the person to be authenticated.

[0130] [Second embodiment] In the above embodiment, the operation, configuration, etc. of the information processing system have been described assuming that the user does not have a smartphone, etc. However, the user may have a smartphone, etc.

[0131] In this case, the smartphone or the like may store in the digital wallet at least a certificate (service receipt certificate) relating to receipt of the service (contact service, message service).

[0132] The user or the user's agent accesses the server device 10 and creates an account. Once the account is created, the user requests the server device 10 to issue a service enjoyment certificate. Upon receiving the request, the server device 10 creates a service enjoyment certificate that includes all or part of the information of the created account. For example, the server device 10 creates a service enjoyment certificate that includes the user ID, name, gender, date of birth, address, biometric information, contact information, etc.

[0133] The server device 10 sends the generated service receipt certificate to the smartphone or the like. Upon sending the service receipt certificate, the server device 10 deletes the name, gender, date of birth, address, biometric information, contact information, etc. from the account. The smartphone or the like stores the received service receipt certificate in its digital wallet.

[0134] When a user requests a contact service or a message service, the authentication terminal 20, which is a device used by the service provider, may request the smartphone to provide a service enjoyment certificate.

[0135] In response to the request, the smartphone transmits the service receiving certificate to the authentication terminal 20.

[0136] The authentication terminal 20 provides a service using the service receipt certificate obtained from the smartphone. Specifically, the authentication terminal 20 performs authentication processing using biometric information obtained from the service receipt certificate and biometric information (a facial image obtained by photographing) obtained from the user in front of the user. If the authentication processing is successful, the authentication terminal 20 provides a contact service by displaying a GUI such as that shown in FIG. 7 using contact information obtained from the service receipt certificate. Alternatively, the authentication terminal 20 provides a message service by transmitting and receiving a user ID obtained from the service receipt certificate to and from the server device 10.

[0137] As described above, the information processing system according to the second embodiment may realize a self-sovereign identity system in which a user manages and controls the information necessary for receiving a service. That is, a user may receive a service from a service provider while proactively managing his or her own identity information. In response to a request from the service provider, the user may provide the service provider with information required by the service provider. In this case, the certificate provided to the service provider may be a credential certificate. Furthermore, the service provider does not need to store and manage information that requires careful handling, such as the user's biometric information, when providing the service. As a result, the information management costs of the service provider are reduced.

[0138] For an explanation of digital wallets, certificate issuance, certificate usage, etc., please refer to the following.

[0139] <Digital Wallet> A digital wallet is an electronic information storage service that guarantees information security, including data integrity, reliability, and availability.

[0140] A user installs an application to realize a digital wallet on their user terminal 90. By opening a digital wallet on the user terminal 90, the user can store various digital content on the user terminal 90, such as electronic money, identification documents such as a student ID, passport or driver's license, various ticket information such as airline tickets or boarding passes, and certificates related to biometric information. Alternatively, the user may store service receipt certificates, information to be provided to others, etc. in the digital wallet.

[0141] For example, the user terminal 90 of the user stores digital content as shown in Fig. 16. The digital content stored in the user terminal 90 includes official identification documents such as passports and driver's licenses, employment certificates issued by companies and universities, graduation certificates, biometric certificates related to biometric information, etc.

[0142] The user terminal 90 may perform identity verification using an identification card issued by a public institution such as a government agency. For example, the user terminal 90 may perform identity verification of the user when opening a digital wallet, as necessary.

[0143] For example, the user terminal 90 performs identity verification using an identification card such as a passport that contains the biometric information of the holder.

[0144] Examples of biometric information include data (features) calculated from physical characteristics unique to an individual, such as a face, fingerprint, voiceprint, veins, retina, and iris pattern. Alternatively, biometric information may be image data such as a face image or fingerprint image. The biometric information may be any information that includes the user's physical characteristics.

[0145] The user terminal 90 acquires information about the holder (issuer) of the identification card from the user's identification card. For example, the user terminal 90 acquires information about the holder of the passport from an IC (Integrated Circuit) chip in the passport.

[0146] Specifically, the user terminal 90 acquires basic information of the passport holder (the so-called four basic pieces of information: name, sex, date of birth, and address) and biometric information (facial image) of the passport holder. The user terminal 90 may store the acquired basic information in a digital wallet and manage it so that it can be provided to others.

[0147] Furthermore, the user terminal 90 acquires biometric information of the user (the person who opened the digital wallet). For example, the user terminal 90 acquires a facial image by photographing the user.

[0148] The user terminal 90 performs a matching process (authentication process) using the biometric information acquired from the identification card and the user's biometric information. If the authentication process (one-to-one authentication) is successful, the user terminal 90 opens a digital wallet. The user terminal 90 confirms through a matching process (authentication process) using the biometric information that the person in whose name the identification card was issued and the user using the digital wallet of the user terminal 90 are the same person.

[0149] If identity verification is successful, the user terminal 90 stores the biometric information obtained from the identification card or the biometric information obtained by photographing the user. The user terminal 90 may acquire the user's biometric information when the user terminal 90 is started up or when the digital wallet is started up, and perform identity verification using the acquired biometric information and the stored biometric information.

[0150] <Certificate issuance> A user acquires digital content to be stored in a digital wallet. For example, the user operates user terminal 90 to request a certificate issuer to issue a certificate.

[0151] Specifically, the digital wallet application requests a certificate issuer to issue a certificate. The certificate issuer then issues VCs (Verifiable Credentials), whose contents can be verified online, as the certificate. The certificate issuer then issues a credential certificate.

[0152] Prior to requesting the issuance of a credential certificate, the user's user terminal 90 generates a pair of a public key and a private key. The user terminal 90 also generates a decentralized identifier (DID). The user terminal 90 registers the generated DID (user ID; holder ID) and public key in the blockchain (step S1001 in FIG. 17).

[0153] Furthermore, the user's user terminal 90 presents the user ID and requests the certificate issuer (issuer server 91 managed by the certificate issuer) to issue a credential certificate. Specifically, the user terminal 90 transmits a "certificate issuance request" including information about the certificate to be issued, information identifying the user, the user ID, etc. to the certificate issuer's issuer server 91 (step S1002).

[0154] The issuer server 91 generates and stores the issuer's DID (issuer ID), private key, and public key in advance.

[0155] Upon receiving a certificate issuance request, the certificate issuer determines whether the user requesting the issuance of a credential certificate (VC) is eligible to receive the certificate. If the user is eligible to receive a credential certificate, the issuer server 91 generates a credential certificate (VC) that includes the issuer ID and the user ID.

[0156] Specifically, the issuer server 91 generates a credential certificate (VC) that includes metadata including the type of credential certificate, the name of the issuing organization, the date and time of issue, etc., a qualification information body, and the issuer's public key information, electronic signature, etc. The qualification information body contains specific information to be certified by the issuer.

[0157] The issuer server 91 transmits the generated credential certificate to the user terminal 90 of the user (user who will become the certificate holder; person requesting issuance of the certificate) (certificate issuance; step S1003).

[0158] Furthermore, the issuer server 91 registers the issuer ID and the generated public key and the like in the block chain (step S1004).

[0159] The user terminal 90 stores the received credential certificates (VCs) in the digital wallet. For example, when the user terminal 90 requests the issuer to issue a biometric information certificate, it stores the credential certificates (VCs) that certify the validity of the biometric information in the digital wallet. Alternatively, when the user terminal 90 requests the issue of an employment certificate from the user's employer, it stores the credential certificates (VCs) related to the user's employment in the digital wallet. Alternatively, the user terminal 90 stores a service enjoyment certificate related to the service to be enjoyed in the digital wallet.

[0160] If information different from the certificate issued by another party is stored in the digital wallet, the user terminal 90 can acquire the information different from the certificate using a GUI (Graphical User Interface) and store it in the digital wallet. Also, the digital wallet may store a certificate based on a so-called public key infrastructure.

[0161] <Certificate usage> The user presents the certificate or the like required by the service provider to the service provider. The service provider provides the service to the user using a provider device 92 (see FIG. 18). The provider device 92 may be a server, a gate device, a kiosk terminal, a tablet, a signage, or the like, depending on the type of service provided by the service provider.

[0162] The provider device 92 transmits a "certificate request" to the user terminal 90 (step S1011). The certificate request includes information about at least one certificate or the like required for the service provider to provide the service.

[0163] The user terminal 90 and the provider device 92 communicate with each other using an internet line, a mobile line, etc. Alternatively, the user terminal 90 and the provider device 92 communicate with each other using a short-range wireless communication means such as Bluetooth (registered trademark) or NFC (Near Field Communication).

[0164] In response to receiving the certificate provision request, the user terminal 90 transmits the credential certificates (VCs) stored in the digital wallet to the provider device 92. Specifically, the user terminal 90 selects a specified credential certificate from among multiple credential certificates stored in the digital wallet. Then, the user terminal 90 signs the selected credential certificate using a private key corresponding to the user's DID (user ID). The user terminal 90 transmits at least one signed credential certificate to the provider device 92 (step S1012).

[0165] In addition, before sending the credential certificate to the provider device 92, the user terminal 90 may present the user with information about the certificate requested by the service provider and obtain consent (user consent) to provide the certificate to the service provider.

[0166] The provider device 92 acquires the issuer ID and the user ID from the received credential certificate. Furthermore, the provider device 92 acquires the public key corresponding to the acquired issuer ID and the public key corresponding to the acquired user ID from the blockchain (step S1013).

[0167] Thereafter, the provider device 92 verifies at least one credential certificate received from the user terminal 90. Specifically, the provider device 92 verifies the signature of the holder and the signature of the issuer attached to the credential certificate. By verifying these signatures, the provider device 92 confirms that the credential certificate obtained from the user (credential certificate holder) has not been tampered with and that it has been issued by a trustworthy issuer.

[0168] If the provider device 92 successfully verifies the acquired credential certificate, it provides the service to the user.

[0169] If the service provider requests the provision of information other than the credential certificate, the terminal 30 may read the requested information from the digital wallet and transmit it to the provider device 92 .

[0170] Next, the hardware of each device constituting the information processing system will be described. Fig. 19 is a diagram showing an example of the hardware configuration of authentication terminal 20.

[0171] The authentication terminal 20 can be configured by an information processing device (so-called computer), and has the configuration exemplified in Fig. 19. For example, the authentication terminal 20 includes a processor 311, a memory 312, an input / output interface 313, and a communication interface 314. The components such as the processor 311 are connected by an internal bus or the like, and are configured to be able to communicate with each other.

[0172] However, the configuration shown in Fig. 19 is not intended to limit the hardware configuration of the authentication terminal 20. The authentication terminal 20 may include hardware not shown, and may not include the input / output interface 313 as necessary. Furthermore, the number of processors 311 and the like included in the authentication terminal 20 is not intended to be limited to the example shown in Fig. 19, and for example, the authentication terminal 20 may include multiple processors 311.

[0173] The processor 311 is a programmable device such as a central processing unit (CPU), a micro processing unit (MPU), or a digital signal processor (DSP). Alternatively, the processor 311 may be a device such as a field programmable gate array (FPGA) or an application specific integrated circuit (ASIC). The processor 311 executes various programs including an operating system (OS).

[0174] The memory 312 is a random access memory (RAM), a read only memory (ROM), a hard disk drive (HDD), a solid state drive (SSD), etc. The memory 312 stores an OS program, application programs, and various data.

[0175] The input / output interface 313 is an interface for a display device and an input device (not shown). The display device is, for example, a liquid crystal display. The input device is, for example, a device that accepts user operations such as a keyboard or a mouse.

[0176] The communication interface 314 is a circuit, module, etc. that communicates with other devices. For example, the communication interface 314 includes a network interface card (NIC).

[0177] The functions of the authentication terminal 20 are realized by various processing modules. The processing modules are realized, for example, by the processor 311 executing a program stored in the memory 312. The program can be recorded on a computer-readable storage medium. The storage medium can be a non-transitory medium such as a semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. That is, the present invention can also be embodied as a computer program product. The program can be downloaded via a network or updated using a storage medium storing the program. Furthermore, the processing modules can be realized by a semiconductor chip.

[0178] 19, the authentication terminal 20 includes devices such as a touch panel, a camera, a speaker, a microphone, etc. Note that the server device 10, etc., can also be configured using an information processing device, just like the authentication terminal 20, and its basic hardware configuration is no different from that of the authentication terminal 20, so a description thereof will be omitted.

[0179] The authentication terminal 20, which is an information processing device, is equipped with a computer, and the functions of the authentication terminal 20 can be realized by causing the computer to execute a program. Also, the authentication terminal 20 executes a control method for the authentication terminal 20 by the program.

[0180] [Variations] The configuration, operation, etc. of the information processing system described in the above embodiment are merely examples, and are not intended to limit the configuration, etc. of the system.

[0181] In the above embodiment, a case has been described in which a user performs user registration using the terminal 30. However, user registration may also be performed via the authentication terminal 20. For example, a parent and a child may operate the authentication terminal 20 together to perform user registration.

[0182] The contact information registered in the user's account may include not only guardians and police, but also child consultation centers, etc. Alternatively, if the user (account holder) is elderly, it may be the care facility where the user resides.

[0183] The server device 10 may store the contact information (e.g., telephone number, email address) of the user (e.g., guardian) in the account. In this case, when message data is registered in the account, the server device 10 may notify the contact information that the message data has been registered. Alternatively, the server device 10 may transfer the message data registered in the account to the contact information (e.g., email address). In this case, the server device 10 may convert the message data (voice data) into text data and send the converted text data to the contact information.

[0184] Alternatively, a setting such as whether or not to convert the message data to text data may be registered in the account, and the server device 10 converts the message data to text data in accordance with the setting.

[0185] In the above embodiment, the case where the user and the contact person make a telephone call has been described, but the user and the contact person may also have a conversation (communicate) via videophone.

[0186] In the above embodiment, the case where the user management database is configured inside the server device 10 has been described, but the database may also be configured on an external database server or the like. That is, some of the functions of the server device 10 may be implemented on another server. More specifically, it is sufficient that the above-described "message control unit (message control means)" and the like are implemented on any of the devices included in the system.

[0187] The form of data transmission and reception between each device (for example, the server device 10, the authentication terminal 20) is not particularly limited, but the data transmitted and received between these devices may be encrypted. Biometric information and the like is transmitted and received between these devices, and in order to appropriately protect this information, it is desirable that encrypted data be transmitted and received.

[0188] In the flow charts (flowcharts, sequence diagrams) used in the above explanation, multiple steps (processes) are described in order, but the execution order of the steps executed in the embodiments is not limited to the order described. In the embodiments, the order of the illustrated steps can be changed to the extent that the content is not affected, such as by executing each process in parallel.

[0189] The above-described embodiments have been described in detail to facilitate understanding of the present disclosure, and it is not intended that all of the above-described configurations are required. Furthermore, when multiple embodiments are described, each embodiment may be used alone or in combination. For example, it is possible to replace part of the configuration of one embodiment with the configuration of another embodiment, or to add the configuration of another embodiment to the configuration of one embodiment. Furthermore, it is possible to add, delete, or replace part of the configuration of one embodiment with another configuration.

[0190] From the above explanation, it is clear that the present invention has industrial applicability, and the present invention can be suitably applied to information processing systems that provide users with contact services and message services.

[0191] Some or all of the above embodiments can be described as, but are not limited to, the following supplementary notes.

[0192] [Appendix 1] a first control means for transmitting biometric information of a person to be authenticated to a server device that stores biometric information of each of a plurality of users and contact information relating to at least one contact, and thereby acquiring the contact information of the person to be authenticated from the server device; a second control means for connecting to a contact selected by the person to be authenticated from the at least one contact using the acquired at least one contact information; An authentication terminal comprising:

[0193] [Appendix 2] the first control means further acquires a first message intended for the person to be authenticated by another person by transmitting biometric information of the person to be authenticated to the server device; 2. The authentication terminal according to claim 1, wherein the second control means transmits the acquired first message to the person to be authenticated.

[0194] [Appendix 3] The authentication terminal according to claim 2, wherein the second control means acquires a second message from the person to be authenticated intended for the other person and registers the acquired second message in the server device.

[0195] [Appendix 4] 4. The authentication terminal according to claim 3, wherein the second control means acquires the second message after conveying the acquired first message to the person to be authenticated.

[0196] [Appendix 5] the first control means further acquires attribute information of the person to be authenticated by transmitting biometric information of the person to be authenticated to the server device; The authentication terminal according to any one of appendices 1 to 4, wherein the second control means determines a contact to connect to from among the at least one contact based on the acquired attribute information.

[0197] [Appendix 6] The authentication terminal according to any one of appendices 1 to 4, wherein the second control means controls the authentication terminal so that the person to be authenticated and a contact person selected by the person to be authenticated can have a conversation via text or voice.

[0198] [Appendix 7] a storage means for storing biometric information and contact information relating to at least one contact point for each of a plurality of users; an authentication means for receiving biometric information of a person to be authenticated from an authentication terminal, executing a matching process using the received biometric information and the stored biometric information to identify the person to be authenticated from among the plurality of users, and transmitting the at least one piece of contact information of the identified person to the authentication terminal; A server device comprising:

[0199] [Appendix 8] a server device that stores biometric information of each of a plurality of users and contact information relating to at least one or more contact points; An authentication terminal; Including, The authentication terminal a first control means for transmitting biometric information of the person to be authenticated to the server device, and acquiring the contact information of the person to be authenticated from the server device; a second control means for connecting to a contact selected by the person to be authenticated from the at least one contact using the acquired at least one contact information; A system comprising:

[0200] [Appendix 9] the first control means further acquires a first message intended for the person to be authenticated by another person by transmitting biometric information of the person to be authenticated to the server device; The system of claim 8, wherein the second control means conveys the acquired first message to the person to be authenticated.

[0201] [Appendix 10] The system described in Appendix 9, wherein the second control means acquires a second message from the person to be authenticated intended for the other person and registers the acquired second message in the server device.

[0202] [Appendix 11] The system described in Appendix 10, wherein the second control means acquires the second message after conveying the acquired first message to the person to be authenticated.

[0203] [Appendix 12] the first control means further acquires attribute information of the person to be authenticated by transmitting biometric information of the person to be authenticated to the server device; The system according to any one of appendices 8 to 11, wherein the second control means determines a contact to connect to from among the at least one contact based on the acquired attribute information.

[0204] [Appendix 13] The system described in any one of appendices 8 to 11, wherein the second control means controls so that the person to be authenticated and a contact person selected by the person to be authenticated can have a conversation via text or voice.

[0205] [Appendix 14] a first control step of transmitting biometric information of a person to be authenticated to a server device that stores biometric information of each of a plurality of users and contact information relating to at least one contact, thereby acquiring the contact information of the person to be authenticated from the server device; a second control step of connecting to a contact selected by the authenticatee from the at least one contact using the acquired at least one contact information; A method for controlling an authentication terminal, comprising:

[0206] [Appendix 15] the first control step further includes acquiring a first message from another person to the person to be authenticated by transmitting biometric information of the person to be authenticated to the server device; 15. The control method for an authentication terminal according to claim 14, wherein the second control step conveys the acquired first message to the person to be authenticated.

[0207] [Appendix 16] A control method for an authentication terminal as described in Appendix 15, wherein the second control step comprises the person to be authenticated obtaining a second message intended for the other person and registering the obtained second message in the server device.

[0208] [Appendix 17] 17. The control method for an authentication terminal according to claim 16, wherein the second control step acquires the second message after conveying the acquired first message to the person to be authenticated.

[0209] [Appendix 18] the first control step further acquires attribute information of the person to be authenticated by transmitting biometric information of the person to the server device; A control method for an authentication terminal described in any one of Appendices 14 to 17, wherein the second control step determines a contact to connect to from among the at least one contact based on the acquired attribute information.

[0210] [Appendix 19] A control method for an authentication terminal described in any one of Appendices 14 to 17, wherein the second control step controls so that the person to be authenticated and a contact person selected by the person to be authenticated can have a conversation via text or voice.

[0211] [Appendix 20] The computer installed in the authentication terminal a first control process for transmitting biometric information of a person to be authenticated to a server device that stores biometric information of each of a plurality of users and contact information relating to at least one contact, and thereby acquiring the contact information of the person to be authenticated from the server device; a second control process for connecting to a contact selected by the user from among the at least one contact using the acquired at least one contact information; A program to execute.

[0212] [Appendix 21] the first control process further includes transmitting biometric information of the person to be authenticated to the server device, thereby acquiring a first message from another person intended for the person to be authenticated; 21. The program according to claim 20, wherein the second control process conveys the acquired first message to the person to be authenticated.

[0213] [Appendix 22] 22. The program according to claim 21, wherein the second control process includes the person to be authenticated obtaining a second message intended for the other person and registering the obtained second message in the server device.

[0214] [Appendix 23] 23. The program according to claim 22, wherein the second control process acquires the second message after conveying the acquired first message to the person to be authenticated.

[0215] [Appendix 24] the first control process further acquires attribute information of the person to be authenticated by transmitting biometric information of the person to the server device; The program according to any one of appendices 20 to 23, wherein the second control process determines a contact to connect to from among the at least one contact based on the acquired attribute information.

[0216] [Appendix 25] The program described in any one of Appendices 20 to 23, wherein the second control process controls so that the person to be authenticated and a contact person selected by the person to be authenticated can have a conversation via text or voice.

[0217] Furthermore, some or all of the configurations described in Supplementary Notes 2 to 6 that are dependent on Supplementary Note 1 above may also be dependent on Supplementary Notes 8, 14, and 20 in the same dependent relationship as Supplementary Notes 2 to 6. Furthermore, not limited to Supplementary Notes 1, 8, 14, and 20, some or all of the configurations described as Supplements may be made dependent on various hardware, software, various recording means for recording software, or systems, within the scope of each of the above-mentioned embodiments.

[0218] The disclosures of the above-cited prior art documents are incorporated herein by reference. Although the embodiments of the present invention have been described above, the present invention is not limited to these embodiments. Those skilled in the art will understand that these embodiments are merely illustrative and that various modifications are possible without departing from the scope and spirit of the present invention. In other words, the present invention naturally includes various modifications and alterations that may be made by those skilled in the art in accordance with the entire disclosure, including the claims, and the technical concepts thereof. [Explanation of symbols]

[0219] 10 Server device 20 Authentication Terminal 30 devices 90 User terminal 91 Issuer Server 92 Provider device 100 authentication terminals 101 First control means 102 Second control means 201 Communication control unit 202 User registration control unit 203 Message control section 204 Authentication Department 205 Storage section 301 Communication Control Unit 302 Authentication control section 303 Service provision control unit 304 Storage section 311 processor 312 memory 313 Input / Output Interface 314 Communication Interface

Claims

1. a first control means for transmitting biometric information of a person to be authenticated to a server device that stores biometric information of each of a plurality of users and contact information relating to at least one contact, and thereby acquiring the contact information of the person to be authenticated from the server device; a second control means for connecting the authenticated person to a contact selected by the authenticated person from among the at least one contact by using the acquired at least one contact information when the authenticated person desires to receive a communication service that enables the authenticated person to converse with others; Equipped with the first control means further acquires information about the age of the person to be authenticated by transmitting biometric information of the person to be authenticated to the server device; The second control means determining whether the person to be authenticated is below a predetermined age based on information about the person's age; If the person to be authenticated is under the predetermined age, determining a contact to connect from the at least one contact; If the person to be authenticated is older than the predetermined age, the authentication terminal connects to a contact selected by the person to be authenticated from among the at least one contact.

2. the first control means further acquires a first message intended for the person to be authenticated by another person by transmitting biometric information of the person to be authenticated to the server device; 2. The authentication terminal according to claim 1, wherein said second control means transmits said acquired first message to said person to be authenticated.

3. 3. The authentication terminal according to claim 2, wherein the second control means acquires a second message from the person to be authenticated addressed to the other person, and registers the acquired second message in the server device.

4. 4. The authentication terminal according to claim 3, wherein the second control means acquires the second message after transmitting the acquired first message to the person to be authenticated.

5. the first control means further acquires attribute information of the person to be authenticated by transmitting biometric information of the person to be authenticated to the server device; The authentication terminal according to claim 1 , wherein the second control means determines a contact to connect to from the at least one contact based on the acquired attribute information.

6. 5. The authentication terminal according to claim 1, wherein the second control means controls the authentication terminal so that the person to be authenticated and a contact person selected by the person to be authenticated can have a conversation by text or voice.

7. a first control means for transmitting biometric information of a person to be authenticated to a server device that stores biometric information of each of a plurality of users and contact information relating to at least one contact, and thereby acquiring the contact information of the person to be authenticated from the server device; a second control means for connecting the authenticated person to a contact selected by the authenticated person from among the at least one contact by using the acquired at least one contact information when the authenticated person desires to receive a communication service that enables the authenticated person to converse with others; Equipped with the first control means further acquires a message intended for the person to be authenticated by another person by transmitting biometric information of the person to be authenticated to the server device; the second control means transmits the acquired message to the person to be authenticated; The authentication terminal further comprises a third control means for enabling the person to be authenticated to switch between the contact service and a message service including a service in which the person to be authenticated listens to messages.

8. a server device that stores biometric information of each of a plurality of users and contact information relating to at least one or more contact points; An authentication terminal; Including, The authentication terminal a first control means for transmitting biometric information of the person to be authenticated to the server device, and acquiring the contact information of the person to be authenticated from the server device; a second control means for connecting the authenticated person to a contact selected by the authenticated person from among the at least one contact by using the acquired at least one contact information when the authenticated person desires to receive a communication service that enables the authenticated person to converse with others; Equipped with the first control means further acquires information about the age of the person to be authenticated by transmitting biometric information of the person to be authenticated to the server device; The second control means determining whether the person to be authenticated is below a predetermined age based on information about the person's age; If the person to be authenticated is under the predetermined age, determining a contact to connect from the at least one contact; If the person to be authenticated is above the predetermined age, the system connects the person to a contact selected by the person to be authenticated from among the at least one contact.

9. a first control step of transmitting biometric information of a person to be authenticated to a server device that stores biometric information of each of a plurality of users and contact information relating to at least one contact, thereby acquiring the contact information of the person to be authenticated from the server device; a second control step of, when the authenticated person desires to receive a communication service that enables the authenticated person to converse with others, connecting to a contact selected by the authenticated person from among the at least one contact using the acquired at least one contact information; A control method for an authentication terminal, comprising: the first control step further acquires information about the age of the person to be authenticated by transmitting biometric information of the person to be authenticated to the server device; The second control step includes: determining whether the person to be authenticated is below a predetermined age based on information about the person's age; If the person to be authenticated is under the predetermined age, determining a contact to connect from the at least one contact; The method for controlling an authentication terminal includes, if the person to be authenticated is older than the predetermined age, connecting to a contact selected by the person to be authenticated from among the at least one contact.

10. The computer installed in the authentication terminal a first control process for transmitting biometric information of a person to be authenticated to a server device that stores biometric information of each of a plurality of users and contact information relating to at least one contact, and thereby acquiring the contact information of the person to be authenticated from the server device; a second control process for connecting the authenticated person to a contact selected by the authenticated person from among the at least one contact by using the acquired at least one contact information when the authenticated person desires to receive a communication service that enables the authenticated person to converse with others; A program for executing the first control process further acquires information about the age of the person to be authenticated by transmitting biometric information of the person to be authenticated to the server device; The second control process includes: determining whether the person to be authenticated is below a predetermined age based on information about the person's age; If the person to be authenticated is under the predetermined age, determining a contact to connect from the at least one contact; If the person to be authenticated is older than the predetermined age, the program connects to a contact selected by the person to be authenticated from among the at least one contact.

Images