Verification system, verification method, and computer program

Abstract

A verification system, method, and program for verifying completion certificates of distributed learning materials are provided. [Solution] An authentication system 700a, which is a verification system for verifying a certificate 130 of a learning material to be distributed, includes reading devices 900A and 900B and an authentication server 700. A first identification information used for user authentication that a first user who instructed the distribution of the learning material is a registered user is stored in an educational institution server (first server) 301 in association with unique information of the registered user, and the reading device reads a first image and a second image from a certificate including a first image 131 associated with the first identification information and a second image 132 associated with the unique information, and a processing device verifies the identification information obtained from the read first image against the first identification information stored in the first server in association with unique information obtained from the read second image, thereby authenticating that the certificate certifies the completion of the learning material.

Description

[Technical field]

[0001] The present disclosure relates to a matching system, a matching method, and a computer program. [Background technology]

[0002] In recent years, real-time or recorded courses have become available via the Internet. E-learning, in which courses are delivered online and users complete them, is becoming more and more common. When such learning materials are distributed, a certificate of completion may be issued upon completion of the course. The certificate is a proof of completion of a pre-registered user, and is used to It can also be said that the certificate is a proof of viewing of entertainment content. In the case of playback of a content, a certificate that the content has been viewed a predefined number of times, etc. may be also possible.

[0003] For example, Japanese Patent Laid-Open No. 2002-351299 (hereinafter referred to as Patent Document 1) discloses a method for using a network. The company disclosed its education system, which includes the number of students who have completed the course and met the set completion requirements. A configuration is shown for transmitting a certificate of completion to a lecturer's client device. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2002-351299 A Summary of the Invention

[0005] If the study material is a course required to obtain a qualification or license, It is important for the license issuer to verify the authenticity of the certificate. It is important to verify whether the user who registered the course actually took the course. After a registered user has completed the learning materials and obtained a certificate, a third party may alter the certificate. We want to effectively prevent spoofing, where someone presents themselves as if they have completed the course. Therefore, the present disclosure provides a verification system for verifying the completion certificates of distributed learning materials. One of the objects of the present invention is to provide a system, a matching method, and a computer program.

[0006] According to one embodiment, the verification system is a system for verifying the completion of the distributed learning materials. The system includes a reading device and a processing device, and associates the unique information of a registered user with the learning information. The first user who instructed the distribution of the learning materials is a registered user. The identification information of the first person is stored in the first server, and the certificate is associated with the first identification information. The certificate includes first information and second information corresponding to the unique information, and the reading device reads the first information from the certificate. and the second information, and the processing device converts the identification information obtained from the read first information into The second information is stored in the first server in association with unique information obtained from the read second information. The identification information is configured to match the first identification information.

[0007] Further details will be described in the following embodiments. [Brief description of the drawings]

[0008] [Figure 1] FIG. 1 is a schematic diagram of a collation system according to an embodiment. [Diagram 2] FIG. 2 is a schematic diagram showing a schematic configuration of the online learning system. [Diagram 3] FIG. 3 is a block diagram showing a schematic configuration of the educational institution server. [Figure 4]FIG. 4 is a diagram showing an example of user registration data. [Diagram 5] FIG. 5 is a block diagram showing a schematic configuration of a user terminal. [Figure 6] FIG. 6 is a diagram illustrating an example of the flow of a method for providing online learning in an online learning system. [Figure 7] FIG. 7 is a schematic diagram conceptually illustrating an example of a certificate. [Figure 8] FIG. 8 is a block diagram showing a schematic configuration of the processing device. [Figure 9] FIG. 9 is a block diagram showing a schematic configuration of the reading device. [Figure 10] FIG. 10 is a diagram illustrating an example of the flow of a method for verifying a certificate of completion in the verification system. [Figure 11] FIG. 11 is a flow chart showing an outline of the processing flow in the processing device. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] [System Overview] FIG. 1 is a schematic diagram showing an overview of a system according to the present embodiment. , User A who is registered in the online learning system 100a selects the learning material ( If you take and complete the course (content), you will be issued a certificate of completion (#1). User A takes the issued certificate 130 to a driver's license center or other facility and submits it (# 2A). Driver's license centers and other facilities use the authentication system 700a to authenticate submitted completion certificates. The certificate is authenticated as a certificate 130 that certifies completion by user A (#3 to #6). This allows User B, who is not User A, to obtain the certificate 130 and make it his own. It is necessary to distinguish between submitting a falsified certificate of completion 130B (#2B) and so-called impersonation. can.

[0010] In detail, the user A accesses the educational institution server 2 included in the online learning system 100a. 01 (first server) receives face photo data for authentication (first identification information) 215 and ID (id The face photo data 215 for authentication and the ID (second identification information) are registered. The term refers to a system used for user authentication when delivering learning materials in the online learning system 100a. In other words, only after the user authentication is successful can the learning material be transmitted from the distribution device 100 to the user. It is delivered to A's user terminal 301.

[0011] The face photograph data 215 for authentication and the ID are stored in the online learning system 100a. The facial images of the students taken by the user terminal 301 at appropriate times during the distribution of the learning materials ( It is also used for user authentication using sampling data. The system 100a confirms that User A has attended the class.

[0012] Sampling data 601A, 601B, 601C, etc., for successful user authentication during the course The educational institution server 201 includes a plurality of storage servers 600a, 600b, and 600c. , ... (second server) and the data is stored in the second server.

[0013] The certificate 130 includes a first image 131 showing the face image of the user A and a second image 132 showing the ID. When user A brings the certificate 130, the following is displayed as a first example: The first image 131 and the second image 132 are read by a reader 900A carried by the staff member. As a second example, user A who has brought the certificate 130 to the driver's license center The certificate 130 is read by a dedicated reader 900B installed in a ).

[0014] The image data of the first image 131 and the ID obtained from the second image 132 are The ID is passed to the authentication server 700 (#4), and the educational institution server 201 The face photograph data 215 for authentication of user A read from the authentication data 215 is compared (#5). The authentication server 700 receives the ID and assigns it to the storage servers 600a, 600b, and 600c. The data is compared with multiple sampling data read from c (#6).

[0015] When user A submits his / her own certificate 130 (#2A), the user A's ID is read out, and the educational institution server 201 does not access any of the storage servers 600a, 600b, 600c, 60c, 60d, 60e, 60f, 60f, 60g, 60h, 60i, 60j, 60k, 60m ...k, 60m, 60m Since the face image of the user is also read from 00b and 600c, the face image read from the first image 131 is Therefore, in the authentication system 700a, the certificate 130A is It is authenticated as proof that User A has completed the learning materials.

[0016] On the other hand, User B, who is not User A, obtains the certificate 130 and tampers with it as if it were his own. In the case of so-called impersonation (#2B), the applicant submitted the certificate 130B The first image 131B is a photo of a face of a user B that has been tampered with, and the second image 131B is a photo of a face of a user A that has been tampered with. In this case, the educational institution server 201 will notify you of the The storage servers 600a, 600b, and 600c also retrieve user IDs corresponding to user A. The authentication face photo data 215 of user A is obtained, and matching with the face image of user B fails.

[0017] Suppose the educational institution server 201 is hacked and the authentication face photo data 215 of user A is stolen. Even if the password is rewritten to that of user B, multiple storage servers 600a, 600b, The possibility of rewriting all the sampling data on the 600c is low, Matching the data with the face image of user B fails.

[0018] [System Details] [Outline of authentication system configuration] The authentication system 700a is a system that can communicate with each other via a communication network such as the Internet 10. The authentication server 700 is an example of a processing device, and the reading device 900 is an example of a processing device. The authentication server 700 and the reader 900 may be integrated into one device. The reader 900A of the first example and the reader 900B of the second example are represented by the reader 900A. The authentication server 700 is capable of communicating with the online learning system 100a.

[0019] [Outline of online learning system configuration] The online learning system 100a is delivered to users online and provides audio and visual Delivering learning materials as an example of content that provides information to users through at least one of the following: This refers to a system that

[0020] When the online learning system 100a determines that the user A has completed the learning material, the online learning system 100a issues a certificate of completion. The certificate 130 is issued when the user A plays a certain amount of content. This is an example of proof of that.

[0021] FIG. 2 is a schematic diagram showing the schematic configuration of the online learning system 100a. The learning system 100a includes a distribution device 1 that distributes learning materials via the Internet 10. The online learning system 100a includes a distribution device 100 via the Internet 10. 100, connected to one or more educational institution servers 201a, 201b, 201c, ... . . . The educational institution servers 201a, 201b, 201c, . . . are represented by the educational institution The online learning system 100a is called a server 201. One or more user terminals 301a, 301b, 301c, 301d, 301e, 301f, 301g, 301h, 301i, 301j, 301m ... 01c, .... Representing the user terminals 301a, 301b, 301c, ... It is called a user terminal 301 .

[0022] [Description of distribution device] The distribution device 100 may be, for example, a computer having a processor and a memory, or The distribution device 100 is composed of one computer and its peripheral devices. The processor may be, for example, a CPU ( Memory is, for example, ROM (Read Only Memory) Includes RAM (Random Access Memory), etc.

[0023] The memory stores the computer program (hereinafter, the program) executed by the processor. The processor executes the program to operate the various components shown below. The processor and memory configuration will be described later in the educational institution support section. The same applies to the server 201 and the user terminal 301 .

[0024] The distribution device 100 includes a lecture data storage unit 11 for storing online learning materials. The distribution device 100 includes a course progress management unit 12, a student management unit 13, a distribution control unit 15, and The finalization processing unit 17 is implemented by the processor executing a program. This is the function that is displayed.

[0025] The course progress management unit 12 stores the course history for each user in a memory. The course progress management unit 12 may store the course history in a memory in association with the user's unique information. The user's unique information can be any information that can identify the user. For example, , the user ID 21 included in the user registration data 210 of the educational institution server 201 described later This is the same as 1.

[0026] The student management unit 13 manages users. The login process includes a login process for a first user. The user registration data 210 (FIG. 4) is read out from the registration data storage unit 21 of the institution server 201. This includes user authentication (identification) using information input from the user terminal 301. The user registration data 210 is obtained from the educational institution server 201 and stored in the memory. It's fine.

[0027] The management of registered users includes issuing certificates. Certificates are issued electronically, e.g. For example, it is something that is displayed on the screen of a terminal device such as a smartphone (digital certificate). It may be printed on a physical medium such as paper or a plate (analog certificate). The distribution device 100 may issue the certificate, or the educational institution server 201 may issue the certificate. You may give instructions.

[0028] The distribution control unit 15 controls the distribution of the learning materials. The distribution is controlled by the user terminal 301. The control of distribution is performed by the student management unit 1. If the login process in step 3 is successful, distribution is permitted, and if it is unsuccessful, distribution is not permitted. The control of distribution includes determining the distribution position (playback start position) based on the attendance history. That's fine.

[0029] Preferably, the distribution device 100 includes an authentication processing unit 14. The authentication processing unit 14 is This includes verifying the identity and progress of the students during the course. Progress confirmation will be discussed later.

[0030] The distribution device 100 includes a communication unit 16. The communication unit 16 is a communication device such as a communication module. The communication unit 16 is realized by the function of the processor that controls the communication device. It communicates with a user terminal 301 and an educational institution server 201 via the Internet 10 .

[0031] [Educational institution server description] FIG. 3 is a block diagram showing a schematic configuration of the educational institution server 201. 01 is, for example, a computer having a processor and a memory, or The educational institution server 201 is composed of multiple computers and their peripheral devices. The above-mentioned configuration may be realized by cooperation of multiple data.

[0032] The educational institution server 201 includes a registration data storage unit 21 for storing user registration data. FIG. 4 shows an example of the user registration data 210 stored in the registration data storage unit 21. The user registration data 210 is a diagram of a class of students who use the online learning system 100a. The lecturer or instructor inputs the information from the user terminal 301 and stores it in the registration data storage unit 21. do.

[0033] The user enrollment data 210 may be used to identify each user. The user whose information is included in the user registration data 210 is referred to as a user who is registered in the user registration data 210. In the following description, they are also referred to as registered users. As an example, the user registration data 210 includes The ID 211, name (e.g., name) 212, password 213, address 214, and The user information included in the user registration data 210 is also included in the face photo data 215. In addition to the above data 211 to 215, the date of birth (not shown), telephone number (not shown) ), an email address (not shown), etc.

[0034] The authentication face photograph data 215 is an example of the identification information (first identification information) of the registered user. The identification information is obtained by scanning the user. Scanning the user is an example of In this case, the first identification information is information (image information) obtained from a captured image, and the image information is, for example, The at least part of the user's body may be, for example, a face. The first identification information obtained by photographing the face corresponds to the face photograph data 215 for authentication. Alternatively, the first image may be a photographed image of a palm, a finger, or an eye. The identification information may be palm print, fingerprint, iris, or a combination of two or more of these. This is also fine.

[0035] As another example, the image information may be a feature obtained from a photographed image (e.g., a face image). The feature amount may be a two-dimensional or three-dimensional coordinate point of a specific part (e.g., the center of the black eye), The distance between positions, the distribution of colors, and a combination of two or more of these may be used.

[0036] The face photograph data 215 for authentication may be uploaded from the user terminal 301 or The image may be scanned (e.g., photographed) at the educational institution and input directly to the educational institution server 201. .

[0037] By using such information as the first identification information, the login process described below can be performed. In addition, it is possible to perform accurate identification and matching. By doing so, it is possible to reduce the amount of personal information of the user stored in the registration data storage unit 21. This can limit the scope of personal information leakage and protect user privacy. can be protected.

[0038] The educational institution server 201 is realized by a processor executing a program. The function is to update the registered user's online learning materials (contents) each time they are completed. The progress data receiving unit 22 receives the progress information from the distribution device 100 and manages it as progress data. has.

[0039] The educational institution server 201 includes a communication unit 26. The communication unit 26 includes a communication module, etc. The communication unit 26 is realized by a communication device and a processor that controls the communication device. , and controls communications with the user terminal 301 and the distribution device 100.

[0040] [User terminal description] 5 is a block diagram showing a schematic configuration of the user terminal 301. For this, please use a personal computer, tablet, or smartphone that has Internet access. Any terminal can be used as long as it can connect to the Internet 10 and can receive and play the distributed learning materials. You can use any device.

[0041] The user terminal 301 includes an operation unit 32 and a display 34. The device may further include a speaker (not shown) and a microphone (not shown). This is an example of a configuration required for playing back teaching materials. The operation unit 32 is, for example, integrated with the display 34. This is realized by a touch panel or the like that accepts input from the students.

[0042] The user terminal 301 includes a camera 33. The camera 33 is configured to A structure for obtaining identification information (second identification information) from a user (second user) at a specified position The second identification information is used for user authentication in the login process described later. The second identification information is also used to verify the identity of the student during the course.

[0043] If the first identification information is obtained by analyzing the captured image, the second identification information In order to obtain the above-mentioned image, the user terminal 301 includes an image analysis unit (not shown) in addition to the camera 33. Alternatively, the image analysis unit may be provided in the distribution device 100.

[0044] The user terminal 301 includes a communication unit 36. The communication unit 36 ​​includes a communication module, etc. The communication unit 36 ​​is realized by a device and a processor that controls the communication device. It communicates with a user terminal 301 and an educational institution server 201 via the Internet 10 . The communication unit 36 ​​controls communication with the distribution device 100 and the educational institution server 201 .

[0045] The user terminal 301 includes a video playback unit 31. The video playback unit 31 plays a video using a Web browser. The present invention may be implemented by a processor that executes an application for online learning. The function may be realized by the above.

[0046] [Explanation of how online learning is provided] FIG. 6 is an example of a flow of a method for providing online learning in the online learning system 100a. In the method for providing online learning, first, a user terminal 301 The system accepts an operation to instruct registration from a user who wishes to register (step S10). For example, the application S10 accepts input of a name, address, etc., and also takes a photo for registration. The input of a face image is accepted by performing a shadow.

[0047] For example, the user terminal 301 may receive a name, an address, etc., input by a user operation, in a mail. According to the application stored in the memory, the application is transmitted to the educational institution server 201. Then, the face image is transmitted to the educational institution server 201 (step S11). 1 executes a registration process (step S2) when it receives this information from the user terminal 301. Then, this information is stored in the registration data storage unit 21 as user registration data 210.

[0048] In the registration process, the educational institution server 201 inputs an ID and a password to the user to be registered. After receiving the ID and password, the registered user The user terminal 301 can request the distribution device 100 to distribute learning materials.

[0049] The user terminal 301 receives an instruction from a user requesting delivery of learning materials and logs in. The ID and password required for the application are transmitted to the distribution device 100, and a facial image required for distribution is also transmitted. The image is captured and the image data is transmitted to the distribution device 100 (step S12).

[0050] When the distribution device 100 receives a distribution request from the user terminal 301, the distribution device 100 executes a distribution process. The distribution process is carried out by inputting the ID and password from the user terminal 301 to the user. Login process (step 211) for checking ID 211 and password 212 in registration data 210 Furthermore, the login process includes the steps of: authenticating image data from the user terminal 301; This includes face authentication using face photo data 215 for the course. By this, it is possible to determine whether the user who instructed the delivery of the learning materials (the first user) is a registered user. Therefore, it is possible to prevent unauthorized login by others. It also prevents someone from impersonating another person when taking the course.

[0051] In addition, the face ID sent from the user terminal 301 when the distribution was requested and the login process was successful The image data of the image may be stored in a storage server 600, which will be described later. It can be used as a second identification for authentication in the system 700a.

[0052] The distribution process includes controlling the distribution of the learning materials (step S32). The learning materials requested by the terminal 301 are delivered according to the operation of the user terminal 301. The user terminal 301 learns from the distribution device 100 and stops distribution. When the teaching material is received, it is played back (step S41). You can use it as a content playback device to take study materials.

[0053] The distribution process includes a progress management of the course (step S33). 100 receives the content from the start point of the distribution to the stop point on the user terminal 301. This includes updating the student's course history as completed.

[0054] Preferably, the progress management of the course is performed by verifying the identity and progress of the student (second user) during the course of delivery. The user terminal 301 plays the distributed learning materials according to the program. In both cases, a camera 33 captures a predetermined position at a predetermined timing (for example, at a fixed time interval). The second user of the device is photographed (sampled) and the image data (sampling data) is distributed. The information is transmitted to the device 100 (step S42).

[0055] The distribution device 100 uses the sampling data as second identification information and registers the user registration data 2 By matching with the face photo data 215 for authentication included in the user ID 10, the second user can identify the registered user. The identity verification is carried out by sampling data every 10 seconds, for example. This can be done every 10 seconds when the sampling data is available, or the sampling data obtained every 10 seconds can be used. The authentication may be performed at intervals longer than 10 seconds using either the The matching result may be random. If they match, the identity verification is successful. If they do not match, the identity verification will fail.

[0056] If the identity verification is successful, the distribution device 100 The registered user will be considered to have completed the course up to the point played at that time. Update the learning history. If identity verification fails, a user other than the registered user will be allowed to listen to the learning materials. There are cases where people are spoofing their real identity, or even if they are registered users, they may not be able to receive the call properly because they are asleep or away from their desk. For example, the distribution device 100 may not update the course history because the course may not have been taught. If the identity verification fails, the distribution device 100 may stop distributing the learning materials. Preferably, the distribution device 100 performs a personal authentication process a predetermined number of times or more within a predetermined period during playback of the learning material. If authentication fails, or if authentication fails a certain number of times in succession, If the learning material contains an item, when identity verification fails, the corresponding The item itself may be set as not being taken.

[0057] If the sampling data is successfully authenticated, it will be associated with the registered user's ID and registered as a user. The data is stored in a plurality of storage areas 600a, 600b, 600c, etc., which are different from the data 210. The plurality of storage servers 600a, 600b, 600c, ... are represented by a storage server. The plurality of storage servers 600A, 600B, 600C, . . . are, for example, It may be a blockchain. Note that multiple sampling data may be stored in one storage server. The information may be stored in the server 600.

[0058] When it is detected from the attendance history that a registered user has taken a learning material, the distribution device A certificate of completion is issued when the playback of the content reaches a prescribed amount (step S5). This is done when it is detected that

[0059] FIG. 7 is a schematic diagram conceptually illustrating an example of a certificate. The certificate 130 is a digital certificate. The certificate 130 may be a digital or analog certificate. The certificate 130 includes a first image 131. The first image 131 includes a face image (first identification information) of the registered user who has taken the course. 1 is a face photo data 215 for authentication of a registered user of the user registration data 210, The display is made by incorporating the signal into a mat (not shown).

[0060] The certificate 130 includes a second image 132. The second image 132 is a unique image of the registered user who has completed the course. The unique information is, for example, ID 211. The second image 132 is For example, a two-dimensional code such as a QR code (registered trademark) or a one-dimensional code such as a barcode may be used. The second image 132 is optically read by the reader 900. This gives the registered user ID 211.

[0061] [Authentication server description] FIG. 8 is a block diagram showing a schematic configuration of the authentication server 700. The authentication server 700 As an example, a computer having a processor 71 and a memory 72, or The authentication server 700 is composed of multiple computers and their peripheral devices. may be realized in cooperation with each other.

[0062] The processor 71 is, for example, a CPU. The memory 72 is, for example, a ROM, a RAM, etc. The memory 72 stores a program 721 that is executed by the processor 71. The processor 71 executes the program 721 to execute each process described below. The program 721 can be transferred in a state recorded on a recording medium, or can be downloaded. It may also be transferred by

[0063] The authentication server 700 includes a communication device 73. The communication device 73 is a communication module or the like, and is connected to the Internet 10. It transmits and receives data to and from other devices via the network.

[0064] The processor 71 executes the matching process 711 by executing the program 721. The verification process 711 includes performing a first read 112. The first read 112 is , access the educational institution server 201, and read the user registration data 210 from the reading device 900. This refers to reading out the face photo data 215 for authentication associated with the ID of the person. The process 711 includes performing a first check 113. The first check 113 is performed by the reading device 900. This refers to comparing the facial image received from the server 214 with the authentication facial photo data 215.

[0065] Preferably, the matching process 711 includes performing a second read 114. The output 114 is a face photo data for authentication stored in association with the ID from the reader 900. This refers to reading out the second identification information other than the data 215.

[0066] The second identification information is preferably sampling data. In this case, the second read 114 accesses multiple storage servers 600 and associates IDs from the reading device 900 This refers to reading out multiple sampled data that have been stored in a single buffer. The second identification information may be a face photograph for authentication. Any data other than the data 215 may be used, and is not limited to sampling data. For example, When the user authentication is successful, the image data of the face image is sent from the user terminal 301. may be also possible.

[0067] The verification process 711 includes performing a second verification 115. The second verification 115 is performed by the reading device. The face image received from the device 900 is matched with second identification information such as sampling data. This refers to the following.

[0068] The processor 71 executes the program 721 to perform the determination process 716. The determination process 716 includes determining whether the certificate is genuine or not based on the result of the comparison. The determination of whether the first comparison 113 is true or false is "true" if the first comparison 113 is successful, and "false" if the first comparison 113 is unsuccessful. As another example, the determination of authenticity may be performed when the first comparison 113 is successful and the second comparison 114 is successful. If the check 715 is successful, it is "true" and if the first check 113 is unsuccessful, it is "false". As another example, the determination of authenticity may be performed when the first comparison 113 is successful and the second comparison 114 is successful. "True" when the match 715 is successful, or "True" when at least one of the first match 113 and the second match 715 is successful. The test may be "false" if at least one of the tests fails.

[0069] The processor 71 determines whether the result of the determination process 716, the result of the first comparison 713, and / or the result of the second comparison 714, At least one of the results of the comparison 715 is passed to the communication device 73 and transmitted to a specified destination. The specified destination is, for example, the reading device 900A carried by the staff member. The member of staff will be able to know the results of the assessment or determine the authenticity of the certificate.

[0070] Preferably, the processor 71 performs a process when the result of the determination is "false" or when the result of the determination is "false". Instead, the face photograph data 215 for authentication is passed to the communication device 73, which transmits it to a specified destination. The destination of the specified transmission is the same. This allows the staff member to associate the ID written on the certificate 130 with The registered face image can be visually confirmed. Therefore, the staff can identify the user who submitted the certificate. It is possible to visually determine whether or not the person in question is a registered user.

[0071] The designated destination is a dedicated reader 900B installed at a driver's license center or a teacher's license center. In this case, these devices may be an educational institution server 201. For example, a buzzer may sound when the result is "false." A notification may be sent to a predetermined destination.

[0072] [Description of the reading device] FIG. 9 is a block diagram showing a schematic configuration of a reading device 900. In the first example, The device 900 is an interface device such as a personal computer, a tablet, or a smartphone. An example of a configuration that can connect to Net 10 and read access information from a certificate of completion. Any terminal can be used as long as it has a camera as a reader. For example, a computer having a processor 91 and a memory 92, or a single computer The reading device 900 is composed of a computer and its peripheral devices. The above-mentioned embodiment may be realized by the above-mentioned operation.

[0073] The processor 91 is, for example, a CPU. The memory 92 is, for example, a ROM, a RAM, etc. The memory 92 stores a program 921 to be executed by the processor 91. The processor 91 executes the program 921 to execute each process described below. The program 921 can be transferred in a state recorded on a recording medium, or can be distributed to a computer. It can also be transferred by downloading from the device.

[0074] The reader 900 includes a communication device 93. The reader 900 also includes a camera 94. Alternatively, the reader 900 is connected to a camera 94. The camera 94 is connected to a processor 9 The photographing operation is performed according to the control of 1, and the image data is input to the processor 91.

[0075] The processor 91 executes the program 921 to perform the first read 911. The first reading 911 is a first reading of the second image 1 of the certificate 130 inputted from the camera 94. This refers to reading the ID from image data of 32. The technology to read the ID from image data Any known technique may be used for this purpose. Note that the first reading 911 is performed by a program. Other programs that are not compliant with 921 and are pre-installed in the reading device 900 The method may be performed according to the following:

[0076] The processor 91 executes the program 921 to perform the imaging control 912. The photography control 912 controls the camera 94 by accepting a user operation to instruct photography. This includes having the photographer take the photograph.

[0077] The processor 91 executes the program 921 to perform the second read 913. The second reading 913 is carried out by taking a photograph of the certificate 130 and inputting the image data. The image data includes reading the first image 131 and reading a facial image from the first image 131. Any known technique may be used to read the face image from the data.

[0078] The processor 91 reads the face image from the certificate 130 (hereinafter, the read face image) The authentication server 700 is a sending device 93 that is defined by the program 921. This causes the authentication server 700 to request a verification process 711. .

[0079] In the second example, the reading device 900 further includes a scan 95. The scan 95 includes: For example, a code reader. The scan 95 is a first scan of the certificate 130 placed in the reading range. 2. The image 132 is scanned and the scanned signal is input to the processor 91. performs a first read 911 to read the ID from the scan signal and If it is the second image 132 to be taken, the camera 94 is activated according to the program 921. This causes the camera 94 to be ready to take pictures. The processor 91 controls the photography control 91. 2 to have the camera 94 capture a first image 131 of the certificate 130 placed in the capture range. do.

[0080] In the second example, the reading device 900 further includes an operation unit such as a touch panel (not shown). (not including the above) and accepts input of login information such as the ID of the user who submits the certificate of completion 130. In this case, the authentication server 700 may access the user registration data 210 of the educational institution server 201. and performs login processing using the login information received from the reading device 900. This is also possible.

[0081] [Explanation of how to verify certificates] FIG. 10 is a schematic diagram showing an example of the flow of a method for verifying a certificate in the authentication system 700a. In the method for verifying the certificate, first, the reader 900 reads the certificate 130. .

[0082] In the first example, the staff member reads the second image 132 of the certificate 130 with the portable reading device 900A. The reader 900A captures the second image 132 in the captured image (step S70). The ID is read (step S71), and the authentication server specified by the program 921 is The ID read by the server 700 is transmitted to the server 700 to request verification (step S7 3).

[0083] When the ID is read from the second image 132, the reader 900A reads the first image 131 For example, the reading device 900A may be in a state where it is possible to take a photograph. Then, a message such as "Please take the first image 131" is displayed, or the first image 131 is A matching frame may be displayed.

[0084] The staff member then photographs the first image 131 of the certificate 130 with the reading device 900A (step The reader 900A reads a face image from the first image 131 in the captured image. (Step S75), the read is sent to the authentication server 700 defined by the program 921. The captured face image (read face image) is transmitted (step S76).

[0085] In the second example, a user who submits the certificate 130 uses the installed reading device 900B Insert the certificate 130 into the scanner and, for example, press the authentication start button to scan 95. Thus, the second image 132 is scanned (step S70). The reader 900B reads the ID from the scan signal (step S71). When the ID is read, the camera 94 is started according to the program 921, and the certificate 130 is printed. The first image 131 is captured (step S74). A face image is read from the image 131 (step S75), and the ID read in step S71 is At the same time, the program 921 transmits the information to the authentication server 700. Therefore, a verification is requested (step S73).

[0086] Next, the authentication server 700 compares the read face image. The user accesses the educational institution server 201 and reads the user registration data 210 from the reading device 900. The face photograph data 215 for authentication associated with the ID of each person is read out (step S91 ), and the read facial image is compared (step S92).

[0087] The authentication server 700 randomly accesses the multiple storage servers 600 and reads One or more pieces of sampling data stored in association with the ID from the device 900 are read out. (step S93), and the read face image is collated (step S94).

[0088] The authentication server 700 judges the authenticity of the certificate 130 based on the results of these comparisons (step The result is then output to a default device (step S96). For example, the reading device 900. In step S96, the result of the verification may be transmitted. Facial photo data 215 for authentication may also be transmitted.

[0089] [Explanation of processing on the authentication server] FIG. 11 is a flow chart showing an outline of the process flow in the authentication server 700. The authentication server 700 waits for a verification request from the reader 900. When the signal is received (YES in step S101), the subsequent processing is started.

[0090] When the authentication server 700 receives the request, it accesses the educational institution server 201 and authenticates the user. From the registration data 210, a face photograph for authentication associated with the ID from the reader 900 is The data (first identification information) 215 is read (step S103). The authentication server 700 The face image read from the reader 900 is read in step S103 as a face photo data for authentication. If the comparison fails (step S107: N), O), the authentication server 700 judges it to be "false" (step S115) and outputs the result ( Step S119).

[0091] If the match is successful (YES in step S107), the authentication server 700 600 and retrieves the sample stored in association with the ID from the reader 900. The facial image is then compared with the facial image (step S109). P111).

[0092] Here, multiple storage servers 600a, 600b, 600c, etc. are randomly accessed. One or more sampling data may be read out and used for matching, or one storage server may be used. Randomly select one or more samples from the sampling data stored in the The data may be read out and used for verification. In addition to or in addition to the sampling data, the user terminal used for the login process at the start of distribution The facial image data obtained from the terminal 301 may be read from the storage server 600 and used for matching. good.

[0093] If the match fails (NO in step S113), the authentication server 700 judges it as "false" ( If the matching is successful (step S115), the result is output (step S119). The authentication server 700 determines the answer as "true" (step S117). The result is output (step S119).

[0094] If the verification (first verification) in step S105 fails, the first image 131 of the certificate 130 It is highly likely that the face photo data for authentication 215 is different from the face photo data for authentication 215. After A) has completed the course and obtained a certificate, the first image 131 of the certificate 130 is sent to another user (user B) is replaced (fake) with the face image of user A, and it is assumed that user B is impersonating user A. The first verification is performed in the authentication system 700a and the certificate is generated (#2B in FIG. 1). By determining whether a 130 counterfeit is present, such spoofing is easily detected.

[0095] If the verification (second verification) in step S111 fails, the first image 131 of the certificate 130 Although the face image data matches the face photo data 215 for authentication, the face image (sample This is likely to be different from the first image 131 of the certificate 130. is replaced with a face image of user B (forged) and stored in the memory of the educational institution server 201. The face photo data 215 for authentication of user A has also been altered to the face image of user B. In the above, it is assumed that User B is impersonating a registered user (#2B in Figure 1).

[0096] Even if the authentication face photograph data 215 of the educational institution server 201 is tampered with, , and even the sampling data stored in a memory other than the educational institution server 201 is tampered with. Furthermore, it is unlikely that multiple sampling data will be stored in multiple storage servers 600a. , 600b, 600c…, all the sampling data is The possibility of tampering is low. In other words, in this example, the risk of tampering is reduced. Therefore, if such an educational institution server 201 were to be tampered with, the first verification would not have been successful. Even if the certificate is forged, a second verification is performed to determine whether the certificate is forged, and the identity of the person who impersonated the certificate is not verified. It is possible to detect the

[0097] As another example, regardless of the success or failure of the first verification (step S105), the second verification (step S106) may be performed. Step S111) may be performed. Furthermore, the second comparison may be performed using at least two samples. In this case, the first and second verifications may be performed multiple times using the same verification data. If at least one of these is successful, the result is determined to be "true." By matching the floors, it is possible to determine the authenticity even when noise occurs. The condition is evaluated as "true" only if both the first and second checks are successful. By carrying out such multi-stage verification, security can be improved. Cut.

[0098] In this example, the second image 132 includes an ID. If the ID is forged, it will not be possible to read it, or it will be different from the ID of the registered user, and the registration will be lost. No matching is requested for the registered user, or a different face image of the registered user is used for matching. Therefore, the verification fails. The structure can be easily detected.

[0099] [Other examples] In the above example, the first image 131 of the certificate 130 is photographed by the reading device 900. However, instead of the first image 131 or in addition to the first image 131, The face of the user submitting the QR code may be photographed. In this case, the facial image data obtained by the photograph may be stored in a , the face image data is treated in the same way as the face image data read from the first image 131. Similarly, the certificate of completion 130 can be certified.

[0100] The above example illustrates a system for verifying the completion certificate of the distributed learning materials. The disclosure is not limited to the completion of learning. For example, the completion of viewing entertainment content. Various certificates such as certificates of having completed a course, or certificates of having completed a game or quiz, etc. The above-mentioned verification system can also be used to determine authenticity.

[0101] The present invention is not limited to the above-described embodiment, and various modifications are possible. The collation system, the collation method, and the computer program according to the embodiment are as follows: It can also be expressed as:

[0102] (1) The verification system according to the embodiment is a system for verifying a certificate of completion of distributed learning materials. The present invention relates to a reading device and a processing device, and performs learning by associating the unique information of a registered user with the unique information of the registered user. A first user ID used for user authentication that the first user who instructed the distribution of the teaching material is a registered user The identification information of the first person is stored in the first server, and the certificate of completion is a second identification information corresponding to the first identification information. The certificate includes a first piece of information and a second piece of information corresponding to the unique information, and the reading device reads the first piece of information and the second piece of information from the certificate. The processing device reads the second information and the identification information obtained from the read first information. The second information is stored in the first server in association with the unique information obtained from the second information. The identification information of the authentication device is compared with the identification information of the authentication device. The system requires that the learning materials be verified to be delivered by a registered user. This will make it possible to verify the authenticity of the certificate.

[0103] (2) In the verification system of (1), preferably, the learning material is This ensures that the certificate is at least allowed to be distributed to the user. This will serve as evidence.

[0104] (3) A verification system according to (1) or (2), preferably comprising a second identity of a registered user. The unique information is associated with the unique information of the registered user and stored in a second server different from the first server. The processing device further stores the identification information obtained from the read first information. The second information is stored in the second server in association with unique information obtained from the read second information. This allows for accurate determination of the authenticity of the certificate. The degree can be improved.

[0105] (4) A verification system according to (1) or (2), preferably for receiving learning materials during their delivery. The first identification information is obtained from a second user who is a member of the group, and the second user is identified as a registered user by using the first identification information. The second identification information used for authenticating the user's identity is stored in association with the unique information of the registered user. The processing device further converts the identification information obtained from the read first information into a second This allows the certificate to be issued to registered users who have attended the course. This will serve as evidence that you were doing so.

[0106] (5) The verification system according to (4), preferably, the verification system further includes a step of: A plurality of pieces of second identification information are obtained from the server, and the plurality of pieces of second identification information are transmitted to at least two or more servers. The first information is stored in a distributed manner, and the second identification information is collated with the first identification information. The identification information obtained from the server is compared with each of a plurality of second identification information stored in two or more servers. By storing the information in a distributed manner on two or more servers, the second identification information This can reduce the possibility of tampering.

[0107] (6) The verification system according to (3) or (4), preferably, the processing device is If the comparison with the other information is successful, the comparison with the second identification information is further performed. By carrying out multiple verification steps, the accuracy of determining whether a certificate is genuine is improved. It is possible to do so.

[0108] (7) A verification system according to any one of (1) to (6), preferably comprising: The information includes a photographed image obtained by photographing at least a part of the user, and the reading device is a photographing device. and reading the first information includes photographing the first information of the certificate by a photographing device. This makes it possible to easily read the first information.

[0109] (8) In the verification system of (7), preferably, the second information is represented by code information. This makes it easy to include the necessary information on the certificate.

[0110] (9) The verification method according to the embodiment is a method for verifying a data in a verification system including a processing device and a reading device. A method for verifying a certificate of completion for distributed learning materials, which is associated with the unique information of a registered user. This is used to authenticate that the first user who instructed the delivery of the learning materials is a registered user. The first identification information is stored in the first server, and the certificate corresponds to the first identification information. The certificate includes first information corresponding to the unique information and second information corresponding to the unique information, and the reading device reads the first information from the certificate. The first information and the second information are read, and the reading device transmits the read information to the processing device. The processing device transfers the identification information obtained from the first information read to the second information read. The first identification information is stored in the first server in association with the unique information obtained from the information. By this method, the learning materials to be distributed are distributed by registered users. It will be possible to determine the authenticity of the certificate of completion, which certifies that the instructions have been given.

[0111] (9) The computer program according to the embodiment may be a program for verifying a certificate of completion of distributed learning materials. A computer program for causing a computer to execute a process for registering a registered user. The first user who instructed the distribution of the learning materials is associated with the unique information of the user, and it is determined that the first user is a registered user. The first identification information used for user authentication with the first server is stored in the first server, and the certificate is The code includes first information corresponding to the first identification information and second information corresponding to the unique information, The computer reads the first information and the second information from the certificate, and calculates the number of the certificate from the first information. The identification information is obtained, and the unique information is obtained from the read second information. The identification information and the unique information are then processed by a processing device. This program allows the learning materials to be delivered to registered users. It is then possible to determine whether the certificate is genuine, proving that the distribution was instructed by the user. [Explanation of symbols]

[0112] 100: distribution device, 100a: online learning system, 130: certificate, 131: first Image, 132: second image, 201: educational institution server (first server), 215: face for authentication Photo data (first identification information), 301: user terminal, 600: storage server (second server server), 601A, 601B, 601C: sampling data (second identification information), 70 0: authentication server (processing device), 700a: authentication system, 900: reading device, 921: printer Program

Claims

1. A system for verifying a certificate that proves completion of a specified task, comprising: A reading device; A processing device, a first identification information that is associated with unique information of a registered user and used for user authentication that a first user who has instructed to distribute content for executing the predetermined task is the registered user, the first identification information being obtained by photographing the registered user and stored in a first server; The certificate readably carries the unique information; The reader reads the unique information from the certificate, The processing device is configured to correlate identification information obtained by photographing the user who submits the certificate with unique information read from the certificate and compare the identification information with the first identification information stored in the first server. Matching system.

2. The content for executing the predetermined task is delivered if the user authentication is successful. The verification system according to claim 1 .

3. second identification information of the registered user is stored in a second server different from the first server in association with the unique information of the registered user; The processing device is configured to further compare the identification information obtained by photographing the user who submits the certificate with the second identification information stored in the second server in association with the unique information read from the certificate. The verification system according to claim 1 .

4. during distribution of the content for executing the predetermined task, second identification information is obtained from a second user who is executing the predetermined task, and used to authenticate that the second user is the registered user using the first identification information, and is stored in association with the unique information of the registered user; The processing device is further configured to compare identification information obtained by photographing the user submitting the certificate with the second identification information. The verification system according to claim 1 .

5. a plurality of second identities are obtained from the second user during performance of the predetermined task; the plurality of pieces of second identification information are distributed and stored in at least two or more servers, Matching the second identification information includes matching identification information obtained by photographing the user who submits the certificate with each of a plurality of pieces of second identification information stored in the two or more servers. The verification system according to claim 4.

6. The processing device is configured to, when the matching with the first identification information is successful, further perform the matching with the second identification information. A collation system according to claim 3 or 4.

7. The unique information is carried in the certificate as code information. The verification system according to claim 1 .

8. A method for verifying a certificate that certifies completion of a predetermined task in a verification system including a processing device and a reading device, comprising: a first identification information that is associated with unique information of a registered user and used for user authentication that a first user who has instructed to distribute content for executing the predetermined task is the registered user, the first identification information being obtained by photographing the registered user and stored in a first server; The certificate readably carries the unique information; The reader reads the unique information from the certificate; the processing device associates identification information obtained by photographing the user who submits the certificate with unique information read from the certificate and compares the identification information with the first identification information stored in the first server. Matching method.

9. A computer program for causing a computer to execute a process for verifying a certificate that certifies completion of a predetermined task, comprising: a first identification information that is associated with unique information of a registered user and used for user authentication that a first user who has instructed to distribute content for executing the predetermined task is the registered user, the first identification information being obtained by photographing the registered user and stored in a first server; The certificate readably carries the unique information; The computer includes: reading the unique information from the certificate; and correlating the identification information obtained by photographing the user who submits the certificate with the unique information read from the certificate with the first identification information stored in the first server. Computer program.

Images