Authentication system, terminal, management server, personal information provision method and program

Abstract

Provided is an authentication system by which a user controls and manages personal information related to service provision by means of biometric authentication. The authentication system comprises an information server, an authentication server, and a management server. The authentication server stores biological information about each of a plurality of users, and performs biometric authentication by using the stored biological information. The management server stores personal information for providing a service to a person who is successfully authenticated by means of biometric authentication. The management server transmits, to an information server, behavior information including personal information, which is allowed to be provided to a third party by the successfully authenticated person, among the personal information about the successfully authenticated person to whom the service has been provided.

Description

[Technical field]

[0001] The present invention relates to an authentication system, a terminal, a management server, a personal information providing method, and a storage medium. [Background technology]

[0002] In recent years, various services using biometric information have become widespread. For example, face recognition is used for various procedures at airports (check-in, baggage drop-off, etc.) and hotel check-in.

[0003] Services that use facial recognition are processed in the following manner: First, a terminal (installed at an airport or hotel) captures a facial image of the customer and generates a feature vector that characterizes the facial image. The generated feature vector is then sent to a server on the network.

[0004] The server has a database that stores the biometric information and personal information (such as name and address) of users who receive services using face recognition. When the server receives a matching request from the terminal, it searches (matches) the database and identifies the biometric information and personal information that correspond to the matching request from the terminal. The server transmits the identified personal information to the terminal, and the terminal installed at the airport or other location performs operations based on the acquired personal information.

[0005] Additionally, various uses of authentication information and personal information are being considered.

[0006] For example, Patent Document 1 states that a method and system are provided for trading personal information in a manner that meets the diverse needs of companies and general users who use the Internet, while allowing the involvement of general users (ISP users), who are the original owners of the information.

[0007] Patent Document 2 describes how it is possible to provide information useful for safety confirmation to unspecified parties requesting safety confirmation without requiring them to register authentication information in advance, and in a manner that respects privacy.

[0008] Patent Document 3 describes that services and products will be provided in exchange for personal information related to consumer behavior. [Prior art documents] [Patent documents]

[0009] [Patent Document 1] JP 2002-056111 A [Patent Document 2] JP 2006-243798 A [Patent Document 3] JP 2008-243072 A Summary of the Invention [Problem to be solved by the invention]

[0010] As mentioned above, when providing services using biometric authentication, personal information of users is required. Here, collecting and storing a large amount of personal information creates great value. Specifically, data on what age groups of users are receiving what services can be a valuable tool for companies in their marketing.

[0011] However, from the perspective of protecting the privacy of users, it is difficult to provide personal information used when providing services using biometric authentication to third parties without the user's consent. In particular, many users are strongly opposed to providing personal information such as their name and address to third parties.

[0012] The main object of the present invention is to provide an authentication system, a terminal, a management server, a personal information providing method, and a storage medium that contribute to users' control and management of personal information related to the provision of services through biometric authentication. [Means for solving the problem]

[0013] According to a first aspect of the present invention, there is provided an authentication system including an information server, an authentication server that stores biometric information of each of a plurality of users and performs biometric authentication using the stored biometric information, and a management server that stores personal information for providing services to individuals who are successfully authenticated through the biometric authentication, and transmits to the information server behavioral information including personal information of the individuals who have been provided with the service that the individuals have permitted to be provided to a third party.

[0014] According to a second aspect of the present invention, there is provided a terminal that is connected to a management server that stores personal information for providing services to individuals who have been successfully authenticated by biometric authentication, and that generates a GUI for inputting personal information of the individuals who have been successfully authenticated to whom the services have been provided that the individuals allow to be provided to third parties.

[0015] According to a third aspect of the present invention, there is provided a management server that is connected to an information server and an authentication server that stores biometric information of each of a plurality of users and performs biometric authentication using the stored biometric information, stores personal information for providing services to individuals who are successfully authenticated through the biometric authentication, and transmits to the information server behavioral information including personal information of the individuals who have been provided with the service that the individuals have permitted to be provided to a third party.

[0016] According to a fourth aspect of the present invention, there is provided a personal information providing method, in which an information server and an authentication server that stores biometric information of each of a plurality of users and performs biometric authentication using the stored biometric information, in a management server connected to the information server, personal information for providing a service to a person who is successfully authenticated by the biometric authentication is stored, and behavioral information including personal information that the successful authentication person to whom the service is provided has allowed to be provided to a third party is transmitted to the information server.

[0017] According to a fifth aspect of the present invention, there is provided a computer-readable storage medium storing a program for causing a computer mounted on a management server connected to an information server and an authentication server that stores biometric information of each of a plurality of users and performs biometric authentication using the stored biometric information to execute the following processes: storing personal information for providing services to individuals who are successfully authenticated through the biometric authentication; and transmitting to the information server behavioral information including personal information of the individuals who have been provided with the service that the individuals have permitted to be provided to a third party. Effect of the Invention

[0018] According to each aspect of the present invention, there are provided an authentication system, a terminal, a management server, a personal information providing method, and a storage medium that contribute to a user's control and management of personal information related to the provision of services by biometric authentication. Note that the effects of the present invention are not limited to the above. The present invention may achieve other effects instead of or in addition to the effects. [Brief description of the drawings]

[0019] [Figure 1] FIG. 1 is a diagram for explaining an overview of an embodiment. [Diagram 2] 1 is a diagram illustrating an example of a schematic configuration of an authentication system according to a first embodiment. [Diagram 3] FIG. 2 is a diagram for explaining the operation in a user registration phase of the authentication system according to the first embodiment. [Figure 4] FIG. 2 is a diagram for explaining an operation in a service registration phase of the authentication system according to the first embodiment. [Diagram 5] FIG. 2 is a diagram for explaining an operation in a service provision phase of the authentication system according to the first embodiment. [Figure 6] FIG. 2 is a diagram for explaining an operation in an information collection phase of the authentication system according to the first embodiment. [Figure 7] FIG. 2 is a diagram for explaining an operation in an information collection phase of the authentication system according to the first embodiment. [Figure 8] FIG. 2 is a diagram for explaining an operation in an information collection phase of the authentication system according to the first embodiment. [Figure 9] FIG. 2 is a diagram for explaining an operation in an information collection phase of the authentication system according to the first embodiment. [Figure 10] FIG. 2 is a diagram illustrating an example of a processing configuration of an authentication server according to the first embodiment. [Figure 11] 4 is a diagram for explaining the operation of a user registration unit of the authentication server according to the first embodiment; FIG. [Figure 12] 4 is a diagram for explaining the operation of a user registration unit of the authentication server according to the first embodiment; FIG. [Figure 13] FIG. 4 is a diagram illustrating an example of an authentication information database according to the first embodiment. [Figure 14] FIG. 4 is a diagram illustrating an example of an authentication information database according to the first embodiment. [Figure 15] FIG. 4 is a diagram illustrating an example of an authentication information database according to the first embodiment. [Figure 16] FIG. 2 is a diagram illustrating an example of a processing configuration of a management server according to the first embodiment. [Figure 17] 4 is a diagram for explaining the operation of a personal information acquisition unit of the management server according to the first embodiment; FIG. [Figure 18] FIG. 2 is a diagram illustrating an example of a user information database according to the first embodiment. [Figure 19] FIG. 4 is a diagram showing an example of behavior information transmitted from a management server according to the first embodiment; [Figure 20] FIG. 2 is a diagram illustrating an example of a processing configuration of an authentication terminal according to the first embodiment. [Figure 21] FIG. 2 is a diagram illustrating an example of a processing configuration of an information server according to the first embodiment. [Figure 22] FIG. 4 is a diagram for explaining the operation of the information server according to the first embodiment. [Diagram 23] FIG. 2 is a diagram illustrating an example of a processing configuration of a terminal according to the first embodiment. [Figure 24]FIG. 4 is a sequence diagram showing an example of an operation related to a service registration phase of the authentication system according to the first embodiment. [Diagram 25] FIG. 4 is a sequence diagram showing an example of an operation related to a service provision phase of the authentication system according to the first embodiment. [Figure 26] FIG. 4 is a sequence diagram showing an example of an operation related to an information collection phase of the authentication system according to the first embodiment. [Figure 27] FIG. 11 is a diagram for explaining the operation of the authentication system according to the second embodiment. [Figure 28] FIG. 11 is a diagram illustrating an example of a processing configuration of an authentication terminal according to the second embodiment. [Figure 29] FIG. 2 illustrates an example of a hardware configuration of a management server. [Diagram 30] FIG. 13 is a diagram for explaining an operation regarding whether or not personal information can be provided according to a modified example. [Diagram 31] FIG. 13 is a diagram for explaining an operation regarding whether or not personal information can be provided according to a modified example. [Diagram 32] FIG. 13 is a diagram for explaining an operation regarding whether or not personal information can be provided according to a modified example. [Diagram 33] FIG. 13 is a diagram for explaining an operation regarding whether or not personal information can be provided according to a modified example. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0020] First, an outline of one embodiment will be described. The reference numerals in the drawings are added to each element for convenience as an example to aid in understanding, and the description of the outline is not intended to be limiting. Furthermore, unless otherwise specified, the blocks shown in each drawing represent functional units rather than hardware units. The connection lines between the blocks in each drawing include both bidirectional and unidirectional. The unidirectional arrows are used to diagrammatically indicate the flow of the main signal (data) and do not exclude bidirectionality. In this specification and the drawings, elements that can be similarly described may be given the same reference numerals to avoid redundant description.

[0021] An authentication system according to an embodiment includes an information server 101, an authentication server 102, and a management server 103 (see FIG. 1). The authentication server 102 stores biometric information for each of a plurality of users and performs biometric authentication using the stored biometric information. The management server 103 stores personal information for providing services to individuals who have been successfully authenticated by biometric authentication. The management server 103 transmits to the information server 101 behavioral information including personal information that the successfully authenticated individual has permitted to be provided to a third party, out of the personal information of the successfully authenticated individual to whom the service has been provided.

[0022] A user who receives a service through biometric authentication (a person who has been successfully authenticated) inputs personal information that he or she is permitted to provide to a third party to the management server 103, which stores and manages the personal information of the user. In other words, the user can control and manage whether or not personal information related to the provision of a service through biometric authentication is to be provided to a third party.

[0023] Specific embodiments will be described in more detail below with reference to the drawings.

[0024] [First embodiment] The first embodiment will be described in more detail with reference to the drawings.

[0025] [System configuration] Fig. 2 is a diagram showing an example of a schematic configuration of an authentication system according to the first embodiment. As shown in Fig. 2, the authentication system includes an authentication center, an information center, and a plurality of service providers.

[0026] Each service provider participating in the authentication system provides a service using biometric authentication. Examples of services provided by a service provider include payment services at retail stores and accommodation services at hotels. Alternatively, a service provided by a service provider may be immigration inspection at an airport or a seaport. The service provider disclosed in the present application may provide any service that can be provided using biometric authentication.

[0027] An authentication server 10 is installed in the authentication center. The authentication server 10 stores biometric information of a user and performs biometric authentication of the user using the biometric information. The authentication server 10 operates as an authentication authority for authentication using the biometric information. The authentication server 10 may be a server installed on the premises of the authentication center, or may be a server installed on the cloud.

[0028] Examples of the biometric information of a user include data (feature amounts) calculated from physical characteristics unique to an individual, such as a face, fingerprint, voiceprint, veins, retina, and iris pattern. Alternatively, the biometric information of a user may be image data such as a face image or fingerprint image. The biometric information of a user may include information on the physical characteristics of the user. In this disclosure, a case where biometric information related to a person's "face" is used will be described.

[0029] The authentication server 10 is a server device for realizing services based on biometric authentication. The authentication server 10 processes "authentication requests" sent from each service provider and sends the results of the authentication process to the service provider. The authentication server 10 stores biometric information of each of a plurality of users and performs biometric authentication using the stored biometric information.

[0030] Each service provider has a management server and an authentication terminal.

[0031] For example, a service provider S1 is provided with a management server 20 and a plurality of authentication terminals 30. A service provider S2 is provided with a management server 20 and a plurality of authentication terminals 31.

[0032] In the following description, when it is necessary to distinguish between the components, the reference numerals to the right of the hyphens will be used. The operation of each device included in the service provider S1 and the service provider S2 can be the same, so the following description will focus on the service provider S1.

[0033] The devices shown in Fig. 2 are connected to each other. For example, the authentication server 10 and the management server 20 are connected to each other by a wired or wireless communication means and are configured to be able to communicate with each other.

[0034] The management server 20 is a server that controls and manages the overall business of the service provider. For example, if the service provider is a retail store, the management server 20 performs inventory management of products. Alternatively, if the service provider is a hotel operator, the management server 20 performs management of reservation information of guests.

[0035] The management server 20 has a control function and a management function related to the biometric authentication of users, in addition to the functions related to providing the above-mentioned services. The management server 20 stores personal information (e.g., name, etc.) of users who use the authentication system. That is, the management server 20 stores personal information for providing services to individuals who have been successfully authenticated by biometric authentication. The management server 20 also transmits to the information server 40, among the personal information of individuals who have been provided with services, personal information that the successful authentication has permitted to be provided to a third party (information center, information server 40).

[0036] The authentication terminal 30 is a device connected to the management server 20 and serves as an interface for users (customers) who visit a service provider. The users receive various services via the authentication terminal 30. For example, if the service provider is a retail store, the users use the authentication terminal 30 to pay for the service. Alternatively, if the service provider is a hotel operator, the users use the authentication terminal 30 to carry out check-in procedures.

[0037] An information server 40 is installed in the information center. The information center and information server 40 correspond to "third parties" from the user's perspective. The information server 40 collects information on the behavior of users who receive services from service providers. For example, the information server 40 collects the type of service used by the user, their name, age, gender, etc. The collected information is transferred, etc. to other businesses. Alternatively, the information server 40 analyzes the collected information and transfers the analysis results to other businesses, etc. The other businesses use the acquired analysis results, etc. for marketing, etc.

[0038] If the information on the user's behavior includes the user's personal information (for example, name, age, etc.), the information server 40 provides the personal information provider with compensation and benefits for providing the personal information.

[0039] The terminal 50 is a terminal carried by a user (a user who receives a service using biometric authentication; a person who has been successfully authenticated).

[0040] FIG. 2 is an example and is not intended to limit the configuration of the authentication system disclosed in the present application. For example, the authentication center may include two or more authentication servers 10. Alternatively, the service provider may include at least one authentication terminal 30. Alternatively, the functions of the management server 20 and the authentication terminal 30 may be integrated, and a service using biometric authentication may be provided by the integrated single device. Alternatively, in each service provider, as shown in FIG. 2, multiple authentication terminals 30 may be connected to one management server 20, or one authentication terminal 30 may be connected to one management server 20. Alternatively, the functions of the authentication server 10 and the information server 40 may be integrated. In other words, the authentication server 10 may also be a "third party" from the user's perspective.

[0041] [System operation overview] Next, the general operation of the authentication system according to the first embodiment will be described.

[0042] The operation of the authentication system involves four phases.

[0043] The first phase is a phase in which the user is registered in the system (user registration phase).

[0044] The second phase is a phase for registering a service (service registration phase).

[0045] The third phase is the phase in which services using biometric authentication are provided to users (service provision phase).

[0046] The fourth phase is a phase in which information regarding the behavior of users who have received the service is collected (information collection phase).

[0047] [User registration phase] FIG. 3 is a diagram for explaining the operation in the user registration phase of the authentication system according to the first embodiment.

[0048] A user who wishes to use a service that uses biometric authentication must register in advance. The user must determine information to identify the user in the authentication system (user ID (identifier) ​​and password (PW)) and register it in the system. In the drawings including Figure 3, the user ID is represented as "uID."

[0049] In addition, the user registers his / her own biometric information (for example, a face image) in the system.

[0050] The user registers the above three pieces of information (user ID, password, and biometric information) in the system using any means. For example, the user may mail a document containing the above three pieces of information to the authentication center, and an employee of the authentication center may enter the above three pieces of information into the authentication server 10. Alternatively, the user may mail an external storage device, such as a USB (Universal Serial Bus), on which the above three pieces of information are stored to the authentication center.

[0051] Alternatively, the user may operate the owned terminal 50 to input a captured image of the user's face, a user ID, and a password to the authentication server 10. Examples of the terminal 50 include a smartphone, a mobile phone, a game machine, a mobile terminal device such as a tablet, a computer (personal computer, notebook computer), and the like.

[0052] The authentication server 10 generates a feature amount (a feature vector consisting of a plurality of feature amounts) from the acquired face image, and stores the feature amount in association with the user ID and password. Specifically, the authentication server 10 adds a new entry to the authentication information database, and stores the above three pieces of information in association with each other.

[0053] In this way, in the user registration phase, a first ID (e.g., a user ID) that uniquely identifies a user in the system and first biometric information used to authenticate the user are registered in the system. Note that, in the first embodiment, an example is described in which a user ID and a password are used as an identifier (first ID) that uniquely identifies a system user, but if there is no overlap of user IDs between users, it is also possible to use the user ID as the identifier (first ID).

[0054] [Service registration phase] FIG. 4 is a diagram for explaining the operation in the service registration phase of the authentication system according to the first embodiment.

[0055] After completing user registration, the user selects a service provider from which the user wishes to receive services through biometric authentication, and registers the selected service provider in the system. For example, in Fig. 2, if the user wishes to receive services from service provider S1, the user registers service provider S1 in the system.

[0056] The user registers personal information required to receive a service from the selected service provider in the system. Examples of personal information registered in the system include name, age, sex, contact information, and information for receiving payment. The contact information is, for example, an email address of an account that terminal 50 can receive. The user also registers payment receipt information for receiving payment (payment for providing personal information) in the system. Examples of payment receipt information include a bank account, a virtual currency receiving account, and online shopping ID information. The user also registers the user ID and password determined in the user registration phase in the system along with the above personal information.

[0057] In the present disclosure, personal information is defined as information that does not include biometric information of a user (person to be authenticated). In other words, biometric information and features generated from the biometric information are excluded from "personal information" in the present disclosure.

[0058] The user inputs the above three pieces of information (personal information, user ID, password) to the service provider using any means. For example, the user mails a medium (paper or electronic medium) containing the above three pieces of information to the selected service provider. An employee of the service provider inputs the above three pieces of information into the management server 20. The user may input the above three pieces of information into the management server 20 by operating an authentication terminal 30 installed at the service provider.

[0059] 4, the user may operate a terminal 50 to input the above three pieces of information into the management server 20. In this case, the user inputs the above three pieces of information on a WEB page managed and operated by the service provider.

[0060] Upon acquiring the above three pieces of information (personal information, user ID, and password), the management server 20 transmits a "service registration request" to the authentication server 10. Specifically, the management server 20 transmits a service registration request including the service provider ID, the user ID, and the password to the authentication server 10.

[0061] The service provider ID is identification information for uniquely identifying a service provider (such as a retailer participating in an authentication infrastructure that uses biometric authentication) included in the authentication system. In the example of Figure 2, different service provider IDs are assigned to the service providers S1 and S2.

[0062] Note that the service provider ID is an ID assigned to each service provider, not to each service. For example, in FIG. 2, even if the service providers S1 and S2 are businesses that provide the same type of service (e.g., accommodation service), if the management entities are different, these service providers are assigned different IDs.

[0063] The authentication server 10 and the management server 20 share the service provider ID by any method. For example, when a service provider participates in the authentication infrastructure, the authentication server 10 generates a service provider ID and distributes (notifies) the generated service provider ID to the service provider. In the drawings including FIG. 4, the service provider ID is represented as "spID".

[0064] When the authentication server 10 receives a service registration request, it searches the authentication information database using the user ID and password included in the request as keys to identify the corresponding user. After that, the authentication server 10 generates a "service user ID."

[0065] The service user ID is identification information that uniquely defines a correspondence (combination) between a user and a service provider. For example, in the example of Fig. 2, a service user ID determined from a combination of a user U1 and a service provider S1 and a service user ID determined from a combination of a user U1 and a service provider S2 are set to different values.

[0066] The authentication server 10 stores the user ID, password, feature amount, service provider ID, and the generated service user ID in association with each other. In the drawings including Fig. 4, the service user ID is represented as "suID".

[0067] The authentication server 10 transmits the generated service user ID to the sender of the service registration request. The authentication server 10 transmits a response including the service user ID to the management server 20, and issues the service user ID.

[0068] The management server 20 stores the service user ID acquired from the authentication server 10 in association with the user's personal information (personal information including payment receipt information). The management server 20 adds a new entry to the user information database and stores the above information (personal information, service user ID).

[0069] The user repeats the above-described registration operation for each service provider from which the user wishes to receive services using biometric authentication. In other words, the user does not need to register with a service provider from which the user does not wish to receive services.

[0070] Thus, in the service registration phase, a service registration request including a first ID (e.g., a user ID) and a second ID (e.g., a service provider ID) is sent to the authentication server 10 from the service provider of the service that the user wishes to use. When processing the service registration request, the authentication server 10 generates a third ID (e.g., a service user ID) that is uniquely determined by the combination of the user and the service provider. The authentication server 10 sends the third ID to the service provider. The service provider (management server 20) stores the user's personal information and the third ID in association with each other.

[0071] [Service provision phase] FIG. 5 is a diagram for explaining the operation in the service providing phase of the authentication system according to the first embodiment.

[0072] After completing the service registration (service registration phase), the user visits the service provider. The user moves to the authentication terminal 30.

[0073] The authentication terminal 30 acquires biometric information from a user in front of the authentication terminal 30. Specifically, the authentication terminal 30 captures an image of the user and acquires a facial image. The authentication terminal 30 transmits the acquired facial image to the management server 20.

[0074] The management server 20 generates features from the acquired face image, and transmits an authentication request including the generated features and the service provider ID to the authentication server 10.

[0075] The authentication server 10 extracts a feature from the authentication request, and executes a matching process (1:N matching; N is a positive integer, the same applies below) using the extracted feature and a feature registered in the authentication information database.

[0076] The authentication server 10 identifies the user through a matching process, and identifies a service user ID corresponding to the service provider ID included in the authentication request from among a plurality of service user IDs associated with the identified user.

[0077] The authentication server 10 transmits the identified service user ID to the sender of the authentication request. The authentication server 10 transmits a response (response to the authentication request) including the identified service user ID to the management server 20.

[0078] The management server 20 searches the user information database using the acquired service user ID as a key, and identifies the user corresponding to the service user ID. The management server 20 transmits all or part of the personal information of the identified user to the authentication terminal 30. The authentication terminal 30 provides a service using the acquired personal information.

[0079] When the authentication terminal 30 ends the provision of the service, it notifies the management server 20 of that effect. Specifically, the authentication terminal 30 transmits a “service provision end notification” to the management server 20.

[0080] Thus, in the service provision phase, the authentication terminal 30 acquires the second biometric information of the user and transmits the acquired second biometric information to the management server. The authentication server 10 receives an authentication request including the user's biometric information and a second ID (service provider ID) from the service provider. The authentication server 10 identifies a third ID (service user ID) by a matching process using the first and second biometric information and the second ID. The authentication server 10 transmits the identified third ID to the service provider. When providing a service to the user, the management server 20 identifies personal information of the user using the third ID acquired by transmitting an authentication request to the authentication server 10. The service provider provides the service to the user using the identified personal information.

[0081] [Information gathering phase] FIG. 6 is a diagram for explaining the operation in the information gathering phase of the authentication system according to the first embodiment.

[0082] In the information collection phase, the information server 40 collects information on the behavior of users (successfully authenticated individuals) who have received services from service providers. In the following explanation, the information collected by the information server 40 (information provided to the information server 40 by the management server 20) is referred to as "behavior information."

[0083] When the provision of a service using biometric authentication is completed, the service provider (management server 20) acquires the user's intention regarding providing personal information of the user who received the service using biometric authentication to a third party. Specifically, the management server 20 transmits an inquiry (hereinafter referred to as an information provision inquiry) regarding whether or not the personal information can be provided to the terminal 50 held by the user. The information provision inquiry includes a list of personal information (e.g., name, age, sex, address, etc.) stored in the management server 20 and the service user ID of the user who received the service using biometric authentication.

[0084] The terminal 50 that has received the information provision inquiry acquires the user's intention regarding the provision of personal information. For example, the terminal 50 acquires whether or not to provide personal information using a GUI (Graphical User Interface) as shown in Fig. 7. The terminal 50 may display a message clearly indicating that compensation can be obtained by providing personal information.

[0085] If the user refuses to provide personal information, the terminal 50 notifies the management server 20 of that fact (transmits a negative response to the information provision inquiry). In this case, the management server 20 transmits information regarding the outline of the services provided to the successfully authenticated person (hereinafter referred to as outline information) to the information server 40 as "behavioral information". Examples of the outline information include the type of business of the service provider (accommodation, retail), the location where the service was provided, the date and time, etc.

[0086] When the user agrees to provide personal information, the terminal 50 displays a GUI for inputting whether or not to provide each item (type) of personal information held by the management server 20 (see FIG. 8). The terminal 50 may display an outline of the service received through biometric authentication on the input screen for whether or not to provide personal information. For example, the terminal 50 may display a GUI as shown in FIG. 9. In this case, the management server 20 may transmit an information provision inquiry including the outline information and the user's facial image (the facial image acquired from the authentication terminal 30) to the terminal 50.

[0087] The terminal 50 transmits information (type of personal information permitted to be provided to a third party) acquired through a GUI such as that shown in Fig. 8 or 9 to the management server 20. Specifically, the terminal 50 transmits an affirmative response including the information and the service user ID to the management server 20.

[0088] The management server 20, which has received the positive response, searches the user information database using the service user ID as a key to identify the corresponding user. The management server 20 transmits to the information server 40 "behavioral information" including personal information of the identified user that is permitted to be provided and summary information.

[0089] The information server 40 stores the received behavioral information. If the behavioral information includes the user's personal information, the information server 40 determines the compensation to be given to the personal information provider according to the type (item) of the provided personal information. Specifically, the information server 40 calculates the compensation according to a predetermined standard. For example, the information server 40 gives a high compensation to a user who provides high-value information such as name and age, and a low compensation to a user who provides low-value information such as gender. The information server 40 notifies the management server 20 of the calculated compensation.

[0090] The determination of the compensation by the information server 40 described above is merely an example, and the information server 40 can determine the compensation to be given to the personal information provider according to various methods and standards. For example, the information server 40 may determine the compensation according to the demand for personal information (the number of companies wishing to purchase personal information). That is, the information server 40 may give a high compensation for personal information that is in high demand (high value) and a low compensation for personal information that is less important (low value). Alternatively, the information server 40 may determine the compensation to be given to the personal information provider according to the amount of money offered by companies, etc. wishing to provide information. The information server 40 may give a high compensation to a user who provides personal information for which the amount offered is high.

[0091] The management server 20 refers to the compensation receipt information of the personal information provider and pays the compensation (money, virtual currency, points) notified by the information server 40 to the personal information provider. The personal information provider can obtain compensation for providing personal information from the information center via the service provider. The service provider may obtain a portion of the compensation paid to the personal information provider from the information center (information server 40) as an intermediary fee. Alternatively, the information center may pay the service provider a fee according to the total amount of personal information acquired in a specified period (for example, one month).

[0092] It is possible to make arrangements such that a contract regarding payment of the consideration is concluded in advance between the service provider and the information center, and the service provider advances the consideration that the information center pays to the personal information provider. Also, an ID is assigned to the information (behavioral information, notification of consideration) exchanged between the management server 20 and the information server 40, and the management server 20 manages the ID in association with the service user ID of the personal information provider, thereby identifying the user who will pay the consideration.

[0093] In this way, when the provision of the service to the successfully authenticated person is completed, the management server 20 transmits an information provision inquiry (an inquiry regarding whether or not personal information can be provided, including a list of personal information items stored in the management server 20) to the terminal 50. Using the acquired list of personal information, the terminal 50 generates a GUI for inputting the type of personal information that the successfully authenticated person is permitted to provide to a third party. The terminal 50 acquires the type of personal information permitted to be provided to a third party via the GUI, and transmits the acquired type of personal information to the management server 20. When the management server 20 receives a positive response from the terminal 50, it transmits behavioral information to the information server 40, including the personal information permitted to be provided and summary information indicating an outline of the service provided.

[0094] Next, each device included in the authentication system according to the first embodiment will be described in detail.

[0095] [Authentication Server] Fig. 10 is a diagram showing an example of a processing configuration (processing module) of the authentication server 10 according to the first embodiment. Referring to Fig. 10, the authentication server 10 includes a communication control unit 201, a user registration unit 202, a database management unit 203, a service registration unit 204, an authentication unit 205, and a storage unit 206.

[0096] The communication control unit 201 is a means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the management server 20. The communication control unit 201 also transmits data to the management server 20. The communication control unit 201 passes data received from other devices to other processing modules. The communication control unit 201 transmits data acquired from other processing modules to other devices. In this way, the other processing modules transmit and receive data to and from other devices via the communication control unit 201.

[0097] The user registration unit 202 is a means for realizing the above-mentioned user registration. The user registration unit 202 acquires the user ID, password, and biometric information (face image) of a user (a user who wishes to receive a service using biometric authentication; a system user).

[0098] The user registration unit 202 acquires the above three pieces of information (user ID, password, and biometric information) using any means. For example, the user registration unit 202 displays a GUI or an input form for determining a user ID and a password on the terminal 50. For example, the user registration unit 202 displays a GUI such as that shown in FIG. 11 on the terminal 50.

[0099] The user registration unit 202 verifies that the user ID and password acquired through the GUI or the like are not the same as those already registered. If there is no duplication, the user registration unit 202 displays on the terminal 50 a GUI for acquiring the user's biometric information.

[0100] For example, the user registration unit 202 displays a GUI as shown in Fig. 12 on the terminal 50. For example, the user presses the "File Selection" button shown in Fig. 12 and specifies image data of a face image to be registered in the system. The specified face image is displayed in the preview area (displayed as a selected face image in Fig. 12).

[0101] The user registration unit 202 acquires a user ID, a password, and biometric information (face image) using a GUI such as that shown in FIG. 11 and FIG. 12, and generates a feature amount (a feature vector consisting of a plurality of feature amounts) from the face image.

[0102] Specifically, the user registration unit 202 extracts feature points from the acquired face image. Since existing technology can be used for the feature point extraction process, detailed description thereof will be omitted. For example, the user registration unit 202 extracts the eyes, nose, mouth, etc. as feature points from the face image. After that, the user registration unit 202 calculates the position of each feature point and the distance between each feature point as feature amounts, and generates a feature vector (vector information that characterizes the face image) consisting of multiple feature amounts.

[0103] The user registration unit 202 passes the user ID, password, and the generated feature amount to the database management unit 203 .

[0104] The database management unit 203 is a means for managing the authentication information database. The authentication information database stores information for identifying a system user (user ID, password), biometric information (feature amount), a service provider ID for identifying a service provider, and a service user ID for identifying a user in each service, in association with each other.

[0105] When the database management unit 203 acquires the above three pieces of information (user ID, password, feature amount) from the user registration unit 202, it adds a new entry to the authentication information database. For example, when the above three pieces of information about user U1 are acquired, the database management unit 203 adds the entry shown in the bottom row of Fig. 13. Note that at the user registration stage, the service provider ID and service user ID have not been generated, so nothing is set in these fields.

[0106] The service registration unit 204 is a means for enabling individual service registration by a system user. The service registration unit 204 processes a service registration request received from the management server 20 of the service provider.

[0107] The service registration unit 204 searches the authentication information database using the user ID and password included in the acquired service registration request as keys. The service registration unit 204 checks the service provider ID field of the identified user (the user identified from the pair of the user ID and password).

[0108] The service registration unit 204 determines whether or not the service provider ID included in the service registration request acquired from the management server 20 is set in the service provider ID field. If the service provider ID acquired from the management server 20 is already registered in the database, the service registration unit 204 notifies the management server 20 of that fact. In this case, since the service (service provider) that the user is attempting to register is already registered in the authentication information database, the service registration unit 204 transmits a "negative response" as a response to the service registration request.

[0109] On the other hand, if the service provider ID included in the service registration request is not set in the service provider ID field of the identified user, the service registration unit 204 generates a service user ID corresponding to the user and the service provider.

[0110] As described above, the service user ID is identification information that is uniquely determined from a combination of a user and a service provider. For example, the service registration unit 204 calculates a hash value using the user ID, the password, and the service provider ID, and sets the calculated hash value as the service user ID. Specifically, the service registration unit 204 calculates a concatenated value of the user ID, the password, and the service provider ID, and calculates a hash value of the calculated concatenated value to generate the service user ID.

[0111] Note that the generation of the service user ID using the hash value is merely an example, and is not intended to limit the method of generating the service user ID. The service user ID may be any information that can uniquely identify a combination of a system user and a service provider. For example, the service registration unit 204 may assign a unique value each time a service registration request is processed, and use the number as the service user ID.

[0112] When the service user ID is generated, the service registration unit 204 passes the service provider ID and service user ID together with the user ID and password to the database management unit 203. The database management unit 203 registers the two IDs (service provider ID, service user ID) in the authentication information database. For example, when a user U1 performs service registration for a service provider S1, the above two IDs are added to the entry shown at the bottom of Fig. 14.

[0113] Since service registration is performed for each service provider, multiple service providers and service user IDs may be set for one user. For example, when user U1 performs service registration for each of service providers S1 and S2, the entries in the second and third lines of Fig. 15 are generated. When user U2 performs service registration for service provider S1, the entry in the bottom row of Fig. 15 is generated.

[0114] The authentication information database shown in FIG. 15 and the like is merely an example, and is not intended to limit the information stored in the authentication information database. For example, a face image may be registered in the authentication information database instead of a feature for authentication. That is, a feature may be generated from a face image registered in the authentication information database each time authentication is performed.

[0115] When the service provider ID and the service user ID are registered in the authentication information database, the service registration unit 204 notifies the management server 20 that the service registration request has been processed normally. The service registration unit 204 transmits an "acknowledgement" as a response to the service registration request. At that time, the service registration unit 204 transmits a response including the service user ID to the management server 20.

[0116] The authentication unit 205 is a means for performing authentication processing of the system user. The authentication unit 205 processes an authentication request received from the management server 20 of the service provider.

[0117] The authentication unit 205 extracts the feature amount and the service provider ID included in the authentication request, and searches the authentication information database using the extracted feature amount and the service provider ID as keys to identify the corresponding service user ID.

[0118] The authentication unit 205 sets the feature quantity extracted from the authentication request as the feature quantity of the matching side, and the feature quantity stored in the database as the feature quantity of the registration side, and executes 1:N matching. Specifically, the authentication unit 205 calculates the similarity between the feature quantity of the matching side and each of the multiple registration sides. The similarity can be calculated using chi-square distance, Euclidean distance, or the like. Note that the greater the distance, the lower the similarity, and the closer the distance, the higher the similarity.

[0119] The authentication unit 205 judges whether or not there is a feature whose similarity with the feature to be matched is equal to or greater than a predetermined value among a plurality of feature quantities registered in the database. If such a feature quantity exists, the authentication unit 205 identifies a user (user ID, password) corresponding to the feature quantity with the highest similarity. The authentication unit 205 judges whether or not there is an entry matching the service provider ID included in the authentication request among at least one or more service provider IDs associated with the user identified by the above 1:N matching.

[0120] If such an entry exists (if the above two determinations are successful), the authentication unit 205 determines that the authentication of the user has been successful. In this case, the authentication unit 205 transmits an "affirmative response" to the management server 20, which is the sender of the authentication request. At that time, the authentication unit 205 generates a response (response to the authentication request) including the service user ID of the identified entry, and transmits it to the management server 20.

[0121] If at least one of the above two determinations fails, the authentication unit 205 determines that the authentication of the user has failed. In this case, the authentication unit 205 transmits a "negative response" to the management server 20 that is the sender of the authentication request.

[0122] 15, when an authentication request includes a feature of “FV1” and a service provider ID of “S1”, the feature FV1 identifies the entries (users) in the second and third lines, and the service provider ID “S1” identifies the entry in the second line. As a result, the authentication request is processed normally, and an affirmative response including the service user ID of “U1S1” is sent to the management server 20.

[0123] On the other hand, if the feature of "FV2" and the service provider ID of "S2" are included in the authentication request, the feature identifies the bottom entry, but the service provider ID of the entry is "S1" and not "S2", so the authentication request is not processed normally. As a result, a negative response is sent to the management server 20.

[0124] The storage unit 206 stores information necessary for the operation of the authentication server 10. In the storage unit 206, an authentication information database is constructed.

[0125] [Management Server] Fig. 16 is a diagram showing an example of a processing configuration (processing module) of the management server 20 according to the first embodiment. Referring to Fig. 16, the management server 20 includes a communication control unit 301, a personal information acquisition unit 302, a service registration request unit 303, a database management unit 304, an authentication request unit 305, a behavior information providing unit 306, and a storage unit 307.

[0126] The communication control unit 301 is a means for controlling communication with other devices. For example, the communication control unit 301 receives data (packets) from the authentication server 10. The communication control unit 301 also transmits data to the authentication server 10. The communication control unit 301 passes data received from other devices to other processing modules. The communication control unit 301 transmits data acquired from other processing modules to other devices. In this way, the other processing modules transmit and receive data to and from other devices via the communication control unit 301.

[0127] The personal information acquisition unit 302 is a means for acquiring personal information required when the service provider provides the service. For example, when the service provider is a "retailer", the personal information acquisition unit 302 acquires payment-related information (e.g., credit card information, bank account information) in addition to the user's name, etc. Alternatively, when the service provider is a "hotel operator", the personal information acquisition unit 302 acquires reservation information regarding accommodation (e.g., accommodation date, etc.) in addition to the user's name, etc.

[0128] The personal information acquisition unit 302 also acquires from the user contact information (e.g., an email address that can be received by terminal 50) for sending an inquiry regarding whether or not to provide personal information (information provision inquiry), and payment receipt information for receiving payment from the information server 40.

[0129] Furthermore, the personal information acquisition unit 302 acquires the user ID and password determined when the user registered with the system, in addition to the above personal information such as the name.

[0130] The personal information acquiring unit 302 acquires personal information, a user ID, and a password by using any means. For example, the personal information acquiring unit 302 displays a GUI or a form for inputting the above information on the terminal 50 (see FIG. 17). Alternatively, the information as shown in FIG. 17 may be displayed on a WEB page managed and operated by the service provider. Alternatively, the terminal 50 may download an application provided by the service provider, and the display as shown in FIG. 17 may be performed by the application. In particular, the WEB page may be a WEB page that manages the member information of the service provider. That is, the members of each service provider may register for a service on a WEB page that manages their own member information.

[0131] The personal information acquisition unit 302 passes the personal information (including contact information and payment information) acquired using a GUI or the like, the user ID, and the password to the service registration request unit 303 .

[0132] The service registration request unit 303 is a means for requesting (requesting) the authentication server 10 to register the user's use of the service.

[0133] The service registration request unit 303 selects the user ID and password from the above three pieces of information (personal information, user ID, and password) acquired from the personal information acquisition unit 302. The service registration request unit 303 transmits a service registration request including the selected user ID, password, and service provider ID to the authentication server 10.

[0134] The service registration request unit 303 acquires a response to the service registration request from the authentication server 10. If the acquired response is a "negative response", the service registration request unit 303 notifies the user of that fact. For example, the service registration request unit 303 notifies the user that the service registration has already been performed.

[0135] If the acquired response is an "affirmative response", the service registration request unit 303 notifies the user that the service registration was successful. In addition, the service registration request unit 303 passes the service user ID included in the response and the personal information acquired from the personal information acquisition unit 302 (such as name, sex, address, family structure, contact information, and payment receipt information) to the database management unit 304.

[0136] The database management unit 304 is a means for managing a user information database. The user information database is a database for managing information on users (system users) to whom services are provided. The user information database stores personal information (e.g., name, etc.) of the users in association with the service user ID acquired from the authentication server 10.

[0137] The database management unit 304 adds a new entry to the user information database when it acquires the above information (personal information, service user ID) from the service registration request unit 303. For example, when the management server 20 of the service provider S1 acquires the above information regarding the user U1, the entry shown at the bottom of Fig. 18 is added.

[0138] The authentication request unit 305 is a means for requesting the authentication server 10 to authenticate the user.

[0139] When the authentication request unit 305 acquires biometric information (face image) from the authentication terminal 30, the authentication request unit 305 generates features from the face image. The authentication request unit 305 transmits an authentication request including the generated features and the service provider ID to the authentication server 10.

[0140] If the response from the authentication server 10 is a "negative response" (if the authentication has failed), the authentication request unit 305 notifies the authentication terminal 30 accordingly.

[0141] If the response from the authentication server 10 is an "affirmative response" (if the authentication is successful), the authentication request unit 305 extracts the service user ID included in the response from the authentication server 10. The authentication request unit 305 searches the user information database using the service user ID as a key, and identifies the corresponding entry.

[0142] The authentication request unit 305 reads out the personal information of the identified entry and transmits it to the authentication terminal 30. For example, in the example of FIG. 18, if the service user ID is "U1S1", the personal information in the bottom row is transmitted to the authentication terminal 30. Note that the authentication request unit 305 does not need to transmit to the authentication terminal 30 personal information that is not necessary for the authentication terminal 30 to provide the service. For example, if contact information for information inquiries or payment receipt information is not necessary for the service to be provided, this information does not need to be transmitted to the authentication terminal 30.

[0143] The behavior information providing unit 306 is a means for providing the information server 40 with information (behavior information) relating to the behavior of the user when a service is provided based on biometric authentication.

[0144] When the behavior information providing unit 306 receives a "service provision end notification" from the authentication terminal 30, it transmits an "information provision inquiry" to the terminal 50 held by the user (authenticated successfully; user who received service provision through biometric authentication). As described above, the inquiry includes a list of personal information stored in the management server 20 and the service user ID.

[0145] If the response to the information provision inquiry is a negative response (refusal to provide personal information), the behavioral information providing unit 306 generates summary information and transmits the summary information to the information server 40 as "behavioral information." Note that the summary information does not include information that can identify the user, but is information for notifying the information server 40 of the fact that a service has been provided through biometric authentication and a brief description of the service. For this reason, the management server 20 may include the user's product purchase price, accommodation record, etc. in the summary information.

[0146] If the response to the information provision inquiry is an affirmative response (agreement to the provision of personal information), the behavioral information providing unit 306 identifies the user by the service user ID included in the response. Furthermore, the behavioral information providing unit 306 reads out from the user information database the personal information related to the identified user that the user has permitted to be provided. The behavioral information providing unit 306 transmits the read out personal information and summary information to the information server 40 as "behavioral information".

[0147] When transmitting behavioral information including personal information and summary information, the behavioral information providing unit 306 generates an ID (behavioral information ID) that enables the behavioral information to be transmitted to be identified, and transmits the behavioral information including the ID to the information server 40 (see FIG. 19). The behavioral information providing unit 306 stores the behavioral information ID and the service user ID in association with each other.

[0148] When the behavior information providing unit 306 receives a notification regarding the consideration from the information server 40, it extracts the behavior information ID included in the notification and identifies the corresponding user (service user ID). The behavior information providing unit 306 searches the user information database using the identified service user ID as a key to identify the corresponding entry. The behavior information providing unit 306 refers to the consideration receipt information of the identified entry and obtains the payee of the consideration. The behavior information providing unit 306 pays the consideration notified by the information server 40 to the payee.

[0149] The storage unit 307 stores information necessary for the operation of the management server 20. A user information database is constructed in the storage unit 307.

[0150] [Authentication device] The authentication terminal 30 transmits biometric information acquired from the user to the management server 20, thereby acquiring personal information of the user from the management server 20. The authentication terminal 30 provides services to the user using the acquired personal information.

[0151] Fig. 20 is a diagram showing an example of a processing configuration (processing module) of the authentication terminal 30 according to the first embodiment. Referring to Fig. 20, the authentication terminal 30 includes a communication control unit 401, a biometric information acquisition unit 402, a service providing unit 403, a message output unit 404, and a storage unit 405.

[0152] The communication control unit 401 is a means for controlling communication with other devices. For example, the communication control unit 401 receives data (packets) from the management server 20. The communication control unit 401 also transmits data to the management server 20. The communication control unit 401 passes data received from other devices to other processing modules. The communication control unit 401 transmits data acquired from other processing modules to other devices. In this way, the other processing modules transmit and receive data to and from other devices via the communication control unit 401.

[0153] The biometric information acquisition unit 402 is a means for controlling the camera and acquiring the biometric information (face image) of the user. The biometric information acquisition unit 402 captures an image in front of the device periodically or at a predetermined timing. The biometric information acquisition unit 402 determines whether or not the acquired image contains a human face image, and if a face image is included, extracts the face image from the acquired image data.

[0154] Since existing technologies can be used for the facial image detection process and facial image extraction process by the biometric information acquisition unit 402, detailed explanations will be omitted. For example, the biometric information acquisition unit 402 may extract a facial image (face region) from image data using a learning model learned by a CNN (Convolutional Neural Network). Alternatively, the biometric information acquisition unit 402 may extract a facial image using a method such as template matching.

[0155] The biometric information acquiring unit 402 passes the extracted face image to the service providing unit 403 .

[0156] The service providing unit 403 is a means for providing a predetermined service to a user. The service providing unit 403 transmits the facial image acquired from the biometric information acquiring unit 402 to the management server 20. The management server 20 returns personal information (e.g., name, etc.) corresponding to the facial image. The service providing unit 403 uses the returned personal information to provide the service to the user. When the provision of the service to the user ends, the service providing unit 403 transmits a "service provision end notification" to the management server 20.

[0157] The message output unit 404 is a means for outputting various messages to the user. For example, the message output unit 404 outputs a message regarding the authentication result of the user and a message regarding the provision of services. The message output unit 404 may display a message using a display device such as a liquid crystal monitor, or may play an audio message using an audio device such as a speaker.

[0158] The storage unit 405 stores information necessary for the operation of the authentication terminal 30 .

[0159] [Information Server] 21 is a diagram showing an example of a processing configuration (processing module) of the information server 40 according to the first embodiment. Referring to FIG. 21, the information server 40 includes a communication control unit 501, a behavior information processing unit 502, and a storage unit 503.

[0160] The communication control unit 501 is a means for controlling communication with other devices. For example, the communication control unit 501 receives data (packets) from the management server 20. The communication control unit 501 also transmits data to the management server 20. The communication control unit 501 passes data received from other devices to other processing modules. The communication control unit 501 transmits data acquired from other processing modules to other devices. In this way, the other processing modules transmit and receive data to and from other devices via the communication control unit 501.

[0161] The behavior information processing unit 502 is a unit that processes the behavior information acquired from the management server 20. The behavior information processing unit 502 stores the acquired behavior information in the storage unit 503.

[0162] When the acquired behavioral information includes personal information (e.g., name, age, etc.), the behavioral information processing unit 502 determines the compensation to be paid to the provider of the behavioral information (personal information provider). For example, the behavioral information processing unit 502 determines the compensation by referring to table information that defines the types of acquired personal information and the compensation to be paid (amount, points, etc.) as shown in FIG. 22. The behavioral information processing unit 502 calculates the sum of the compensation corresponding to each type of personal information provided, and sets this as the compensation to be paid to the personal information provider. The information center determines the amount of compensation depending on the value of the information provided.

[0163] The behavior information processing unit 502 notifies the management server 20 of the determined compensation.

[0164] The storage unit 503 is a means for storing information necessary for the operation of the information server 40 .

[0165] The information server 40 analyzes the accumulated behavioral information and generates information for sale to businesses, etc. However, since this function is different from the gist of the present application, a description of this function will be omitted.

[0166] In this way, the information server 40 determines the compensation to be paid to the user (the person who has been successfully authenticated and received the service) according to the type of personal information provided by the user. The information server 40 also notifies the management server 20 of the compensation to be paid to the user. The management server 20 pays the notified compensation based on the compensation receipt information of the user.

[0167] [Device] 23 is a diagram showing an example of a processing configuration (processing module) of the terminal 50 according to the first embodiment. Referring to FIG. 23, the terminal 50 includes a communication control unit 601, a personal information control unit 602, and a storage unit 603.

[0168] The communication control unit 601 is a means for controlling communication with other devices. For example, the communication control unit 601 receives data (packets) from the management server 20. The communication control unit 601 also transmits data to the management server 20. The communication control unit 601 passes data received from other devices to other processing modules. The communication control unit 601 transmits data acquired from other processing modules to other devices. In this way, the other processing modules transmit and receive data to and from other devices via the communication control unit 601.

[0169] The personal information control unit 602 is a means for controlling whether or not personal information held by the service provider is to be provided to the information server 40 in accordance with the user's will.

[0170] When the personal information control unit 602 receives an information provision inquiry from the management server 20, it acquires the user's intention as to whether or not to consent to the provision of personal information stored in the management server 20 to the information server 40. Specifically, the personal information control unit 602 displays a GUI as shown in Fig. 7 and acquires the user's comprehensive (overall) intention regarding the provision of personal information.

[0171] If the user has no intention of providing personal information, the personal information control unit 602 notifies the management server 20 of that effect. Specifically, the personal information control unit 602 transmits to the management server 20 a negative response to the information provision inquiry.

[0172] If the user intends to provide personal information, the personal information control unit 602 displays a GUI as shown in Fig. 8 and Fig. 9, and acquires the types of personal information permitted to be provided to the information center (third party). The personal information control unit 602 determines the types of personal information shown in Fig. 8 and Fig. 9 based on a list of personal information items acquired from the management server 20. Fig. 8 and Fig. 9 show an interface that allows the user to select personal information that can be provided to third parties, but an interface that allows or disallows provision (YES, NO) for each piece of personal information may also be used.

[0173] If the service provider (management server 20) is different, the personal information stored in the management server 20 is also different. Therefore, by referring to the list of personal information items acquired from the management server 20, the personal information control unit 602 does not request the user to select personal information that cannot be provided to the information server 40.

[0174] The personal information control unit 602 transmits the type of personal information acquired through the GUI shown in Fig. 8 and Fig. 9 to the management server 20. Specifically, the personal information control unit 602 transmits an affirmative response including the type of personal information permitted by the user to the management server 20.

[0175] The storage unit 603 stores information necessary for the operation of the terminal 50 .

[0176] [System Operation] Next, a description will be given of the operation of the authentication system according to the first embodiment. Note that the description of the operation will focus on the service registration phase, the service provision phase, and the information collection phase, and a description of the user registration phase will be omitted.

[0177] FIG. 24 is a sequence diagram showing an example of operations related to the service registration phase of the authentication system according to the first embodiment.

[0178] The management server 20 acquires personal information (information necessary to provide a service), a user ID, and a password from the user (step S01).

[0179] The management server 20 transmits a service registration request including the acquired user ID, password, and service provider ID to the authentication server 10 (step S02).

[0180] The authentication server 10 generates a service user ID using the acquired user ID, password, and service provider ID (step S03).

[0181] The authentication server 10 stores the service provider ID and the service user ID in the authentication information database (step S04).

[0182] The authentication server 10 transmits a response (response to the service registration request) including the service user ID to the management server 20 (step S05).

[0183] The management server 20 associates the personal information acquired in step S01 with the service user ID acquired from the authentication server 10 and stores them in the user information database (step S06).

[0184] In this way, the management server 20 acquires the service user ID by transmitting an authentication request including the user ID, password, and service provider ID to the authentication server 10. The management server 20 stores the acquired service user ID in association with the personal information of the user.

[0185] FIG. 25 is a sequence diagram showing an example of an operation related to the service providing phase of the authentication system according to the first embodiment.

[0186] The authentication terminal 30 acquires a facial image (biometric information) of the user, and transmits the acquired facial image to the management server 20 (step S11).

[0187] The management server 20 generates features from the acquired face image (step S12).

[0188] The management server 20 transmits an authentication request including the generated feature amount and the service provider ID to the authentication server 10 (step S13).

[0189] The authentication server 10 executes authentication processing using the feature amount and the service provider ID included in the authentication request, and identifies the corresponding service user ID (step S14).

[0190] The authentication server 10 transmits a response (response to the authentication request) including the identified service user ID to the management server 20 (step S15).

[0191] The management server 20 searches the user information database using the acquired service user ID, and identifies the corresponding personal information (step S16).

[0192] The management server 20 transmits the specified personal information to the authentication terminal 30 (step S17).

[0193] The authentication terminal 30 uses the acquired personal information to provide a service (step S18).

[0194] When the provision of the service ends, the authentication terminal 30 transmits a service provision end notice to the management server 20 (step S19).

[0195] FIG. 26 is a sequence diagram showing an example of an operation related to the information collection phase of the authentication system according to the first embodiment.

[0196] When receiving the service provision end notification from the authentication terminal 30, the management server 20 transmits an information provision inquiry to the terminal 50 (step S21).

[0197] When the information provision inquiry is received, the terminal 50 generates a GUI for acquiring the user's intention regarding providing personal information to a third party (information center, information server 40) (acquiring whether or not to provide personal information; step S22).

[0198] If the user agrees to provide personal information, the terminal 50 generates a GUI for selecting the type of personal information that can be provided to a third party (selection of personal information to be provided; step S23).

[0199] The terminal 50 generates a response (response to the information provision inquiry) including the type of personal information selected by the user, and transmits it to the management server 20 (step S24).

[0200] The management server 20 transmits the behavioral information, including the personal information and summary information that are permitted to be provided, to the information server 40 (step S25).

[0201] The information server 40 stores the acquired behavioral information (step S26) and determines the compensation to be paid to the personal information provider (step S27).

[0202] The information server 40 notifies the management server 20 of the determined price (step S28).

[0203] The management server 20 refers to the payment receipt information of the personal information provider, and pays the payment notified by the management server 20 to the user (step S29).

[0204] As described above, in the authentication system according to the first embodiment, when a service is provided to a user, in addition to information resulting from the provision of the service (summary information showing an outline of the service), personal information of the user who has received the service is transmitted to the information center. At that time, the user can select which items of his / her personal information are permitted to be provided to third parties, and can therefore refuse to provide personal information that does not meet his / her wishes. In other words, the user can control the provision or refusal of personal information based on his / her own wishes.

[0205] Furthermore, information centers that collect and utilize personal information make it easy to collect such personal information by offering a high price for personal information with high utility value (such as name, address, etc.). In other words, because a large price can be obtained, users consent (are convinced) to providing highly useful personal information to third parties. Furthermore, the personal information that the information center can collect varies depending on the service provider, allowing the information center to collect a wider variety of data. For example, the information center can obtain the user's age along with the amount paid by the user from retailers, and the user's length of stay and age, gender, etc. from hotel operators.

[0206] [Second embodiment] Next, the second embodiment will be described in detail with reference to the drawings.

[0207] In the second embodiment, a case will be described in which the authentication terminal 30 acquires whether or not personal information can be provided.

[0208] The configuration of the authentication system according to the second embodiment can be the same as that of the first embodiment, so a description corresponding to FIG. 2 will be omitted.

[0209] In the second embodiment, the contact information of the user, which was required in the first embodiment, is not required because the authentication terminal 30 obtains the permission or not to provide personal information in the second embodiment.

[0210] FIG. 27 is a diagram for explaining the operation of the authentication system according to the second embodiment.

[0211] When the authentication terminal 30 acquires the personal information from the management server 20, it provides a service using the personal information. When the provision of the service is completed, the authentication terminal 30 displays a GUI asking whether or not to provide the personal information. Specifically, the authentication terminal 30 generates a GUI as shown in Fig. 7 and acquires whether or not to provide the personal information.

[0212] When the user agrees to provide the personal information, the authentication terminal 30 generates a GUI (for example, a GUI as shown in FIG. 8 and FIG. 9) for inputting the personal information that can be provided to a third party. The authentication terminal 30 transmits the personal information that can be provided, acquired via the GUI, to the management server 20.

[0213] The management server 20 transmits (provides) behavioral information (behavioral information including personal information and summary information) to the information server 40 based on the received personal information.

[0214] In order to realize the operation of the authentication system according to the second embodiment, the authentication terminal 30 only needs to include the "personal information control function" of the terminal 50 according to the first embodiment. That is, as shown in Fig. 28, the authentication terminal 30 according to the second embodiment only needs to include a personal information control unit 406.

[0215] As described above, in the authentication system according to the second embodiment, when the authentication terminal 30 finishes providing a service to a person who has been successfully authenticated, it generates a GUI for inputting the type of personal information that the person who has been successfully authenticated is permitted to provide to a third party. The management server 20 acquires the user's intention regarding the provision of personal information via the authentication terminal 30. The second embodiment also allows the user to appropriately control and manage personal information related to services using biometric authentication.

[0216] Next, the hardware of each device constituting the authentication system will be described.

[0217] The management server 20 can be configured by an information processing device (so-called a computer), and has the configuration exemplified in Fig. 29. For example, the management server 20 has a processor 311, a memory 312, an input / output interface 313, and a communication interface 314. The components such as the processor 311 are connected by an internal bus or the like, and are configured to be able to communicate with each other.

[0218] However, the configuration shown in Fig. 29 is not intended to limit the hardware configuration of the management server 20. The management server 20 may include hardware not shown. Furthermore, the number of processors 311 and the like included in the management server 20 is not intended to be limited to the example shown in Fig. 29, and for example, a plurality of processors 311 may be included in the management server 20.

[0219] The processor 311 is, for example, a programmable device such as a central processing unit (CPU), a micro processing unit (MPU), or a digital signal processor (DSP). Alternatively, the processor 311 may be a device such as a field programmable gate array (FPGA), or an application specific integrated circuit (ASIC). The processor 311 executes various programs including an operating system (OS).

[0220] The memory 312 is a random access memory (RAM), a read only memory (ROM), a hard disk drive (HDD), a solid state drive (SSD), etc. The memory 312 stores an OS program, application programs, and various data.

[0221] The input / output interface 313 is an interface for a display device and an input device (not shown). The display device is, for example, a liquid crystal display, etc. The input device is, for example, a keyboard, a mouse, etc. that accepts user operations.

[0222] The communication interface 314 is a circuit, a module, etc. that communicates with other devices. For example, the communication interface 314 includes a wireless communication circuit, a NIC (Network Interface Card), etc.

[0223] The functions of the management server 20 are realized by various processing modules. The processing modules are realized, for example, by the processor 311 executing a program stored in the memory 312. The programs can be recorded in a computer-readable storage medium. The storage medium can be a non-transitory medium such as a semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. That is, the present invention can also be embodied as a computer program product. The programs can be downloaded via a network, or updated using a storage medium storing the programs. The processing modules can also be realized by a semiconductor chip.

[0224] The authentication server 10, authentication terminal 30, information server 40, terminal 50, etc. can also be configured by information processing devices like the management server 20, and their basic hardware configurations are not described here because they are no different from the management server 20. For example, the authentication terminal 30 may be provided with a camera for capturing an image of a user.

[0225] The management server 20 is equipped with a computer, and by causing the computer to execute a program, the functions of the management server 20 can be realized. Furthermore, the management server 20 executes a personal information providing method by the program.

[0226] [Variations] The configuration, operation, and the like of the authentication system described in the above embodiment are merely examples, and are not intended to limit the system configuration, and the like.

[0227] In the above embodiment, it has been described that a user determines a user ID and a password, and identifies a user (system user) registered in the system using the user ID and password. However, the authentication system may determine an ID (identifier) ​​that uniquely identifies a system user. For example, in the user registration phase, the authentication server 10 acquires biometric information (face image, feature amount) of the user. The authentication server 10 may generate the above ID based on the biometric information. For example, the authentication server 10 may calculate a hash value from the feature amount of the face image, and use the calculated hash value instead of the user ID and password. The feature amount of the face image differs for each user, and the hash value generated from the feature amount also differs for each user, so it can be used as the ID of the system user.

[0228] In the above embodiment, it has been described that the user registration phase and the service registration phase are executed at different times, but these phases may be executed at substantially the same time. For example, the above two registration phases may be executed using an authentication terminal 30 installed at a service provider to which the user wishes to receive a service. Specifically, the user may perform user registration using the authentication terminal 30, and then perform service registration consecutively. In this case, the authentication terminal 30 may be provided with a user registration function (user registration unit 202) of the authentication server 10 and a personal information acquisition function (personal information acquisition unit 302) of the management server 20.

[0229] The multiple authentication terminals 30 owned by the service provider do not have to be installed on the same premises, building, etc. If the service provider is the same, the authentication terminals 30 may be installed in spatially separated locations.

[0230] In the above embodiment, one service provider ID is assigned to one service provider, but one service provider ID may be assigned to multiple service providers. Multiple service providers may be grouped together and a service provider ID may be issued for each group. For example, when service providers S1 and S2 cooperate with each other to provide the same service, a common service provider ID may be issued to these service providers S1 and S2.

[0231] In the above embodiment, a case has been described in which biometric information related to "feature amounts generated from a facial image" is transmitted from the management server 20 to the authentication server 10. However, biometric information related to a "facial image" may be transmitted from the management server 20 to the authentication server 10. In this case, the authentication server 10 may generate feature amounts from the acquired facial image and execute the authentication process (matching process).

[0232] In the above embodiment, the authentication terminal 30 acquires a face image, and the management server 20 generates features from the face image. However, the authentication terminal 30 may generate features from a face image and transmit the generated features to the management server 20. In other words, the management server 20 does not have to generate features.

[0233] In the above embodiment, a case has been described in which a user inputs a user ID and a password to a service provider when registering personal information in the service registration phase (see FIG. 11). However, instead of the user ID and password, biometric information (face image) of the user may be input to the service provider. In this case, the management server 20 transmits a service registration request including a feature amount generated from a face image and a service provider ID to the authentication server 10. The authentication server 10 executes a matching process using the feature amount included in the request and the feature amount registered in the authentication information database to identify the corresponding user. If the authentication server 10 succeeds in identifying (authenticating) the user, it issues a service user ID. With this kind of response, even if the user has forgotten the user ID or password, the user can easily register for a service. Alternatively, the service provider may obtain the biometric information (face image) of the user in addition to the user ID and password. In this case, the authentication server 10 may issue a service user ID if the user ID, password, and biometric information match (two-factor authentication using biometric information and password may be executed).

[0234] The service provider may cache (temporarily store) information acquired from the authentication server 10 or the authentication terminal 30. For example, the management server 20 caches the biometric information acquired from the authentication terminal 30 and the result of authentication based on the biometric information (service user ID) for a predetermined period of time. When the management server 20 acquires biometric information from the authentication terminal 30, the management server 20 first checks the cached data, and if there is cached data that matches the acquired biometric information, the management server 20 does not transmit an authentication request to the authentication server 10. The management server 20 identifies personal information using the service user ID included in the cached data. Alternatively, the management server 20 may cache a combination of biometric information and personal information. Alternatively, the condition for deleting cached data may be changed depending on the type of service. For example, when a hotel business provides accommodation services, the management server 20 may delete the cached data when the guest's stay period ends.

[0235] Although the format of data transmission between each device (authentication server 10, management server 20, authentication terminal 30) is not particularly limited, data transmitted between these devices may be encrypted. Biometric information is transmitted between these devices, and in order to appropriately protect the biometric information, it is desirable to transmit and receive encrypted data.

[0236] In the above embodiment, the user decides whether or not to provide personal information for each service provider. However, the terminal 50 may have a GUI for inputting whether or not to provide personal information for the entire authentication system.

[0237] In the above embodiment, the decision as to whether or not to provide personal information is made after the service is provided by the service provider. However, the decision as to whether or not to provide personal information may be made before the service is provided. In other words, as long as it is after authentication by the authentication server 10, the decision as to whether or not to provide personal information may be made either before or after the service is provided.

[0238] In the above embodiment, the terminal 50 acquires the permission or refusal to provide personal information. The terminal 50 may be used for a purpose other than the above purpose. For example, the user may use the terminal 50 to update other information registered in the authentication server 10. For example, the user may use the terminal 50 to access the authentication server 10 and select a service provider from which the service is to be provided by biometric authentication. That is, the user may register for a service via the authentication server 10. In this case, if there are many service providers, a service provider that is used less frequently or has not been used recently may be displayed preferentially. Alternatively, the user may use the terminal 50 to apply for withdrawal from the system or the service.

[0239] The management server 20 may acquire information on the value to be given to each piece of personal information provided by the information server 40 in advance, and notify the terminal 50 or the authentication terminal 30 of information on the value to be returned to the user based on the acquired information. For example, the management server 20 may notify the terminal 50 of a list of items of personal information included in the information provision notice and the value to be given when each item is provided. In this case, the terminal 50 may display a GUI as shown in FIG. 30. As shown in FIG. 30, the terminal 50 may clearly indicate that the value (money, virtual currency, points that can be used for online shopping, etc.) obtained varies depending on the type of personal information provided. Also, as shown in FIG. 30, the terminal 50 may display the total value to be obtained by providing the selected personal information to a third party.

[0240] The terminal 50 or the authentication terminal 30 may display a GUI for inputting the provision period of the provided data for each piece of personal information permitted to be provided to a third party (see FIG. 31). For example, the terminal 50 or the authentication terminal 30 may display a GUI for selecting the provision period (for example, one month, one year, ten years, or unlimited) as shown in FIG. 31. Alternatively, the terminal 50 or the authentication terminal 30 may display a GUI for inputting the start and end of the provision period (the user may input the provision period in a format such as 20XX / YY / ZZ to 20ZZ / YY / XX). The terminal 50 or the authentication terminal 30 notifies the management server 20 of the provision period together with the personal information permitted to be provided. The management server 20 transmits behavioral information including these pieces of information to the information server 40. The information server 40 determines the compensation according to the type of personal information provided and the length of the data provision period for each type of personal information provided. The information server 40 discards the stored personal information when the specified provision period has passed.

[0241] In the above embodiment, one information center is exemplified as a destination of personal information. However, personal information may be provided to multiple information centers (information banks). In this case, the user may select an information center to which the user is permitted to provide personal information from among the multiple information centers. Specifically, when sending a status provision inquiry, the management server 20 also transmits information on the affiliated information center (information server 40) to the terminal 50, etc. For example, the management server 20 transmits the name of the information center to the terminal 50, etc. The terminal 50 or the authentication terminal 30 may display a GUI as shown in FIG. 32 using the acquired information and acquire whether or not to provide personal information for each information center individually. That is, the terminal 50 or the authentication terminal 30 may generate a GUI for inputting whether or not to permit the provision of personal information for each of the multiple information centers.

[0242] Furthermore, the terminal 50 and the authentication terminal 30 may display a GUI (such as the GUIs shown in Figs. 8, 9, 30, and 31) for selecting personal information to be provided to each information center permitted to provide information. The terminal 50 and the authentication terminal 30 may also display the compensation to be obtained from each information center (the compensation to be obtained may differ depending on the destination of the personal information).

[0243] In the GUIs of FIG. 8, FIG. 9, etc., the terminal 50 and the authentication terminal 30 may directly display the personal information of the user (successfully authenticated person) instead of displaying the type of personal information (see FIG. 33).

[0244] Although the above embodiment does not refer to the identification of the user, the user may be identified in one of the authentication systems. For example, the authentication server 10 may identify the user when registering the user. In this case, the user registration unit 202 of the authentication server 10 may obtain the user's identification document (e.g., a passport, etc.) from the terminal 50 and perform one-to-one matching using the face image of the user and the face image written on the identification document. The authentication server 10 may register the user for the user who has been successfully matched. Alternatively, a similar identity confirmation may be performed when registering for a service. By performing the identity confirmation of the user in one of the authentication systems, the reliability of the personal information provided to the information center is guaranteed.

[0245] In the above embodiment, the management server 20 notifies the user that biometric authentication has been performed by sending an information provision inquiry to the terminal 50. However, the authentication server 10 may notify the terminal 50 of the fact. In this case, the terminal 50 may display a GUI or the like regarding whether or not to provide information in response to the notification from the authentication server 10.

[0246] In the flow charts (flow charts, sequence diagrams) used in the above description, multiple steps (processes) are described in order, but the order of execution of the steps executed in the embodiments is not limited to the order described. In the embodiments, the order of the steps shown in the figures can be changed to a degree that does not interfere with the content, such as executing each process in parallel.

[0247] The above-mentioned embodiments have been described in detail to facilitate understanding of the present disclosure, and it is not intended that all of the configurations described above are necessary. In addition, when a plurality of embodiments are described, each embodiment may be used alone or in combination. For example, it is possible to replace a part of the configuration of an embodiment with the configuration of another embodiment, or to add the configuration of another embodiment to the configuration of an embodiment. Furthermore, it is possible to add, delete, or replace a part of the configuration of an embodiment with another configuration.

[0248] From the above explanation, it is clear that the present invention has industrial applicability, and the present invention can be suitably applied to authentication systems for authenticating customers of retail stores, hotels, and the like.

[0249] A part or all of the above-described embodiments can be described as, but is not limited to, the following supplementary notes. [Appendix 1] An information server; an authentication server that stores biometric information of each of a plurality of users and performs biometric authentication using the stored biometric information; a management server that stores personal information for providing services to the person who was successfully authenticated by biometric authentication, and transmits to the information server behavioral information including personal information of the person who was successfully authenticated to whom the service was provided that the person permitted to be provided to a third party; An authentication system, including: [Appendix 2] The authentication method further includes a terminal carried by the successful authentication person, When the provision of the service to the successfully authenticated person is completed, the management server transmits to the terminal an inquiry regarding whether or not personal information can be provided, the inquiry including a list of personal information stored in the terminal; The authentication system of claim 1, wherein the terminal uses the list of personal information to generate a GUI for inputting the type of personal information that the successful authentication person is permitted to provide to the third party. [Appendix 3] The authentication system described in Appendix 2, wherein when the management server receives a positive response from the terminal to an inquiry regarding whether or not the personal information can be provided, the management server transmits the behavioral information to the information server. [Appendix 4] The authentication system according to any one of claims 1 to 3, wherein the management server transmits to the information server the behavioral information including personal information that the successful authentication person has permitted to be provided to a third party and summary information regarding an overview of services provided to the successful authentication person. [Appendix 5] 5. The authentication system according to claim 1, wherein the information server determines a compensation to be paid to the successful authenticated person depending on the type of personal information provided by the successful authenticated person. [Appendix 6] The management server stores payment receipt information for receiving the payment, The information server notifies the management server of the compensation to be paid to the successful authentication person; An authentication system as described in Appendix 5, wherein the management server pays the notified fee based on the fee receipt information of the successfully authenticated person. [Appendix 7] 4. The authentication system according to claim 2, wherein the terminal generates a GUI displaying a reward that can be obtained by providing personal information to the third party. [Appendix 8] The authentication system according to any one of appendixes 2, 3, or 7, wherein the terminal generates a GUI for inputting a period for providing data for each type of personal information permitted to be provided to the third party. [Appendix 9] The authentication system described in Appendix 5, wherein the information server determines a compensation to be paid to the successful authentication person depending on the type of personal information provided and the length of time for which data for each type of personal information provided is provided. [Appendix 10] The authentication system according to any one of appendices 2, 3, 7, and 8, wherein the terminal generates a GUI for inputting whether or not to permit the provision of personal information for each of the third parties. [Appendix 11] and an authentication terminal connected to the management server, acquiring biometric information of the person to be authenticated, and providing services to the person who has been successfully authenticated. The authentication system described in Appendix 1, wherein, when the authentication terminal has finished providing the service to the successfully authenticated person, it generates a GUI for inputting the type of personal information that the successfully authenticated person is permitted to provide to the third party. [Appendix 12] 12. The authentication system according to claim 1, wherein the biometric information is a face image or a feature generated from the face image. [Appendix 13] The system is connected to a management server that stores personal information for providing services to those who have been successfully authenticated by biometric authentication. a terminal that generates a GUI for inputting personal information of the successfully authenticated person to whom the service is provided that the successfully authenticated person allows to be provided to a third party; [Appendix 14] An information server; an authentication server that stores biometric information of each of a plurality of users and performs biometric authentication using the stored biometric information; A management server that stores personal information for providing services to individuals who have been successfully authenticated through biometric authentication, and transmits behavioral information to the information server, including personal information of the individuals to whom the service has been provided that the individuals have permitted to be provided to third parties. [Appendix 15] An information server; an authentication server that stores biometric information of each of a plurality of users and performs biometric authentication using the stored biometric information; and a management server connected to the authentication server, storing personal information for providing services to the person who has been successfully authenticated by the biometric authentication; A personal information providing method, comprising transmitting to the information server behavioral information including personal information of the successfully authenticated person to whom the service has been provided that the successfully authenticated person has permitted to be provided to a third party. [Appendix 16] An information server; An authentication server stores biometric information of each of a plurality of users and performs biometric authentication using the stored biometric information. A computer is installed in a management server connected to the authentication server. A process of storing personal information for providing services to a person who has been successfully authenticated by the biometric authentication; a process of transmitting to the information server behavioral information including personal information of the successfully authenticated person to whom the service has been provided that the successfully authenticated person has permitted to be provided to a third party; A computer-readable storage medium that stores a program for executing the above.

[0250] The disclosures of the above cited prior art documents are incorporated herein by reference. Although the embodiments of the present invention have been described above, the present invention is not limited to these embodiments. It will be understood by those skilled in the art that these embodiments are merely illustrative and that various modifications are possible without departing from the scope and spirit of the present invention. In other words, the present invention naturally includes various modifications and amendments that a person skilled in the art can make in accordance with the entire disclosure, including the scope of the claims, and the technical ideas. [Explanation of symbols]

[0251] 10, 102 Authentication Server 20, 20-1, 20-2, 103 Management Server 30, 30-1, 30-2, 31-1, 31-2 Authentication terminal 40, 101 Information Server 50 terminals 201, 301, 401, 501, 601 Communication control unit 202 User Registration Department 203, 304 Database (DB) Management Department 204 Service Registration Department 205 Authentication Department 206, 307, 405, 503, 603 Storage section 302 Personal Information Acquisition Department 303 Service Registration Request Section 305 Authentication Request Section 306 Behavior Information Provision Department 311 Processor 312 Memory 313 Input / Output Interface 314 Communication Interface 402 Biometric information acquisition unit 403 Service Provision Department 404 Message output section 406, 602 Personal Information Control Section 502 Behavioral Information Processing Unit

Claims

1. An information server; an authentication server that stores biometric information of each of a plurality of users and performs biometric authentication using the stored biometric information; a management server that stores personal information for providing services to the person who was successfully authenticated by biometric authentication, and transmits to the information server behavioral information including personal information of the person who was successfully authenticated to whom the service was provided that the person permitted to be provided to a third party; Including, When the provision of the personal information is refused, the management server transmits, to the information server, as the behavioral information, summary information which is information on the service provided by the biometric authentication and does not include information that can identify the individual. Authentication system.

2. The authentication method further includes a terminal carried by the successful authentication person, When the provision of the service to the successfully authenticated person is completed, the management server transmits to the terminal an inquiry regarding whether or not personal information can be provided, the inquiry including a list of personal information stored in the terminal; 2. The authentication system according to claim 1, wherein the terminal uses the list of personal information to generate a GUI (Graphical User Interface) for inputting the type of personal information that the successful authentication person is permitted to provide to the third party.

3. 3. The authentication system according to claim 2, wherein the management server transmits the behavioral information to the information server when the management server receives an affirmative response to an inquiry about whether the personal information can be provided from the terminal.

4. An authentication system as described in any one of claims 1 to 3, wherein the management server transmits the behavioral information to the information server, the behavioral information including personal information that the successful authentication person has permitted to be provided to a third party and summary information regarding an outline of services provided to the successful authentication person.

5. 5. The authentication system according to claim 1, wherein the information server determines a compensation to be paid to the successfully authenticated person depending on a type of personal information provided by the successfully authenticated person.

6. The management server stores payment receipt information for receiving the payment, The information server notifies the management server of the compensation to be paid to the successful authentication person; 6. The authentication system according to claim 5, wherein the management server pays the notified fee based on the fee receipt information of the successfully authenticated person.

7. An information server; an authentication server that stores biometric information of each of a plurality of users and performs biometric authentication using the stored biometric information; storing personal information for providing a service to the person who was successfully authenticated by the biometric authentication, and transmitting behavioral information including personal information that the person who was successfully authenticated has permitted to be provided to a third party among the personal information of the person who was successfully authenticated by the biometric authentication to the information server; If the provision of the personal information is refused, summary information, which is information on the service provided by the biometric authentication and does not include information that can identify the individual, is transmitted to the information server as the behavioral information. Management server.

8. An information server; an authentication server that stores biometric information of each of a plurality of users and performs biometric authentication using the stored biometric information; and a management server connected to the authentication server; storing personal information for providing services to the person who has been successfully authenticated by the biometric authentication; transmitting behavioral information including personal information of the successfully authenticated person to whom the service was provided that the successfully authenticated person has permitted to be provided to a third party to the information server; If the provision of the personal information is refused, summary information, which is information on the service provided by the biometric authentication and does not include information that can identify the individual, is transmitted to the information server as the behavioral information. How to provide personal information.

9. An information server; An authentication server stores biometric information of each of a plurality of users and performs biometric authentication using the stored biometric information. A computer is installed in a management server connected to the authentication server. A process of storing personal information for providing services to a person who has been successfully authenticated by the biometric authentication; a process of transmitting to the information server behavioral information including personal information of the successfully authenticated person to whom the service has been provided that the successfully authenticated person has permitted to be provided to a third party; a process of transmitting, when the provision of the personal information is refused, summary information which is information on the service provided by the biometric authentication and does not include information which can identify the individual, as the behavioral information to the information server; A program for executing the above.

Images