Server device, system, and server device control method and program

Abstract

Provided is a server device that makes it possible for a user to ascertain the state of each business operation that provides a service in which biometric authentication is used. This server device comprises a service selection control means and a storage means. The service selection control means makes it possible for a user to select a service provider from which the user wishes to receive the provision of a service, from among a plurality of service providers providing services in which biometric authentication is used. The storage means stores information about a service provider selected by the user. The service selection control means makes it possible for the user to identify service providers that have been selected by the user and service providers that have not been selected by the user, when the user is selecting a service provider from which the user wishes to receive the provision of a service.

Description

[Technical field]

[0001] The present invention relates to a server device, a system, a control method for a server device, and a storage medium. [Background technology]

[0002] Biometric authentication technology exists.

[0003] For example, Patent Document 1 states that an authentication server that can perform authentication using biometric information with greater security is provided. Patent Document 2 states that an authentication system, method, and program are provided that allow only genuine users to easily use multiple online services. Patent Document 3 states that a biometric authentication service that is economical, popular, and secure is provided. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] International Publication No. 2021 / 205661 [Patent Document 2] JP 2018-074388 A [Patent Document 3] JP 2016-149087 A Summary of the Invention [Problem to be solved by the invention]

[0005] In recent years, various services using biometric authentication have begun to be provided. As the provision of services using biometric authentication becomes widespread, users will want to manage the service providers who hold their biometric information. Specifically, users will want to provide their biometric information to service providers from which they wish to receive services, and delete their biometric information from service providers from which they do not intend to receive services. In other words, users will want to select (opt-in) or exclude (opt-out) businesses that provide services using biometric authentication based on their own will. To do this, it becomes necessary for users to be able to grasp the status of each service provider.

[0006] The main object of the present invention is to provide a server device, a system, a method for controlling a server device, and a storage medium that contribute to enabling users to grasp the status of each business that provides services using biometric authentication. [Means for solving the problem]

[0007] According to a first aspect of the present invention, a server device is provided, comprising: a service selection control means that enables a user to select a service provider from which the user wishes to receive services from among a plurality of service providers that provide services using biometric authentication; and a storage means that stores information on the service provider selected by the user, wherein the service selection control means enables the user, when selecting a service provider from which the user wishes to receive services, to distinguish between service providers selected by the user and service providers not selected by the user.

[0008] According to a second aspect of the present invention, there is provided a system including a terminal carried by a user and a server device, the server device comprising a service selection control means that enables the user to select a service provider from among a plurality of service providers that provide services using biometric authentication, and a storage means that stores information on the service provider selected by the user, and when the user selects a service provider from which the user wishes to receive services, the service selection control means displays on the terminal the service providers selected by the user and the service providers not selected by the user so that the user can distinguish between them.

[0009] According to a third aspect of the present invention, there is provided a method for controlling a server device, in which a server device allows a user to select a service provider from which the user wishes to receive services from among a plurality of service providers that provide services using biometric authentication, stores information about the service provider selected by the user, and, when the user selects a service provider from which the user wishes to receive services, enables the user to distinguish between the service provider selected by the user and the service providers not selected by the user.

[0010] According to a fourth aspect of the present invention, there is provided a computer-readable storage medium storing a program for causing a computer mounted on a server device to execute the following processes: a process for enabling a user to select a service provider from which the user wishes to receive services from among a plurality of service providers that provide services using biometric authentication; a process for storing information on the service provider selected by the user; and a process for enabling the user, when selecting a service provider from which the user wishes to receive services, to distinguish between the service provider selected by the user and service providers not selected by the user. Effect of the Invention

[0011] According to each aspect of the present invention, a server device, a system, a method for controlling a server device, and a storage medium are provided that contribute to enabling a user to grasp the status of each business that provides a service using biometric authentication. Note that the effects of the present invention are not limited to the above. The present invention may achieve other effects instead of or in addition to the effects. [Brief description of the drawings]

[0012] [Figure 1] FIG. 1 is a diagram for explaining an overview of an embodiment. [Diagram 2] FIG. 2 is a flowchart showing an example of the operation of an embodiment. [Diagram 3] FIG. 3 is a diagram illustrating an example of a schematic configuration of an authentication system according to the first embodiment. [Figure 4] FIG. 4 is a diagram for explaining the operation of the authentication system according to the first embodiment. [Diagram 5] FIG. 5 is a diagram for explaining the operation of the authentication system according to the first embodiment. [Figure 6] FIG. 6 is a diagram for explaining the operation of the authentication system according to the first embodiment. [Figure 7] FIG. 7 is a diagram for explaining the operation of the authentication system according to the first embodiment. [Figure 8] FIG. 8 is a diagram illustrating an example of a processing configuration of the control server according to the first embodiment. [Figure 9] FIG. 9 is a diagram illustrating an example of the account management database according to the first embodiment. [Figure 10] FIG. 10 is a diagram showing an example of a display on the terminal according to the first embodiment. [Figure 11] FIG. 11 is a diagram showing an example of a display on the terminal according to the first embodiment. [Figure 12] FIG. 12 is a flowchart illustrating an example of the operation of the control server according to the first embodiment. [Figure 13] FIG. 13 is a flowchart illustrating an example of the operation of the control server according to the first embodiment. [Figure 14] FIG. 14 is a diagram illustrating an example of a processing configuration of the service server according to the first embodiment. [Figure 15] FIG. 15 is a diagram illustrating an example of the user management database according to the first embodiment. [Figure 16] FIG. 16 is a diagram illustrating an example of a processing configuration of the authentication terminal according to the first embodiment. [Figure 17] FIG. 17 is a diagram illustrating an example of a processing configuration of a terminal according to the first embodiment. [Figure 18] FIG. 18 is a diagram showing an example of a display on the terminal according to the first embodiment. [Figure 19] FIG. 19 is a sequence diagram showing an example of the operation of the authentication system according to the first embodiment. [Figure 20] FIG. 20 is a sequence diagram showing an example of the operation of the authentication system according to the first embodiment. [Figure 21] FIG. 21 is a diagram showing an example of a display on a terminal according to a modification of the first embodiment. [Figure 22] FIG. 22 is a diagram for explaining the operation of the authentication system according to the second embodiment. [Diagram 23] FIG. 23 is a diagram showing an example of a display on a terminal according to the second embodiment. [Figure 24] FIG. 24 is a diagram for explaining the operation of the authentication system according to the second embodiment. [Diagram 25] FIG. 25 is a diagram for explaining the operation of the authentication system according to the third embodiment. [Figure 26] FIG. 26 is a diagram for explaining the operation of the authentication system according to the third embodiment. [Figure 27] FIG. 27 is a flowchart showing an example of the operation of the authentication system according to the third embodiment. [Figure 28] FIG. 28 is a diagram for explaining the operation of the authentication system according to the third embodiment. [Figure 29] FIG. 29 is a sequence diagram showing an example of the operation of the authentication system according to the third embodiment. [Diagram 30] FIG. 30 is a diagram for explaining the operation of an authentication system according to a modification of the third embodiment. [Diagram 31] FIG. 31 is a diagram for explaining the operation of the authentication system according to the fourth embodiment. [Diagram 32] FIG. 32 is a diagram showing an example of a display on a terminal according to the fourth embodiment. [Diagram 33] FIG. 33 is a diagram showing an example of a display on a terminal according to the fifth embodiment. [Diagram 34] FIG. 34 is a diagram showing an example of a display on a terminal according to the fifth embodiment. [Diagram 35] FIG. 35 is a diagram showing an example of a display on a terminal according to the fifth embodiment. [Diagram 36] FIG. 36 is a diagram showing an example of a display on a terminal according to the fifth embodiment. [Figure 37] FIG. 37 is a diagram illustrating an example of a hardware configuration of a control server according to the present disclosure. [Figure 38] FIG. 38 is a diagram showing an example of a display on a terminal according to a modification of the present disclosure. [Figure 39] FIG. 39 is a diagram showing an example of a schematic configuration of an authentication system according to a modification of the present disclosure. [Diagram 40] FIG. 40 is a diagram showing an example of a schematic configuration of an authentication system according to a modification of the present disclosure. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0013] First, an outline of one embodiment will be described. The reference numerals in the drawings are added to each element for convenience as an example to aid in understanding, and the description of the outline is not intended to be limiting. Furthermore, unless otherwise specified, the blocks shown in each drawing represent functional units rather than hardware units. The connection lines between the blocks in each drawing include both bidirectional and unidirectional. The unidirectional arrows are used to diagrammatically indicate the flow of the main signal (data) and do not exclude bidirectionality. In this specification and the drawings, elements that can be similarly described may be given the same reference numerals to avoid redundant description.

[0014] A server device 100 according to an embodiment includes a service selection control means 101 and a storage means 102 (see FIG. 1). The service selection control means 101 enables a user to select a service provider from which the user wishes to receive a service from among a plurality of service providers that provide services using biometric authentication (step S1 in FIG. 2). The storage means 102 stores information on the service provider selected by the user (step S2). When the user selects a service provider from which the user wishes to receive a service, the service selection control means 101 enables the user to distinguish between the service provider selected by the user and the service providers not selected by the user (step S3).

[0015] When a user selects a service provider from among multiple service providers from which the user wishes to receive a service, the server device 100, for example, displays on the user's terminal a service provider that the user has already selected and a service provider that has not been selected, distinguishing between them. As a result, the user can grasp the status of each business that provides a service using biometric authentication. In other words, the user can accurately recognize the service provider that holds the user's biometric information (selected service provider) and the service provider that does not hold the user's biometric information (non-selected service provider).

[0016] Specific embodiments will be described in more detail below with reference to the drawings.

[0017] [First embodiment] The first embodiment will be described in more detail with reference to the drawings.

[0018] [System configuration] Fig. 3 is a diagram showing an example of a schematic configuration of an authentication system (information processing system) according to the first embodiment. As shown in Fig. 3, the authentication system includes a plurality of service providers A to C and an authentication center.

[0019] A service provider is a business entity that provides services to users using biometric authentication. The authentication system disclosed in this application is premised on service providers belonging to various business types and industries providing services using biometric authentication. Note that the services provided by the service providers may be either paid or free.

[0020] Examples of service providers include businesses that provide rental housing services such as condominiums, businesses where employees work (users' workplaces), businesses that provide events such as concerts, businesses that operate means of transportation such as airplanes, etc. Service providers disclosed in this application also include businesses that provide accommodation services, businesses such as retail stores, businesses that provide financial services, educational businesses, etc. In addition, service providers are not limited to private businesses. Public institutions such as local governments may also be service providers.

[0021] The authentication center is the entity that controls and manages the biometric authentication of multiple service providers. Businesses (service providers) that wish to provide services using biometric authentication to users (general consumers) must enter into a contract with the authentication center.

[0022] The authentication center includes a control server 10. The control server 10 realizes the main functions of the authentication center. The control server 10 may be installed in the building of the authentication center, or may be a server installed on a network (cloud).

[0023] As described above, service providers provide users with services that use biometric authentication. For example, biometric authentication is performed when a user goes to the office or returns to his or her apartment, and only users (employees, residents) with proper qualifications can enter the office, etc. Alternatively, biometric authentication is performed for ticket confirmation at an event venue, check-in procedures at a hotel, immigration procedures at an airport, etc. In these types of services (procedures), services are provided to users with proper qualifications. Alternatively, payment procedures at retail stores, etc. are performed using biometric authentication.

[0024] 3, each service provider includes a service server 20 and at least one authentication terminal 30. The devices included in the service provider (service server 20, authentication terminal 30) are connected to each other so that they can communicate with each other. Specifically, the service server 20 and the authentication terminal 30 are connected by a wired or wireless communication means.

[0025] The service server 20 is connected to the control server 10 via a network. The service server 20 may be installed in the building of a service provider, or may be installed on the cloud.

[0026] The service server 20 stores information required when providing a service to a user. Specifically, the service server 20 stores business information required when each service provider provides a service using biometric authentication, and information required for biometric authentication. The service server 20 uses a user management database to store the business information and information required for biometric authentication. The user management database will be described in detail later.

[0027] For example, the service server 20 of the company where the user works stores information such as the user's (employee's) name, date of birth, employee number, department, place of work, etc. as business information. Also, the service server 20 of an event company hosting an event stores information regarding tickets purchased by event participants as business information. Furthermore, the service server 20 of a retail store or the like stores credit card information required for payment as business information.

[0028] The information necessary for biometric authentication stored in the service server 20 will be described in detail later.

[0029] The authentication terminal 30 is a device that serves as an interface for users who receive services. The authentication terminal 30 is installed at the service providing location of each service provider. More specifically, the authentication terminal 30 is installed in a store or the like that the user actually visits.

[0030] The authentication terminal 30 has functions and forms according to the type of business of the service provider. For example, the authentication terminal 30 installed in a workplace or an event venue can be a gate device equipped with a gate that restricts the passage of users (persons to be authenticated). Also, the authentication terminal 30 installed in a retail store can be a tablet terminal.

[0031] 3 is merely an example and is not intended to limit the configuration of the authentication system disclosed herein. For example, the authentication center may include two or more control servers 10. Furthermore, it is sufficient that at least one or more service providers participate in the authentication system. Furthermore, it is sufficient that each service provider has at least one or more service servers 20 and at least one or more authentication terminals 30.

[0032] [General operation] Next, the general operation of the authentication system according to the first embodiment will be described.

[0033] <Create account> A user who wishes to receive a service from a service provider needs to create an account in the system. Specifically, the user operates a terminal 40 owned by the user to access the control server 10 (see FIG. 4).

[0034] A user inputs login information (e.g., login ID, password), name, date of birth, etc., on a WEB page provided by the control server 10. When the control server 10 acquires the login information, etc., it generates an ID for identifying the user. In the following explanation, the ID generated by the control server 10 is referred to as a "system ID." The control server 10 associates the generated system ID with the login information, etc., and stores them in an account management database. The account management database will be described in detail later.

[0035] <Biometric information registration> A user who wishes to receive services using biometric authentication needs to register his / her own biometric information in the terminal 40 .

[0036] Here, in order to provide a service using biometric authentication, it is necessary that authentication information generated from biometric information is registered in advance with the service provider. For example, when a service is provided using face authentication, it is necessary that a feature amount (feature vector) generated from a face image is registered in advance as authentication information. Alternatively, when a service is provided using fingerprint authentication, it is necessary that a feature amount generated from a fingerprint image is registered in advance as authentication information.

[0037] In the following description, original (basic) information for generating authentication information, such as a face image or a fingerprint image, is referred to as "original biometric information." Also, features generated from the original biometric information and registered in advance are referred to as "registered authentication information."

[0038] Once a user has completed creating an account, the user must register the original biometric information (e.g., a facial image) on the terminal 40 that the user possesses. The terminal 40 acquires the original biometric information using a GUI (Graphical User Interface) or the like. The terminal 40 stores the acquired original biometric information (e.g., a facial image) internally. In this manner, the terminal 40 stores the original biometric information that serves as the original of authentication information used for biometric authentication.

[0039] <Select a service> After registering in the system (creating an account) and registering their original biometric information, the user selects the service provider from which they would like to receive biometric authentication services. The user selects the service provider from which they would like to receive services from among the multiple service providers participating in the authentication system (service providers under contract with the authentication center).

[0040] The control server 10 stores information on the service providers participating in the authentication system. For example, the control server 10 stores the name, business type, location, etc. of the service provider. The control server 10 holds information on each of a plurality of service providers and enables the user to select a service provider.

[0041] When a user operates the terminal 40 to perform a predetermined operation on the portal site, the control server 10 displays a GUI or the like that enables the user to select a desired service (service provider) on the terminal 40. The control server 10 uses the GUI to obtain the service (biometric authentication service) desired by the user.

[0042] <User registration> When the service provider selected by the user is acquired, the control server 10 executes control related to "user registration" that enables the selected service provider to provide the user with a service using biometric authentication.

[0043] Specifically, the control server 10 controls the above-mentioned selected service provider to acquire the original biometric information stored in the user's terminal 40. The service provider generates registered authentication information from the acquired original biometric information, and associates the generated registered authentication information with business information, thereby becoming ready to provide the service to the user.

[0044] As described above, there are various types of service providers depending on the industry and business form they are in. In this disclosure, the service providers participating in the authentication system are classified into four types.

[0045] The first type of service provider is a business entity that does not have an account (portal site) for managing users who provide services and uses the same business information repeatedly. For example, small businesses (companies where users work) and condominium management companies are service providers of the first type.

[0046] The second type of service provider is a business entity that does not have an account (portal site) for managing users who provide the service, and in principle uses the business information required for authentication only once. For example, business entities that operate amusement parks and theme parks by outsourcing ticket sales to other companies (ticket sales companies, etc.), and event companies that hold events such as concerts, belong to the second type.

[0047] The third type of service provider is a business that has an account (portal site) for managing users (customers) to whom the service is provided and uses the same business information repeatedly. For example, a service provider such as a retailer that sells products belongs to the third type.

[0048] The fourth type of service provider is a business operator that has an account (portal site) for managing users who provide the service, and in principle uses the business information required for authentication only once. For example, business operators that sell tickets and operate amusement parks and theme parks, and event companies that hold events such as concerts, belong to the fourth type.

[0049] The control server 10 executes user registration control according to the type of service provider selected by the user. In the first embodiment, the "user registration" related to the above-mentioned first type will be described.

[0050] <Type 1 User Registration> A user operates the terminal 40 to access the control server 10 and logs in to the user's portal site. When the user performs a predetermined operation on the portal site (e.g., pressing a service provider selection button), the control server 10 displays a GUI including a list of service providers on the terminal 40.

[0051] When the user selects one service provider from among the service providers displayed in a list on the terminal 40, the control server 10 acquires information specifying the service provider to be registered as the user, as necessary. For example, the control server 10 acquires from the user, using a GUI or the like, a "management code" that specifies the company where the user works or the management company of the apartment building where the user lives. That is, the user operates the terminal 40 to input the management code.

[0052] When the service provider to be registered as a user is identified by the management code, the control server 10 determines the type of the identified service provider. In the first embodiment, the control server 10 determines that a first type of service provider has been selected.

[0053] When the service provider is specified, the control server 10 requests the user to provide the original biometric information. Specifically, the control server 10 transmits an "original provision request" to the user's terminal 40 (see step S01 in FIG. 5).

[0054] When receiving the original provision request, the terminal 40 transmits the original biometric information (for example, a face image) of the user to the control server 10 (step S02).

[0055] The control server 10 notifies the service provider selected by the user (first type service provider) of the user's system ID, the acquired original biometric information, the personal identification information, etc. The personal identification information is information for identifying the user. Examples of the personal identification information include the user's name, or a combination of the user's name and date of birth. Alternatively, an employee number, an apartment room number, etc. may be used as the personal identification information.

[0056] The control server 10 transmits a "user registration request" including the system ID, the original biometric information, the individual identification information, and the like, to the service server 20 of the service provider selected by the user (step S03).

[0057] The service server 20 that has received the user registration request searches the user management database using the acquired personal identification information to identify the user who wishes to register (to receive services using biometric authentication). The service server 20 stores the system ID and registration authentication information (e.g., feature amount) obtained from the original biometric information in the entry for the identified user.

[0058] The service server 20 transmits a response including the result of the user registration (user registration success or failure) to the control server 10 (step S04).

[0059] In this way, the user provides the original biometric information (master data of the biometric information) stored in the terminal 40 such as a smartphone to the service provider via the control server 10 of the authentication center. At that time, the terminal 40 continues to internally hold the original biometric information (master data) of the user.

[0060] The control server 10 deletes the original biometric information (e.g., a face image) acquired from the user when the control server 10 transmits a user registration request to the service server 20 or when the control server 10 receives a response to the request. In addition, the service server 20 deletes the original biometric information acquired from the control server 10 when it generates registration authentication information (e.g., feature amount).

[0061] <Provision of services> After completing the selection of the service, the user visits the service provider to receive the service. For example, the user visits the facility or store of the service provider, such as an office, an amusement park, an event venue, or a retail store, where the user receives the service selected by the user.

[0062] The authentication terminal 30 acquires biometric information of a user (person to be authenticated) who receives the provision of a service. For example, the authentication terminal 30 photographs the person to be authenticated and acquires biometric information (e.g., a facial image) corresponding to the original biometric information. The authentication terminal 30 transmits an authentication request including the acquired facial image to the service server 20 (see FIG. 6). Note that the authentication terminal 30 transmits other information (e.g., payment information such as the price of a purchased item) together with the biometric information to the service server 20 as necessary. Alternatively, the authentication terminal 30 may transmit information used in the authentication process (e.g., credit card information) together with the biometric information (information for identifying an individual, ID) to the service server 20.

[0063] The service server 20 generates authentication information for matching from the acquired face image. For example, the service server 20 generates features from the face image for matching. The service server 20 executes a matching process (1:N matching; N is a positive integer, the same applies below) using the generated authentication information for matching (hereinafter, referred to as matching authentication information) and registered authentication information registered in the user management database.

[0064] The service server 20 identifies the user (person to be authenticated) registered in the user management database through a matching process.

[0065] The service server 20 authenticates the user using the business information of the identified user. For example, the service server 20 of the employee's employer determines that the authentication has been successful if the person to be authenticated is an employee of the company and has the qualifications to enter the office. Alternatively, a service server 20 installed at an event venue determines that the authentication has been successful if the ticket purchased by the person to be authenticated is valid. Alternatively, a service server 20 installed at a retail store determines that the authentication has been successful if the payment for the goods, etc. purchased by the person to be authenticated is successful.

[0066] The service server 20 transmits the authentication result (authentication success, authentication failure) to the authentication terminal 30.

[0067] The authentication terminal 30 executes a process according to the authentication result. For example, when a successful authentication is received, an authentication terminal 30 installed in an office opens the gate and allows the person to be authenticated to pass through. Alternatively, when a successful authentication is received, an authentication terminal 30 installed at an event venue allows the person to pass through the gate. Alternatively, when a successful authentication is received, an authentication terminal 30 installed at a retail store notifies the person to be authenticated that payment for the product has been completed.

[0068] <Cancellation of user registration> A user may cancel his / her user registration with a service provider from which he / she wishes to receive services and has registered as a user.

[0069] The user operates the terminal 40 to access the control server 10 and logs in to the user's portal site. When the user performs a predetermined operation on the portal site (e.g., pressing a release button for a service provider), the control server 10 displays a GUI including a list of service providers on the terminal 40.

[0070] When a user selects a service provider for which user registration has already been completed from among the service providers listed on the terminal 40, the control server 10 executes control related to the cancellation of the user registration of the selected service provider.

[0071] When a service provider from which the user is to be deregistered is selected, the control server 10 transmits a "deregistration request" including the user's system ID to the service server 20 of the selected service provider (step S10 in FIG. 7).

[0072] The service server 20 searches the user management database using the system ID as a key, and identifies the user who wishes to cancel user registration (opt-out). The service server 20 deletes at least the system ID and registered authentication information of the identified user from the user management database.

[0073] The service server 20 transmits a response to the deregistration request to the control server 10 (step S11). Specifically, if the deletion of the system ID and the registered authentication information is successful (if the opt-out is successful), the service server 20 transmits a positive response indicating that to the control server 10. If the deletion of the system ID and the registered authentication information fails (if the opt-out is unsuccessful), the service server 20 transmits a negative response indicating that to the control server 10.

[0074] The control server 10 notifies the user of the result of the processing in response to the deregistration request (user deregistration successful, user deregistration failed).

[0075] Next, each device included in the authentication system according to the first embodiment will be described in detail.

[0076] [Control server] Fig. 8 is a diagram showing an example of a processing configuration (processing module) of the control server 10 according to the first embodiment. Referring to Fig. 8, the control server 10 includes a communication control unit 201, an account management unit 202, a business operator management unit 203, a service selection control unit 204, a user registration control unit 205, and a storage unit 206.

[0077] The communication control unit 201 is a means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the service server 20. The communication control unit 201 also transmits data to the service server 20. The communication control unit 201 passes data received from other devices to other processing modules. The communication control unit 201 transmits data acquired from other processing modules to other devices. In this way, the other processing modules transmit and receive data to and from other devices via the communication control unit 201. The communication control unit 201 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0078] The account management unit 202 is a means for managing a user's account. When a user operates the terminal 40 to access a specific homepage or the like, the account management unit 202 acquires information necessary to create an account for the user.

[0079] Specifically, the account management unit 202 acquires personal information such as login information, name, and date of birth. Upon acquiring the login information, the account management unit 202 generates a system ID for identifying the user. The system ID may be any information that can uniquely identify the user. For example, the account management unit 202 may assign a unique value each time an account is generated, and use this as the system ID.

[0080] The account management unit 202 stores the generated system ID, login information, name, etc. in an account management database in association with each other (see FIG. 9). Note that the account management database shown in FIG. 9 is merely an example, and is not intended to limit the items to be stored. For example, the account generation date and time, etc. may be stored in the account management database.

[0081] Furthermore, the account management unit 202 acquires login information for logging in to the portal site from the user's terminal 40. The account management unit 202 performs authentication using the login information.

[0082] The business management unit 203 is a means for managing service providers (service businesses) participating in the authentication system. The business management unit 203 acquires business information (service provider name, business type, location, management code, address of service server 20, etc.) to be registered in the system from staff of each service provider. The business information may include the type of each service provider (the first to fourth service provider types described above).

[0083] For example, the business management unit 203 may provide each service provider with an interface for inputting business information, etc. Alternatively, each service provider may send a USB (Universal Serial Bus) memory or the like in which the business information, etc. is stored to the authentication center. The business management unit 203 may acquire the business information, etc. from a staff member of the authentication center, etc.

[0084] The business management unit 203 generates an ID (business ID) for the service provider from which the business information, etc. have been acquired. The business management unit 203 stores the generated business ID and the acquired business information, etc. in association with each other.

[0085] The service selection control unit 204 is a means for controlling the selection of a biometric authentication service (service provider) by a user. The service selection control unit 204 enables the user to select a service provider from which the user wishes to receive a service from among a plurality of service providers that provide services using biometric authentication.

[0086] When a user operates the terminal 40 to log in to a portal site and performs a predetermined operation on the portal site, the service selection control unit 204 displays, for example, a GUI as shown in FIG.

[0087] When displaying the above GUI, the service selection control unit 204 performs display so that the user can distinguish between service providers that have already been selected and those that have not been selected. In the example of Fig. 10, a service provider with a check mark in the upper right corner of an icon representing a service business indicates a service provider that has already been selected, and a service provider with no check mark indicates a service provider that has not been selected. In this way, the service selection control unit 204 enables the user, when selecting a service provider from which the user wishes to receive a service, to distinguish between service providers that have already been selected by the user and those that have not been selected by the user.

[0088] The service selection control unit 204 uses the business information and information registered in the account management database to display a GUI such as that shown in Fig. 10. Specifically, the service selection control unit 204 refers to the business information and generates a list of service providers who have concluded a contract with the authentication center. The service selection control unit 204 also refers to the selected service field in the account management database and acquires the service provider (the business ID of the service provider) selected by the user.

[0089] Furthermore, when displaying the list of service providers, the service selection control unit 204 may also provide the user with more detailed information about each service provider (for example, the type of business, the services provided, the location of the store, etc.).

[0090] Here, there are many companies and condominium management companies where the user works, and it is not realistic to display a list of these companies and management companies. Therefore, the service selection control unit 204 may display icons that represent multiple service providers. In the example of Fig. 10, multiple companies (places of work) are displayed as "offices" and multiple condominium management companies are displayed as "condominiums."

[0091] When an icon representing multiple service providers is selected (when the "Office" or "Apartment" icon is pressed in the example of FIG. 10), the service selection control unit 204 acquires the management code of the service provider for which the user is to be registered. Specifically, the service selection control unit 204 acquires the management code using a GUI as shown in FIG. 11. The user acquires the management code of their company or apartment from their workplace, a management company, etc.

[0092] The service selection control unit 204 identifies the service provider selected by the user from the management code. In this way, the service selection control unit 204 identifies the service provider selected (specified) by the user by acquiring, as necessary, from the terminal 40, the management code corresponding to the service provider from which the user wishes to receive a service.

[0093] Furthermore, when an icon that does not represent multiple service providers (an icon that directly indicates a service provider; in the example of Figure 10, the icons of retail stores A to C) is pressed, the service selection control unit 204 can identify the service provider selected by the user without using the management code.

[0094] The service selection control unit 204 passes information on the service provider selected by the user (for example, the business ID of the service provider for which the user wishes to register) to the user registration control unit 205.

[0095] In addition, the service selection control unit 204 enables the user to cancel a service provider that has already been selected (to end receiving a service from that service provider). Specifically, when the user performs a predetermined operation on the portal site, the service selection control unit 204 displays a GUI as shown in FIG.

[0096] 10, when a service provider for which a user has already been registered (a service provider with a check mark in the upper right corner in the example of FIG. 10) is selected, the service selection control unit 204 performs control to cancel the user registration of the selected service provider. Note that the service selection control unit 204 acquires the management code of the service provider for which the user registration is to be cancelled, as necessary.

[0097] The service selection control unit 204 delivers to the user registration control unit 205 information on the service provider selected by the user (the service provider for which the user wishes to cancel the user registration).

[0098] The user registration control unit 205 is a means for controlling "user registration" by the control server 10. For example, the user registration control unit 205 performs control so that a service provider selected by a user using a predetermined code (management code) acquires original biometric information that is the original of authentication information used for biometric authentication.

[0099] The user registration control unit 205 controls "user registration" that enables a service provider selected by a user to provide the user with a service using biometric authentication. Alternatively, the user registration control unit 205 controls the cancellation of user registration.

[0100] The user registration control unit 205 executes user registration control according to the type of service provider desired for user registration. The user registration control unit 205 acquires the type of the selected service provider from the business information. In the first embodiment, a case where a first type of service provider is selected will be described. That is, the user registration control unit 205 performs user registration control for a service provider selected by a user who does not have an account for managing customers to acquire original biometric information that is the original of authentication information used for biometric authentication.

[0101] When the information of the service provider selected by the user is acquired from the service selection control unit 204, the user registration control unit 205 transmits an “original provision request” to the terminal 40 carried by the user. The user registration control unit 205 receives the original biometric information (e.g., a face image) of the user from the terminal 40.

[0102] The user registration control unit 205 transmits a user registration request including the user's system ID, original biometric information, individual identification information, etc. to the service server 20 of the service provider corresponding to the service selected by the user.

[0103] The user registration control unit 205 acquires the system ID and individual identification information (for example, name or a combination of name and date of birth) from the account management database.

[0104] The user registration control unit 205 receives a response (positive response, negative response) to the user registration request.

[0105] If a positive response (user registration successful) is received, the user registration control unit 205 registers the business ID of the service provider selected by the user in the account management database. Also, if a positive response is received, the user registration control unit 205 notifies the user that the user registration for the selected service provider was successful.

[0106] If a negative response (user registration failure) is received, user registration control unit 205 notifies the user accordingly.

[0107] When the user desires to cancel his / her registration, the user registration control unit 205 transmits a "registration cancellation request" including the user's system ID to the service server 20 of the service provider for which cancellation is desired.

[0108] The user registration control unit 205 receives a response (positive response, negative response) to the deregistration request. The user registration control unit 205 notifies the user of the result of the deregistration request.

[0109] Specifically, when a positive response (deregistration successful) is received, the user registration control unit 205 notifies the user accordingly. For example, the user registration control unit 205 notifies the user that the user registration of the service provider selected by the user has been deregistered by unchecking the icon shown in FIG. 10. Alternatively, when deregistration is successful, the user registration control unit 205 may display a message or the like indicating that the registered authentication information (e.g., feature amount) has been deleted from the service provider (service server 20). That is, the terminal 40 may report to the user that the feature amount registered in the service server 20 has been deleted by deregistration. When a negative response (deregistration failed) is received, the user registration control unit 205 notifies the user accordingly.

[0110] In addition, the user registration control unit 205 reflects information about the service provider who has successfully canceled the user registration (opt-out) in the account management database. The user registration control unit 205 deletes the business ID of the service provider who has successfully canceled the user registration from the selected service field in the account management database.

[0111] Alternatively, the account management database may store a history of user registration and cancellation. In this case, the user registration control unit 205 stores the business ID of a service provider who has been cancelled (opted out) after being registered (opted in) in the account management database (for example, stores the business ID in a cancelled service field).

[0112] The storage unit 206 is a means for storing information necessary for the operation of the control server 10. The storage unit 206 uses an account management database to store information on the service provider selected by the user (the business ID of the service provider selected by the user).

[0113] The above-described operation of the control server 10 for user registration can be summarized as shown in the flowchart of FIG.

[0114] The control server 10 acquires a biometric authentication service (service provider) desired by the user (acquire selected service; step S101). At that time, the control server 10 acquires a management code of the service provider as necessary.

[0115] The control server 10 acquires the original biometric information by transmitting an "original provision request" to the terminal 40 carried by the user (step S102).

[0116] The control server 10 transmits a user registration request including the system ID, the acquired original biometric information (for example, a face image) and the individual identification information (for example, a name) to the service server 20 (step S103).

[0117] The control server 10 receives a response to the user registration request from the service server 20 (step S104).

[0118] The control server 10 notifies the user of the success or failure of the user registration (step S105).

[0119] In this way, the control server 10 acquires the original biometric information by requesting the provision of the original biometric information from the terminal 40 held by the user, and transmits the acquired original biometric information to the service server 20 of the service provider selected by the user. At that time, the control server 10 transmits at least a system ID for managing the user on its own device and the acquired original biometric information to the service server 20.

[0120] Furthermore, the above-described operation of the control server 10 in relation to user registration cancellation can be summarized as shown in the flowchart of FIG.

[0121] The control server 10 acquires the biometric authentication service (service provider) for which the user wishes to cancel registration (acquire selected service; step S201).

[0122] The control server 10 transmits a deregistration request including the system ID to the service server 20 of the selected service provider (step S202).

[0123] The control server 10 receives a response to the deregistration request from the service server 20 (step S203).

[0124] The control server 10 notifies the user of the success or failure of the user deregistration (step S204).

[0125] [Service Server] Fig. 14 is a diagram showing an example of a processing configuration (processing module) of the service server 20 according to the first embodiment. Referring to Fig. 14, the service server 20 includes a communication control unit 301, a business information management unit 302, a user registration control unit 303, an authentication unit 304, and a storage unit 305.

[0126] The communication control unit 301 is a means for controlling communication with other devices. For example, the communication control unit 301 receives data (packets) from the control server 10. The communication control unit 301 also transmits data to the control server 10. The communication control unit 301 passes data received from other devices to other processing modules. The communication control unit 301 transmits data acquired from other processing modules to other devices. In this way, the other processing modules transmit and receive data to and from other devices via the communication control unit 301. The communication control unit 301 has a function as a receiver that receives data from other devices and a function as a transmitter that transmits data to other devices.

[0127] The business information management unit 302 is a means for managing and controlling business information required by the service provider to provide the service.

[0128] The business information management unit 302 acquires business information necessary for the provision of the company's services by any means. For example, the business information management unit 302 of the user's employer acquires information such as the employee's name, date of birth, employee number, department, place of work, etc. as business information.

[0129] The business information management unit 302 may acquire the business information from staff of the service provider, or may acquire the business information directly from the user using a homepage or other means.

[0130] The business information management unit 302 manages business information using a user management database.

[0131] A detailed description of the business information management unit 302 will be omitted here because details of business information for individual services and the method of acquiring the same are different from the gist of the disclosure of this application.

[0132] The user registration control unit 303 is a unit for controlling user registration by a service provider. The user registration control unit 303 processes a user registration request received from the control server 10.

[0133] When a user registration request is received, the user registration control unit 303 searches the user management database using the individual identification information (for example, name) included in the user registration request as a key, and identifies the corresponding user (entry).

[0134] If the corresponding user is registered in the user management database, the user registration control unit 303 generates registration authentication information from the acquired original biometric information (e.g., a face image). For example, when a face image is acquired, the user registration control unit 303 generates a feature amount (feature vector) corresponding to a face recognition algorithm adopted by the company as the registration authentication information.

[0135] Since existing technology can be used for the process of generating the feature amounts, detailed description thereof will be omitted. For example, the user registration control unit 303 extracts the eyes, nose, mouth, etc. as feature points from the face image. After that, the user registration control unit 303 calculates the position of each feature point and the distance between each feature point as feature amounts, and generates a feature vector (vector information that characterizes the face image) consisting of multiple feature amounts.

[0136] When the registered authentication information (eg, feature amount) is generated, the user registration control unit 303 stores the system ID, the generated registered authentication information (feature amount) and the business information in association with each other in the user management database (see FIG. 15).

[0137] 15 is merely an example, and is not intended to limit the items to be stored in the user management database. For example, the date and time of user registration may be registered in the user management database.

[0138] When the user registration is normally completed, the user registration control unit 303 transmits an affirmative response indicating that the user registration was successful to the control server 10. The user registration control unit 303 generates registration authentication information (e.g., feature amount), registers the generated registration authentication information in the user management database, and then deletes the original biometric information acquired from the control server 10.

[0139] If the user registration is not normally completed, the user registration control unit 303 transmits a negative response to the control server 10, indicating that the user registration has failed. For example, a negative response is transmitted to the control server 10 when the personal identification information (e.g., name) received from the control server 10 is not registered in the user management database or when valid registration authentication information cannot be generated from the original biometric information.

[0140] Furthermore, the user registration control unit 303 processes a deregistration request received from the control server 10 .

[0141] When a deregistration request is received, the user registration control unit 303 searches the user management database using the system ID included in the deregistration request as a key to identify the corresponding user. The user registration control unit 303 deletes at least the system ID and registered authentication information (e.g., feature amounts) of the identified user. Alternatively, the user registration control unit 303 deletes the entry of the identified user (entry in the user management database) as necessary.

[0142] If the system ID and the like are successfully deleted, the user registration control unit 303 sends a positive response indicating that the user registration was successfully cancelled to the control server 10. If the user registration was unsuccessful because the system ID obtained from the control server 10 does not exist in the user management database, for example, the user registration control unit 303 sends a negative response indicating that fact to the control server 10.

[0143] The authentication unit 304 is a means for performing biometric authentication of the person to be authenticated. The authentication unit 304 receives an authentication request from the authentication terminal 30. The authentication unit 304 extracts biometric information (for example, a face image) from the authentication request.

[0144] The authentication unit 304 generates matching authentication information from the acquired biometric information. For example, when a face image is acquired, the authentication unit 304 generates features corresponding to the face recognition algorithm adopted by the company. The authentication unit 304 executes matching processing using the generated matching authentication information (feature) and registered authentication information (feature) registered in the user management database.

[0145] Specifically, the authentication unit 304 calculates the similarity between the feature amount (feature vector) to be matched and each of the multiple feature amounts on the registration side. The similarity can be calculated using a chi-square distance, Euclidean distance, or the like. Note that the greater the distance, the lower the similarity, and the closer the distance, the higher the similarity.

[0146] If there is no feature whose similarity is equal to or greater than a predetermined value, the authentication unit 304 sets the authentication result to "authentication failure."

[0147] If there is a feature whose similarity is equal to or greater than a predetermined value, the authentication unit 304 identifies an entry (user) having the most similar feature (registered authentication information) from among multiple entries registered in the user management database. The authentication unit 304 authenticates the person to be authenticated using the business information of the identified user.

[0148] For example, the authentication unit 304 of the user's workplace determines that the authentication was successful if the user identified by the collation process is an employee of the company and has the right to enter the office. Alternatively, the authentication unit 304 determines that the authentication was unsuccessful if the identified user is an employee of the company but is not qualified to enter the location where the authentication terminal 30 is installed.

[0149] Note that detailed explanations regarding authentication processing using business information in each service provider will be omitted, since processing specific to each service provider is outside the scope of the present disclosure.

[0150] The authentication unit 304 transmits the authentication result (authentication success, authentication failure) to the authentication terminal 30.

[0151] The storage unit 305 is a means for storing information necessary for the operation of the service server 20 .

[0152] In addition, the service provider belonging to the first type continues to store the business information used for authenticating the user in principle. For example, the service server 20 continues to store the business information until the employee resigns or the resident moves out. In other words, the service server 20 may delete the business information when the employee resigns or the like.

[0153] [Authentication device] Fig. 16 is a diagram showing an example of a processing configuration (processing module) of the authentication terminal 30 according to the first embodiment. Referring to Fig. 16, the authentication terminal 30 includes a communication control unit 401, a biometric information acquisition unit 402, an authentication request unit 403, a function realization unit 404, and a storage unit 405.

[0154] The communication control unit 401 is a means for controlling communication with other devices. For example, the communication control unit 401 receives data (packets) from the service server 20. The communication control unit 401 also transmits data to the service server 20. The communication control unit 401 passes the data received from other devices to other processing modules. The communication control unit 401 transmits data acquired from other processing modules to other devices. In this way, the other processing modules transmit and receive data to and from other devices via the communication control unit 401. The communication control unit 401 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0155] The biometric information acquisition unit 402 is a means for controlling a camera and acquiring biometric information (e.g., a face image) of a person to be authenticated. The biometric information acquisition unit 402 captures an image in front of the device periodically or at a predetermined timing. The biometric information acquisition unit 402 determines whether or not the acquired image contains a human face image, and if a face image is included, extracts the face image from the acquired image data.

[0156] Since existing technologies can be used for the facial image detection process and facial image extraction process by the biometric information acquisition unit 402, detailed explanations will be omitted. For example, the biometric information acquisition unit 402 may extract a facial image (face region) from image data using a learning model learned by a CNN (Convolutional Neural Network). Alternatively, the biometric information acquisition unit 402 may extract a facial image using a method such as template matching.

[0157] The biometric information acquisition unit 402 passes the extracted face image to the authentication request unit 403 .

[0158] The authentication request unit 403 is a means for requesting authentication of the person to be authenticated to the service server 20. When authentication of the person to be authenticated becomes necessary, the authentication request unit 403 transmits an authentication request including biometric information of the person to be authenticated (the user in front of the authentication terminal 30) to the service server 20.

[0159] The authentication request unit 403 receives an authentication result (authentication success, authentication failure) from the service server 20. The authentication request unit 403 passes the received authentication result to the function realization unit 404.

[0160] The function realization unit 404 is a means for realizing the functions assigned to the authentication terminal 30. For example, when the function realization unit 404 of the authentication terminal 30 installed at the user's workplace receives a notification of successful authentication, it opens the gate and permits the person to be authenticated to enter.

[0161] A detailed description of the function realization unit 404 included in the authentication terminal 30 of each service provider will be omitted because the realization of the functions of the authentication terminal 30 by the function realization unit 404 is different from the gist of the disclosure of this application.

[0162] The storage unit 405 is a means for storing information necessary for the operation of the authentication terminal 30 .

[0163] [Device] Fig. 17 is a diagram showing an example of a processing configuration (processing module) of the terminal 40 according to the first embodiment. Referring to Fig. 17, the terminal 40 includes a communication control unit 501, an account creation control unit 502, an original information acquisition unit 503, a service selection unit 504, and a storage unit 505.

[0164] The communication control unit 501 is a means for controlling communication with other devices. For example, the communication control unit 501 receives data (packets) from the control server 10. The communication control unit 501 also transmits data to the control server 10. The communication control unit 501 passes data received from other devices to other processing modules. The communication control unit 501 transmits data acquired from other processing modules to other devices. In this way, the other processing modules transmit and receive data to and from other devices via the communication control unit 501. The communication control unit 501 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0165] The account creation control unit 502 is a means for controlling the creation of an account by a user. The account creation control unit 502 accesses a predetermined web page or the like provided by the control server 10 in response to an operation by the user.

[0166] The account creation control unit 502 inputs login information, name, date of birth, etc., into the web page in response to a user's operation.

[0167] The original information acquiring unit 503 is a means for acquiring biometric information of a user (original biometric information). The original information acquiring unit 503 displays a GUI or the like for acquiring original biometric information (e.g., a face image) in response to an operation by the user. For example, the original information acquiring unit 503 acquires the original biometric information using a GUI as shown in FIG. 18.

[0168] The original information acquiring unit 503 stores the acquired original biometric information (e.g., a face image) in the storage unit 505. At this time, the original information acquiring unit 503 may encrypt, code, or the like the acquired original biometric information, and store the encrypted original biometric information in the storage unit 505. That is, the terminal 40 held by the user may hold the encrypted original biometric information. The encrypted original biometric information may be decrypted when the original biometric information is transmitted to the control server 10. Alternatively, information for decrypting the encrypted original biometric information (e.g., a common key) may be shared between the terminal 40 and the control server 10, and the control server 10 may decrypt the encrypted original biometric information.

[0169] In principle, the terminal 40 does not delete the original biometric information (e.g., face image) of the user. That is, the terminal 40 does not delete the original biometric information stored in the storage unit 505 unless there is a clear instruction from the user.

[0170] The service selection unit 504 is a means for enabling a user to select a biometric authentication service. The service selection unit 504 logs in to a portal site provided by the control server 10 in response to an operation by the user. The service selection unit 504 transmits information on a service provider selected by the user using a GUI provided by the control server 10 to the control server 10.

[0171] The service selection unit 504 receives a request to provide the original from the control server 10. Upon receiving the request, the service selection unit 504 transmits the original biometric information stored in the storage unit 505 to the control server 10.

[0172] The storage unit 505 is a means for storing information necessary for the operation of the terminal 40 .

[0173] [System Operation] Next, the operation of the authentication system according to the first embodiment will be described. Note that the description of the operation related to the account creation etc. will be omitted. Fig. 19 is a sequence diagram showing an example of the operation related to the user registration of the authentication system according to the first embodiment.

[0174] The terminal 40 transmits information about the service selected by the user (information about the service provider from which the user wishes to receive biometric authentication service) to the control server 10 (transmitting service information; step S20).

[0175] When the user selects a service that he or she wishes to receive, the control server 10 transmits an original provision request to the terminal 40 of the user (step S21).

[0176] In response to receiving the original provision request, the terminal 40 transmits the original biometric information (for example, a face image) to the control server 10 (step S22).

[0177] The control server 10 transmits a user registration request including the system ID, the acquired original biometric information, the individual identification information, and the like, to the service server 20 of the service provider selected by the user (step S23).

[0178] The service server 20 generates authentication information for registration (registration authentication information) from the acquired original biometric information (step S24). The generated registration authentication information is registered in the user management database.

[0179] Next, a description will be given of operations relating to user registration cancellation in the authentication system according to the first embodiment. Fig. 20 is a sequence diagram showing an example of operations in the authentication system according to the first embodiment.

[0180] The control server 10 acquires information about the service provider from whom the user wishes to deregister (acquires a request to deregister; step S30).

[0181] When a service provider from which the user is to be deregistered is designated, the control server 10 transmits a deregistration request including the system ID of the user to the service server 20 of the designated service provider (step S31).

[0182] The service server 20 deletes the user's registered authentication information corresponding to the system ID and the system ID from the user management database, thereby canceling the user registration of the user (step S32).

[0183] The service server 20 transmits a response (positive or negative response) to the deregistration request to the control server 10 (step S33).

[0184] In response to the received response, the control server 10 notifies the user of the result of the user deregistration (step S34).

[0185] <Modification 1 of the First Embodiment> In the above embodiment, the case has been described where the management code input by the user is used to identify a service provider selected by the user from among a plurality of service providers. However, the management code may also be used as information on whether or not the user is qualified to select a service provider. Specifically, the management code may be used as proof that the user is qualified to register a service provider (such as an employer or an apartment management company).

[0186] For example, when a user selects a workplace, a condominium management company, or the like as a service provider, the control server 10 displays a list of workplaces, etc. that have contracts with the authentication center on the terminal 40. When the user selects a workplace, a condominium management company, etc. from the displayed list, the control server 10 prompts the user to input the management code of the workplace, etc.

[0187] When the management code of the service provider selected by the user matches the management code entered by the user, the control server 10 determines that the user is qualified to receive the service from the service provider. On the other hand, when the management code of the service provider selected by the user does not match the management code entered by the user, the control server 10 determines that the user is not qualified to receive the service from the service provider. When the user is qualified to receive the service from the service provider, the control server 10 accepts the user registration (selection of the service provider) of the user. In this way, when the user selects a service provider from which the user wants to receive the service, the service selection control unit 204 requests the user to input a first management code. When the first management code entered by the user matches a predetermined second management code corresponding to the service provider selected by the user, the service selection control unit 204 accepts the selection of the service provider by the user.

[0188] For example, when a user selects workplace A and inputs the correct administration code for workplace A, the control server 10 determines that the user is qualified to register as a user for workplace A. In this manner, the control server 10 can also use the administration code as a password. By using the administration code as a password, the control server 10 can prevent users who are not related to the service provider from registering as users.

[0189] <Modification 2 of the First Embodiment> In the first embodiment, it has been described that the control server 10 (service selection control unit 204) displays on the terminal 40 a service provider that has been selected and a service provider that has not been selected, as shown in Fig. 10. That is, the control server 10 displays on the terminal 40 a service provider that has been selected by the user (a service provider that has been opted in) and a service provider that has not been selected (a service provider that has not been opted in), as shown in Fig. 10.

[0190] The control server 10 may display on the terminal 40 a display that enables the user to grasp details of the unselected service providers. Specifically, the control server 10 may display a distinction between service providers that have never been selected by a user and service providers that have been deregistered after being registered as a user at least once (service providers that have been opted out).

[0191] The control server 10 treats a service provider corresponding to a business operator ID set in the selected service field of the account management database as a "selected service provider." The control server 10 also treats a service provider corresponding to a business operator ID set in the released service field of the account management database as a "service provider whose user registration has been released." The control server 10 treats a service provider that is not set in either field (selected service field, released service field) as a "service provider that has never been selected."

[0192] The control server 10 may display the above three states of the service provider on the terminal 40 when the user selects a service or selects a service to be cancelled. For example, the control server 10 may display on the terminal 40 a screen as shown in FIG.

[0193] In Fig. 21, a selected service provider is indicated by a check mark in the upper right corner of the icon, and a deregistered service provider is indicated by a line drawn through the icon. A service provider with no check mark or line drawn through it is a service provider that has never been selected.

[0194] The control server 10 can distinguish between the above three states of the service provider using any method or manner. For example, the control server 10 can change the color of the icon or make the icon blink. Alternatively, the control server 10 can display a message indicating the above three states. For example, when a user touches an icon, the control server 10 can display (in text) the state of the service provider corresponding to the icon.

[0195] In this way, the storage unit 206 further stores information (service provider ID) of a service provider whose selection has been deselected by the user. When the user selects a service provider from which the user wishes to receive a service, the service selection control unit 204 controls the service provider so that the user can identify three states of the service provider. Specifically, the service selection control unit 204 enables the user to identify a service provider that has been selected by the user, a service provider that has never been selected by the user, and a service provider that has been deselected by the user.

[0196] As described above, the control server 10 according to the first embodiment displays on the user's terminal 40 a service provider that has already been selected by the user, distinguishing between service providers that have not been selected (see, for example, FIG. 10). As a result, the user can grasp the status of each business that provides a service using biometric authentication. In other words, the user can accurately recognize service providers that hold the user's biometric information (selected service providers) and service providers that do not hold the user's biometric information (non-selected service providers).

[0197] Moreover, the control server 10 according to the first embodiment performs control for a service provider belonging to the first type to acquire original biometric information that is the original of authentication information used for biometric authentication. A service provider belonging to the first type is a service provider that does not have an account for managing customers and repeatedly uses business information for providing services to customers. In order to enable such a service provider to acquire the original biometric information of a user (customer), the control server 10 transmits personal identification information (e.g., name) together with the original biometric information of the user to the service server 20 of the service provider. The service server 20 identifies the user using the personal identification information, and stores the registered authentication information and business information of the identified user in association with each other. Completion of the association enables the service provider to provide a service using biometric authentication to the user.

[0198] In addition, in the authentication system according to the first embodiment, original biometric information (e.g., a face image) required for biometric authentication is stored in the terminal 40 of the user. When a user wishes to receive a biometric authentication service, the user selects a service provider, and then the original biometric information stored in the terminal 40 is provided to the selected service provider (a service provider that requires registered authentication information). Once the user registers his / her own biometric information (e.g., a face image) in the terminal 40, the user can receive each service without registering biometric information in each service (various service providing locations). That is, once the user photographs his / her face, the user can use the face authentication service in various locations (services) using the face image without registering the face again. In other words, once biometric information is registered, the biometric information can be applied to various solutions using biometric authentication.

[0199] In addition, the above configuration solves various problems that arise when a service provider provides a biometric authentication service. In existing systems, the service provider needs to have the user register a face image for each service provision location (service). However, in the system according to the first embodiment, it is sufficient for the user to register the face once, and the burden on the service provider for inducing the user to register the face is significantly reduced. In addition, the service provider does not need to hold the original biometric information (face image), and the burden on the service provider for information leakage, etc. is reduced. In particular, when the same service provider employs multiple face recognition algorithms, it is no longer necessary to possess face images corresponding to each face recognition algorithm, and the business risk of the service provider is reduced. In addition, with the consent of the user, the authentication center stores the original biometric information, and the service provider can change the face recognition engine employed in the company or newly adopt a face recognition engine suitable for the service provided. In other words, the service provider is not limited to a face recognition engine of a specific vendor, but can adopt face recognition engines of various vendors suitable for the purpose. As a result, the service provider can avoid the business risk of being overly dependent on one vendor (one face recognition engine). In other words, service providers who participate in the authentication system disclosed in this application can easily support multiple vendors.

[0200] From the user's point of view, since there is no need to register a face image multiple times even for the same service (same service provider), the user's convenience is improved. Furthermore, the original biometric information (face image) is stored in the user's own terminal 40, and the user's face image is not held by an external company, etc., so anxiety about information leakage, etc. is reduced. In other words, the user can enjoy the biometric authentication service with peace of mind.

[0201] [Second embodiment] Next, the second embodiment will be described in detail with reference to the drawings.

[0202] In the second embodiment, user registration for a second type of service provider will be described.

[0203] The configuration of the authentication system according to the second embodiment can be the same as that of the first embodiment, and therefore the description corresponding to Fig. 3 will be omitted. Also, the processing configuration of the control server 10 and the like according to the second embodiment can be the same as that of the first embodiment, and therefore the description thereof will be omitted.

[0204] The following description will focus on the differences between the first and second embodiments.

[0205] As described above, service providers belonging to the second type (for example, management companies of amusement parks, etc., and event companies of concerts, etc.) do not provide portal sites to users. The event companies store information on tickets purchased by users on ticket sales sites, etc., as business information, and authenticate users using the business information.

[0206] A user operates terminal 40 to access a ticket sales site and purchases a desired ticket on the ticket sales site. Specifically, as shown in FIG. 22, a user operates terminal 40 to access ticket management server 50 and purchases a ticket. Terminal 40 acquires information about the purchased ticket. For example, terminal 40 acquires an ID (ticket ID) for uniquely identifying the purchased ticket from ticket management server 50.

[0207] A detailed description of the configuration of the ticket management server 50 and a detailed description of ticket purchase and acquisition of a ticket ID will be omitted because purchasing a ticket is different from the gist of the disclosure of this application and is obvious to those skilled in the art.

[0208] The user selects a service provider belonging to the second type in a GUI as shown in Fig. 10. For example, the user selects an event company that operates amusement parks, theme parks, etc. That is, the user operates the terminal 40 to access the control server 10 and selects a service provider for which user registration is to be performed. The control server 10 acquires an administration code that specifies a service provider from the user as necessary.

[0209] The control server 10 determines the type of the selected service provider based on the business ID of the selected service provider. Here, a service provider belonging to the second type is selected. The business information of a service provider belonging to the second type describes information on business information required by the service provider. In the above example, the business information describes that ticket information (ticket ID) is required.

[0210] When a second type of service provider is selected, the user registration control unit 205 of the control server 10 acquires business information required by the service provider. For example, the user registration control unit 205 acquires a ticket ID by displaying a GUI as shown in FIG. 23 on the terminal 40.

[0211] Upon acquiring the ticket ID, the user registration control unit 205 acquires the original biometric information from the user's terminal 40 by transmitting an original provision request to the terminal 40, as in the first embodiment (steps S41 and S42 in FIG. 22).

[0212] Upon acquiring the original biometric information, the user registration control unit 205 sends a user registration request including the system ID, the acquired ticket ID (business information), and the original biometric information to the service server 20 of the service provider selected by the user (step S43).

[0213] The user registration control unit 303 of the service server 20 generates registered authentication information from the acquired biometric information. In addition, the user registration control unit 303 adds a new entry to the user management database, and stores the system ID, the registered authentication information, and the business information (ticket ID) in the added entry.

[0214] The service server 20 processes the authentication request received from the authentication terminal 30. Specifically, the authentication unit 304 of the service server 20 transmits the ticket ID of the person to be authenticated identified by the matching process to the ticket management server 50 of the ticket sales site (see FIG. 24).

[0215] The ticket management server 50 determines the validity of the acquired ticket ID. Specifically, the ticket management server 50 determines the validity of the ticket based on the event location, date and time of the event, etc., of the ticket specified by the ticket ID. The ticket management server 50 transmits the determination result to the service server 20. The authentication unit 304 determines that the authentication is successful if the ticket is valid. The authentication unit 304 determines that the authentication is unsuccessful if the ticket is invalid.

[0216] In addition, service providers belonging to the second type will, in principle, delete the business information used to authenticate the user. This is because the business information used by service providers belonging to the second type (business information necessary for the service provider to provide a service to the customer; for example, a ticket ID) is information that is essentially used once during biometric authentication. For example, once a ticket purchaser enters an event venue, the ticket purchaser will not be judged as having been successfully authenticated again, and so the corresponding business information is deleted. Alternatively, if re-entry to the event venue is permitted, the service server 20 may delete the corresponding business information after the event ends (a predetermined time after the scheduled end time of the event).

[0217] Also, in the above explanation, tickets for amusement parks, concerts, etc. have been used as examples, but it goes without saying that this is not intended to limit the type of ticket. For example, tickets such as boarding passes and passenger tickets for transportation are also processed in the same way. Furthermore, the tickets covered by this disclosure include not only tickets that are limited to one-time use, but also tickets that are used multiple times. For example, tickets with a validity period, such as round-trip tickets (for example, tickets that allow unlimited use of transportation means for a specified period of time) and commuter passes, are also covered by this disclosure.

[0218] As described above, the control server 10 of the second embodiment transmits, in addition to the system ID and the original biometric information, business information (such as a ticket ID) required for a service provider selected by a user to provide the user with a service using biometric authentication to the user, to the service server 20. As a result, the service provider belonging to the second type can obtain business information (such as a ticket ID) required to authenticate the user.

[0219] [Third embodiment] Next, a third embodiment will be described in detail with reference to the drawings.

[0220] In the third embodiment, user registration for a third type of service provider will be described.

[0221] The configuration of the authentication system according to the third embodiment can be the same as that of the first embodiment, and therefore the description corresponding to Fig. 3 will be omitted. Also, the processing configuration of the control server 10 and the like according to the third embodiment can be the same as that of the first embodiment, and therefore the description thereof will be omitted.

[0222] The following description will focus on the differences between the first to third embodiments.

[0223] The user selects a service provider belonging to the third type on a GUI such as that shown in Fig. 10. For example, the user selects a retail store such as a convenience store.

[0224] A user who selects a service provider belonging to the third type already has an account with the selected service provider. For example, a user who wishes to use biometric authentication payment at a convenience store is a member of the convenience store and already has an account. In addition, payment information for payment is stored as business information in the account of the convenience store. The payment information includes information on any payment method, such as information on a credit card, information on the amount charged to a transportation IC (Integrated Circuit) card, and information for code payment using a two-dimensional barcode.

[0225] The control server 10 enables users to use biometric authentication payment by executing control regarding user registration for retail stores such as convenience stores. The control server 10 links the account of the service provider selected by the user with the account of the authentication system.

[0226] The user operates the terminal 40 to access the control server 10 and select a service provider for which user registration (account linkage) is to be performed (step S51 in FIG. 25).

[0227] The control server 10 determines the type of the selected service provider based on the business ID of the selected service provider. In this example, a service provider belonging to the third type is selected.

[0228] When the third type service provider is selected, the user registration control unit 205 of the control server 10 transmits to the terminal 40 a URL (Uniform Resource Locator) for logging in to the account of the selected service provider (step S52).

[0229] The URL sent to the terminal 40 is a redirect URL for connecting the terminal 40 to the service provider's login page, and the user's system ID is embedded in the redirect URL. The redirect URL is provided in advance to the control server 10 as business information. The user registration control unit 205 embeds the system ID (an ID used by the control server 10 to manage users) in the redirect URL stored as business information, and sends the redirect URL to the terminal 40.

[0230] When the terminal 40 receives the redirect URL, it accesses the login page of the service provider according to the URL. At that time, since the redirect URL includes the system ID, the user registration control unit 303 of the service server 20 can obtain the system ID of the user.

[0231] The user operates the terminal 40 to input login information (login information for logging in to an account of the service provider) into the login page of the service provider (step S53).

[0232] The user registration control unit 303 of the service server 20 searches the user management database using the acquired login information (user ID) as a key to identify the corresponding user. The user registration control unit 303 stores the system ID acquired from the redirect URL in the entry of the identified user. In other words, the user registration control unit 303 stores the user ID managed by the company (service provider) in association with the system ID for the authentication system to manage the user.

[0233] In the following explanation, the ID issued by each service provider to manage users (customers, members, etc.) is referred to as an "individual ID." The user registration control unit 303 associates the individual ID of the user who logs in to the portal site according to the redirect URL with the system ID and stores them (links the IDs).

[0234] When the correspondence between the individual ID and the system ID is completed, the user registration control unit 303 may notify the control server 10 of the user's system ID. For example, the user registration control unit 303 may send a "user registration completion notification" including the system ID to the control server 10 (step S54). Upon receiving the user registration completion notification, the user registration control unit 205 of the control server 10 may notify the user that user registration is complete.

[0235] For example, the control server 10 may notify the completion of user registration by checking the icon of the service provider whose user registration has been completed on a screen such as that shown in FIG.

[0236] When the association of the individual ID with the system ID is completed, the user registration control unit 303 of the service server 20 transmits a "biometric information provision request" including the system ID of the user to the control server 10 (step S55 in FIG. 26).

[0237] When the biometric information provision request is received, the user registration control unit 205 of the control server 10 searches the account management database using the system ID included in the biometric information provision request as a key to identify the corresponding user. The user registration control unit 205 transmits a "request to provide original" to the terminal 40 of the identified user (step S56).

[0238] In response to receiving the original provision request, the terminal 40 transmits the original biometric information (for example, a face image) of the user to the control server 10 (step S57).

[0239] When the original biometric information is acquired, the user registration control unit 205 transmits the acquired original biometric information (e.g., a face image) to the service server 20. Specifically, when the original biometric information is acquired from the terminal 40, the user registration control unit 205 transmits a positive response including the acquired original biometric information to the service server 20 (step S58). When the original biometric information cannot be acquired from the terminal 40, the user registration control unit 205 transmits a negative response to the service server 20 as a response to the biometric information provision request.

[0240] The user registration control unit 303 of the service server 20 generates registration authentication information from the acquired original biometric information and stores it in the user management database. The user registration control unit 303 associates the system ID, individual ID (login information), registration authentication information, and business information (e.g., credit card information) and stores them in the user management database.

[0241] The operation of the authentication system regarding user registration described with reference to FIGS. 25 and 26 can be summarized as shown in the flowchart in FIG.

[0242] When the user's terminal 40 accesses the login page, the service server 20 acquires the system ID embedded in the redirect URL, and stores the system ID internally (step S301).

[0243] The service server 20 transmits a biometric information provision request including the system ID to the control server 10 (step S302). That is, the service server 20 transmits a provision request for the original biometric information (for example, a face image) of the user to the terminal 40 via the control server 10.

[0244] The service server 20 acquires the original biometric information from the terminal 40 via the control server 10 (step S303). The service server 20 generates face information (registered authentication information; feature amount) from the acquired original biometric information, and stores the face information in association with the system ID.

[0245] When a user purchases a product at a retail store, the authentication terminal 30 transmits an authentication request including the biometric information of the product purchaser and payment information (purchase price) to the service server 20 (see FIG. 28). The service server 20 identifies the person to be authenticated (product purchaser) by a matching process using the acquired biometric information.

[0246] The service server 20 performs a payment process using the credit card information and payment information of the identified authenticated person. Specifically, the service server 20 transmits the credit card information and the payment information to a payment server 60 of a credit card company, thereby requesting the payment server 60 to settle the product price. The payment server 60 notifies the service server 20 of the result of the payment process. Note that the configuration and operation of the payment server 60 are different from the gist of the disclosure of this application and are obvious to those skilled in the art, so a detailed explanation will be omitted.

[0247] If the service server 20 is notified that the payment is successful, it determines that the authentication is successful. If the service server 20 is notified that the payment is unsuccessful, it determines that the authentication is unsuccessful. The service server 20 notifies the authentication terminal 30 of the authentication result.

[0248] In addition, the third type of service provider repeatedly uses business information (e.g., credit card information) necessary to authenticate the user. Therefore, even if the service server 20 succeeds in authenticating the user, the business information is not deleted but continues to be stored.

[0249] [System Operation] 29 is a sequence diagram showing an example of the operation of the authentication system according to the third embodiment. The operation of the authentication system according to the third embodiment will be described with reference to FIG.

[0250] The terminal 40 selects a service provider in response to an operation by the user (step S61).

[0251] When a service provider belonging to the third type is selected, the control server 10 transmits a redirect URL to the terminal 40 (step S62).

[0252] In response to a user's operation, the terminal 40 accesses the login page indicated by the redirect URL and logs in to the portal site (step S63). At that time, the service server 20 acquires the system ID embedded in the redirect URL.

[0253] The service server 20 identifies the user by using the login information (an individual ID by which the service provider manages the user), and transmits a request for providing biometric information regarding the identified user to the control server 10 (step S64).

[0254] The control server 10 transmits a request for providing the original to the user terminal 40 (step S65).

[0255] The terminal 40 transmits the original biometric information (for example, a face image) to the control server 10 (step S66).

[0256] The control server 10 transmits the acquired original biometric information to the service server 20 (step S67).

[0257] The service server 20 generates registered authentication information (eg, feature amounts) from the acquired original biometric information (eg, face image), and stores the registered authentication information in the user management database (step S68).

[0258] <Modification 1 of the third embodiment> In the third embodiment, it has been described that the service server 20 may transmit a "user registration completion notification" to the control server 10 after the account linking (association of an individual ID with a system ID) is completed. However, the service server 20 may transmit the user registration completion notification to the control server 10 after registering the user's registration authentication information in the user management database.

[0259] <Modification 2 of the third embodiment> As in the third embodiment, when the service provider has an account for managing the user, a redirect URL may be used to cancel the user's registration with the service provider.

[0260] Specifically, if the service provider selected by the user belongs to the third type or the fourth type described below, the control server 10 sends a redirect URL to the terminal 40, which redirects to a page for canceling the user's registration of the selected service provider (step S71 in FIG. 30).

[0261] In response to the user's operation, the terminal 40 accesses the user deregistration page corresponding to the redirect URL (step S72). The service provider's service server 20 identifies the user who wishes to deregistrate using the individual ID of the user who logged in according to the redirect URL (the individual ID of the user who logged in to the portal site).

[0262] The service server 20 deletes the system ID and registered authentication information of the identified user. The user registration is cancelled by deleting the system ID and registered authentication information.

[0263] As described above, the control server 10 according to the third embodiment performs control for a service provider belonging to the third type to acquire original biometric information that is the original of authentication information used for biometric authentication. The service provider belonging to the third type is a service provider selected by a user, has an account for managing customers, and repeatedly uses business information required for providing services to customers during biometric authentication. The control server 10 transmits information for logging in to the account of the service provider selected by the user to the terminal 40 of the user. In response to receiving a biometric information provision request from the service server 20 that manages the account of the user, the control server 10 requests the terminal 40 to provide original biometric information that is the original of authentication information used for biometric authentication, thereby acquiring original biometric information from the terminal 40. The control server 10 transmits the acquired original biometric information to the service server 20.

[0264] A service provider belonging to the third type has an account (portal site) for managing users, and uses an individual ID to manage the user. When registering a user (account linkage, ID linkage), the user logs into the portal site according to a redirect URL in which a system ID is embedded, and the service server 20 can obtain the system ID and individual ID of the user at the same time. In other words, unlike the first embodiment, the service server 20 can identify a user using an individual ID without using personal identification information, so that more reliable user registration can be realized. That is, although the possibility of duplication of personal identification information (e.g., name) cannot be excluded, the individual ID is an ID issued by the service server 20 to each user, so there is no possibility of duplication (the possibility of duplication is extremely low). The service server 20 can realize reliable account linkage (ID linkage) by identifying a user using an individual ID. As described above, in the information processing system according to the third embodiment, the information transmitted to the service server 20 via the control server 10 is limited to the original biometric information, and personal identification information is not transmitted to the service server 20 via the control server 10. In the third embodiment, information for identifying an individual (personal identification information) is transmitted from the terminal 40 that has acquired the redirect URL to the service server 20. In this manner, personal information identification information is not transmitted from the control server 10 to the service server 20, and therefore the security strength of the system is improved.

[0265] [Fourth embodiment] Next, a fourth embodiment will be described in detail with reference to the drawings.

[0266] In the fourth embodiment, user registration regarding a fourth type of service provider will be described.

[0267] The configuration of the authentication system according to the fourth embodiment can be the same as that of the first embodiment, and therefore the description corresponding to Fig. 3 will be omitted. Also, the processing configuration of the control server 10 and the like according to the fourth embodiment can be the same as that of the first embodiment, and therefore the description thereof will be omitted.

[0268] The following description will focus on the differences between the first to fourth embodiments.

[0269] The basic operation of the system according to the fourth embodiment can be the same as that of the system according to the third embodiment. Specifically, when a service provider belonging to the fourth type is selected, each device included in the authentication system performs the operation shown in FIG.

[0270] When the service provider's ID and the authentication system's system ID are linked, the user provides the service provider with the business information required to receive the service (step S81 in FIG. 31). For example, the user purchases tickets for movies, concerts, amusement parks, airline tickets, train tickets, etc., on the portal site of the service provider to which the user has logged in.

[0271] The provision of business information (purchase of tickets) may be performed as part of the process of logging in to the service provider's portal site during user registration. Alternatively, the user may log out of the portal site after completing user registration. The user may log in to the portal site again at a later date to purchase tickets. In this case, the user may operate terminal 40 to directly access (log in to) the portal site.

[0272] The service server 20 stores information about tickets purchased by users. The transaction information management unit 302 of the service server 20 stores transaction information (ticket information) provided by users in a user management database.

[0273] The user registration control unit 303 of the service server 20 accesses the user management database periodically or at a predetermined timing, and refers to the business information (ticket information) of each user. The user registration control unit 303 requests the control server 10 to provide biometric information a predetermined time before the referred business information (ticket information) becomes valid (a predetermined time before the referred business information is used in authentication processing).

[0274] Specifically, the user registration control unit 303 transmits a "biometric information provision request" including the system ID of the user (a user who may use the ticket after a predetermined time) to the control server 10 (step S82).

[0275] The control server 10 that has received the biometric information provision request transmits an original provision request to the terminal 40 to acquire the original biometric information (e.g., a face image) (steps S83 and S84). The control server 10 transmits the acquired original biometric information to the service server 20 (step S85).

[0276] In the fourth embodiment, the timing when the user selects a service provider and the timing when the original biometric information (face image) is provided to the service provider are often different. Therefore, the terminal 40 may notify the user of the fact that the original biometric information has been sent to the control server 10 by using a pop-up notification or the like (see FIG. 32).

[0277] When an authentication request is received from an authentication terminal 30 installed at an event venue or the like, an authentication unit 304 of a service server 20 according to the fourth embodiment determines an authentication result depending on whether or not the ticket of the user identified by the collation process is valid. The authentication terminal 30 allows a user who is determined to have been successfully authenticated (a user who possesses a valid ticket) to pass through the gate. The authentication terminal 30 denies a user who is determined to have failed authentication (a user who does not possess a valid ticket) from passing through the gate.

[0278] Note that a service provider belonging to the fourth type may delete the business information used for authenticating the user, as in the second embodiment. The service server 20 according to the fourth embodiment may leave the user's account (system ID, individual ID, registered authentication information) instead of deleting it. By leaving the user's account, even if the user purchases tickets for another concert or the like from the same service provider, user registration (ID linkage, account linkage) for that service provider is not required.

[0279] As described above, the control server 10 according to the fourth embodiment performs control for a service provider belonging to the fourth type to acquire original biometric information serving as the original of authentication information used for biometric authentication. The service provider belonging to the fourth type is a service provider selected by a user, has an account for managing a customer, and is a service provider that uses business information required for providing a service to the customer substantially once during biometric authentication. The control server 10 transmits information for logging into the account of the service provider selected by the user to the terminal 40 of the user. In response to receiving a biometric information provision request from the service server 20 that manages the account of the user, the control server 10 requests the terminal 40 to provide original biometric information serving as the original of authentication information used for biometric authentication, thereby acquiring the original biometric information from the terminal 40. The control server 10 transmits the acquired original biometric information to the service server 20. As a result, reliable user registration (account linkage, ID linkage) is realized even for a service provider belonging to the fourth type. That is, in the fourth embodiment, similarly to the third embodiment, the information transmitted to the service server 20 via the control server 10 is limited to the original biometric information, and personal identification information is not transmitted to the service server 20 via the control server 10. In the fourth embodiment, information for identifying an individual (personal identification information) is transmitted to the service server 20 from the terminal 40 that has acquired the redirect URL. In this way, personal information identification information is not transmitted from the control server 10 to the service server 20, thereby improving the security strength of the system.

[0280] [Fifth embodiment] Next, the fifth embodiment will be described in detail with reference to the drawings.

[0281] In the fifth embodiment, a case will be described in which, when registering as a user, the user sets a validity period for the registered authentication information (for example, feature amount) by the selected service provider.

[0282] The configuration of the authentication system according to the fifth embodiment can be the same as that of the first embodiment, and therefore the description corresponding to Fig. 3 will be omitted. Also, the processing configuration of the control server 10 and the like according to the fourth embodiment can be the same as that of the first embodiment, and therefore the description thereof will be omitted.

[0283] The following description will focus on the differences between the first to fifth embodiments.

[0284] After the user selects a service provider, the service selection control unit 204 of the control server 10 determines whether the user sets a validity period for the registered authentication information for that service provider, and if so, obtains that period.

[0285] For example, the service selection control unit 204 uses a GUI as shown in FIG. 33 to acquire whether or not a validity period needs to be set and a specific set period.

[0286] When a validity period is set, the service selection control unit 204 stores the set validity period (e.g., one year) or expiration date (e.g., a date one year from now) in the account management database in association with the operator ID of the selected service provider.

[0287] Furthermore, the user registration control unit 205 of the control server 10 notifies the service server 20 of the service provider selected by the user of the validity period (expiration date) at the time of user registration.

[0288] In the first and second embodiments, the user registration control unit 205 transmits to the service server 20 a user registration request including the above-mentioned validity period (expiration date) in addition to the user's system ID, original biometric information, and individual identification information.

[0289] In the third and fourth embodiments, the user registration control unit 205 transmits a redirect URL in which the system ID and the validity period (expiration date) are embedded to the terminal 40. The user registration control unit 205 notifies the service provider of the validity period (the period during which the service provider can hold the registered authentication information) via the terminal 40 using the redirect URL.

[0290] In this way, when a user selects a service provider from which the user wishes to receive a service, the service selection control unit 204 according to the fifth embodiment acquires the validity period of the registered authentication information generated by the service provider selected by the user. The user registration control unit 205 transmits the acquired original biometric information and validity period to the service server 20 of the service provider selected by the user.

[0291] The user registration control unit 303 of the service server 20 stores the validity period (expiration date) acquired from the user registration request or the redirect URL in the user management database.

[0292] The user registration control unit 303 of the service server 20 accesses the user management database periodically or at a predetermined timing. The user registration control unit 303 deletes at least the registered authentication information (e.g., feature amount) for a user whose validity period has expired. Alternatively, the user registration control unit 303 may delete the user's entry (an entry including the registered authentication information, system ID, business information, etc.) as necessary.

[0293] When the user selects a service provider, the control server 10 (service selection control unit 204) may provide the user with information about the service provider for which a validity period is set and the validity period.

[0294] For example, the service selection control unit 204 may display a service provider for which a validity period is set, in a manner that distinguishes it from other service providers. Alternatively, the service selection control unit 204 may display the expiration date together with information that a validity period is set for the service provider, as shown in Fig. 34.

[0295] Alternatively, the service selection control unit 204 may display a warning to the user about the short remaining validity period for a service provider whose validity period is approaching (e.g., a service provider whose validity period has one week remaining) (see FIG. 35).

[0296] In this way, the storage unit 206 may further store information on a service provider whose registered authentication information has a validity period set therein. The service selection control unit 204 may display a message corresponding to the validity period of the service provider whose registered authentication information has a validity period set therein on the terminal 40 carried by the user.

[0297] Alternatively, the service selection control unit 204 may provide the user with an interface for updating the validity period of a service provider with a short remaining validity period. For example, the service selection control unit 204 may provide an "update button" near the icon corresponding to the service provider for which a warning regarding the validity period has been issued (see FIG. 36).

[0298] 34 to 36, a check mark may be shown in the upper right corner of the icon corresponding to retail store B for which a validity period has been set, indicating that the service has been selected.

[0299] When the update button is pressed, the service selection control unit 204 uses a GUI similar to that in FIG. 33 to ask whether or not to set the valid period again, and if a valid period is to be set, acquires the period.

[0300] When a user wishes to update the validity period, the user registration control unit 205 transmits a "validity period update instruction" including the user's system ID and validity period (expiration date) to the service server 20 of the service provider. The user registration control unit 303 of the service server 20 updates the validity period (expiration date) of the user corresponding to the acquired system ID with the information included in the validity period update instruction.

[0301] Alternatively, the user registration control unit 205 may acquire original biometric information (e.g., a face image) from a user (terminal 40) who wishes to renew the validity period. In this case, the user registration control unit 205 may transmit a validity period update instruction including the acquired original biometric information, a system ID, and a validity period (expiration date) to the service server 20.

[0302] In this way, the service selection control unit 204 may obtain from the user an update instruction regarding the validity period of the service provider whose registered authentication information has been set for the validity period. At that time, the user registration control unit 205 transmits a validity period update instruction including the updated validity period to the service server 20 of the service provider whose validity period update has been instructed. Alternatively, the user registration control unit 205 may transmit a validity period update instruction including the updated validity period and the user's original biometric information to the service server 20 of the service provider whose validity period update has been instructed.

[0303] As described above, the control server 10 according to the fifth embodiment manages service providers in three states and notifies the user of the state of the service provider. As a result, the user can select a service provider by referring to the notified state. Furthermore, the control server 10 can satisfy more detailed requests of users by enabling the service provider to set a valid period during which biometric information (e.g., feature amounts) can be retained.

[0304] Next, the hardware of each device constituting the authentication system will be described.

[0305] The control server 10 can be configured by an information processing device (so-called a computer), and has the configuration exemplified in Fig. 37. For example, the control server 10 includes a processor 311, a memory 312, an input / output interface 313, and a communication interface 314. The components such as the processor 311 are connected by an internal bus or the like, and are configured to be able to communicate with each other.

[0306] However, the configuration shown in Fig. 37 is not intended to limit the hardware configuration of the control server 10. The control server 10 may include hardware not shown, and may not include the input / output interface 313 as necessary. Furthermore, the number of processors 311 and the like included in the control server 10 is not intended to be limited to the example shown in Fig. 37, and for example, the control server 10 may include multiple processors 311.

[0307] The processor 311 is, for example, a programmable device such as a central processing unit (CPU), a micro processing unit (MPU), or a digital signal processor (DSP). Alternatively, the processor 311 may be a device such as a field programmable gate array (FPGA), or an application specific integrated circuit (ASIC). The processor 311 executes various programs including an operating system (OS).

[0308] The memory 312 is a random access memory (RAM), a read only memory (ROM), a hard disk drive (HDD), a solid state drive (SSD), etc. The memory 312 stores an OS program, application programs, and various data.

[0309] The input / output interface 313 is an interface for a display device and an input device (not shown). The display device is, for example, a liquid crystal display, etc. The input device is, for example, a keyboard, a mouse, etc. that accepts user operations.

[0310] The communication interface 314 is a circuit, a module, etc. that communicates with other devices. For example, the communication interface 314 includes a network interface card (NIC).

[0311] The functions of the control server 10 are realized by various processing modules. The processing modules are realized, for example, by the processor 311 executing a program stored in the memory 312. The program can be recorded in a computer-readable storage medium. The storage medium can be a non-transitory medium such as a semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. That is, the present invention can also be embodied as a computer program product. The program can be downloaded via a network, or updated using a storage medium storing the program. The processing modules may also be realized by a semiconductor chip.

[0312] The service server 20, authentication terminal 30, terminal 40, etc. can also be configured by information processing devices like the control server 10, and their basic hardware configurations are not described here because they are no different from the control server 10. For example, the authentication terminal 30 may be provided with a camera device for photographing the person to be authenticated.

[0313] The control server 10, which is an information processing device, is equipped with a computer, and can realize the functions of the control server 10 by having the computer execute a program. The control server 10 also executes the control method of the control server 10 by the program. Similarly, the terminal 40, which is an information processing device, is equipped with a computer, and can realize the functions of the terminal 40 by having the computer execute a program. The terminal 40 also executes the control method of the terminal 40 by the program.

[0314] [Variations] The configuration, operation, and the like of the authentication system described in the above embodiment are merely examples, and are not intended to limit the system configuration, and the like.

[0315] In the above embodiment, the operation of the authentication system has been described using a person's "face" as an example of biometric information. However, the authentication system disclosed in the present application can also use other types of biometric information. For example, data including physical characteristics unique to an individual, such as a fingerprint, voiceprint, vein, retina, or iris pattern, may be used. In other words, the biometric information of a user may be any information that includes the user's physical characteristics.

[0316] The user's terminal 40 may obtain consent from the user to transmit the original biometric information (e.g., a facial image) to the service provider every time it receives an original provision request from the control server 10. Specifically, upon receiving the original provision request, the service selection unit 504 of the terminal 40 obtains whether the original biometric information (e.g., a facial image) can be provided using a GUI such as that shown in Fig. 38. Upon obtaining consent from the user to provide the original biometric information, the service selection unit 504 transmits the original biometric information stored therein to the control server 10.

[0317] In the above embodiment, the case has been described where the service server 20 generates authentication information (feature amounts) corresponding to an authentication engine adopted by the service provider. However, the generation of the authentication information (feature amounts) may be performed in the control server 10. Specifically, the control server 10 stores information on the authentication engine adopted by the service provider as part of the business information. The control server 10 may generate registration authentication information (feature amounts) that matches the authentication engine from the original biometric information acquired from the terminal 40, and transmit a user registration request including the generated registration authentication information to the control server 10.

[0318] Alternatively, the service server 20 or the control server 10 may transmit the original biometric information to a server (feature generation server 70) specialized in generating features as shown in FIG. 39 or FIG. 40, and obtain the registered authentication information from the server. When the control server 10 or the service server 20 transmits the original biometric information (e.g., a face image) to the feature generation server 70, information on an authentication engine adopted by the service provider may be transmitted to the feature generation server 70 together. The feature generation server 70 may generate registered authentication information (e.g., feature) that is compatible with an authentication engine (authentication algorithm) designated by the control server 10 or the service server 20, and return it to the control server 10 or the service server 20. In this way, the registered authentication information (feature) may be generated on either the cloud side (the control server 10 side) or the edge side (the service server 20 side). The configuration and operation of the feature generation server 70 are clear from the above description, and therefore a detailed description thereof will be omitted.

[0319] In the above embodiment, the control server 10 identifies a service provider to be registered as a user by using a management code of the user's workplace, etc. However, the control server 10 may identify a service provider to be registered as a user by using other methods. For example, the control server 10 may provide an interface for selecting a service provider to be registered as a user from a search result using company name, etc., or may display a list of service providers in alphabetical order on the terminal 40.

[0320] In the first embodiment, a user (employee) may register information on a visitor (guest) to the office in the system. In this case, the employee operates the terminal 40 to access the control server 10 and performs the guest registration procedure. The control server 10 acquires the guest's name, affiliation, contact information, etc. from the employee. The control server 10 transmits a face image registration request to the acquired contact information (guest's terminal). For example, the control server 10 transmits a face image registration request including a URL. When the guest clicks on the URL, the guest's terminal accesses the control server 10. The control server 10 acquires the guest's face image and transmits it to the service server 20 in the office.

[0321] Furthermore, the service server 20 in the office may control the behavior of the guest by biometric authentication. For example, when the guest enters a conference room, the service server 20 may determine whether the guest can enter the conference room by biometric authentication. Alternatively, the service server 20 may control the guest's use of drinks, etc. by biometric authentication. For example, the service server 20 may perform control such that a vending machine in the office provides the guest with a free drink only once.

[0322] If the user does not have an account with a service provider belonging to the third or fourth type selected by the user, the user may create an account on a login page to which the user is redirected using a redirect URL. In other words, the service server 20 may display an account creation guide for new customers on the login page.

[0323] The control server 10 may verify the identity of the user when creating an account. Specifically, the control server 10 acquires the user's login information and other information, such as an identification document (e.g., a passport, a driver's license, etc.) bearing biometric information, and the biometric information. The control server 10 performs one-to-one matching using the biometric information on the identification document and the biometric information acquired from the user. If the matching is successful, the control server 10 may perform user registration (system registration) of the user whose identity has been successfully verified.

[0324] In the above embodiment, the case where the account management database is configured inside the control server 10 has been described, but the database may be constructed in an external database server or the like. That is, some of the functions of the control server 10 may be implemented in another server. More specifically, the above-described "service selection control unit (service selection control means)" and the like may be implemented in any of the devices included in the system.

[0325] Although the format of data transmission and reception between each device (the control server 10, the service server 20, and the authentication terminal 30) is not particularly limited, the data transmitted and received between these devices may be encrypted. Biometric information and the like is transmitted and received between these devices, and in order to appropriately protect this information, it is desirable to transmit and receive encrypted data.

[0326] In the flow charts (flow charts, sequence diagrams) used in the above description, multiple steps (processes) are described in order, but the order of execution of the steps executed in the embodiments is not limited to the order described. In the embodiments, the order of the steps shown in the figures can be changed to a degree that does not affect the content, such as executing each process in parallel.

[0327] The above-mentioned embodiments have been described in detail to facilitate understanding of the present disclosure, and it is not intended that all of the configurations described above are necessary. In addition, when a plurality of embodiments are described, each embodiment may be used alone or in combination. For example, it is possible to replace a part of the configuration of an embodiment with the configuration of another embodiment, or to add the configuration of another embodiment to the configuration of an embodiment. Furthermore, it is possible to add, delete, or replace a part of the configuration of an embodiment with another configuration.

[0328] From the above explanation, the industrial applicability of the present invention is clear, and the present invention can be suitably applied to an information processing system that provides a biometric authentication service.

[0329] A part or all of the above-described embodiments can be described as, but is not limited to, the following supplementary notes. [Appendix 1] a service selection control means for enabling a user to select a service provider from which the user wishes to receive a service from among a plurality of service providers that provide services using biometric authentication; A storage means for storing information of the service provider selected by the user; Equipped with The service selection control means A server device that enables a user to distinguish between a service provider selected by the user and a service provider not selected by the user when the user selects a service provider from which the user wishes to receive a service. [Appendix 2] The storage means further stores information on the service provider whose selection has been deselected by the user, The service selection control means A server device as described in Appendix 1, which enables the user, when selecting a service provider from which the user wants to receive services, to identify service providers selected by the user, service providers that have never been selected by the user, and service providers that have been deselected by the user. [Appendix 3] The service provider selected by the user further includes a user registration control means for controlling acquisition of original biometric information that is an original of authentication information used for biometric authentication, The user registration control means A server device as described in Appendix 2, which acquires the original biometric information by requesting the provision of the original biometric information from a terminal held by the user, and transmits the acquired original biometric information to a server of a service provider selected by the user. [Appendix 4] The service selection control means When the user selects a service provider from which the user wishes to receive a service, the validity period of the registered authentication information generated by the service provider selected by the user is obtained; The user registration control means The server device according to claim 3, which transmits the acquired original biometric information and the validity period to a server of a service provider selected by the user. [Appendix 5] The storage means further stores information of a service provider in which a validity period is set in the registered authentication information, The service selection control means The server device according to claim 4, further comprising: a message relating to a service provider for which a validity period is set in the registered authentication information, the message corresponding to the validity period being displayed on a terminal carried by the user. [Appendix 6] The server device according to claim 5, wherein the service selection control means acquires from the user an instruction to update a validity period of a service provider whose registered authentication information has a validity period set therein. [Appendix 7] The user registration control means 7. The server device according to claim 6, further comprising: a server for transmitting a validity period update instruction including an updated validity period to a server of a service provider to which an instruction to update the validity period has been given. [Appendix 8] The user registration control means The server device according to claim 6, which transmits a validity period update instruction including the updated validity period and the original biometric information of the user to a server of a service provider to which an instruction to update the validity period has been given. [Appendix 9] The server device according to any one of Supplementary Notes 3 to 8, wherein the original biometric information is a face image. [Appendix 10] A terminal owned by a user; A server device; Including, The server device includes: a service selection control means for enabling the user to select a service provider from which the user wishes to receive a service from among a plurality of service providers that provide services using biometric authentication; A storage means for storing information of the service provider selected by the user; Equipped with The service selection control means When the user selects a service provider from which the user wishes to receive a service, the system displays on the terminal the service providers selected by the user and the service providers not selected by the user so that the user can distinguish between them. [Appendix 11] In the server device, The system enables users to select the service provider from which they wish to receive services from among multiple service providers that provide services using biometric authentication. storing information of the service provider selected by the user; A method for controlling a server device, which enables a user to distinguish between a service provider selected by the user and a service provider not selected by the user when the user selects a service provider from which the user wishes to receive a service. [Appendix 12] A computer installed in the server device A process for enabling a user to select a service provider from which the user wishes to receive a service from among a plurality of service providers that provide services using biometric authentication; A process of storing information of the service provider selected by the user; A process for enabling the user to distinguish between a service provider selected by the user and a service provider not selected by the user when the user selects a service provider from which the user wishes to receive a service; A computer-readable storage medium that stores a program for executing the above.

[0330] The disclosures of the above cited prior art documents are incorporated herein by reference. Although the embodiments of the present invention have been described above, the present invention is not limited to these embodiments. It will be understood by those skilled in the art that these embodiments are merely illustrative and that various modifications are possible without departing from the scope and spirit of the present invention. In other words, the present invention naturally includes various modifications and amendments that a person skilled in the art can make in accordance with the entire disclosure, including the scope of the claims, and the technical ideas. [Explanation of symbols]

[0331] 10 Control Server 20 Service Server 30 Authentication terminal 40 Terminals 50 Ticket Management Server 60 Payment Server 70 Feature Generation Server 100 Server device 101 Service selection control means 102 Memory means 201 Communication control section 202 Account Management Department 203 Business Management Department 204 Service selection control unit 205 User registration control unit 206 Memory section 301 Communication Control Unit 302 Business Information Management Department 303 User registration control unit 304 Authentication Department 305 Storage section 311 Processor 312 Memory 313 Input / Output Interface 314 Communication Interface 401 Communication control section 402 Biometric information acquisition unit 403 Authentication Request Section 404 Functionality Realization Department 405 Storage section 501 Communication control section 502 Account creation control unit 503 Original information acquisition department 504 Service Selection Department 505 Storage section

Claims

1. a service selection control means for enabling a user to select a service provider from which the user wishes to receive a service from among a plurality of service providers that provide services using biometric authentication; A storage means for storing information of the service provider selected by the user; a user registration control means for controlling a service provider selected by the user to acquire original biometric information that is an original of authentication information used for biometric authentication; Equipped with The service selection control means When the user selects a service provider from which the user wishes to receive a service, the user is allowed to distinguish between a service provider selected by the user and a service provider not selected by the user; The user registration control means a server device that acquires the original biometric information by requesting provision of the original biometric information from a terminal carried by the user, transmits the acquired original biometric information and information on an authentication engine adopted by a service provider selected by the user to a feature generation server specialized in generating features, and transmits features received from the feature generation server that are generated by the feature generation server in accordance with the information on the authentication engine and that are compatible with the authentication engine to a server of the service provider selected by the user.

2. The storage means further stores information on the service provider whose selection has been deselected by the user, The service selection control means A server device as described in claim 1, which enables a user, when selecting a service provider from which the user wishes to receive services, to identify service providers selected by the user, service providers that have never been selected by the user, and service providers that have been deselected by the user.

3. The service selection control means When the user selects a service provider from which the user wishes to receive a service, the validity period of the registered authentication information generated by the service provider selected by the user is obtained; The user registration control means 3. The server device according to claim 2, further comprising: a server for a service provider selected by the user, the server device transmitting the acquired original biometric information and the validity period.

4. The storage means further stores information of a service provider in which a validity period is set in the registered authentication information, The service selection control means 4. The server device according to claim 3, further comprising: a message relating to a service provider for which a validity period is set in the registered authentication information, the message corresponding to the validity period being displayed on a terminal carried by the user.

5. 5. The server device according to claim 4, wherein the service selection control means acquires from the user an instruction to update a validity period of a service provider whose registered authentication information has a validity period set therein.

6. The user registration control means 6. The server device according to claim 5, further comprising: a validity period update instruction including the updated validity period, the validity period update instruction being transmitted to a server of a service provider to which an instruction to update the validity period has been given.

7. The user registration control means 6. The server device according to claim 5, further comprising: a validity period update instruction including the updated validity period and the original biometric information of the user, the validity period update instruction being transmitted to a server of a service provider to which an instruction to update the validity period has been given.

8. The server device according to claim 1 , wherein the original biometric information is a face image.

9. A terminal owned by a user; A server device; Including, The server device includes: a service selection control means for enabling the user to select a service provider from which the user wishes to receive a service from among a plurality of service providers that provide services using biometric authentication; A storage means for storing information of the service provider selected by the user; a user registration control means for controlling a service provider selected by the user to acquire original biometric information that is an original of authentication information used for biometric authentication; Equipped with The service selection control means When the user selects a service provider from which the user wishes to receive a service, the service provider selected by the user and the service provider not selected by the user are displayed on the terminal so that the user can distinguish between them; The user registration control means the system acquires the original biometric information by requesting provision of the original biometric information from a terminal held by the user, transmits the acquired original biometric information and information on an authentication engine adopted by a service provider selected by the user to a feature generation server specialized in generating features, and transmits features received from the feature generation server that are compatible with the authentication engine and generated by the feature generation server in accordance with the information on the authentication engine to a server of the service provider selected by the user.

10. In the server device, The system enables users to select the service provider from which they wish to receive services from among multiple service providers that provide services using biometric authentication. storing information of the service provider selected by the user; A service provider selected by the user performs control for acquiring original biometric information that is the original of authentication information to be used for biometric authentication; When the user selects a service provider from which the user wishes to receive a service, the user is allowed to distinguish between a service provider selected by the user and a service provider not selected by the user; a server device control method for acquiring the original biometric information by requesting provision of the original biometric information from a terminal held by the user, transmitting the acquired original biometric information and information on an authentication engine adopted by a service provider selected by the user to a feature generation server specialized in generating features, and transmitting features received from the feature generation server that are generated by the feature generation server in accordance with the information on the authentication engine and that are compatible with the authentication engine to a server of the service provider selected by the user.

11. A computer installed in the server device A process for enabling a user to select a service provider from which the user wishes to receive a service from among a plurality of service providers that provide services using biometric authentication; A process of storing information of the service provider selected by the user; A process of controlling the service provider selected by the user to acquire original biometric information that is the original of authentication information used for biometric authentication; A process for enabling the user to distinguish between a service provider selected by the user and a service provider not selected by the user when the user selects a service provider from which the user wishes to receive a service; a process of acquiring the original biometric information by requesting provision of the original biometric information from a terminal carried by the user, transmitting the acquired original biometric information and information on an authentication engine adopted by a service provider selected by the user to a feature generation server specialized in generating features, and transmitting features received from the feature generation server and generated by the feature generation server in accordance with the information on the authentication engine and suitable for the authentication engine to a server of the service provider selected by the user; A program for executing the above.

Images