Account management server, information processing method, and program

Abstract

To provide an account management server capable of carrying out procedures for personal authentication simply without requiring work for personal authentication in advance.SOLUTION: An account management server comprises an account holder information database for storing data of a plurality of account holders who hold an account, and a server control unit. The server control unit searches account holder data from the account holder information database based on contact data in a phonebook stored in a first terminal received from the first terminal used by a first user applying for account opening or data of people connected with the first user on a social networking service; and when the searched account holder agrees to become a guarantor of the first user, permits the account opening.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to an account management server, an information processing method, and a program. [Background technology]

[0002] Conventionally, when a user opens a new bank account, a procedure is required to verify whether the user is the person in question. For example, Patent Document 1 discloses a technology in which contract information such as the user's name, address, and contract number is obtained from the business operator's business system, and if the contents of the contract information match the contents of the account application information, the identity verification is deemed successful and the account is opened. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2003-122922 A Summary of the Invention [Problem to be solved by the invention]

[0004] In Patent Document 1, the user must enter the name of the business to be used for identity verification and the contract number with that business on the account application screen. Therefore, when applying for an account, the user must take steps such as deciding in advance which business to use for identity verification, finding the contract number with that business in advance, and having the contract document with that business on hand. Therefore, there is a problem in that identity verification requires steps to be taken in advance, making it difficult to easily verify the identity of the user.

[0005] The present invention is devised to solve the above-mentioned problems, and aims to provide an account management server, an information processing method, and a program that can easily carry out identity authentication procedures without requiring prior work for identity verification. [Means for solving the problem]

[0006] In order to achieve the above object, the account management server according to the present invention comprises: an account holder information database for storing data of a plurality of account holders who hold accounts; a server control unit that searches for data of the account holder from the account holder information database based on contact data in a phone book stored in a first terminal used by a first user who applies to open the account or data of people connected to the first user through a social networking service, received from the first terminal, and permits the opening of the account if the searched account holder agrees to be a guarantor for the first user; Equipped with. Effect of the Invention

[0007] According to the account management server of the present invention, a third party who has a pre-existing connection with the user and who holds an account can give permission from a terminal to act as the user's guarantor, making it possible to easily complete identity authentication procedures without the need for prior work to verify the user's identity. [Brief description of the drawings]

[0008] [Figure 1] 1 is a diagram showing an overall configuration of an information processing system according to a first embodiment of the present invention. [Diagram 2] 2 is a block diagram of a bank server in the information processing system shown in FIG. 1. [Diagram 3] FIG. 3 is a diagram showing a table of an account holder information database stored in the bank server shown in FIG. 2. [Figure 4A] 2 is a front view of a terminal in the information processing system shown in FIG. [Figure 4B] 2 is a block diagram of a terminal in the information processing system shown in FIG. 1. [Figure 4C] 2 is a diagram of information processing blocks of the terminal shown in FIG. 1. [Figure 4D]2 is a diagram illustrating an example of a hardware configuration of a terminal in the information processing system illustrated in FIG. [Figure 5A] 2 is a diagram showing a table of an authentication biometric information database acquired from the terminal shown in FIG. 1. [Figure 5B] 2 is a diagram showing a table in a habit database of an authentication user acquired from the terminal shown in FIG. 1. [Figure 5C] 2 is a diagram showing a tilt information table of the terminal shown in FIG. 1. [Figure 6A] 4 is a flowchart of an authentication process according to the present embodiment. [Figure 6B] 6B is a continuation of the flowchart of the authentication process shown in FIG. 6A. [Figure 7] 1 is a flowchart showing an overall bank account opening process according to an embodiment. [Figure 8] 8 is a flowchart showing an account opening setting process in the bank account opening process shown in FIG. 7. [Figure 9] 8 is a flowchart showing a guarantor determination process in the bank account opening process shown in FIG. 7. [Figure 10] 8 is a flowchart showing an account opening permission process in the bank account opening process shown in FIG. 7. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] (Embodiment 1) An information processing system, an information processing method, and a program according to a first embodiment of the present invention will be described in detail below with reference to the drawings, in which the same or corresponding parts are denoted by the same reference numerals.

[0010] The information processing system 100 according to the first embodiment is a system that, when an application to open a new account is made from a terminal used by a user, searches for account holders among the contacts in the phone book stored on the user's terminal and people connected to the user via SNS (Social Networking Service), and has the account holders vouch for the user's identity, thereby reducing the burden on the user associated with procedures requiring identity verification.

[0011] The configuration of an information processing system 100 is shown in Fig. 1. The information processing system 100 includes a bank server 1 that authenticates a user as the user himself / herself, and a first terminal 4A used by a first user, a second terminal 4B used by a second user, and a third terminal 4C used by a third user. Here, the first terminal 4A, the second terminal 4B, and the third terminal 4C are collectively referred to as terminal 4. The bank server 1 and the terminals 4 are connected to each other via a network 2.

[0012] Next, the configuration of the bank server 1 is shown in Figure 2. The bank server 1 includes a server control unit 11 and a server storage unit 12. The server control unit 11 executes an account management processing program 110 that opens a new account and processes various accounts. The account management processing program 110 will be described in detail later. The server storage unit 12 also stores an account holder information database 120 that stores various data on account holders who have opened accounts. The bank server 1 is an example of an account management server in the claims. An account holder is an example of an account holder in the claims, and the account holder information database 120 is an example of an account holder information database in the claims.

[0013] An example of a table of the account holder information database 120 stored in the server storage unit 12 is shown in Fig. 3. The table of the account holder information database 120 includes items such as the account number, the account type, the name, address, date of birth, transaction history with the bank, the number of years the user has held the account, and the last use date which is the date the user last used the account. For example, for the account number 12346 shown in Fig. 3, the account type is ordinary, the account holder's name is AAA, the address is △△, ●○-ku, Tokyo, the date of birth is 1965 / 9 / 2, the transaction history is mortgage and salary transfer, the number of years the account has been held is 25, and the last use date is 2019 / 10 / 22, etc. are stored.

[0014] The terminal 4 in this embodiment 1 is a so-called smartphone, and has an authentication function that uses biometric information such as a face image, fingerprint, and voiceprint of the user, as well as the user's habits based on the user's unique behavior when operating the terminal 4, the operating state, etc.

[0015] 4A, the terminal 4 includes, on the front side of the terminal 4, an in-camera 41A that captures the user's face, a speaker 42A, a microphone (microphone) 42B for calls, a tilt detection unit 43 that detects the tilt of the terminal 4, a touch panel that also serves as an operation input unit 44 and a display unit 49, a left fingerprint sensor 45A and a right fingerprint sensor 45B that detect the user's fingerprint, and a position detection unit 46 that detects the current position of the terminal 4. The terminal 4 also includes, on the back side, a main camera 41B that can capture images of people, scenery, objects, etc. as seen by the user.

[0016] Hereinafter, the in-camera 41A and the main camera 41B are collectively referred to as the photographing unit 41. Hereinafter, the speaker 42A and the microphone (microphone) 42B for calls are collectively referred to as the audio input / output unit 42. Hereinafter, the left fingerprint sensor 45A and the right fingerprint sensor 45B are collectively referred to as the fingerprint detection unit 45.

[0017] 4B is a block diagram showing the configuration of the terminal 4. The terminal 4 includes a communication unit 40, an imaging unit 41, a voice input / output unit 42, a tilt detection unit 43, an operation input unit 44, a fingerprint detection unit 45, a position detection unit 46, a terminal storage unit 47, a terminal control unit 48, and a display unit 49.

[0018] The communication unit 40 communicates with the bank server 1 via the network 2 shown in Fig. 1 to transmit and receive data, and includes a data communication unit that communicates between the first terminal 4A and the second terminal 4B and can transmit and receive data, and a voice communication unit that transmits and receives wireless signals for telephone communication with a base station (not shown). The data communication unit can be configured using a wireless LAN (Local Area Network), Wi-fi (registered trademark), Bluetooth (registered trademark), etc. The voice communication unit can be configured using a communication device that transmits and receives wireless signals for telephone communication with the base station.

[0019] The photographing unit 41 includes an in-camera 41A and a main camera 41B shown in Fig. 4A. For the photographing unit 41, various cameras capable of photographing still images or moving images and acquiring the photographed still images or moving images, such as a camera using an imaging element such as a CCD (Charge Coupled Device) or a CMOS (Complementary Metal Oxide Semiconductor) image sensor, or a video camera, can be used.

[0020] The audio input / output unit 42 includes a speaker 42A shown in Fig. 4A and a microphone 42B for calls. The speaker 42A outputs audio received in a voice call, music data acquired from the outside via the network 2 shown in Fig. 1, and the like. The microphone 42B for calls is a device that picks up the user's voice.

[0021] The tilt detection unit 43 is a device capable of detecting the tilt, shaking, etc. of the terminal 4. The tilt detection unit 43 can be configured using various sensors capable of detecting the tilt of the terminal 4, such as an acceleration sensor, an angle sensor, a magnetic sensor that detects geomagnetism, etc. The number of sensors, such as the acceleration sensor and the angle sensor, may be either one or multiple. Also, the type of sensor may be either one or multiple types.

[0022] The operation input unit 44 is a device capable of inputting an operation from the user shown in Fig. 4A. The fingerprint detection unit 45 is a sensor that detects the user's fingerprint. The fingerprint detection unit 45 includes a left fingerprint sensor 45A and a right fingerprint sensor 45B shown in Fig. 4A. Note that the fingerprint detection unit 45 is not limited to a fingerprint sensor, and any sensor, device, etc. that can detect the user's fingerprint may be used.

[0023] The position detection unit 46 is a device capable of detecting the current position of the terminal 4. The position detection unit 46 can be configured using a device capable of detecting the current position of the terminal 4, such as a Global Positioning System (GPS).

[0024] The terminal memory unit 47 includes a bank application program 471 capable of processing various bank transactions, an authentication processing program 472 for authenticating a user, an authentication biometric information database 473 that compiles the user's biometric information acquired by the terminal 4, an authentication user habit database 474 that compiles the user's habit data acquired by the terminal 4, and a tilt information table 475 for storing the tilt state of the terminal 4.

[0025] Bank application program 471 is a program capable of processing various bank transactions such as opening an account, depositing money, withdrawing money, etc. Bank application program 471 is executed by processor 51 of terminal 4 shown in Fig. 4C when a user selects an icon displayed on display unit 49 shown in Fig. 4A via operation input unit 44 such as a touch panel. The operation of bank application program 471 will be described in detail later.

[0026] The authentication processing program 472 is a program for authenticating that the user using the terminal 4 is the user. The authentication biometric information database 473 is a database for storing biometric information such as a face image, fingerprint, and voiceprint of a user, which is used when the authentication processing program 472 authenticates that the user is the user. The authentication user habit database 474 is a database for storing data on the user's habit due to a specific behavior, an operation state, etc., when the user operates the terminal 4, which is used when the authentication processing program 472 authenticates that the user is the user.

[0027] The terminal control unit 48 executes various programs stored in the terminal storage unit 47. In addition, the terminal control unit 48 acquires various data from the communication unit 40, the photographing unit 41, the audio input / output unit 42, the tilt detection unit 43, the operation input unit 44, the fingerprint detection unit 45, and the position detection unit 46, processes the data, and stores the data in various databases in the terminal storage unit 47.

[0028] Display unit 49 displays the processing contents and processing results of various programs executed by terminal control unit 48. Display unit 49 can also display images such as still images and videos captured by imaging unit 41, and data input from operation input unit 44. Display unit 49 is layered on operation input unit 44, and constitutes the touch panel shown in FIG. 4A.

[0029] Next, an example of the hardware configuration of the terminal 4 will be described with reference to Fig. 4C. The terminal 4 includes a processor 51 that executes various programs, a memory 52 for expanding the various programs, a display controller 53 that outputs various display data, a display device 54 that displays various display data, an I / O port 55 for connecting the imaging unit 41, the audio input / output unit 42, etc., a storage device 56 that stores various programs and various data, and a communication device 57 that communicates with the outside and transmits and receives data. The processor 51, the memory 52, the display controller 53, the display device 54, the I / O port 55, the storage device 56, and the communication device 57 are mutually connected via a data bus 58.

[0030] The processor 51 reads out various programs stored in the storage device 56, expands them in the memory 52, and executes them. The processor 51 can be configured using a processing device such as a CPU (Central Processing Unit) or an MPU (Micro-processing Unit). The memory 52 can be configured using a storage element and a storage medium such as a RAM (Random Access Memory) or a volatile or non-volatile semiconductor memory such as a flash memory.

[0031] The display controller 53 is a controller that outputs various display data to the display device 54. The display controller 53 can be configured using a video signal output device such as a video card, a GPU (Graphics Processing Unit), a graphics board, etc. The display device 54 can be configured using a display device such as an LCD (Liquid Crystal Display), an organic EL (Electroluminescence) monitor, etc.

[0032] The I / O port 55 is a connection port that can connect the imaging unit 41, the audio input / output unit 42, the tilt detection unit 43, the operation input unit 44, the fingerprint detection unit 45, and the position detection unit 46. The I / O port 55 can be configured using various ports that can connect devices, such as a USB (Universal Serial Bus) port, an IEEE1394 port, etc.

[0033] The storage device 56 is a device that stores various programs executed by the processor 51 and various data used by the various programs. The storage device 56 can be configured using a storage device such as a hard disk drive (HDD) or a solid state drive (SSD).

[0034] The communication device 57 is a device capable of transmitting and receiving various data between the bank server 1 and the cloud 3 via the network 2 shown in Fig. 1. The communication device 57 can be configured using various devices that perform communication via a wireless LAN (Local Area Network), Bluetooth (registered trademark), wireless communication, etc.

[0035] The authentication processing program 472 stored in the terminal storage unit 47 shown in Fig. 4B is executed by the processor 51 of the terminal 4 shown in Fig. 4C, whereby the information processing block shown in Fig. 4D is realized in the terminal control unit 48. As a result, the terminal 4 can authenticate the user based on biometric information such as the user's face image, fingerprint, voiceprint, etc., and data on the user's habits based on the user's unique behavior when operating the terminal 4, the operating state, etc., and execute various functions in the terminal 4.

[0036] The information processing block includes an authentication information acquisition unit 485 that acquires biometric information for authentication and user habit data from the communication unit 40, the photographing unit 41, etc., an authentication judgment unit 486 that authenticates whether the user is the user himself / herself, an authentication result display unit 487 that displays the authentication result on the display unit 49, and an authentication information update unit 488 that updates information in various databases and tables stored in the terminal memory unit 47 based on instructions from the authentication judgment unit 486.

[0037] The authentication information acquisition unit 485 acquires biometric information for authentication and user habits from the communication unit 40, the photographing unit 41, etc. The authentication judgment unit 486 performs user authentication based on the biometric information for authentication and user habits acquired from the authentication information acquisition unit 485, and the authentication values ​​and pass conditions stored in various databases of the terminal storage unit 47. The authentication result display unit 487 receives the authentication result of the user from the authentication judgment unit 486, and causes the display unit 49 to display a message, an image, etc. according to the authentication result. The authentication information update unit 488 updates the data stored in the various databases and tables stored in the terminal storage unit 47 based on an instruction from the authentication judgment unit 486. The biometric information and behavior information acquired by the authentication information acquisition unit 181 are an example of authentication information in the scope of the claims. Moreover, each piece of biometric information acquired by the authentication information acquisition unit 485 is an example of the first information and the third information in the scope of the claims. Each piece of behavior information acquired by the authentication information acquisition unit 485 is an example of the second information in the scope of the claims.

[0038] Next, the configuration of each table of authentication biometric information database 473, authentication user habit database 474, and inclination information table 475 stored in terminal storage unit 47 will be described below with reference to Figs. 5A to 5C. First, as shown in Fig. 5A, the table of authentication biometric information database 473 stores types of biometric information such as face and voice, registered information which is the biometric information of the user himself, and an authentication value obtained by comparing the registered information with the biometric information acquired by authentication information acquisition unit 485 shown in Fig. 4D. The registered information stored in the table of authentication biometric information database 473 is the biometric information of the user himself. The registered information is information registered in advance before performing authentication processing in terminal 4, and is updated when the user himself is authenticated. The registration information stores, for example, feature values ​​calculated from a face image if the type of biometric information is face; feature values ​​calculated from voice data or voice data or both voice data and their feature values ​​if the type of biometric information is voice; iris data if the type of biometric information is iris; and feature values ​​calculated from a fingerprint image if the type of biometric information is fingerprint.

[0039] In the first embodiment, the similarity of the biometric information is determined by the authentication value. The authentication value is a value obtained based on a result of comparing the registration information with the biometric information acquired by the authentication information acquisition unit 485 shown in Fig. 4D. The authentication value approaches 0 when the registration information and the biometric information acquired by the authentication information acquisition unit 485 are similar, and approaches 1 when they are not similar. The authentication biometric information database 473 includes an average value of the authentication values, an authentication threshold value which is a threshold value for determining the authentication value, and an authentication tolerance value including an authentication tolerance range value which indicates a case where the user is in a gray area relative to the authentication threshold value.

[0040] First, the average authentication value is the average authentication value obtained by comparing the registration information with the biometric information obtained by the authentication information acquisition unit 485. The authentication threshold is a reference value for determining that the user is the user himself / herself when the authentication value obtained based on the result of comparing the registration information with the biometric information obtained by the authentication information acquisition unit 485 is equal to or less than this value. The authentication threshold is a value that varies according to the authentication situation of the user, and an upper limit is set in advance. The upper limit is a value above which the user should not be authenticated only by the user himself / herself and the biometric information. For example, if the default value of the authentication threshold is 0.4 between 0, which approaches when the registration information and the biometric information obtained by the authentication information acquisition unit 485 are similar, and 1, which approaches when they are not similar, the upper limit of the authentication threshold is 0.45.

[0041] The authentication tolerance value is a standard value for determining that a user is not the user himself / herself when the authentication value calculated based on the result of comparing the registration information with the biometric information acquired by the authentication information acquisition unit 485 is equal to or greater than this value. As described above, the authentication tolerance value is a value including the authentication tolerance range value indicating the case where the user is in a questionable state in the authentication threshold, and therefore is a value that varies according to the variation between the authentication threshold and the authentication tolerance range value. An upper limit is set in advance for the authentication tolerance value, and this is called the maximum authentication tolerance value. The maximum authentication tolerance value is a value above which the user should be determined to be a different person. For example, it is 0.5, which is halfway between 0, which approaches when the registration information and the biometric information acquired by the authentication information acquisition unit 485 are similar, and 1, which approaches when they are not similar.

[0042] A value between the authentication threshold and the authentication tolerance value is called an authentication tolerance range value, which indicates whether or not a user is the user himself / herself. When the authentication value is within the authentication tolerance range value, the user is not judged to be the user himself / herself only by biometric information, and if the user's unique user habits match the passing conditions, the user is authenticated as the user himself / herself. If they do not match, the user is not authenticated as the user himself / herself. Hereinafter, authentication of a user based on the user's habits is referred to as auxiliary authentication. The authentication tolerance range value is a value that is determined in advance and is generally considered to be a good value for the user if the authentication value falls within this range. For example, it is 0.08, which is less than 10% of 0, which is closer to similarity, and 1, which is closer to dissimilarity. Note that when the authentication threshold reaches the upper limit, the authentication threshold becomes the maximum authentication tolerance value minus the upper limit. For example, if the upper limit of the authentication threshold is 0.45 and the maximum authentication value is 0.5, the authentication tolerance range value is 0.05. Therefore, when the authentication threshold is at the upper limit, the authentication tolerance range value is smaller than when the authentication threshold is not at the upper limit.

[0043] Next, the table of the authentication user habit database 474 will be described below with reference to Fig. 5B. The table of the authentication user habit database 474 stores the type of user habit such as communication connection, event execution, etc., the acquired information acquired by the authentication information acquisition unit 485 shown in Fig. 4D, the latest status of each user's habit, and the pass condition of each user's habit. The acquired information stores, for example, the address of the connection destination, SSID (Service Set Identifier), BSSID (Basic Service Set Identifier), etc. if the type of the user's habit is communication connection, the name of the place where the event will be held, the address, etc. of which are stored in advance in the schedule book if the type of the user's habit is event execution, the distance if the type of the user's habit is the distance between the face and the terminal device, and the name, ID (Identifier), etc. indicating the device to be connected if the type of the user's habit is device connection.

[0044] The latest status of each user's habit includes, for example, if the type of the user's habit is communication connection, the total number of times that the user has connected to the communication connection destination indicated in the acquired information. The initial value of the total number of times that the user has connected to the communication connection destination is 0, and the number of times is incremented by the number of times that the user has connected to the communication connection destination. If the type of the user's habit is event execution, the distance between the location stored in the acquired information and the user's current location is stored. If the type of the user's habit is the distance between the face and the terminal 4, the average distance between the face and the terminal 4 calculated when the user was authenticated as the user is stored. The average distance between the face and the terminal 4 is updated every time the user is authenticated as the user. The initial value of the average distance between the face and the terminal 4 is the distance calculated when the biometric information shown in FIG. 5A is registered in advance before the user is authenticated by the terminal 4.

[0045] Moreover, if the type of the user's habit is device connection, whether or not the device is connected to the device indicated by the name, ID, etc. stored in the acquired information is stored. The device connection is, for example, a connection between a device paired by Bluetooth (registered trademark) and the terminal 4. The pass condition for each user's habit is a predetermined condition that can guarantee the reliability of each user's habit.

[0046] Next, the tilt information table 475 is shown in Fig. 5C. The tilt information table 475 stores the angle indicating the tilt of the terminal 4 acquired from the tilt detection unit 43 shown in Fig. 4D, the acquisition date and time when the angle was acquired, and the waiting time that is the interval for detecting the tilt. The angle indicating the tilt of the terminal 4 is acquired from the tilt detection unit 43 by the authentication information acquisition unit 485 shown in Fig. 4D every time the waiting time elapses, and is updated. In addition, when the angle is updated, the acquisition date and time when the angle was acquired is also updated.

[0047] When the terminal 4 according to the first embodiment completes the execution of the initialization process after power-on or returns from the sleep state, the terminal 4 enters a locked state in which the operation of each function is not permitted until authentication is successful. When the terminal 4 enters this locked state or when authentication is requested when operating each function, the terminal control unit 48 shown in Fig. 4B executes the authentication process program 472 stored in the terminal storage unit 47 to determine whether the user is the user himself or herself. The user authentication process by the authentication process program 472 is performed in the background at a predetermined authentication interval.

[0048] The process of the authentication process program 472 executed by the terminal control unit 48 will be described below with reference to the flowchart of the authentication process shown in Figures 6A and 6B. Note that this authentication process is an example of a user authentication means in the claims.

[0049] First, FIG. 6A is referred to. In the present embodiment 1, a face image of a user is used as biometric information. The authentication information acquisition unit 485 shown in FIG. 4D causes the photographing unit 41 to take a face photo of the user operating the terminal 4. Specifically, the authentication information acquisition unit 485 causes the in-camera 41A to take a face photo of the user facing the front of the terminal 4. The authentication information acquisition unit 485 acquires the face photo of the user taken from the photographing unit 41 (step S101). The authentication information acquisition unit 485 determines whether the acquired face photo of the user is blurred (step S102). If the face photo of the user is blurred (step S102; NO), the authentication information acquisition unit 485 causes the photographing unit 41 to retry taking a face photo of the user (step S103). Furthermore, if the facial photograph of the user is not blurred (step S102; YES), the authentication information acquisition unit 485 determines whether the user's face can be detected from the facial photograph of the user taken by the photographing unit 41 (step S104).

[0050] If the user's face cannot be detected from the user's facial photograph (step S104; NO), the authentication information acquisition unit 485 causes the photographing unit 41 to retry photographing the user's facial photograph (step S103). If the user's face cannot be detected from the user's facial photograph, the authentication information acquisition unit 485 may lock the currently operating user so that he or she cannot perform any further operations, or may display a message to the effect that another authentication method will be used. If the user's face can be detected from the user's facial photograph (step S104; YES), the authentication information acquisition unit 485 obtains the feature amount of the detected user's facial image. The authentication information acquisition unit 485 transmits the obtained feature amount of the user's facial image to the authentication judgment unit 486.

[0051] The authentication determination unit 486 acquires the authentication biometric information database 473 stored in the terminal storage unit 47 shown in FIG. 4B. The authentication determination unit 486 acquires the feature amount of the face image stored in the registration information associated with "face" among the types of biometric information, and the authentication allowable value and authentication threshold of the authentication value from the table of the authentication biometric information database 473 shown in FIG. 5A. The authentication determination unit 486 compares the feature amount of the face image of the registration information acquired from the authentication biometric information database 473 with the feature amount of the face image received from the authentication information acquisition unit 485, and obtains the authentication value of the face based on the comparison result. The authentication determination unit 486 judges whether the obtained authentication value of the face is equal to or greater than the authentication threshold acquired from the authentication biometric information database 473 (step S105).

[0052] If the obtained face authentication value is equal to or greater than the authentication threshold (step S105; YES), the authentication judgment unit 486 judges whether the obtained face authentication value is equal to or less than the authentication tolerance value acquired from the authentication biometric information database 473 (step S106). If the obtained face authentication value is equal to or less than the authentication tolerance value (step S106; YES), since it is unclear whether the user using the terminal 4 is the real user or not, the authentication judgment unit 486 executes auxiliary authentication, which is authentication based on the user's habits. First, the authentication judgment unit 486 causes the authentication information acquisition unit 485 to acquire the currently connected communication connection destination from the communication unit 40. The authentication judgment unit 486 receives the current communication connection destination of the communication unit 40 acquired from the authentication information acquisition unit 485.

[0053] Next, the authentication judgment unit 486 acquires the authentication user habit database 474 from the terminal storage unit 47 shown in FIG. 4B. The authentication judgment unit 486 acquires the acquisition information, the number of times, and the pass condition associated with the "communication connection" from among the types of user habits stored in the table of the authentication user habit database 474 shown in FIG. 5B. For example, as shown in FIG. 5B, the acquisition information for the "communication connection" stores the SSIDs ABC_WLAN and 123WLAN. For this ABC_WLAN, the number of times of connection is stored as 31 times, and the pass condition is the number of times of connection is stored as 100 times or more. For the 123WLAN, the number of times of connection is stored as 157 times, and the pass condition is the number of times of connection is stored as 100 times or more. In the following, the case where the pass condition is satisfied is called "trusted", and the case where the pass condition is not satisfied is called "untrusted".

[0054] The authentication determination unit 486 compares the current communication destination of the communication unit 40 received from the authentication information acquisition unit 485 with the acquired information acquired from the authentication user habit database 474, and determines whether the current communication destination is a trusted destination (step S107). Here, for example, it is assumed that the SSID ABC_WLAN is acquired as the current communication destination of the communication unit 40. The number of connections of ABC_WLAN in the acquired information of the user habit type "communication connection" stored in the authentication user habit database 474 is 31, and the number of connections of the pass condition is 100 or more. Therefore, since the current communication destination is not a trusted communication destination (step S107; YES), it is determined whether a trusted event is being executed (step S108).

[0055] The authentication judgment unit 486 causes the authentication information acquisition unit 485 to acquire the details of the event executed immediately before from the operation input unit 44. The authentication judgment unit 486 acquires whether or not there is an event scheduled for the current date and time from a calendar provided in the terminal 4, and information on the location where the event will be held. If there is no event scheduled for that day, the authentication judgment unit 486 determines that the event is not a reliable event (step S108; YES), and calculates the distance between the face and the terminal 4 (step S109). If there is an event scheduled for that day, the authentication judgment unit 486 causes the authentication information acquisition unit 485 to acquire current location information from the location detection unit 46. Next, the authentication judgment unit 486 acquires the authentication user's habit database 474 from the terminal storage unit 47 shown in FIG. 4B.

[0056] The authentication judgment unit 486 acquires the acquired information and the pass condition associated with "event execution" from among the types of user habits stored in the table of the authentication user habit database 474 shown in Fig. 5B. For example, as shown in Fig. 5B, the acquired information for "event execution" stores "○× park" and "△● movie theater" as the locations where the event will be held, and "within 100 m distance" is stored as the pass condition for both.

[0057] Here, for example, it is assumed that "XX Park" is stored in the calendar provided in the terminal 4 as the location of the event to be held at the current date and time. The authentication judgment unit 486 compares the current location information acquired by the authentication information acquisition unit 485 from the location detection unit 46 with the location information of "XX Park" which is the location of the event to be held at the current date and time. For example, it is assumed that the distance between the current location information and the location information of "XX Park" which is the location of the event is 113 m. In this case, since the user is not within 100 m of "XX Park", that is, the user is not at the location of the event scheduled by the user, it is determined that the event is not to be executed as a reliable event (step S108; YES), and the distance between the face and the terminal 4 is calculated (step S109). The distance between the user's face and the terminal 4 is calculated based on the proportion of the user's face in a face photo of the user facing the front of the terminal 4 taken by the in-camera 41A shown in FIG. 1.

[0058] Next, the authentication assessment unit 486 acquires the authentication user habit database 474 from the terminal storage unit 47 shown in Fig. 4B. The authentication assessment unit 486 acquires the average distance and the pass condition associated with "distance between the face and the terminal device" from among the types of user habits stored in the table of the authentication user habit database 474 shown in Fig. 5B. For example, as shown in Fig. 5B, the average distance of "distance between the face and the terminal device" is stored as 262 mm, and the pass condition is stored as plus or minus 20 mm of the average distance.

[0059] The authentication judgment unit 486 judges whether the distance between the user's face and the terminal 4 calculated in step S109 is within a set range set in the pass condition acquired from the authentication user's habit database 474 (step S110). Specifically, since the average distance acquired from the authentication user's habit database 474 is 262 mm and the pass condition is the average distance plus or minus 20 mm, it judges whether the distance is within the range of 242 mm to 282 mm.

[0060] If the distance between the user's face and terminal 4 calculated in step S109 is within the range of 242 mm to 282 mm (step S110; YES), the authentication judgment unit 486 authenticates the user using terminal 4 as the user himself / herself. The authentication information update unit 488 updates various data stored in the authentication biometric information database 473 and the authentication user habit database 474 shown in Fig. 4B (step S111).

[0061] Specifically, the authentication information update unit 488 updates the registration information associated with the type of biometric information "face" in the table of the authentication biometric information database 473 shown in Fig. 5A by adding the feature amount of the face image received by the authentication determination unit 486 from the authentication information acquisition unit 485 to the feature amount of the face image stored in the registration information. Next, the authentication information update unit 488 adds 1 to the number of times stored in the latest status associated with the user's habit type "communication connection" in the table of the authentication user's habit database 474 shown in Fig. 5B, and updates it. In addition, the authentication information update unit 488 updates the latest status associated with the user's habit type "distance between face and terminal device" stored in the table of the authentication user's habit database 474 shown in Fig. 5B with the average distance calculated from the stored average distance and the "distance between face and terminal device" calculated in step S109.

[0062] In this way, the accuracy of the user's biometric information and user's habits is improved by updating the biometric information stored in the authentication biometric information database 473 and the user's habits stored in the authentication user's habit database 474. This improves the accuracy of user authentication.

[0063] Also, if the face authentication value obtained by the authentication judgment unit 486 is not equal to or greater than the authentication threshold of the authentication value (step S105; NO), the authentication judgment unit 486 causes the authentication information acquisition unit 485 to acquire the currently connected communication connection destination from the communication unit 10. The authentication judgment unit 486 receives the current communication connection destination of the communication unit 40 acquired from the authentication information acquisition unit 485. Next, the authentication judgment unit 486 acquires the authentication user habit database 474 from the terminal storage unit 47 shown in FIG. 4B. The authentication judgment unit 486 acquires acquisition information, number of times, and pass condition associated with "communication connection" among the types of user habits stored in the table of the authentication user habit database 474 shown in FIG. 5B. The authentication judgment unit 486 compares the current communication connection destination of the communication unit 40 received from the authentication information acquisition unit 485 with the acquisition information acquired from the authentication user habit database 474, and judges whether the current communication connection destination is a reliable connection destination (step S112).

[0064] Here, for example, it is assumed that the SSID 123WLAN is acquired as the current communication connection destination of the communication unit 40. The number of connections to 123WLAN in the acquired information of the user habit type "communication connection" stored in the authentication user habit database 474 is 156 times, and the number of connections of the pass condition is 100 times or more. Therefore, since the current communication connection destination is a trusted communication connection destination (step S112; YES), the authentication judgment unit 486 authenticates the user using the terminal 4 as the user himself / herself. After that, the authentication judgment unit 486 makes the authentication interval longer than the current authentication interval (step S113). This is because if the current communication connection destination is a trusted communication connection destination, it is considered that the user himself / herself is in a trusted environment such as a home or workplace. In this case, it is sufficient to make the authentication interval longer than the current authentication interval, reduce the frequency of authentication, and perform authentication the minimum number of times necessary.

[0065] Here, for example, it is assumed that the SSID ABC_WLAN is acquired as the current communication connection destination of the communication unit 40. The number of connections to ABC_WLAN in the acquired information of the user habit type "communication connection" stored in the authentication user habit database 474 is 31, and the number of connections that meets the pass condition is 100 or more. Therefore, since the current communication connection destination is not a trusted communication connection destination (step S113; NO), the authentication judgment unit 486 does not authenticate the user using the terminal 4 as the user himself / herself, and does not lengthen the authentication interval beyond the current authentication interval.

[0066] Here, in step S107, for example, it is assumed that SSID 123WLAN is acquired as the current communication connection destination of communication unit 40. In the acquired information of the user habit type "communication connection" stored in authentication user habit database 474, 123WLAN has been connected 156 times, and the number of connections required for passing is 100 or more. Therefore, since the current communication connection destination is a trusted communication connection destination (step S107; NO), authentication judgment unit 486 authenticates the user using terminal 4 as the user himself / herself.

[0067] In addition, in step S108, for example, it is assumed that "△● movie theater" is stored in the calendar provided in the terminal 4 as the location of the event to be held at the current date and time. The authentication judgment unit 486 compares the current location information acquired by the authentication information acquisition unit 485 from the location detection unit 46 with the location information of "△● movie theater" which is the location of the event to be held at the current date and time. For example, it is assumed that the distance between the current location information and the location information of "△● movie theater" which is the location of the event is 72 m. Among the types of user habits stored in the table of the authentication user habit database 474 shown in FIG. 5B, the passing condition for "△● movie theater" which is the location of the event associated with "event execution" is "within 100 m distance". Therefore, in this case, the user is within 100 m of "△● movie theater", that is, the user is in the location of the event scheduled by the user, so it is assumed that the event is to be executed as a trusted event (step S108; NO), and the authentication judgment unit 486 authenticates the user using the terminal 4 as the user himself. After that, the authentication assessment unit 486 sets the authentication interval to be longer than the current authentication interval (step S113).

[0068] The authentication judgment unit 486 calculates the distance between the user's face and the terminal 4 (step S114). Next, the authentication judgment unit 486 acquires the authentication user's habit database 474 from the terminal storage unit 47 shown in FIG. 4B. The authentication judgment unit 486 judges whether the distance between the user's face and the terminal 4 calculated in step S114 is within a set range set in the passing condition acquired from the authentication user's habit database 474 (step S115). If the distance between the user's face and the terminal 4 calculated in step S109 is within the set range (step S115; YES), the authentication judgment unit 486 authenticates the user using the terminal 4 as the user himself / herself. The authentication judgment unit 486 causes the authentication information update unit 488 to update various data stored in the authentication biometric information database 473 and the authentication user's habit database 474 shown in FIG. 4B (step S111).

[0069] Specifically, authentication information update unit 488 updates the registration information associated with the biometric information type “face” in the table of authentication biometric information database 473 shown in FIG. 5A by adding the feature amounts of the facial image received by authentication assessment unit 486 from authentication information acquisition unit 485 in step S105 to the feature amounts of the facial image stored in the registration information.

[0070] Next, the authentication information update unit 488 adds 1 to the number of times stored in the latest status associated with the user's habit type "communication connection" in the table of the authentication user's habit database 474 shown in Fig. 5B, and updates it. Next, the authentication information update unit 488 writes the distance between the event location obtained in step S108;NO and the terminal 4 into the latest status associated with the user's habit type "event execution" in the table of the authentication user's habit database 474, and updates it. In addition, the authentication information update unit 488 updates the latest status associated with the user's habit type "distance between face and terminal device" stored in the table of the authentication user's habit database 474 shown in Fig. 5B with the average distance obtained from the average distance stored in the latest status and the "distance between face and terminal device" calculated in step S114.

[0071] If the distance between the user's face and terminal 4 calculated in step S114 is not within the set range (step S115; NO), the authentication assessment unit 486 does not cause the authentication information update unit 488 to update the various data stored in the authentication biometric information database 473 and the authentication user habit database 474 shown in FIG. 4B.

[0072] Furthermore, if the face authentication value obtained by the authentication judgment unit 486 is not equal to or less than the authentication tolerance value (step S106; NO), and if the distance between the face and the terminal device is not within the set range in step S110 (step S110; NO), the authentication judgment unit 486 judges that the user using the terminal 4 is not the user himself / herself. The authentication judgment unit 486 causes the authentication result display unit 487 shown in FIG. 37 to display on the display unit 49 that authentication was not possible. Next, the authentication judgment unit 486 calls an existing biometric authentication means provided in the terminal 4. Here, it is assumed that fingerprint authentication is called as the existing biometric authentication means. The authentication judgment unit 486 executes fingerprint authentication (step S116).

[0073] If fingerprint authentication is successful (step S117; YES), the authentication information acquisition unit 485, in response to an instruction from the authentication judgment unit 486, causes the photographing unit 41 to photograph a face photograph of the user operating the terminal 4. The authentication information acquisition unit 485 acquires an image of the photographed face photograph of the user from the photographing unit 41, and obtains a feature amount of the user's face image. The authentication information acquisition unit 485 transmits the obtained feature amount of the user's face image to the authentication judgment unit 486. The authentication judgment unit 486 transmits the received feature amount of the user's face image to the authentication information update unit 488 shown in FIG. 37. The authentication information update unit 488 adds the received feature amount of the user's face image to the feature amount of the face image stored in the registration information associated with the type of biometric information "face" in the table of the authentication biometric information database 473 shown in FIG. 5A, and updates it (step S118). The authentication judgment unit 486 returns to step S101, and executes steps following step S101.

[0074] Moreover, if fingerprint authentication is not possible (step S117; NO), authentication judgment unit 486 causes authentication result display unit 487 shown in Fig. 37 to display a message indicating that authentication was not possible on display unit 49. Next, authentication judgment unit 486 causes authentication result display unit 487 shown in Fig. 37 to display a login screen on display unit 49 (step S119).

[0075] Now, moving to FIG. 6B, the authentication judgment unit 486 judges whether the biometric authentication and the auxiliary authentication have been successful a predetermined number of times (step S120). The set number is an arbitrary number, such as 10 times in a row, or 20 times in total since the terminal 4 is started. If the biometric authentication and the auxiliary authentication have been successful a predetermined number of times (step S120; YES), the authentication judgment unit 486 calculates the average value of the face authentication values ​​obtained in the set number of authentications (step S121). Specifically, the authentication judgment unit 486 acquires the authentication biometric information database 473 shown in FIG. 4B from the terminal storage unit 47. The authentication judgment unit 486 acquires the average value of the authentication values ​​associated with "face" from the types of biometric information from the table of the authentication biometric information database 473 shown in FIG. 5A. The authentication judgment unit 486 adds the face authentication value obtained in step S105 and the average value of the authentication values ​​obtained from the authentication biometric information database 473, and divides the sum by two to calculate the average value of the face authentication values. If the biometric authentication and auxiliary authentication have not been successful the predetermined number of times (step S120; NO), the process skips steps S121 to S123 and proceeds to step S124.

[0076] The authentication determination unit 486 transmits the average value of the face authentication values ​​obtained in step S121 to the authentication information update unit 488. The authentication information update unit 488 compares the received average value of the face authentication values ​​with a preset upper limit of the authentication threshold. If the average value of the face authentication values ​​is equal to or greater than the preset upper limit of the authentication threshold, the authentication information update unit 488 writes the upper limit of the authentication threshold into the authentication threshold associated with "face" among the types of biometric information in the table of the authentication biometric information database 473 shown in FIG. 5A, and updates it. If the average value of the face authentication values ​​is equal to or less than the preset upper limit of the authentication threshold, the authentication information update unit 488 writes the average value of the face authentication values ​​obtained in step S121 into the authentication threshold associated with "face" among the types of biometric information in the table of the authentication biometric information database 473 shown in FIG. 5A, and updates it (step S122).

[0077] Next, the authentication information update unit 488 updates the authentication allowable value (step S123). Specifically, if the average value of the face authentication values ​​obtained in step S121 is equal to or greater than the upper limit of the authentication threshold set in advance, the authentication information update unit 488 sets the authentication allowable value to the maximum authentication allowable value set in advance. Also, if the average value of the face authentication values ​​obtained in step S121 is equal to or less than the upper limit of the authentication threshold set in advance, and if the sum of the average value of the face authentication values ​​obtained in step S121 and the default authentication allowable range value is equal to or less than the maximum authentication allowable value, the sum is set to the authentication allowable value. If the sum of the average value of the face authentication values ​​obtained in step S121 and the default authentication allowable range value is equal to or greater than the maximum authentication allowable value, the maximum authentication allowable value is set to the authentication allowable value. The authentication information update unit 488 acquires the authentication biometric information database 473 shown in FIG. 4B from the terminal storage unit 47. The authentication information update unit 488 writes the obtained authentication allowable value into the authentication allowable value associated with "face" among the types of biometric information in the table of the authentication biometric information database 473 shown in FIG. 5A, thereby updating the authentication allowable value.

[0078] The authentication information acquisition unit 485 shown in Fig. 37 acquires the tilt angle of the terminal 4 from the tilt detection unit 43. Next, the authentication information acquisition unit 485 acquires current date and time information from a timer (not shown) (step S124). The authentication information acquisition unit 485 transmits the acquired tilt angle of the terminal 4 and the current date and time information to the authentication determination unit 486. The authentication determination unit 486 transmits the received tilt angle of the terminal 4 and the current date and time information to the authentication information update unit 488. The authentication information update unit 488 writes and saves the received tilt angle of the terminal 4 and the current date and time information in the tilt information table 475 stored in the terminal storage unit 47 shown in Fig. 4B (step S125).

[0079] The authentication determination unit 486 acquires the waiting time stored in the tilt information table 475 shown in FIG. 5C. The authentication determination unit 486 transmits the acquired waiting time to the authentication information acquisition unit 485. The authentication information acquisition unit 485 waits for acquisition of data from the communication unit 40, the photographing unit 41, etc. during the received waiting time (step S126). When the waiting time ends, the authentication information acquisition unit 485 acquires the tilt angle of the terminal 4 from the tilt detection unit 43. Next, the authentication information acquisition unit 485 acquires current date and time information from a timer (not shown) (step S127). The authentication information acquisition unit 485 transmits the acquired tilt angle of the terminal 4 and the current date and time information to the authentication determination unit 486.

[0080] The authentication judgment unit 486 acquires the angle of the terminal 4 stored in the tilt information table 475 shown in Fig. 5C. The authentication judgment unit 486 compares the tilt angle of the terminal 4 received from the authentication information acquisition unit 485 with the angle of the terminal 4 acquired from the tilt information table 475, and judges whether the angle has changed (step S128). If the change in the angle of the terminal 4 is a predetermined set angle, for example, 30 degrees or more (step S128; NO), the authentication judgment unit 486 judges that the user has moved the terminal 4 and performed some operation, and returns to step S101 shown in Fig. 6A. After that, the authentication judgment unit 486 executes the processes from step S101 onwards.

[0081] Also, if the change in the angle of the terminal 4 is equal to or less than the angle of the predetermined set value (step S128; YES), the authentication judgment unit 486 judges that the terminal 4 is not moved by the user. Next, the authentication judgment unit 486 judges whether or not it is time to authenticate the user (step S129). The timing to authenticate the user is the timing when a time of a preset authentication interval has elapsed. If it is time to authenticate the user (step S129; YES), the authentication judgment unit 486 returns to step S101 shown in FIG. 6A. Thereafter, the authentication judgment unit 486 executes the process of step S101 and after. If it is not time to authenticate the user (step S129; NO), the authentication judgment unit 486 returns to step S125. The authentication judgment unit 486 executes the process from step S125 to step S129.

[0082] In the first embodiment, when the authentication value calculated from the biometric information and the authentication threshold are the same value, it may be determined whether the authentication is successful or not in either case that the authentication value calculated from the biometric information is equal to or less than the authentication threshold value or that the authentication value calculated from the biometric information is equal to or more than the authentication threshold value. Also, when the authentication value calculated from the biometric information and the authentication allowable value are the same value, it may be determined whether the authentication is successful or not in either case that the authentication value calculated from the biometric information is equal to or less than the authentication allowable value or that the authentication value calculated from the biometric information is equal to or more than the authentication allowable value.

[0083] As described above, the authentication process executed in the terminal 4 of the information processing system 100 according to the first embodiment uses data on the user's habits to authenticate the user when the result of authentication based on the biometric information of the user using the terminal 4 is gray and it is not possible to clearly determine whether the user is the user himself / herself. This makes it possible to authenticate the user using data on the user's habits even when it is gray and it is not possible to clearly determine whether the user using the terminal 4 is the user himself / herself through authentication based on the biometric information. Furthermore, the user authentication process executed in the terminal 4 is executed in the background while the terminal 4 is in operation, and the accuracy of the authentication can be improved by updating the user's biometric information and the user's habits. This makes it possible to ensure security while reducing the operational burden on the user.

[0084] The information processing system 100 according to the first embodiment is a system that, when a first user applies to open a new bank account from a first terminal 4A used by the first user to a bank server 1, finds an account holder from among the contacts in the phone book stored in the first terminal 4A of the first user and from among others connected to the first user via SNS, and opens the account by having the account holder vouch for the identity of the first user. The flow of the process executed in the information processing system 100 will be described below with reference to the flowcharts shown in Figs. 7 to 10.

[0085] The flowchart shown in Fig. 7 shows the overall configuration of the processing executed in the information processing system 100. Each process shown in Fig. 7 is realized by the bank server 1, the first terminal 4A, the second terminal 4B, and the third terminal 4C respectively executing the account management processing program 110 of the bank server 1 shown in Fig. 2 and the bank application program 471 of the terminal 4 shown in Fig. 4B.

[0086] The first user selects, from the operation input unit 44, an icon associated with the bank application program 471 displayed on the screen of the display unit 49 of the first terminal 4A shown in FIG. 4B, and executes it. When the bank application program 471 is started, the terminal control unit 48 shown in FIG. 4B displays a menu for opening a new account, logging in, etc. on the screen of the display unit 49 of the first terminal 4A. When the first user selects the item for opening a new account from the menu displayed on the display unit 49, the terminal control unit 48 executes the account opening setting process shown in FIG. 7 (step S201). Details of the account opening setting process will be described below with reference to the flowchart shown in FIG. 8.

[0087] The first user inputs personal information into each item of the account application screen displayed on the screen of the display unit 49 of the first terminal 4A, such as the applicant's name, address, date of birth, etc. (Step S211). Next, the first user selects the name of the branch where he or she wishes to open an account from the list of branch names where an account can be opened, displayed on the screen of the display unit 49 of the first terminal 4A (Step S212).

[0088] The terminal control unit 48 transmits an application for opening an account to the bank server 1. Next, the terminal control unit 48 transmits data of contacts in the telephone directory stored in the first terminal 4A, data of people connected with the first user via SNS, etc., to the bank server 1 and inquires about the account holder (step S213). This account holder may be either an account holder of the branch selected by the first user or an account holder of all branches.

[0089] The server control unit 11 of the bank server 1 shown in Fig. 2 searches for an account holder from the account holder information database 120 stored in the server storage unit 12 shown in Fig. 2 based on the data of the contacts in the phone book received from the first terminal 4A and the data of people connected to the first user via SNS (step S214). Specifically, the server control unit 11 of the bank server 1 compares the name, address, etc. of the contact in the phone book received from the first terminal 4A with the data of the name, address, etc. stored in the account holder information database 120 shown in Fig. 3, and searches for a matching name, address, etc. The server control unit 11 of the bank server 1 also compares the data of the name, date of birth, etc. stored in the account holder information database 120 with the data of the name, date of birth, etc. of people connected to the first user via SNS, and searches for a matching name, date of birth, etc.

[0090] Furthermore, in addition to data such as name and address, data such as transaction history with the bank, number of years the account has been held, number of years the account has been held, and the last date of use, which is the date the user last used the account, may be obtained from account holder information database 120 shown in Fig. 3, so that only account holders whose transaction history, number of years the account has been held, etc. meet predetermined conditions can be found. Predetermined conditions include, for example, having two or more transaction histories with the bank, such as a mortgage, salary transfer, or fixed term deposit, or having held the account for five years or more. This makes it possible to find account holders who have a history of transactions with the bank, rather than simply having an account, i.e., account holders who the bank considers to be good.

[0091] If the account holder is among the people stored in the contacts of the phone book received from the first terminal 4A, the people connected to the first user via SNS, etc. (step S215; YES), the server control unit 11 of the bank server 1 transmits the account holder's name to the first terminal 4A (step S216). The terminal control unit 48 of the first terminal 4A shown in FIG. 4B receives the account holder's name from the bank server 1. The terminal control unit 48 of the first terminal 4A displays the received candidate's name on the display unit 49 shown in FIG. 4B (step S217).

[0092] The first user checks the account holder displayed on the display unit 49 and confirms the account holder as his / her own guarantor candidate. If there are multiple account holders, the first user selects one of them and confirms the selected one as his / her own guarantor candidate. For example, if the second and third users shown in FIG. 1 are account holders, the first user selects the second user as the first guarantor candidate. The first user then causes the terminal control unit 48 of the first terminal 4A to transmit data of the second user, who is the selected guarantor candidate, to the bank server 1 (step S218).

[0093] Furthermore, if, as a result of searching for the account holder in step S214, the account holder is not found among people stored in the contact list of the phone book received from the first terminal 4A, people connected to the first user via SNS, etc. (step S215; NO), the server control unit 11 of the bank server 1 transmits to the first terminal 4A a message indicating that there is no account holder (step S219). The terminal control unit 48 of the first terminal 4A suspends subsequent processing.

[0094] Returning now to FIG. 7, the server control unit 11 of the bank server 1 executes a guarantor determination process (step S202). The operation of the guarantor determination process will be described below with reference to the flowchart shown in FIG. 9. The server control unit 11 of the bank server 1 transmits an inquiry to the second terminal 4B used by the second user, which has been selected by the first user as the first guarantor candidate, as to whether or not the second terminal 4B will be a guarantor for the first user (step S221). The terminal control unit 48 of the second terminal 4B executes the bank application program 471 stored in the terminal storage unit 47 shown in FIG. 4B, and causes the contents of the inquiry from the bank server 1 to be displayed on the screen of the display unit 49 (step S222).

[0095] The second user checks the contents of the inquiry and selects whether or not to become a guarantor for the first user (step S223). For example, it is assumed here that the second user selects not to become a guarantor for the first user. If the second user does not want to become a guarantor for the first user (step S223; NO), the second user transmits a refusal to become a guarantor from the second terminal 4B to the bank server 1 (step S224).

[0096] The server control unit 11 of the bank server 1 receives from the second terminal 4B the notification that the second user has refused to become a guarantor for the first user. The server control unit 11 of the bank server 1 transmits to the first terminal 4A used by the first user the notification that the second user has refused to become a guarantor for the first user (step S225). Next, the server control unit 11 of the bank server 1 transmits a request for the second guarantor candidate, who is the next guarantor candidate, to the first terminal 4A (step S226).

[0097] The terminal control unit 48 of the first terminal 4A displays on the screen of the display unit 49 that the second user has refused to become a guarantor for the first user. Next, the terminal control unit 48 of the first terminal 4A displays on the display unit 49 the names of guarantor candidates received from the bank server 1 in step S217 shown in FIG. 8, excluding the first user. For example, if the names of guarantor candidates received from the bank server 1 in step S217 are the second user and the third user shown in FIG. 1, the terminal control unit 48 of the first terminal 4A displays only the third user, excluding the second user who has already been rejected. The first user selects the third user as the second guarantor candidate (step S227).

[0098] The first user causes the terminal control unit 48 of the first terminal 4A to transmit data of the third user, who is the selected second guarantor candidate, to the bank server 1 (step S228). The server control unit 11 of the bank server 1 transmits an inquiry to the third terminal 4C used by the third user asking whether or not to become a guarantor for the first user (step S229). The terminal control unit 48 of the third terminal 4C executes the bank application program 471 stored in the terminal storage unit 47 shown in FIG. 4B, and causes the display unit 49 to display the contents of the inquiry from the bank server 1 on the screen of the display unit 49 (step S230).

[0099] The third user checks the content of the inquiry and selects whether or not to become a guarantor for the first user (step S231). For example, it is assumed here that the third user selects to become a guarantor for the first user. If the third user becomes a guarantor for the first user (step S231; YES), the third user transmits a notice of consent to become a guarantor from the third terminal 4C to the bank server 1 (step S232). If the third user does not become a guarantor for the first user (step S231; NO), the third user transmits a notice of refusal to become a guarantor from the third terminal 4C to the bank server 1 (step S233). Here, if the second user becomes a guarantor for the first user in the above-mentioned step S223 (step S223; YES), the second user transmits a notice of consent to become a guarantor from the second terminal 4B to the bank server 1 (step S234).

[0100] Return to FIG. 7. The server control unit 11 of the bank server 1 executes the account opening permission process (step S203). Details of this account opening permission process will be described with reference to the flowchart shown in FIG. 10. The server control unit 11 of the bank server 1 determines whether or not there is a guarantor for the first user (step S241). Here, it is assumed that the third user selected to be the guarantor for the first user in step S231 shown in FIG. 9. If there is a guarantor for the first user (step S241; YES), the server control unit 11 of the bank server 1 transmits to the first terminal 4A a notice that the account opening is permitted (step S242). On the other hand, if there is no guarantor for the first user (step S241; NO), the server control unit 11 of the bank server 1 transmits to the first terminal 4A a notice that the account opening is not permitted (step S243).

[0101] The terminal control unit 48 of the first terminal 4A judges whether or not the account opening is permitted (step S244). If the account opening is permitted (step S244; YES), the terminal control unit 48 of the first terminal 4A causes the display unit 49 to display a message indicating that the account opening is permitted (step S245). If the account opening is not permitted (step S244; NO), the terminal control unit 48 of the first terminal 4A causes the display unit 49 to display a message indicating that the account opening is not permitted (step S246).

[0102] As described above, in the information processing system 100 according to the first embodiment, when a request to open a new account is made to the bank server 1 from the first terminal 4A used by the second user, the second or third user who is registered on the bank server 1 and has a connection with the user in advance and who has an account with the bank, is given permission to become the user's guarantor from the second terminal 4B or the third terminal 4C, thereby enabling easy identity verification without the need for prior work to verify the identity of the first user.

[0103] (Embodiment 2) In the first embodiment, when the execution of the initialization process after power-on is completed, when the terminal returns from a sleep state, or when authentication is requested when operating each function, the terminal control unit 48 of the terminal 4 shown in Fig. 4B executes the authentication process program 472 stored in the terminal storage unit 47 to determine whether the user is the user himself or herself. However, in this case, the authentication process program 472 is executed by the terminal control unit 48 all the time while the terminal 4 is in operation, so that the amount of resources that can be used by the terminal 4 is reduced.

[0104] Therefore, in the second embodiment, when the initialization process after the start of the bank application program 471 shown in Fig. 4B is completed, the terminal control unit 48 of the terminal 4 executes the authentication processing program 472. Furthermore, when the bank application program 471 is terminated, the terminal control unit 48 of the terminal 4 terminates the authentication processing program 472.

[0105] Specifically, first, the first user selects, from the operation input unit 44, an icon associated with the bank application program 471 displayed on the screen of the display unit 49 of the first terminal 4A shown in FIG. 4B, and executes it. When the bank application program 471 is started, the terminal control unit 48 shown in FIG. 4B displays a menu for opening a new account, logging in, etc. on the screen of the display unit 49 of the first terminal 4A. When the first user selects the item for opening a new account from the menu displayed on the display unit 49, the terminal control unit 48 executes the account opening setting process of step S201 shown in FIG. 7. Next, the terminal control unit 48 sequentially executes the guarantor determination process of step S202 and the account opening permission process of step S203 shown in FIG. 7.

[0106] If an account can be opened after the account opening permission process in step S203 is executed, the terminal control unit 48 executes the authentication process program 472. After this, it is determined in the background as appropriate whether the user using the terminal 4 is the user himself / herself. Furthermore, if an account cannot be opened after the account opening permission process in step S203 is executed, the terminal control unit 48 does not execute the authentication process program 472.

[0107] When the first user selects to end the application from the menu displayed on the display unit 49, the terminal control unit 48 ends the bank application program 471. Then, the terminal control unit 48 ends the authentication processing program 472. If the first user starts another application without ending the bank application, the bank application runs in the background. While the bank application runs in the background, the terminal control unit 48 stops the processing of the authentication processing program 472.

[0108] As described above, in the information processing system 100 according to the second embodiment, the authentication processing program 472 is started only while the bank application program 471 is running to determine whether the user using the terminal 4 is the user himself or herself, thereby reducing the utilization of resources of the terminal 4 compared to the invention according to the first embodiment.

[0109] In the first and second embodiments of the present invention, the bank server 1, the first terminal 4A, the second terminal 4B, and the third terminal 4C can be realized by using a normal computer system, not a dedicated system. For example, a computer may be configured to realize each of the above-mentioned functions by distributing a program for realizing each of the functions of the bank server 1, the first terminal 4A, the second terminal 4B, and the third terminal 4C stored in a computer-readable recording medium such as a CD-ROM (Compact Disc Read Only Memory) or a DVD-ROM (Digital Versatile Disc Read Only Memory), and installing the program on the computer. When each function is realized by sharing the work between an OS (Operating System) and an application, or by cooperation between an OS and an application, only the application may be stored in the recording medium.

[0110] (Variation 1) In the above-mentioned first and second embodiments, a new account is opened at a bank. However, the present invention is not limited to this, and new accounts may be opened at a post office, an investment trust bank, an agricultural cooperative, a virtual currency, a blockchain, etc. Also, new memberships of various types of clubs, rental video shops, etc. may be registered. These various types of accounts, members, etc. are collectively referred to as accounts.

[0111] (Variation 2) In the above-mentioned first and second embodiments, the bank server 1 permits the first user to open an account when the second user or the third user gives permission to the guarantor. However, the present invention is not limited to this, and the bank server 1 may permit the first user to open an account when the second user and the third user give permission to the guarantor.

[0112] (Variation 3) In the above-mentioned first and second embodiments, when the second or third user gives consent to the guarantor, the bank server 1 permits the first user to open an account. However, the first user may be allowed to go to a bank counter when the bank server 1 permits the first user to open an account, and open the account after completing a prescribed procedure.

[0113] (Variation 4) In the above-mentioned first and second embodiments, the first user receives data of account holders among those connected to the first user online from the bank server 1 using the first terminal 4A. However, the first user may visit a bank branch where he / she wishes to open an account and receive data of account holders among those connected to the first user offline from a server in the branch using the first terminal 4A.

[0114] (Variation 5) In the above first and second embodiments, the first user was in the position of opening a new account, but this is not limited thereto. The first user may be allowed to become a guarantor for another user if his / her transaction history with the bank, number of years the account has been held, amount of deposit, etc., exceed predetermined conditions.

[0115] (Variation 6) In the above-mentioned first and second embodiments, the table of the account holder information database 120 shown in Fig. 3 includes items such as the account number, the account type, the account holder's name, address, date of birth, transaction history with the bank, the number of years the user has had the account, the last date of use which is the date on which the user last used the account, etc. Without being limited to this, the items in the table of the account holder information database 120 may include the account holder's My Number, deposit amount, debt amount, repayment status, investment trust amount, credit cards linked to cash cards and membership cards, electronic money usage status, etc.

[0116] (Variation 7) In the above-mentioned first and second embodiments, the first terminal 4A, the second terminal 4B, and the third terminal 4C are configured using smartphones. However, the first terminal 4A, the second terminal 4B, and the third terminal 4C may be configured using any device, such as a PC (Personal Computer), a tablet, or a PDA (Personal Digital Assistant), without being limited to a smartphone.

[0117] (Variation 8) In the above-mentioned first and second embodiments, the user authentication process is realized by executing the authentication process program 472 shown in Fig. 4B. All or part of each step performed by this authentication process program 472 may be realized by a semiconductor chip such as an ASIC (Application Specific Integrated Circuit) or a system LSI (Large-scale Integration), a circuit composed of various circuit elements, or the like.

[0118] (Variation 9) In the above-mentioned first and second embodiments, authentication based on the user's biometric information is performed by using a facial image of the user and fingerprint authentication. However, the authentication based on the user's biometric information may be performed by any method such as voiceprint authentication or iris authentication. In the above-mentioned embodiments, authentication based on the user's facial image is used as a condition for determining whether to use auxiliary authentication, but multiple pieces of biometric information may be used for the determination.

[0119] (Variation 10) In the above-mentioned first and second embodiments, the connection to a trusted connection destination, the execution of a trusted event, and the distance between the user's face and the terminal 4 are used as the judgment conditions for auxiliary authentication based on the user's habits. This is not limited to this, and other methods may be used or included. For example, it is judged whether or not the device owned by the user is connected to the terminal 4 by Bluetooth (registered trademark), and if it is connected, the user is authenticated. In order to use devices connected by Bluetooth (registered trademark), the devices need to be "paired". For this reason, the connection of devices by Bluetooth (registered trademark) has a high degree of individual specificity, and it is possible to authenticate the user by using it as auxiliary authentication. Furthermore, it is also possible to judge whether or not the user is the user based on the pattern, regularity, etc. of the user's behavior route acquired by the position detection unit 46 shown in FIG. 4B, and to authenticate the user if the pattern, regularity, etc. of the behavior route match.

[0120] (Variation 11) In the above-mentioned first and second embodiments, if one of the auxiliary authentications is successful, the user is authenticated as the real person. However, the present invention is not limited to this, and the user may be authenticated as the real person only if all of the multiple auxiliary authentications are successful. This can further improve the accuracy of authentication.

[0121] (Variation 12) In the above-mentioned first and second embodiments, if the biometric authentication and auxiliary authentication are successful, the authentication assessment unit 486 lengthens the authentication interval from the current authentication interval and reduces the frequency of authentication in step S113 of the flowchart shown in Fig. 6A. However, this is not limited thereto, and if the biometric authentication and auxiliary authentication are successful, the authentication interval may not be lengthened from the current authentication interval and the frequency of authentication may not be reduced. Specifically, step S113 of the flowchart shown in Fig. 6A may not be performed.

[0122] (Variation 13) In the above-mentioned first and second embodiments, when the user authentication is successful, the user continues to operate the terminal 4, and there is no change in the inclination of the terminal 4, it can be determined that the user himself / herself continues to operate the terminal 4. In this case, the authentication threshold and authentication tolerance of the biometric authentication may be set loosely, the authentication interval may be lengthened, etc. By doing so, it is possible to conserve the use of resources of the terminal 4 while performing the minimum necessary authentication of the user himself / herself in the background.

[0123] (Variation 14) In the above-mentioned first and second embodiments, authentication is performed in the background at a predetermined authentication interval. However, the authentication may be performed randomly in the background without determining the timing and interval of authentication. For example, authentication may be performed whenever a spatial change such as a change in the position or inclination of the terminal 4 is detected by any of the various sensors mounted on the terminal 4. Authentication may also be performed when the user performs an operation for performing a special process or an irregular operation on the terminal 4.

[0124] (Variation 15) In the above-mentioned first and second embodiments, in step S112 of the authentication process shown in Fig. 6A, it is determined whether the user using the terminal 4 is the authorized user based on the number of communication connections with the communication destination. Without being limited to this, it may be determined whether the user using the terminal 4 is the authorized user based on the time period for connecting with the communication destination and the number of connections in each time period. In addition, since it is possible to know which communication destination the user is always connected to at which time period, it is also possible to determine whether the user is in a relatively high security environment.

[0125] The technical scope of the present invention is not limited to the above-described embodiment and modifications. The present invention can be freely applied, modified, or improved within the scope of the technical ideas described in the claims. [Explanation of symbols]

[0126] 1 bank server, 2 network, 3 cloud, 4 terminal, 4A first terminal, 4B second terminal, 4C third terminal, 11 server control unit, 12 server memory unit, 40 communication unit, 41 shooting unit, 41A front camera, 41B main camera, 42 audio input / output unit, 42A speaker, 42B microphone for calls, 43 tilt detection unit, 44 operation input unit, 45 fingerprint detection unit, 45A left fingerprint sensor, 45B right fingerprint sensor, 46 position detection unit, 47 terminal memory unit, 48 terminal control unit, 49 display unit, 51 processor, 52 memory, 53 display controller, 54 display device, 55 I / O port, 56 storage device, 57 communication device, 58 data bus, 100 information processing system, 471 bank application program, 472 authentication processing program, 473 authentication biometric information database, 474 Authentication user habit database, 475 tilt information table, 485 authentication information acquisition unit, 486 authentication judgment unit, 487 authentication result display unit, 488 authentication information update unit.

Claims

1. an account holder information database for storing data of a plurality of account holders who hold accounts; a server control unit that searches the account holder information database for data on the account holder based on contact data in a phone book stored in a first terminal used by a first user who applies to open the account or data on people connected to the first user through a social networking service, received from the first terminal and used by the first user, and permits the opening of the account if the searched account holder agrees to be a guarantor for the first user; An account management server comprising:

2. the server control unit transmits the searched data of the account holder to the first terminal, requests the first terminal to select a first guarantor candidate from the data of the account holder, and, when receiving from the first terminal a notification that a second user has been selected as the first guarantor candidate, inquires of a second terminal used by the second user as to whether or not the second user will be a guarantor for the first user; 2. The account management server according to claim 1.

3. When the server control unit receives from the second terminal an approval for the second user to be a guarantor for the first user, the server control unit transmits approval for opening an account to the first terminal, and when the server control unit receives from the second terminal an approval for the second user to be a guarantor for the first user, the server control unit requests the first terminal to select a second guarantor candidate from data of the account holder.

3. The account management server according to claim 2.

4. when the server control unit receives from the first terminal that a third user has been selected as the second guarantor candidate, the server control unit inquires of the third terminal used by the third user whether the third user will be a guarantor for the first user, and when the server control unit receives from the third terminal an agreement that the third user will be a guarantor for the first user, transmits to the first terminal a permission to open an account.

4. The account management server according to claim 3.

5. when the server control unit receives from the second terminal an agreement that the second user will be a guarantor for the first user, the server control unit requests the first terminal to select a second guarantor candidate from data of the account holder; 3. The account management server according to claim 2.

6. when the server control unit receives from the first terminal that a third user has been selected as the second guarantor candidate, the server control unit inquires of the third terminal used by the third user whether the third user will be a guarantor for the first user, and when the server control unit receives from the third terminal an agreement that the third user will be a guarantor for the first user, transmits to the first terminal a permission to open an account.

6. The account management server according to claim 5.

7. the server control unit designates the first user as a guarantor of another user when the first user satisfies a predetermined condition after opening the account; 7. An account management server according to claim 4 or 6.

8. the server control unit causes the first terminal to receive the searched data of the account holder offline, and when receiving from the first terminal a notice that the second user has been selected as a first guarantor candidate, inquires of a second terminal used by the second user as to whether or not the second user will be a guarantor for the first user; 2. The account management server according to claim 1.

9. An information processing method executed by an account management server, comprising: receiving, from a first terminal used by a first user who applies for an account opening, data of contacts in a phone book stored in the first terminal or data of people who are connected to the first user through a social networking service; searching for data of the account holder from an account holder information database for storing data of a plurality of account holders who hold the accounts, based on the received data of contacts in the phone book or data of people connected to the first user via the social networking service; permitting the opening of the account if the searched account holder agrees to be a guarantor for the first user; An information processing method comprising:

10. On the computer, A process of receiving, from a first terminal used by a first user who applies to open an account, data of contacts in a phone book stored in the first terminal or data of people who are connected to the first user through a social networking service; A process of searching for data of the account holder from an account holder information database for storing data of a plurality of account holders who hold the account, based on the received data of contacts in the phone book or data of people connected to the first user via the social networking service; a process of permitting the opening of the account if the searched account holder agrees to be a guarantor for the first user; A program for executing the above.

Images