Information processing device, information processing method, and program

Abstract

This allows users to reset some of their authentication information without using their personal information. [Solution] One aspect of the present invention is an information processing device comprising: an acquisition unit that acquires item identification information of an item possessed by a user from a terminal; a determination unit that determines whether the item identification information acquired by the acquisition unit is pre-registered in association with the user; and a provision unit that, if the determination unit determines that the item identification information is pre-registered, provides the terminal with information for resetting a part of the user's authentication information.

Description

Technical Field

[0001] The present invention relates to an information processing apparatus, an information processing method, and a program.

Background Art

[0002] Various user authentication methods have been conventionally proposed. For example, in order to prevent an unauthorized user from accessing a system using a device, a technology has been proposed in which when a user uses the device, an object fingerprint for authentication is extracted from a captured image of the device and the installation location where the device is installed, and authentication is performed based on whether the object fingerprint for registration matches the object fingerprint for authentication (see, for example, Patent Document 1).

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] For example, in authentication using a password, if a user forgets the password, a message via e-mail or SMS (Short Message Service) may be sent to the user based on the user's e-mail address or telephone number pre-recorded on the system side, to allow the user to reset the password. In this authentication, it is necessary for the system side to record the user's personal information such as the user's e-mail address and telephone number, but there is also a demand to perform authentication without using personal information.

[0005] Accordingly, an object of the present invention is to make it possible to reset a part of a user's authentication information without using the user's personal information.

Means for Solving the Problems

[0006] One aspect of the present invention is an information processing device comprising: an acquisition unit that acquires item identification information of an item possessed by a user from a terminal; a determination unit that determines whether the item identification information acquired by the acquisition unit is pre-registered in association with the user; and a provision unit that, if the determination unit determines that the item identification information is pre-registered, provides the terminal with information for resetting a part of the user's authentication information. [Effects of the Invention]

[0007] According to one aspect of the present invention, it is possible to reset a portion of the user's authentication information without using the user's personal information. [Brief explanation of the drawing]

[0008] [Figure 1] This figure shows a schematic system configuration of a service provision system according to one embodiment. [Figure 2] This diagram illustrates how to use a service provision system according to one embodiment. [Figure 3] This diagram illustrates how to use a service provision system according to one embodiment. [Figure 4] This diagram illustrates how to use a service provision system according to one embodiment. [Figure 5] This diagram illustrates how to use a service provision system according to one embodiment. [Figure 6] This is a block diagram of a service provision system in one embodiment. [Figure 7] This figure shows an example of the data structure of a user database. [Figure 8] This is a sequence chart showing the initial application registration process in a service provision system according to one embodiment. [Figure 9] This is a sequence chart showing the password reset process in a service provision system according to one embodiment. [Modes for carrying out the invention]

[0009] The forms described below are not limited to those shown in the brief description of the drawings.

[0010] A first aspect of one aspect of the present invention is an information processing device comprising: an acquisition unit that acquires item identification information of an item possessed by a user from a terminal; a determination unit that determines whether the item identification information acquired by the acquisition unit is pre-registered in association with the user; and a provision unit that, if the determination unit determines that the item identification information is pre-registered, provides the terminal with information for resetting a part of the user's authentication information.

[0011] According to a first aspect of a certain embodiment of the present invention, it is possible to reset a portion of the user's authentication information without using the user's personal information.

[0012] A second aspect of a certain embodiment of the present invention is the information processing device according to the first embodiment, wherein a portion of the user's authentication information is a password.

[0013] According to a second aspect of a certain embodiment of the present invention, it is possible to reset a user's password without using the user's personal information.

[0014] A third aspect of a certain embodiment of the present invention is the information processing device according to the second embodiment, which includes a setting unit that, when a password is obtained from the terminal as part of the user's authentication information, resets a portion of the user's authentication information using the obtained password.

[0015] According to a third aspect of a certain embodiment of the present invention, it is possible to reset a user's password without using the user's personal information.

[0016] A fourth aspect of a certain embodiment of the present invention is an information processing device according to any one of the first to third embodiments, wherein the device does not store identification information associated with a user terminal possessed by the user.

[0017] According to the fourth aspect of an embodiment of the present invention, when resetting part of the user's authentication information, there is no need to use identification information associated with the user terminal, such as an e-mail address or a telephone number.

[0018] The fifth aspect of an embodiment of the present invention is the information processing apparatus according to the fourth aspect, wherein the identification information is an e-mail address assigned to the user of the user terminal, or a telephone number associated with the user terminal.

[0019] According to the fifth aspect of an embodiment of the present invention, when resetting part of the user's authentication information, there is no need to use an e-mail address or a telephone number.

[0020] The sixth aspect of an embodiment of the present invention is the information processing apparatus according to any one of the first to fifth aspects, wherein the article is an article that does not have a communication function.

[0021] According to the sixth aspect of an embodiment of the present invention, since the article does not need to have a communication function, the article to be associated with the article identification information can be selected from a wide variety of types of articles.

[0022] The seventh aspect of an embodiment of the present invention is the information processing apparatus according to any one of the first to sixth aspects, wherein when the user has succeeded in authentication a predetermined number of times or more in the past, information for resetting part of the user's authentication information is provided to the terminal.

[0023] According to the seventh aspect of an embodiment of the present invention, when resetting part of the user's authentication information, the reliability of authentication can be enhanced.

[0024] The eighth aspect of an embodiment of the present invention is the information processing apparatus according to any one of the first to sixth aspects, wherein when the terminal is a dedicated terminal installed at a predetermined location, information for resetting part of the user's authentication information is provided to the terminal.

[0025] According to an eighth aspect of a certain embodiment of the present invention, the certainty of authentication can be enhanced when resetting a portion of the user's authentication information.

[0026] A ninth aspect of a certain embodiment of the present invention is an information processing device according to any one of the first to sixth embodiments, wherein the acquisition unit acquires two or more item identification pieces for each of two or more items possessed by the user from the terminal, the determination unit determines whether the two or more item identification pieces acquired by the acquisition unit are pre-registered in association with the user, and the provision unit provides the terminal with information for resetting a part of the user's authentication information if the determination unit determines that the two or more item identification pieces are pre-registered.

[0027] According to a ninth aspect of a certain embodiment of the present invention, the certainty of authentication can be enhanced when resetting a portion of the user's authentication information.

[0028] A tenth aspect of a certain embodiment of the present invention is an information processing device according to any one of the first to sixth embodiments, wherein the article identification information acquired by the acquisition unit is encrypted, and the provision unit provides the terminal with information for resetting a portion of the user's authentication information when the encrypted article identification information is decrypted.

[0029] According to a tenth aspect of a certain embodiment of the present invention, the certainty of authentication can be enhanced when resetting a portion of the user's authentication information.

[0030] An eleventh aspect of a certain embodiment of the present invention is an information processing device according to any one of the first to sixth embodiments, wherein the providing unit provides the terminal with information for resetting a portion of the user's authentication information when the article identification information includes predetermined information related to the user.

[0031] According to an eleventh aspect of a certain embodiment of the present invention, the certainty of authentication can be enhanced when resetting a portion of the user's authentication information.

[0032] A twelfth aspect of a certain aspect of the present invention is an information processing method performed by an information processing device, which includes: obtaining item identification information of an item possessed by a user from a terminal; determining whether the obtained item identification information is pre-registered in association with the user; and, if it is determined that the item identification information is pre-registered, providing the terminal with information for resetting a part of the user's authentication information.

[0033] According to a twelfth aspect of a certain embodiment of the present invention, it is possible to reset a portion of the user's authentication information without using the user's personal information.

[0034] A thirteenth aspect of a certain aspect of the present invention is a program that causes a computer to execute the following steps: a step to obtain item identification information of an item possessed by a user from a terminal; a step to determine whether the obtained item identification information is pre-registered in association with the user; and, if it is determined that the item identification information is pre-registered, a step to provide the terminal with information for resetting a part of the user's authentication information.

[0035] According to a thirteenth aspect of a certain embodiment of the present invention, it is possible to reset a portion of the user's authentication information without using the user's personal information.

[0036] The embodiments will be described in detail below with reference to the drawings. First, referring to Figure 1, we will describe a service provision system 1 (an example of an information processing system) for providing a predetermined service to a user. Figure 1 is a diagram showing the schematic system configuration of service provision system 1.

[0037] The service provision system 1 shown in Figure 1 includes a terminal 2 used by the user receiving the service, a personal water bottle 3 owned by the user, and a server 5 (an example of an information processing device). Terminal 2 is an information processing terminal such as a smartphone, tablet, or wearable device, and has an application program (hereinafter simply referred to as "application") installed for receiving services from Server 5. Terminal 2 may be a terminal owned by the user. Terminal 2 may also be a dedicated terminal installed at a designated location (for example, a location where the user receives services using My Bottle 3) by a service provider that provides services related to My Bottle, etc. My Bottle 3 is an example of an item a user may possess. The following explanation describes My Bottle 3 as an example of an item, but it is not limited to that; users can choose from a wide range of items that do not have communication functions, such as umbrellas or clothing. Server 5 provides information about the services the user receives from the application on terminal 2. Server 5 and terminal 2 can communicate via a network NW. The network NW is not limited to, but could be, for example, a wireless LAN (Local Area Network), a WAN (Wide Area Network), a mobile communication network, or the Internet.

[0038] As shown in Figure 1, a tag TG is attached to the My Bottle 3, for example, as an example of a wireless tag. The type of tag TG is not limited; for example, NFC (Near Field Communication), HF or UHF band RFID tags, or Bluetooth® Low Energy tags (BLE tags) can be used. Tag TG has unique identification information (tag ID) recorded on it. Terminal 2 can communicate with tag TG contactlessly, for example. For example, terminal 2 can read the tag ID of tag TG. In one embodiment, the personal bottle 3 is used when the user receives services from the server 5.

[0039] The service provider will send the tag TG in advance to users who wish to receive the service via the application. In one embodiment, the tag TG is attached to a base material, and the base material is provided to the user in a state where it is detachably attached to a backing sheet. The user can attach the tag TG to the My Bottle 3 by peeling the base material from the backing sheet. By attaching the tag TG to the My Bottle 3, it is possible to associate the My Bottle 3 as an item with the individual user.

[0040] For example, the tag ID of a tag TG attached to an item such as a My Bottle 3 serves as item identification information to identify the item. Therefore, in the following explanation, the tag ID of a tag TG will be referred to as the "item ID". In one embodiment, instead of the tag TG, a recognition tag containing code information such as a barcode or a two-dimensional code may be used. In that case, for example, the authentication tag contains an item ID. Terminal 2 reads the recognition tag and obtains the item ID contained in the recognition tag.

[0041] In the service provision system 1, when a user receives a service from server 5, the application on terminal 2 accesses server 5 and authenticates the user from the screen on terminal 2. If the user forgets the password or other authentication information used during this authentication, they can use the tag TG on My Bottle 3 to reset their password. The following describes the procedure for resetting a password using My Bottle 3, for example, referring to Figures 2 and 3. In Figures 2 and 3, screens G1 to G3 are displayed on terminal 2.

[0042] In Figure 2, screen G1 is the screen displayed on the application on terminal 2 when a user logs in for authentication. Screen G1 includes a text box 101 for entering a login ID, a text box 102 for entering a password, a button b1 to request login, and a link 103 for when the password is forgotten. Here, we assume the user has forgotten their password. When the user operates link 103, screen G2 is displayed on the application on terminal 2. Screen G2 prompts the user to either read the tag TG on My Bottle 3 using terminal 2, or to read the code information contained in the QR code as the authentication tag for My Bottle 3.

[0043] As shown in Figure 3, when terminal 2 reads the tag TG of My Bottle 3, the item ID read by terminal 2 and the login ID entered in text box 101 are sent to server 5. Server 5 then performs a verification based on the item ID obtained from terminal 2 and the login ID. If server 5 determines that the verification is successful, screen G3 is displayed on the application on terminal 2. Furthermore, by operating button b3 on screen G2 (Figure 2) as described above, the imaging unit on terminal 2 becomes capable of acquiring an image containing code information, such as a two-dimensional code. When the imaging unit on terminal 2 reads the code information as the authentication tag of My Bottle 3, the code information read by terminal 2 and the login ID entered in text box 101 are sent to server 5. Server 5 then performs a verification based on the item ID contained in the code information acquired from the terminal and the login ID. If server 5 determines that the verification is OK, screen G3 is displayed on the application on terminal 2.

[0044] In Figure 3, screen G3 is a screen displayed on the application of terminal 2 for resetting the password. Screen G3 includes a text box 105 for entering a password to be reset and a button b5 for requesting a password reset. When the user enters a password in the text box 105 on screen G3 and then operates button b5, a password reset request is sent from terminal 2 to server 5. Server 5 receives a request from terminal 2 to reset the password entered in the text box 105 on screen G3 and registers the requested password (resets the password).

[0045] Figures 2 and 3 illustrate the case where a user resets their password using terminal 2, but in certain environments, for example, it may not be necessary to enter a login ID. For example, in a dedicated terminal installed by a service provider in a specific location, there may be other people using the dedicated terminal, and surveillance may be conducted by cameras, so the possibility of impersonation is considered low. Therefore, if a user forgets their password when using the dedicated terminal, entering a login ID may be omitted when resetting the password. The following describes the procedure for resetting your password on the dedicated terminal using My Bottle 3, referring to Figures 4 and 5.

[0046] In Figure 4, screen G1a is an example of terminal 2, and is displayed on the application of dedicated terminal 7 when a user logs in for authentication. In the case of dedicated terminal 7, the user is not required to enter a login ID. Now, let's assume the user has forgotten their password. When the user operates the link 103 displayed on screen G1a of dedicated terminal 7, screen G2a is displayed on the application of dedicated terminal 7. On screen G2a, the user is prompted to perform operations such as reading the tag TG of My Bottle 3 using dedicated terminal 7, or reading the code information contained in the two-dimensional code as the authentication tag of My Bottle 3. As shown in Figure 5, the user reads the tag TG of the My Bottle 3 using the reader 71 mounted on the dedicated terminal 7, and the item ID of the tag TG read by the dedicated terminal 7 is transmitted to the server 5. The server 5 performs verification using the item ID obtained from the dedicated terminal 7, and if the verification is successful, screen G3a is displayed on the dedicated terminal 7. Note that when reading the code information of My Bottle 3, a code reader (not shown) provided on the dedicated terminal 7 is used. Screen G3a, like screen G3 in Figure 3, is a screen for resetting the password on the application of the dedicated terminal 7. When the user enters a password in the text box 105 on screen G3a and then operates button b5, the server 5 receives a request from the dedicated terminal 7 to reset the password. In response to the password reset request from the dedicated terminal 7, the server 5 registers the password entered in the text box 105 (resets the password).

[0047] Next, referring to Figure 6, terminal 2 includes, for example, a control unit 21, storage 22, operation input unit 23, display unit 24, communication unit 25, and imaging unit 26. Terminal 2 communicates with server 5 to exchange various types of information. The control unit 21 includes a CPU (Central Processing Unit), ROM (Read-only memory), and RAM (Random Access Memory), and controls various operations of terminal 2. The ROM, which is non-volatile memory, stores application programs for using the service. These application programs (applications) are executed, for example, when terminal 2 is started. RAM is memory used to temporarily store data when each program is executed. The application makes various requests to the server 5 in response to user input to the operation input unit 23, obtains the response results from the server 5, and displays them on the display unit 24.

[0048] Storage 22 is a storage device such as flash memory. Storage 22 may store data used when using the application. The operation input unit 23 includes a touch input mechanism which may be provided on the display panel of the display unit 53, and accepts user input for the application. The display unit 24 includes a display panel and a display drive circuit, and displays the execution results of the application. The communication unit 25 communicates with the tag TG, for example, and reads the item ID from the tag TG. If the tag TG is an NFC tag, the communication unit 25 functions as an NFC communication unit, such as an NFC reader. The imaging unit 26 captures an image including the two-dimensional code used as the authentication tag when a two-dimensional code is attached to the My Bottle 3 instead of the tag TG. The image captured by the imaging unit 26 is analyzed by the control unit 21, and the item ID is extracted.

[0049] As shown in Figure 6, the server 5 includes, for example, a control unit 51 and storage 52. The control unit 51 has a CPU, ROM, and RAM, and controls various operations of the server 5. The ROM, which is non-volatile memory, stores the server program for providing services. The server program performs authentication processing for applications on terminal 2, as well as various other processing related to the services provided to applications on terminal 2.

[0050] The control unit 51 functions as the following acquisition unit, authentication unit, determination unit, and provision unit. The acquisition unit obtains the login ID and password (an example of authentication information) used to identify and authenticate the user from terminal 2. The acquisition unit also obtains the item ID of the personal water bottle 3 owned by the user from terminal 2. The authentication unit performs authentication processing based on the authentication information obtained by the acquisition unit. The determination unit determines whether the item ID obtained by the acquisition unit is already registered in the user database (described later) in association with a user. If the determination unit determines that the item ID is already registered, the provision unit provides terminal 2 with information to reset the user's password. In one embodiment, the control unit 51 functions as a setting unit that resets the password using the acquired password (a password for resetting, described later) when it has acquired the password.

[0051] Storage 52 is a storage device such as an HDD (Hard Disk Drive) that stores the user database. The user database is accessed by the control unit 51 when performing user authentication processing. Storage 52 is an example of a storage unit that stores item IDs in association with login IDs. Storage 52 does not store the user's personal information (such as phone number or email address, or other identification information associated with terminal 2). In the service provision system 1, even though the user's personal information is not stored, the My Bottle 3 is associated with the user by its item ID, allowing for secure password reset.

[0052] Figure 7 shows an example of the data structure of a user database. In the user database illustrated in Figure 7, each record is structured with associated information such as a "Login ID," "Password," and "Item ID." The "Login ID" and "Password" are the authentication information specified by the user during initial registration. For data security reasons, the "Password" may be a hashed string. The "Item ID" is the item ID read from the tag TG provided to the user when the service is launched. When the service is launched, the user's corresponding Login ID, password, and the Item ID from the tag TG provided to that user are associated.

[0053] Next, the operation of the service delivery system 1 will be described with reference to the sequence charts in Figures 8 and 9. Figure 8 shows the process for initial registration of user authentication information on the application on terminal 2. The application on terminal 2 displays a screen for the user to specify and enter a login ID and password. When the user enters a login ID and password on this screen, the application on terminal 2 sends a registration request containing the entered login ID and password to server 5 (step S2). When server 5 receives the registration request, it records the login ID and password included in the registration request as authentication information in a new record in the user database (step S4). Server 5 (i.e., the service provider) may determine the login ID and notify the application on terminal 2. For example, the application on terminal 2 sends a message to server 5 requesting to receive the service, and server 5 determines the login ID in response to the message and notifies the application of the determined login ID. Next, the application on terminal 2 sends the password entered by the user to server 5. As a result, server 5 can associate the password specified by the user with the determined login ID and record it in the user database.

[0054] Next, Server 5 sends an ID registration request to the application on Terminal 2 (Step S6). In response to the ID registration request, the application on Terminal 2 requests that the user read the item ID from the tag TG of the My Bottle 3 that the user has. Once the application obtains the item ID from the tag TG (Step S8), it sends the obtained item ID to Server 5 (Step S10). Upon receiving the item ID, Server 5 records the received item ID in the user database record created in Step S4 (Step S12). As a result, the item ID of the item the user possesses is associated with the login ID and password as authentication information associated with the user, and the initial registration is completed. After that, Server 5 sends a registration completion message to the application on Terminal 2 (Step S14).

[0055] Figure 9 shows the process of the service provision system 1 when a user forgets their password after the service has been provided to the user and the user needs to reset their password. In Figure 9, step S20 corresponds to the process performed when, for example, the user holds the tag TG of their My Bottle 3 over the screen G2 in Figure 2, which is displayed on the application of terminal 2 held by the user. When the application on terminal 2 obtains the item ID from the tag TG (step S20), the application on terminal 2 sends a password reset request to server 5, which includes the login ID (for example, the login ID entered on screen G2 in Figure 2) and the item ID obtained in step S20 (step S22).

[0056] When Server 5 receives a password reset request, it determines, for example, whether the login ID included in the password reset request is valid (step S24). In step S24, Server 5 determines, for example, whether the login ID meets formal requirements (for example, whether it is above a certain number of characters) or whether it is already registered data (for example, data included in a record in the user database). If, for example, the login ID is not valid (step S24: NO), Server 5 sends an error message to the application on Terminal 2. If the login ID is valid (step S24: YES), Server 5 determines, for example, whether the login ID and item ID included in the password reset request are associated in a record in the user database (step S26). If the login ID and item ID included in the password reset request are not associated in a record in the user database (step S26: NO), Server 5 sends an error message to the application on Terminal 2. If the login ID and item ID included in the password reset request are associated in a record in the user database (step S26: YES), Server 5 sends a password input request (an example of information to reset the password) to the application on Terminal 2 (step S28).

[0057] When the application on terminal 2 receives a password input request from server 5, it displays a screen for entering a reset password (step S30). The screen displayed in step S30 is, for example, screen G3 in Figure 3. When the application on terminal 2 receives the user's input of a reset password on screen G3, for example (step S32), it sends the reset password to server 5 (step S34). For example, in step S36, server 5 determines whether the reset password satisfies formal requirements (for example, whether it is of a certain number of characters or more and whether it is a combination of a certain type of character). If server 5 determines that the reset password is not valid (step S36: NO), server 5 sends an error message to the application on terminal 2 and requests a different reset password.

[0058] If Server 5 determines that the reset password received in step S34 is valid (step S36: YES), it updates the corresponding record in the user database so that the reset password received in step S34 is associated with the login ID received in step S22 (step S38). Subsequently, Server 5 sends a password reset completion message to the application on terminal 2 (step S40).

[0059] Figure 9 shows the case where server 5 sends a password input request after the conditions in steps S24 and S26 are met, but additional conditions can be added when sending the password input request. The following are examples of additional conditions. Two or more conditions may be combined. Adding conditions can strengthen the reliability of authentication. • The user's usage frequency (number of logins) corresponding to the login ID must be above a specified value (for example, the user must have successfully authenticated logins more than a specified number of times in the past). The application on terminal 2 encrypted and transmitted the item ID using a predetermined encoding method, and server 5 was able to properly decrypt the item ID. • The item ID must include specific information related to the user (for example, the name and business code of the user or the business operator (such as a company) related to the service the user receives).

[0060] Furthermore, as shown in Figures 4 and 5, the reliability of authentication can be enhanced by configuring the system to use a specific dedicated terminal. Additionally, when using a dedicated terminal and omitting the input of a login ID, the reliability of authentication can be enhanced by adding at least one of the above conditions.

[0061] Furthermore, even in the case of terminal 2 owned by the user, the login ID input may be omitted by adding any of the above conditions to enhance the certainty of authentication. For example, if the item ID of the tag TG of My Bottle 3 is obtained from terminal 2 owned by the user and sent to server 5, and if the item ID obtained by server 5 from terminal 2 contains predetermined information related to the user (for example, the name of the user or the business operator (corporation, etc.) related to the service provided to the user, or the business operator code, etc.), then even if the login ID has not been entered, it is possible to provide terminal 2 with a screen for resetting the password.

[0062] In one embodiment, the server 5 may omit the input of a login ID by performing device authentication on the terminal 2 owned by the user to enhance the certainty of authentication. For example, when device authentication is first used, the terminal ID of terminal 2 (identification information unique to terminal 2) is pre-registered in the user database in association with the login ID. Then, after terminal 2 obtains an item ID, it sends a password reset request to the server 5 that includes the item ID and terminal ID. If the item ID and terminal ID included in the password reset request are associated with the login ID in the user database, the server 5 sends a password input request to terminal 2.

[0063] As explained above, in the service provision system 1, the user database on server 5 associates user authentication information such as login ID and password with item IDs of items such as personal water bottles owned by the user. Server 5 performs authentication processing based on the login ID and password, for example, but if the user forgets their password, it allows the user to reset their password, provided that the item ID of personal water bottle 3 obtained from the application on terminal 2 is registered in the user database and associated with the login ID.

[0064] In conventional systems, password resets required two-factor authentication using SMS (Short Message Service) messages based on the phone number or email address, necessitating the server-side storage of user personal information such as phone numbers and email addresses. Furthermore, if a user changed their email address, the new email address had to be registered in the system, making timely password resets difficult. In contrast, when resetting a password in the service provision system 1, the item ID obtained from the tag TG of the My Bottle 3 held by the user is used, so there is no need for the server 5 to store the user's personal information such as email address or phone number. In the service provision system 1, the item ID of the tag TG of My Bottle 3 is pre-associated with the user who possesses My Bottle 3. Therefore, based on the item ID, the password can be reset without causing fraud such as impersonation.

[0065] In one embodiment, an item such as a personal water bottle 3 to which a tag TG is attached is used in a service provided by a server 5. For example, if a predetermined service is provided to a user by having the tag TG on the personal water bottle 3 read by a predetermined device each time the personal water bottle 3 is used, the user will have the personal water bottle 3 with them when receiving the service, so if they forget their password during authentication, they can easily reset their password based on the tag TG on the personal water bottle 3 they have with them.

[0066] The item ID of the tag TG is preferably set according to a code system corresponding to the item to which the tag TG is attached. For example, the item ID of an NFC tag attached to an umbrella should be a code system corresponding to umbrellas, and the item ID of an NFC tag attached to clothing should be a code system corresponding to clothing. This allows for the assignment of unique identification information to many users when providing services related to specific items.

[0067] As mentioned earlier, the reliability of authentication can be enhanced by adding conditions when sending a password input request. In other words, in one embodiment, if the user has successfully authenticated more than a predetermined number of times in the past (for example, if authentication using a login ID and password has been successful), the server 5 provides the terminal 2 with information to reset the user's password. In this case, the server 5 records the number of past successful authentications (i.e., the number of logins) for each login ID corresponding to the user. In addition to the process shown in Figure 9, if the server 5 determines that the value of the number of past successful authentications is greater than or equal to a predetermined value (for example, 50 times), it sends a password input request to the terminal 2 in step S28.

[0068] In one embodiment, if terminal 2 is a dedicated terminal installed in a predetermined location, server 5 provides terminal 2 with information for resetting the user's password. If the dedicated terminal is installed in a predetermined location by a service provider, for example (e.g., a place where the user receives services using My Bottle 3), the possibility of impersonation is considered low because other people will be using the dedicated terminal and surveillance may be conducted by cameras. From another perspective, if terminal 2 is a dedicated terminal, the user may omit entering their login ID. Even if the login ID is omitted, a certain degree of authentication reliability can be ensured.

[0069] In one embodiment, the item ID transmitted from terminal 2 to server 5 is encrypted. When the received encrypted item ID is decrypted, server 5 provides terminal 2 with information to reset the user's password. Decryption of the item ID at server 5 means that the appropriate item ID contained in the user database has been retrieved. In this case, terminal 2 encrypts the item ID before sending it to server 5. Terminal 2 sends the encrypted item ID to server 5, and server 5 decrypts the received item ID. The key information for encryption and decryption is shared between terminal 2 and server 5 in advance. If decryption is successful, server 5 sends a password input request to terminal 2 in step S28 of Figure 9.

[0070] In one embodiment, if the item ID contains predetermined information related to the user, the server 5 provides the terminal 2 with information for resetting the user's password. The predetermined information related to the user may be, for example, the name or business code of the business (such as a company) related to the user or service. When the server 5 receives the item ID from the terminal 2, it first determines whether the item ID contains the predetermined information, and if it does, it sends a password input request to the terminal 2 in step S28 of Figure 9. In this case, Figure 9 includes an additional step to determine whether the item ID contains the predetermined information.

[0071] The above explanation describes the case where one tag TG is attached to an item such as My Bottle 3, but this is not the only case. Two or more tags TG may be attached to an item. In that case, the user sequentially has terminal 2 read the tags TG attached to each of the two or more items, and terminal 2 transmits two or more item IDs to server 5 accordingly. Server 5 obtains two or more item IDs for each of the two or more items owned by the user from terminal 2 and determines whether the obtained two or more item IDs are pre-registered in the user database in association with the user. Next, if server 5 determines that two or more item IDs are pre-registered in the user database, it sends a password input request to terminal 2. This strengthens the reliability of authentication when resetting the password compared to the case where only one item ID is read.

[0072] One embodiment is an information processing method, which includes the following steps. (I) Step of obtaining the item ID of an item owned by the user from terminal 2. (II) A step to determine whether the acquired item ID has been pre-registered in association with the user. (III) If it is determined that the item ID is already registered, the step of providing terminal 2 with information to reset some of the user's authentication information.

[0073] One embodiment is a program that causes a computer to perform the following steps. (I) Procedure for obtaining the item ID of an item owned by the user from terminal 2 (II) Procedure for determining whether the acquired item ID is already registered in association with the user. (III) If it is determined that the item ID is already registered, a procedure to provide terminal 2 with information to reset some of the user's authentication information.

[0074] Although embodiments of the information processing apparatus, information processing method, and program of the present invention have been described above, the present invention is not limited to the above embodiments. Furthermore, the above embodiments can be improved or modified in various ways without departing from the spirit of the present invention. For example, in the embodiment described above, the service provider provides the user with an item to which the tag TG has been attached, and at the start of service provision, the service provider pre-associates the item ID of the item provided to the user with the user's authentication information. However, this is not the only case. The user may be provided with the tag TG, the user may attach the tag TG to the item, and then the item ID of the tag TG provided to the user may be associated with the authentication information.

[0075] Furthermore, the TG tag does not have to be directly attached to the item itself; it may be attached to other items related to the item. For example, when providing services related to shared bicycles or rental umbrellas, the TG tag may not be attached to the bicycle or umbrella itself, but rather to the membership card.

[0076] The processing between terminal 2 and server 5 described above is merely an example. At least a portion of the processing performed by terminal 2 described above may be executed on server 5, or at least a portion of the processing performed by server 5 described above may be executed on terminal 2. At least a portion of the functions implemented on terminal 2 may be implemented on server 5, or at least a portion of the functions implemented on terminal 2 may be implemented on server 5. [Explanation of Symbols]

[0077] 1…Service delivery system 2… Terminal 21... Control Unit 22...Storage 23... Operation Input Section 24...Display section 25…NFC Communication Department 26…IMAGING Department 3…My bottle TG... Tag 5…Server 51... Control Unit 52...Storage 7… Dedicated terminal 71…NFC reader 101, 102, 105… Text boxes 103... Link NW...Network

Claims

1. An acquisition unit that acquires item identification information of items owned by the user from the terminal, A determination unit determines whether the item identification information acquired by the acquisition unit is pre-registered in association with the user, If the determination unit determines that the item identification information is already registered, the system includes a provisioning unit that provides the terminal with information for resetting a portion of the user's authentication information. Information processing device.

2. Some of the user's authentication information is a password. The information processing apparatus according to claim 1.

3. When the password is obtained from the terminal as part of the user's authentication information, the system includes a setting unit that resets part of the user's authentication information using the obtained password. The information processing apparatus according to claim 2.

4. The user does not store identification information associated with the user terminal owned by the user. The information processing apparatus according to any one of claims 1 to 3.

5. The identification information is an email address assigned to the user on the user terminal, or a telephone number associated with the user terminal. The information processing apparatus according to claim 4.

6. The aforementioned article is an article that does not have a communication function. The information processing apparatus according to any one of claims 1 to 3.

7. The providing unit, if the user has successfully authenticated more than a predetermined number of times in the past, provides the terminal with information to reset a portion of the user's authentication information. The information processing apparatus described in claim 1.

8. If the terminal is a dedicated terminal installed in a predetermined location, the providing unit provides the terminal with information for resetting a portion of the user's authentication information. The information processing apparatus described in claim 1.

9. The acquisition unit acquires two or more item identification pieces for each of two or more items possessed by the user from the terminal. The determination unit determines whether the two or more item identification pieces acquired by the acquisition unit are pre-registered in association with the user. If the determination unit determines that the two or more item identification pieces of information are registered in advance, the providing unit provides the terminal with information for resetting a portion of the user's authentication information. The information processing apparatus described in claim 1.

10. The item identification information acquired by the acquisition unit is encrypted, The providing unit, when the encrypted item identification information is decrypted, provides the terminal with information for resetting a portion of the user's authentication information. The information processing apparatus described in claim 1.

11. If the item identification information includes predetermined information related to the user, the providing unit provides the terminal with information for resetting a portion of the user's authentication information. The information processing apparatus described in claim 1.

12. An information processing method performed by an information processing device, The device retrieves item identification information of items owned by the user. Determine whether the acquired item identification information is pre-registered in association with the user. If it is determined that the aforementioned item identification information is already registered, the terminal is provided with information to reset a portion of the user's authentication information. Information processing methods.

13. The procedure for obtaining item identification information of items owned by the user from the device, A procedure for determining whether the acquired item identification information is pre-registered in association with the user, If it is determined that the aforementioned item identification information is already registered, the procedure involves providing the terminal with information to reset a portion of the user's authentication information, A program that causes a computer to execute something.

Images