Personal identification method, personal identification device, personal identification program, and personal identification system

Abstract

To perform highly reliable identity verification when writing information of a second identity document into a writable area of ​​an IC chip of a first identity document. [Solution] An identity verification method for verifying the identity of a person based on an identity document performs a first comparison to compare photographed facial image information of the person's face with first facial image information based on a first identity document, and if the first comparison is successful, writes information of a second identity document, which is different from the first identity document, into a writable area of ​​an IC chip on the first identity document.

Description

[Technical field]

[0001] The present disclosure relates to a personal identification method and a personal identification device. , Books Person Verification Program , and identity verification system Regarding. [Background technology]

[0002] Patent Document 1 discloses an application acceptance system comprising an application acceptance device and a management terminal device connected to the application acceptance device via a communication network and monitoring the status of the application acceptance device, wherein the application acceptance device comprises a reading unit that reads first personal information and a facial image recorded on an IC (Integrated Circuit) chip provided on a card and reads second personal information including a card number written on the card, a facial image acquisition unit that acquires a facial image of the applicant, a determination unit that determines whether the first personal information and the second personal information are normal and whether the applicant is a target of application based on the result of authentication for the IC chip, the result of authentication based on a check digit of the card number, and the result of facial authentication performed by comparing the acquired facial image with the read facial image, and a generation unit that generates document data for an application form when the determination unit determines that at least one of the first personal information and the second personal information is normal and the applicant is a target of application. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2022-169476 A [Non-patent literature]

[0004] [Non-Patent Document 1] “About My Number Card”, [online], [searched on February 14, 2024], Internet<URL:https: / / www5.cao.go.jp / keizai-shimon / kaigi / special / reform / wg6 / 20221026 / pdf / shiryou1-2.pdf> Summary of the Invention [Problem to be solved by the invention]

[0005] When writing personal certificate information of another type into a personal certificate equipped with a writable IC chip, it is necessary to perform more rigorous and accurate identity verification in order to prevent other people's information from being written. [Means for solving the problem]

[0006] An identity verification method according to one embodiment of the present disclosure is a method for verifying the identity of a person based on an identity verification document, which performs a first comparison to compare photographed facial image information of the person's face with first facial image information based on a first identity verification document, and if the first comparison is successful, writes information of a second identity verification document different from the first identity verification document into a writable area of ​​an IC chip of the first identity verification document.

[0007] Furthermore, these comprehensive or specific aspects may be realized by a system, an apparatus, a method, an integrated circuit, a computer program, or a recording medium, or may be realized by any combination of a system, an apparatus, a method, an integrated circuit, a computer program, and a recording medium. [Brief description of the drawings]

[0008] [Figure 1] Table showing the main information contained in the My Number Card [Diagram 2] A diagram showing an example of the My Number card (front and back) [Diagram 3] A diagram outlining the My Number Card Application (AP) [Figure 4]Diagram to explain the AP free space on the IC chip of the My Number Card [Diagram 5] FIG. 1 is a block diagram showing a configuration example of an identity verification system according to an embodiment of the present invention. [Figure 6] A flowchart showing an example of license renewal operation according to the present embodiment. [Figure 7] FIG. 1 is a sequence diagram showing an example of the operation of issuing an application form and collecting a driver's license in the personal identification system according to the present embodiment. [Figure 8] A sequence diagram showing an example of processing of the identity verification system according to the present embodiment. [Figure 9] A sequence diagram showing a continuation of the processing example in Figure 8. [Figure 10] A sequence diagram showing a continuation of the processing example in Figure 9. [Figure 11] FIG. 13 is a diagram showing a first example of a screen displayed by the business terminal according to the embodiment; [Figure 12] FIG. 13 is a diagram showing a second example of a screen displayed by the business terminal according to the embodiment; [Figure 13] FIG. 13 is a diagram showing a third example of a screen displayed by the business terminal according to the embodiment; [Figure 14] FIG. 4 is a diagram showing a fourth example of a screen displayed by the business terminal according to the embodiment; [Figure 15] FIG. 5 is a diagram showing a fifth example of a screen displayed by the business terminal according to the embodiment; [Figure 16] FIG. 13 is a diagram showing a sixth example of a screen displayed by the business terminal according to the embodiment; [Figure 17] FIG. 13 is a diagram showing a first example of a screen displayed by the authentication terminal according to the embodiment; [Figure 18] FIG. 11 is a diagram showing a second example of a screen displayed by the authentication terminal according to the embodiment; [Figure 19] FIG. 13 is a diagram showing a third example of a screen displayed by the authentication terminal according to the embodiment; [Figure 20] FIG. 4 is a fourth example of a screen displayed by the authentication terminal according to the present embodiment; [Figure 21] FIG. 5 is a diagram showing a fifth example of a screen displayed by the authentication terminal according to the embodiment; [Figure 22]FIG. 13 is a diagram showing a sixth example of a screen displayed by the authentication terminal according to the embodiment; [Diagram 23] FIG. 1 is a diagram for explaining a first method of the first collation and the second collation according to the present embodiment; [Figure 24] FIG. 2 is a diagram for explaining a second method of the first collation and the second collation according to the present embodiment; DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] Hereinafter, the embodiments of the present disclosure will be described in detail with reference to the drawings as appropriate. However, more detailed description than necessary may be omitted. For example, detailed description of already well-known matters and duplicated description of substantially the same configuration may be omitted. This is to avoid the following description becoming unnecessarily redundant and to facilitate understanding by those skilled in the art. Note that the accompanying drawings and the following description are provided to enable those skilled in the art to fully understand the present disclosure, and are not intended to limit the subject matter described in the claims.

[0010] (Present embodiment) <My Number Card> Fig. 1 is a table showing main information held by My Number Card 31. Fig. 2 is a diagram showing an example of the card face (front and back) of My Number Card 31.

[0011] As shown in FIG. 2, at least the name, address, date of birth, gender, security code, and expiration date are printed as text information 23 (see FIG. 2) on the front side of the My Number card 31. Information including the name, address, date of birth, and gender is also referred to as four pieces of information. In this embodiment, the four pieces of information may also be referred to as personal information. A facial image 22 is also printed on the front side of the My Number card 31. A two-dimensional code is also printed on the back side of the My Number card 31.

[0012] The My Number card 31 can be read without contact and has a secure IC chip 21. The IC chip 21 stores personal information of the owner of the My Number card 31.

[0013] At least the name, address, date of birth, sex, facial image data, and personal number are stored in the IC chip 21 of the My Number Card 31. The facial image data is image data obtained by photographing the face of the owner of the My Number Card 31.

[0014] The My Number card 31 has at least a verification number A, a verification number B, a signature electronic certificate PIN, a user certificate PIN, a card information input assistance PIN, and a resident register PIN as information used to control access to the IC chip 21.

[0015] 2, the verification number B is a combination of a six-digit date of birth, a four-digit year portion of the expiration date, and a four-digit security code, which are printed on the surface of the My Number card 31. By using the verification number B, it is possible to access the four pieces of information and the facial photo data stored in the IC chip 21 of the My Number card 31. In other words, by obtaining the verification number B printed on the surface of the My Number card 31, it is possible to access the four pieces of information and the facial photo data stored in the IC chip 21 of the My Number card 31.

[0016] The above-mentioned My Number card 31 is an example, and in this embodiment, when the specifications of the My Number card 31 are changed, various information held by the My Number card 31 can be read based on the changed specifications. For example, gender does not need to be written on the face of the My Number card 31, and in this case, this embodiment may acquire three pieces of information other than gender and face image data from the IC chip 21. Also, the verification number B may be a number of predetermined digits different from the 14-digit number combining the above-mentioned 6-digit date of birth, 4-digit expiration date part in the Gregorian calendar, and 4-digit security code. In this case, this embodiment may read the number of predetermined digits based on the specifications of the My Number card 31 and use it as the verification number B.

[0017] <My Number Card Application> FIG. 3 is a diagram for explaining an overview of the application (AP) of the My Number card 31.

[0018] As shown in FIG. 3, the IC chip 21 of the My Number card 31 has the following four APs (B1) to (B4) registered in it. (B1) Card Application (Card AP) The card AP stores image data of the front information (four pieces of information (address, name, date of birth, gender) + face photo) and the back information (personal number). (B2) Electronic Certificate Application by Public Personal Identification Service (JPKI-AP) JPKI-AP records information on "signature electronic certificates" and "user electronic certificates." (B3) Application for assisting input of information on cards (AP for assisting input of information on cards) The card information input assistance AP records information for using the personal number and the four pieces of information as text data when carrying out administrative tasks that utilize the personal number and the four pieces of information. The information to be recorded or used is as follows: (1) Personal number and four pieces of information (and their electronic signature data) (2) Personal number (and its electronic signature data) (3) 4 Information (and its electronic data) (B4) Resident Registration Application (Resident Registration AP) The Resident Registration AP records information for using resident registration codes as text data when handling Resident Registration Network-related affairs.

[0019] When using (2) or (3) of the card's face AP or the face-information input support AP, the card can be accessed using the matching number based on the information printed on the card. However, when using the two electronic certificates of the JPKI-AP, (1) of the card's face-information input support AP, or the Resident Registration AP, the PIN number set when the Individual Number Card31 is issued is used.

[0020] FIG. 4 is a diagram for explaining the AP free area of ​​the IC chip 21 of the My Number card 31.

[0021] The IC chip 21 of the My Number card 31 has a free area (referred to as an AP free area) in which an AP can be registered later. The AP free area may have, for example, a local resident area in which an AP for local residents can be registered, and an extended use area in which any AP can be registered.

[0022] In the area for local residents, for example, a library card AP, an automatic application form creation AP, and other service APs for local residents may be registered.

[0023] In the extended use area, for example, a private AP, a prefecture AP, an administrative agency AP, a city AP, a town AP, etc. may be registered. In addition, in the extended use area, a license AP may be registered, as described later.

[0024] <Integrating driver's license into My Number card> It is being considered to register information on a driver's license 32 (see FIG. 5) in the IC chip 21 of the My Number card 31 and integrate the driver's license 32 with the My Number card 31. Hereinafter, information on the driver's license 32 may be referred to as license information. For example, Non-Patent Document 1 describes that integration with My Number cards will begin at the end of fiscal year 2024, and that prior to this, systems for managing driver's licenses of the National Police Agency and prefectural police will be consolidated onto a common platform (e.g., a police common platform) to be established by the National Police Agency by the end of fiscal year 2024.

[0025] The license information includes the name, date of birth, address, license issue date, expiration date, license type, license number, registered domicile, and photograph.

[0026] Among the license information, it is considered to share the information of the My Number card with the name, date of birth, and address. In addition, it is considered to secure the license AP (see FIG. 4) in the extended use area of ​​the IC chip 21 of the My Number card 31 and register the information specific to the license (hereinafter referred to as specific license information) such as the license issue date, expiration date, license type, license number, legal domicile, and face photo in the license AP. In other words, it is considered to integrate the driver's license 32 with the My Number card 31 by registering the specific license information in the IC chip 21 of the My Number card 31. However, the above explanation is an example, and the definition of the specific license information is certain information related to the driver's license of the person of the driver's license, and it may be registered in the license AP as information including the person's name, date of birth, and address. In other words, the information of the My Number card and the specific license information registered in the license AP may overlap in part.

[0027] In this embodiment, a method of identity verification will be described when integrating the driver's license 32 with the My Number card 31. The identity verification may be performed when issuing a renewal or new driver's license and / or when reserving a license AP in the extended use area of ​​the IC chip 21 of the My Number card 31.

[0028] <System configuration> FIG. 5 is a block diagram showing an example of the configuration of a personal identification system 2 according to this embodiment.

[0029] 5, the identity verification system 2 includes an authentication terminal 10, a reception terminal 40, a code reader 45, a business terminal 50, and a database server 60. However, the identity verification system 2 may not include some of these components, for example, the identity verification system 2 may not include the reception terminal 40 or the code reader 45.

[0030] The authentication terminal 10 and the code reader 45 are connected to the business terminal 50 via, for example, a USB cable. However, at least one of the authentication terminal 10 and the code reader 45 may be connected to the business terminal 50 via a communication network (for example, a wired LAN, a wireless LAN, Bluetooth (registered trademark)), etc.

[0031] The business terminal 50 can transmit and receive data to and from the reception terminal 40 and the database server 60, for example, via a communication network (for example, a wired LAN, a wireless LAN, the Internet, a mobile communication network, etc.).

[0032] The reception terminal 40 is a terminal that receives license renewal applications from users. The reception terminal 40 receives license renewal applications from users and issues a license renewal application form. A two-dimensional code (e.g., a QR code (registered trademark)) is printed on the application form. The two-dimensional code has code information corresponding to the user who made the application (i.e., the user's license). Note that a one-dimensional code (e.g., a barcode) may also be printed on the application form.

[0033] The code reader 45 reads the two-dimensional code printed on the application form, and transmits code information corresponding to the read two-dimensional code to the business terminal 50. The code reader 45 may also read a one-dimensional code.

[0034] The database server 60 manages, as a license information DB 61, the license information of all persons to whom a license is issued or renewed.

[0035] The business terminal 50 is a terminal used by an operator who is responsible for the task of integrating the driver's license 32 with the My Number card 31. The business terminal 50 includes a processor 51, a memory 52, an operation unit 53, and a display unit .

[0036] The processor 51 executes a computer program stored in the memory 52 to realize the functions of the business terminal 50. The functions of the business terminal 50 will be described as appropriate. The processor 51 may be interpreted as other terms such as a controller, a Central Processing Unit (CPU), or a control unit. The processor 51 may include at least one of a Graphics Processing Unit (GPU) or a Neural Processing unit (NPU). The processes described in this embodiment with the business terminal 50 as the main body may be interpreted as processes with the processor 51 as the main body.

[0037] The memory 52 stores computer programs and data that realize the functions of the business terminal 50. The memory 52 may be configured with a volatile storage medium and / or a non-volatile storage medium.

[0038] The operation unit 53 is an interface that accepts operations from an operator, and is, for example, a keyboard, a mouse, a touch panel, a microphone, etc.

[0039] The display unit 54 is, for example, a liquid crystal display or an organic EL display, and displays a screen. The screen of the display unit 54 is visible to the operator.

[0040] The authentication terminal 10 includes a processor 11, a memory 12, a face photographing camera 13, a card face photographing camera 14, an IC reader / writer 15, a display unit 16, and a placement unit 17. Although not shown in Fig. 5, the authentication terminal 10 may further include an input unit that accepts input operations from the user.

[0041] The processor 11 executes a computer program stored in the memory 12 to realize the functions of the authentication terminal 10. The processor 11 may be interpreted as other terms such as a controller, a CPU, or a control unit. The processor 11 may include at least one of a GPU or an NPU. The processes described in this embodiment mainly for the authentication terminal 10 may be interpreted as processes mainly for the processor 11.

[0042] The memory 12 stores computer programs and data that realize the functions of the authentication terminal 10. The memory 12 may be configured with a volatile storage medium and / or a non-volatile storage medium.

[0043] The placement section 17 is a portion on which the My Number card 31 is placed.

[0044] The face photographing camera 13 photographs the face of the user and generates a photographed face image.

[0045] The card face photographing camera 14 photographs the face of the My Number card 31 placed on the placement section 17 and generates a photographed image of the card face.

[0046] The IC reader / writer 15 reads data stored in the IC chip 21 of the My Number card 31 placed on the placement unit 17 in a non-contact manner (for example, using the Near Field Communication (NFC) method). The IC reader / writer 15 also writes data in a non-contact manner to the IC chip 21 of the My Number card 31 placed on the placement unit 17. Note that writing the data may involve adding new data to the IC chip 21, or may involve overwriting (updating) existing data with the new data.

[0047] The display unit 16 is, for example, a liquid crystal display or an organic EL display, and displays a screen to be checked by the user. The screen of the display unit 16 is visible to the user.

[0048] The My Number card 31 may be read as the first identification document. The driver's license 32 may be read as the second identification document. The facial image data recorded in the IC chip 21 of the My Number card 31 or the facial image printed on the face of the card may be read as the first facial image information. The facial image recorded on the driver's license 32 or printed on the face of the card (hereinafter referred to as the license facial image) may be read as the second facial image information.

[0049] <License renewal procedures> Fig. 6 is a flow chart showing an example of license renewal operation according to the present embodiment. Next, with reference to Fig. 6, an overview of license renewal and the operation for integrating the driver's license 32 with the My Number card 31 at that time will be described. Note that, although the present embodiment will be described taking license renewal as an example, the same applies to the case of new issuance of a license.

[0050] A user who wishes to renew a license visits a predetermined facility (e.g., a license center or a police station) and applies for license renewal at the reception terminal 40 (S11). At this time, the user can select whether or not to integrate the driver's license 32 with the My Number card 31. In this embodiment, the user selects to integrate the driver's license 32 with the My Number card 31. At this time, the authentication terminal 10 may have the user place the My Number card 31 with which the driver's license 32 is to be integrated, and may secure the license AP in advance in the IC chip 21 of the My Number card 31. Note that in step S11, instead of the user directly operating the reception terminal 40 to apply for license renewal (issue an application form), the user may present a license renewal postcard or the like to a staff member or operator, and the staff member or operator may operate the reception terminal 40 to apply for license renewal (issue an application form).

[0051] The user takes an aptitude test (S13), has his / her photograph taken (S14), and attends a training course (S15) in the same manner as in normal license renewal. The face image of the user taken in step S14 may be linked to the specific license information of the user and registered in the license information DB 61 of the database server 60.

[0052] The user is issued with a driver's license 32 (S15). At this time, the operator has the user place the My Number card 31 on the authentication terminal 10, and the authentication terminal 10 writes the user's specific license information into the license AP of the IC chip 21 of the My Number card 31. As a result, the user is issued with the My Number card 31 integrated with the driver's license.

[0053] <Sequence diagram> 7 is a sequence diagram showing an example of the operation of issuing an application form and collecting a license in the identity verification system 2 according to the present embodiment. This process corresponds to the details of the process of applying for license renewal to the reception terminal in step S11 in FIG.

[0054] The reception terminal 40 displays a menu screen (S101).

[0055] The user selects the license renewal procedure from the menu screen of the reception terminal 40 (S102).

[0056] The reception terminal 40 displays a screen for selecting whether or not to integrate the driver's license 32 with the My Number card 31, and the user selects to integrate the driver's license 32 with the My Number card 31 (S103).

[0057] Since integration was selected in step S103, the reception terminal 40 transmits an instruction to place the My Number card to the authentication terminal 10 (S104).

[0058] The authentication terminal 10 receives the instruction to place the My Number card from the reception terminal 40, and displays a screen prompting the user to place the My Number card (S105). The user places the My Number card 31 on the authentication terminal 10.

[0059] The authentication terminal 10 photographs the user's face with the face camera 13 and performs face matching to confirm whether the user is the person who owns the My Number card (S106). For example, the authentication terminal 10 compares the photographed face image photographed by the face camera 13 with face image data in the IC chip 21 of the My Number card 31 or a face image printed on the face of the My Number card 31.

[0060] If the face matching fails (S107: NO), the authentication terminal 10 performs a predetermined error process (S108). At this time, the authentication terminal 10 may notify the operator of the failure via the service terminal 50, or may re-perform the face matching in step S106.

[0061] If face matching is successful (S107: YES), the authentication terminal 10 transmits a notification of success of face matching to the business terminal 50 (S109).

[0062] The business terminal 50 receives a notification of successful face authentication from the authentication terminal 10, and sends an instruction to reserve a license AP in the extended usage area of ​​the IC chip 21 of the My Number card 31 (hereinafter referred to as a license AP reservation instruction) to the authentication terminal 10 (S110).

[0063] The authentication terminal 10 receives a license AP reservation instruction from the business terminal 50, and reserves the license AP in the extended use area of ​​the IC chip 21 of the My Number card 31 (S111).

[0064] After completing the reservation of the licensed AP, the authentication terminal 10 transmits a reservation completion notification to the operations terminal 50 (S111). The business terminal 50 receives the allocation completion notification from the authentication terminal 10, and transmits an end notification to the authentication terminal 10 (S113).

[0065] The authentication terminal 10 receives the completion notification from the service terminal 50 and transmits the completion notification to the reception terminal 40 (S114). The authentication terminal 10 also displays on the display unit 16 an image indicating that writing of the license AP has been completed and prompting the user to remove the My Number card (S115), and ends this process.

[0066] The reception terminal 40 receives the completion notification from the authentication terminal 10, and issues an application form on which a two-dimensional code corresponding to the user (or the driver's license 32) is printed (S116).

[0067] The reception terminal 40 displays a screen indicating that the driver's license 32 will be withdrawn (S117), and ends this process.

[0068] By the above process, an area for the license AP is reserved in advance in the IC chip 21 of the My Number card 31.

[0069] FIG. 8 is a sequence diagram showing a processing example of the identity verification system 2 according to the present embodiment. FIG. 9 is a sequence diagram showing a processing example continued from FIG. 8. FIG. 10 is a sequence diagram showing a processing example continued from FIG. 9. FIG. 11 is a diagram showing a first screen example displayed by the business terminal 50 according to the present embodiment. FIG. 12 is a diagram showing a second screen example displayed by the business terminal 50 according to the present embodiment. FIG. 13 is a diagram showing a third screen example displayed by the business terminal 50 according to the present embodiment. FIG. 14 is a diagram showing a fourth screen example displayed by the business terminal 50 according to the present embodiment. FIG. 15 is a diagram showing a fifth screen example displayed by the business terminal 50 according to the present embodiment. FIG. 16 is a diagram showing a sixth screen example displayed by the business terminal 50 according to the present embodiment. FIG. 17 is a diagram showing a first screen example displayed by the authentication terminal 10 according to the present embodiment. FIG. 18 is a diagram showing a second screen example displayed by the authentication terminal 10 according to the present embodiment. FIG. 19 is a diagram showing a third screen example displayed by the authentication terminal 10 according to the present embodiment. FIG. 20 is a diagram showing a fourth screen example displayed by the authentication terminal 10 according to the present embodiment. Fig. 21 is a diagram showing a fifth example of a screen displayed by the authentication terminal 10 according to the present embodiment. Fig. 22 is a diagram showing a sixth example of a screen displayed by the authentication terminal 10 according to the present embodiment. Next, with reference to Figs. 8 to 22, the process of writing specific license information to the My Number card 31 by the identity verification system 2 and the identity verification process at that time will be described in detail. Note that the processes in Figs. 8 to 10 correspond to the details of the license issuance process in step S15 in Fig. 6.

[0070] The authentication terminal 10 displays an image prompting the user to place the My Number card as shown in Fig. 17 (S201). The user places the My Number card 31 on the placement unit 17 of the authentication terminal 10 (S202).

[0071] The business terminal 50 displays an initial screen as shown in FIG. 11 (S203).

[0072] The user causes the code reader 45 to read the two-dimensional code printed on the application form (S204). The code reader 45 transmits code information corresponding to the read two-dimensional code to the business terminal 50, and the business terminal 50 receives the code information (S205). The code information may be, for example, the license number of the user's driver's license 32.

[0073] The business terminal 50 transmits a request for specific license information corresponding to the code information to the database server 60, and the database server 60 receives the request (S206).

[0074] The database server 60 searches the license information DB 61 for specific license information corresponding to the received code information (S207). The specific license information includes a licensed face image of the user's driver's license 32. The licensed face image may be recorded or printed on the driver's license 32, or may be newly photographed in step S13 of FIG. 6.

[0075] The database server 60 transmits the specific license information including the licensed face image found in the search to the business terminal 50, and the business terminal 50 receives the information (S208).

[0076] The business terminal 50 extracts facial features from the licensed face image (S209).

[0077] The business terminal 50 temporarily stores the specific license information including the licensed face image and the facial feature amount of the licensed face image extracted in step S209 in the memory 52 (S210). At this time, the business terminal 50 displays the licensed face image in the display area of ​​the specific license information as shown in FIG.

[0078] After the operator confirms that the My Number card 31 is placed on the authentication terminal 10, the operator presses the button 301 for executing integration on the screen displayed on the business terminal 50 as shown in FIG. 12 (S211).

[0079] When button 301 for executing integration is pressed in step S211, business terminal 50 transmits a read instruction to authentication terminal 10 (S212).

[0080] The authentication terminal 10 receives the reading instruction in step S212, photographs the face of the My Number card 31 with the face photographing camera 14 to generate a photographed image of the face, performs OCR processing on the photographed image of the face, and obtains face information (S213).

[0081] Next, the continuation of FIG. 8 will be described with reference to FIG.

[0082] The authentication terminal 10 judges whether or not the verification number B has been acquired from the card face information acquired in step S213 (S221).

[0083] If the authentication terminal 10 is unable to acquire the verification number B (S221: NO), it performs a predetermined error process (S222). At this time, the authentication terminal 10 may notify the operator (service terminal 50) of the error, or may re-execute step S213.

[0084] If the authentication terminal 10 can acquire the verification number B (S221: YES), it accesses the IC chip 21 of the My Number card 31 using the verification number B as a key (S223).

[0085] The authentication terminal 10 judges whether or not the IC chip 21 has been accessed (S224).

[0086] If the authentication terminal 10 is unable to access the IC chip 21 (S224: NO), it performs a predetermined error process (S225). At this time, the authentication terminal 10 may notify the operator (service terminal 50) of the error, or may re-execute step S213.

[0087] If the authentication terminal 10 can access the IC chip 21 (S224: YES), it acquires personal information and face image data from the IC chip 21 (S226).

[0088] The authentication terminal 10 extracts facial features from the acquired facial image data (S227). Note that instead of the above-mentioned method of acquiring facial image data from the IC chip 21, the authentication terminal 10 may acquire personal information and a facial image of the face of the card from the image of the face of the card captured in step S213, and extract facial features from the facial image.

[0089] The authentication terminal 10 transmits the personal information, the facial image data, and the facial feature amounts of the facial image data to the business terminal 50, which receives this information (S228).

[0090] The business terminal 50 temporarily stores the received personal information, face image data, and face feature amounts of the face image data in the memory 52 (S229).

[0091] The authentication terminal 10 photographs the user's face with the face camera 13 and generates a photographed face image (S230). At this time, the authentication terminal 10 may display a screen requesting the user to place their face within a frame, as shown in Fig. 19, and may also display the face image being photographed by the face camera 13.

[0092] The authentication terminal 10 extracts facial features from the captured face image (S231).

[0093] The authentication terminal 10 transmits the photographed face image and the facial feature amounts of the photographed face image extracted in step S231 to the business terminal 50, and the business terminal 50 receives the information (S232).

[0094] The business terminal 50 temporarily stores the received photographed face image and the facial feature amount of the photographed face image in the memory 52 (S233).

[0095] The processes of steps S230 to S233 may be executed before step S213 shown in FIG.

[0096] The business terminal 50 compares the facial feature amount of the license face image temporarily stored in step S210, the facial feature amount of the facial image data of the My Number card 31 temporarily stored in step S229, and the facial feature amount of the photographed face image temporarily stored in step S233 (S234). At this time, the business terminal 50 may display a screen shown in FIG. 13, and first compare the facial feature amount of the license face image with the facial feature amount of the facial image data of the My Number card 31 as the first comparison. Then, if the first comparison is successful, the business terminal 50 may next display a screen shown in FIG. 14, and compare the facial feature amount of the facial image data of the My Number card 31 with the facial feature amount of the photographed face image as the second comparison. This allows the operator to know the progress of the comparison and to know which comparisons have succeeded or failed. Also, at this time, the authentication terminal 10 may display an image indicating that identity verification is in progress, as shown in FIG. 20. This allows the user to know that identity verification is in progress.

[0097] The business terminal 50 judges whether or not all of the features of the license face image, the face features of the face image data of the My Number card 31, and the face features of the photographed face image have been successfully matched (S235). In other words, the business terminal 50 judges whether or not both the driver's license 32 and the My Number card 31 belong to the user.

[0098] If the collation in step S234 fails (S235: NO), the business terminal 50 executes a predetermined error process (S236). At this time, the business terminal 50 may instruct the authentication terminal 10 to execute step S226 and subsequent steps again.

[0099] If the matching in step S234 is successful (S235: YES), the business terminal 50 transmits a notification of successful matching to the authentication terminal 10 (S237).

[0100] The authentication terminal 10 receives the notification of successful matching, and displays a screen indicating that identity verification was successful and a screen indicating that writing of the specific license information to the My Number card will begin (S238).Then, the authentication terminal 10 transmits a request to start writing to the services terminal 50 (S239).

[0101] Next, the continuation of FIG. 9 will be described with reference to FIG.

[0102] When the business terminal 50 receives the request to start writing in step S239, it transmits the specific license information to the authentication terminal 10, and the authentication terminal 10 receives the specific license information (S251). Note that the business terminal 50 may execute the same processes as steps S204 to S208 shown in Fig. 8 immediately before step S251 to acquire the specific license information from the database server 60.

[0103] The authentication terminal 10 writes the received specific license information into the license AP secured in the IC chip 21 of the My Number card 31 (S252). At this time, the authentication terminal 10 may display a screen indicating that the license information is being written, as shown in FIG.

[0104] After completing the writing of the specific license information, the authentication terminal 10 may display a screen indicating that writing of the license information has been completed (S253).

[0105] The authentication terminal 10 transmits a write completion notification to the operations terminal 50 (S254).

[0106] The business terminal 50 receives the writing completion notification from the authentication terminal 10, and displays a screen indicating the writing completion as shown in FIG. 15 (S255).

[0107] When the operator presses the take out button 390 on the screen shown in FIG. 15 (S256), the business terminal 50 transmits an end instruction to the authentication terminal 10 (S257).

[0108] The authentication terminal 10 receives the end instruction from the operations terminal 50, and displays a screen such as that shown in FIG. 22 indicating that writing of the license information has been completed and prompting the user to remove the My Number card (S258).

[0109] The user removes the My Number card 31 from the authentication terminal 10 (S259).

[0110] Thereafter, the authentication terminal 10 may return the process to step S201. The business terminal 50 may return the process to step S203.

[0111] Through the above process, if it is possible to authenticate that the driver's license 32 and My Number card 31 belong to the user, the specific license information is written to the My Number card 31, thereby enabling highly reliable identity verification when integrating the driver's license 32 with the My Number card 31, thereby preventing fraud by another user and / or preventing the erroneous integration of another user's information.

[0112] <Matching process variations> FIG. 23 is a diagram for explaining a first method of the first collation and the second collation according to the present embodiment.

[0113] 9, the business terminal 50 first compares the license face image with the face image data (or the face image on the face) of the My Number card 31 as the first comparison, and then compares the face image data (or the face image on the face) of the My Number card 31 with the photographed face image as the second comparison. However, the order and combination of the first comparison and the second comparison may be any. For example, the photographed face image may be compared with the face image data (or the face image on the face) of the My Number card 31 as the first comparison, and the face image data (or the face image on the face) of the My Number card 31 may be compared with the license face image as the second comparison.

[0114] In the first comparison, the photographed face image is compared with the face image data of the My Number Card 31 (or the face image on the face of the card) or the face image on the driver's license to confirm the identity of the person, and in the second comparison, instead of comparing the face image, the name, date of birth, etc. recorded in the IC chip 21 of the My Number Card 31 (or printed on the face of the card) may be compared with the name, date of birth, etc. associated with the driver's license information to confirm the person's identity.

[0115] FIG. 24 is a diagram for explaining a second method of the first collation and the second collation according to the present embodiment.

[0116] In the second method, the first matching may be performed by matching the photographed face image with the face image data (or the face image on the card) of the My Number card 31, and the second matching may be performed by matching the photographed face image with the face image on the license. In the second method, the first matching may be performed first, and then the second matching. However, the first matching and the second matching may be performed simultaneously (in parallel). This can shorten the matching time.

[0117] Furthermore, the business terminal 50 may store the photographed face image used in the first matching in the memory 52 and reuse it in the second matching. In this case, the business terminal 50 may delete the photographed face image temporarily stored from the memory 52 after using it in the second matching.

[0118] 9 (for example, at least one of the first matching or the second matching) may be performed by the authentication terminal 10. In this case, the authentication terminal 10 may transmit a matching result to the business terminal 50, and the business terminal 50 may determine whether or not the matching in step S235 is successful based on the received matching result.

[0119] In addition, (C1) if the business terminal 50 (or the authentication terminal 10) succeeds in matching the captured face image with the face image data (or the face image on the card) of the My Number card 31 as the first matching, it may write the specific license information into the license AP of the IC chip 21 of the My Number card 31, and then, as the second matching, perform a comparison between the face image data (or the face image on the card) of the My Number card 31 and the license face image included in the specific license information.

[0120] In addition, (C2) the business terminal 50 (or the authentication terminal 10) may, after writing the specific license information into the license AP of the IC chip 21 of the My Number card 31, perform a first comparison between the captured face image and the face image data of the My Number card 31 (or the face image on the card), and may perform a second comparison between the face image data of the My Number card 31 (or the face image on the card) and the license face image included in the specific license information.

[0121] Furthermore, when the above (C1) or (C2) is adopted, the licensed face image contained in the specific license information written in the IC chip 21 of the My Number card 31 can be used, so the business terminal 50 (or the authentication terminal 10) does not need to re-obtain the specific license information and the licensed face image from the database server 60 in the second comparison.

[0122] <Modification> In the above, an example has been described in which information on a driver's license 32 is written to the IC chip 21 of the My Number card 31, but the information written to the IC chip 21 of the My Number card 31 is not limited to information on a driver's license 32. For example, this embodiment is also applicable to the case in which information on a card used for personal identification, such as information on a residence card, is written to the My Number card 31.

[0123] In addition, the My Number card 31 and the driver's license 32 may be electronically registered as, for example, a wallet application in a user terminal such as a smartphone. For example, the electronic certificate A of the My Number card 31 and the electronic certificate B of the driver's license 32 are stored in advance in the wallet application of the user's user terminal. When updating the data of the electronic certificate B, the photographed face image of the user himself / herself, the face image data of the electronic certificate A, and the license face image of the specific license information or the license face image data stored in the electronic certificate B may be compared, and if all the comparisons are successful, the data of the electronic certificate B may be updated.

[0124] (Summary of this embodiment) The above description of the present embodiment discloses the following techniques.

[0125] <Technology 1> An identity verification method for verifying the identity of a person based on an identity document performs a first comparison to compare photographed facial image information of the person's face with first facial image information based on a first identity document, and if the first comparison is successful, writes information of a second identity document different from the first identity document into a writable area of ​​an IC chip on the first identity document. As a result, if the first comparison is successful, i.e., if identity verification is successful, information from the second identification document is written into the IC chip of the first identification document, thereby preventing fraud by another person or erroneous writing of another person's information.

[0126] <Technology 2> In the identity verification method described in Technology 1, a second comparison is performed to compare the first facial image information with second facial image information based on the second identity verification document, and if the first comparison and the second comparison are successful, information from the second identity verification document is written into a writable area of ​​an IC chip on the first identity verification document. As a result, if the first and second matching are successful, i.e., if identity verification is successful, information from the second identification document is written into the IC chip of the first identification document, allowing identity verification to be performed with high reliability and preventing fraud by another person and / or preventing the erroneous writing of another person's information.

[0127] <Technology 3> In the identity verification method described in Technology 1, a second comparison is performed to compare the captured facial image information with second facial image information based on the second identity verification document, and if the first comparison and the second comparison are successful, information from the second identity verification document is written into a writable area of ​​an IC chip on the first identity verification document. As a result, if the first and second matching are successful, i.e., if identity verification is successful, information from the second identification document is written into the IC chip of the first identification document, thereby preventing fraud by another person or erroneous writing of another person's information.

[0128] <Technology 4> In the personal identification method described in Technique 3, the photographed face image information used in the first matching is temporarily stored, and the second matching is performed using the temporarily stored photographed face image information. This allows the photographed face image information temporarily stored for use in the first matching to be reused in the second matching.

[0129] <Technology 5> In the personal identification method described in Technology 3, if the first matching is successful, the second matching is performed. As a result, if the first comparison fails, the second comparison becomes unnecessary, and it is possible to prevent unnecessary processing from being executed.

[0130] <Technology 6> In the identity verification method according to any one of techniques 1 to 5, the first identity verification document is a My Number card, and the second identity verification document is a driver's license or a residence card. This will allow a driver's license or residence card to be integrated into the My Number card.

[0131] <Technology 7> An identification device that identifies a person based on an identification document includes a processor and a memory, and the processor cooperates with the memory to perform a first comparison that compares photographed facial image information of the person's face with first facial image information based on a first identification document, and if the first comparison is successful, writes information of a second identification document different from the first identification document into a writable area of ​​an IC chip on the first identification document. As a result, if the first comparison is successful, i.e., if identity verification is successful, information from the second identification document is written into the IC chip of the first identification document, thereby preventing fraud by another person or erroneous writing of another person's information.

[0132] <Technology 8> An identity verification program for verifying the identity of a person based on an identity verification document causes a device to perform a first comparison to compare photographed facial image information of the person's face with first facial image information based on a first identity verification document, and if the first comparison is successful, to write information of a second identity verification document different from the first identity verification document into a writable area of ​​an IC chip of the first identity verification document. As a result, if the first comparison is successful, i.e., if identity verification is successful, information from the second identification document is written into the IC chip of the first identification document, thereby preventing fraud by another person or erroneous writing of another person's information.

[0133] Although the embodiments have been described above with reference to the accompanying drawings, the present disclosure is not limited to such examples. It is clear that a person skilled in the art can conceive of various modifications, corrections, substitutions, additions, deletions, and equivalents within the scope of the claims, and it is understood that these also belong to the technical scope of the present disclosure. In addition, the components in the above-mentioned embodiments may be arbitrarily combined within the scope of the invention. [Industrial Applicability]

[0134] The technology disclosed herein is useful for identity verification when combining multiple identity verification documents. [Explanation of symbols]

[0135] 2. Identity Verification System 10 Authentication terminal 11 Processors 12. Memory 13 Face camera 14 Ticket face camera 15 IC Reader / Writer 16 Display 17 Placement section 21 IC chip 22 Face image 31 My Number Card 32 Driver's License 40 Reception terminal 45 Code Reader 50 Business terminals 51 Processors 52 Memory 53 Operation section 54 Display section 60 Database Server 61 License Information DB 301,390 Buttons

Claims

1. An identity verification method using an identity verification system that verifies the identity of a person based on an identity verification document, comprising: The identity verification system includes a processor and a memory, the processor cooperating with the memory to: performing a first comparison in which photographed face image information of the face of the person is compared with first face image information based on a first identification document; performing a second comparison in which the first facial image information is compared with second facial image information based on a second identification document different from the first identification document; if the first verification and the second verification are successful, writing information of the second identification document into a writable area of ​​an IC chip of the first identification document; How you verify your identity.

2. A method for verifying the identity of a person using an identity verification system that verifies the identity of a person based on an identity verification document, comprising: The identity verification system includes a processor and a memory, the processor cooperating with the memory to: performing a first comparison in which photographed face image information of the face of the person is compared with first face image information based on a first identification document; performing a second comparison in which the photographed face image information is compared with second face image information based on a second identification document different from the first identification document; if the first verification and the second verification are successful, writing information of the second identification document into a writable area of ​​an IC chip of the first identification document; How you verify your identity.

3. Temporarily storing the photographed face image information used in the first matching; The second matching is performed using the photographed face image information temporarily stored. The method for verifying identity according to claim 2.

4. If the first comparison is successful, the second comparison is performed. The method for verifying identity according to claim 2.

5. The first identification document is a My Number card, and the second identification document is a driver's license or a residence card. The method for verifying identity according to claim 1 or 2.

6. An identity verification device for verifying the identity of a person based on an identity document, the device comprising a processor and a memory, the processor cooperating with the memory to: performing a first comparison in which photographed face image information of the face of the person is compared with first face image information based on a first identification document; performing a second comparison in which the first facial image information is compared with second facial image information based on a second identification document different from the first identification document; if the first verification and the second verification are successful, writing information of the second identification document into a writable area of ​​an IC chip of the first identification document; Identity verification device.

7. An identity verification program for verifying the identity of a person based on an identity document, performing a first comparison in which photographed face image information of the face of the person is compared with first face image information based on a first identification document; performing a second comparison in which the first facial image information is compared with second facial image information based on a second identification document different from the first identification document; if the first verification and the second verification are successful, writing information of the second identification document into a writable area of ​​an IC chip of the first identification document; An identity verification program that causes the device to execute the above steps.

8. An identity verification system for verifying the identity of a person based on an identity document, comprising a processor and a memory, the processor operating in conjunction with the memory to: performing a first comparison in which photographed face image information of the face of the person is compared with first face image information based on a first identification document; performing a second comparison in which the first facial image information is compared with second facial image information based on a second identification document different from the first identification document; if the first verification and the second verification are successful, writing information of the second identification document into a writable area of ​​an IC chip of the first identification document; Identity verification system.

Images