Methods for preventing special fraud, programs for preventing special fraud, and systems for preventing special fraud

Abstract

This invention provides a method, program, and system for preventing special fraud that can detect impersonation of the other party during phone calls or other communications. [Solution] The special fraud prevention method disclosed herein involves registering terminals with biometric information already configured, storing the biometric information of a designated terminal, and if the terminal of the recipient of a call (outgoing, incoming, missed call, etc.) has biometric information configured, the method requests authentication from the recipient's terminal and compares the authenticated biometric information on the recipient's terminal with the stored biometric information.

Description

Technical Field

[0001] The present disclosure relates to a special fraud prevention method, a special fraud prevention program, and a special fraud prevention system.

Background Art

[0002] Patent Document 1 describes a communication processing system capable of collecting information about a sender with a high probability of being a fraudster.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Means for Solving the Problems

[0004] A special fraud prevention method according to an aspect of the present disclosure includes a registration step in which a system including a server and a plurality of terminals including a user terminal registers a set telephone number, which is a telephone number of a terminal for which biometric information for biometric authentication has been set, among the plurality of terminals; a storage step in which the system acquires and stores designated biometric information set in the terminal corresponding to a designated telephone number specified by the user terminal among the plurality of terminals; a request step in which the system requests biometric authentication in the counterpart terminal based on that the telephone number of the counterpart terminal, which is the party of the call process executed in the user terminal, is registered as the set telephone number; an acquisition step in which the system acquires authenticated biometric information that has been biometrically authenticated in the counterpart terminal that has received the request; and a collation step in which the system collates the authenticated biometric information and the designated biometric information.

[0005] A special fraud prevention program according to one form of this disclosure causes one or more computers in a system comprising a server and multiple terminals including a user terminal to execute: a registration step of registering configured telephone numbers, which are telephone numbers of terminals among the multiple terminals for which biometric information for biometric authentication has been set; a storage step of acquiring and storing designated biometric information set on a terminal from among the multiple terminals corresponding to a designated telephone number specified by the user terminal; a request step of requesting biometric authentication at the other terminal based on the fact that the telephone number of the other terminal that is the recipient of a call processing performed by the user terminal is registered as the configured telephone number; an acquisition step of acquiring authenticated biometric information that has been authenticated at the other terminal that received the request; and a matching step of comparing the authenticated biometric information with the designated biometric information.

[0006] A special fraud prevention system according to one form of the present disclosure is a system comprising a server and a plurality of terminals including a user terminal, comprising: a registration unit that registers a configured telephone number which is the telephone number of a terminal among the plurality of terminals for which biometric information for biometric authentication has been set; a storage unit that acquires and stores designated biometric information set on a terminal from among the plurality of terminals corresponding to a designated telephone number specified by the user terminal; a request unit that requests biometric authentication on the other terminal based on the fact that the telephone number of the other terminal that is the recipient of a call processing performed on the user terminal is registered as the configured telephone number; an acquisition unit that acquires authenticated biometric information authenticated on the other terminal that has received the request; and a matching unit that compares the authenticated biometric information with the designated biometric information. [Brief explanation of the drawing]

[0007] [Figure 1] This block diagram shows the outline configuration of the special fraud prevention system related to this disclosure. [Figure 2]This block diagram shows the functional configuration of the special fraud prevention system related to this disclosure. [Figure 3] This block diagram shows an example configuration of the special fraud prevention system related to this disclosure. [Figure 4] This flowchart shows an example of the flow of methods for preventing special fraud related to this disclosure. [Figure 5] This flowchart shows an example of the flow of methods for preventing special fraud related to this disclosure. [Figure 6] This flowchart shows an example of the flow of methods for preventing special fraud related to this disclosure. [Figure 7] This flowchart shows an example of the flow of methods for preventing special fraud related to this disclosure. [Figure 8] This block diagram shows an example configuration of the special fraud prevention system related to this disclosure. [Figure 9] This flowchart shows an example of the flow of methods for preventing special fraud related to this disclosure. [Figure 10] This flowchart shows an example of the flow of methods for preventing special fraud related to this disclosure. [Figure 11] This flowchart shows an example of the flow of methods for preventing special fraud related to this disclosure. [Figure 12] This flowchart shows an example of the flow of methods for preventing special fraud related to this disclosure. [Figure 13] This flowchart shows an example of the flow of methods for preventing special fraud related to this disclosure. [Figure 14] This flowchart shows an example of the flow of methods for preventing special fraud related to this disclosure. [Figure 15] This flowchart shows an example of the flow of methods for preventing special fraud related to this disclosure. [Figure 16] This flowchart shows an example of the flow of methods for preventing special fraud related to this disclosure. [Figure 17] This flowchart shows an example of the flow of methods for preventing special fraud related to this disclosure. [Modes for carrying out the invention]

[0008] Hereinafter, one embodiment of this disclosure will be described in detail with reference to the drawings. For ease of understanding, the background and challenges of this disclosure will be described first, followed by a detailed description of the disclosure. <Special fraud> In recent years, telephone-based fraud has been increasing. To prevent telephone-based fraud, it is useful to determine whether the person making the call (for example, the person who called, the person who called, the person who missed a call, etc.) is impersonating someone. Traditionally, impersonation of the person making the call was sometimes determined by, for example, the phone number of the other party. However, this method has the problem that it cannot make an appropriate judgment if a third party uses the terminal of the person being impersonated, or if the person making the call uses a terminal different from their usual one. One of the purposes of this disclosure is to provide a technology for determining whether the person making the call is impersonating someone. <Overview of Special Fraud Prevention System 1> The special fraud prevention system 1 in this disclosure registers terminals with biometric information configured, stores the biometric information of a designated terminal, and if the terminal of the recipient of a call (outgoing, incoming, missed call, etc.) has biometric information configured, it requests authentication from the recipient's terminal and compares the authenticated biometric information on the recipient's terminal with the stored biometric information.

[0009] More specifically, the special fraud prevention system 1 is a system including a server and a plurality of terminals including user terminals, and among the plurality of terminals, a registration unit that registers a set phone number that is the phone number of a terminal for which biometric information for biometric authentication has been set, and among the plurality of terminals, from a terminal corresponding to a designated phone number designated by the user terminal, a storage unit that acquires and stores designated biometric information set for the terminal, and based on the fact that the phone number of the partner terminal that is the partner of the call process executed in the user terminal is registered as the set phone number, a request unit that requests biometric authentication in the partner terminal, an acquisition unit that acquires authenticated biometric information that has been biometrically authenticated in the partner terminal that has received the request, and a collation unit that collates the authenticated biometric information and the designated biometric information.

[0010] According to the above configuration, since it is possible to determine that the partner terminal for a call or the like is a terminal for which biometric information has been set, it is possible to smoothly perform authentication on the partner terminal. And by collating the biometric information authenticated in the partner terminal with the pre-stored biometric information, it is possible to determine whether the partner for a call or the like is an impostor.

[0011] Hereinafter, the special fraud prevention system 1 will be described while referring to the drawings.

[0012] FIG. 1 is a block diagram showing a schematic configuration of the special fraud prevention system 1 according to the present disclosure.

[0013] FIG. 2 is a block diagram showing a functional configuration of the special fraud prevention system 1 according to the present disclosure. <Configuration of the special fraud prevention system 1> As shown in FIG. 1, the special fraud prevention system 1 includes a server 10 and a plurality of terminals 20 connected via a network N. The plurality of terminals 20 includes user terminals used by users who utilize the services provided by the special fraud prevention system 1. For the sake of convenience, among the plurality of terminals 20, the user terminal in one aspect is also described as "Terminal A", and the terminals other than the user terminal are also described as Terminal B, Terminal C, etc. However, this does not prevent Terminal B, C, etc. from becoming user terminals in another aspect.

[0014] The network N may be a mobile communication system such as 3G, 4G, 5G, 6G, LTE (Long Term Evolution), Wi-Fi (registered trademark), or an in-house LAN.

[0015] <Basic Configuration of Server 10> The server 10 includes a processor 11, a main memory device 12, an auxiliary storage device 13, and a communication IF 14. These are electrically connected to each other via a communication bus.

[0016] The processor 11 executes instructions described in a program. The processor 11 is composed of an arithmetic unit, registers, and / or peripheral circuits, etc.

[0017] The main memory device 12 temporarily stores programs and data processed by the programs, etc., and is, for example, a volatile memory such as a DRAM (Dynamic Random Access Memory).

[0018] The auxiliary storage device 13 stores data and programs, and is, for example, a flash memory, HDD (Hard Disc Drive), or magneto-optical disk, etc.

[0019] The communication IF 14 is an interface for inputting and outputting signals for communicating with other computers via a network using wired or wireless communication standards.

[0020] <Basic configuration of terminal 20> The terminal 20 comprises a processor 21, main memory 22, auxiliary memory 23, communication IF 24, input device 25, and output device 26. These are electrically connected to each other via a communication bus.

[0021] The processor 21 executes instructions written in the program. The processor 21 consists of an arithmetic unit, registers, and / or peripheral circuits.

[0022] The main memory 22 temporarily stores programs and data processed by programs, and is a volatile memory such as DRAM (Dynamic Random Access Memory).

[0023] The auxiliary storage device 23 stores data and programs, and is, for example, a flash memory, an HDD (Hard Disk Drive), or a magneto-optical disk.

[0024] Communication IF24 is an interface for inputting and outputting signals for communication with other computers via a network using wired or wireless communication standards.

[0025] The input device 25 accepts input from the user and may include a camera 2031, a microphone 2032, a keyboard 2033, and a touch panel 2064, etc.

[0026] The output device 26 presents information to the user and may include a display 2041 and a speaker 2042.

[0027] <Functional Configuration> As shown in Figure 2, the special fraud prevention system 1 includes a registration unit 101, a storage unit 102, a request unit 103, an acquisition unit 104, a verification unit 105, and a recovery unit 106. Each unit may be centrally located or distributed within the special fraud prevention system 1; for example, some may be located on the server 10 and others on the user terminal (terminal A). The operation of each unit will be described later. <Example of processing by a special fraud prevention system> Next, the processing flow of the special fraud prevention system 1 will be explained with reference to Figures 3 to 17. Figures 3 and 8 are block diagrams showing example configurations of the special fraud prevention system 1 corresponding to the processing example related to this disclosure, and Figures 4 to 7 and 9 to 17 are flowcharts showing the processing example related to this disclosure, respectively.

[0028] <Biometric information is saved to the user's device> First, we will describe an example of a process for saving biometric information to a user terminal. A configuration example corresponding to this process is shown in Figure 3. As shown in Figure 3, the server 10 is equipped with a registration unit 101. Terminal A (user terminal) is equipped with a storage unit 102, a request unit 103, an acquisition unit 104, a matching unit 105, and a recovery unit 106.

[0029] First, let me explain the necessary preparations.

[0030] As shown in Figure 4, in step S1-1, the user of terminal B sets biometric information using an authentication application (an application for biometric authentication). The biometric information is not particularly limited as long as it is biometric information that can identify the user of terminal B, but it may be information such as fingerprints, iris scans, or facial features.

[0031] Next, in step S1-2, terminal B sends a message to server 10 indicating that it has set up biometric information. At the same time, terminal B also sends its telephone number to server 10.

[0032] In step S1-3, the registration unit 101 of the server 10 registers the phone number of terminal B as a configured phone number and notifies terminal B of the completion of registration. A configured phone number refers to the phone number of a terminal for which biometric information for biometric authentication has been configured. This allows terminal A to determine whether biometric authentication is possible on terminal B.

[0033] Steps S1-2 to S1-3 can be performed similarly for terminal C and other terminals 20.

[0034] In step S1-4, the storage unit 102 of terminal A sends a request to transmit biometric information to a designated telephone number. The designated telephone number is a telephone number specified by terminal A based on user input to terminal A or the telephone book stored in terminal A. Here, the designated telephone number corresponds to terminal B.

[0035] In one example, the designated phone number could be the phone number of someone trusted by the user of terminal A.

[0036] In step S1-5, terminal B transmits the biometric information (specified biometric information) set on terminal B to terminal A, and the storage unit 102 of terminal A saves the specified biometric information. As a result, the storage unit 102 of terminal A can obtain and save the specified biometric information set on the terminal corresponding to the specified telephone number.

[0037] Next, as shown in Figure 5, we will explain the operation when terminal B makes a call to terminal A in step S2-1, and terminal A answers the call in step S2-2. In this case, terminal B becomes the other terminal that was the recipient of the call processing performed on terminal A.

[0038] In step S2-3, the request unit 103 of terminal A queries the server 10 in the background to check whether the phone number of terminal B is registered as a configured phone number.

[0039] In step S2-4, the registration unit 101 of the server 10 responds to the request unit 103 of terminal A whether or not the telephone number of terminal B is registered as a configured telephone number.

[0040] In step S2-5, the request unit 103 of terminal A displays on the screen via the output device 26 whether or not the telephone number of terminal B is registered as a configured telephone number.

[0041] In step S2-6, the request unit 103 of terminal A sends a biometric authentication request to the server 10 addressed to the telephone number of terminal B. The request unit 103 of terminal A may send the biometric authentication request automatically or manually (according to user input) based on the fact that the telephone number of terminal B is registered as a configured telephone number, and whether to do so automatically or manually may be configurable on terminal A.

[0042] In step S2-7, the server 10 requests biometric authentication from terminal B in response to the aforementioned request. In step S2-8, terminal B, having received the aforementioned request, performs biometric authentication and transmits the authenticated biometric information to terminal A.

[0043] In step S2-9, the acquisition unit 104 of terminal A acquires the authentication biometric information transmitted from terminal B. Then, the verification unit 105 of terminal A compares the authentication biometric information with the specified biometric information stored in terminal A.

[0044] In one example, the matching unit 105 of terminal A may determine that authentication is successful if the specified biometric information stored in terminal A contains information that matches the authentication biometric information. Alternatively, if the specified biometric information stored in terminal A does not contain information that matches the authentication biometric information, the matching unit may determine that authentication is failed.

[0045] Furthermore, because the user's specified biometric information for terminal B is stored on terminal A, even if, for example, the user of terminal B makes a call to terminal A using terminal C, authentication will succeed when the authentication biometric information authenticated by the user of terminal B using terminal C is compared with the specified biometric information stored on terminal A. This allows the user of terminal A to make appropriate decisions even when the other party to a call is using a different terminal than usual.

[0046] Successful authentication indicates a low probability of impersonation, while failure to authenticate indicates a high probability of impersonation. Here, we will explain the case where authentication is successful. In step S2-10, the verification unit 105 of terminal A outputs the verification result from step S2-9 via the output device 26 of terminal A. For example, the output device 26 may notify the user of terminal A of the authentication result through vibration and screen display.

[0047] Next, we will explain the case where a third party is using terminal C and authentication fails, as shown in Figure 6.

[0048] Steps S3-1 to S3-8 are the same as steps S2-1 to S2-8. In step S3-9, the verification unit 105 of terminal A compares the authentication biometric information obtained from terminal C with the specified biometric information stored in terminal A, and determines that authentication has failed as a result of the comparison.

[0049] In step S3-10, the verification unit 105 of terminal A outputs the verification result from step S3-9 via the output device 26 of terminal A. For example, the output device 26 may notify the user of terminal A of the authentication result through vibration and screen display. In this case, the verification unit 105 may change the vibration pattern of the output device 26 depending on whether authentication is successful or unsuccessful to make it easy for service users to understand. Also, as in step S3-10, if the authentication biometric information and the specified biometric information are different, the verification unit 105 may notify a pre-configured recipient, such as a relative of the user of terminal A.

[0050] Next, we will explain a case where biometric information was previously set on terminal B, but biometric authentication can no longer be performed because the application for biometric authentication was subsequently uninstalled.

[0051] As shown in Figure 7, steps S4-1 to S4-7 are the same as steps S2-1 to S2-7. Since biometric authentication cannot be performed on terminal B, in step S4-8 there is no request response from terminal B to the authentication request in step S4-7 (timeout occurs). In this case, in step S4-9, server 10 notifies terminal A that the authentication request to terminal B failed (authentication request error).

[0052] In step S4-10, the recovery unit 106 of terminal A notifies only the user of terminal A that the authentication request has failed, via vibration and screen display through the output device 26. Then, in step S4-11, the recovery unit 106 may send a message (e.g., SMS) to terminal B prompting it to install an application for biometric authentication (authentication app).

[0053] <Biometric information is stored on the server> Next, we will describe an example of a process for saving biometric information to a server. A configuration example corresponding to this process is shown in Figure 8. As shown in Figure 8, the server 10 includes a registration unit 101, a storage unit 102, an acquisition unit 104, a matching unit 105, and a recovery unit 106. Terminal A (user terminal) includes a request unit 103.

[0054] First, let me explain the necessary preparations.

[0055] As shown in Figure 9, in step S5-1, the user of terminal B sets biometric information using an authentication application (an application for biometric authentication). The registration unit 101 of server 10 registers the phone number of terminal B as a configured phone number.

[0056] Next, in step S5-2, terminal A requests server 10 to save biometric information (specified biometric information) by linking terminal A's phone number with terminal B's phone number (specified phone number). Terminal B's phone number is the specified phone number designated by terminal A.

[0057] In step S5-3, the storage unit 102 of server 10 asks terminal B whether it is OK to link terminal A and terminal B and save the authentication information. Here, it is assumed that in step S5-4, the user of terminal B has given their consent to save the information. In step S5-5, terminal B sends the specified biometric information to the server in association with terminal B's phone number, and the storage unit 102 of server 10 saves the specified biometric information in association with the phone numbers of terminal A and terminal B. Then, in step S5-6, the storage unit 102 of server 10 notifies terminal B that the saving is complete, and in step S5-7, it notifies terminal A that the saving is complete.

[0058] The storage unit 102 of the server 10 stores information indicating that, in response to the request in step S5-2 from the telephone number of terminal A, authentication will be performed using the specified biometric information set on terminal B, associated with the telephone number of terminal B.

[0059] Next, as shown in Figure 10, we will explain the operation when terminal B makes a call to terminal A in step S6-1, and terminal A answers the call in step S6-2. In this case, terminal B becomes the other terminal that is the recipient of the call processing performed on terminal A.

[0060] In step S6-3, the request unit 103 of terminal A queries the server 10 in the background to check whether the phone number of terminal B is registered as a configured phone number.

[0061] In step S6-4, the registration unit 101 of the server 10 responds to the request unit 103 of terminal A whether or not the telephone number of terminal B is registered as a configured telephone number. Here, we assume that the telephone number of terminal B is registered as a configured telephone number.

[0062] In step S6-5, the request unit 103 of terminal A displays on the screen via the output device 26 that the telephone number of terminal B is registered as a configured telephone number.

[0063] In step S6-6, the request unit 103 of terminal A executes a biometric authentication request to terminal B's telephone number via the server 10. The request unit 103 of terminal A may execute the biometric authentication request automatically or manually (according to user input) based on the fact that terminal B's telephone number is registered as a configured telephone number, and whether to do so automatically or manually may be configurable on terminal A. The request unit 103 of terminal A may also include terminal A's telephone number in the request.

[0064] In step S6-7, the server 10 requests biometric authentication from terminal B in response to the aforementioned request.

[0065] Figure 11 shows an example of the continuation of the sequence shown in Figure 10. As shown in Figure 11, after steps S6-7, in step S7-8, terminal B is displayed a prompt asking if it is OK to start authentication using the information associated with terminal B's phone number. In step S7-9, if terminal B selects to authenticate using the information associated with terminal B's phone number, biometric authentication is performed on terminal B.

[0066] Then, in step S7-10, terminal B transmits its telephone number and the authentication biometric information authenticated on terminal B to server 10. As a result, the acquisition unit 104 of server 10 obtains terminal B's telephone number and the authentication biometric information authenticated on terminal B.

[0067] In step S7-11, the matching unit 105 of the server 10 checks whether it has stored the phone number of terminal B as the phone number associated with the specified biometric information in relation to terminal A. If it has, it checks whether the authentication biometric information matches the stored specified biometric information. Here, it is assumed that the authentication biometric information matches the stored specified biometric information and the matching result is authentication successful.

[0068] In step S7-12, the verification unit 105 of the server 10 notifies terminal A that authentication has been successful using terminal B's phone number. As a result, in step S7-13, the authentication result can be notified to the user of terminal A via the output device 26 of terminal A through vibration and screen display, so that only the user of terminal A can see it.

[0069] Therefore, it is possible to verify that the person you are talking to is the registered user of the authentication information, not only from their phone number but also from their biometric information.

[0070] Next, we will explain the case of authentication failure. Figure 12 shows an example of the continuation of the sequence shown in Figure 10. Steps S8-8 to S8-10 shown in Figure 12 are the same as steps S7-8 to S7-10. Here, in step S8-11, the authentication biometric information does not match the stored specified biometric information, and the matching result is authentication failure.

[0071] In step S8-12, the matching unit 105 of the server 10 notifies terminal A that authentication failed using terminal B's phone number. As a result, in step S8-13, the authentication result can be notified to the user of terminal A via the output device 26 of terminal A through vibration and screen display, so that only the user of terminal A can see it.

[0072] Thus, according to the special fraud prevention system 1, a third party who happens to obtain terminal B does not possess the biometric information of the original owner of terminal B, and therefore cannot impersonate the owner of terminal B.

[0073] Next, we will explain other cases of authentication failure. Figure 13 shows an example of the continuation of the sequence shown in Figure 10. However, we assume that terminal C, not terminal B, is the other terminal of terminal A.

[0074] As shown in Figure 13, after steps S6-7, in step S9-8, terminal C is prompted to ask if it is OK to start authentication using the information associated with terminal C's phone number. In step S9-9, if the user selects to authenticate using the information associated with terminal C's phone number, biometric authentication is performed on terminal C.

[0075] Then, in steps S9-10, terminal C transmits its telephone number and the authentication biometric information authenticated on terminal C to server 10. As a result, the acquisition unit 104 of server 10 obtains terminal C's telephone number and the authentication biometric information authenticated on terminal C.

[0076] In step S9-11, the matching unit 105 of the server 10 checks whether it has stored the phone number of terminal C as the phone number associated with the specified biometric information in relation to terminal A. If it has, it checks whether the authentication biometric information matches the stored specified biometric information. Here, we assume that terminal C's phone number has not been stored as the phone number associated with the specified biometric information for terminal A, and the matching result is authentication failure.

[0077] In step S9-12, the matching unit 105 of the server 10 notifies terminal A that authentication failed using terminal C's phone number. As a result, in step S9-13, the authentication result can be notified to the user of terminal A via the output device 26 of terminal A through vibration and screen display, so that only the user of terminal A can understand it.

[0078] Therefore, even if a third party uses the authentication app, the phone number of device C is not saved, resulting in authentication failure.

[0079] Next, we will describe other cases of successful authentication. Figure 14 shows an example of the continuation of the sequence shown in Figure 10. However, it is assumed that terminal D, not terminal B, is the other terminal of terminal A.

[0080] As shown in Figure 14, after steps S6-7, in step S10-8, terminal D is prompted to ask if it is OK to start authentication using the information associated with terminal D's phone number. In step S10-9, if terminal D does not select to authenticate using the information associated with terminal D's phone number, but instead enters terminal B's phone number and selects to authenticate using the information associated with terminal B's phone number, biometric authentication is performed on terminal D.

[0081] Then, in step S10-10, terminal D transmits terminal B's phone number and the authentication biometric information authenticated on terminal D to server 10. As a result, the acquisition unit 104 of server 10 obtains terminal B's phone number selected on terminal D (selected phone number) and the authentication biometric information authenticated on terminal D.

[0082] In step S10-11, the matching unit 105 of the server 10 checks whether terminal A has saved terminal B's telephone number (selected telephone number) as the telephone number associated with the specified biometric information. If it has saved it, it checks whether the authentication biometric information matches the saved specified biometric information. Here, it is assumed that terminal A has saved terminal B's telephone number as the telephone number associated with the specified biometric information, and the matching result is successful authentication.

[0083] In step S10-12, the verification unit 105 of the server 10 notifies terminal A that authentication has been performed using terminal B's phone number. As a result, in step S10-13, the authentication result can be notified to the user of terminal A via the output device 26 of terminal A through vibration and screen display, so that only the user of terminal A can see it.

[0084] Therefore, by using biometric information, it is possible to prove one's identity even when using different devices.

[0085] If the biometric authentication application is not installed on terminal D, the following behavior will occur.

[0086] Assume that steps S6-1 to S6-4 have been executed. In step S6-4, the server's registration unit 101 responds that the phone number of terminal D is not registered as a configured phone number. Therefore, in step S11-5, which follows step S6-4, the request unit 103 of terminal A displays on the screen via the output device 26 that the phone number of terminal D is not registered as a configured phone number.

[0087] In step S11-6, the request unit 103 of terminal A manually sends a biometric authentication request to the server 10 addressed to the telephone number of terminal D.

[0088] In step S11-7, the recovery unit 106 of the server 10 requests biometric authentication from terminal D based on the fact that terminal D's phone number is not registered as a configured phone number, and also sends terminal D information (such as a download URL) for installing the biometric authentication application.

[0089] In step S11-8, the user of terminal D downloads and installs a biometric authentication application (authentication app) based on the information received in step S11-7. Then, in step S11-9, if the user does not choose to authenticate using the information associated with terminal D's phone number, but instead enters terminal B's phone number and chooses to authenticate using the information associated with terminal B's phone number, biometric authentication is performed on terminal D. The process thereafter is the same as in steps S10-10 to S10-13.

[0090] In the above, we first described the operation when terminal B makes a call to terminal A and terminal A answers the call, but this embodiment is not limited to this.

[0091] For example, as shown in Figure 16, even if in step S12-1 terminal A makes a call to terminal B, and in step S12-2 terminal B answers the call, terminal B becomes the other terminal that handled the call processing performed by terminal A, and may perform the same processing as in step S2-3 or from step S6-3 onwards.

[0092] Furthermore, as shown in Figure 17, even if terminal B makes a call to terminal A in step S13-1, and terminal A does not answer the call in step S13-2 (missed call, abandoned call), terminal B becomes the other terminal that handled the call processing performed by terminal A, and may perform the same processing as in step S2-3 or from step S6-3 onwards.

[0093] As described above, the call processing performed at terminal A may be incoming call processing, outgoing call processing, or abandoned call processing.

[0094] <Examples of implementation using software> The functions of the server 10 and terminal 20 (hereinafter referred to as "devices") that constitute the special fraud prevention system 1 can be realized by programs that cause computers to function as the devices, and by programs that cause computers to function as each control block of the devices.

[0095] In this case, the device includes a computer having at least one control device (e.g., a processor) and at least one storage device (e.g., memory) as hardware for executing the program. By executing the program using this control device and storage device, the functions described in each of the embodiments are realized.

[0096] The above program may be recorded on one or more computer-readable recording media, not temporary ones. These recording media may or may not be provided by the above device. In the latter case, the program may be supplied to the above device via any wired or wireless transmission medium.

[0097] Furthermore, some or all of the functions of each of the above control blocks can also be realized by logic circuits. For example, an integrated circuit in which logic circuits functioning as each of the above control blocks are formed is also included in the scope of the present invention. In addition, it is also possible to realize the functions of each of the above control blocks by, for example, a quantum computer.

[0098] Furthermore, each process described in the above embodiments may be performed by AI (Artificial Intelligence). In this case, the AI ​​may operate on the control device described above, or it may operate on other devices (for example, an edge computer or a cloud server). <Summary> This disclosure includes at least the following aspects:

[0099] A special fraud prevention method according to Embodiment 1 of this Disclosure includes: a registration step in which a system comprising a server and a plurality of terminals including a user terminal registers a configured telephone number which is the telephone number of a terminal among the plurality of terminals for which biometric information for biometric authentication has been set; a storage step in which the system obtains and stores designated biometric information set on a terminal from among the plurality of terminals which corresponds to a designated telephone number specified by the user terminal; a request step in which the system requests biometric authentication on the counterparty terminal, which is the counterparty terminal that is the recipient of a call processing performed on the user terminal, based on the fact that the telephone number of the counterparty terminal is registered as the configured telephone number; an acquisition step in which the system obtains authenticated biometric information that has been authenticated on the counterparty terminal that received the request; and a matching step in which the system compares the authenticated biometric information with the designated biometric information.

[0100] According to the above configuration, the special fraud prevention method according to Embodiment 1 of this disclosure can determine that the recipient's terminal is one for which biometric information has been set, thereby enabling smooth authentication on the recipient's terminal. Then, by comparing the biometric information authenticated on the recipient's terminal with pre-stored biometric information, it is possible to determine if the recipient of the call is impersonating someone else.

[0101] The special fraud prevention method according to Embodiment 2 of this disclosure is characterized in that, in Embodiment 1, the system outputs the verification result via the user terminal during the verification step.

[0102] According to the above configuration, the special fraud prevention method relating to aspect 2 of this disclosure can present information for determining whether the other party in a phone call or other communication is impersonating someone else.

[0103] The special fraud prevention method according to Embodiment 3 of this Disclosure is characterized in that, in Embodiment 1, the storage step involves storing the designated biometric information on the user terminal, and in the verification step, the user terminal verifies the authentication biometric information against the designated biometric information.

[0104] According to the above configuration, the special fraud prevention method relating to aspect 3 of this disclosure can present information for determining whether the other party in a call is impersonating someone else by comparing biometric information authenticated on the other party's terminal with biometric information previously stored on the user's terminal.

[0105] A special fraud prevention method according to aspect 4 of the present disclosure further performs a first recovery step in which, in aspect 3, the system sends a message to the receiving terminal prompting it to install an application for biometric authentication, in response to the fact that biometric authentication is not performed on the receiving terminal that received the request.

[0106] According to the above configuration, the special fraud prevention method according to aspect 4 of this disclosure makes it possible to enable biometric authentication on the recipient's terminal in cases where biometric information was previously set on the recipient's terminal during a call, etc., but biometric authentication can no longer be performed because the application for biometric authentication was subsequently uninstalled.

[0107] The special fraud prevention method according to aspect 5 of this disclosure, in aspect 1, in the storage step, stores the designated biometric information in association with the designated telephone number on the server, and in the matching step, the server matches the authentication biometric information with the designated biometric information associated with the telephone number of the other party's terminal.

[0108] According to the above configuration, the special fraud prevention method relating to aspect 5 of this disclosure can present information for determining whether the other party in a call is impersonating another person by comparing biometric information authenticated on the other party's terminal with biometric information previously stored on the server in association with the other party's terminal.

[0109] The special fraud prevention method according to aspect 6 of this disclosure, in aspect 5, in the matching step, the server notifies the user terminal of authentication failure in response that the designated biometric information associated with the telephone number of the other terminal is not stored.

[0110] According to the above configuration, the special fraud prevention method relating to aspect 6 of this disclosure can notify an authentication failure when biometric information associated with the other party's terminal for calls, etc., is not stored on the server and impersonation cannot be determined.

[0111] A special fraud prevention method according to aspect 7 of the present disclosure, in aspect 1, in the storage step, the designated biometric information is stored on the server in association with the designated telephone number; in the acquisition step, the server acquires the authentication biometric information authenticated by the recipient terminal that received the request, and the selected telephone number selected for biometric authentication on the recipient terminal; and in the matching step, the server matches the authentication biometric information with the designated biometric information associated with the selected telephone number.

[0112] According to the above configuration, the special fraud prevention method relating to aspect 7 of this disclosure allows the server to select a telephone number to be used for authentication on the other party's terminal, and therefore, if the person who set the biometric information is using another terminal, information indicating that it is not an impersonation can be presented.

[0113] A special fraud prevention method according to aspect 8 of the present disclosure further performs a second recovery step in which, in any of aspects 1 to 7, the system transmits information for installing the biometric authentication application to the other party terminal based on the fact that the telephone number of the other party terminal is not registered as one of the configured telephone numbers.

[0114] According to the above configuration, the special fraud prevention method relating to aspect 8 of this disclosure can enable biometric authentication on the recipient's terminal for calls, etc.

[0115] The special fraud prevention method relating to aspect 9 of this disclosure is such that, in any of aspects 1 to 8, the call processing is an incoming call processing, an outgoing call processing, or an abandoned call processing.

[0116] According to the above configuration, the special fraud prevention method relating to aspect 9 of this disclosure can present information for determining whether the other party in a call or other communication is impersonating someone else at an appropriate time.

[0117] The special fraud prevention method according to aspect 10 of this disclosure, in any of aspects 1 to 9, in the matching step, the system notifies a pre-set notification destination when the authentication biometric information and the designated biometric information are different.

[0118] According to the above configuration, the special fraud prevention method relating to aspect 10 of this disclosure can make a report to a pre-set reporting destination when there is a high possibility of impersonation.

[0119] A special fraud prevention program according to aspect 11 of this disclosure causes one or more computers in a system comprising a server and multiple terminals including a user terminal to execute: a registration step of registering configured telephone numbers, which are telephone numbers of terminals among the multiple terminals for which biometric information for biometric authentication has been set; a storage step of acquiring and storing designated biometric information set on a terminal from among the multiple terminals corresponding to a designated telephone number specified by the user terminal; a request step of requesting biometric authentication on the other terminal based on the fact that the telephone number of the other terminal that is the recipient of a call processing performed on the user terminal is registered as the configured telephone number; an acquisition step of acquiring authenticated biometric information that has been authenticated by biometric authentication on the other terminal that received the request; and a comparison step of comparing the authenticated biometric information with the designated biometric information.

[0120] According to the above configuration, the special fraud prevention program according to aspect 11 of this disclosure has the same effect as the special fraud prevention method according to aspect 1 of this disclosure.

[0121] A special fraud prevention system according to aspect 12 of this disclosure is a system comprising a server and a plurality of terminals including a user terminal, comprising: a registration unit that registers a configured telephone number which is the telephone number of a terminal among the plurality of terminals for which biometric information for biometric authentication has been set; a storage unit that acquires and stores designated biometric information set on a terminal from among the plurality of terminals corresponding to a designated telephone number specified by the user terminal; a request unit that requests biometric authentication on the other terminal based on the fact that the telephone number of the other terminal that is the recipient of a call processing performed on the user terminal is registered as the configured telephone number; an acquisition unit that acquires authenticated biometric information authenticated on the other terminal that has received the request; and a matching unit that compares the authenticated biometric information with the designated biometric information.

[0122] According to the above configuration, the special fraud prevention system according to aspect 12 of this disclosure has the same effect as the special fraud prevention method according to aspect 1 of this disclosure.

[0123] (Additional notes) This disclosure is not limited to the embodiments described above, and various modifications are possible within the scope of the claims. Embodiments obtained by appropriately combining the technical means disclosed in different embodiments are also included in the technical scope of this disclosure.

[0124] This disclosure demonstrates that technology can be used to prevent telephone-based fraud and create a safer living environment, thereby contributing to the achievement of Sustainable Development Goal (SDG) 11, "Sustainable Cities." [Explanation of symbols]

[0125] 1. Special fraud prevention system 10 servers 20 devices A User Terminal 101 Registration Department 102 Preservation Department 103 Request part 104 Acquisition Department 105 Verification section 106 Recovery Section

Claims

1. A system comprising a server and multiple terminals including user terminals includes a registration step of registering configured telephone numbers, which are the telephone numbers of terminals among the multiple terminals for which biometric information for biometric authentication has been configured, The system includes a storage step in which it acquires and stores specified biometric information set on a terminal, from among the plurality of terminals, that corresponds to a specified telephone number specified by the user terminal. The system includes a request step in which it requests biometric authentication on the other terminal based on the fact that the telephone number of the other terminal, which is the recipient of the call processing performed on the user terminal, is registered as the configured telephone number, The system includes an acquisition step of acquiring authenticated biometric information that has been biometrically authenticated at the counterpart terminal that received the request, A method for preventing special fraud, comprising a verification step of the system comparing the authentication biometric information with the designated biometric information.

2. The method for preventing special fraud according to claim 1, wherein in the verification step, the system outputs the verification result via the user terminal.

3. In the storage step, the specified biometric information is stored on the user terminal. The special fraud prevention method according to claim 1, wherein in the matching step, the user terminal matches the authentication biometric information with the designated biometric information.

4. The method for preventing special fraud according to claim 3, further comprising: the system further performing a first recovery step of sending a message to the receiving terminal prompting it to install an application for biometric authentication, in response that biometric authentication is not performed on the receiving terminal that received the request.

5. In the storage step, the specified biometric information is associated with the specified telephone number and stored on the server. The special fraud prevention method according to claim 1, wherein in the matching step, the server matches the authentication biometric information with the designated biometric information associated with the telephone number of the other party terminal.

6. The special fraud prevention method according to claim 5, wherein in the matching step, the server notifies the user terminal of an authentication failure in response that the specified biometric information associated with the phone number of the other terminal is not stored.

7. In the storage step, the specified biometric information is associated with the specified telephone number and stored on the server. In the acquisition step, the server acquires the authentication biometric information authenticated by the receiving terminal that received the request, and the selected telephone number selected for biometric authentication at the receiving terminal. The special fraud prevention method according to claim 1, wherein in the matching step, the server matches the authentication biometric information with the designated biometric information associated with the selected telephone number.

8. The method for preventing special fraud according to claim 1, further comprising: a second recovery step in which the system transmits information for installing the biometric authentication application to the other terminal based on the fact that the telephone number of the other terminal is not registered as one of the configured telephone numbers.

9. The method for preventing special fraud according to claim 1, wherein the call processing is an incoming call processing, an outgoing call processing, or an abandoned call processing.

10. The special fraud prevention method according to claim 1, wherein in the verification step, the system notifies a pre-set notification destination when the authentication biometric information and the designated biometric information are different.

11. A system comprising a server and multiple terminals, including user terminals, includes one or more computers: A registration step of registering a configured phone number, which is the phone number of a terminal among the aforementioned multiple terminals for which biometric authentication biometric information has already been configured, A storage step of acquiring and saving specified biometric information set on a terminal, from among the multiple terminals, that corresponds to the specified telephone number specified by the user terminal, A request step to request biometric authentication on the other terminal based on the fact that the telephone number of the other terminal, which is the recipient of the call processing performed on the user terminal, is registered as the configured telephone number, The process includes an acquisition step of acquiring authenticated biometric information obtained by biometric authentication at the counterpart terminal that received the request, A special fraud prevention program that performs a matching step of comparing the authentication biometric information with the designated biometric information.

12. A system comprising a server and multiple terminals including user terminals, A registration unit that registers a configured telephone number, which is the telephone number of a terminal among the aforementioned multiple terminals for which biometric authentication biometric information has been configured, A storage unit that acquires and stores specified biometric information set on a terminal from among the multiple terminals, corresponding to the specified telephone number specified by the user terminal, A request unit requests biometric authentication on the other terminal based on the fact that the telephone number of the other terminal, which is the recipient of the call processing performed on the user terminal, is registered as the configured telephone number. An acquisition unit that acquires biometrically authenticated authentication biometric information at the counterpart terminal that received the request, A special fraud prevention system comprising a matching unit that matches the authentication biometric information with the designated biometric information.

Images