Reception terminal, terminal, method for controlling the reception terminal, and program

Abstract

We provide a reception terminal that contributes to achieving identity verification at a lower cost. [Solution] The reception terminal comprises a first acquisition means, a second acquisition means, and an identity verification means. The first acquisition means acquires the first four basic pieces of information obtained from the user's identification document from the terminal held by the user. The second acquisition means acquires the second four basic pieces of information from the identification document held by the user. The identity verification means verifies the user's identity using the first and second four basic pieces of information.

Description

Technical Field

[0001] The present invention relates to a reception terminal, a terminal, a control method for the reception terminal, and a program.

Background Art

[0002] There is a technology related to personal identification using an identity certificate or the like.

[0003] For example, Patent Document 1 describes that personal identification using personal identification documents is performed efficiently with sufficient reliability. The personal identification device of Patent Document 1 determines whether a target person is the person shown in the personal identification document. The personal identification device captures an image of the face of the target person to generate a target person face image. The personal identification device captures an image of the face of the personal identification document to generate a document captured image. The personal identification device performs face matching based on the face image data read from the IC (Integrated Circuit) chip of the personal identification document and the target person face image, and determines whether the target person is the person shown in the document based on the result of the face matching.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] The personal identification device of Patent Document 1 needs to capture an image of the target person. That is, a camera is required for the personal identification device. However, when a camera is required for personal identification, the cost of the personal identification device increases.

[0006] The main object of the present invention is to provide a reception terminal, a terminal, a control method for the reception terminal, and a program that contribute to realizing personal identification at a lower cost.

Means for Solving the Problems

[0007] According to a first aspect of the present invention, a reception terminal is provided that includes: a first acquisition means for acquiring first basic four pieces of information obtained from the user's identification document from a terminal held by the user; a second acquisition means for acquiring second basic four pieces of information from the user's identification document; and an identity verification means for verifying the user's identity using the first and second basic four pieces of information.

[0008] A terminal is provided that includes: an acquisition means for acquiring basic four pieces of information and first biometric information from an identification card held by a user; a storage means for storing the acquired basic four pieces of information and first biometric information; and a providing means for acquiring second biometric information of the user in response to the user's operation, performing a matching process using the stored first biometric information and the acquired second biometric information, and providing the stored basic four pieces of information to an external device if the matching process is successful.

[0009] A third aspect of the present invention provides a control method for a reception terminal, which involves obtaining first basic four pieces of information obtained from the user's identification document from a terminal held by the user, obtaining second basic four pieces of information from the user's identification document, and verifying the user's identity using the first and second basic four pieces of information. [Effects of the Invention]

[0010] From each perspective of the present invention, a reception terminal, a terminal, a control method for the reception terminal, and a program are provided that contribute to achieving identity verification at a lower cost. However, the effects of the present invention are not limited to those described above. The present invention may also produce other effects in lieu of or in conjunction with the effects described above. [Brief explanation of the drawing]

[0011] [Figure 1] Figure 1 is a diagram illustrating the outline of one embodiment. [Figure 2] Figure 2 is a flowchart showing the operation of one embodiment. [Figure 3] Figure 3 shows an example of a schematic configuration of an information processing system according to the embodiment of this disclosure. [Figure 4] Figure 4 shows an example of the processing configuration of a terminal according to the embodiment of this disclosure. [Figure 5] Figure 5 is a flowchart showing an example of the operation of the pre-preparation control unit according to the present disclosure. [Figure 6] Figure 6 is a flowchart showing an example of the operation of the identity verification control unit according to the present disclosure. [Figure 7] Figure 7 shows an example of the processing configuration of a reception terminal according to an embodiment of this disclosure. [Figure 8] Figure 8 is a flowchart showing an example of the operation of the identity verification control unit according to the present disclosure. [Figure 9] Figure 9 shows an example of the display of a reception terminal according to an embodiment of this disclosure. [Figure 10] Figure 10 shows an example of a terminal display according to a modified embodiment of the present disclosure. [Figure 11] Figure 11 shows an example of the hardware configuration of the reception terminal related to this disclosure. [Modes for carrying out the invention]

[0012] First, an overview of one embodiment will be described. The reference numerals in the drawings attached to this overview are provided for convenience as examples to aid understanding, and this overview is not intended to be limiting in any way. Furthermore, unless otherwise specified, the blocks shown in each drawing represent functional units, not hardware units. The connecting lines between blocks in each drawing include both bidirectional and unidirectional lines. Unidirectional arrows schematically indicate the flow of the main signal (data) and do not exclude bidirectional flow. In this specification and in the drawings, elements that can be similarly described are denoted by the same reference numerals, thus omitting redundant explanations.

[0013] The receiving terminal 100 according to an embodiment includes a first acquisition unit 101, a second acquisition unit 102, and an identity verification unit 103 (see FIG. 1). The first acquisition unit 101 acquires, from a terminal possessed by the user, the first basic four-piece information obtained from the user's identity certificate (step S1 in FIG. 2). The second acquisition unit 102 acquires the second basic four-piece information from the identity certificate possessed by the user (step S2). The identity verification unit 103 performs identity verification of the user using the first and second basic four-piece information (performs identity verification; step S3).

[0014] The user performs identity verification in advance using the possessed identity certificate, and stores the basic four-piece information obtained from the identity certificate in the terminal. When providing a service to the user, the receiving terminal 100 compares the basic four-piece information provided from the terminal possessed by the user with the basic four-piece information obtained from the identity certificate possessed by the user, and determines whether they match. If the two basic pieces of information match, the receiving terminal 100 determines that the user possesses the identity certificate for which identity verification has been performed in advance, and determines that the identity verification of the user has been successful. Thus, when the receiving terminal 100 performs identity verification using the identity certificate, it is not necessary to photograph the user to acquire biometric information, so a camera is not required for the receiving terminal 100. As a result, identity verification can be realized at a lower cost.

[0015] Specific embodiments will be described in more detail below with reference to the drawings.

[0016] [First Embodiment] The first embodiment will be described in more detail using the drawings.

[0017] [Configuration of System] As shown in FIG. 3, the information processing system (identity verification service system) according to the first embodiment includes a receiving terminal 10 and a terminal 20.

[0018] The reception terminal 10 is installed in places where services requiring user identity verification are provided, such as hospitals and pharmacies. Employees of the service provider operate the reception terminal 10 to verify the identity of the user in front of them.

[0019] The user possesses terminal 20. Terminal 20 has an application installed for receiving identity verification services. For example, the user uses this application to undergo identity verification at a service provider location such as a pharmacy.

[0020] The configuration of the information processing system shown in Figure 3 is illustrative and not intended to limit its configuration. For example, the service provision location may include multiple reception terminals 10.

[0021] [General operation] Next, we will describe the general operation of the information processing system according to the first embodiment.

[0022] <Preparation> First, terminal 20 obtains four basic pieces of information (name, gender, date of birth, and address) and biometric information from the user's identification document. More specifically, terminal 20 obtains the four basic pieces of information and biometric information from the IC (Integrated Circuit) chip of the My Number Card.

[0023] Examples of biometric information include data (feature quantities) calculated from individual physical characteristics such as face, fingerprints, voiceprints, veins, retina, and iris patterns. Alternatively, biometric information may be image data such as face images or fingerprint images. Biometric information only needs to include information about the user's physical characteristics. This disclosure describes the case where biometric information (face images or feature quantities generated from face images) relating to a person's "face" is used.

[0024] For example, terminal 20 obtains a facial image from the My Number Card. In the following explanation, the facial image obtained from the My Number Card will be referred to as the "My Number facial image."

[0025] Terminal 20 stores the four basic pieces of information read from the My Number Card and the My Number facial image internally.

[0026] <Identity verification at the service location> Users visit service providers such as pharmacies and hospitals. Reception terminals 10 and 20 verify the identity of users seeking services from service providers. Reception terminals 10 and 20 work together to verify the identity of users.

[0027] First, terminal 20 acquires the user's biometric information in response to the user's actions. Specifically, terminal 20 acquires the user's facial image through a so-called selfie. In the following explanation, the facial image obtained by photographing the user will be referred to as a "selfie facial image."

[0028] Upon acquiring a selfie face image, terminal 20 performs a matching process (authentication process) using the My Number face image and the selfie face image. If the matching process is successful, terminal 20 generates a 2D barcode using the four basic pieces of information (the four basic pieces of information stored internally) that have been previously read from the My Number card. Terminal 20 converts the four basic pieces of information into a 2D barcode.

[0029] Subsequently, terminal 20 displays the generated 2D barcode. The user has the displayed 2D barcode read by the 2D barcode reader of reception terminal 10. Reception terminal 10 reads the 2D barcode from the 2D barcode reader. Reception terminal 10 decodes the read 2D barcode and obtains the four basic pieces of information.

[0030] Furthermore, users follow the instructions of the service provider's employees and other staff, and place their My Number Card in the designated area of ​​the reception terminal 10.

[0031] The reception terminal 10 reads the four basic pieces of information from the IC chip of the My Number Card using NFC (Near Field Communication).

[0032] The reception terminal 10 determines that identity verification has been successful if the four basic pieces of information obtained from the My Number Card match the four basic pieces of information obtained from terminal 20. The reception terminal 10 determines that identity verification has failed if the four basic pieces of information obtained from the My Number Card do not match the four basic pieces of information obtained from terminal 20.

[0033] The reception terminal 10 notifies the service provider's employees or other personnel of the results of the identity verification.

[0034] Next, we will describe the details of each device included in the information processing system according to the first embodiment.

[0035] [Terminal] Figure 4 is a diagram showing an example of the processing configuration (processing module) of terminal 20 according to the embodiment disclosed herein. Referring to Figure 4, terminal 20 comprises a communication control unit 201, a pre-preparation control unit 202, an identity verification control unit 203, and a storage unit 204.

[0036] The above application is implemented by the pre-preparation control module 202 and the identity verification control module 203. Detailed instructions regarding the application installation are omitted, as the installation process is obvious to those skilled in the art.

[0037] The communication control unit 201 is a means for controlling communication with other devices. For example, the communication control unit 201 communicates with the IC chip embedded in the My Number Card using NFC (Near Field Communication). The communication control unit 201 passes data received from other devices to other processing modules. The communication control unit 201 transmits data acquired from other processing modules to other devices. In this way, other processing modules send and receive data with other devices via the communication control unit 201.

[0038] The pre-preparation control unit 202 is a means for controlling the pre-preparation necessary when a user undergoes identity verification. More specifically, the pre-preparation control unit 202 functions as an acquisition means for obtaining the four basic pieces of information and the first biometric information (My Number facial image) from the identification document held by the user.

[0039] Figure 5 is a flowchart showing an example of the operation of the pre-preparation control unit 202 according to the embodiment disclosed herein. The operation of the pre-preparation control unit 202 will be explained with reference to Figure 5.

[0040] When a user performs a predetermined operation in the application (for example, pressing the pre-preparation button), the pre-preparation control unit 202 attempts to obtain information from the My Number Card held by the user (step S101).

[0041] Specifically, the pre-preparation control unit 202 obtains a password (for example, a 4-digit password) for reading information from the IC chip of the My Number Card using a GUI (Graphical User Interface) or the like. The pre-preparation control unit 202 then transmits the obtained password to the IC chip.

[0042] If the acquired password is correct, the pre-preparation control unit 202 can obtain the four basic pieces of information and the My Number facial image from the IC chip.

[0043] If the acquisition of basic information fails (step S102, No branch), the pre-preparation control unit 202 notifies the user that the pre-preparation has failed (step S103). At that time, the pre-preparation control unit 202 may also notify the user that the acquired password is incorrect.

[0044] If the acquisition of the four basic pieces of information is successful (step S102, Yes branch), the pre-preparation control unit 202 stores the acquired four basic pieces of information and the My Number facial image (step S104). The pre-preparation control unit 202 stores the four basic pieces of information and the My Number facial image in the storage unit 204.

[0045] Subsequently, the pre-preparation control unit 202 notifies the user that the pre-preparation has been successful (step S105).

[0046] The identity verification control unit 203 is a means for executing controls related to user identity verification. More specifically, the identity verification control unit 203 receives information necessary for identity verification from the reception terminal 10. The identity verification control unit 203 functions as a means for providing this information.

[0047] Figure 6 is a flowchart showing an example of the operation of the identity verification control unit 203 according to the embodiment disclosed in this application. The operation of the identity verification control unit 203 will be explained with reference to Figure 6.

[0048] When a user performs a predetermined operation in the application (for example, pressing the identity verification button), the identity verification control unit 203 takes a picture of the user and acquires a selfie face image (step S201). The identity verification control unit 203 acquires a selfie face image through what is known as a self-portrait.

[0049] When a selfie face image is acquired, the identity verification control unit 203 performs a matching process using the two face images (the My Number face image stored in the storage unit 204 and the selfie face image) (step S202).

[0050] Specifically, the identity verification control unit 203 generates feature quantities from each of the two facial images.

[0051] Regarding the feature generation process, existing technologies can be used, so a detailed explanation will be omitted. For example, the identity verification control unit 203 extracts the eyes, nose, mouth, etc., from the face image as feature points. Then, the identity verification control unit 203 calculates the position of each feature point and the distance between each feature point as feature quantities (generating a feature vector consisting of multiple feature quantities).

[0052] Next, the identity verification control unit 203 performs a matching process (authentication process) using the two generated feature quantities. Specifically, the identity verification control unit 203 calculates the similarity between corresponding face images using the two feature quantities.

[0053] The identity verification control unit 203 determines whether the two images are facial images of the same person based on the result of thresholding the calculated similarity. The similarity can be calculated using methods such as the chi-squared distance or the Euclidean distance. The greater the distance, the lower the similarity; the closer the distance, the higher the similarity.

[0054] If the similarity is greater than a predetermined value (if the distance is shorter than a predetermined value), the identity verification control unit 203 determines that the matching process was successful. If the similarity is less than or equal to the predetermined value, the identity verification control unit 203 determines that the matching process failed.

[0055] If the matching process fails (step S203, No branch), the identity verification control unit 203 notifies the user that identity verification has failed (step S204).

[0056] If the matching process is successful (step S203, Yes branch), the identity verification control unit 203 generates a two-dimensional barcode using the four basic pieces of information stored in the memory unit 204 (step S205). The identity verification control unit 203 converts the four basic pieces of information into the format of a two-dimensional barcode.

[0057] The identity verification control unit 203 displays the generated 2D barcode (step S206).

[0058] In this manner, the identity verification control unit 203 acquires the user's second biometric information in response to the user's operation and performs a matching process using the first biometric information stored in the storage unit 204 and the acquired second biometric information. If the matching process is successful, the identity verification control unit 203 provides the four basic pieces of information stored in the storage unit 204 to an external device (reception terminal 10). At that time, the identity verification control unit 203 generates a two-dimensional barcode using the four basic pieces of information and displays the generated two-dimensional barcode.

[0059] The memory unit 204 is a means for storing information necessary for the operation of the terminal 20. The memory unit 204 stores the four basic pieces of information acquired by the pre-preparation control unit 202 and the first biometric information (My Number facial image).

[0060] [Reception terminal] Figure 7 shows an example of the processing configuration (processing module) of the reception terminal 10 according to the embodiment disclosed in this application. Referring to Figure 7, the reception terminal 10 comprises a communication control unit 301, an identity verification control unit 302, and a storage unit 303.

[0061] The communication control unit 301 is a means for controlling communication with other devices. For example, the communication control unit 301 communicates with the IC chip embedded in the My Number Card using NFC (Near Field Communication). The communication control unit 301 passes data received from other devices to other processing modules. The communication control unit 301 transmits data acquired from other processing modules to other devices. In this way, other processing modules send and receive data with other devices via the communication control unit 301.

[0062] The identity verification control unit 302 is a means for performing control related to the identity verification of users who wish to receive the service.

[0063] The identity verification control unit 302 has functions as a first acquisition means, a second acquisition means, and an identity verification means. The first acquisition means acquires the first four basic pieces of information obtained from the user's identification document from the terminal 20 held by the user. The second acquisition means acquires the second four basic pieces of information from the identification document held by the user. The identity verification means verifies the user's identity using the first and second four basic pieces of information.

[0064] Figure 8 is a flowchart showing an example of the operation of the identity verification control unit 302 according to the embodiment disclosed in this application. The operation of the identity verification control unit 302 will be explained with reference to Figure 8.

[0065] The identity verification control unit 302 attempts to obtain the four basic pieces of information from the user's terminal 20 (step S301).

[0066] For example, an employee of the service provider instructs the user to display a 2D barcode reader on terminal 20 and to scan the displayed 2D barcode with the 2D barcode reader.

[0067] Alternatively, the identity verification control unit 302 displays a screen as shown in Figure 9 on a display visible to the user. For example, the identity verification control unit 302 displays a two-dimensional barcode using a screen as shown in Figure 9 and instructs the user to have the displayed two-dimensional barcode read by a two-dimensional barcode reader.

[0068] The identity verification control unit 302 controls the 2D barcode reader to read the 2D barcode. The identity verification control unit 302 decodes the read 2D barcode to obtain the four basic pieces of information.

[0069] If basic four pieces of information cannot be obtained from terminal 20 (step S302, No branch), the identity verification control unit 302 notifies the service provider's employees, etc., that the user's identity verification has failed (step S303). For example, if basic four pieces of information cannot be obtained even after decrypting the scanned 2D barcode, the identity verification control unit 302 notifies the service provider's employees, etc., that the identity verification has failed.

[0070] If basic four pieces of information can be obtained from terminal 20 (step S302, Yes branch), the identity verification control unit 302 attempts to obtain basic four pieces of information from the My Number Card held by the user (step S304).

[0071] For example, the identity verification control unit 302 uses a GUI (Graphical User Interface) to obtain a password from the user to read information from the IC chip of the My Number Card.

[0072] The identity verification control unit 302 transmits the acquired password to the IC chip of the My Number Card. If the password is correct, the identity verification control unit 302 can obtain the user's basic four pieces of information from the IC chip of the My Number Card.

[0073] If obtaining the four basic pieces of information fails (step S305, No branch), the identity verification control unit 302 notifies the service provider's employees, etc., that the user's identity verification has failed (step S303). In this case, the identity verification control unit 302 may also notify the employees and / or the user that the obtained password is incorrect.

[0074] When the basic four pieces of information are obtained (step S305, Yes branch), the identity verification control unit 302 determines whether the basic four pieces of information obtained from the IC chip of the My Number Card and the basic four pieces of information obtained from the terminal 20 match (basic four pieces of information determination process; step S306).

[0075] Specifically, the identity verification control unit 302 determines whether all or part of the items (name, gender, date of birth, address) included in each of the two sets of basic four information match. For example, if each of the items matches, the identity verification control unit 302 determines that the basic four information matches. If there is a mismatch in at least one of the items, the identity verification control unit 302 determines that the basic four information does not match.

[0076] If the four basic pieces of information do not match (step S307, No branch), the identity verification control unit 302 notifies the service provider's employees, etc., that the user's identity verification has failed (step S303).

[0077] If the four basic pieces of information match (step S307, Yes branch), the identity verification control unit 302 notifies the service provider's employees, etc., that the user's identity has been successfully verified (step S308).

[0078] In this way, the identity verification control unit 302 obtains a two-dimensional barcode from the terminal 20 held by the user and decrypts the obtained two-dimensional barcode to obtain the first four basic pieces of information. The identity verification control unit 302 obtains the second four basic pieces of information from the IC (Integrated Circuit) chip installed in the identification document held by the user. The identity verification control unit 302 uses the two obtained pieces of four basic pieces of information to verify the user's identity.

[0079] The memory unit 303 is a means for storing information necessary for the operation of the reception terminal 10.

[0080] Next, a modified example of the first embodiment will be described.

[0081] <Example 1> Terminal 20 may provide the reception terminal 10 with other information in addition to the four basic pieces of information. For example, the pre-preparation control unit 202 may acquire other personal information of the user (e.g., telephone number, email address) and store it in the storage unit 204. Alternatively, the pre-preparation control unit 202 may acquire ID information used by the service provider to manage the user, such as the patient ID number written on the hospital patient ID card, and store it in the storage unit 204.

[0082] The identity verification control unit 203 may generate a two-dimensional barcode using the above-mentioned personal information and ID information in addition to the four basic pieces of information.

[0083] Service providers may use personal information and ID information obtained along with the four basic pieces of information to provide services.

[0084] Alternatively, the identity verification control unit 203 may generate a 2D barcode for each service or purpose provided. For example, the identity verification control unit 203 may generate a 2D barcode from the four basic pieces of information and the patient ID number as a 2D barcode for submission to the hospital and provide it to the reception terminal 10.

[0085] In this case, the identity verification control unit 203 may display a list of services or uses in response to the user's operation and allow the user to select the content to be provided to the service provider (items to be included in the 2D barcode) (see Figure 10).

[0086] <Modification 2> Terminal 20 may provide the reception terminal 10 with a two-dimensional barcode containing information to improve the reliability of identity verification. For example, when the identity verification control unit 203 generates a two-dimensional barcode, it may also generate information regarding the date and time the two-dimensional barcode was generated.

[0087] For example, the identity verification control unit 203 may generate a time code (one-time code) based on the current time when the 2D barcode is generated. The identity verification control unit 203 converts the four basic pieces of information and the time code into a 2D barcode.

[0088] The identity verification control unit 302 of the reception terminal 10 verifies the time code (the date and time the 2D barcode was generated) obtained by decoding the 2D barcode. The identity verification control unit 302 may also verify the validity of the acquired 2D barcode using the date and time the 2D barcode was acquired and the time code (the date and time the 2D barcode was generated).

[0089] Specifically, the identity verification control unit 302 will not trust the acquired 2D barcode and will determine that identity verification has failed if the relationship between the acquisition date and time of the 2D barcode and the generation date and time of the 2D barcode is unnatural. For example, the identity verification control unit 302 may determine that identity verification has failed if the acquisition date and time of the 2D barcode and the generation date and time of the 2D barcode are separated by more than a predetermined time.

[0090] In this manner, the identity verification control unit 203 of terminal 20 provides information (time code) regarding the date and time the 2D barcode was generated to an external device (for example, the reception terminal 10). The identity verification control unit 302 of reception terminal 10 obtains information regarding the date and time the 2D barcode was generated from terminal 20 held by the user. The identity verification control unit 302 determines that the user's identity has been successfully verified if the difference between the user's authentication date and time (date and time the 2D barcode was acquired) and the date and time the 2D barcode was generated is less than or equal to a predetermined time.

[0091] <Variation 3> The user's terminal 20 may be a smartphone or other device with built-in My Number Card functionality. In this case, terminal 20 does not need to perform any prior preparation to read the four basic pieces of information from the My Number Card. Terminal 20 converts the four basic pieces of information obtained from the My Number Card into a two-dimensional barcode in response to the user's operation and displays the two-dimensional barcode.

[0092] The reception terminal 10 obtains basic four pieces of information from the My Number Card embedded in terminal 20 using NFC (Near Field Communication) or the like. The reception terminal 10 also decodes the 2D barcode presented by the user to obtain the basic four pieces of information. The reception terminal 10 uses these two sets of basic four pieces of information to verify the user's identity.

[0093] Furthermore, the authentication function of a smartphone with built-in My Number Card functionality cannot be used as a substitute for identity verification by service providers. This is because a smartphone lock can be unlocked by a third party other than the owner by entering a PIN (Personal Identification Number), and such a third party can register fingerprints or facial images after the lock has been removed.

[0094] <Modification 4> Terminal 20 may determine the validity of the My Number Card during the pre-preparation for identity verification. Specifically, the pre-preparation control unit 202 reads the electronic certificate (digital signature certificate, user certificate electronic signature) from the My Number Card along with the four basic pieces of information and the facial image.

[0095] The pre-preparation control unit 202 sends the acquired digital certificate to a certification authority called J-LIS (Japan Agency for Local Authority Information Systems) and requests a determination of the validity of the digital certificate.

[0096] The certification authority determines the validity of the electronic certificate. Upon receiving notification from the certification authority that the electronic certificate is valid, the pre-preparation control unit 202 determines that the My Number Card held by the user is valid. If the My Number Card held by the user is valid, the pre-preparation control unit 202 stores the four basic pieces of information and the facial image obtained from the My Number Card.

[0097] <Modification 5> In the above embodiment, the case in which basic information 4 acquired in advance using a two-dimensional barcode is transmitted and received between terminal 20 and reception terminal 10 was described. However, the basic information 4 acquired in advance may also be transmitted and received between terminal 20 and reception terminal 10 using short-range wireless communication means such as Bluetooth® or NFC (Near Field Communication).

[0098] As described above, in the information processing system according to the first embodiment, the user registers the four basic pieces of information and a facial image written on the My Number Card in advance with the terminal 20. That is, the terminal 20 performs identity verification using the My Number Card in advance and stores the four basic pieces of information and a facial image of the My Number Card holder. When the user visits a service provider and wishes to receive a service, the terminal 20 acquires the user's facial image and performs a matching process using the acquired facial image and the previously acquired facial image. The terminal 20 determines through this matching process whether the user undergoing identity verification is the My Number Card holder or not. If the matching process is successful, the terminal 20 provides the four basic pieces of information obtained from the My Number Card to the reception terminal 10. The reception terminal 10 compares the four basic pieces of information obtained from the terminal 20 with the four basic pieces of information obtained from the My Number Card held by the user. If the two pieces of basic information (information that functions as identification information to identify the My Number Card) match, the reception terminal 10 determines that the My Number Card presented by the user and the My Number Card used in the prior identity verification are the same. In this case, the reception terminal 10 determines that it has successfully verified the user's identity.

[0099] In this way, the reception terminal 10 and terminal 20 divide and execute multiple processes necessary for identity verification using the My Number Card, while varying the timing of their execution. More specifically, terminal 20 performs identity verification using the My Number Card before the user visits the service location. When the user visits the service location, terminal 20 performs facial recognition to determine whether the name on the My Number Card matches the user of terminal 20. Finally, reception terminal 10 determines whether the My Number Card presented by the user matches the My Number Card used during the prior identity verification. As a result, reception terminal 10 does not need a camera to acquire the user's (authenticated person's) biometric information, and the manufacturing cost of reception terminal 10 is reduced.

[0100] In this context, identity verification using My Number cards, etc., is often performed by service provider employees or others visually comparing the facial image printed on the My Number card with the user's face. However, visual verification has accuracy issues. The information processing system disclosed in this application uses biometric authentication for identity verification, thus preventing fraud such as receiving services using someone else's My Number card.

[0101] Next, we will describe the hardware of each device that makes up the information processing system. Figure 11 shows an example of the hardware configuration of the reception terminal 10.

[0102] The reception terminal 10 can be configured using an information processing device (a so-called computer), and has the configuration illustrated in Figure 11. For example, the reception terminal 10 includes a processor 311, memory 312, input / output interface 313, and communication interface 314, etc. The components of the processor 311, etc., are connected by an internal bus or the like and are configured to communicate with each other.

[0103] However, the configuration shown in Figure 11 is not intended to limit the hardware configuration of the reception terminal 10. The reception terminal 10 may include hardware not shown, and it may not have to have an input / output interface 313 if necessary. Also, the number of processors 311 etc. included in the reception terminal 10 is not intended to be limited to the example in Figure 11; for example, multiple processors 311 may be included in the reception terminal 10.

[0104] The processor 311 is a programmable device such as a CPU (Central Processing Unit), MPU (Micro Processing Unit), or DSP (Digital Signal Processor). Alternatively, the processor 311 may be a device such as an FPGA (Field Programmable Gate Array) or ASIC (Application Specific Integrated Circuit). The processor 311 executes various programs, including an operating system (OS).

[0105] Memory 312 includes RAM (Random Access Memory), ROM (Read Only Memory), HDD (Hard Disk Drive), SSD (Solid State Drive), etc. Memory 312 stores the OS program, application programs, and various data.

[0106] The input / output interface 313 is an interface for a display device or input device (not shown). The display device is, for example, a liquid crystal display. The input device is, for example, a device that accepts user input such as a keyboard or mouse.

[0107] The communication interface 314 is a circuit, module, etc., that communicates with other devices. For example, the communication interface 314 includes a NIC (Network Interface Card), etc.

[0108] The functions of the reception terminal 10 are realized by various processing modules. These processing modules are realized, for example, by the processor 311 executing a program stored in the memory 312. The program can also be recorded on a computer-readable storage medium. The storage medium can be a non-transitory material such as semiconductor memory, hard disk, magnetic recording medium, or optical recording medium. In other words, the present invention can also be embodied as a computer program product. Furthermore, the program can be downloaded via a network or updated using the storage medium on which the program is stored. Moreover, the processing module may be realized by a semiconductor chip.

[0109] In addition, terminal 20 can also be configured using an information processing device, similar to reception terminal 10, and its basic hardware configuration is no different from that of reception terminal 10, so a detailed explanation will be omitted.

[0110] The reception terminal 10, which is an information processing device, is equipped with a computer, and its functions can be realized by having the computer execute a program. Furthermore, the reception terminal 10 executes a control method for the reception terminal 10 using this program. Similarly, the terminal 20 is equipped with a computer, and its functions can be realized by having the computer execute a program. Furthermore, the terminal 20 executes a control method for the terminal 20 using this program.

[0111] [Differentiation] The configuration and operation of the information processing system described in the above embodiment are illustrative examples and are not intended to limit the system configuration.

[0112] In the above embodiment, the My Number Card was used as an example of an identification document to explain the configuration and operation of the identity verification service. However, other identification documents such as passports and driver's licenses may also be used.

[0113] In the above embodiment, the terminal 20 was described as acquiring the four basic pieces of information and the My Number facial image from the IC (Integrated Circuit) installed in the My Number Card. However, the terminal 20 may also acquire the four basic pieces of information and the My Number facial image by taking a photograph of the My Number Card itself. In this case, the terminal 20 applies OCR (Optical Character Recognition) technology to the image data obtained by photographing the My Number Card to acquire the four basic pieces of information such as name and gender. The terminal 20 also extracts the face region from the image data and acquires a facial image.

[0114] Some functions of reception terminal 10 and terminal 20 may be implemented in other devices or equipment. More specifically, it is sufficient if the "identity verification control unit (identity verification control means)" described above is implemented in any of the devices included in the system.

[0115] In the flowcharts (sequence diagrams) used in the above description, multiple processes (processes) are shown in order, but the execution order of the processes performed in the embodiment is not limited to the order in which they are shown. In the embodiment, the order of the illustrated processes can be changed to the extent that it does not impair the content, for example, by executing each process in parallel.

[0116] The embodiments described above are explained in detail to facilitate understanding of the disclosure, and it is not intended that all the configurations described above are necessary. Furthermore, when multiple embodiments are described, each embodiment may be used individually or in combination. For example, it is possible to replace parts of the configuration of one embodiment with those of another embodiment, or to add configurations from other embodiments to the configuration of one embodiment. In addition, it is possible to add, delete, or replace parts of the configuration of one embodiment with those of another.

[0117] As described above, the industrial applicability of the present invention is clear, and it is particularly suitable for application to information processing systems that verify the identity of users.

[0118] Some or all of the above embodiments may also be described as follows, but are not limited to the following:

[0119] [Note 1] A first acquisition means for obtaining the first four basic pieces of information obtained from the user's identification document from a terminal owned by the user, A second means of obtaining the second set of basic four pieces of information from the identification document held by the user, A means for verifying the identity of the user using the four basic pieces of information described in the first and second sections above, A reception terminal equipped with the following features.

[0120] [Note 2] The aforementioned identity verification means is a reception terminal as described in Appendix 1, which determines that the user's identity has been successfully verified when each of the items included in the first and second sets of basic information matches.

[0121] [Note 3] The first acquisition means acquires a two-dimensional barcode from the terminal held by the user, and acquires the first four basic pieces of information by decoding the acquired two-dimensional barcode. The second acquisition means is a reception terminal as described in Appendix 2, which acquires the second set of basic four pieces of information from an IC (Integrated Circuit) chip embedded in an identification card held by the user.

[0122] [Note 4] The first acquisition means acquires information regarding the date and time the two-dimensional barcode was generated from the terminal held by the user, The identity verification means is a reception terminal as described in Appendix 3, which determines that the user's identity has been successfully verified when the difference between the user's authentication date and time and the date and time the two-dimensional barcode was generated is less than or equal to a predetermined time.

[0123] [Note 5] The means of obtaining basic four pieces of information and first biometric information from the user's identification document, A storage means for storing the four basic pieces of information acquired and the first biological information, A providing means that, in response to the user's operation, acquires the user's second biometric information, performs a matching process using the stored first biometric information and the acquired second biometric information, and, upon success in the matching process, provides the stored basic four pieces of information to an external device. A terminal equipped with the following features.

[0124] [Note 6] The aforementioned providing means is a terminal as described in Appendix 5, which generates a two-dimensional barcode using the basic four pieces of information and displays the generated two-dimensional barcode.

[0125] [Note 7] The providing means is a terminal as described in Appendix 6, which provides the external device with information regarding the date and time the two-dimensional barcode was generated.

[0126] [Note 8] The aforementioned identification document is a My Number Card, and the terminal is one of the items specified in any one of the appendices 5 to 7.

[0127] [Note 9] At the reception terminal, The first four basic pieces of information obtained from the user's identification document are acquired from the terminal held by the user. The second set of basic information is obtained from the identification document held by the aforementioned user. A method for controlling a reception terminal to verify the identity of the user using the four basic pieces of information described above (the first and second pieces of information).

[0128] [Note 10] The computer installed in the reception terminal, The process involves obtaining the first four basic pieces of information obtained from the user's identification document from the terminal owned by the user, The process of obtaining the second set of basic information from the identification document held by the user, A process for verifying the identity of the user using the four basic pieces of information described in the first and second sections above, A program that executes the command.

[0129] Furthermore, some or all of the configurations described in Appendices 2 to 4, which are subordinate to Appendice 1 above, may also be subordinate to Appendices 9 and 10 in the same way as those described in Appendices 2 to 4. Moreover, not limited to Appendices 1, 9 and 10, some or all of the configurations described as appendices may also be subordinate to various hardware, software, various recording means for recording software, or systems, without departing from the embodiments described above.

[0130] Furthermore, each disclosure of the above-mentioned prior art documents cited herein is incorporated herein by reference. Although embodiments of the present invention have been described above, the present invention is not limited to these embodiments. It will be understood by those skilled in the art that these embodiments are merely illustrative and that various modifications are possible without departing from the scope and spirit of the present invention. That is, the present invention naturally includes the entire disclosure, including the claims, and various modifications and alterations that can be made by those skilled in the art in accordance with the technical idea. [Explanation of Symbols]

[0131] 10 Reception terminal 20 devices 100 Reception terminals 101 First means of acquisition 102 Second means of acquisition 103. Methods of Identity Verification 201 Communication Control Unit 202 Pre-preparation control unit 203 Identity Verification Control Unit 204 Storage section 301 Communication Control Unit 302 Identity Verification Control Unit 303 Storage section 311 Processors 312 memory 313 Input / Output Interfaces 314 Communication Interface

Claims

1. A first acquisition means for obtaining the first four basic pieces of information obtained from the user's identification document from a terminal owned by the user, A second acquisition means for obtaining the second set of basic four pieces of information from the identification document held by the user, A means for verifying the identity of the user using the four basic pieces of information described above, A reception terminal equipped with the following features.

2. The reception terminal according to claim 1, wherein the identity verification means determines that the user's identity has been successfully verified when each of the items included in the first and second basic four pieces of information matches.

3. The first acquisition means acquires a two-dimensional barcode from the terminal held by the user, and acquires the first basic four pieces of information by decrypting the acquired two-dimensional barcode. The reception terminal according to claim 2, wherein the second acquisition means acquires the second basic four pieces of information from an IC (Integrated Circuit) chip mounted on an identification card held by the user.

4. The first acquisition means acquires information regarding the date and time the two-dimensional barcode was generated from the terminal held by the user, The reception terminal according to claim 3, wherein the identity verification means determines that the user's identity has been successfully verified when the difference between the user's authentication date and time and the date and time the two-dimensional barcode was generated is less than or equal to a predetermined time.

5. The means of obtaining the four basic pieces of information and the first biometric information from the user's identification document, A storage means for storing the four basic pieces of information acquired and the first biological information, A providing means that, in response to the user's operation, acquires the user's second biometric information, performs a matching process using the stored first biometric information and the acquired second biometric information, and, upon success in the matching process, provides the stored basic four pieces of information to an external device. A terminal equipped with the following features.

6. The terminal according to claim 5, wherein the providing means generates a two-dimensional barcode using the basic four information and displays the generated two-dimensional barcode.

7. The terminal according to claim 6, wherein the providing means provides the external device with information regarding the date and time the two-dimensional barcode was generated.

8. The terminal according to any one of claims 5 to 7, wherein the aforementioned identification document is a My Number Card.

9. At the reception terminal, The first four basic pieces of information obtained from the user's identification document are acquired from the terminal held by the user. The second set of basic information is obtained from the identification document held by the aforementioned user. A method for controlling a reception terminal to verify the identity of the user using the four basic pieces of information described above (the first and second pieces of information).

10. The computer installed in the reception terminal, The process involves obtaining the first four basic pieces of information obtained from the user's identification document from the terminal owned by the user, The process of obtaining the second set of basic information from the identification document held by the user, A process for verifying the identity of the user using the four basic pieces of information described in the first and second sections above, A program that executes the command.

Images