Authentication management program, information processing device, and authentication management method

Abstract

An authentication management program, an information processing device, and an authentication management method are provided that enable authentication of a subject without using the subject's belongings or the like. [Solution] First identification information for image data showing multiple people, second identification information for a specific person among the multiple people, and authentication information for the specific person authenticated by a person other than the specific person among the multiple people are obtained, and the obtained first identification information, second identification information, and authentication information are stored in a memory unit in association with each other.

Description

[Technical Field]

[0001] The present disclosure relates to an authentication management program, an information processing device, and an authentication management method. [Background technology]

[0002] For example, various information processing systems (hereinafter also simply referred to as information processing systems) that authenticate a person (hereinafter also referred to as a subject) have been proposed (see Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 2024-070984 Summary of the Invention [Problem to be solved by the invention]

[0004] In the information processing system described above, for example, various authentication methods capable of authenticating a subject are desired. Specifically, in the information processing system described above, for example, a method capable of authenticating a subject by a method different from a method using a possession of the subject (for example, the subject's driver's license) is desired. [Means for solving the problem]

[0005] The authentication management program of the present disclosure acquires first identification information for image data showing multiple people, second identification information for a specific person among the multiple people, and authentication information for the specific person authenticated by a person other than the specific person among the multiple people, and stores the acquired first identification information, second identification information, and authentication information in a memory unit in association with each other. [Effects of the Invention]

[0006] According to the authentication management program, information processing device, and authentication management method disclosed herein, it is possible to authenticate a subject without using the subject's belongings or the like. [Brief explanation of the drawings]

[0007] [Figure 1] FIG. 1 is a diagram illustrating an example of the configuration of an information processing system 100 according to the first embodiment. [Figure 2] FIG. 2 is a diagram illustrating the hardware configuration of the information processing device 1 according to the first embodiment. [Figure 3] FIG. 3 is a block diagram of the functions of the information processing device 1 according to the first embodiment. [Figure 4] FIG. 4 is a flowchart illustrating the authentication management process according to the first embodiment. [Figure 5] FIG. 5 is a diagram illustrating a specific example of a screen OP1 output on the operation terminal 3b. [Figure 6] FIG. 6 is a diagram illustrating a specific example of a screen OP2 output on the operation terminal 3b. [Figure 7] FIG. 7 is a diagram illustrating a specific example of the correspondence information DT. [Figure 8] FIG. 8 is a flowchart illustrating the information output process according to the first embodiment. [Figure 9] FIG. 9 is a diagram illustrating a specific example of a screen OP3 output on the operation terminal 5. As shown in FIG. DETAILED DESCRIPTION OF THE INVENTION

[0008] Hereinafter, embodiments of the present disclosure will be described with reference to the drawings. However, such descriptions should not be interpreted in a limiting sense, and do not limit the subject matter described in the claims. Furthermore, various changes, substitutions, and modifications can be made without departing from the spirit and scope of the present disclosure. Furthermore, different embodiments can be combined as appropriate.

[0009] [Information Processing System 100 in the First Embodiment] First, a description will be given of an example of the configuration of an information processing system 100 according to the first embodiment. Fig. 1 is a diagram illustrating an example of the configuration of an information processing system 100 according to the first embodiment.

[0010] 1, the information processing system 100 includes, for example, an information processing device 1 and an operation terminal 3. The information processing device 1 and the operation terminal 3 can access each other via a network NW such as the Internet.

[0011] The information processing device 1 is, for example, a physical machine or a virtual machine. The information processing device 1 performs, for example, a process (hereinafter also referred to as authentication management process) of managing authentication information (hereinafter also simply referred to as authentication information) for each subject 2. The authentication information is, for example, information that is referenced (viewed) when authenticating each subject 2. Note that the information processing device 1 may be, for example, an information processing device that constitutes at least a part of a cloud system (not shown).

[0012] The operation terminal 3 is, for example, a mobile terminal such as a PC (Personal Computer) or a smartphone, and is a terminal used by the subject 2 when inputting necessary information to the information processing device 1. Specifically, the operation terminal 3 is, for example, a terminal owned by the subject 2. Note that the example shown in FIG. 1 illustrates a case where three subjects 2 (subject 2a, subject 2b, and subject 2c) input necessary information to the information processing device 1 via the operation terminals 3 (operation terminal 3a, operation terminal 3b, and operation terminal 3c), but a number of subjects 2 other than three may input necessary information via the operation terminals 3.

[0013] [Specific example of authentication management process] Next, a specific example of the authentication management process will be described. Specifically, a specific example of the authentication management process when the target person 2a registers authentication information will be described.

[0014] The subject 2a inputs, for example, image data such as a photograph showing the subject 2a, the subject 2b, and the subject 2c (hereinafter also simply referred to as image data) and identification information about the subject 2a to the operation terminal 3a. The identification information about the subject 2a may be, for example, the name of the subject 2a. Then, the operation terminal 3a transmits, for example, the input image data and the identification information about the subject 2a to the information processing device 1. Note that if the subject 2a has input image data to the operation terminal 3a in advance and the image data has been transmitted from the operation terminal 3a to the information processing device 1 in advance, the subject 2a may input, for example, the identification information about the image data that the subject 2a inputted in advance and the identification information about the subject 2a to the operation terminal 3a.

[0015] Next, for example, when the information processing device 1 receives image data and identification information for the subject 2a transmitted from the operation terminal 3a, it transmits the received image data and information requesting authentication of the subject 2a (hereinafter also referred to as first request information) to at least one of the operation terminal 3b for the subject 2b and the operation terminal 3c for the subject 2c. Note that the information processing device 1 may transmit the identification information for the received image data and the first request information to at least one of the operation terminal 3b for the subject 2b and the operation terminal 3c for the subject 2c.

[0016] Then, for example, when the operation terminal 3b receives the image data and the first request information transmitted from the information processing device 1, it outputs the received image data and the first request information to an output device (not shown) of the operation terminal 3b. Note that when the operation terminal 3b receives the identification information for the image data and the first request information, it may acquire the image data corresponding to the received identification information from the information processing device 1, and output the acquired image data and the first request information to an output device of the operation terminal 3b.

[0017] Thereafter, the subject 2b, for example, views the image data and the first request information output by the output device of the operation terminal 3b, and performs authentication for the subject 2a on the operation terminal 3b. Specifically, the subject 2b, for example, inputs the name of the subject 2a who appears in the image data transmitted from the information processing device 1 into the operation terminal 3b. Note that in this case, the subject 2b may input the names of all the subjects 2 who appear in the image data, for example. Then, the operation terminal 3b transmits, for example, authentication information for the subject 2a (the authentication result performed by the subject 2b) to the information processing device 1. Furthermore, the information processing device 1 receives the authentication information transmitted from the operation terminal 3b, for example, and stores the received authentication information in the storage unit 130.

[0018] 1, the information processing system 100 further includes, for example, an operation terminal 5. The information processing device 1 and the operation terminal 5 can access each other via a network NW such as the Internet.

[0019] The operation terminal 5 is, for example, a mobile terminal such as a PC or a smartphone, and is a terminal used by an authenticator 4 (hereinafter also simply referred to as the authenticator 4) who authenticates the subject 2 by referring to (viewing) the authentication information stored in the storage unit 130, when inputting necessary information into the information processing device 1. Specifically, the operation terminal 5 is, for example, a terminal owned by the authenticator 4. Note that, although the example shown in FIG. 1 illustrates a case where one authenticator 4 inputs necessary information into the information processing device 1 via the operation terminal 5, a plurality of authenticators 4 may input necessary information via the operation terminal 5.

[0020] Then, the information processing device 1 performs a process of outputting the authentication information of the subject person 2 stored in the storage unit 130 (hereinafter, also simply referred to as information output process), for example.

[0021] Specifically, the authenticator 4 inputs, for example, information including identification information about the subject 2a and requesting authentication of the subject 2a (hereinafter also referred to as second request information) to the operation terminal 5. Then, the operation terminal 5 transmits, for example, the input second request information to the information processing device 1.

[0022] Next, when the information processing device 1 receives second request information from the operation terminal 5, for example, the information processing device 1 identifies (searches) authentication information (authentication information for the target person 2a) corresponding to the received second request information from the authentication information stored in the storage unit 130. Then, the information processing device 1 transmits the identified authentication information to the operation terminal 5, for example.

[0023] Thereafter, the operation terminal 5 outputs, for example, the authentication information transmitted from the information processing device 1 to an output device (not shown) of the operation terminal 5. Then, the authenticator 4, for example, views the authentication information output to the output device of the operation terminal 5 and authenticates the subject person 2a.

[0024] In this way, the information processing device 1 in this embodiment acquires, for example, identification information (hereinafter also referred to as first identification information) about image data showing a plurality of subjects 2, identification information (hereinafter also referred to as second identification information) about a specific subject 2 (hereinafter also simply referred to as the specific subject 2) among the plurality of subjects 2, and authentication information about the specific subject 2 authenticated by another subject 2 (hereinafter also referred to as the other subject 2) other than the specific subject 2 among the plurality of subjects 2. Then, the information processing device 1 in this embodiment stores, for example, the identification information about the acquired image data, the identification information about the specific subject 2, and the authentication information about the specific subject 2 in the storage unit 130 in association with each other.

[0025] That is, the information processing device 1 in this embodiment registers authentication information for a specific subject 2 (subject 2a), for example, by inquiring of other subjects 2 (subject 2b and subject 2c) who appear in the image data. In other words, the information processing device 1 in this embodiment authenticates a specific subject 2 by requesting authentication of the other subjects 2 who appear in the image data.

[0026] This allows the information processing device 1 in this embodiment to authenticate the specific target person 2 by a method different from a method that uses, for example, the specific target person's belongings or the like.

[0027] 1, the subject 2a may input, for example, information (hereinafter also simply referred to as contact information) indicating contact information of the operation terminal 3 (operation terminal 3b or operation terminal 3c) of another subject 2 (subject 2b or subject 2c) appearing in the image data to the operation terminal 3a. Then, the information processing device 1 may transmit, for example, first request information to the operation terminal 3 of the other subject 2 by referring to the contact information transmitted from the operation terminal 3a.

[0028] Furthermore, the subject 2a may also input, for example, information that can identify the subject 2a appearing in the image data to the operation terminal 3a. The identification information is, for example, information that indicates the position where the subject 2a appears in the image data. The information processing device 1 may also transmit the identification information when transmitting, for example, the first request information to the operation terminal 3 of another subject 2.

[0029] [Hardware configuration of information processing system] Next, a description will be given of the hardware configuration of the information processing system 10. Fig. 2 is a diagram illustrating the hardware configuration of the information processing device 1 in the first embodiment.

[0030] 2, the information processing device 1 includes a CPU 101, which is a processor, a memory 102, a communication device 103, a storage medium 104, and an output device 105. Each unit is connected to one another via a bus 106.

[0031] The storage medium 104 has a program storage area (not shown) that stores a program 110 for performing, for example, authentication management processing and information output processing (hereinafter, these are also collectively referred to as authentication management processing, etc.). The storage medium 104 also has a storage unit 130 (hereinafter, also referred to as information storage area 130) that stores information used when performing, for example, authentication management processing, etc. The storage medium 104 may be, for example, a hard disk drive (HDD) or a solid state drive (SSD).

[0032] The CPU 101 performs authentication management processing and the like by executing a program 110 loaded from the storage medium 104 into the memory 102, for example.

[0033] The communication device 103 accesses each of the operation terminals 3 via a network NW such as the Internet, for example.

[0034] The output device 105 is, for example, a display, and outputs the results of the authentication management process and other processes performed by the CPU 101.

[0035] [Functions of information processing systems] Next, a description will be given of the functions of the information processing system 10. Fig. 3 is a block diagram of the functions of the information processing device 1 in the first embodiment.

[0036] As shown in FIG. 3, the information processing device 1 realizes various functions including an information acquisition unit 111, an information management unit 112, an information output unit 113, and an information identification unit 114 by organically cooperating with hardware such as a CPU 101 and a memory 102 and a program.

[0037] Furthermore, as shown in FIG. 3, the information processing device 1 stores, in the information storage area 130, for example, image data DT0, first identification information DT1, second identification information DT2, and authentication information DT3.

[0038] First, the function of performing authentication management processing will be described.

[0039] The information acquisition unit 111 acquires, for example, first identification information DT1 for image data showing multiple subjects 2, second identification information DT2 for a specific subject 2, and authentication information DT3 for a specific subject 2 authenticated by other subjects 2.

[0040] The information management unit 112 stores, for example, the first identification information DT1, the second identification information DT2, and the authentication information DT3 acquired by the information acquisition unit 111 in the information storage area 130 in association with each other.

[0041] Specifically, the information output unit 113 outputs, for example, first request information including the first identification information DT1 and requesting authentication of a specific target person 2. Then, the information acquisition unit 111 acquires, for example, authentication information DT3 authenticated by another target person 2 in accordance with the first request information output by the information output unit 113.

[0042] More specifically, the specific target person 2 inputs, for example, the first identification information DT1 and the second identification information DT2 to the operation terminal 3 of the specific target person 2. Then, the operation terminal 3 of the specific target person 2 transmits, for example, the input first identification information DT1 and second identification information DT2 to the information processing device 1.

[0043] Next, the information acquisition unit 111 receives, for example, the first identification information DT1 and the second identification information DT2 transmitted from the operation terminal 3 of the specific subject 2. Thereafter, the information output unit 113 transmits, for example, to the operation terminal 3 of another subject 2, image data DT0 corresponding to the first identification information DT1 received by the information acquisition unit 111 and first request information requesting authentication of the specific subject 2. Note that the image data DT0 corresponding to the first identification information DT1 may be stored in advance in the information storage area 130, for example. Furthermore, the image data DT0 corresponding to the first identification information DT1 may be input, for example, by the specific subject 2 together with the first identification information DT1 and the second identification information DT2.

[0044] Then, for example, when the operation terminal 3 of the other target person 2 receives the image data DT0 and the first request information transmitted from the information processing device 1, it outputs the received image data DT0 and the first request information to the output device. Subsequently, the other target person 2, for example, views the output image data DT0 and the first request information, and performs authentication of the specific target person 2 on the operation terminal 3 of the other target person 2.

[0045] Thereafter, the operation terminal 3 of the other target person 2 transmits, for example, authentication information DT3 for the specific target person 2 (the authentication result performed by the other target person 2) to the information processing device 1. Then, the information acquisition unit 111 receives, for example, the authentication information DT3 transmitted from the operation terminal 3 of the other target person 2.

[0046] Next, the function of performing information output processing will be described.

[0047] The information acquisition unit 111 acquires, for example, second request information requesting authentication of a specific target person 2 including second identification information DT2.

[0048] The information identifying unit 114, for example, refers to the information storage area 130 and identifies the authentication information DT3 stored in association with the second identification information DT2 included in the second request information acquired by the information acquiring unit 111.

[0049] The information output unit 113 outputs, for example, the authentication information DT3 identified by the information identification unit 114.

[0050] Specifically, the authenticator 4 inputs, for example, the second request information to the operation terminal 5. Then, the operation terminal 5 transmits, for example, the input second request information to the information processing device 1.

[0051] Next, the information acquisition unit 111 receives, for example, second request information transmitted from the operation terminal 5. Then, the information identification unit 114 identifies (searches for) authentication information DT3 corresponding to the second identification information DT2 included in the second request information received by the information acquisition unit 111, from the authentication information DT3 stored in the information storage area 130, for example. Furthermore, the information output unit 113 transmits the identified authentication information DT3 to the operation terminal 5, for example.

[0052] Thereafter, the operation terminal 5 outputs, for example, the authentication information DT3 transmitted from the information processing device 1 to an output device. Then, the authenticator 4, for example, views the output authentication information DT3 and performs authentication on the specific target person 2.

[0053] [Authentication Management Process in the First Embodiment] Next, the authentication management process in the first embodiment will be described. Fig. 4 is a flowchart illustrating the authentication management process in the first embodiment. Figs. 5 to 7 are diagrams illustrating the authentication management process in the first embodiment. The following description will be given assuming that the name of subject 2a is "A", the name of subject 2b is "B", and the name of subject 2c is "C".

[0054] As shown in FIG. 4, the information acquisition unit 111 receives, for example, the first identification information DT1 and the second identification information DT2 from the operation terminal 3 of the specific target person 2 (NO in step S11 in FIG. 4).

[0055] The specific target person 2 may input, for example, a plurality of pieces of first identification information DT1 corresponding to the plurality of image data DT0, and the operation terminal 3a may transmit the input pieces of first identification information DT1 to the information processing device 1.

[0056] Then, when the first identification information DT1 and the second identification information DT2 are received (YES in step S11 of Figure 4), the information output unit 113 sends, for example, first request information to the operation terminal 3 of another subject 2 appearing in the image data DT0, requesting authentication of the specific subject 2 (step S12 of Figure 4).

[0057] In this case, the information output unit 113 may transmit the first request information to all of the subjects 2 other than the subject 2a who appears in the image data DT0 corresponding to the first identification information DT1. In addition, in this case, the information output unit 113 may transmit the first request information to one or more subjects 2 randomly selected from the subjects 2 other than the subject 2a who appears in the image data DT0 corresponding to the first identification information DT1.

[0058] Furthermore, when image data DT0 showing a specific subject 2 (hereinafter also referred to as other image data DT0) other than the image data DT0 corresponding to the first identification information DT1 received in step S11 is stored in the information storage area 130, the information output unit 113 may transmit the other image data DT0 in addition to the image data DT0 corresponding to the first identification information DT1 received in step S11.

[0059] Thereafter, the information acquisition unit 111 waits, for example, until it receives authentication information DT3 in response to the first request information transmitted in step S12 from the operation terminal 3 of the other target person 2 (NO in step S13 of FIG. 4). That is, the information acquisition unit 111 waits, for example, until the other target person 2 performs authentication for the specific target person 2 via the operation terminal 3 of the other target person 2. A specific example when the target person 2b performs authentication for the target person 2a will be described below.

[0060] [Example (1) of when subject 2b authenticates subject 2a] Fig. 5 is a diagram illustrating a first specific example in which the target person 2b authenticates the target person 2a. Specifically, Fig. 5 is a diagram illustrating a specific example of a screen OP1 output on the operation terminal 3b.

[0061] For example, when the operation terminal 3b receives first request information transmitted from the information processing device 1, the operation terminal 3b outputs to the output device of the operation terminal 3b a screen OP1 including image data DT0 corresponding to first identification information DT1 included in the received first request information. Then, the operation terminal 3b outputs, for example, information requesting input of the name of the subject 2a appearing in the image data DT0 on the screen OP1.

[0062] Specifically, as shown in Figure 5, the operation terminal 3b outputs image data DT0 showing five people including subject 2a, subject 2b, and subject 2c, and also outputs the sentence "Please enter your name" in association with the position where subject 2a is shown.

[0063] Then, for example, in response to inputting the name of the subject person 2a into an input field (not shown) on the screen OP1, the operation terminal 3b transmits the input name to the information processing device 1 as authentication information DT3.

[0064] [Example (2) of subject 2b authenticating subject 2a] Fig. 6 is a diagram illustrating a second specific example in which the target person 2b authenticates the target person 2a. Specifically, Fig. 6 is a diagram illustrating a specific example of a screen OP2 output on the operation terminal 3b.

[0065] For example, when the operation terminal 3b receives first request information transmitted from the information processing device 1, the operation terminal 3b outputs a screen OP2 including image data DT0 corresponding to the first identification information DT1 included in the received first request information to the output device of the operation terminal 3b. Then, the operation terminal 3b outputs, for example, the correct name of the subject 2a or an incorrect name of the subject 2a. Furthermore, the operation terminal 3b outputs, for example, information on the screen OP2 requesting input of information regarding whether the correct name of the subject 2a has been output.

[0066] Specifically, as shown in Figure 6, the operation terminal 3b outputs image data DT0 showing five people including the target person 2a, the target person 2b, and the target person 2c, and also outputs the sentence "Is this person Mr. A?" in association with the position where the target person 2a is shown.

[0067] Then, in response to, for example, information indicating that the correct name of the subject 2a has been output, or information indicating that an incorrect name of the subject 2a has been output, being input into an input field (not shown) on the screen OP2, the operation terminal 3b transmits the input information to the information processing device 1 as authentication information DT3.

[0068] Returning to Figure 4, when authentication information DT3 in response to the first request information sent in step S12 is received from the operation terminal 3 of another target person 2 (YES in step S13 in Figure 4), the information management unit 112 generates information (hereinafter also referred to as result information DT3a) indicating, for example, whether the authentication information DT3 received in step S13 and the second identification information DT2 received in step S11 satisfy a predetermined condition (step S14 in Figure 4).

[0069] Specifically, in this case, the information management unit 112 generates, for example, result information DT3a indicating whether the authentication information DT3 received in step S13 matches the second identification information DT2 received in step S11. Hereinafter, the authentication information DT3 and the result information DT3a will also be collectively referred to simply as authentication information DT3.

[0070] More specifically, in the example described in Figure 5, for example, if the name of subject 2a entered by subject 2b is correct, the information management unit 112 generates result information DT3a indicating that the authentication information DT3 received in step S13 matches the second identification information DT2 received in step S11.

[0071] On the other hand, in the example described in Figure 5, for example, if the name of subject 2a entered by subject 2b is incorrect, or if subject 2b does not enter the name of subject 2a, the information management unit 112 generates result information DT3a indicating that the authentication information DT3 received in step S13 does not match the second identification information DT2 received in step S11.

[0072] 6, for example, if the correct name of subject 2a is output at operation terminal 3b and subject 2b has input information indicating that the correct name of subject 2a has been output, the information management unit 112 generates result information DT3a indicating that the authentication information DT3 received at step S13 matches the second identification information DT2 received at step S11. Similarly, in the example described in Fig. 6, for example, if an incorrect name of subject 2a is output at operation terminal 3b and subject 2b has input information indicating that the incorrect name of subject 2a has been output, the information management unit 112 generates result information DT3a indicating that the authentication information DT3 received at step S13 matches the second identification information DT2 received at step S11.

[0073] 6, for example, if the correct name of subject 2a is output on operation terminal 3b but information indicating that subject 2b has output an incorrect name of subject 2a is input, the information management unit 112 generates result information DT3a indicating that the authentication information DT3 received in step S13 does not match the second identification information DT2 received in step S11. Similarly, in the example described in Fig. 6, for example, if the incorrect name of subject 2a is output on operation terminal 3b but information indicating that subject 2b has output the correct name of subject 2a is input, the information management unit 112 generates result information DT3a indicating that the authentication information DT3 received in step S13 does not match the second identification information DT2 received in step S11.

[0074] In addition, the information processing device 1 may perform the processing from step S14 onwards after a certain period of time (e.g., several minutes to several hours) has elapsed since the processing of step S13, for example, in order to ensure that other subjects 2 have sufficient time to authenticate the specific subject 2.

[0075] Thereafter, the information management unit 112 stores information (hereinafter also referred to as correspondence information DT) that associates, for example, the image data DT0 received in step S11, the second identification information DT2 received in step S11, and the result information DT3a generated in step S14 in the information storage area 130 (step S15 in Figure 4).

[0076] The information management unit 112 may store the authentication information DT3 received in step S13 in the information storage area 130, for example, instead of or together with the result information DT3a generated in step S14. Specific examples of the correspondence information DT will be described below.

[0077] [Specific examples of correspondence information DT] FIG. 7 is a diagram illustrating a specific example of the correspondence information DT.

[0078] 7 has, as items, for example, "first identification information" in which first identification information DT1 for image data DT0 is set, "second identification information" in which second identification information DT2 for a specific target person 2 is set, "target person (1)" and "target person (2)" etc. in which identification information for another target person 2 is set, and "result information (1)" and "result information (2)" etc. in which result information DT3a is set. In the "result information (1)" and "result information (2)" etc., for example, "◯" is set indicating that the authentication information DT3 received in step S13 and the second identification information DT2 received in step S11 match, in other words, that the specific target person 2 has been authenticated by another target person 2. In addition, "Result Information (1)" and "Result Information (2)" are set to "X", which indicates that the authentication information DT3 received in step S13 does not match the second identification information DT2 received in step S11, in other words, that authentication of the specific subject 2 was not performed by another subject 2.

[0079] Specifically, in the correspondence information DT in the first row shown in Figure 7, for example, "IM1" is set as the "first identification information," "A" is set as the "second identification information," "C" is set as the "subject (1)," "〇" is set as the "result information (1)," "B" is set as the "subject (2)," and "〇" is set as the "result information (2)."

[0080] That is, the correspondence information DT in the first row shown in FIG. 7 indicates that, for example, authentication of the target person 2a was attempted by the target person 2b and the target person 2c and was successful.

[0081] In addition, the correspondence information DT in the second row shown in Figure 7 has, for example, "IM2" set as the "first identification information," "D" set as the "second identification information," "F" set as the "subject (1)," "x" set as the "result information (1)," "H" set as the "subject (2)," and "x" set as the "result information (2)."

[0082] That is, the correspondence information DT in the second row shown in Fig. 7 indicates that, for example, a subject 2 whose second identification information DT2 is "F" or a subject 2 whose second identification information DT2 is "H" attempted to authenticate a subject 2 whose second identification information DT2 is "D", but was unsuccessful. Explanation of other information included in Fig. 7 will be omitted.

[0083] [Information Output Processing in the First Embodiment] Next, the information output process in the first embodiment will be described. Fig. 8 is a flowchart illustrating the information output process in the first embodiment. Fig. 9 is a diagram illustrating the information output process in the first embodiment.

[0084] As shown in FIG. 8, the information acquisition unit 111 receives, for example, second request information about a specific target person 2 from the operation terminal 5 (NO in step S21 in FIG. 8).

[0085] Then, when second request information for a specific subject 2 is received from the operating terminal 5 (YES in step S21 of FIG. 8), the information identification unit 114, for example, refers to the corresponding information DT stored in the information storage area 130 and identifies (searches for) the corresponding information DT corresponding to the subject 2a (step S22 of FIG. 8).

[0086] Specifically, in this case, the information identification unit 114 identifies (searches) the corresponding information DT that includes the second identification information DT2 contained in the second request information received in step S21 from among the corresponding information DT stored in the information storage area 130, for example.

[0087] After that, the information output unit 113 transmits, for example, the correspondence information DT identified in step S22 to the operation terminal 5 (the operation terminal 5 that transmitted the second request information) (step S23 in FIG. 8).

[0088] Then, for example, when the operation terminal 5 receives the corresponding information DT transmitted from the information processing device 1, it outputs the received corresponding information DT to the output device. Then, the authenticator 4 performs authentication for the specific target person 2, for example, by referring to (viewing) the output corresponding information DT.

[0089] In step S23, the information output unit 113 may also transmit, for example, the image data DT0 corresponding to the first identification information DT1 included in the correspondence information DT identified in step S22.

[0090] Furthermore, in step S23, the information output unit 113 may transmit, for example, a part of the corresponding information DT identified in step S22. Below, a specific example will be described in which the authenticator 4 browses the corresponding information DT.

[0091] [Specific example when authenticator 4 browses the corresponding information DT] 9 is a diagram for explaining a specific example of the case where the authenticator 4 browses the correspondence information DT. Specifically, FIG. 9 is a diagram for explaining a specific example of a screen OP3 output on the operation terminal 5.

[0092] For example, when the operation terminal 5 receives the corresponding information DT and image data DT0 transmitted from the information processing device 1, the operation terminal 5 outputs a screen OP3 including the received image data DT0 to the output device of the operation terminal 5. Then, the operation terminal 5 outputs, for example, the received corresponding information DT on the screen OP3.

[0093] That is, in this case, the operation terminal 5 outputs, for example, information that serves as a basis for the authenticator 4 to authenticate the specific target person 2.

[0094] Specifically, as shown in FIG. 9, the operation terminal 5 outputs image data DT0 showing five people including subject 2a, subject 2b, and subject 2c, and also outputs information indicating that subject 2b has authenticated subject 2a twice and that subject 2c has authenticated subject 2a once, in correspondence with the position where subject 2a is shown.

[0095] In this case, the operation terminal 5 may output information indicating the percentage of times that "O" is set in "Result Information (1)" or "Result Information (2)" of the corresponding information DT (the corresponding information DT in the first row shown in Figure 7) whose "second identification information" is "A", in a manner that corresponds to the position where the subject 2a is shown.

[0096] In this way, the information processing device 1 in this embodiment acquires, for example, first identification information DT1 for image data DT0 showing multiple subjects 2, second identification information DT2 for a specific subject 2 among the multiple subjects 2, and authentication information DT3 for the specific subject 2 authenticated by a subject 2 other than the specific subject 2 among the multiple subjects 2. Then, the information processing device 1 in this embodiment stores, for example, the first identification information DT1 for the acquired image data DT0, the second identification information DT2 for the specific subject 2, and the authentication information DT3 for the specific subject 2 in the information storage area 130 in association with each other.

[0097] Specifically, the information processing device 1 in this embodiment outputs, for example, first request information that includes first identification information DT1 and requests authentication of a specific target person 2. Then, the information processing device 1 in this embodiment acquires, for example, authentication information DT3 authenticated by another target person 2 in accordance with the output first request information.

[0098] In addition, in this embodiment, for example, when the authentication information DT3 and the second identification information DT2 satisfy a predetermined condition, the information processing device 1 stores information indicating that the authentication information DT3 and the second identification information DT2 satisfy the predetermined condition in the information storage area 130.

[0099] In addition, in this embodiment, for example, if the authentication information DT3 and the second identification information DT2 do not satisfy a predetermined condition, the information processing device 1 stores information indicating that the authentication information DT3 and the second identification information DT2 do not satisfy the predetermined condition in the information storage area 130.

[0100] Furthermore, the information processing device 1 in this embodiment acquires, for example, second request information that includes second identification information DT2 and requests authentication of a specific target person 2. Then, the information processing device 1 in this embodiment refers to, for example, the information storage area 130, identifies authentication information DT3 that is stored in association with the acquired second identification information DT2, and outputs the identified authentication information DT3.

[0101] That is, the information processing device 1 in this embodiment registers the authentication information DT3 for a specific target person 2 (target person 2a), for example, by inquiring of other target people 2 (target people 2b and target people 2c) who appear in the image data DT0. In other words, the information processing device 1 in this embodiment authenticates a specific target person 2 by requesting authentication of the other target people 2 who appear in the image data DT0.

[0102] This allows the information processing device 1 in this embodiment to authenticate the specific target person 2 by a method different from a method that uses, for example, the specific target person's belongings or the like.

[0103] Specifically, the information processing device 1 in this embodiment uses, for example, image data DT0 taken in the daily life of the subject 2a (for example, image data DT0 taken when the subject 2a participated in volunteer work), and further requests authentication of the subject 2a from other subjects 2 (subject 2b and subject 2c) who are determined to have contact with the subject 2a in their daily lives, thereby making it possible to achieve authentication that reflects the personality of the subject 2a.

[0104] Therefore, the information processing device 1 in this embodiment can realize authentication from a different perspective than authentication using, for example, belongings of the subject person 2. Therefore, the authenticator 4 can perform authentication of the subject person 2 from multiple perspectives by combining, for example, authentication performed by the authentication management process or the like in this embodiment and authentication using belongings of the subject person 2.

[0105] Furthermore, the information processing device 1 in this embodiment can also authenticate a subject 2 who does not have any personal belongings that can be used for authentication (for example, an elderly person who has surrendered their driver's license). [Explanation of symbols]

[0106] 1: Information processing device 2: Target person 2a: Target 2b: Target 2c: Target person 3: Operation terminal 3a: Operation terminal 3b: Operation terminal 3c: Operation terminal 4: Authenticator 5: Operation terminal 100: Information processing system 101:CPU 102:Memory 103: Communication device 104: Storage medium 105: Output device 106: Bus 110: Program 111: Information acquisition unit 112: Information management section 113: Information output section 114: Information identification unit 130: Information storage area DT: Correspondence information DT0: Image data DT1: First identification information DT2: Second identification information DT3: Authentication information DT3a: Result information NW: Network OP1: Screen OP2: Screen OP3: Screen

Claims

1. acquiring first identification information for image data showing a plurality of persons, second identification information for a specific person among the plurality of persons, and authentication information for the specific person authenticated by a person other than the specific person among the plurality of persons; an authentication management program that causes a computer to execute a process of storing the acquired first identification information, the acquired second identification information, and the acquired authentication information in a storage unit in association with each other;

2. and outputting first request information including the first identification information and requesting authentication of the specific person. Have the computer execute the process, The authentication management program according to claim 1 , wherein the acquiring process acquires the authentication information authenticated by the other person in response to the output first request information.

3. The authentication management program of claim 1, wherein, in the storing process, if the authentication information and the second identification information satisfy a predetermined condition, information indicating that the authentication information and the second identification information satisfy the predetermined condition is stored in the memory unit.

4. further acquiring second request information including the second identification information and requesting authentication of the specific person; referring to the storage unit to identify the authentication information stored in association with the acquired second identification information; The authentication management program according to claim 1 , wherein the program causes a computer to execute a process of outputting the identified authentication information.

5. an information acquisition unit that acquires first identification information for image data showing a plurality of people, second identification information for a specific person among the plurality of people, and authentication information for the specific person authenticated by a person other than the specific person among the plurality of people; an information management unit that stores the acquired first identification information, the acquired second identification information, and the acquired authentication information in a storage unit in association with each other.

6. acquiring first identification information for image data showing a plurality of persons, second identification information for a specific person among the plurality of persons, and authentication information for the specific person authenticated by a person other than the specific person among the plurality of persons; An authentication management method in which a computer executes a process of storing the acquired first identification information, the acquired second identification information, and the acquired authentication information in a storage unit in association with each other.

Images