Information processing equipment, methods, programs and systems

Abstract

Effectively prevents the creation of duplicate accounts. [Solution] A program for operating a computer comprising a processor and memory, the program causing the processor to perform the following steps: receiving personal information of a user of a service; receiving biometric information of the user; determining whether there is a combination of users from among the multiple users whose personal information has been received that has similar or matching personal information; and, if a combination exists, presenting the biometric information of the multiple users included in the combination to the service staff.

Description

Technical Field

[0001] The present disclosure relates to an information processing apparatus, method, program, and system.

Background Art

[0002] In services on the Internet, there is a technique for preventing unauthorized acquisition of a plurality of accounts by the same person. For example, Patent Document 1 discloses a system that prevents duplicate registration by discriminating between domestic and foreign regions based on a user's IP address at the time of new member registration, and performing authentication processing suitable for each region.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] However, the technique of Patent Document 1 has a problem that a single user can acquire accounts in duplicate by means such as changing the terminal to be used. An object of the present disclosure is to effectively prevent the creation of duplicate accounts.

Means for Solving the Problems

[0005] A program for operating a computer including a processor and a memory, the program causing the processor to execute a step of receiving personal information of a user who uses a service, a step of receiving biometric information of the user, a step of determining whether or not there exists a combination of users having similar or matching personal information among a plurality of users whose personal information has been received, and a step of, when the combination exists, presenting the biometric information of the plurality of users included in the combination to a staff member of the service. [Effects of the Invention]

[0006] This effectively prevents the creation of duplicate accounts. [Brief explanation of the drawing]

[0007] [Figure 1] This is a block diagram showing the functional configuration of System 1. [Figure 2] This is a block diagram showing the functional configuration of the user terminal 10. [Figure 3] This is a block diagram showing the functional configuration of the staff terminal 30. [Figure 4] This is a block diagram showing the functional configuration of Server 20. [Figure 5] This diagram shows the data structure of the user table 2021. [Figure 6] This diagram shows the data structure of the biometric information table 2022. [Figure 7] This diagram shows the data structure of Ticket Table 2023. [Figure 8] This is a flowchart of the multiple account detection process in this embodiment. [Figure 9] This is a schematic diagram showing an example of detection screen D1. [Figure 10] This is a block diagram showing the basic hardware configuration of a computer. [Modes for carrying out the invention]

[0008] The embodiments of this disclosure will be described below with reference to the drawings. In all the drawings illustrating the embodiments, common components are denoted by the same reference numerals, and repeated explanations are omitted. The following embodiments are not intended to unduly limit the content of this disclosure as described in the claims. Not all components shown in the embodiments are necessarily essential components of this disclosure. Also, each drawing is a schematic diagram and is not necessarily a strict illustration.

[0009] Furthermore, in the following description, "processor" refers to one or more processors. At least one processor is typically a microprocessor such as a CPU (Central Processing Unit), but may be another type of processor such as a GPU (Graphics Processing Unit). At least one processor may be single-core or multi-core.

[0010] Furthermore, at least one processor may be a broad-sense processor, such as a hardware circuit that performs some or all of the processing (e.g., an FPGA (Field-Programmable Gate Array) or an ASIC (Application Specific Integrated Circuit)).

[0011] Furthermore, in the following explanation, we may use expressions such as "xxx table" to describe information that yields an output for a given input. This information can be data with any structure, or it can be a learning model such as a neural network that generates an output for a given input. Therefore, "xxx table" can be referred to as "xxx information."

[0012] Furthermore, in the following explanation, the structure of each table is just an example; one table may be divided into two or more tables, or all or part of two or more tables may be a single table.

[0013] Furthermore, in the following explanation, the subject of the process may sometimes be "program," but since a program is executed by a processor and performs defined processes using the memory and / or interface as appropriate, the subject of the process may also be the processor (or a device such as a controller that has that processor).

[0014] The program may be installed in an apparatus such as a computer, or may be stored in, for example, a program distribution server or a computer-readable (e.g., non-transitory) recording medium. Further, in the following description, two or more programs may be implemented as a single program, or a single program may be implemented as two or more programs.

[0015] Further, in the following description, although identification numbers are used as identification information for various targets, other types of identification information (e.g., identifiers including alphabetic characters and codes) other than identification numbers may be adopted.

[0016] Further, in the following description, when elements of the same type are described without distinction, reference signs (or common signs among the reference signs) are used, and when elements of the same type are described with distinction, element identification numbers (or reference signs) may be used.

[0017] Further, in the following description, control lines and information lines are those considered necessary for the explanation, and not all control lines and information lines are necessarily shown in the product. All configurations may be mutually connected.

[0018] Each information processing apparatus is constituted by a computer including an arithmetic device and a storage device. The basic hardware configuration of the computer and the basic functional configuration of the computer realized by the hardware configuration will be described later. For each of the server 20 and the user terminal 10, descriptions overlapping with the basic hardware configuration of the computer and the basic functional configuration of the computer described later will be omitted.

[0019] (Present Embodiment) <Configuration> The configuration of the information processing system of the present embodiment will be described. Figure 1 is a block diagram illustrating the configuration of the information processing system of the first embodiment.

[0020] The system 1 is a system for providing the service of the present embodiment. The services of this embodiment include user account management services and predetermined services provided by the server 20 in relation to the accounts. These predetermined services include, but are not limited to, ticket issuance and distribution services, merchandise and other goods sales services, user entry and usage authentication services, and related fraud prevention services.

[0021] Furthermore, the services of this embodiment may include individual third-party services provided to users by third-party service providers (such as event organizers). Third-party services include, but are not limited to, services such as the operation of specific events and ticket sales. System 1 may include a server for third-party service providers to provide services. There may be multiple third-party services.

[0022] Therefore, in this embodiment, the service staff includes staff who operate the services provided by the server 20, and staff who operate third-party services.

[0023] As shown in Figure 1, the information processing system 1 comprises a user terminal 10, a server 20, and a staff terminal 30. The user terminal 10, server 20, and staff terminal 30 communicate with each other, for example, via a network 80.

[0024] In Figure 1, the number of user terminals 10 included in System 1 is not limited to one. There may be two or more user terminals 10 included in System 1.

[0025] Figure 1 shows an example where System 1 includes one Server 20, but the number of Servers 20 included in System 1 is not limited to one. Server 20 may consist of multiple servers depending on the functions they have. Also, Server 20 may be, for example, a collection of multiple devices. The way in which the multiple functions required to implement Server 20 according to this embodiment are distributed to one or more hardware can be appropriately determined in consideration of the processing capacity of each hardware and / or the specifications required for Server 20.

[0026] In Figure 1, the number of staff terminals 30 included in System 1 is not limited to one. There may be two or more staff terminals 30 included in System 1.

[0027] The user terminal 10 is an information processing device used by users who utilize the services of this embodiment.

[0028] The user terminal 10 is implemented, for example, by a mobile device such as a smartphone or tablet that supports a mobile communication system. Alternatively, the user terminal 10 may be implemented by, for example, a stationary PC (Personal Computer) or a laptop PC. Furthermore, the user terminal 10 may be implemented by, for example, a wearable device such as an HMD (Head Mount Display). The user terminal 10 is an information processing device operated by a user utilizing the service of this embodiment.

[0029] The user terminal 10 comprises a communication interface 12, an input device 13, an output device 14, memory 15, storage 16, and a processor 19. The input device 13 is a device for receiving input operations from the user (e.g., a touch panel, touchpad, etc.). The output device 14 is a device for presenting information to the user (e.g., a display, speaker, etc.).

[0030] Server 20 is an information processing device that provides the services of this embodiment.

[0031] The server 20 is implemented, for example, by a computer connected to the network 80. As shown in Figure 1, the server 20 includes a communication IF 22, an I / O IF 23, memory 25, storage 26, and a processor 29. The I / O IF 23 functions as an interface for an input device to receive input operations from the user and an output device to present information to the user.

[0032] The staff terminal 30 is an information processing device used by the staff operating the service of this embodiment. The staff operating the service of this embodiment may be the staff operating the service provided by the server 20, or they may be the staff operating individual services provided by a third-party service provider.

[0033] The staff terminal 30 can be implemented, for example, by a mobile device such as a smartphone or tablet that supports a mobile communication system. Alternatively, the staff terminal 30 may be implemented by, for example, a stationary PC (Personal Computer) or a laptop PC. Furthermore, the staff terminal 30 may be implemented by, for example, a wearable device such as an HMD (Head Mount Display).

[0034] The staff terminal 30 includes a communication interface 32, an input device 33, an output device 34, memory 35, storage 36, and a processor 39. The input device 33 is a device for receiving input operations from the user (e.g., a touch panel, touchpad, etc.). The output device 34 is a device for presenting information to the user (e.g., a display, speaker, etc.).

[0035] <Configuration of user terminal 10> Figure 2 is a block diagram showing an example configuration of the user terminal 10 shown in Figure 1. As shown in Figure 2, the user terminal 10 includes a communication unit 120, an input device 13, an output device 14, an audio processing unit 17, a microphone 171, a speaker 172, a position information sensor 150, a camera 160, a motion sensor 170, a storage unit 180, and a control unit 190. Each block included in the user terminal 10 is electrically connected, for example, by a bus.

[0036] The communication unit 120 performs processing such as modulation and demodulation processing for the user terminal 10 to communicate with other devices. The communication unit 120 performs transmission processing on the signal generated by the control unit 190 and transmits it to an external source (for example, the server 20). The communication unit 120 performs reception processing on the signal received from the external source and outputs it to the control unit 190.

[0037] The input device 13 is a device for a user operating the user terminal 10 to input instructions or information. The input device 13 can be implemented, for example, by a touch-sensitive device 131 on which instructions are input by touching the operating surface. If the user terminal 10 is a PC, the input device 13 may be implemented by a reader, keyboard, mouse, etc. The input device 13 converts the instructions input by the user into electrical signals and outputs the electrical signals to the control unit 190. The input device 13 may also include, for example, a receiving port that accepts electrical signals input from an external input device.

[0038] The output device 14 is a device for presenting information to the user operating the user terminal 10. The output device 14 is implemented, for example, by a display unit such as a display 141. The display 141 displays data according to the control of the control unit 190. The display 141 is implemented, for example, by an LCD (Liquid Crystal Display) or an organic EL (Electro-Luminescence) display.

[0039] The audio processing unit 17 performs, for example, digital-to-analog conversion processing of the audio signal. The audio processing unit 17 converts the signal received from the microphone 171 into a digital signal and provides the converted signal to the control unit 190. The audio processing unit 17 also provides the audio signal to the speaker 172. The audio processing unit 17 is implemented, for example, by an audio processing processor. The microphone 171 receives an audio input and provides the audio signal corresponding to that audio input to the audio processing unit 17. The speaker 172 converts the audio signal received from the audio processing unit 17 into audio and outputs the audio to the outside of the user terminal 10.

[0040] The location information sensor 150 is a sensor that detects the location of the user terminal 10, and is, for example, a GPS (Global Positioning System) module. A GPS module is a receiving device used in a satellite positioning system. In a satellite positioning system, signals are received from at least three or four satellites, and the current location of the user terminal 10, which is equipped with a GPS module, is detected based on the received signals. The location information sensor 150 may also detect the current location of the user terminal 10 from the location of the wireless base station to which the user terminal 10 is connected.

[0041] Camera 160 is a device that receives light using a photodetector and outputs it as a shooting signal.

[0042] The motion sensor 170 includes, for example, an acceleration sensor, an angular velocity sensor, or a combination thereof. However, it is not limited to these. The motion sensor 170 detects the movement of the user terminal 10 and outputs the sensing result.

[0043] The storage unit 180 is implemented by, for example, memory 15 and storage 16, and stores data and programs used by the user terminal 10. The storage unit 180 stores, for example, user ID 181 and application program 182.

[0044] User ID 181 is the user's account ID. The user transmits the user ID from the user terminal 10 to the server 20. The server 20 identifies the user based on the user ID and provides the service related to this disclosure to the user. The user ID includes information such as a session ID that is temporarily assigned by the server 20 to identify the user using the user terminal 10.

[0045] The application program 182 may be pre-stored in the storage unit 180, or it may be configured to be downloaded from a web server operated by the service provider via a communication interface. The application program 182 includes applications such as a web browser application. The application program 182 includes an interpreter-type programming language such as JavaScript® that is executed on the web browser application stored in the user terminal 10.

[0046] The control unit 190 is realized when the processor 19 reads a program stored in the memory unit 180 and executes instructions contained in the program. The control unit 190 controls the operation of the user terminal 10. By operating according to the program, the control unit 190 performs the functions of an operation reception unit 191, a transmission / reception unit 192, and a presentation control unit 193.

[0047] The operation reception unit 191 processes instructions or information input from the input device 13. For example, the operation reception unit 191 receives instructions or information input from a touch-sensitive device 131 or the like.

[0048] Furthermore, the operation reception unit 191 receives images input from the camera 160. Specifically, for example, the operation reception unit 191 receives the image data captured by the camera 160.

[0049] Furthermore, the operation reception unit 191 receives voice information input from the microphone 171. Specifically, for example, the operation reception unit 191 receives voice data input from the microphone 171 and converted into digital data by the voice processing unit 17.

[0050] Furthermore, the operation reception unit 191 receives behavioral information input from the motion sensor 170. Specifically, for example, the operation reception unit 191 receives a predetermined behavior detected by the motion sensor 170.

[0051] The transmitting / receiving unit 192 performs processing to enable the user terminal 10 to send and receive data with an external device such as the server 20 in accordance with a communication protocol. Specifically, for example, the transmitting / receiving unit 192 sends instructions input by the user to the server 20. The transmitting / receiving unit 192 receives information provided by the server 20.

[0052] The presentation control unit 193 controls the output device 14, etc., in order to present various information to the user. Specifically, for example, the presentation control unit 193 generates a UI based on data constituting various UIs received from the server 20, and presents various information to the user by outputting the UI to the output device 14 (for example, the display 141).

[0053] <Configuration of staff terminal 30> Figure 3 is a block diagram showing an example configuration of the staff terminal 30 shown in Figure 1. As shown in Figure 3, the staff terminal 30 includes a communication unit 320, an input device 33, an output device 34, an audio processing unit 37, a microphone 371, a speaker 372, a position information sensor 350, a camera 360, a motion sensor 370, a storage unit 380, and a control unit 390. Each block included in the staff terminal 30 is electrically connected, for example, by a bus.

[0054] The communication unit 320 performs processing such as modulation and demodulation processing for the staff terminal 30 to communicate with other devices. The communication unit 320 performs transmission processing on the signal generated by the control unit 390 and transmits it to an external source (for example, the server 20). The communication unit 320 performs reception processing on the signal received from an external source and outputs it to the control unit 390.

[0055] The input device 33 is a device for a user operating the staff terminal 30 to input instructions or information. The input device 33 can be implemented, for example, by a touch-sensitive device 331 on which instructions are input by touching the operating surface. If the staff terminal 30 is a PC or the like, the input device 33 may be implemented by a reader, keyboard, mouse, etc. The input device 33 converts the instructions input by the user into electrical signals and outputs the electrical signals to the control unit 390. The input device 33 may also include, for example, a receiving port that accepts electrical signals input from an external input device.

[0056] The output device 34 is a device for presenting information to the user operating the staff terminal 30. The output device 34 is implemented, for example, by a display unit such as a display 341. The display 341 displays data according to the control of the control unit 390. The display 341 is implemented, for example, by an LCD (Liquid Crystal Display) or an organic EL (Electro-Luminescence) display.

[0057] The audio processing unit 37 performs, for example, digital-to-analog conversion processing of the audio signal. The audio processing unit 37 converts the signal provided from the microphone 371 into a digital signal and provides the converted signal to the control unit 390. The audio processing unit 37 also provides the audio signal to the speaker 372. The audio processing unit 37 is implemented, for example, by an audio processing processor. The microphone 371 receives an audio input and provides the audio signal corresponding to that audio input to the audio processing unit 37. The speaker 372 converts the audio signal provided from the audio processing unit 37 into audio and outputs the audio to the outside of the staff terminal 30.

[0058] The location information sensor 350 is a sensor that detects the location of the staff terminal 30, and is, for example, a GPS (Global Positioning System) module. A GPS module is a receiving device used in a satellite positioning system. In a satellite positioning system, signals are received from at least three or four satellites, and the current location of the staff terminal 30, which is equipped with a GPS module, is detected based on the received signals. The location information sensor 350 may also detect the current location of the staff terminal 30 from the location of the wireless base station to which the staff terminal 30 is connected.

[0059] Camera 360 is a device that receives light using a photodetector and outputs it as a shooting signal.

[0060] The motion sensor 370 includes, for example, an acceleration sensor, an angular velocity sensor, or a combination thereof. However, it is not limited to these. The motion sensor 370 detects the movement of the staff terminal 30 and outputs the sensing result.

[0061] The storage unit 380 is implemented by, for example, memory 35 and storage 36, and stores data and programs used by the staff terminal 30. The storage unit 380 stores, for example, user ID 381 and application program 382.

[0062] User ID 381 is the user's account ID. When a user accesses Server 20, the staff terminal 30 sends the user ID to Server 20. Server 20 identifies the user based on the user ID and provides the services related to this disclosure to the user. The user ID includes information such as a session ID that is temporarily assigned by Server 20 to identify the user using Staff Terminal 30. Staff Terminal 30 may access Server 20 via other information processing devices such as servers that provide third-party services.

[0063] The application program 382 may be pre-stored in the storage unit 380, or it may be configured to be downloaded from a web server operated by the service provider via a communication interface. The application program 382 includes applications such as a web browser application. The application program 382 includes an interpreted programming language such as JavaScript® that is executed on the web browser application stored in the staff terminal 30.

[0064] The control unit 390 is realized when the processor 39 reads a program stored in the memory unit 380 and executes instructions contained in the program. The control unit 390 controls the operation of the staff terminal 30. By operating according to the program, the control unit 390 performs the functions of an operation reception unit 391, a transmission / reception unit 392, and a presentation control unit 393.

[0065] The operation reception unit 391 processes instructions or information input from the input device 33. For example, the operation reception unit 391 receives instructions or information input from a touch-sensitive device 331 or the like.

[0066] Furthermore, the operation reception unit 391 receives images input from the camera 360. Specifically, for example, the operation reception unit 391 receives the image data captured by the camera 360.

[0067] Furthermore, the operation reception unit 391 receives audio information input from the microphone 371. Specifically, for example, the operation reception unit 391 receives audio data input from the microphone 371 and converted into digital data by the audio processing unit 37.

[0068] Furthermore, the operation reception unit 391 receives behavioral information input from the motion sensor 370. Specifically, for example, the operation reception unit 391 receives a predetermined behavior detected by the motion sensor 370.

[0069] The transmitting / receiving unit 392 performs processing to enable the staff terminal 30 to send and receive data with external devices such as the server 20 in accordance with a communication protocol. Specifically, for example, the transmitting / receiving unit 392 sends instructions entered by the user to the server 20. The transmitting / receiving unit 392 receives information provided by the server 20.

[0070] The presentation control unit 393 controls the output device 34, etc., in order to present various information to the user. Specifically, for example, the presentation control unit 393 generates a UI based on data that constitutes various UIs received from the server 20, and presents various information to the user by outputting the UI to the output device 34 (for example, the display 341).

[0071] <Functional configuration of Server 20> Figure 4 shows an example of the functional configuration of server 20. As shown in Figure 4, server 20 functions as a communication unit 201, a storage unit 202, and a control unit 203.

[0072] The communications unit 201 performs processing to enable the server 20 to communicate with external devices.

[0073] The memory unit 202 stores, for example, a user table 2021, a biometric information table 2022, a ticket table 2023, and so on.

[0074] The control unit 203 is realized when the processor 29 reads a program stored in the memory unit 202 and executes instructions contained in the program. By operating according to the program, the control unit 203 performs functions as a receive control module 2031, a transmit control module 2032, a presentation control module 2033, a personal information comparison module 2034, and a biometric information comparison module 2035.

[0075] The receive control module 2031 controls the process by which the server 20 receives signals from external devices according to a communication protocol. Specifically, for example, the receive control module 2031 receives signals transmitted from the user terminal 10.

[0076] The transmission control module 2032 controls the process by which the server 20 transmits signals to external devices according to a communication protocol.

[0077] The presentation control module 2033 presents various UIs to the user via the user terminal 10. Specifically, for example, the presentation control module 2033 presents various UIs to the user terminal 10 by transmitting information to the user terminal 10 that allows the user terminal 10 to output various UIs to the output device 14. Specifically, the presentation control module 2033 generates data that constitutes various UIs in response to instructions from other modules, etc., and transmits it to the user terminal 10.

[0078] The personal information comparison module 2034 controls the process of comparing multiple pieces of personal information received from multiple users and determining whether there are any combinations of users with similar or matching personal information. Specifically, the personal information comparison module 2034 compares the personal information of a user that is temporarily stored (for example, personal information sent to server 20 to register for the service) with the personal information of a user that is already stored (for example, personal information of a user already registered for the service in user table 2021). The personal information comparison module 2034 also compares personal information among multiple users whose personal information is stored in user table 2021. Furthermore, the personal information comparison module 2034 compares personal information among users whose personal information is temporarily stored. As a result, the personal information comparison module 2034 identifies combinations of users who have similar or matching personal information. The number of users included in a combination may be two or more. For example, the Personal Information Comparison Module 2034 normalizes the personal information for each item and performs comparisons based on exact matches or predetermined similarity criteria. This allows it to detect combinations of users whose personal information is similar or matches, even if there are variations in wording or intentional alterations.

[0079] The biometric information comparison module 2035 controls the process of comparing the biometric information of users included in identified combinations. Specifically, the biometric information comparison module 2035 compares the biometric information of one user included in the combination with the biometric information of other users included in the combination and calculates the similarity between the two. For example, the biometric information comparison module 2035 extracts feature vectors from facial image data and calculates similarity based on the distance between them. The biometric information comparison module 2035 may also determine whether the users being compared are the same person based on the calculated similarity and a predetermined threshold.

[0080] <Data structure> The data structure used in this embodiment will be described below.

[0081] Figure 5 shows the data structure of the User Table 2021. The User Table 2021 is a table that stores and manages user information. The User Table 2021 has a primary key of User ID and columns such as User Name, Address, Telephone Number, Email Address, Fraud Suspicion Flag, and Account Restriction Status. When a user registers to use the service, their information is stored in a new record in the User Table 2021. This allows the user to use the service according to this embodiment.

[0082] The "User ID" field stores the user ID used to identify the user.

[0083] The "User Name" field is used to store the user's name. Specifically, the "User Name" field stores any string of characters, such as the user's full name or nickname.

[0084] The "Address" field is used to store the user's address. Specifically, the "Address" field stores address information such as the prefecture, city / ward / town / village, and street number of the user's residence.

[0085] The "Phone Number" field is used to store the user's phone number. Specifically, the "Phone Number" field stores the phone number that serves as the user's contact number.

[0086] The "Email Address" field is used to store the user's email address. Specifically, the "Email Address" field stores the email address that serves as the user's contact information.

[0087] The "Suspicion of Fraud Flag" item stores information indicating whether a user meets certain conditions regarding fraudulent activity. Specifically, the "Suspicion of Fraud Flag" item stores information indicating that the user meets the specified conditions if they do, and information indicating that the user does not meet the specified conditions if they do not.

[0088] The "Account Restriction Status" field stores information about the restrictions on a user's account. Specifically, it stores information indicating the status, such as no restrictions, partial functionality restrictions, or account suspension.

[0089] Figure 6 shows the data structure of the biometric information table 2022. The biometric information table 2022 is a table that stores information about a user's biometric information. The biometric information table 2022 has a biometric information ID as its primary key and columns such as user ID and biometric information. The biometric information stored in the biometric information table 2022 is associated with the personal information stored in the user table 2021.

[0090] The item "Biometric Information ID" is an item that stores the biometric information ID that identifies the biometric information.

[0091] The "User ID" field stores the user ID associated with the user's biometric information. This user ID corresponds to the user ID in user table 2021.

[0092] The "Biometric Information" field is for storing the user's biometric information. Specifically, the "Biometric Information" field includes information obtainable from physical characteristics used to identify or authenticate an individual. For example, the "Biometric Information" field includes information obtained from the user's face, fingerprints, iris, voiceprint, vein pattern, palm print, signature (handwriting), etc.

[0093] In this embodiment, an example is described in which the user's facial image data is used as biometric information. Therefore, "facial image" in the description of this embodiment can be interpreted as other biometric information.

[0094] Furthermore, biometric information may be encoded or encrypted by a predetermined calculation. For example, facial image data may be stored in the storage unit 202 in the form of numerical data of feature vectors, mapping data of facial feature points, hashed data, or the like.

[0095] Figure 7 shows the data structure of ticket table 2023. Ticket table 2023 is a table that stores information about tickets. Ticket table 2023 is a table that has the ticket ID as the primary key and columns such as holder and ticket status.

[0096] The "Ticket ID" field stores the ticket ID that identifies the ticket.

[0097] The "Holder" field stores information about the user who holds the ticket. Specifically, the "Holder" field stores the user ID of the user who holds the ticket. When a ticket is transferred from the ticket-holding user to another user, the "Holder" field is updated with the user ID of the other user to whom the ticket is being transferred. The "Holder" field may also store information about the original ticket holder and the history of ticket transfers.

[0098] The "Ticket Status" field stores the status of the ticket. Specifically, the "Ticket Status" field stores information such as "Valid," "Invalid," or "Used."

[0099] <Operation> The operation of the information processing system of this embodiment will now be described. Figure 8 is a flowchart illustrating the multiple account detection process of this embodiment.

[0100] The multiple account detection process may be initiated, for example, when user A (the first user) who is trying to use the service for the first time sends a request to the server 20 for registration to use the service via user terminal 10.

[0101] In step S101, server 20 receives personal information of users who use the service. Specifically, server 20 receives personal information necessary for using the service from user A via user terminal 10. For example, user terminal 10 displays an input screen for entering personal information on display 141. User terminal 10 receives text input of personal information (name, address, telephone number, email address, etc.) from user A. User terminal 10 sends the entered personal information to server 20. Server 20 receives the information such as name, address, telephone number, and email address sent from user terminal 10.

[0102] Server 20 may accept the following information as personal information, in addition to or instead of name, address, telephone number, and email address. The following information may be image data or text data extracted from images. • Information regarding official identification documents (driver's license, My Number card, health insurance card, passport, etc.) • Information regarding payment methods (bank account information, credit card information)

[0103] In step S102, the server 20 receives the user's biometric information. Specifically, the server 20 receives facial image data of user A via the user terminal 10. For example, the user terminal 10 acquires image data of user A's face, captured by the camera 160, via the input device 13. The user terminal 10 transmits the acquired image data to the server 20. The user terminal 10 may also encode, encrypt, or otherwise modify the acquired image data in a predetermined format by performing calculations on it. Alternatively, the user terminal 10 may transmit the user A's face image data stored in the storage unit 202 to the server 20. The server 20 receives the user A's face image data.

[0104] Server 20 associates the received personal information with biometric information. Specifically, the server 20 associates the personal information of user A received in step S101 with the biometric information of user A received in step S102. For example, server 20 issues a session ID related to the current process and stores user A's personal information and biometric information associated with the issued ID.

[0105] In step S103, the server 20 compares multiple pieces of personal information received from multiple users and determines whether there are any combinations of users who have similar or matching personal information. Specifically, server 20 determines whether there is a user B (second user) among other users whose personal information has already been received by server 20 that has personal information similar to or matching the personal information of user A. In this case, "multiple pieces of personal information received for multiple users" includes "user A's personal information" and "personal information of other users whose personal information has already been received by server 20." For example, server 20 refers to user table 2021, which stores information on users already registered with the service, and determines whether there is a user B whose personal information is similar to or matches that of user A, among the users whose information is registered in user table 2021. For example, server 20 searches the user table 2021 for items such as "name," "telephone number," and "email address" based on user A's personal information to determine if there are any records that exactly match or are similar to user A's personal information.

[0106] Having personal information that is a perfect match or similar to User A's personal information means that at least one item of data in User A's personal information is a perfect match or similar.

[0107] The similarity of personal information is determined, for example, as follows: When determining the similarity of email addresses, comparison may be made after normalization (conversion to lowercase, removal of specific symbols such as periods, normalization of the domain portion, etc.). Alternatively, similarity may be determined if the edit distance between the strings in the local portion is below a predetermined threshold. Furthermore, if the local part contains numbers, patterns that are judged to be similar, such as sequential numbers (for example, "user12345@example.com" and "user12346@example.com") or an increase in the number of digits for the same sequence of numbers (for example, "user12345@example.com" and "user123456@example.com"), may be registered in advance on server 20, and similarity may be determined. Alternatively, patterns of similar email addresses may be trained on a machine learning model, and the pairs of email addresses whose similarity to be determined may be input into the trained model to output a similarity score. Any calculation method used to quantify the output of the trained model can be used to calculate the similarity score. Furthermore, similarity may also be determined if a predetermined number of characters (e.g., 8 characters) or more of the string match consecutively in the local portion, or if a predetermined percentage (e.g., 80%) or more of the characters in the entire local portion match.

[0108] In determining the similarity of telephone numbers, patterns that are judged as similar, such as when the last four or last eight digits match, or when they are consecutive numbers, may be registered in advance on the server 20, and similarity may be determined from there.

[0109] When determining the similarity of addresses, comparisons may be made after standardizing full-width / half-width characters and acknowledging variations in spelling. Alternatively, the similarity of addresses may be determined by matching postal codes, matching prefectures and municipalities, and calculating the degree of similarity of street numbers. For street numbers and building names, similarity may be determined by the degree of matching of substrings.

[0110] In determining the similarity of names, the text data of the names received may be compared directly, or names written in kanji, hiragana, katakana, etc., may be converted to phonetic readings and the similarity of the phonetic readings may be evaluated. This allows for determining similarity between names with the same phonetic reading in kanji, or between names registered in kanji and names registered in hiragana if their phonetic readings match. Furthermore, names may be determined to be similar if old and new kanji forms have been converted, or if the order of the surname and given name has been changed.

[0111] Alternatively, the similarity of each item may be calculated, and an overall similarity score may be derived. If this score exceeds a predetermined threshold, the record may be judged as a similar record. The similarity can be calculated using any method; for example, for each item, one point may be added to the similarity score each time it is judged to be similar from each perspective.

[0112] Furthermore, existing users (specifically, users whose information is already stored in user table 2021) may link their accounts for the services provided in this embodiment with their accounts for other services. In that case, server 20 may store personal information registered with the other service (for example, email address, telephone number, address, name, etc.; hereinafter, these may be collectively referred to as "linked personal information") as information of the existing user. Furthermore, when determining the similarity of personal information, server 20 can not only compare the personal information received from user A with the personal information of existing users stored in user table 2021, but also with the personal information of linked parties related to existing users.

[0113] As an example, let's consider a case where a phone number (hereinafter referred to as the linked phone number) is stored as linked personal information. For example, suppose a specific user registers phone number TEL1 with this service, registers linked phone number TEL2 with an account on another service, and links the accounts with each registered phone number. Subsequently, when attempting to register a duplicate account, it is conceivable that the user might register phone number TEL2 as a new phone number with this service to avoid duplication of phone numbers within this service. In this case, server 20 can compare the newly registered telephone number TEL2 with the linked telephone number TEL2 that the user had already registered with another service. Since the two match, server 20 can determine that the user who had registered TEL2 as a linked telephone number and the user who registered telephone number TEL2 with this service during this new registration are likely the same person.

[0114] In step S104, the server 20 identifies combinations of users having similar or matching personal information based on the determination result in step S103, and then branches the processing accordingly. Specifically, in step S103, if server 20 determines that there is a user B (second user) whose personal information is similar to or matches that of user A (Yes), it identifies the combination of user A and user B as a combination of users with similar or matching personal information (hereinafter sometimes referred to as the "combination") and proceeds to step S105. If server 20 determines that there is no user B (second user) whose personal information is similar to or matches that of user A (No), it proceeds to step S108. For example, if the search in step S103 finds one or more matching records, the server 20 determines "Yes" and retrieves the user ID of the matching record (user ID of user B). On the other hand, if no matching records are found, the server determines "No".

[0115] In step S105, the server 20 compares the biometric information associated with each of the multiple users included in the identified combination. Specifically, server 20 compares the biometric information of user A with the biometric information of user B. For example, the facial image data of user A received in step S102 is compared with the facial image data of user B obtained by searching the biometric information table 2022 based on user B's user ID. As an example, server 20 extracts feature vectors from face image data and calculates the similarity between the feature vectors obtained from user A's face image data and the feature vectors obtained from user B's face image data. For example, similarity may be determined if the Euclidean distance between the feature vectors is less than or equal to a predetermined value. In calculating the distance between feature vectors, algorithms for calculating the distance between arbitrary multidimensional vectors, such as the Mahalanobis distance, Manhattan distance, Chebyshev distance, and Minkowski distance, may be applied.

[0116] Furthermore, the server 20 may calculate a similarity score of biometric information between user A and user B. The similarity score may be, for example, the reciprocal of the Euclidean distance plus 1 in the case of facial image data. As a result, the smaller the Euclidean distance, the closer the score will be to 1, and the larger the Euclidean distance, the closer the score will be to 0.

[0117] Furthermore, Server 20 may determine whether User A and User B are the same person by comparing their biometric information. For example, if the calculated similarity score is above a predetermined threshold (e.g., 0.8), Server 20 determines that User A and User B are the same person. The threshold can be freely set by the service staff, etc. For example, in this embodiment, since the comparison target is narrowed down to User A and User B based on the similarity of personal information before comparing their biometric information, the comparison target for biometric information is limited to combinations of users whose personal information is similar in advance. Therefore, it is conceivable to increase the detection sensitivity by setting the threshold to a lower value than usual. This makes it possible to more effectively detect the creation of multiple accounts by the same person. For example, the threshold for determining whether two individuals are the same person may vary depending on predetermined conditions. Specifically, the more similar the personal information of the users is, the lower the threshold may be.

[0118] In step S106, the server 20 presents the biometric information of multiple users included in the identified combination to the service staff. Specifically, server 20 presents the biometric information of user A and user B to staff via staff terminal 30. For example, server 20 sends facial image data of user A and facial image data of user B, or information indicating the reference to each facial image data, to staff terminal 30, and displays facial image data of user A and user B on the display 341 of staff terminal 30.

[0119] Furthermore, server 20 may present the staff with the results of comparing user A's biometric information with user B's biometric information. Specifically, the server 20 may send the similarity score calculated in step S105 to the staff terminal 30 and display it as a numerical value on the display 341. The server 20 may also display text such as "Very similar" if the similarity score is 0.9 or higher, "Similar" if it is 0.7 or higher but less than 0.9, "Somewhat similar" if it is 0.5 or higher but less than 0.7, and "Low similarity" if it is less than 0.5 on the display 341 of the staff terminal 30.

[0120] Furthermore, server 20 may present the staff with the result of its determination of whether or not user A and user B are the same person. Specifically, the server 20 may send the result of the determination in step S105 regarding whether or not it is the same person to the staff terminal 30 and display it on the display 341. For example, server 20 may display a message such as "High probability of being the same person" if it determines that the two are not the same person, or "Low probability of being the same person" if it determines that they are not the same person. Alternatively, the determination result may be displayed using an icon (for example, a circle if the probability of being the same person is high, and a cross if the probability is low).

[0121] Figure 9 illustrates the detection screen D1 of this embodiment. The detection screen D1 is a screen used by staff operating the service according to this embodiment to compare information of a first user suspected of having multiple accounts with information of a second user and determine whether the first user and the second user are the same person. The detection screen D1 is displayed on the display 341 of the staff terminal 30, for example, in step S106 of the pre-registration detection process.

[0122] The detection screen D1 includes a first user information display area D11, a second user information display area D12, a comparison result display area D13, an input button D14, and an input button D15.

[0123] The first user information display area D11 is an area for displaying information about the first user (hereinafter referred to as User A). In the first user information display area D11, for example, personal information such as the first user's name, telephone number, and email address, as well as biometric information such as a facial image, are displayed in a way that allows comparison with the information of the second user.

[0124] The second user information display area D12 is an area for displaying information about the second user (hereinafter referred to as User B). In the second user information display area D12, for example, personal information such as the name, telephone number, and email address of the second user, as well as biometric information such as a facial image, are displayed in a way that allows comparison with the information of the first user.

[0125] The comparison result display area D13 is an area for displaying the comparison results of the biometric information of user A and user B that were compared in step S105. The comparison result display area D13 includes a similarity display area D131 and a judgment result display area D132.

[0126] The similarity display section D131 displays a score indicating the similarity of the facial photographs and a graph showing the similarity. For example, the similarity display section D131 displays a score that quantifies the comparison result of the facial images, and an object that visually represents the similarity of the facial images.

[0127] The judgment result display section D132 displays the result of the server 20's determination of whether user A and user B are the same person. For example, the judgment result display section D132 may display a message such as "Possibility of being the same person: High".

[0128] Input button D14 is a button to be selected by the service staff when they determine that user A and user B are the same person. When the staff terminal 30 receives input from the staff member to input button D14, it sends information to the server 20 indicating that it has been determined that user A and user B are the same person.

[0129] Input button D15 is a button to be selected by the service staff when they determine that user A and user B are different people. When the staff terminal 30 receives input from the staff member to input button D15, it sends information to the server 20 indicating that it has been determined that user A and user B are different people.

[0130] After reviewing the detection screen D1, the staff member can determine whether user A and user B are the same person by referring to the personal information and facial images of the users displayed in the first user information display area D11 and the second user information display area D12, as well as the judgment result from the server 20 displayed in the comparison result display area D13. Note that the comparison result display area D13 does not need to be displayed on the detection screen D1. In this case, the staff member will compare the facial image of user A and the facial image of user B displayed in the first user information display area D11 to determine whether they are the same person.

[0131] In step S107, the server 20 performs post-determination processing. In post-determination processing, the server 20 performs predetermined processing depending on whether the comparison result satisfies predetermined conditions. Note that the server 20 may perform post-determination processing based not on the determination result in step S105, but on the result of the staff's determination of whether user A and user B are the same person (specifically, which of input button D14 and input button D15 was selected). Specifically, if the comparison result does not meet the predetermined conditions, or if input button D15 is selected in step S106, server 20 assumes that user A and user B are different people and proceeds to step S108 without executing step S107. On the other hand, if the comparison result meets the predetermined conditions, or if input button D14 is selected in step S106, server 20 assumes that user A and user B are the same person and proceeds to step S108 after executing at least one of the following processes. Note that even if the comparison result meets the predetermined conditions, server 20 may proceed to step S108 without executing step S107.

[0132] Furthermore, a comparison result that does not meet the specified conditions means, for example, that the similarity between user A and user B falls below the threshold. Also, a comparison result that does not meet the specified conditions means, for example, that user A and user B are determined not to be the same person. Furthermore, a comparison result that meets the specified conditions means, for example, that the similarity between user A and user B is above the threshold. Also, a comparison result that meets the specified conditions means, for example, that user A and user B are determined to be the same person.

[0133] The specified conditions can be rephrased as the conditions for determining whether or not a user is suspected of fraudulent activity. Users who meet the specified conditions can be rephrased as users suspected of fraudulent activity (specifically, the creation of multiple accounts by the same person).

[0134] (1) Account usage restriction process Server 20 restricts the use of user accounts of users associated with at least one of the personal information items included in the combination if the comparison results meet the specified conditions. Specifically, if the comparison of biometric information between user A and user B does not meet predetermined conditions and it is determined that they are likely to be the same person, server 20 stores information to restrict user A's access to their account. For example, server 20 associates information indicating that user A is a user whose account usage is restricted. This information is reflected as the value "Account Restriction Status" in the "Account Restriction Status" field when creating a record for user A in user table 2021 in step S108. As a result, in step S108, registration is completed with user A's use of the service restricted. Specifically, after user A's record is registered, when server 20 provides services to user A (including the distribution of electronic tickets to user terminal 10 and sending emails), or when user terminal 10A requests server 20 to provide a predetermined function of the service, server 20 searches user table 2021 based on user A's user ID. If server 20 confirms that the "account status" is "suspended," it will not provide services to user A. In this case, server 20 may notify user A that their account use is restricted by displaying a message on the display 141 of user terminal 10. Server 20 may also perform processing to restrict account use for user B, either in place of or in addition to user A.

[0135] (2) Processing of suspected fraudulent account registrations If the comparison result does not meet the predetermined conditions, the server 20 enables user A's user account. If the comparison result does meet the predetermined conditions, the server 20 enables user A's user account and stores user A as a user who meets the predetermined conditions. Specifically, if the comparison result meets the predetermined conditions and it is determined that there is a high probability that user A and user B are the same person, server 20 associates information indicating that user A may be a fraudulent user with multiple accounts with user A's information. This information is reflected in the "Suspicious Fraud Flag" field as "Suspicious Fraud" or similar when creating user A's record in user table 2021 in step S108. This makes it possible to identify users suspected of fraudulent activity for account monitoring and analysis. Furthermore, while user A's account becomes active and they gain access to the service upon registration in user table 2021, the information stored in the "suspected fraud flag" allows service administrators (including staff) to monitor them in the future. Furthermore, after associating information indicating that user A may be a fraudulent user with multiple accounts with user A's information, server 20 may then present information to staff via staff terminal 30 indicating that user A may be a fraudulent user. This allows staff to effectively deal with fraudulent users. Alternatively, after associating information indicating that user A may be an unauthorized user with multiple accounts with user A's information, the server 20 may not register user A's user account in step S108, but instead send information to user A's user terminal 10 indicating that user A's service registration is not complete (for example, "under review"), thereby informing user A that their service registration is not complete. Furthermore, if server 20 associates information indicating that a user is suspected of fraudulent activity, it does not have to award the user a prize in a lottery for tickets or other items, even if the user applies for such a lottery. For example, in a lottery for a predetermined ticket, server 20 may exclude applicants who are associated with information indicating that they are suspected of fraudulent activity from the lottery process.

[0136] Server 20 may also store a numerical value indicating the degree of suspicion of fraud in the item "Suspicion of Fraud Flag" as a suspicion of fraud score. For example, Server 20 calculates user A's suspicion of fraud score based on the comparison results and stores it as a numerical value in the item "Suspicion of Fraud Flag" in user table 2021. The fraud suspicion score may be higher the higher the biometric similarity score. For example, the fraud suspicion score may be the same value as the biometric similarity score. Furthermore, the fraud suspicion score may be higher the higher the similarity score of the personal information. For example, the fraud suspicion score may be the sum or average of the similarity score of the biometric information and the similarity score of the personal information. This makes it possible to quantitatively identify the degree of suspected fraud and to take gradual action according to the score. For example, server 20 may perform the above-mentioned processing for users suspected of fraud if their fraud suspicion score exceeds a certain threshold.

[0137] (3) Ticket usage restriction processing Server 20 allows the user to use the ticket if the comparison result does not meet the predetermined conditions, and makes the ticket unusable if the comparison result does meet the predetermined conditions. Specifically, if the comparison result meets predetermined conditions and it is determined that there is a high probability that user A and user B are the same person, server 20 stores information that the ticket that user A intended to use will become unusable. For example, server 20 associates information that the ticket is unusable with user A's information. After step S108, when user A is associated with the ticket as the holder in ticket table 2023, this information is reflected as the value "Invalid" in the "Ticket Status" field. As a result, for example, when the server 20 sends information to each user's user terminal 10 to guide them in downloading a ticket, it checks the "Ticket Status" item in the ticket table 2023. The server 20 does not send information to user A, whose "Ticket Status" item is "Invalid". As a result, user A is unable to download the ticket, and the ticket becomes unusable. Alternatively, for example, even after the ticket has been downloaded to user A's user terminal 10, the server 20 may send information to user A's user terminal 10 indicating that the ticket has become unusable, triggered by the value "Invalid" being stored in the "Ticket Status" item of the ticket table 2023 related to that ticket. The user terminal 10 may then, for example, make it impossible to display the ticket screen for that ticket and display information on the display 141 indicating that the ticket has become unusable.

[0138] (4) Processing of additional authentication requests Server 20 requests additional authentication from the users involved in the combination if the comparison results meet the predetermined conditions, and does not request additional authentication from the users if the comparison results do not meet the predetermined conditions, and activates the users' user accounts. Specifically, if the comparison result meets the predetermined conditions and it is determined that there is a high probability that user A and user B are the same person, server 20 executes a process to request user A to provide additional authentication information. For example, before executing step S108, the server 20 sends a message to user A via user terminal 10 requesting additional personal information, such as the submission of identification documents. If additional personal information is sent from user A's user terminal 10, the server 20 compares the additional personal information with user B's personal information to determine again whether user A and user B are the same person. If it is determined that user A and user B are different people, the server 20 proceeds to step S108. This reduces the risk of misidentification while ensuring the convenience of legitimate users.

[0139] (5) Additional search process If the comparison result meets predetermined conditions, Server 20 determines whether there is any biometric information among the stored biometric information of other users that is similar to or matches the biometric information of the user involved in the combination, and presents the result of the determination to the staff. Specifically, if the comparison results meet predetermined conditions and it is determined that there is a high probability that user A and user B are the same person, server 20 investigates whether there are other users with similar or matching biometric information to at least one of user A and user B. For example, server 20 sequentially compares all biometric information stored in biometric information table 2022 with the biometric information of at least one of user A and user B, and detects users whose biometric information has a similarity exceeding a predetermined threshold. Server 20 presents the biometric information and personal information of each detected user to the staff by displaying it on the display 341 of the staff terminal 30. This allows for more effective identification of multiple accounts created by the same user by detecting accounts of other users with biometric information similar to that of the detected user, in cases where suspicion of multiple accounts by the same person is detected. Note that the additional search process is performed independently of the storage of user A's information in step S108.

[0140] (6) Registration rejection process If the comparison results meet the predetermined conditions, Server 20 rejects User A's registration altogether and terminates the process. Specifically, if the comparison result satisfies the predetermined conditions and it is determined that there is a high probability that user A and user B are the same person, the server 20 does not execute step S108 and terminates the process. For example, without executing step S108, the server 20 sends information to user A's user terminal 10 indicating that user A's user account was not registered with the service. Upon receiving this information, user terminal 10 displays information on the display 141 indicating that user A's user account was not registered with the service. This prevents the same person from fraudulently creating multiple accounts.

[0141] The processes described in (1) through (6) may be freely combined as long as no contradictions arise.

[0142] Furthermore, the judgment results described in (1) to (6) and the information assigned to the account (such as the suspected fraud flag and account restriction status) may be provided from server 20 to the server providing the third-party service, as information that the third-party service provider may use to determine how to treat the user in the third-party service (such as whether or not the service can be used and whether or not the provision of certain functions is restricted).

[0143] In that case, the information that may be provided from server 20 to the server providing the third-party service may be retained in the third-party service as information for managing users. More specifically, the database on server 20 may be configured to manage information about users in association with information that identifies the operator (e.g., operator ID, company ID, etc.) and information about the user's attributes in the operator's third-party services. Specifically, user attributes refer to information indicating the account status, the scope of service availability, etc., and may also refer to information indicating availability, suspension, inability to use certain services, inability to purchase certain tickets / products, etc. This allows staff operating each third-party service to refer to information provided by server 20 and the status of each user's account related to their company, registered in server 20's database, and to set service availability, restrictions on the provision of specific functions, etc., for each user. Therefore, even with the same user account, it is possible to implement flexible responses depending on the service provider, such as restricting access to third-party services provided by one provider while allowing normal access to third-party services provided by another provider.

[0144] In step S108, the server 20 stores the user's personal information and biometric information. Specifically, for example, server 20 creates a new record in user table 2021, storing the automatically generated ID in the "User ID" field and the received personal information in the "User Name," "Address," "Phone Number," and "Email Address" fields. Also, in step S107, if there is information that has been pre-associated with user A's information, the corresponding value is stored in the corresponding field (for example, "Suspicious Fraud Flag" or "Account Restriction Status"). Furthermore, server 20 creates a new record in biometric information table 2022, storing the automatically generated ID in the "Biometric Information ID" field and the received biometric information (for example, facial image data) in the "Biometric Information" field. As a result, user A's user account is registered with the service according to this embodiment.

[0145] In step S109, the server 20 presents the user with information indicating that the registration of the user account has been completed. Specifically, the server 20 sends a registration completion notification to the user terminal 10. This notification may include information associated with user A's information, depending on the result of the post-determination processing in step S107. For example, the server 20 displays a message such as "Registration complete" on the display 141 of the user terminal 10.

[0146] Furthermore, if additional authentication is requested during the post-processing stage, a message requesting additional authentication, such as "Registration complete. Additional identity verification is required," may be displayed. Also, if account usage restriction is performed, information indicating that account usage is restricted, such as "Registration complete, but access to some services is restricted. Please contact us for details," may be displayed. This makes it easier for users to understand the status of their account.

[0147] In this embodiment, an example is shown in which each step in each process is executed in a specific order. However, the execution order of each step is not limited to the example described, as long as there are no dependencies. In particular, unless a contradiction arises, the process executed by the terminal device 10 may be executed by the server 20, and the process executed by the server 20 may be executed by the terminal device 10.

[0148] <Summary> As described above, System 1 of this embodiment receives personal information of users using the service, receives biometric information of users, and determines whether there are any combinations of users with similar or matching personal information from among the multiple users whose personal information has been received. If a combination exists, System 1 presents the biometric information of the multiple users included in the combination to the service staff. This allows staff to effectively identify information about users suspected of having duplicate accounts, thereby effectively preventing the creation of duplicate accounts. Furthermore, in systems that verify identity by requiring users to register biometric information such as facial photographs, personal information, and identification documents during account registration, it is possible to effectively prevent multiple service registrations by the same person by detecting combinations of users with identical or similar personal information and comparing biometric information among the users included in the combination.

[0149] Furthermore, System 1 may compare the biometric information of multiple users included in the identified combination and present the results of the comparison to the staff. This allows staff to verify the similarity of biometric information in conjunction with objective indicators, enabling them to more effectively determine whether or not individuals are the same person.

[0150] Furthermore, when System 1 receives personal information, it receives the personal information of the first user; when it receives biometric information, it receives the biometric information of the first user; and when it determines whether a combination exists, it refers to a database where personal information is stored to determine whether there is a second user whose personal information is similar to or matches that of the first user. If it determines that a second user exists, it may identify the first user and the second user as a combination. This allows for the rapid comparison of new user information with existing user information when new accounts are registered, effectively detecting the possibility of duplicate accounts.

[0151] Furthermore, System 1 may compare the biometric information of the first user with the biometric information of the second user and present the results of the comparison between the biometric information of the first user and the biometric information of the second user to the staff. This allows staff to objectively compare biometric information for users suspected of having duplicate accounts during new registration, enabling them to more effectively decide whether to approve or reject registration.

[0152] Furthermore, if the comparison results meet predetermined conditions, System 1 may restrict the use of the first user's user account. This effectively prevents fraudulent use of the service by users suspected of having duplicate accounts.

[0153] Furthermore, System 1 may make the ticket obtained by the first user unusable if the comparison result meets predetermined conditions, and may make the ticket obtained by the first user usable if the comparison result does not meet predetermined conditions. This prevents the use of tickets obtained fraudulently through the use of duplicate accounts, etc.

[0154] Furthermore, if the comparison results meet the predetermined conditions, the user account of the first user may be enabled and the first user may be remembered as a user who meets the predetermined conditions. If the comparison results do not meet the predetermined conditions, the user account of the first user may be enabled. This allows users suspected of fraudulent activity to continue using the service without being immediately removed, while being managed and monitored. This reduces the risk of false positives and can be used for future fraud prevention measures.

[0155] Furthermore, if the comparison results meet the specified conditions, the system may request additional authentication from the first user, and if the comparison results do not meet the specified conditions, the system may allow the first user's user account to be activated without requesting additional authentication. This allows for increased certainty in determining whether fraud is suspected through additional authentication, thereby reducing the risk of mistakenly excluding legitimate users.

[0156] Furthermore, if the comparison results meet the specified conditions, the system may determine whether there is any biometric information among the stored biometric information of other users that is similar to or matches the biometric information of the user involved in the combination, and present the result of the determination to the staff. This allows for the efficient detection of other accounts that may have been created by the same person (for example, accounts that were previously overlooked) when one suspicious account is detected, enabling more comprehensive detection of duplicate accounts.

[0157] (modified version) The server 20 may not immediately execute the process in step S103 after step S102 in the above embodiment, but may execute step S103 at a predetermined timing. In this case, after the process in step S102, the server 20 may store information about user A in the user table 2021, and then store information indicating that the personal information and biometric information of the account have not yet been determined. For example, information indicating that the account is under review to determine whether it is an account that attempted to register multiple accounts fraudulently or a legitimate account may be stored. Until steps S104 to S109 are executed, information indicating that user A's registration is under review may be displayed on user A's user terminal 10.

[0158] In the above embodiment, the multiple account detection process was performed when user A registered for the service. However, the multiple account detection process may also be performed for users already registered in user table 2021. For example, the server 20 may compare personal information of multiple users whose personal information has already been received when they register to use the service and whose information is already stored in the user table 2021, and determine whether there are any combinations of users whose personal information is similar or matches. In this case, for a given user whose personal information is stored in the user table 2021, the server 20 may determine, in the same way as step S103 of the above embodiment, whether there are other users whose personal information stored in the user table 2021 is similar or matches. If it is determined that there are other users whose personal information is similar to or matches that of the specified user, the server 20 may identify the two as a combination and perform biometric information comparison (S105), presentation of comparison results (S106), and post-determination processing (S107).

[0159] <Basic Computer Hardware Configuration> Figure 10 is a block diagram showing the basic hardware configuration of computer 90. Computer 90 comprises at least a processor 901, main memory 902, auxiliary storage 903, and a communication interface IF991. These are electrically connected to each other by a communication bus 921.

[0160] The processor 901 is hardware for executing the instruction set written in a program. The processor 901 consists of an arithmetic unit, registers, peripheral circuits, etc.

[0161] Main memory 902 is used to temporarily store programs and data processed by programs, etc. For example, it is a volatile memory such as DRAM (Dynamic Random Access Memory).

[0162] Auxiliary storage device 903 refers to a storage device for saving data and programs. Examples include flash memory, HDD (Hard Disc Drive), magneto-optical disk, CD-ROM, DVD-ROM, and semiconductor memory.

[0163] The IF991 communication interface is an interface for inputting and outputting signals for communication with other computers via a network using wired or wireless communication standards. A network consists of various mobile communication systems, such as the internet, LANs, and wireless base stations. For example, a network includes 3G, 4G, and 5G mobile communication systems, LTE (Long Term Evolution), and wireless networks that can connect to the internet via designated access points (e.g., Wi-Fi®). When connecting wirelessly, communication protocols include, for example, Z-Wave®, ZigBee®, and Bluetooth®. When connecting via a wired connection, the network also includes connections made directly via USB (Universal Serial Bus) cables, etc.

[0164] Furthermore, by distributing all or part of each hardware configuration across multiple computers 90 and connecting them to each other via a network, a computer 90 can be virtually realized. Thus, the concept of computer 90 includes not only a computer 90 housed in a single enclosure or case, but also a virtualized computer system.

[0165] <Basic Functional Configuration of Computer 90> The functional configuration of the computer realized by the basic hardware configuration of computer 90 (Figure 10) is described below. The computer comprises at least one functional unit: a control unit, a memory unit, and a communication unit.

[0166] Furthermore, the functional units of computer 90 can also be realized by distributing all or part of each functional unit across multiple computers 90 interconnected via a network. The concept of computer 90 includes not only a single computer 90 but also a virtualized computer system.

[0167] The control unit is realized when the processor 901 reads various programs stored in the auxiliary storage device 903, loads them into the main memory device 902, and executes processing according to those programs. The control unit can realize various functional units that perform information processing depending on the type of program. In this way, the computer is realized as an information processing device that performs information processing.

[0168] The memory unit is implemented by the main memory 902 and the auxiliary memory 903. The memory unit stores data, various programs, and various databases. The processor 901 can also reserve memory areas corresponding to the memory unit in the main memory 902 or the auxiliary memory 903 according to the program. The control unit can also cause the processor 901 to perform operations such as adding, updating, and deleting data stored in the memory unit according to the various programs.

[0169] A database, specifically a relational database, is used to manage and link together tabular data sets called masters, which are structurally defined by rows and columns. In a database, tables are called tables, masters are called masters, the columns of tables are called columns, and the rows of tables are called records. In a relational database, relationships can be established and linked between tables and masters. Typically, each table and master has a primary key column to uniquely identify records, but setting a primary key column is not mandatory. The control unit can instruct the processor 901 to add, delete, or update records in specific tables and masters stored in the memory unit, according to various programs. Furthermore, by storing data, various programs, and various databases in the memory unit, the information processing device and information processing system related to this disclosure can be considered to have been manufactured.

[0170] Furthermore, the databases and masters in this disclosure may include any data structures (lists, dictionaries, associative arrays, objects, etc.) in which information is structurally defined. Data structures also include data that can be considered as data structures by combining data with functions, classes, methods, etc., written in any programming language.

[0171] The communication unit is implemented by the communication IF991. The communication unit provides the functionality to communicate with other computers 90 via the network. The communication unit can receive information transmitted from other computers 90 and input it to the control unit. The control unit can cause the processor 901 to perform information processing on the received information according to various programs. The communication unit can also transmit information output from the control unit to other computers 90.

[0172] Furthermore, each of the above-mentioned configurations, functions, processing units, processing means, etc., may be implemented in hardware, either partially or entirely, by designing them as integrated circuits, for example. The present invention can also be implemented by software program code that realizes the functions of the embodiment. In this case, a storage medium on which the program code is recorded is provided to a computer, and the processor of that computer reads the program code stored in the storage medium. In this case, the program code read from the storage medium itself realizes the functions of the embodiment described above, and the program code itself and the storage medium on which it is stored constitute the present invention. Examples of storage media used to supply such program code include flexible disks, CD-ROMs, DVD-ROMs, hard disks, SSDs, optical disks, magneto-optical disks, CD-Rs, magnetic tapes, non-volatile memory cards, ROMs, and the like.

[0173] Furthermore, the program code that implements the functions described in this embodiment can be implemented in a wide range of programming or scripting languages, such as assembler, C / C++, Perl, Shell, PHP, and Java (registered trademark).

[0174] Furthermore, the program code for the software that implements the functions of the embodiment may be distributed via a network and stored in a storage means such as a computer's hard disk or memory, or in a storage medium such as a CD-RW or CD-R, and the computer's processor may read and execute the program code stored in the storage means or storage medium.

[0175] The functions realized by the components described herein may be implemented in a circuit or processing circuitry, including general-purpose processors, application-specific processors, integrated circuits, ASICs (Application Specific Integrated Circuits), CPUs (a Central Processing Unit), conventional circuits, and / or combinations thereof, programmed to realize the functions described herein. A processor is considered to be a circuit or processing circuitry, including transistors and other circuits. A processor may be a programmed processor that executes a program stored in memory. In this specification, circuitry, unit, and means are hardware programmed to perform or execute the functions described herein. Such hardware may be any hardware disclosed herein, or any hardware known to be programmed to perform or execute the functions described herein. If the hardware is a processor that is considered to be a type of circuitry, then the circuitry, means, or unit is a combination of hardware and software used to constitute the hardware and / or processor.

[0176] While several embodiments of this disclosure have been described above, these embodiments can be implemented in a variety of other forms, and various omissions, substitutions, and modifications are permitted without departing from the spirit of the invention. These embodiments and their variations are included in the scope and spirit of the invention, as well as in the claims and their equivalents.

[0177] (Note) The details described in each of the above embodiments are noted below.

[0178] (Note 1) A program for operating a computer comprising a processor and memory, the program causing the processor to perform the following steps: receiving personal information of a user of a service; receiving biometric information of the user; determining whether there exists a combination of users from among the multiple users whose personal information has been received that has similar or matching personal information; and, if a combination exists, presenting the biometric information of the multiple users included in the combination to the service staff. (Note 2) The program described in Appendix 1 causes the processor to perform the steps of comparing the biometric information of multiple users included in a specified combination, and presenting the results of the comparison of biometric information to the staff. (Note 3) The program described in Appendix 1 or Appendix 2, which, in the step of receiving personal information, receives the personal information of the first user; in the step of receiving biometric information, receives the biometric information of the first user; and in the step of determining whether a combination exists, refers to a database in which personal information is stored to determine whether there is a second user whose personal information is similar to or matches that of the first user; and if it is determined that a second user exists, identifies the first user and the second user as a combination. (Note 4) The program described in Appendix 3 causes the processor to perform the steps of comparing the biometric information of the first user with the biometric information of the second user, and presenting the results of the comparison between the biometric information of the first user and the biometric information of the second user to the staff. (Note 5) A program as described in Appendix 3 or Appendix 4, which causes the processor to perform a step of restricting the use of the first user's user account if the comparison result meets predetermined conditions. (Note 6) A program described in any of the appendices 3 to 5, which causes the processor to perform the steps of: making the ticket obtained by the first user unusable if the comparison result satisfies predetermined conditions, and making the ticket obtained by the first user usable if the comparison result does not satisfy predetermined conditions. (Note 7) A program described in any of the appendices 2 to 6, which causes the processor to perform the steps of: enabling the user account of the first user if the comparison result satisfies predetermined conditions, and storing the first user as a user that satisfies predetermined conditions; and enabling the user account of the first user if the comparison result does not satisfy predetermined conditions. (Note 8) A program described in any of the appendices 5 to 7, which causes the processor to perform the steps of: requesting additional authentication from the first user if the comparison result satisfies predetermined conditions; and, if the comparison result does not satisfy predetermined conditions, not requesting additional authentication and enabling the first user's user account. (Note 9) A program according to any one of Appendix 2 to Appendix 8, which causes a processor to perform the steps of determining whether, if the comparison result satisfies predetermined conditions, there exists any biometric information among the stored biometric information of other users that is similar to or matches the biometric information of the user involved in the combination, and presenting the result of the determination to a staff member. (Note 10) A method to be performed on a computer having a processor and memory, wherein the processor performs the steps of: receiving personal information of a user using a service; receiving biometric information of the user; determining whether there is a combination of users from among the multiple users whose personal information has been received that has similar or matching personal information; and, if a combination exists, presenting the biometric information of the multiple users included in the combination to the service staff. (Note 11) An information processing device comprising a control unit and a storage unit, wherein the control unit performs the steps of: receiving personal information of a user of a service; receiving biometric information of the user; determining whether there is a combination of users from among the multiple users whose personal information has been received that has similar or matching personal information; and, if a combination exists, presenting the biometric information of the multiple users included in the combination to the service staff. (Note 12) A system comprising: means for receiving personal information of service users; means for receiving biometric information of users; means for determining whether there are any combinations of users with similar or matching personal information from among multiple users whose personal information has been received; and, if a combination exists, means for presenting the biometric information of the multiple users included in the combination to the service staff. [Explanation of Symbols]

[0179] 1... System 10...User terminals 120... Communications Department 13…Input device 131…Touch-sensitive devices 14…Output device 15…Memory 16…Storage 19… Processor 20... Server 22...Communication IF 23…Input / Output Interface 25…Memory 2 hours… storage 29… Processor

Claims

1. A program for operating a computer that includes a processor and memory, The program is provided to the processor: Steps for collecting personal information of users who use the service, The steps include receiving the user's biometric information, A step of determining whether there are any combinations of users with similar or matching personal information among multiple users whose personal information has been received, If such a combination exists, the steps include presenting the biometric information of the multiple users included in the combination to the service staff, A program that executes something.

2. The aforementioned processor, A step of comparing the biometric information of the multiple users included in the identified combination, The step of presenting the results of the comparison between the aforementioned biological information to the staff, The program according to claim 1, which causes to execute.

3. In the step of receiving the aforementioned personal information, the personal information of the first user is received, In the step of receiving the biometric information, the biometric information of the first user is received, In the step of determining whether the aforementioned combination exists, By referring to a database where personal information is stored, it is determined whether there is a second user whose personal information is similar to or matches that of the first user. If it is determined that a second user exists, the first user and the second user are identified as the combination. The program according to claim 1.

4. The aforementioned processor, A step of comparing the biometric information of the first user with the biometric information of the second user, A step of presenting the staff with the results of comparing the biometric information of the first user and the biometric information of the second user, To execute The program according to claim 3.

5. The aforementioned processor, If the comparison result satisfies the predetermined conditions, the system will execute a step to restrict the use of the first user's user account. The program according to claim 4.

6. The aforementioned processor, If the comparison result satisfies predetermined conditions, the ticket obtained by the first user is made unusable; if the comparison result does not satisfy predetermined conditions, the ticket obtained by the first user is made usable. The program according to claim 4, which causes the execution of the program.

7. The aforementioned processor, If the comparison result satisfies the predetermined conditions, the user account of the first user is enabled and the first user is stored as a user who satisfies the predetermined conditions; if the comparison result does not satisfy the predetermined conditions, the user account of the first user is enabled. The program according to claim 4, which causes the execution of the program.

8. The aforementioned processor, If the comparison result satisfies predetermined conditions, the first user is requested to perform additional authentication; if the comparison result does not satisfy predetermined conditions, the first user's user account is enabled without requesting additional authentication. The program according to claim 4, which causes the execution of the program.

9. The aforementioned processor, If the comparison result satisfies predetermined conditions, the step of determining whether there is any biometric information of other users stored that is similar to or matches the biometric information of the user in question, The steps include presenting the results of the assessment to the aforementioned staff, The program according to claim 2, which causes the execution of the program.

10. A method to be performed on a computer comprising a processor and memory, wherein the processor Steps for collecting personal information of users who use the service, The steps include receiving the user's biometric information, A step of determining whether there are any combinations of users with similar or matching personal information among multiple users whose personal information has been received, If such a combination exists, the steps include presenting the biometric information of the multiple users included in the combination to the service staff, How to do it.

11. An information processing apparatus comprising a control unit and a storage unit, wherein the control unit is Steps for collecting personal information of users who use the service, The steps include receiving the user's biometric information, A step of determining whether there are any combinations of users with similar or matching personal information among multiple users whose personal information has been received, If such a combination exists, the steps include presenting the biometric information of the multiple users included in the combination to the service staff, An information processing device that performs the following actions.

12. A means of receiving personal information of users who use the service, A means for receiving the user's biometric information, A means for determining whether there are any combinations of users with similar or matching personal information among multiple users whose personal information has been received, If such combination exists, means for presenting the biometric information of the multiple users included in the combination to the service staff, A system equipped with these features.

Images