Information collection system, data generation system, information collection method, data generation method, terminal device, and program

Abstract

To provide a terminal device etc. capable of collecting identity verification information and executing authentication processing for verifying the identity in accordance with the needs of each network service provider by using a single customizable application. [Solution] The terminal device 20 is configured to execute an information collection process consisting of one or more steps and to collect identity verification information when a user's identity verification process for a given network service is executed, and is configured to acquire instruction information of at least one of the identification information and setting information of the specific provider when a request to execute an authentication process for identity verification for a network service provided by the specific provider is issued by the user, and to generate application data based on customized data and base data stored in a memory unit 270 in correspondence with the acquired instruction information.

Description

[Technical field]

[0001] The present invention relates to an information collection system, a data generation system, an information collection method, a data generation method, a terminal device, a program, and the like. [Background technology]

[0002] 2. Description of the Related Art Conventionally, network services such as Internet banking or mail order sites have been provided to provide services to customers via a communication network.

[0003] Recently, portable mobile information terminal devices such as smartphones are often used not only for using such network services but also for initial registration, including identity verification, and in such cases, it is becoming common to have users use applications designed for such mobile information terminal devices.

[0004] For example, a system including such an information terminal device or identity verification using the same is known that acquires personal information and facial image data from an IC card and performs authentication processing for identity verification based on the acquired information (e.g., Patent Document 1). [Prior art documents] [Patent documents]

[0005] [Patent Document 1] JP 2019-050014 A Summary of the Invention [Problem to be solved by the invention]

[0006] However, with the system and terminal device described in Patent Document 1, it is not possible to customize the steps for performing authentication processing such as identity verification and the design thereof to suit the wishes of each service provider, such as whether or not to obtain facial image data of the user wishing to register, the method for obtaining identity verification information, or image data (e.g., web design) used to obtain identity verification information.

[0007] The present invention has been made to solve the above-mentioned problems, and its object is to provide a terminal device or the like that is capable of collecting identity verification information and performing authentication processing for verifying identity in accordance with the needs of each network service provider by using a single customizable application, thereby reducing the burden on the provider and eliminating complexity for the user, and preventing memory shortages or CPU malfunctions that may occur due to the coexistence of many applications. [Means for solving the problem]

[0008] (1) In order to solve the above problems, the present invention provides An information collection system for collecting information for identity verification as identity verification information when an authentication process for verifying the identity of a user for a given network service is executed, the information collection process being composed of one or more steps, comprising: a management means for managing base data, which is stored in a storage means and defines the contents of each process, and customization data, which is stored in the storage means for each provider of the network service in association with identification information of each provider or setting information defining the contents of the process, and customizes the base data; Application data is generated based on the base data and the customization data. A generating means for executing a generating process; an application execution processing means for executing the information collection process based on the generated application data; a presentation means for presenting the identity verification information to be input by the user during execution of the information collection process; a reception processing means for executing a reception process for receiving an operation of the user for inputting the presented personal identification information; an output control means for outputting the input information as identity verification information to an authentication server system that executes the authentication process based on the user's operation; Equipped with The generating means, as the generating process, When a request for execution of authentication processing for identity verification for a network service provided by a specific provider is instructed by the user, instruction information of at least one of identification information of the specific provider and the setting information is acquired; The application data is generated based on the customized data, which is associated with the acquired instruction information and stored in the storage means, and the base data.

[0009] With this configuration, the present invention eliminates the need to prepare authentication processing for identity verification for each network service provider and to set up the application individually on terminal devices, and can collect identity verification information and perform authentication processing for identity verification in accordance with the needs of each provider using a single application data.

[0010] Therefore, the present invention can save the provider time and effort, and also eliminate the hassle for the user of individually downloading and installing those programs on the terminal device.

[0011] Furthermore, the present invention provides authentication processing for verifying identity, which is an important process in processing network services but is used relatively infrequently, using a single application, thereby reducing the number of applications, thereby preventing memory shortages or CPU malfunctions in the terminal device that can occur when many applications are mixed together.

[0012] The "given network service" refers to a service that uses a network, such as a network banking service, a product sales service, or a membership service.

[0013] An "authentication server system" refers to a server system that can not only authenticate a person using an ID and password, but also electronically verify the person's identity using identification documents such as a driver's license, passport, or My Number card.

[0014] In addition, "authentication processing for identity verification" refers to authentication processing (hereinafter also referred to as "identity verification processing") for determining whether or not the user wishing to verify his / her identity is a legitimate user (a legitimate user who has already been registered in the identity verification service) (whether or not he / she is the actual user).

[0015] In particular, "authentication processing for identity verification" includes, for example, (A1) The entered key information (key code), such as a PIN code, matches the pre-stored key information. (A2) The biometric information or identity verification information obtained from a facial image or other image taken or from an ID such as a My Number card is the same as or is deemed to be the same as the stored biometric information or identity verification information used for identity verification; and (A3) The entered identity verification information, such as address or phone number, and the already stored user The information is identical to related information (information stored in another device such as a server device). etc.

[0016] Furthermore, the "one or more steps" include an explanation of the authentication process for identity verification, viewing of terms of use, taking a facial image, instructions on how to obtain identity verification information from a storage medium on which the identity verification information is stored such as an IC card, inputting key information (key code) such as a PIN, confirmation of the identity verification information to be input, and presentation of the results of the identity authentication process.

[0017] "Application data" refers to data for guiding the user to input personal identification information, and defines each step of the information collection process.

[0018] For example, application data includes data for presenting content to a user, such as data for displaying images, including text, or data for outputting sounds, including background music and voice, and data for having a user input personal identification information.

[0019] In addition to the above, "instruction information" refers to information input, for example, by a user's operation, and is defined by reading a two-dimensional barcode such as a QR code (registered trademark) or by inputting specific information such as a URL (Uniform Resource Locator).

[0020] In particular, the "identification information" is identification information given to each provider that provides a network service, and the "setting information" is information for specifying the content of customization of each process.

[0021] Moreover, "presenting to the user" refers to allowing the user to view or be notified of content such as image display and sound output.

[0022] (2) The present invention also provides the customization data is data that specifies whether each of a plurality of steps included in the information collection process can be executed, The generating means, The application data, in which whether each process is executable or not is specified, is generated based on the customized data stored in association with the instruction information and the base data.

[0023] With this configuration, the present invention can execute authentication processing for identity verification for each provider, including whether or not each step can be executed, thereby eliminating the burden on the provider of generating and preparing applications, and eliminating the hassle for the user of having to download them individually and install them on the terminal device.

[0024] (3) The present invention also provides the customization data is data defining content to be incorporated into the base data; The generating means, The application data is generated by incorporating the customization data, which is stored in association with the instruction information, into the base data.

[0025] With this configuration, the present invention can provide the user with a user-visible design for each provider. Since it is possible to set the identity verification information to be guided or collected, it is possible to realize authentication processing for identity verification according to the desires of each provider while realizing the process using a single application data.

[0026] (4) The present invention also provides The customized data specifies an information management server system to be linked when performing the authentication process for the identity verification from among a plurality of information management server systems that perform the authentication process using the legitimate identity verification information, The generating means, The application data is generated based on the customized data stored in correspondence with the instruction information and the base data, and includes data communication with an information management server system that is linked when performing authentication processing for identity verification.

[0027] With this configuration, the present invention allows each provider to use the information management server system of their choice from among multiple information management server systems that perform authentication processing using legitimate personal identification information, thereby enabling authentication processing for personal identification in line with the wishes of each provider while being realized by a single application.

[0028] In particular, the present invention allows a provider to select an information management server system according to their wishes that manages (information management) identity verification information for identity verification, including each user's unique identification information such as a personal management number (e.g., My Number), in accordance with legal requirements.

[0029] It should be noted that an "information management server system" is a server system that manages (information management) personal identification information for identity verification in accordance with legal requirements, and is a server system that works in conjunction with a public authentication management server system, which is necessary to inquire about personal identification information when performing authentication processing for identity verification.

[0030] (5) The present invention also provides The imaging device further includes an imaging control unit for controlling the imaging unit. The customization data specifies whether or not a step of using image information captured by the imaging means is to be executed, The generating means, The application data, which specifies whether or not to use the image information generated by the imaging means, is generated based on the customized data stored in correspondence with the instruction information and the base data.

[0031] With this configuration, the present invention makes it possible to set the identity verification information to be collected for each provider, thereby enabling authentication processing for identity verification according to the desires of each provider while being realized using a single application data.

[0032] It should be noted that "image information" includes, for example, information on the face image of a user, as well as information on the image of the face of a storage medium such as an IC card on which a personal number is stored.

[0033] (6) In order to solve the above problems, the present invention provides A program for executing an information collection process for collecting information for identity verification as identity verification information when an authentication process for verifying the identity of a user for a given network service is executed, the information collection process being composed of one or more steps, The data stored in the storage means includes base data defining the contents of each process, and for each provider of the network service, identification information of each provider or the contents of the process. a management unit for managing customization data, which is data stored in the storage unit in association with setting information defining the base data, and which customizes the base data; a generation means for executing a generation process for generating application data based on the base data and the customized data; an application execution processing means for executing the information collection process based on the generated application data; a presentation means for presenting the identity verification information to be input by the user during execution of the information collection process; a reception processing means for executing a reception process for receiving an operation of the user for inputting the presented personal identification information; and an output control means for outputting the input information, based on the user's operation, as identity verification information to an authentication server system that executes the authentication process; The computer functions as The generating means, as the generating process, When a request for execution of authentication processing for identity verification for a network service provided by a specific provider is instructed by the user, instruction information of at least one of identification information of the specific provider and the setting information is acquired; The application data is generated based on the customized data, which is associated with the acquired instruction information and stored in the storage means, and the base data.

[0034] With this configuration, the present invention eliminates the need to prepare authentication processing for identity verification for each network service provider and to set up the application individually on terminal devices, and can collect identity verification information and perform authentication processing for identity verification in accordance with the needs of each provider using a single application data.

[0035] Therefore, the present invention can save the provider time and effort, and also eliminate the hassle for the user of individually downloading and installing those programs on the terminal device.

[0036] Furthermore, the present invention provides authentication processing for verifying identity, which is an important process in processing network services but is used relatively infrequently, using a single application, thereby reducing the number of applications, thereby preventing memory shortages or CPU malfunctions in the terminal device that can occur when many applications are mixed together.

[0037] (7) In order to solve the above problems, the present invention provides 1. An information collection method for collecting information for identity verification as identity verification information when an authentication process for verifying the identity of a user for a given network service is executed, the information collection process being composed of one or more steps, and being executed by a computer, comprising: managing base data, which is stored in a storage means and defines the contents of each process, and customization data, which is stored in the storage means for each provider of the network service in association with identification information of each provider or setting information defining the contents of the process, and which customizes the base data; A generation process is executed to generate application data based on the base data and the customization data; Executing the information collection process based on the generated application data; presenting the user with the identity verification information to be input during the information collection process; execute a reception process for receiving an operation of the user for inputting the presented personal identification information; outputting the input information as identity verification information to an authentication server system that executes the authentication process based on the user's operation; Including, As the generation process, When a request for execution of authentication processing for identity verification for a network service provided by a specific provider is instructed by the user, instruction information of at least one of identification information of the specific provider and the setting information is acquired; The application data is generated based on the customized data, which is associated with the acquired instruction information and stored in the storage means, and the base data.

[0038] With this configuration, the present invention eliminates the need to prepare authentication processing for identity verification for each network service provider and to set up the application individually on terminal devices, and can collect identity verification information and perform authentication processing for identity verification in accordance with the needs of each provider using a single application data.

[0039] Therefore, the present invention can save the provider time and effort, and also eliminate the hassle for the user of individually downloading and installing those programs on the terminal device.

[0040] Furthermore, the present invention provides authentication processing for verifying identity, which is an important process in processing network services but is used relatively infrequently, using a single application, thereby reducing the number of applications, thereby preventing memory shortages or CPU malfunctions in the terminal device that can occur when many applications are mixed together.

[0041] (8) In order to solve the above problems, the present invention provides A terminal device that executes an information collection process for collecting information for identity verification as identity verification information when an authentication process for verifying the identity of a user for a given network service is executed, the information collection process being composed of one or more steps, comprising: an acquisition means for executing an acquisition process for acquiring the generated application data based on base data, which is stored in a storage means and defines the contents of each process, and customization data, which is stored in the storage means for each provider of the network service in association with identification information of each provider or setting information defining the contents of the process, and customizes the base data; an application execution processing means for executing the information collection process based on the acquired application data; a presentation means for presenting the identity verification information to be input by the user during execution of the information collection process; a reception processing means for executing a reception process for receiving an operation of the user for inputting the presented personal identification information; an output control means for outputting the input information as identity verification information to an authentication server system that executes the authentication process based on the user's operation; Equipped with The application data comprises: The information is acquired when the user issues a request to execute an authentication process for identity verification for a network service provided by a specific provider, and is generated based on instruction information of at least one of the identification information of the specific provider and the setting information.

[0042] With this configuration, the present invention provides a network service provider that performs authentication processing for identity verification. There is no need to prepare for each provider and to set the application in each terminal device, and personal identification information can be collected according to the needs of each provider.

[0043] Therefore, the present invention can save the provider time and effort, and also eliminate the hassle for the user of individually downloading and installing those programs on the terminal device.

[0044] Furthermore, the present invention provides authentication processing for verifying identity, which is an important process in processing network services but is used relatively infrequently, using a single application, thereby reducing the number of applications, thereby preventing memory shortages or CPU malfunctions in the terminal device that can occur when many applications are mixed together.

[0045] (9) In order to solve the above problems, the present invention provides A program for executing an information collection process for collecting information for identity verification as identity verification information when an authentication process for verifying the identity of a user for a given network service is executed, the information collection process being composed of one or more steps, an acquisition means for executing an acquisition process for acquiring the generated application data based on base data, which is stored in a storage means and defines the contents of each step, and customization data, which is stored in the storage means for each provider of the network service in association with identification information of each provider or setting information defining the contents of the step, and customizes the base data; an application execution processing means for executing the information collection process based on the acquired application data; a presentation means for presenting the identity verification information to be input by the user during execution of the information collection process; a reception processing means for executing a reception process for receiving an operation of the user for inputting the presented personal identification information; and an output control means for outputting the input information, based on the user's operation, as identity verification information to an authentication server system that executes the authentication process; The computer functions as The application data comprises: The information is acquired when the user issues a request to execute an authentication process for identity verification for a network service provided by a specific provider, and is generated based on instruction information of at least one of the identification information of the specific provider and the setting information.

[0046] With this configuration, the present invention eliminates the need to prepare authentication processing for identity verification for each network service provider and to set up the application on each terminal device individually, and can collect identity verification information in accordance with the needs of each provider.

[0047] Therefore, the present invention can save the provider time and effort, and also eliminate the hassle for the user of individually downloading and installing those programs on the terminal device.

[0048] Furthermore, the present invention provides authentication processing for verifying identity, which is an important process in processing network services but is used relatively infrequently, using a single application, thereby reducing the number of applications, thereby preventing memory shortages or CPU malfunctions in the terminal device that can occur when many applications are mixed together.

[0049] (10) In order to solve the above problems, the present invention provides 1. An information collection method for collecting information for identity verification as identity verification information when an authentication process for verifying the identity of a user for a given network service is executed, the information collection process being composed of one or more steps, and being executed by a computer, comprising: execute an acquisition process for acquiring the generated application data based on base data, which is stored in a storage means and defines the contents of each step, and customization data, which is stored in the storage means for each provider of the network service in association with identification information of each provider or setting information defining the contents of the step, and customizes the base data; Executing the information collection process based on the acquired application data; presenting the user with the identity verification information to be input during the information collection process; execute a reception process for receiving an operation of the user for inputting the presented personal identification information; outputting the input information as identity verification information to an authentication server system that executes the authentication process based on the user's operation; Including, The application data comprises: The information is acquired when the user issues a request to execute an authentication process for identity verification for a network service provided by a specific provider, and is generated based on instruction information of at least one of the identification information of the specific provider and the setting information.

[0050] With this configuration, the present invention eliminates the need to prepare authentication processing for identity verification for each network service provider and to set up the application on each terminal device individually, and can collect identity verification information in accordance with the needs of each provider.

[0051] Therefore, the present invention can save the provider time and effort, and also eliminate the hassle for the user of individually downloading and installing those programs on the terminal device.

[0052] Furthermore, the present invention provides authentication processing for verifying identity, which is an important process in processing network services but is used relatively infrequently, using a single application, thereby reducing the number of applications, thereby preventing memory shortages or CPU malfunctions in the terminal device that can occur when many applications are mixed together.

[0053] (11) In order to solve the above problems, the present invention provides A data generation system for generating application data for executing an information collection process for collecting information for identity verification as identity verification information when an authentication process for verifying the identity of a user for a given network service is executed, the information collection process being composed of one or more steps, comprising: a management means for managing base data, which is stored in a storage means and defines the contents of each process, and customization data, which is stored in the storage means for each provider of the network service in association with identification information of each provider or setting information defining the contents of the process, and customizes the base data; a generation unit that executes a generation process for generating application data based on the base data and the customized data; providing means for providing the generated application data to a terminal device; an acquisition means for acquiring information inputted based on the user's operation as personal identification information based on the application data; Equipped with The generating means, as the generating process, When a request for execution of authentication processing for identity verification for a network service provided by a specific provider is instructed by the user, instruction information of at least one of identification information of the specific provider and the setting information is acquired; The application data is generated based on the customized data, which is associated with the acquired instruction information and stored in the storage means, and the base data.

[0054] With this configuration, the present invention eliminates the need to prepare authentication processing for identity verification for each network service provider and to set up the application individually on terminal devices, and can collect identity verification information and perform authentication processing for identity verification in accordance with the needs of each provider using a single application data.

[0055] Therefore, the present invention can save the provider time and effort, and also eliminate the hassle for the user of individually downloading and installing those programs on the terminal device.

[0056] Furthermore, the present invention provides authentication processing for verifying identity, which is an important process in processing network services but is used relatively infrequently, using a single application, thereby reducing the number of applications, thereby preventing memory shortages or CPU malfunctions in the terminal device that can occur when many applications are mixed together.

[0057] (12) In order to solve the above problems, the present invention provides A program for generating application data for executing an information collection process for collecting information for identity verification as identity verification information when an authentication process for verifying the identity of a user for a given network service is executed, the information collection process being composed of one or more steps, a management means for managing base data, which is stored in a storage means and defines the contents of each process, and customization data, which is stored in the storage means for each provider of the network service in association with identification information of each provider or setting information defining the contents of the process, and customizes the base data; a generation means for executing a generation process for generating application data based on the base data and the customized data; providing means for providing the generated application data to a terminal device; and an acquisition means for acquiring information input based on the user's operation as personal identification information based on the application data; The computer functions as The generating means, as the generating process, When a request for execution of authentication processing for identity verification for a network service provided by a specific provider is instructed by the user, instruction information of at least one of identification information of the specific provider and the setting information is acquired; The application data is generated based on the customized data, which is associated with the acquired instruction information and stored in the storage means, and the base data.

[0058] With this configuration, the present invention eliminates the need to prepare authentication processing for identity verification for each network service provider and to set up the application individually on terminal devices, and can collect identity verification information and perform authentication processing for identity verification in accordance with the needs of each provider using a single application data.

[0059] Therefore, the present invention can save the provider time and effort, and also eliminate the hassle for the user of individually downloading and installing those programs on the terminal device.

[0060] Furthermore, the present invention provides authentication processing for verifying identity, which is an important process in processing network services but is used relatively infrequently, using a single application, thereby reducing the number of applications, thereby preventing memory shortages or CPU malfunctions in the terminal device that can occur when many applications are mixed together.

[0061] (13) In order to solve the above problems, the present invention provides A data generation method for generating application data for executing an information collection process for collecting information for identity verification as identity verification information when an authentication process for verifying the identity of a user for a given network service is executed, the information collection process being composed of one or more steps, comprising: managing base data, which is stored in a storage means and defines the contents of each process, and customization data, which is stored in the storage means for each provider of the network service in association with identification information of each provider or setting information defining the contents of the process, and which customizes the base data; A generation process is executed to generate application data based on the base data and the customization data; providing the generated application data to a terminal device; acquiring information input based on the user's operation as personal identification information based on the application data; Including, As the generation process, When a request for execution of authentication processing for identity verification for a network service provided by a specific provider is instructed by the user, instruction information of at least one of identification information of the specific provider and the setting information is acquired; The application data is generated based on the customized data, which is associated with the acquired instruction information and stored in the storage means, and the base data.

[0062] With this configuration, the present invention eliminates the need to prepare authentication processing for identity verification for each network service provider and to set up the application individually on terminal devices, and can collect identity verification information and perform authentication processing for identity verification in accordance with the needs of each provider using a single application data.

[0063] Therefore, the present invention can save the provider time and effort, and also eliminate the hassle for the user of individually downloading and installing those programs on the terminal device.

[0064] Furthermore, the present invention provides authentication processing for verifying identity, which is an important process in processing network services but is used relatively infrequently, using a single application, thereby reducing the number of applications, thereby preventing memory shortages or CPU malfunctions in the terminal device that can occur when many applications are mixed together. [Brief description of the drawings]

[0065] [Figure 1] 1 is a system configuration diagram showing a configuration of an authentication management communication system according to an embodiment. [Diagram 2] FIG. 2 is a functional block diagram illustrating a configuration of an authentication server device according to an embodiment. [Diagram 3] FIG. 2 is a functional block diagram illustrating an example of a configuration of a terminal device according to one embodiment. [Figure 4] 11 is a diagram for explaining a process of collecting personal identification information including an application data generation process in a terminal device according to an embodiment; FIG. [Diagram 5] FIG. 2 is a diagram showing an example of personal identification information stored in an IC card according to one embodiment. [Figure 6] FIG. 2 is a diagram illustrating an example of base data and customized data according to an embodiment. [Figure 7] FIG. 4 is a diagram illustrating an example of application data according to one embodiment. [Figure 8] FIG. 2 is a diagram for explaining an information collection process executed by a terminal device according to one embodiment. [Figure 9] FIG. 2 is a diagram for explaining an information collection process executed by a terminal device according to one embodiment. [Figure 10] 11 is a flowchart showing operations of a process for collecting personal identification information including an application data generation process executed in one terminal device and a personal identification process based on the information. [Figure 11] 11 is a flowchart showing operations of a process for collecting personal identification information including an application data generation process executed in one terminal device and a personal identification process based on the information. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0066] Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

[0067] The embodiment described below is an embodiment in which the information collection system, data generation system, and terminal device of the present application are applied to an authentication management communication system that uses a storage medium having a terminal device used by a user, an authentication server device that controls various authentication processes, a network service server device that provides network services, an information management server device that manages authentication processes related to personal identification, and a public authentication management server device that manages personal identification information.

[0068] In addition, in this embodiment, an IC card is used as the storage medium. However, the storage medium may be, in addition to the IC card, a storage medium such as an IC tag in which given information is stored in an IC chip, or a physical storage medium in which information is stored optically or magnetically. The storage medium may be stored in a portable information terminal device such as a smartphone.

[0069] Furthermore, in this embodiment, a user with the right to use refers to a user who has the right to use the storage medium, including not only a user who owns a storage medium such as an IC card, but also a user who is permitted to use the storage medium (i.e., a user who has been loaned the storage medium), and refers to a user who has the right to use the storage medium.

[0070] [1] Authentication management and communication system First, an overview of an authentication management communication system 1 according to the present embodiment will be described with reference to FIG.

[0071] FIG. 1 is a system configuration diagram showing the configuration of an authentication management communication system 1 in this embodiment.

[0072] In addition, to prevent the diagram from becoming too complicated, FIG. 1 only shows IC cards 60 and terminal devices 20 used by some users, as well as some network service server devices (hereinafter also referred to as "service server devices") 30.

[0073] That is, in the actual authentication management communication system 1, a larger number of An IC card 60, a terminal device 20, and a service server device 30 are present.

[0074] The authentication management communication system 1 of this embodiment is a system that executes authentication processing for a pre-registered user, and if the user authentication is successful, provides various network services to the authenticated user via a network.

[0075] In particular, the authentication management communication system 1 of this embodiment is configured with a mechanism that ensures that identity verification using an IC card 60 is performed by a user who has the authority to use the IC card 60 when performing electronic authentication processing related to identity verification, including authentication processing for identity verification using an IC card 60, which is a storage medium (hereinafter referred to as "identity verification processing").

[0076] That is, the authentication management communication system 1 of this embodiment has a configuration for executing processing to determine whether a user who wishes to be identified using an IC card 60 (i.e., a user who wishes to use a network service and register with the service, hereinafter referred to as a "user wishing to register") is already a legitimate user whose identity can be identified (for example, a user who has already been registered with an identity identification service) (whether the user is the actual user).

[0077] Specifically, the authentication management communication system 1 of this embodiment, as shown in FIG. 1, includes an authentication server device 10 that manages authentication processing related to identity verification or various authentication processing such as logging in to network services, and a terminal device 20 (e.g., terminal devices 20A, 20B, 20C) that is connected to the authentication server device 10 via a network such as the Internet and performs authentication processing including identity verification processing in conjunction with the authentication server device 10.

[0078] As shown in FIG. 1, the authentication management communication system 1 of this embodiment includes a service server device 30 that provides a predetermined network service on the premise that user registration in an identity verification service (a network service different from the network service in which the user wishes to register) has been performed in advance, an information management server device 40 that provides and manages identity verification services by managing (information management) identity verification information for identity verification including each user's unique identification information such as a personal management number (e.g., My Number) in accordance with legal requirements, and a public authentication management server device 50 that manages identity verification information including the personal management number used when performing identity verification.

[0079] The authentication server device 10 is an information processing device that uses, for example, an API (Application Programming Interface) or a predetermined platform, and executes various processes related to identity verification at the time of registration to a network service and authentication processing after the registration.

[0080] In particular, the authentication server device 10 is a server system that can not only perform identity authentication such as logging in using an ID and password, but also perform identity verification electronically as an identity verification process using identity documents such as a driver's license, passport, or My Number card.

[0081] Furthermore, the authentication server device 10 may be configured as one (device, processor), or may be configured as multiple (devices, processors).

[0082] The authentication server device 10 has various databases (broadly speaking, storage devices, memories) in which various information used for identity verification processing or authentication processing is stored. However, the authentication server device 10 of this embodiment is not connected to a network (intranet or internet). The device may access a database (broadly speaking, a storage device or memory) connected via the device.

[0083] Furthermore, the authentication server device 10 is configured to work in conjunction with each terminal device 20 and to manage the identity verification process of the user who owns each terminal device 20 and to execute the authentication process.

[0084] The terminal device 20 is a communication terminal device that is used by a user and is configured by an information processing device such as a PC (personal computer), a tablet-type information communication terminal device, a smartphone, a mobile phone, a game device, or an HMD.

[0085] In addition, the terminal device 20 is a device that can be connected to the authentication server device 10 via a network such as the Internet (WAN) or LAN, and is configured to establish a communication line with the authentication server device 10 via wired or wireless means to send and receive various types of data.

[0086] Furthermore, the terminal device 20 has a configuration including a communication control function for communicating with the authentication server device 10, such as input information entered by a user, and a display function for performing display control using data received from the authentication server device 10 and the service server device 30.

[0087] The service server device 30 is a server device for providing various network services including banking services for financial institutions, reservation services for restaurants, inns, transport etc., product sales services, SNS services, content provision services for games, music, videos etc., cloud services such as various applications including e-mail, and information provision services such as search and advertisement.

[0088] In particular, when a user registers for a network service, the service server device 30 is configured to register the user as a user providing the network service (i.e., a registered user) once the identity of the user wishing to register has been confirmed through an authentication process related to identity verification processing (i.e., when identity verification authentication is successful).

[0089] In addition, when the authentication server device 10 successfully authenticates a registered user, the service server device 30 is configured to log in the authenticated terminal device 20 into the network service it provides, and execute various processes to provide the corresponding service to the user.

[0090] The service server device 30 may have various functions related to authentication such as the authentication process of the authentication server device 10.

[0091] The information management server device 40 is an information processing device for linking the corresponding terminal device 20 with the official authentication management server device 50 when performing processes related to identity verification, including identity verification processing.

[0092] Furthermore, the information management server device 40 may be configured as one (device, processor) or may be configured as multiple (devices, processors).

[0093] Specifically, like the authentication server device 10, the information management server device 40 has a configuration that uses, for example, an API (application programming interface) or a specified platform, etc., to link each terminal device 20 with the public authentication management server device 50 to perform authentication based on personal identification information.

[0094] The public authentication management server device 50 is an information processing device that manages (information management) identity verification information for identity verification, including each user's unique identification information (i.e., personal management number) such as a My Number, social security number, or driver's license number, in accordance with legal requirements.

[0095] Moreover, the public authentication management server device 50 may be configured with one (device, processor) or may be configured with a plurality of (devices, processors).

[0096] The public authentication management server device 50 has various databases (broadly speaking, storage devices, memories) that store the identity verification information of each user and various information used in authentication processing related to identity verification. However, the public authentication management server device 50 of this embodiment may access a database (broadly speaking, storage devices, memories) connected via a network (intranet or internet).

[0097] Specifically, the public authentication management server device 50, like the authentication server device 10, manages the personal identification information of each user using, for example, an API (application programming interface) or a specified platform, and when performing authentication processing related to personal identification, works in conjunction with the information management server device 40 to make inquiries about the personal identification information and perform other authentication-related processing.

[0098] [2] Authentication server device Next, the authentication server device 10 of this embodiment will be described with reference to FIG.

[0099] FIG. 2 is an example of a functional block diagram showing the configuration of the authentication server device 10 of this embodiment.

[0100] The authentication server device 10 of this embodiment includes a processing unit 100, a database 140, a storage unit 170, an information storage medium 180, and a communication unit 196, as illustrated in FIG.

[0101] It is not necessary for the authentication server device 10 to include all of the components shown in FIG. 2, and some of them may be omitted.

[0102] The storage unit 170 serves as a work area for the processing unit 100 and the like, and the function thereof can be realized by hardware such as a RAM (VRAM), etc. In particular, the storage unit 170 functions as a work area used when various processes are executed.

[0103] The information storage medium 180 is readable by a computer, and stores programs, data, and the like. That is, the information storage medium 180 stores a program for causing a computer to function as each unit of the present embodiment (a program for causing a computer to execute the processing of each unit).

[0104] The processing unit 100 can perform various processes of this embodiment based on data read from a program (data) stored in this information storage medium 180.

[0105] For example, the information storage medium 180 is an optical disk (CD, DVD), a magneto-optical disk (MO), a magnetic disk, a hard disk, a flash memory such as a solid-state drive, a magnetic tape, or a memory (ROM), a memory card, or the like.

[0106] The database 140 includes optical disks (CD, DVD), magneto-optical disks (MO), magnetic It is formed by a disk, a hard disk, a flash memory such as a solid state drive, a magnetic tape, or a memory (ROM), a memory card, or the like.

[0107] The database 140 is a database in which information about each user for performing authentication processing when logging in to each service server device 30 is registered as user authentication information.

[0108] In particular, database 140 stores, for each user, a user name, a password, and user-related information for authentication (e.g., name, credit card number, contact information such as email address and mobile phone number), and user authentication information for identifying the user when performing authentication processing, such as design information, in association with each user ID.

[0109] The database 140 may store base data and customized data used when generating an application for collecting personal identification information in the terminal device 20.

[0110] The communication unit 196 performs various controls for communicating with the outside (e.g., terminal device 20 or service server device 30), and its functions are configured by hardware such as various processors or communication ASICs, programs, etc.

[0111] The processing unit 100 performs various processes of this embodiment based on the programs (data) stored in the storage unit 170. The processing unit 100 of this embodiment may read out the programs and data stored in the information storage medium 180, temporarily store the read out programs and data in the storage unit 170, and perform processes based on the programs and data.

[0112] Furthermore, the processing unit 100 (processor) performs various processes using the main memory in the storage unit 170 as a work area. The functions of the processing unit 100 can be realized by hardware such as various processors (CPU, DSP, etc.) or programs.

[0113] Specifically, the processing unit 100 includes a communication control unit 101 , a DB management control unit 102 , an authentication processing unit 103 , a personal identification processing management unit 104 , an information collection management control unit 105 , and a timer management unit 107 .

[0114] The communication control unit 101 establishes communication lines with the terminal device 20, the service server device 30, and the like via the network, and communicates with them.

[0115] The DB management control unit 102 executes processes such as reading, writing, deleting, and updating each piece of data in the database 140 .

[0116] The authentication processing unit 103 receives input information entered via each terminal device 20 for each terminal device 20, and performs authentication processing for each user based on the received input information (specifically, a user name or a user ID and a password) and authentication information for the user already registered in the database 140 (i.e., a user name or a user ID and a password).

[0117] The identity verification process management unit 104 cooperates with the terminal device 20 to execute identity verification process or process related to the identity verification process.

[0118] The information collection management control unit 105 cooperates with the terminal device 20 to execute processing related to the collection of personal identification information.

[0119] The timer management unit 107 has a function of measuring the current date and time and from a predetermined timing, and outputs the current time and the measurement result when the predetermined timing arrives.

[0120] [3] Terminal device Next, functions of the terminal device 20 will be described with reference to Fig. 3. Fig. 3 is a functional block diagram showing an example of the configuration of the terminal device 20 of this embodiment.

[0121] As shown in FIG. 3, the terminal device 20 of this embodiment has a processing unit 200, a card reader / writer 240, an imaging unit 250, an operation input unit 260 consisting of a touch panel or the like, a memory unit 270, an information storage medium 280, a display unit 290 consisting of a display element such as a liquid crystal panel, a communication unit 296, and a sound output unit 292.

[0122] The card reader / writer 240 reads and writes information from and to an IC card 60 held by a user.

[0123] For example, the card reader / writer 240 of this embodiment reads out personal identification information including a personal management number from the IC card 60 .

[0124] The card reader / writer 240 can be realized by, for example, a card reader for NFC (Near Field Communication).

[0125] The imaging section 250 is made up of an imaging camera having a predetermined imaging angle and focal length and a predetermined imaging element such as a CCD, and an image generating section that converts the output of the imaging camera into an image.

[0126] Furthermore, the imaging unit 250 cooperates with the processing unit 200 to acquire biometric information, such as face image information obtained by capturing an image of the user's face and digitizing the face image, when performing identity verification processing.

[0127] The operation input unit 260 is a device for inputting input information from the player, and outputs the input information from the player to the processing unit 200 .

[0128] The operation input unit 260 of this embodiment has a configuration for detecting input information (input signal) from a user, and is composed of, for example, a lever, a button, a microphone, a touch panel display, a keyboard, a mouse, and the like.

[0129] The storage unit 270 serves as a work area for the processing unit 200 and the like, and the function thereof can be realized by hardware such as a RAM (VRAM).

[0130] The storage unit 270 of this embodiment includes a main storage unit 271 used as a work area, an image buffer 272 in which display images and the like displayed during identity verification processing are stored, a user information storage unit 273 in which user information including part or all of the authentication user-related information is stored, and a data storage unit 274 in which various data for generating application data is stored. Note that some of these may be omitted.

[0131] In particular, the data storage unit 274 stores base data that specifies the content of each step defined in the information collection process, and customized data that customizes the base data, for each provider of network services, which is associated with the provider's identification information or setting information that specifies the content of the steps.

[0132] The information storage medium 280 is computer readable. In addition to various applications and an OS (operating system), in the present embodiment, various data including the user ID of the user corresponding to the terminal device 20 is stored in the device 80.

[0133] That is, the information storage medium 280 stores applications for causing a computer to function as each unit of the present embodiment (applications for causing a computer to execute the processing of each unit) and a user ID.

[0134] For example, the information storage medium 280 is an optical disk (CD, DVD), a magneto-optical disk (MO), a magnetic disk, a hard disk drive, a flash memory, a magnetic tape, or a memory (ROM), a memory card, or the like.

[0135] The communication unit 296 performs various controls for communicating with the outside (e.g., other terminal devices 20, the authentication server device 10, and the service server device 30), and its functions are composed of hardware such as various processors or communication ASICs, programs, etc.

[0136] The processing unit 200 can perform various processes of this embodiment by reading and executing the applications stored in the information storage medium 280. Note that the types of applications stored in the information storage medium 280 are arbitrary.

[0137] The processing unit 200 performs various processes of this embodiment based on the application stored in the information storage medium 280. The processing unit 200 of this embodiment may read out a program or data stored in the information storage medium 280, temporarily store the read out program or data in the storage unit 270, and perform processing based on the program or data.

[0138] Furthermore, the processing unit 200 (processor) performs various processes using a main memory unit in the storage unit 270 as a work area. The functions of the processing unit 200 can be realized by hardware such as various processors (CPU, DSP, etc.) or programs.

[0139] The processing unit 200 includes a communication control unit 210, a web browser 211, an imaging control unit 212, a display control unit 213, an input reception processing unit 214, a reading control unit 215, an application data generation unit 216, an information collection management unit 217, an identity verification processing unit 218, a drawing unit 220, and a sound processing unit 230. Note that some of these may be omitted.

[0140] The communication control unit 210 performs processing for transmitting and receiving data to and from the authentication server device 10, the service server device 30, or the information management server device 40.

[0141] In addition, the communication control unit 210 receives data transmitted from the authentication server device 10, the service server device 30, or the information management server device 40, and performs processes such as storing the received data in the memory unit 270, analyzing the received data, and control processes related to the transmission and reception of other data.

[0142] The communication control unit 210 may store destination information (IP address, port number) of the authentication server device 10, the service server device 30, or the information management server device 40 in the information storage medium 280 and perform processing for managing the same.

[0143] Then, the communication control unit 210 may communicate with the authentication server device 10, the service server device 30, or the information management server device 40 when receiving input information for starting communication from the user.

[0144] The communication control unit 210 may communicate with the information management server device 40 via the authentication server device 10 .

[0145] In addition, the communication control unit 210 may send and receive data with the authentication server device 10, the service server device 30, or the information management server device 40 at a predetermined period, or may send and receive data with the authentication server device 10, the service server device 30, or the information management server device 40 when input information is received from the operation input unit 260.

[0146] The Web browser 211 is an application program for viewing Web pages (authentication screen, identity verification processing screen, or service enjoyment screen), and downloads HTML files, image files, etc. from a Web server (authentication server device 10, service server device 30, or information management server device 40), analyzes the layout, and controls the display.

[0147] Furthermore, the Web browser 211 transmits data using an input form (such as a link, a button, or a text box) to a Web server (the authentication server device 10, the service server device 30, or the information management server device 40).

[0148] The terminal device 20 can use the Web browser 211 to display information from a Web server (for example, the service server device 30) specified by a URL via the Internet.

[0149] For example, the terminal device 20 can display each content (data such as HTML) received from the authentication server device 10, the service server device 30, or the information management server device 40 by the Web browser 211.

[0150] When the imaging control unit 212 works in conjunction with the authentication server device 10 to perform identity verification processing, it causes the imaging unit 250 to capture an image of the user's face and generate facial image information (hereinafter referred to as "captured facial image information" or "captured image information").

[0151] The display control unit 213 performs processing for displaying on the display unit 290. For example, the display control unit 213 may use the Web browser 211 for display.

[0152] The input reception processing unit 214 recognizes input information input by the user from the operation input unit 260, and receives the recognized information.

[0153] The reading control unit 215 controls the card reader / writer 240 that reads the personal identification information from the IC card 60 .

[0154] The application data generation unit 216 generates application data that defines an information collection process for collecting personal identification information.

[0155] The information collection management unit 217 works in conjunction with the Web browser 211 and executes information collection processing using the application data generated by the application data generation unit 216 .

[0156] The identity verification processing unit 218 works in conjunction with the authentication server device 10, the information management server device 40, and the public authentication management server device 50 using the identity verification information collected by the information collection process to perform authentication processing (i.e., identity verification processing) to verify the identity of the user.

[0157] The drawing unit 220 performs drawing processing based on various processes performed by the processing unit 200, thereby generating an image, which is output to the display unit 290 by the display control unit 213.

[0158] The sound processing unit 230 performs sound processing based on the results of various processes performed by the processing unit 200 , generates background music, sound effects, voice, or the like, and outputs them to the sound output unit 292 .

[0159] [4] Method of the present embodiment [4.1] Overview Next, a process of collecting personal identification information, including a process of generating application data, in the authentication management communication system 1 of this embodiment will be described with reference to FIG.

[0160] FIG. 4 is a diagram for explaining the process of collecting personal verification information including the process of generating application data in the terminal device 20 of this embodiment.

[0161] The authentication management communication system 1 of this embodiment is configured to execute an information collection process consisting of one or more steps, which is a process for collecting information for identity verification as identity verification information when an authentication process for verifying the identity of a user for a given network service is executed using a terminal device 20.

[0162] In particular, the terminal device 20 is configured to prepare authentication processing for identity verification for each network service provider, and to collect identity verification information in accordance with the needs of each provider, without setting the application data individually.

[0163] In addition, the terminal device 20 is configured to execute an information collection process to collect personal identification information stored in an IC card 60 such as a My Number card, personal identification information input by a user's operational input, personal identification information which is facial image information obtained by capturing an image of the face of a user wishing to register, or two or more of these pieces of personal identification information.

[0164] Specifically, as shown in FIG. 4, the terminal device 20 (A1) Manage base data that is stored in the storage unit 270 or the database 140 of the authentication server device 10 and that specifies the contents of each process, and customize data that is stored in the database 140 in association with the identification information of each provider (i.e., service provider) that provides a network service, or with setting information that specifies the contents of the process, and that customizes the base data; (A2) performing a generation process for generating application data based on the base data and the customization data; (A3) execute an information collection process based on the generated application data; (A4) During the information collection process, present the user with identity verification information to be entered; (A5) executing a reception process for receiving an operation input of the user input based on the presented identity verification information; (A6) outputting information input by the user as personal identification information to the authentication server device 10 that executes the authentication process; It has a configuration.

[0165] Then, as a generation process, the terminal device 20 performs the following as shown in FIG. (A2-1) When a user instructs to execute an authentication process for identity verification for a network service provided by a specific provider, acquiring at least one of identification information and setting information of the specific provider; (A2-2) generating application data based on the customized data and the base data stored in the storage unit 270 in association with the acquired instruction information; It has a configuration.

[0166] FIG. 4 shows an example of information collection processing for personal identification information, including application data generation processing, based on instruction information input by a user wishing to register, such as a two-dimensional barcode, or input from a Web page for initial registration of a given network service provided by the authentication server device 10 in conjunction with the service server device 30, such as a URL.

[0167] In particular, Figure 4 shows an example in which, when instruction information is acquired, application data is generated based on base data and customized data provided by the memory unit 270 or the authentication server device 10, and personal identification information is presented and accepted based on the application data, and the accepted personal identification information is output to the authentication server device 10.

[0168] FIG. 4 also shows an example in which the authentication server device 10 cooperates with the information management server device 40 and the public authentication management server device 50 to execute identity verification processing using the output identity verification information.

[0169] By having such a configuration, in this embodiment, it is possible to eliminate the trouble for the provider of generating and preparing an application for each provider, and to eliminate the inconvenience for the user of having to download and install the applications individually on the terminal device 20, and it is also possible to prevent memory shortages or CPU malfunctions that may occur when many applications are mixed together.

[0170] [4.2] Personal identification information Next, the personal identification information of this embodiment will be described with reference to FIG.

[0171] FIG. 5 is a diagram showing an example of personal identification information stored in the IC card 60 of this embodiment.

[0172] The IC card 60 is a storage medium that stores personal identification information such as user-related information about a user who has the right of use, and also functions as an identification card with a face photograph of the user printed thereon.

[0173] For example, as shown in FIG. 5, IC card 60 stores a personal management number already assigned to a user (i.e., a user having the right to use), user-related information about the user such as the user's name and a data file of an electronic certificate, and identity verification image information showing an image of the user's physical characteristics such as the face, in association with key information (i.e., a key code such as a PIN) for authenticating whether the user has legitimate authority as identity verification information.

[0174] In particular, the personal identification information is stored with reading locked based on a key code for authenticating whether the user has a legitimate right that is predetermined when the personal identification information is registered by the user or the like.

[0175] Specifically, a personal management number is a number issued to a user by a public institution such as a government agency to identify the individual, either to the user who wishes to use it or forcibly, and is identification information such as a My Number, a social security number, or a driver's license number.

[0176] User-related information includes the user's name, address, date of birth, and gender. The electronic certificate data file, the non-removable private key, and the public key for decrypting data encrypted with the private key are stored.

[0177] In addition, user-related information may include contact information such as a telephone number and the user's nickname, or, if rewritable data is stored, information on electronic money, digital legal tender, points or specific currencies that have monetary value in a specific commercial area, and information such as their usage history.

[0178] The identity verification face image information may basically be information on the image of the printed surface (card face) of the IC card 60 on which the face image is printed, or may simply be information on the face image.

[0179] The data file of the electronic certificate includes, for example, private key information for signature, private key information for user authentication, public key information, and information on the issuing certification authority of the electronic certificate.

[0180] When the IC card 60 is issued, the personal identification information is stored in the official authentication management server device 50 (specifically, in a database, not shown) in association with a personal management number, etc.

[0181] [4.3] Base Data, Customization Data, and Application Data Next, the base data, customized data, and application data of this embodiment will be described with reference to FIG. 6 and FIG.

[0182] FIG. 6 is a diagram showing an example of base data and customized data in this embodiment, and FIG. 7 is a diagram showing an example of application data in this embodiment.

[0183] (Base data) The base data, as shown in FIG. 6(A), is data used to generate application data, and is data that specifies the basic content of each component that constitutes the information collection process for collecting personal identification information, for example, by allowing a user to view or be notified via a web browser, etc.

[0184] The base data is stored in the data storage unit 274 (or the database 140 of the authentication server device 10) and is data that defines each process, including the order in which the corresponding processes are to be executed, and is composed of part data that defines each element to be visually recognized or notified to the user when executing each process, and configuration data for configuring the arrangement of each part data, etc.

[0185] For example, the parts data is data such as images (still images and moving images) for the user to view, background music, decorations, and control data for performing effects.

[0186] The configuration data specifies the location of each part data, as well as the location of the customizable part data and the configuration parts that can be changed, such as the location.

[0187] Furthermore, for example, the base data specifies various processes such as a process for viewing or notifying the user of an explanation (to specify the information to be provided, etc.) including consent to authentication processing for identity verification, a process for obtaining consent from the user as required by law, such as viewing of terms of use, a process for providing operational instructions for capturing an image of the user's face or a process for capturing said image, a process for inputting a key code, a process for inputting input information, and a process for presenting the results of the authentication processing.

[0188] In addition, FIG. 6(A) shows the display form of the configuration data when it is displayed on the terminal device 20. An example of base data is shown.

[0189] (Customized Data) As shown in FIG. 6(B), the customization data is stored in the data storage unit 274 for each provider of network services in association with each provider's identification information and instruction information including setting information that specifies the content of each process.

[0190] In particular, the identification information, which is one piece of instruction information, is an ID that is assigned in advance, for example, by the authentication server device 10 to each provider of network services, and is information that is identified when the terminal device 20 executes an application for identity verification processing.

[0191] Furthermore, the setting information, which is one type of instruction information, is information that can be obtained, for example, by a URL or by reading a two-dimensional barcode such as a QR code (registered trademark), and is information that is identified when the terminal device 20 executes an application for identity verification processing.

[0192] The customization data is composed of, for example, supplementary part data to be incorporated into the above-mentioned part data such as images, sounds or text, replacement part data to replace the above-mentioned part data such as images, sounds or text, and configuration change data to change the configuration data such as the placement position of the above-mentioned part data or effect processing.

[0193] FIG. 6B shows an example of customization data related to a display design registered in association with identification information "001."

[0194] On the other hand, the customization data defines whether each of a plurality of steps included in the information collection process can be executed.

[0195] That is, the customization data includes control data that specifies whether each process can be performed for each provider, including the order.

[0196] The customization data is also used as data that defines content such as images, sounds, or texts to be incorporated into the base data.

[0197] In other words, the customized data includes data representing images, sounds, text, etc., which are displayed or notified to the user when inputting personal identification information, or which guide the user to input personal identification information.

[0198] The customization data includes, for each provider, supplemental part data to be incorporated into the above-mentioned part data such as images, sounds or texts, and replacement part data to replace the above-mentioned part data such as images, sounds or texts.

[0199] Furthermore, the customized data is data that specifies an information management server device 40 determined for each provider when an information management server device 40 to be linked with is selected from among multiple information management server devices 40 when performing authentication processing for identity verification.

[0200] That is, in this embodiment, when there are multiple information management server devices 40 to be used in cooperation with the public authentication management server device 50 required to inquire about personal identification information when executing personal identification processing, the information management server device 40 has data that specifies the information management server device 40 to be linked from among the multiple information management server devices 40.

[0201] In addition to the above, the customization data may stipulate whether or not a process using image information captured and generated by the imaging unit 250 is to be executed.

[0202] (Application Data) The application data is generated, for example, as shown in FIG. 7, based on the above-mentioned base data and customized data each time an authentication process for identity verification is executed, and is used when executing an information collection process.

[0203] In particular, the application data in this embodiment is data for guiding the user to input personal identification information, and defines each step.

[0204] For example, the application data of this embodiment includes data for presenting content to a user, such as data for displaying images including text, or data for outputting sounds including background music and voice, and data for having a user input personal identification information.

[0205] FIG. 7 shows an example in which the customization data shown in FIG. 6(B) is incorporated into the base data shown in FIG. 6(A).

[0206] [4.4] Generation process Next, the generation process executed by the terminal device 20 of this embodiment will be described.

[0207] (Overview of the generation process) The application data generation unit 216 executes a generation process for generating application data based on the base data and the customized data.

[0208] In particular, when a user issues a request to execute an authentication process for identity verification for a network service provided by a specific provider (hereinafter referred to as a "request to execute identity verification process"), the application data generation unit 216 acquires instruction information for at least one of the identification information and setting information of the specific provider.

[0209] Then, the application data generating unit 216 executes a generating process for generating application data based on the customized data and the base data stored in the storage unit 270 in association with the acquired instruction information.

[0210] That is, the application data generation unit 216 acquires, as instruction information, the identification information of the network service provider that will execute the identity verification process, setting information such as a URL, or both, which are sent together with the request to execute the identity verification process, acquires customized data based on the acquired instruction information, and generates application data together with base data.

[0211] Specifically, the application data generation unit 216 mainly performs the following operations based on the acquired customization data: (A1) Setting whether each process can be executed or not, (A2) Addition, modification or deletion of content; (A3) Selection of an information management server device to be linked; and (A4) Addition of a process for acquiring image information, Generate application data for executing the above.

[0212] (Generation process 1: Setting whether each step can be executed) The application data generating unit 216 generates the catalog data stored in association with the instruction information. Based on the customized data and the base data, application data is generated in which whether each process can be executed is specified.

[0213] That is, the application data generating unit 216 modifies the base data for each provider, including whether each process can be performed, and generates application data that can perform authentication processing for identity verification.

[0214] (Generation process 2: Adding, changing, or deleting content) The application data generating unit 216 generates application data by incorporating the customization data stored in association with the instruction information into the base data.

[0215] In other words, the application data generation unit 216 generates application data for setting identity verification information to be guided or collected from the user for each provider, including a design to be visually recognized by the user, in order to realize authentication processing for identity verification in accordance with the wishes of each provider.

[0216] Specifically, the application data generating unit 216 adds, modifies, and deletes content from the base data, based on the customized data stored in association with the instruction information.

[0217] (Generation process 3: Setting of information management server device to be linked when performing identity verification process) The application data generation unit 216 generates application data based on the customized data and base data stored in correspondence with the instruction information, including data communication with the information management server device 40 that is linked when performing identity verification processing.

[0218] In other words, when performing identity verification processing using identity verification information, the application data generation unit 216 generates application data for identifying the desired information management server device 40 for each provider from among multiple information management server devices 40 that cooperate with the public authentication management server device 50 required to inquire about the identity verification information.

[0219] (Generation process 4: Collection of identity verification information from IC card) The application data generation unit 216 generates application data that specifies whether or not to collect identity verification information from an IC card 60 that stores given information for verifying the identity of a user who has the right to use the application data, based on the customized data and base data stored in correspondence with the instruction information.

[0220] That is, the application data generation unit 216 generates application data that specifies whether or not to perform identity verification processing using an IC card 60 that stores identity verification information including unique identification information (i.e., a personal management number) for identifying a user.

[0221] (Generation process 5: Collection of image information) The application data generating section 216 generates application data in which whether or not the image information generated by the imaging section 250 is to be used is specified, based on the customized data and base data stored in association with the instruction information.

[0222] In particular, the application data generating unit 216 sets the personal identification information to be collected for each provider, so that the application data generating unit 216 is required to acquire an image of the face of the IC card 60 that stores personal identification information and functions as an identification card, in addition to a face image or an upper body image of the user including a face image. Generate the specified application data.

[0223] [4.5] Information collection and processing [4.5.1] Overview of information collection and processing Next, an overview of the information collection process executed by the terminal device 20 of this embodiment will be described with reference to FIGS.

[0224] 8 and 9 are diagrams for explaining the information collection process executed by the terminal device 20 of the present embodiment.

[0225] The information collection management unit 217 executes information collection processing using the application data generated by the application data generation unit 216 .

[0226] In particular, the information collection management unit 217 performs a reception process to present personal identification information to be input by the user based on the generated application data, and to accept input of the presented personal identification information, including information on the user's facial image (i.e., facial image information).

[0227] Specifically, as shown in Figures 8 and 9, the information collection management unit 217 constructs content based on application data to make the user aware that the provider of the network service is collecting personal identification information, and executes a process (hereinafter also referred to as "input information presentation process") to present information to guide the user to input the personal identification information requested by each provider.

[0228] Then, as shown in Figures 8 and 9, the information collection and management unit 217 executes a reception process to receive input of personal identification information by user operation input in accordance with the application data, or to receive image information captured and generated by the imaging unit 250 as personal identification information.

[0229] In addition, in Figure 8, (A1) a service explanation step in which a user desiring to register is given an explanation regarding identity verification processing for a network service for which the user desiring to register; (A2) A process for explaining and consenting to the terms of use for the identity verification process of the service in question; (A3) a face image capturing step of presenting input information, which is information on a face image of a user who wishes to register (input information presenting process); (A4) a captured face image confirmation step (reception process) of accepting the face image information as personal identification information; (A5) an operation explanation process (input information presentation process) for explaining how to obtain personal identification information from the IC card 60; (A6) a key code input process (acceptance process) for accepting input of a key code (PIN) for reading personal identification information from the IC card 60; (A7) an identity verification information reading step (acceptance process) of reading identity verification information from the IC card 60 by placing the IC card 60 near the card reader / writer 240; (A8) an identity verification processing step of outputting identity verification information and executing identity verification processing; and (A9) Identity verification completion confirmation process 1 shows an example of an information collection process including an identity verification process.

[0230] FIG. 9 shows an example of information collection processing based on application data generated by the same base data provided by a different provider from that shown in FIG. 8, and includes the above (A3) and (A4). An example of an information gathering process having no steps is shown.

[0231] [4.5.2] Input information presentation process Next, an input information presentation process executed by the terminal device 20 of this embodiment will be described.

[0232] Under the direction of the information collection management unit 217, the Web browser 211 presents the user with personal identification information to be entered during the execution of the information collection process.

[0233] In particular, the Web browser 211 generates Web pages (authentication screen, identity verification processing screen, or service enjoyment screen) for each step of the identity verification process based on application data generated for each network service provider, and allows the user to view the generated Web pages, or plays video or audio embedded in the Web pages.

[0234] At this time, the Web browser 211 may generate a Web page in cooperation with the authentication server device 10 or the information management server device 40 based on the application data under the instructions of the information collection management unit 217, or may generate a Web page using data stored in the memory unit 270.

[0235] For example, the Web browser 211 constructs a layout based on application data generated for each network service provider, while acquiring image data, sound data, text data, etc. from the memory unit 270 or the authentication server device 10, etc., and constructs a layout defined by the application to perform display control and sound output control.

[0236] In addition, the Web browser 211 generates an input form (links, buttons, text boxes, etc.) based on application data generated for each network service provider, and presents or notifies the user of information to be accepted as identity verification information using the input form.

[0237] [4.5.3] Reception process Next, a reception process executed by the terminal device 20 of this embodiment will be described.

[0238] (Overview of reception process) Under the instruction of the information collection and management unit 217, the input reception processing unit 214 executes a reception process for receiving the input of the personal identification information presented in the input information presentation process.

[0239] That is, under the instruction of the information collection management unit 217, the input reception processing unit 214 executes a reception process to receive the user's operational input input based on the personal identification information that is presented by the input information presentation process and that the user is prompted to input.

[0240] Specifically, the input reception processing unit 214 reads out personal identification information stored in the IC card 60, or receives personal identification information input from the operation input unit 260 such as a keyboard, as personal identification information to be input.

[0241] In addition, when an input process for image information is set based on application data, the input reception processing unit 214 may work in conjunction with the imaging unit 250 to receive image information such as a facial image or an image of the face of the IC card 60 as personal identification information.

[0242] For example, the input reception processing unit 214 reads out the personal identification information stored in the IC card 60. If so, it will be executed based on the key code.

[0243] (Acceptance process of personal identification information based on operation of operation input unit) When a process of acquiring personal identification information from an operation input unit 260 such as a keyboard based on application data is set under the instructions of the information collection management unit 217, the input reception processing unit 214 executes a reception process to accept personal identification information input from the operation input unit by a user who wishes to register for a network service when the personal identification information to be input is presented by the input information presentation process during the execution of the information collection process.

[0244] Then, the input reception processing unit 214 provides the received personal identification information to the information collection and management unit 217 .

[0245] (Acceptance and processing of identity verification information for key code entry) When a process of acquiring personal identification information from the IC card 60 based on a key code is set under the instruction of the information collection management unit 217 based on application data, the input reception processing unit 214 executes a reception process to accept, for example, a key code entered by a user wishing to register for a network service when personal identification information to be entered is presented by the input information presentation process during the execution of the information collection process.

[0246] Specifically, when the information collection management unit 217 starts executing identity verification processing in accordance with the instructions of the user wishing to register under the instructions of the information collection management unit 217, the Web browser 211 works in conjunction with the display control unit 213 to display a given key button on the display unit 290 while displaying an image prompting the user to enter a key code (hereinafter referred to as the "input key code").

[0247] At this time, the input reception processing unit 214, under the instruction of the information collection management unit 217, works in conjunction with the operation input unit 260 to execute a reception process in which the key information input by the user from the operation input unit 260 is recognized and accepted as an input key code.

[0248] In particular, when the display unit 290 displays numeric keypad buttons or various key buttons arranged in a QWERTY arrangement to prompt the user to enter an input key code such as a PIN, the input reception processing unit 214 recognizes a plurality of pressing operations (i.e., touch operations) on the key buttons by the user wishing to register using the operation input unit 260, and executes a reception process in which the recognized key buttons are recognized as an input key code and are accepted.

[0249] Then, the input reception processing unit 214 provides the received input key code to the information collection management unit 217 .

[0250] On the other hand, the reading control unit 215, assuming that the IC card 60 is in the vicinity of the card reader / writer 240, controls the card reader / writer 240 to read the personal identification information from the IC card 60 based on the provided key code.

[0251] In particular, under the instruction of the identity verification processing unit 218 , the reading control unit 215 reads out a key code such as a PIN stored in the IC card 60 (hereinafter referred to as a “stored key code”) using the card reader / writer 240 .

[0252] Then, under the instruction of the identity verification processing unit 218, if it is determined that the input key code matches the stored key code, the reading control unit 215 reads out the identity verification information and provides the read identity verification information to the information collection and management unit 217.

[0253] That is, the read control unit 215 receives the key code and If there is a match with the stored key code, the IC card 60 is detected as being placed close to or in contact with the card reader / writer 240, and an image of the physical features of the user wishing to register, such as the face, is captured, an instruction to read the identity verification information is received from the identity verification processing unit 218.

[0254] Then, when the reading control unit 215 receives an instruction to read the personal identification information, if the IC card 60 is maintained in close proximity or contact with the card reader / writer 240, the reading control unit 215 reads the personal identification information stored in the IC card 60 via the card reader / writer 240, and provides the read personal identification information to the information collection and management unit 217.

[0255] In addition, even if the reading control unit 215 receives an instruction to read the personal identification information, if the IC card 60 is not maintained in close proximity or contact with the card reader / writer 240, the reading control unit 215 provides a personal identification information reading error to the information collection and management unit 217.

[0256] (Acceptance process for input of imaging instructions) When a process is set for acquiring facial image information of a user wishing to register for a network service as personal identification information using the imaging unit 250 based on application data under the instructions of the information collection management unit 217, the input reception processing unit 214 executes a reception process for accepting an imaging instruction input by the user wishing to register when the personal identification information to be input is presented by the input information presentation process during the execution of the information collection process.

[0257] Specifically, the input reception processing unit 214 works in conjunction with the display control unit 213 to execute a reception process that displays on the display unit 290 a message encouraging the user to capture an image of the physical characteristics of the user wishing to register, while accepting input of an image capture instruction for capturing an image using the image capture unit 250.

[0258] At this time, the input reception processing unit 214 displays an imaging area image that specifies the imaging range on the display unit 290, and receives input of an imaging instruction by detecting a pressing operation (i.e., a touch operation) of the imaging button displayed together with the imaging area image.

[0259] Then, the input reception processing unit 214 provides the received imaging instruction to the information collection management unit 217 .

[0260] On the other hand, under the instructions of the information collection management unit 217, the imaging control unit 212 executes an imaging control process to control the imaging unit 250 to capture images of physical features such as the face of the user wishing to register and generate captured image information based on an imaging instruction from the user wishing to register.

[0261] Specifically, under the instruction of the identity verification processing unit 218, the imaging control unit 212 works in conjunction with the display control unit 213 to cause the display unit 290 to display an imaging area image that specifies the imaging range and an imaging button that performs imaging in conjunction with the operation input unit 260.

[0262] Then, when the imaging control unit 212 recognizes a pressing operation (i.e., a touch operation) of the imaging button by the user wishing to register using the operation input unit 260, it images the imaging area (e.g., the face area) imaged by the imaging unit 250 to generate captured image information, and provides the generated captured image information to the information collection management unit 217.

[0263] The imaging control unit 212 may change the imaging range and control the imaging direction of the imaging unit 250 based on an operation input via the operation input unit 260 by a user who wishes to register.

[0264] The imaging control unit 212 also executes a similar process when acquiring image information of the face of the IC card 60 as personal identification information, instead of a face image.

[0265] [4.6] Identity Verification Processing Next, the identity verification process of this embodiment will be described.

[0266] The identity verification processing unit 218 works in conjunction with the authentication server device 10, the information management server device 40, and the public authentication management server device 50 using the identity verification information collected by the information collection process to perform authentication processing (i.e., identity verification processing) to verify the identity of the user.

[0267] In particular, the identity verification processing unit 218 provides the information operationally input by the user as identity verification information to the information management server device 40 which executes identity verification processing, as described above.

[0268] Specifically, the identity verification processing unit 218 works in conjunction with the authentication server device 10, the information management server device 40, and the public authentication management server device 50 to perform identity verification of the user wishing to register, based on the identity verification information input by the operation input unit 260, the identity verification information read from the IC card 60, and the captured identity verification information such as facial image information or card face image information of the IC card 60.

[0269] Then, when the identity of the person is confirmed based on the provided identity confirmation information (i.e., when identity authentication is performed), the identity confirmation processing unit 218 obtains this fact and performs registration of the corresponding user (i.e., user registration).

[0270] The identity verification processing unit 218 cooperates with the service server device 30 to register the user as a registered user who receives the network services provided by the service server device 30.

[0271] Furthermore, when the identity verification of the user wishing to register is completed, the identity verification processing unit 218 notifies the corresponding terminal device 20 of the completion.

[0272] Furthermore, the identity verification process of this embodiment may be executed at a timing different from the timing of collecting identity verification information, or may be executed in response to obtaining identity verification information at the timing of collecting identity verification information, as shown in FIG. 8 or FIG.

[0273] [4.7] Registration and logging in to network services Next, registration to a network service provided by the service server device 30 of this embodiment will be described.

[0274] When the identity verification process for the user wishing to register has been completed and the identity authentication of the user wishing to register has been completed, the service server device 30, under the management of the authentication server device 10, works in conjunction with the corresponding terminal device 20 to register the user wishing to register as a registered user who will enjoy the corresponding network service.

[0275] Specifically, the service server device 30 cooperates with the authentication server device 10 to register user information such as a user name or a user ID and a password in the database 140 .

[0276] When a login is performed by a registered user, the service server device 30 works in conjunction with the authentication server device 10 and performs authentication processing for the registered user based on the input information (specifically, the user name or user ID and password) entered via the terminal device 20 and the information stored in the database 140.

[0277] If the authentication of the registered user is successful, the authentication processing unit 103 allows the user to log in to the network service provided by the service server device 30.

[0278] [4.8] Variations Next, a modification of this embodiment will be described.

[0279] (Application data generation process by authentication server device) In the above embodiment, the application data generation process is executed by the terminal device 20, but the application data generation process may be executed in the authentication server device 10.

[0280] That is, the authentication server device 10 may execute application data generation processing based on the base data and customized data in conjunction with the terminal device 20 of the registration-desiring user who wishes to be identified.

[0281] In this case, the authentication server device 10 includes an information collection management control unit 105 having some or all of the functions of the application data generation unit 216 of the terminal device 20 .

[0282] The authentication server device 10 has a configuration for causing the corresponding terminal device 20 to collect personal identification information based on the generated application data, and for executing personal identification processing based on the collected personal identification information.

[0283] Specifically, the information collection management control unit 105 generates application data for executing an information collection process consisting of one or more steps, which is a process for collecting information for identity verification as identity verification information when an authentication process is executed to verify the identity of a user for a given network service.

[0284] In addition, the information collection management control unit 105 (A1) Manage base data, which is stored in a database 140 and defines the contents of each process, and customize data, which is stored in the database for each provider of network services in association with the identification information of each provider or setting information defining the contents of the process, and customizes the base data; (A2) performing a generation process for generating application data based on the base data and the customization data; (A3) Providing the generated application data to the terminal device 20; (A4) Acquire information input based on user operation based on application data as identity verification information; It has a configuration.

[0285] In particular, the information collection management control unit 105 performs the following generation process: (A2-1) when a request for execution of authentication processing for identity verification for a network service provided by a specific provider is instructed by the user, acquiring at least one of identification information of the specific provider and the setting information; (A2-2) generating application data based on the customized data and the base data stored in the database 140 in association with the acquired instruction information; It has a configuration.

[0286] In this case, the personal identification process management unit 104 works in conjunction with the information management server device 40. Then, each step of the authentication process related to the identity verification process is executed.

[0287] On the other hand, in this case, the terminal device 20 executes an information collection process for collecting personal identification information based on the application data generated as described above.

[0288] Specifically, in this case, the terminal device 20 is a terminal device that executes an information collection process consisting of one or more steps, which is a process for collecting information for identity verification as identity verification information when an authentication process for verifying the identity of a user for a given network service is executed.

[0289] In this case, the terminal device 20 (B1) executing an acquisition process for acquiring the generated application data based on base data, which is stored in the database 140 and defines the contents of each process, and customization data, which is stored in the database 140 for each provider of network services in association with identification information of each provider or setting information defining the contents of the process, and customizes the base data; (B2) execute an information collection process based on the acquired application data; (B3) during the information collection process, presenting the user with the identity verification information to be entered; (B4) executing a reception process for receiving a user's operation for inputting the presented identity verification information; (B5) Based on the user's operation, the input information is output as identity verification information to the authentication server device 10 that executes the authentication process. It has a configuration.

[0290] As described above, the application data is information obtained when the user issues a request to execute an authentication process for identity verification for a network service provided by a specific provider, and is generated based on instruction information of at least one of the identification information of the specific provider and the setting information.

[0291] In this modification, each step of the authentication process related to the identity verification process may be executed by the information management server device 40 instead of the authentication server device 10.

[0292] (Other Examples of Authentication Server Device and Service Server Device) In this embodiment, the authentication server device 10 may have the functions of the information management server device 40 .

[0293] In this embodiment, the service server device 30 may have the functions of the authentication server device 10.

[0294] (Key information obtained via a network, etc.) In this embodiment, an example is described in which the key code is directly input by the user wishing to register via the operation input unit 260, but the key code may be obtained via a network, or may be stored in advance in the terminal device 20 and obtained by reading it out at the instruction of the user wishing to register, etc.

[0295] [5] Operation of this embodiment Next, with reference to FIG. 10 and FIG. 11, a process of collecting personal identification information including an application data generation process executed in the terminal device 20 of this embodiment and a personal identification process based on the information collection process will be described.

[0296] 10 and 11 are flowcharts showing operations of a process for collecting personal identification information, including an application data generation process, executed in the terminal device 20 of this embodiment, and a personal identification process based on the information.

[0297] In this operation, it is assumed that a personal management number has already been issued and an IC card 60 has already been issued.

[0298] This operation will be described using the collection of identity verification information during initial registration for a given network service and identity verification processing based on the identity verification information.

[0299] Furthermore, a case will be described in which both identification information of a provider that provides a given network service and setting information related to the steps of the identity verification process are acquired as instruction information.

[0300] First, when the Web browser 211 detects a request to execute identity verification processing together with instruction information including both the identification information and setting information of the network service provider (step S101), the application data generation unit 216 reads out customized data stored in the memory unit 270 based on the identification information and setting information included in the instruction information (step S102).

[0301] Next, the application data generating unit 216 generates application data based on the read customized data and the base data stored in the storage unit 270 (step S103).

[0302] Next, the information collection management unit 217 starts to collect information based on the generated application data (step S104).

[0303] First, the information collection and management unit 217 works in conjunction with the Web browser 211 and the display control unit 213 to display information to be presented to the user regarding the first process on the display unit 290 based on the application data (step S105).

[0304] Next, the information collection management unit 217 determines whether or not there is an operation input from the user (step S106).

[0305] At this time, if the information collection management unit 217 determines that there is no item for user operation input, it transitions to processing of step S107, and if it determines that there is an item for user operation input, it transitions to processing of step S111.

[0306] Then, if the information collection and management unit 217 determines in the process of step S106 that there is no item for user operation input, or if the information collection and management unit 217 acquires personal identification information in the previous step, it determines whether or not there is a next step (step S107).

[0307] If the information collection management unit 217 determines that there is no next step, it transitions to processing of step S121; if it determines that there is a next step, it works in conjunction with the Web browser 211 and the display control unit 213 to display information to be presented to the user regarding the next step on the display unit 290 based on the application data (step S108), and transitions to processing of step S106.

[0308] On the other hand, if the information collection management unit 217 determines that there is an item for user operation input, it executes a reception process for receiving operation input from the user who wishes to register (step 111).

[0309] Next, the information collection and management unit 217 acquires personal identification information based on the accepted operation (step S112), and proceeds to the process of step S107.

[0310] At this time, the information collection and management unit 217 acquires, as personal identification information, information directly input by the operation input unit 260 or information on checked items, information read from the IC card 60 by the card reader / writer 240, and image information captured and generated by the imaging unit 250.

[0311] On the other hand, if the identity verification processing unit 218 determines in the processing of step S107 that there is no next step in the information collection processing, it terminates the information collection processing and outputs the acquired identity verification information to the authentication server device 10, the information management server device 40 or the public authentication management server device 50 (step S121), and executes the identity verification processing (step S122).

[0312] Finally, the identity verification processing unit 218 displays the result of the identity verification processing (whether or not authentication was successful) on the display unit 290 (step S123), and ends this operation.

[0313] The identity verification processing unit 218 subsequently provides the authentication result of the identity verification processing to the corresponding terminal device 20.

[0314] [6] Other The present invention is not limited to the above-described embodiment, and various modifications are possible. For example, a term cited as a broadly defined or synonymous term in the description in the specification or drawings can be replaced with a broadly defined or synonymous term in other descriptions in the specification or drawings.

[0315] The present invention includes configurations that are substantially the same as the configurations described in the embodiments (for example, configurations with the same functions, methods and results, or configurations with the same purpose and effect). The present invention also includes configurations in which non-essential parts of the configurations described in the embodiments are replaced. The present invention also includes configurations that achieve the same effects as the configurations described in the embodiments or that can achieve the same purpose. The present invention also includes configurations in which publicly known technology is added to the configurations described in the embodiments.

[0316] Although the embodiments of the present invention have been described in detail as above, it will be easily understood by those skilled in the art that many modifications are possible without substantially departing from the novel features and effects of the present invention. Therefore, all such modifications are intended to be included within the scope of the present invention. [Explanation of symbols]

[0317] 1: Authentication management communication system 10: Authentication server device 20: Terminal device 20A: Terminal equipment 20B: Terminal device 20C: Terminal equipment 30: Service server device 40: Information management server device 50: Public authentication management server device 60: IC card 100: Processing section 101: Communication control unit 102: DB management control unit 103: Authentication processing unit 104: Identity Verification Processing Management Department 105: Information collection management control unit 107: Timer management unit 111: Step 140: Database 170: Storage section 180: Information storage medium 196: Communications Department 200: Processing section 210: Communication control section 211: Web browser 212: Imaging control unit 213: Display control unit 214: Input reception processing unit 215: Reading control unit 216: Application data generation unit 217: Information Collection and Management Department 218: Identity verification processing unit 220: Drawing section 230: Sound processing section 240: Writer 250: Imaging unit 260: Operation input section 270: Storage section 271: Main memory 272: Image buffer 273: User information storage unit 274: Data storage unit 280: Information storage medium 290: Display section 292: Sound output section 296: Communications Department

Claims

1. 1. An information collection system for collecting information for identity verification as identity verification information when an authentication process for verifying the identity of a user for a given network service is executed, the information collection process being composed of one or more steps, comprising: a management means for managing base data, which is stored in a storage means and defines the contents of each process, and customization data, which is stored in the storage means for each provider of the network service in association with identification information of each provider or setting information defining the contents of the process, and customizes the base data; a generation unit that executes a generation process for generating application data based on the base data and the customized data; an application execution processing means for executing the information collection process based on the generated application data; a presentation means for presenting the identity verification information to be input by the user during execution of the information collection process; a reception processing means for executing a reception process for receiving an operation of the user for inputting the presented personal identification information; an output control means for outputting the input information as identity verification information to an authentication server system that executes the authentication process based on the user's operation; Equipped with The generating means, as the generating process, When a request for execution of authentication processing for identity verification for a network service provided by a specific provider is instructed by the user, instruction information of at least one of identification information of the specific provider and the setting information is acquired; An information collecting system, characterized in that the application data is generated based on the customized data and the base data stored in the storage means in association with the acquired instruction information.

2. 2. The information collection system according to claim 1, the customization data is data that specifies whether each of a plurality of steps included in the information collection process can be executed, The generating means, The information collecting system generates the application data in which whether or not each process can be executed is defined based on the customized data stored in association with the instruction information and the base data.

3. 2. The information collection system according to claim 1, the customization data is data defining content to be incorporated into the base data; The generating means, The information collecting system generates the application data by incorporating the customization data, which is stored in association with the instruction information, into the base data.

4. 2. The information collection system according to claim 1, The customized data specifies an information management server system to be linked when performing the authentication process for the identity verification from among a plurality of information management server systems that perform the authentication process using the legitimate identity verification information, The generating means, The customized data and the base data stored in association with the instruction information are and generating the application data based on the data, the application data including performing data communication with an information management server system that cooperates with the information management server system when performing authentication processing for the identity verification.

5. 2. The information collection system according to claim 1, The imaging device further includes an imaging control unit for controlling the imaging unit. The customization data specifies whether or not a step of using image information captured by the imaging means is to be executed, The generating means, An information collection system that generates the application data, which specifies whether or not to use image information generated by the imaging means, based on customized data stored in correspondence with the instruction information and the base data.

6. A program for executing an information collection process for collecting information for identity verification as identity verification information when an authentication process for verifying the identity of a user for a given network service is executed, the information collection process being composed of one or more steps, a management means for managing base data, which is stored in a storage means and defines the contents of each process, and customization data, which is stored in the storage means for each provider of the network service in association with identification information of each provider or setting information defining the contents of the process, and which customizes the base data; a generation means for executing a generation process for generating application data based on the base data and the customized data; an application execution processing means for executing the information collection process based on the generated application data; a presentation means for presenting the identity verification information to be input by the user during execution of the information collection process; a reception processing means for executing a reception process for receiving an operation of the user for inputting the presented personal identification information; and an output control means for outputting the input information, based on the user's operation, as identity verification information to an authentication server system that executes the authentication process; The computer functions as The generating means, as the generating process, When a request for execution of authentication processing for identity verification for a network service provided by a specific provider is instructed by the user, instruction information of at least one of identification information of the specific provider and the setting information is acquired; a program for generating the application data based on the customized data and the base data, the customized data being stored in the storage means in association with the acquired instruction information;

7. 1. An information collection method for collecting information for identity verification as identity verification information when an authentication process for verifying the identity of a user for a given network service is executed, the information collection process being composed of one or more steps, and comprising the steps of: managing base data, which is stored in a storage means and defines the contents of each process, and customization data, which is stored in the storage means for each provider of the network service in association with identification information of each provider or setting information defining the contents of the process, and which customizes the base data; A generation process is executed to generate application data based on the base data and the customization data; Executing the information collection process based on the generated application data; presenting the user with the identity verification information to be input during the information collection process; execute a reception process for receiving an operation of the user for inputting the presented personal identification information; outputting the input information as identity verification information to an authentication server system that executes the authentication process based on the user's operation; Including, The generation process includes: When a request for execution of authentication processing for identity verification for a network service provided by a specific provider is instructed by the user, instruction information of at least one of identification information of the specific provider and the setting information is acquired; An information collecting method, comprising the steps of: generating the application data based on the customized data and the base data, which are stored in the storage means in association with the acquired instruction information.

8. A terminal device that executes an information collection process for collecting information for identity verification as identity verification information when an authentication process for verifying the identity of a user for a given network service is executed, the information collection process being composed of one or more steps, comprising: an acquisition means for executing an acquisition process for acquiring the generated application data based on base data, which is stored in a storage means and defines the contents of each process, and customization data, which is stored in the storage means for each provider of the network service in association with identification information of each provider or setting information defining the contents of the process, and customizes the base data; an application execution processing means for executing the information collection process based on the acquired application data; a presentation means for presenting the identity verification information to be input by the user during execution of the information collection process; a reception processing means for executing a reception process for receiving an operation of the user for inputting the presented personal identification information; an output control means for outputting the input information as identity verification information to an authentication server system that executes the authentication process based on the user's operation; Equipped with The application data comprises: A terminal device characterized in that the information is acquired when the user requests the execution of an authentication process for identity verification for a network service provided by a specific provider, and is generated based on instruction information of at least one of the identification information of the specific provider and the setting information.

9. A program for executing an information collection process for collecting information for identity verification as identity verification information when an authentication process for verifying the identity of a user for a given network service is executed, the information collection process being composed of one or more steps, an acquisition means for executing an acquisition process for acquiring the generated application data based on base data, which is stored in a storage means and defines the contents of each step, and customization data, which is stored in the storage means for each provider of the network service in association with identification information of each provider or setting information defining the contents of the step, and customizes the base data; an application execution processing means for executing the information collection process based on the acquired application data; a presentation means for presenting the identity verification information to be input by the user during execution of the information collection process; A reception process for receiving an operation of the user for inputting the presented personal identification information. A reception processing means for executing the above; and an output control means for outputting the input information, based on the user's operation, as identity verification information to an authentication server system that executes the authentication process; The computer functions as The application data comprises: A program characterized in that the information obtained when the user requests the execution of an authentication process for identity verification for a network service provided by a specific provider is generated based on instruction information of at least one of the identification information of the specific provider and the setting information.

10. 1. An information collection method for collecting information for identity verification as identity verification information when an authentication process for verifying the identity of a user for a given network service is executed, the information collection process being composed of one or more steps, and comprising the steps of: execute an acquisition process for acquiring the generated application data based on base data, which is stored in a storage means and defines the contents of each step, and customization data, which is stored in the storage means for each provider of the network service in association with identification information of each provider or setting information defining the contents of the step, and customizes the base data; Executing the information collection process based on the acquired application data; presenting the user with the identity verification information to be input during the information collection process; execute a reception process for receiving an operation of the user for inputting the presented personal identification information; outputting the input information as identity verification information to an authentication server system that executes the authentication process based on the user's operation; Including, The application data comprises: An information collection method characterized in that the information is acquired when the user requests the execution of an authentication process for identity verification for a network service provided by a specific provider, and is generated based on instruction information of at least one of the identification information of the specific provider and the setting information.

11. A data generation system for generating application data for executing an information collection process for collecting information for identity verification as identity verification information when an authentication process for verifying the identity of a user for a given network service is executed, the information collection process being composed of one or more steps, comprising: a management means for managing base data, which is stored in a storage means and defines the contents of each process, and customization data, which is stored in the storage means for each provider of the network service in association with identification information of each provider or setting information defining the contents of the process, and customizes the base data; a generation unit that executes a generation process for generating application data based on the base data and the customized data; providing means for providing the generated application data to a terminal device; an acquisition means for acquiring information inputted based on the user's operation as personal identification information based on the application data; Equipped with The generating means, as the generating process, When a request for execution of authentication processing for identity verification for a network service provided by a specific provider is instructed by the user, instruction information of at least one of identification information of the specific provider and the setting information is acquired; A data generation system which generates the application data based on the customized data and the base data stored in the storage means in association with the acquired instruction information.

12. A program for generating application data for executing an information collection process for collecting information for identity verification as identity verification information when an authentication process for verifying the identity of a user for a given network service is executed, the information collection process being composed of one or more steps, a management means for managing base data, which is stored in a storage means and defines the contents of each process, and customization data, which is stored in the storage means for each provider of the network service in association with identification information of each provider or setting information defining the contents of the process, and customizes the base data; a generation means for executing a generation process for generating application data based on the base data and the customized data; providing means for providing the generated application data to a terminal device; and an acquisition means for acquiring information input based on the user's operation as personal identification information based on the application data; The computer functions as The generating means, as the generating process, When a request for execution of authentication processing for identity verification for a network service provided by a specific provider is instructed by the user, instruction information of at least one of identification information of the specific provider and the setting information is acquired; a program for generating the application data based on the customized data and the base data, the customized data being stored in the storage means in association with the acquired instruction information;

13. A data generation method for generating application data for executing an information collection process for collecting information for identity verification as identity verification information when an authentication process for verifying the identity of a user for a given network service is executed, the information collection process being composed of one or more steps, comprising: managing base data, which is stored in a storage means and defines the contents of each process, and customization data, which is stored in the storage means for each provider of the network service in association with identification information of each provider or setting information defining the contents of the process, and which customizes the base data; A generation process is executed to generate application data based on the base data and the customization data; providing the generated application data to a terminal device; acquiring information input based on the user's operation as personal identification information based on the application data; Including, The generation process includes: When a request for execution of authentication processing for identity verification for a network service provided by a specific provider is instructed by the user, instruction information of at least one of identification information of the specific provider and the setting information is acquired; A data generating method, comprising: generating the application data based on the customized data and the base data, the customized data being stored in the storage means in association with the acquired instruction information.

Images