Server device, system, and server device control method and program

Abstract

To provide a server device to realize diverse user registration fulfilling user expectations.SOLUTION: A server device comprises personal identity verification control means, service selection control means, and user registration control means. The personal identification control means confirms the personal identification of a user wishing a system registration as an authentication user. The personal identity verification control means manages user types of the users whose personal identity verification is successful as authenticated users. The identification control means manages the user types of the users whose personal identify verification is not successful as ordinary users. The service selection control means enables a user to select, from among multiple service providers to provide the services using biometric authentication, a service provider from whom the user wants to receive a service. The user registration control means notifies the service provider selected by the user of original biological information which constitutes the original of the authentication information used for the biometric authentication and of the user type.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a server device, a system, a control method for a server device, and a storage medium. [Background technology]

[0002] Biometric authentication technology exists.

[0003] For example, Patent Document 1 describes that entrance reception is automated and identity authentication is reliably achieved. The entrance reception terminal of Patent Document 1 uses a personal identification card with a built-in IC chip to accept the entrance of a visitor carrying the personal identification card. An access permission number, personal information, and personal authentication information are stored in advance in the IC chip. The entrance reception terminal includes an input means for accepting an input of an access permission number, a reading means for reading the personal information and personal authentication information stored in the IC chip from the personal identification card, an acquisition means for acquiring biometric authentication information of the visitor, an authentication means, and an issuing means. The authentication means performs identity authentication by comparing the read personal authentication information with the acquired biometric authentication information. The issuing means issues an entrance pass when identity authentication is confirmed. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2018-124622 A Summary of the Invention [Problem to be solved by the invention]

[0005] In recent years, various services using biometric authentication have begun to be provided. For example, not only the entrance control to facilities as shown in Patent Document 1, but also the payment for purchased goods can be made by biometric authentication. Here, users include those who want to enjoy the maximum service provided by biometric authentication and those who want to enjoy services provided by biometric authentication easily.

[0006] In other words, there is a demand for the realization of diverse user registrations that meet the needs of users. However, this demand cannot be realized by applying the technology disclosed in Patent Document 1. Patent Document 1 is intended to disclose technology related to strengthening identity verification.

[0007] A primary object of the present invention is to provide a server device, a system, a method for controlling a server device, and a storage medium that contribute to realizing a variety of user registrations that satisfy the desires of users. [Means for solving the problem]

[0008] According to a first aspect of the present invention, there is provided a server device comprising: an identity verification control means for performing identity verification of a user who wishes to register in the system as an authenticated user who is entitled to more services than a normal user, managing the user type of a user who has been successfully verified as the authenticated user, and managing the user type of a user who has not been successfully verified as the normal user; a service selection control means for enabling a user to select a service provider from which the user wishes to receive services from among a plurality of service providers that provide services using biometric authentication; and a user registration control means for notifying the service provider selected by the user of original biometric information that is the original of authentication information used for biometric authentication and the user type.

[0009] According to a second aspect of the present invention, there is provided a system including a terminal carried by a user, a plurality of service servers managed by each of a plurality of service providers that provide services using biometric authentication, and a server device, wherein the server device comprises an identity verification control means that performs identity verification of a user who wishes to register in the system as an authenticated user who is able to receive more services than a normal user, manages the user type of a user who has successfully been verified as the authenticated user, and manages the user type of a user who has not successfully been verified as the normal user, a service selection control means that enables the user to select a service provider from which the user wishes to receive services from among the plurality of service providers, and a user registration control means that acquires original biometric information that is the original of authentication information used for biometric authentication from the user's terminal, and transmits a user registration request including the original biometric information and the user type to the service server of the service provider selected by the user.

[0010] According to a third aspect of the present invention, there is provided a method for controlling a server device, in which a server device performs identity verification of a user who wishes to register in the system as an authenticated user who is entitled to more services than a normal user, manages the user type of a user who has been successfully verified as the authenticated user, and manages the user type of a user who has not been successfully verified as the normal user, enables the user to select a service provider from which the user wishes to receive a service from among a plurality of service providers that provide services using biometric authentication, and notifies the service provider selected by the user of original biometric information that is the original of authentication information used for biometric authentication and the user type.

[0011] According to a fourth aspect of the present invention, there is provided a computer-readable storage medium that stores a program for causing a computer mounted on a server device to execute the following processes: performing identity verification of a user who wishes to register in the system as an authenticated user who is entitled to more services than a normal user, managing the user type of a user who has been successfully verified as the authenticated user, and managing the user type of a user who has not been successfully verified as the normal user; enabling the user to select a service provider from which the user wishes to receive services from among a plurality of service providers that provide services using biometric authentication; and notifying the service provider selected by the user of original biometric information that is the original of authentication information used for biometric authentication and the user type. Effect of the Invention

[0012] According to each aspect of the present invention, a server device, a system, a method for controlling a server device, and a storage medium are provided that contribute to realizing a variety of user registrations that satisfy the desires of users. Note that the effects of the present invention are not limited to those described above. The present invention may achieve other effects instead of or in addition to the effects described above. [Brief description of the drawings]

[0013] [Figure 1] FIG. 1 is a diagram for explaining an overview of an embodiment. [Diagram 2] FIG. 2 is a flowchart showing an example of the operation of an embodiment. [Diagram 3] FIG. 3 is a diagram illustrating an example of a schematic configuration of an authentication system according to the first embodiment. [Figure 4] FIG. 4 is a diagram for explaining the operation of the authentication system according to the first embodiment. [Diagram 5] FIG. 5 is a diagram for explaining the operation of the authentication system according to the first embodiment. [Figure 6] FIG. 6 is a diagram for explaining the operation of the authentication system according to the first embodiment. [Figure 7]FIG. 7 is a diagram for explaining the operation of the authentication system according to the first embodiment. [Figure 8] FIG. 8 is a diagram illustrating an example of a processing configuration of the control server according to the first embodiment. [Figure 9] FIG. 9 is a diagram illustrating an example of the account management database according to the first embodiment. [Figure 10] FIG. 10 is a diagram showing an example of a display on the terminal according to the first embodiment. [Figure 11] FIG. 11 is a diagram illustrating an example of a processing configuration of the service server according to the first embodiment. [Figure 12] FIG. 12 is a diagram illustrating an example of the user management database according to the first embodiment. [Figure 13] FIG. 13 is a flowchart illustrating an example of the operation of the authentication unit according to the first embodiment. [Figure 14] FIG. 14 is a diagram illustrating an example of a processing configuration of the authentication terminal according to the first embodiment. [Figure 15] FIG. 15 is a diagram illustrating an example of a processing configuration of a terminal according to the first embodiment. [Figure 16] FIG. 16 is a diagram showing an example of a display on the terminal according to the first embodiment. [Figure 17] FIG. 17 is a diagram showing an example of a display on the terminal according to the first embodiment. [Figure 18] FIG. 18 is a sequence diagram showing an example of the operation of the authentication system according to the first embodiment. [Figure 19] FIG. 19 is a diagram showing an example of a display on a terminal according to a modification of the first embodiment. [Figure 20] FIG. 20 is a flowchart illustrating an example of the operation of the authentication unit according to the second embodiment. [Figure 21] FIG. 21 is a diagram illustrating an example of a processing configuration of a control server according to the third embodiment. [Figure 22] FIG. 22 is a diagram illustrating an example of a hardware configuration of a control server according to the present disclosure. [Figure 23]FIG. 23 is a diagram showing an example of a display on a terminal according to a modification of the present disclosure. [Figure 24] FIG. 24 is a diagram showing an example of a display on a terminal according to a modification of the present disclosure. [Diagram 25] FIG. 25 is a diagram showing an example of a display on a terminal according to a modification of the present disclosure. [Figure 26] FIG. 26 is a diagram showing an example of a display on a terminal according to a modification of the present disclosure. [Figure 27] FIG. 27 is a diagram showing an example of a display on a terminal according to a modification of the present disclosure. [Figure 28] FIG. 28 is a diagram showing an example of a display on a terminal according to a modification of the present disclosure. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0014] First, an outline of one embodiment will be described. The reference numerals in the drawings are added to each element for convenience as an example to aid in understanding, and the description of the outline is not intended to be limiting. Furthermore, unless otherwise specified, the blocks shown in each drawing represent functional units rather than hardware units. The connection lines between the blocks in each drawing include both bidirectional and unidirectional. The unidirectional arrows are used to diagrammatically indicate the flow of the main signal (data) and do not exclude bidirectionality. In this specification and the drawings, elements that can be similarly described may be given the same reference numerals to avoid redundant description.

[0015] The server device 100 according to an embodiment includes an identity verification control means 101, a service selection control means 102, and a user registration control means 103 (see FIG. 1). The identity verification control means 101 performs identity verification of a user who wishes to register in the system as an authenticated user who can receive more services than a normal user (step S1 in FIG. 2). The identity verification control means 101 manages the user type of a user who has been successfully verified as an authenticated user (step S2). The identity verification control means 101 manages the user type of a user who has not been successfully verified as a normal user (the initial value of the user type is a normal user). The service selection control means 102 enables the user to select a service provider from which the user wishes to receive a service from among a plurality of service providers that provide services using biometric authentication (step S3). The user registration control means 103 notifies the service provider selected by the user of the original biometric information that is the original of the authentication information used for biometric authentication and the user type (step S4).

[0016] The server device 100 performs identity verification of users who wish to register in the system as authenticated users, and manages users who have been successfully verified as authenticated users. On the other hand, the server device 100 manages users who do not wish to be verified as normal users. The server device 100 notifies the service provider of the type of user together with the original biometric information. The service provider uses the acquired original biometric information and the user type to provide the user with a service using biometric authentication. At that time, the service provider changes the service provided according to the user type. As a result, many services using biometric authentication are provided to authenticated users, and limited services are provided to users who do not wish to be verified and who simply want to receive services using biometric authentication. In this way, the server device 100 realizes a variety of user registrations that meet the needs of users.

[0017] Specific embodiments will be described in more detail below with reference to the drawings.

[0018] [First embodiment] The first embodiment will be described in more detail with reference to the drawings.

[0019] [System configuration] Fig. 3 is a diagram showing an example of a schematic configuration of an authentication system (information processing system) according to the first embodiment. As shown in Fig. 3, the authentication system includes a plurality of service providers A to C and an authentication center.

[0020] A service provider is a business entity that provides services to users using biometric authentication. The authentication system disclosed in this application is premised on service providers belonging to various business types and industries providing services using biometric authentication. Note that the services provided by the service providers may be either paid or free.

[0021] Examples of service providers include businesses that provide rental housing services such as condominiums, businesses where employees work (users' workplaces), casino operators, businesses that provide events such as concerts, businesses that operate means of transportation such as airplanes, etc. Service providers disclosed in this application also include businesses that provide accommodation services, businesses such as retail stores, businesses that provide financial services, educational businesses, etc. In addition, service providers are not limited to private businesses. Public institutions such as local governments may also be service providers.

[0022] The authentication center controls and manages the biometric authentication of each of the multiple service providers. Businesses (service providers) that provide services using biometric authentication to users (general consumers, local residents) must enter into a contract with the authentication center.

[0023] The authentication center includes a control server 10. The control server 10 realizes the main functions of the authentication center. The control server 10 may be installed in the building of the authentication center, or may be a server installed on a network (cloud).

[0024] As described above, a service provider provides a user with a service that uses biometric authentication. For example, biometric authentication is performed when a user goes to work in an office or returns to an apartment, and only users (employees, residents) with proper qualifications can enter an office, etc. Alternatively, a user can receive documents such as a certified copy of a family register or a resident's card from a local government through biometric authentication. Alternatively, biometric authentication is performed for ticket confirmation at an event venue, check-in procedures at a hotel, immigration procedures at an airport, etc. In these types of services (procedures), services are provided to users with proper qualifications. Alternatively, payment procedures at retail stores, etc. are performed using biometric authentication.

[0025] 3, each service provider includes a service server 20 and at least one authentication terminal 30. The devices included in the service provider (service server 20, authentication terminal 30) are connected to each other so that they can communicate with each other. Specifically, the service server 20 and the authentication terminal 30 are connected by a wired or wireless communication means.

[0026] The service server 20 is connected to the control server 10 via a network. The service server 20 may be installed in the building of a service provider, or may be installed on the cloud.

[0027] The service server 20 stores information required when providing a service to a user. Specifically, the service server 20 stores business information required when each service provider provides a service using biometric authentication, and information required for biometric authentication. The service server 20 uses a user management database to store the business information and information required for biometric authentication. The user management database will be described in detail later.

[0028] For example, the service server 20 of the company where the user works stores information such as the user's (employee's) name, date of birth, employee number, department, place of work, etc. as business information. Or, the service server 20 of a local government stores information such as the resident's name, address, date of birth, etc. as business information. Also, the service server 20 of an event company that hosts an event stores information regarding tickets purchased by event participants as business information. Furthermore, the service server 20 of a retail store or the like stores credit card information (payment information) required for payment as business information.

[0029] The information necessary for biometric authentication stored in the service server 20 will be described in detail later.

[0030] The authentication terminal 30 is a device that serves as an interface for users who receive services. The authentication terminal 30 is installed at the service providing location of each service provider. More specifically, the authentication terminal 30 is installed at a store or the like that the user actually visits. The authentication terminal 30 may be installed at a business operator that has a contractual relationship with the service provider. For example, the authentication terminal 30 that serves as an interface when a user receives a service from a local government may be installed at a convenience store or the like.

[0031] The authentication terminal 30 has functions and forms according to the type of business of the service provider. For example, an authentication terminal 30 installed in a workplace or an event venue can be a gate device equipped with a gate that restricts the passage of users (persons to be authenticated). Alternatively, an authentication terminal 30 installed in a city hall or the like has a touch panel that accepts operations from residents and a printer that prints resident cards and the like. Also, a tablet-type terminal can be used as the authentication terminal 30 installed in a retail store.

[0032] 3 is merely an example and is not intended to limit the configuration of the authentication system disclosed herein. For example, the authentication center may include two or more control servers 10. Furthermore, it is sufficient that at least one or more service providers participate in the authentication system. Furthermore, it is sufficient that each service provider has at least one or more service servers 20 and at least one or more authentication terminals 30.

[0033] [General operation] Next, the general operation of the authentication system according to the first embodiment will be described.

[0034] <Create account> A user who wishes to receive a service from a service provider needs to create an account in the system. Specifically, the user operates a terminal 40 owned by the user to access the control server 10 (see FIG. 4).

[0035] A user inputs login information (e.g., login ID, password), name, date of birth, etc., on a WEB page provided by the control server 10. When the control server 10 acquires the login information, etc., it generates an ID for identifying the user. In the following explanation, the ID generated by the control server 10 is referred to as a "system ID." The control server 10 associates the generated system ID with the login information, etc., and stores them in an account management database. The account management database will be described in detail later.

[0036] <Biometric information registration> A user who wishes to receive services using biometric authentication needs to register his / her own biometric information in the terminal 40 .

[0037] Here, in order to provide a service using biometric authentication, it is necessary that authentication information generated from biometric information is registered in advance with the service provider. For example, when a service is provided using face authentication, it is necessary that a feature amount (feature vector) generated from a face image is registered in advance as authentication information. Alternatively, when a service is provided using fingerprint authentication, it is necessary that a feature amount generated from a fingerprint image is registered in advance as authentication information.

[0038] In the following description, original (basic) information for generating authentication information, such as a face image or a fingerprint image, is referred to as "original biometric information." Also, features generated from the original biometric information and registered in advance are referred to as "registered authentication information."

[0039] A user who has completed the creation of a system account must register original biometric information (e.g., a facial image) on the terminal 40 that he or she possesses. The terminal 40 acquires the original biometric information using a GUI (Graphical User Interface) or the like. The terminal 40 stores the acquired original biometric information (e.g., a facial image) internally. In this way, the terminal 40 stores the original biometric information that serves as the original of authentication information used for biometric authentication.

[0040] <Identity Verification> Here, there are two types of users in the authentication system.

[0041] The first user is a user who receives a service from a service provider without undergoing identity verification by the system. In the following description, the first user is referred to as a "normal user."

[0042] The second user is a user who receives services from a service provider after undergoing identity verification by the system. In the following explanation, the second user is referred to as an "authenticated user." Authenticated users can receive more services than regular users.

[0043] A user can choose to create an account as a normal user or as an authenticated user.

[0044] When a user desires to create an account as an authenticated user, the control server 10 performs identity verification of the user. For example, when the control server 10 acquires the desire of the user (to create an account as an authenticated user) using a GUI or the like, it executes control related to identity verification of the user.

[0045] The identity of a user is verified using a certificate issued by a public institution. Specifically, the control server 10 performs identity verification using a certificate such as a My Number card, a driver's license, or a passport. In the first embodiment, a case where a My Number card is used as an identity verification document will be described. When identity verification is performed using a driver's license or the like, the control server 10 may perform one-to-one authentication using a face image obtained from the driver's license or the like and a face image obtained by photographing.

[0046] When a user wishes to receive a service as an authenticated user, the control server 10 requests the terminal 40 possessed by the user to provide information necessary for identity verification. Specifically, the control server 10 transmits a "request for identity verification information" to the terminal 40 (step S01 in FIG. 5).

[0047] In response to receiving the request for providing personal identification information, the terminal 40 reads information from the user's My Number card. Specifically, the terminal 40 obtains electronic certificates (digital signature certificate, electronic user certificate) stored in an IC (Integrated Circuit) chip of the My Number card.

[0048] At that time, the terminal 40 acquires from the user a password (a 4-digit password or a 6- to 16-digit password) for reading out the electronic certificate from the My Number card, and acquires the electronic certificate using the password. The following describes a case where the terminal 40 acquires a signature electronic certificate from the My Number card. In the following description, the electronic certificate refers to the signature electronic certificate unless otherwise specified.

[0049] The terminal 40 transmits the acquired electronic certificate to the control server 10 as "identification information" (step S02).

[0050] The control server 10 transmits the acquired electronic certificate to a certificate authority server 50 operated by a certificate authority (J-LIS; Japan Agency for Local Authority Information Systems) (step S03). By transmitting the acquired electronic certificate, the control server 10 requests the certificate authority server 50 to verify the electronic certificate.

[0051] The control server 10 receives the verification result of the electronic certificate from the certificate authority server 50 (step S04). When the control server 10 receives a response from the certificate authority server 50 indicating that the electronic certificate is valid, it determines that the identity verification has been successful.

[0052] If the user's identity is successfully verified, the control server 10 manages the user as an "authenticated user." The control server 10 manages users who have not been verified as "normal users."

[0053] <Select a service> After registering in the system (creating a system account) and registering their original biometric information, the user selects the service provider from which they would like to receive biometric authentication services. The user selects the service provider from which they would like to receive services from among the multiple service providers participating in the authentication system (service providers under contract with the authentication center).

[0054] The control server 10 stores information on the service providers participating in the authentication system. For example, the control server 10 stores the name, business type, location, etc. of the service provider. The control server 10 holds information on each of a plurality of service providers and enables the user to select a service provider.

[0055] When a user operates the terminal 40 to perform a predetermined operation on the portal site, the control server 10 displays a GUI or the like that enables the user to select a desired service (service provider) on the terminal 40. The control server 10 uses the GUI to obtain the service (biometric authentication service) desired by the user.

[0056] <User registration> When the service provider selected by the user is acquired, the control server 10 executes control related to "user registration" that enables the selected service provider to provide the user with a service using biometric authentication.

[0057] Specifically, the control server 10 controls the above-mentioned selected service provider to acquire the original biometric information stored in the user's terminal 40. The service provider generates registered authentication information from the acquired original biometric information, and associates the generated registered authentication information with business information, thereby becoming ready to provide the service to the user.

[0058] A user operates the terminal 40 to access the control server 10 and logs in to the user's portal site. When the user performs a predetermined operation on the portal site (e.g., pressing a service provider selection button), the control server 10 displays a GUI including a list of service providers on the terminal 40.

[0059] When the service provider is selected, the control server 10 requests the user to provide the original biometric information. Specifically, the control server 10 transmits an "original provision request" to the user's terminal 40 (see step S11 in FIG. 6).

[0060] Upon receiving the original provision request, the terminal 40 transmits the original biometric information (for example, a face image) of the user to the control server 10 (step S12).

[0061] The control server 10 notifies the service provider selected by the user of the user's system ID, user type (normal user, authenticated user), acquired original biometric information, personal identification information, etc. The personal identification information is information for identifying the user. Examples of personal identification information include the user's name, or a combination of the user's name and date of birth.

[0062] The control server 10 transmits a "user registration request" including the system ID, the user type, the original biometric information, the individual identification information, and the like, to the service server 20 of the service provider selected by the user (step S13).

[0063] The service server 20 that has received the user registration request searches the user management database using the acquired personal identification information to identify the user who wishes to register (to receive services using biometric authentication). The service server 20 stores the system ID, user type, and registration authentication information (e.g., feature amount) obtained from the original biometric information in the entry for the identified user.

[0064] The service server 20 transmits a response including the result of the user registration (whether the user registration was successful or unsuccessful) to the control server 10 (step S14).

[0065] The control server 10 deletes the original biometric information (e.g., a face image) acquired from the user when the control server 10 transmits a user registration request to the service server 20 or when the control server 10 receives a response to the request. In addition, the service server 20 deletes the original biometric information acquired from the control server 10 when it generates registration authentication information (e.g., feature amount).

[0066] <Provision of services> After completing the selection of the service, the user visits the service provider to receive the service. For example, the user visits the facility or store of the service provider, such as an office, city hall, casino, amusement park, event venue, or retail store, where the user receives the service selected by the user.

[0067] The authentication terminal 30 acquires biometric information of a user (person to be authenticated) who receives a service. For example, the authentication terminal 30 photographs the person to be authenticated and acquires biometric information (for example, a face image) corresponding to the original biometric information.

[0068] Furthermore, the authentication terminal 30 acquires information on services that the user (person to be authenticated) desires to be provided (hereinafter referred to as provided service information). For example, when the user enters an office, "enter facility" is acquired as the provided service information. Or, when the user desires to have a resident's card issued, "issue resident's card" is acquired as the provided service information.

[0069] The authentication terminal 30 may automatically determine the provided service information according to the type of service desired by the user and the form of the authentication terminal 30's own device, or may acquire the provided service information from the user using a GUI, etc. For example, in the above example, the authentication terminal 30 automatically acquires "entry to facility." Also, the authentication terminal 30 acquires "issuance of resident's card" in response to the user's operation.

[0070] The authentication terminal 30 transmits an authentication request including the acquired biometric information and provided service information to the service server 20 (see FIG. 7). The authentication terminal 30 also transmits information accompanying the provided service information to the service server 20 as necessary. For example, when provided service information related to "product purchase" is acquired, information such as the product name and product price is transmitted to the service server 20 together with the provided service information as information accompanying the provided service information.

[0071] The service server 20 authenticates the user (person to be authenticated) using the biometric information and provided service information included in the authentication request, and the biometric information, user type, and business information registered in the user management database.

[0072] Here, the services that a service provider can provide to a normal user are different from the services that the service provider can provide to an authenticated user. In addition to the services provided to a normal user, an authenticated user is also provided with services that would normally require user identity verification. In other words, the services provided to an authenticated user include the services provided to a normal user.

[0073] In the above example, the service related to "entering the office" can be provided to the authenticated user regardless of the user type, whereas the service related to "issuing a residence certificate" can be provided only to authenticated users.

[0074] When the authentication request is received, the service server 20 identifies the person to be authenticated who is registered in the user management database by a matching process using the biometric information.

[0075] Specifically, the service server 20 generates authentication information for matching from biometric information (e.g., a face image) included in the authentication request. For example, the service server 20 generates features from the acquired face image. The service server 20 executes a matching process (1:N matching; N is a positive integer, the same applies below) using the generated authentication information for matching (hereinafter, referred to as matching authentication information) and registered authentication information registered in the user management database.

[0076] If the matching process fails, the service server 20 sets the authentication result to “authentication failed.” If the matching process is successful, the service server 20 uses the provided service information included in the authentication request and the user type of the person to be authenticated to determine whether or not the service desired by the person to be authenticated can be provided to the person to be authenticated.

[0077] When the service server 20 determines that the service cannot be provided to the authenticated user based on the provided service information and the user type, it sets the authentication result to "authentication failure." In this case, the service is not provided to the normal user. In the subsequent process, the service server 20 determines whether or not the service can be provided to the authenticated user.

[0078] If it is determined that a service can be provided to the authenticated person using the provided service information and user type, the service server 20 determines whether or not a service can be provided to the user using the business information of the user identified by the matching process.

[0079] For example, consider the case where the provided service information is "entry to facility." In this case, the service server 20 of the employee's company sets the authentication result to "authentication successful" if the person to be authenticated is an employee of the company and has the qualification to enter the office. On the other hand, the service server 20 sets the authentication result to "authentication failed" if the person to be authenticated is an employee of the company but does not have the qualification to enter the office.

[0080] Alternatively, the service server 20 of the city hall that receives the request for issuing a resident's card sets the authentication result to "authentication successful" if the resident's card can be issued for the person to be authenticated. On the other hand, if the service server 20 cannot issue a resident's card because the person to be authenticated has already moved out, etc., it sets the authentication result to "authentication failed."

[0081] The service server 20 transmits the authentication result (authentication success, authentication failure) to the authentication terminal 30.

[0082] The authentication terminal 30 executes a process according to the authentication result. For example, when the authentication terminal 30 receives a successful authentication, the authentication terminal 30 installed in an office opens a gate to allow the person to pass through. Alternatively, when the authentication terminal 30 receives a successful authentication, the authentication terminal 30 installed in a city hall or the like issues a resident's card.

[0083] Next, each device included in the authentication system according to the first embodiment will be described in detail.

[0084] [Control server] Fig. 8 is a diagram showing an example of a processing configuration (processing module) of the control server 10 according to the first embodiment. Referring to Fig. 8, the control server 10 includes a communication control unit 201, an account management unit 202, a business operator management unit 203, a personal identification control unit 204, a service selection control unit 205, a user registration control unit 206, and a storage unit 207.

[0085] The communication control unit 201 is a means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the service server 20. The communication control unit 201 also transmits data to the service server 20. The communication control unit 201 passes data received from other devices to other processing modules. The communication control unit 201 transmits data acquired from other processing modules to other devices. In this way, the other processing modules transmit and receive data to and from other devices via the communication control unit 201. The communication control unit 201 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0086] The account management unit 202 is a means for managing a user's account. When a user operates the terminal 40 to access a specific homepage or the like, the account management unit 202 acquires information necessary to create an account for the user.

[0087] Specifically, the account management unit 202 acquires personal information such as login information, name, and date of birth. Upon acquiring the login information, the account management unit 202 generates a system ID for identifying the user. The system ID may be any information that can uniquely identify the user. For example, the account management unit 202 may assign a unique value each time an account is generated, and use this as the system ID.

[0088] In addition, the account management unit 202 acquires a preference for a user type (normal user, authenticated user) from the user. If the user wishes to create an account as an authenticated user, the account management unit 202 notifies the identity verification control unit 204 of the preference.

[0089] The account management unit 202 stores the generated system ID, login information, name, etc. in an account management database in association with each other (see FIG. 9). Note that the account management database shown in FIG. 9 is merely an example, and is not intended to limit the items to be stored. For example, the account generation date and time, etc. may be stored in the account management database.

[0090] Furthermore, the account management unit 202 acquires login information for logging in to the portal site from the user's terminal 40. The account management unit 202 performs authentication using the login information.

[0091] The business management unit 203 is a means for managing service providers (service businesses) participating in the authentication system. The business management unit 203 acquires business information (service provider name, business type, location, address of service server 20, etc.) to be registered in the system from staff of each service provider.

[0092] For example, the business management unit 203 may provide each service provider with an interface for inputting business information, etc. Alternatively, each service provider may send a USB (Universal Serial Bus) memory or the like in which the business information, etc. is stored to the authentication center. The business management unit 203 may acquire the business information, etc. from a staff member of the authentication center, etc.

[0093] The business management unit 203 generates an ID (business ID) for the service provider from which the business information, etc. have been acquired. The business management unit 203 stores the generated business ID and the acquired business information, etc. in association with each other.

[0094] The identity verification control unit 204 is a means for controlling identity verification of users. The identity verification control unit 204 performs identity verification of users who wish to register in the system as authenticated users. The identity verification control unit 204 manages the user type of users who have successfully been verified as "authenticated users." The identity verification control unit 204 manages the user type of users who have not successfully been verified as "users who have not been verified" as "normal users."

[0095] The identity verification control unit 204 receives a notification from the account management unit 202 that the user wishes to create an account as an authenticated user. When the identity verification control unit 204 recognizes the user's wish (desire to be registered as an authenticated user) from the notification, it transmits a "request to provide identity verification information" to the terminal 40 of the user.

[0096] The personal identification control unit 204 receives a response (positive response, negative response) to the request for providing personal identification information.

[0097] If a negative response is received (if the electronic certificate cannot be obtained as personal identification information), the personal identification control unit 204 notifies the user that he / she cannot be registered as an authenticated user.

[0098] If an affirmative response is received (if an electronic certificate is obtained as personal identification information), the personal identification control unit 204 transmits to the certificate authority server 50 the electronic certificate read from the user's My Number card.

[0099] The identity verification control unit 204 receives the verification result of the electronic certificate from the certificate authority server 50 .

[0100] If verification fails (the electronic certificate is invalid), the identity verification control unit 204 notifies the user that the user cannot be registered as an authenticated user. In this case, the identity verification control unit 204 notifies the user that the user is registered as a normal user and that there are restrictions on the services that the user can receive.

[0101] If the verification is successful (the electronic certificate is valid), the identity verification control unit 204 notifies the user that the user has been registered as an authenticated user. In this case, the identity verification control unit 204 notifies the user that the user has been registered as an authenticated user and can receive more services than a normal user.

[0102] Furthermore, the identity verification control unit 204 manages users whose identity verification has been successful as authenticated users. The identity verification control unit 204 registers users whose identity verification has been successful as authenticated users in the account management database.

[0103] The initial value of the user type stored in the account management database is "normal user."

[0104] In this way, the identity verification control unit 204 performs identity verification of a user who wishes to register in the system as an authenticated user, using an electronic certificate obtained from the user's first certificate (My Number card).

[0105] The service selection control unit 205 is a means for controlling the selection of a biometric authentication service (service provider) by a user. The service selection control unit 205 enables the user to select a service provider from which the user wishes to receive a service from among a plurality of service providers that provide services using biometric authentication.

[0106] When a user operates the terminal 40 to log in to a portal site and performs a predetermined operation on the portal site, the service selection control unit 205 displays, for example, a GUI as shown in FIG.

[0107] When displaying the above GUI, the service selection control unit 205 displays the service providers so that the user can distinguish between the service providers that have been selected and those that have not been selected. In the example of Fig. 10, a service provider with a check mark in the upper right corner of the icon indicating the service business indicates a service provider that has already been selected, and a service provider with no check mark indicates a service provider that has not been selected.

[0108] The service selection control unit 205 uses the business information and information registered in the account management database to display a GUI such as that shown in Fig. 10. Specifically, the service selection control unit 205 refers to the business information and generates a list of service providers who have concluded a contract with the authentication center. The service selection control unit 205 also refers to the selected service field in the account management database and acquires the service provider (the business ID of the service provider) selected by the user.

[0109] Furthermore, when displaying the list of service providers, the service selection control unit 205 may also provide the user with more detailed information about each service provider (for example, the type of business, the services provided, the location of the store, etc.).

[0110] The service selection control unit 205 passes information on the service provider selected by the user (for example, the business ID of the service provider for which the user wishes to register) to the user registration control unit 206.

[0111] The user registration control unit 206 is a means for controlling "user registration" by the control server 10. The user registration control unit 206 controls "user registration" that enables a service provider selected by a user to provide the user with a service using biometric authentication.

[0112] When the user selects a service provider, the user registration control unit 206 transmits an “original provision request” to the terminal 40 carried by the user. The user registration control unit 206 receives the original biometric information (for example, a face image) of the user from the terminal 40.

[0113] The user registration control unit 206 transmits a user registration request including the user's system ID, user type, original biometric information, individual identification information, etc., to the service server 20 of the service provider corresponding to the service selected by the user.

[0114] The user registration control unit 206 acquires the system ID, the user type, and individual identification information (for example, name or a combination of name and date of birth) from the account management database.

[0115] The user registration control unit 206 receives a response (positive response, negative response) to the user registration request.

[0116] If a positive response (user registration successful) is received, the user registration control unit 206 registers the business ID of the service provider selected by the user in the account management database. Also, if a positive response is received, the user registration control unit 206 notifies the user that the user registration for the selected service provider was successful.

[0117] If a negative response (user registration failure) is received, user registration control unit 206 notifies the user accordingly.

[0118] In this way, the user registration control unit 206 notifies the service provider selected by the user of the original biometric information that is the original of the authentication information used for biometric authentication and the user type. More specifically, the user registration control unit 206 acquires the original biometric information by requesting the user's terminal 40 to provide the original biometric information. The user registration control unit 206 transmits a user registration request including at least the acquired original biometric information and user type to the service server 20 of the service provider selected by the user.

[0119] The storage unit 207 is a means for storing information necessary for the operation of the control server 10 .

[0120] [Service Server] Fig. 11 is a diagram showing an example of a processing configuration (processing module) of the service server 20 according to the first embodiment. Referring to Fig. 11, the service server 20 includes a communication control unit 301, a business information management unit 302, a user registration control unit 303, an authentication unit 304, and a storage unit 305.

[0121] The communication control unit 301 is a means for controlling communication with other devices. For example, the communication control unit 301 receives data (packets) from the control server 10. The communication control unit 301 also transmits data to the control server 10. The communication control unit 301 passes data received from other devices to other processing modules. The communication control unit 301 transmits data acquired from other processing modules to other devices. In this way, the other processing modules transmit and receive data to and from other devices via the communication control unit 301. The communication control unit 301 has a function as a receiver that receives data from other devices and a function as a transmitter that transmits data to other devices.

[0122] The business information management unit 302 is a means for managing and controlling business information required by the service provider to provide the service.

[0123] The business information management unit 302 acquires business information necessary for the provision of services by the company or organization using any means. For example, the business information management unit 302 of the user's company acquires information such as the employee's name, date of birth, employee number, department, place of work, etc. as business information.

[0124] The business information management unit 302 may acquire the business information from staff of the service provider, or may acquire the business information directly from the user using a homepage or other means.

[0125] The business information management unit 302 manages business information using a user management database.

[0126] A detailed description of the business information management unit 302 will be omitted here because details of business information for individual services and the method of acquiring the same are different from the gist of the disclosure of this application.

[0127] The user registration control unit 303 is a unit for controlling user registration by a service provider. The user registration control unit 303 processes a user registration request received from the control server 10.

[0128] When a user registration request is received, the user registration control unit 303 searches the user management database using the individual identification information (for example, name) included in the user registration request as a key, and identifies the corresponding user (entry).

[0129] If the corresponding user is registered in the user management database, the user registration control unit 303 generates registration authentication information from the acquired original biometric information (e.g., a face image). For example, when a face image is acquired, the user registration control unit 303 generates a feature amount (feature vector) corresponding to a face recognition algorithm adopted by the company as the registration authentication information.

[0130] Since existing technology can be used for the process of generating the feature amounts, detailed description thereof will be omitted. For example, the user registration control unit 303 extracts the eyes, nose, mouth, etc. as feature points from the face image. After that, the user registration control unit 303 calculates the position of each feature point and the distance between each feature point as feature amounts, and generates a feature vector (vector information that characterizes the face image) consisting of multiple feature amounts.

[0131] When the registered authentication information (e.g., features) is generated, the user registration control unit 303 stores the system ID, the generated registered authentication information (features), user type, and business information in association with each other in the user management database (see FIG. 12).

[0132] 12 is merely an example, and is not intended to limit the items to be stored in the user management database. For example, the date and time of user registration may be registered in the user management database.

[0133] When the user registration is normally completed, the user registration control unit 303 transmits an affirmative response indicating that the user registration was successful to the control server 10. The user registration control unit 303 generates registration authentication information (e.g., feature amount), registers the generated registration authentication information in the user management database, and then deletes the original biometric information acquired from the control server 10.

[0134] If the user registration is not normally completed, the user registration control unit 303 transmits a negative response to the control server 10, indicating that the user registration has failed. For example, a negative response is transmitted to the control server 10 when the personal identification information (e.g., name) received from the control server 10 is not registered in the user management database or when valid registration authentication information cannot be generated from the original biometric information.

[0135] The authentication unit 304 is a means for performing biometric authentication of the person to be authenticated.

[0136] 13 is a flowchart showing an example of the operation of the authentication unit 304 according to the first embodiment. The operation of the authentication unit 304 will be described with reference to FIG.

[0137] When an authentication request is received from the authentication terminal 30, the authentication unit 304 executes a matching process using biometric information (step S101).

[0138] Specifically, the authentication unit 304 generates matching authentication information from the biometric information included in the authentication request. For example, when a face image is acquired, the authentication unit 304 generates features corresponding to the face recognition algorithm adopted by the company. The authentication unit 304 executes matching processing using the generated matching authentication information (feature) and registered authentication information (feature) registered in the user management database.

[0139] Specifically, the authentication unit 304 calculates the similarity between the feature amount (feature vector) to be matched and each of the multiple feature amounts on the registration side. The similarity can be calculated using a chi-square distance, Euclidean distance, or the like. Note that the greater the distance, the lower the similarity, and the closer the distance, the higher the similarity.

[0140] If there is no feature whose similarity is equal to or greater than a predetermined value, the authentication unit 304 determines that the matching process has failed. If there is a feature whose similarity is equal to or greater than a predetermined value, the authentication unit 304 determines that the matching process has been successful. If the matching process is successful, the user of the entry having the most similar feature (registered authentication information) among multiple entries registered in the user management database is identified as the person to be authenticated.

[0141] If the matching process fails (step S102, No branch), the authentication unit 304 ends the process. In this case, the authentication unit 304 may notify the authentication terminal 30 of the failure of the authentication. Alternatively, the authentication unit 304 may store the fact that the matching process failed and details of the matching process as a log in order to confirm the soundness of the face authentication.

[0142] If the matching process is successful (step S102, Yes branch), the authentication unit 304 uses the provided service information included in the authentication request and the user type of the person to be authenticated identified by the matching process to determine whether or not the service can be provided to the person to be authenticated. Note that the authentication unit 304 also uses accompanying information of the provided service information as necessary to make this determination. The authentication unit 304 determines whether or not the service can be provided based on the user type (step S103).

[0143] For example, the authentication unit 304 refers to table information that stores whether or not registration as an authenticated user is required for each service.

[0144] If the service desired by the person to be authenticated is a service that can be provided to normal users and authenticated users, authentication unit 304 determines that the service can be provided.

[0145] If the service desired by the person to be authenticated can only be provided to an authenticated user, the authentication unit 304 determines that the service can be provided if the user identified by the matching process is an authenticated user. On the other hand, if the user identified by the matching process is a normal user, the authentication unit 304 determines that the service cannot be provided. For example, the authentication unit 304 determines that a service such as "issuance of a resident's card" can only be provided to an authenticated user.

[0146] In this way, authentication unit 304 determines whether or not to provide the service desired by the person to be authenticated, depending on the user type selected by the user (normal user, authenticated user).

[0147] If the service cannot be provided (step S104, No branch), the authentication unit 304 sets the authentication result to "authentication failed" (step S105).

[0148] If the service can be provided (step S104, Yes branch), the authentication unit 304 uses the business information of the person identified by the matching process to determine whether or not the service can be provided to the person. The authentication unit 304 determines whether or not the service can be provided based on the business information (step S106).

[0149] For example, the authentication unit 304 of the service server 20 of an employee's company determines that the service can be provided if the person to be authenticated is an employee of the company and has the qualification to enter the office. Alternatively, the authentication unit 304 of the service server 20 of a city hall that has received a request for issuance of a resident's card determines that the service can be provided if a resident's card can be issued for the person to be authenticated. Alternatively, the authentication unit 304 of the service server 20 of a retail store or the like determines that the service can be provided if payment for a product using credit card information or the like is successful.

[0150] Note that detailed explanations regarding authentication processing using business information in each service provider will be omitted, since processing specific to each service provider is outside the scope of the present disclosure.

[0151] If the service cannot be provided (step S107, No branch), the authentication unit 304 sets the authentication result to "authentication failed" (step S105).

[0152] If the service can be provided (step S107, Yes branch), the authentication unit 304 sets the authentication result to "authentication successful" (step S108).

[0153] The authentication unit 304 transmits the authentication result (authentication success, authentication failure) to the authentication terminal 30 (step S109).

[0154] If the authentication fails, the authentication unit 304 transmits a negative response to that effect to the authentication terminal 30.

[0155] If the authentication is successful, the authentication unit 304 transmits an affirmative response indicating that fact to the authentication terminal 30. At that time, the authentication unit 304 transmits an affirmative response including information necessary for providing the service to the user to the authentication terminal 30 as necessary. In the above example of issuing a resident's certificate, information necessary for issuing (printing) a resident's certificate is transmitted to the authentication terminal 30.

[0156] The storage unit 305 is a means for storing information necessary for the operation of the service server 20 .

[0157] [Authentication device] 14 is a diagram showing an example of a processing configuration (processing module) of the authentication terminal 30 according to the first embodiment. Referring to FIG. 14, the authentication terminal 30 includes a communication control unit 401, a provided service control unit 402, an authentication request unit 403, and a storage unit 404.

[0158] The communication control unit 401 is a means for controlling communication with other devices. For example, the communication control unit 401 receives data (packets) from the service server 20. The communication control unit 401 also transmits data to the service server 20. The communication control unit 401 passes the data received from other devices to other processing modules. The communication control unit 401 transmits data acquired from other processing modules to other devices. In this way, the other processing modules transmit and receive data to and from other devices via the communication control unit 401. The communication control unit 401 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0159] The provided service control unit 402 is a unit for executing control related to the services provided to the user. The provided service control unit 402 realizes the functions assigned to the authentication terminal 30.

[0160] When a user desires to receive a service, the provided service control unit 402 acquires biometric information (e.g., a facial image) of the user (person to be authenticated). For example, the provided service control unit 402 captures an image of the area in front of the device periodically or at a predetermined timing. The provided service control unit 402 determines whether the acquired image includes a human facial image, and if a facial image is included, extracts the facial image from the acquired image data.

[0161] Incidentally, since existing technologies can be used for the face image detection process and face image extraction process by the provided service control unit 402, detailed explanations will be omitted. For example, the provided service control unit 402 may extract a face image (face region) from image data using a learning model learned by a CNN (Convolutional Neural Network). Alternatively, the provided service control unit 402 may extract a face image using a method such as template matching.

[0162] Furthermore, the provided service control unit 402 generates or acquires provided service information. The provided service control unit 402 acquires provided service information according to the functions assigned to the authentication terminal 30, the services selected by the user, and the like.

[0163] For example, when the provided service control unit 402 of the authentication terminal 30 installed at the entrance of an office detects a user in front of the terminal, it generates "enter facility" as the provided service information. Alternatively, when the provided service control unit 402 of the authentication terminal 30 installed in a city hall or the like recognizes that the user wishes to be issued a resident's card using a GUI or the like, it generates "issuance of resident's card" as the provided service information.

[0164] The provided service control unit 402 passes the acquired biometric information (for example, a face image) and provided service information to the authentication request unit 403.

[0165] The authentication request unit 403 is a means for requesting authentication of the person to be authenticated to the service server 20. When authentication of the person to be authenticated becomes necessary, the authentication request unit 403 transmits an authentication request including biometric information of the person to be authenticated (the user in front of the authentication terminal 30) and information on the provided service to the service server 20.

[0166] The authentication request unit 403 receives the authentication result (authentication success, authentication failure) from the service server 20. The authentication request unit 403 passes the received authentication result to the service provided control unit 402.

[0167] For example, when the provided service control unit 402 of the authentication terminal 30 installed at the user's workplace receives a successful authentication, it opens the gate and allows the authenticated person to enter. Or, when the provided service control unit 402 of the authentication terminal 30 installed at a city hall receives an affirmative response in response to an authentication request for "issuance of a resident's certificate", it issues a resident's certificate using the information included in the affirmative response (information for issuing a resident's certificate).

[0168] Furthermore, by registering a user in the system as an authenticated user, the user can enter facilities such as casinos that require identity verification using a My Number card through biometric authentication (so-called face pass entry).

[0169] When receiving a message of authentication failure, the provided service control unit 402 may output a predetermined message, etc. For example, when receiving a message of authentication failure for issuance of a resident's card, the provided service control unit 402 of the authentication terminal 30 installed in a city hall may provide information on a booth where a staff member is waiting, etc.

[0170] A detailed description of the provided service control unit 402 included in the authentication terminal 30 of each service provider will be omitted because the realization of the functions of the authentication terminal 30 by the provided service control unit 402 is different from the gist of the disclosure of this application.

[0171] The storage unit 404 is a means for storing information necessary for the operation of the authentication terminal 30 .

[0172] [Device] Fig. 15 is a diagram showing an example of a processing configuration (processing module) of the terminal 40 according to the first embodiment. Referring to Fig. 15, the terminal 40 includes a communication control unit 501, an account creation control unit 502, an original information acquisition unit 503, a personal identification control unit 504, a service selection unit 505, and a storage unit 506.

[0173] The communication control unit 501 is a means for controlling communication with other devices. For example, the communication control unit 501 receives data (packets) from the control server 10. The communication control unit 501 also transmits data to the control server 10. The communication control unit 501 passes data received from other devices to other processing modules. The communication control unit 501 transmits data acquired from other processing modules to other devices. In this way, the other processing modules transmit and receive data to and from other devices via the communication control unit 501. The communication control unit 501 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0174] The account creation control unit 502 is a means for controlling the creation of an account by a user. The account creation control unit 502 accesses a predetermined web page or the like provided by the control server 10 in response to an operation by the user.

[0175] In response to a user's operation, the account creation control unit 502 inputs login information, name, date of birth, etc., to the WEB page. The account creation control unit 502 also inputs the user's preference regarding the user type (for example, account registration as an authenticated user) to the WEB page.

[0176] The original information acquiring unit 503 is a means for acquiring biometric information of a user (original biometric information). The original information acquiring unit 503 displays a GUI or the like for acquiring original biometric information (e.g., a face image) in response to an operation by a user. For example, the original information acquiring unit 503 acquires the original biometric information using a GUI as shown in FIG. 16.

[0177] The original information acquiring unit 503 stores the acquired original biometric information (e.g., a face image) in the storage unit 506. At this time, the original information acquiring unit 503 may encrypt, code, or the like the acquired original biometric information, and store the encrypted original biometric information in the storage unit 506. That is, the terminal 40 held by the user may hold the encrypted original biometric information. The encrypted original biometric information may be decrypted when the original biometric information is transmitted to the control server 10. Alternatively, information for decrypting the encrypted original biometric information (e.g., a common key) may be shared between the terminal 40 and the control server 10, and the control server 10 may decrypt the encrypted original biometric information.

[0178] In principle, the terminal 40 does not delete the original biometric information (e.g., face image) of the user. That is, the terminal 40 does not delete the original biometric information stored in the storage unit 506 unless there is a clear instruction from the user.

[0179] The personal identification control unit 504 is a unit for executing control related to personal identification required for registration in the system as an authenticated user. The personal identification control unit 504 processes a “personal identification information provision request” received from the control server 10.

[0180] When receiving a request for providing personal identification information from the control server 10, the personal identification control unit 504 acquires an electronic certificate from the user's My Number card. At that time, it is necessary to input a personal identification number (password) corresponding to the electronic certificate. The personal identification control unit 504 displays a GUI as shown in Fig. 17 and acquires a personal identification number (a character string of 6 to 16 alphanumeric characters).

[0181] The personal identification control unit 504 attempts to read the electronic certificate (digital signature certificate) from the IC chip of the My Number card using the acquired PIN. If the correct PIN is entered, the personal identification control unit 504 can read the electronic certificate.

[0182] If the electronic certificate is acquired, the identity verification control unit 504 transmits an affirmative response to the control server 10, the response including the electronic certificate as "identity verification information."

[0183] If the electronic certificate (personal identification information) cannot be acquired, the personal identification control unit 504 transmits a negative response to that effect to the control server 10.

[0184] The service selection unit 505 is a means for enabling a user to select a biometric authentication service. The service selection unit 505 logs in to a portal site provided by the control server 10 in response to an operation by the user. The service selection unit 505 transmits information on a service provider selected by the user using a GUI provided by the control server 10 to the control server 10.

[0185] The service selection unit 505 receives a request to provide the original from the control server 10. Upon receiving the request, the service selection unit 505 transmits the original biometric information stored in the storage unit 506 to the control server 10.

[0186] The storage unit 506 is a means for storing information necessary for the operation of the terminal 40 .

[0187] [Certification Authority Server] A detailed description will be omitted regarding the configuration and operation of the certificate authority server 50. The certificate authority server 50 determines the validity of the acquired electronic certificate and notifies the control server 10 of the determination result (whether the electronic certificate is valid or invalid).

[0188] [System Operation] Next, the operation of the authentication system according to the first embodiment will be described. Note that the description of the operation related to the account generation etc. will be omitted. Fig. 18 is a sequence diagram showing an example of the operation of the authentication system according to the first embodiment.

[0189] The terminal 40 transmits information on the service selected by the user (information on the service provider from which the user wishes to receive biometric authentication service) to the control server 10 (transmitting service information; step S21).

[0190] When the user selects a service that he or she wishes to receive, the control server 10 transmits an original provision request to the terminal 40 of the user (step S22).

[0191] In response to receiving the original provision request, the terminal 40 transmits the original biometric information (for example, a face image) to the control server 10 (step S23).

[0192] The control server 10 transmits a user registration request including the system ID, the user type, the acquired original biometric information, the individual identification information, and the like, to the service server 20 of the service provider selected by the user (step S24).

[0193] The service server 20 generates authentication information for registration (registered authentication information) from the acquired original biometric information (step S25). The generated registered authentication information etc. are registered in the user management database.

[0194] Next, a modification of the first embodiment will be described.

[0195] <Modification 1 of the First Embodiment> A user may select a service provider using a predetermined code. For example, a management code may be used that allows a user to easily specify a service selector from among many service providers. For example, when a user selects a predetermined icon from the list of icons shown in FIG. 10, the control server 10 displays a GUI that requests input of a management code. The control server 10 treats the service provider corresponding to the management code input by the user as the service provider selected by the user.

[0196] Alternatively, the control server 10 may treat the management code entered by the user like a password. Specifically, when the user selects a service provider, the control server 10 requests the user to enter the management code of the selected service provider. If the management code entered by the user matches a predetermined management code of the selected service provider, the control server 10 may accept the user's selection of a service provider. In other words, if the two management codes do not match, the control server 10 rejects the user's selection of a service provider.

[0197] <Modification 2 of the First Embodiment> In the above embodiment, the service provider (service server 20) identifies the user by using personal identification information when registering the user. However, the user may be selected by using an ID (hereinafter, referred to as an individual ID) by which the service provider manages the user (customer).

[0198] Specifically, when the user selects a service provider, the control server 10 transmits a redirect URL (Uniform Resource Locator) in which the system ID and user type of the user are embedded to the terminal 40. The redirect URL is a URL for logging in to the portal site (account) of the service provider selected by the user.

[0199] When the user logs in to the service provider's login page according to the received redirect URL, the service server 20 acquires the individual ID (login ID) of the user and the system ID and user type embedded in the redirect URL.

[0200] The service server 20 searches the user management database using the acquired individual ID, and identifies the corresponding entry (user). The service server 20 stores the system ID and the user type in the identified entry.

[0201] In this manner, a redirect URL in which the system ID and user type are embedded may be used to realize user registration.

[0202] <Modification 3 of the First Embodiment> In the above embodiment, the case has been described where the user selects the user type (normal user, authenticated user) when creating a system account, but the user type may be changed after the system account is created.

[0203] In this case, when a user logs in to a system account and performs a predetermined operation (for example, pressing an authentication user registration button), the control server 10 controls identity verification of the user. Specifically, the control server 10 (identification control unit 204) transmits an identity verification information request to the terminal 40 to obtain identity verification information (digital certificate).

[0204] If the acquired electronic certificate is valid, the identity verification control unit 204 notifies each service provider for which user registration for the user has been completed of the change in user type. Specifically, the identity verification control unit 204 transmits a "user type change notification" including the system ID and the changed user type (authenticated user) to the service server 20 of each service provider set in the selected service field of the account management database.

[0205] The service server 20 (user registration control unit 303) searches the user management database using the acquired system ID as a key to identify a corresponding entry. The user registration control unit 303 sets the authenticated user in the user type field of the identified entry.

[0206] If a user wishes to change his / her user type from an authenticated user to a regular user, the control server 10 simply sends a “user type change notification” including the system ID and the changed user type (regular user) to the service server 20 of each service provider selected by the user.

[0207] <Modification 4 of the First Embodiment> The control server 10 and the terminal 40 may notify the user of the status of the user type by any means. That is, the terminal 40 carried by the user may display information according to the user type (normal user, authenticated user).

[0208] For example, when a user logs in to a system account, the control server 10 may display the status of the user type on the portal site of that user. For example, the control server 10 (account management unit 202) may display on the terminal 40 as shown in Fig. 19. Note that, although the user type is displayed by characters in Fig. 19, the control server 10 may display the user type by any method or manner. For example, the control server 10 may display the user type by using figures (icons), symbols, blinking icons, etc.

[0209] Alternatively, the terminal 40 acquires the user type from the control server 10 and stores the acquired user type. The terminal 40 may display an icon or the like corresponding to the user type on a standby screen, a menu screen, or the like.

[0210] <Fifth Modification of the First Embodiment> The control server 10 may perform identity verification using a certificate other than the My Number card. For example, the control server 10 (identification control unit 204) may perform identity verification using a certificate with a facial photograph attached, such as a driver's license or a passport.

[0211] When the terminal 40 (personal identification control unit 504) receives a request to provide personal identification information from the control server 10, it acquires image data obtained by photographing the user (so-called selfie) and image data obtained by photographing a driver's license, etc. The terminal 40 transmits the two acquired image data to the control server 10 as personal identification information.

[0212] The control server 10 performs one-to-one authentication using a photographed face image obtained by photographing the user and a certificate face image recorded on the certificate. If the one-to-one authentication is successful, the control server 10 determines that the identity verification is successful. If the one-to-one authentication is unsuccessful, the control server 10 determines that the identity verification is unsuccessful.

[0213] If the identity verification is successful, the control server 10 treats the user as an authenticated user.

[0214] As described above, in the first embodiment, in an authentication system in which the user himself manages original biometric information (e.g., face image) necessary for providing a service using biometric authentication, the identity of the user is confirmed using a certificate such as a My Number card. An authenticated user who has completed identity confirmation is treated differently from a normal user who has not completed identity confirmation. The authenticated user can receive services that are more than those provided to normal users. For example, the authenticated user can enjoy services that originally require identity confirmation using a My Number card or the like (services that require identity confirmation by staff or the like), such as issuance of a resident's certificate, by using biometric authentication. As a result, the convenience of the user (authenticated user) is improved, and the business efficiency of the service provider (the local government in the above example) is improved. In addition, services using biometric authentication are provided within a limited scope to users who are hesitant to confirm their identity using a My Number card or the like.

[0215] [Second embodiment] Next, the second embodiment will be described in detail with reference to the drawings.

[0216] In the second embodiment, a case will be described in which the control server 10 notifies the service provider (service server 20) of the age information (date of birth) of the authenticated user at the time of user registration. The service server 20 according to the second embodiment determines whether or not to provide a service based on the age of the authenticated user.

[0217] The configuration of the authentication system according to the second embodiment can be the same as that of the first embodiment, and therefore the description corresponding to Fig. 3 will be omitted. Also, the processing configuration of the control server 10 and the like according to the second embodiment can be the same as that of the first embodiment, and therefore the description thereof will be omitted.

[0218] The following description will focus on the differences between the first and second embodiments.

[0219] When a user wishes to receive a service as an authenticated user, the control server 10 (personal identification control unit 204) acquires the user's date of birth from the digital signature certificate. The digital signature certificate includes the so-called four basic pieces of information (name, sex, address, and date of birth). The personal identification control unit 204 stores the acquired date of birth in the account management database.

[0220] When registering a user with a service provider selected by the user, the control server 10 (user registration control unit 206) sends a “user registration request” to the service server 20, which includes the system ID, user type, date of birth, original biometric information, and personal identification information.

[0221] The service server 20 (user registration control unit 303) stores the acquired system ID, user type, date of birth, etc. in the user management database.

[0222] When authenticating a user, the service server 20 (authentication unit 304) uses the birth date (age) of the user (person to be authenticated).

[0223] Fig. 20 is a flowchart showing an example of the operation of the authentication unit 304 according to the second embodiment. Note that the same reference numerals are given to processes that can have the same process contents in Fig. 13 and Fig. 20, and the description thereof will be omitted.

[0224] Here, some services provided to users require age verification. For example, there are age restrictions on the purchase of products such as alcohol and tobacco. The authentication unit 304 determines whether or not to provide a service to a user based on the user's age (step S201).

[0225] For example, the authentication unit 304 refers to table information that describes, for each service, whether or not there is an age restriction and the minimum age at which the service can be provided.

[0226] If the service desired by the user does not require age verification, the authentication unit 304 determines that the service can be provided.

[0227] If the service desired by the user requires age verification, the authentication unit 304 calculates the user's age from the date of birth identified by the matching process, and determines whether the user's age has reached a specified age set as a requirement for providing the service.

[0228] If the user (person to be authenticated) has reached a predetermined age, the authentication unit 304 determines that the service can be provided. On the other hand, if the user (person to be authenticated) has not reached the predetermined age, the authentication unit 304 determines that the service cannot be provided.

[0229] If it is determined that the service cannot be provided based on the age of the user (step S202, No branch), the authentication unit 304 sets the authentication result to authentication failure (step S105).

[0230] If it is determined that the service can be provided based on the age of the user (step S202, Yes branch), the authentication unit 304 performs a determination based on the business information (step S106).

[0231] The service server 20 may utilize the age of the person to be authenticated when providing services. The service server 20 may provide a discount on the fee if the person to be authenticated is above a certain age (for example, 60 years old or older). In other words, the service server 20 may provide a silver discount (senior discount) or the like using the age of the person to be authenticated.

[0232] As described above, when the control server 10 according to the second embodiment succeeds in identifying a user, it acquires the date of birth from the electronic certificate of the authenticated user who has succeeded in the identity verification. The control server 10 notifies the service provider selected by the user of the acquired date of birth in addition to the system ID, the user type, the original biometric information, etc. The service provider can determine whether or not to provide age-restricted services based on the age obtained from the My Number card (digital signature certificate), so that the service provider can provide the service with peace of mind. In addition, the user can purchase alcohol, tobacco, etc. by biometric authentication without presenting a certificate such as a My Number card to a retail store clerk, etc. for age verification. That is, the convenience of the user is improved. In addition, the retail store, etc. does not need to secure a clerk for identity verification, so that the business efficiency is improved.

[0233] [Third embodiment] Next, a third embodiment will be described in detail with reference to the drawings.

[0234] In the third embodiment, a case will be described in which a user provides a system with a second certificate other than a first certificate (e.g., a My Number card) for registration as an authenticated user. A control server 10 according to the third embodiment notifies a service provider of attribute information such as the user's position, status, situation, condition, skills, and qualifications obtained from the second certificate. The service provider authenticates the user and provides services based on the notified attribute information.

[0235] Since the configuration of the authentication system according to the third embodiment can be the same as that of the first embodiment, a description corresponding to FIG. 3 will be omitted.

[0236] The following description will focus on the differences between the first to third embodiments.

[0237] When creating an account, the control server 10 acquires attribute information from a certificate other than the certificate (personal identification document; My Number card) for registering the user as an authenticated user. Specifically, the control server 10 acquires the attribute information from a certificate that certifies the user's position, status, situation, condition, skill, qualification, etc.

[0238] For example, the above certificates include a student ID card that proves that you are a student, a disability certificate that proves that you are disabled, a driver's license that proves that you can drive a car, and an identification card that proves that you have a specific qualification (for example, a doctor). Alternatively, a health insurance card is also included in the above certificates.

[0239] Fig. 21 is a diagram showing an example of a processing configuration (processing module) of the control server 10 according to the third embodiment. Referring to Fig. 21, an attribute information acquisition unit 208 is added to the configuration of the control server 10 according to the first embodiment.

[0240] The attribute information acquisition unit 208 is a means for acquiring attribute information from a second certificate that is different from a first certificate used for identity verification for authentication user registration.

[0241] When a user wishes to register a student ID card, a disability certificate, or the like on the portal site when or after a system account is created, the attribute information acquisition unit 208 acquires image data showing the student ID card or the like using a GUI or the like.

[0242] The attribute information acquisition unit 208 extracts information such as the name and date of birth written on the student ID card from the acquired image data. For example, the attribute information acquisition unit 208 acquires the name and date of birth written on the student ID card using OCR (Optical Character Recognition) technology or the like.

[0243] The attribute information acquisition unit 208 compares the name, date of birth, etc. obtained from the second certificate (student ID, disability certificate, etc.) with the name, date of birth, etc. of the user (authenticated user whose identity has been verified), and if the two match, it determines that a legitimate certificate has been registered.

[0244] If the certificate is determined to be valid, the attribute information acquisition unit 208 acquires attribute information such as the user's status, position, and situation from the second certificate (student ID, disability certificate, etc.). For example, the attribute information acquisition unit 208 acquires the attribute information by inputting image data showing the certificate into the learning model.

[0245] The learning model is generated by executing machine learning using training data in which labels (position, status, situation, etc.) are assigned to image data. Any algorithm such as a support vector machine, boosting, or neural network can be used to generate the learning model. Note that the algorithm such as the support vector machine can use publicly known technology, and therefore the description thereof will be omitted.

[0246] When the attribute information of the user is acquired from the second certificate, the attribute information acquisition unit 208 stores the acquired attribute information in the account management database.

[0247] When registering a user with a service provider selected by the user, the control server 10 (user registration control unit 206) sends a “user registration request” to the service server 20, which includes the system ID, user type, attribute information, original biometric information, and personal identification information.

[0248] The service server 20 (user registration control unit 303) stores the acquired system ID, user type, and attribute information in the user management database.

[0249] The service server 20 (authentication unit 304) performs authentication processing and grants predetermined privileges using attribute information (position, status, situation, skills, qualifications, etc.) of the person to be authenticated registered in the user management database.

[0250] For example, if the person to be authenticated is a student, the service server 20 may sell a commuter pass or the like to the person to be authenticated at a student discount. Alternatively, if the person to be authenticated is a person with a disability, the service server 20 may discount the fare for a bus, train, or the like. Alternatively, if the person to be authenticated has purchased a silver pass, the service server 20 may discount the fare for a bus, train, or the like.

[0251] <Modification of the third embodiment> The control server 10 may obtain information from a document other than the certificate to obtain the user's attribute information, and notify the service provider of the obtained information.

[0252] For example, the control server 10 may receive registration of a medicine notebook from a user and obtain information on the user's medication (medication information) from the medicine notebook. When registering a user, the control server 10 may notify the service provider of the medication information together with the original biometric information, etc.

[0253] A service provider (eg, a hospital or pharmacy) may use the acquired medication information for the treatment of the user (patient), medication instruction, and the like.

[0254] As described above, the control server 10 according to the third embodiment acquires attribute information of a user from the second certificate (e.g., a student ID card or a disability certificate) of the user. The control server 10 notifies the service provider selected by the user of the acquired attribute information in addition to the original biometric information and the user type. The service provider can authenticate the authenticatee and provide services based on the attribute information acquired from a certificate such as a student ID card or a disability certificate. The user does not need to present the certificate to staff members, store clerks, etc. of the service provider in order to receive benefits, etc., that are acquired by having the certificate. This improves the convenience of the user. In addition, the service provider does not need to secure personnel for certificate verification, which improves business efficiency.

[0255] Next, the hardware of each device constituting the authentication system will be described.

[0256] The control server 10 can be configured by an information processing device (so-called a computer), and has the configuration exemplified in Fig. 22. For example, the control server 10 includes a processor 311, a memory 312, an input / output interface 313, and a communication interface 314. The components such as the processor 311 are connected by an internal bus or the like, and are configured to be able to communicate with each other.

[0257] However, the configuration shown in Fig. 22 is not intended to limit the hardware configuration of the control server 10. The control server 10 may include hardware not shown, and may not include the input / output interface 313 as necessary. Furthermore, the number of processors 311 and the like included in the control server 10 is not intended to be limited to the example shown in Fig. 22, and for example, the control server 10 may include multiple processors 311.

[0258] The processor 311 is, for example, a programmable device such as a central processing unit (CPU), a micro processing unit (MPU), or a digital signal processor (DSP). Alternatively, the processor 311 may be a device such as a field programmable gate array (FPGA), or an application specific integrated circuit (ASIC). The processor 311 executes various programs including an operating system (OS).

[0259] The memory 312 is a random access memory (RAM), a read only memory (ROM), a hard disk drive (HDD), a solid state drive (SSD), etc. The memory 312 stores an OS program, application programs, and various data.

[0260] The input / output interface 313 is an interface for a display device and an input device (not shown). The display device is, for example, a liquid crystal display, etc. The input device is, for example, a keyboard, a mouse, etc. that accepts user operations.

[0261] The communication interface 314 is a circuit, a module, etc. that communicates with other devices. For example, the communication interface 314 includes a network interface card (NIC).

[0262] The functions of the control server 10 are realized by various processing modules. The processing modules are realized, for example, by the processor 311 executing a program stored in the memory 312. The program can be recorded in a computer-readable storage medium. The storage medium can be a non-transitory medium such as a semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. That is, the present invention can also be embodied as a computer program product. The program can be downloaded via a network, or updated using a storage medium storing the program. The processing modules may also be realized by a semiconductor chip.

[0263] The service server 20, authentication terminal 30, terminal 40, etc. can also be configured by information processing devices like the control server 10, and their basic hardware configurations are not described here because they are no different from the control server 10. For example, the authentication terminal 30 may be provided with a camera device for photographing the person to be authenticated.

[0264] The control server 10, which is an information processing device, is equipped with a computer, and can realize the functions of the control server 10 by having the computer execute a program. The control server 10 also executes the control method of the control server 10 by the program. Similarly, the terminal 40, which is an information processing device, is equipped with a computer, and can realize the functions of the terminal 40 by having the computer execute a program. The terminal 40 also executes the control method of the terminal 40 by the program.

[0265] [Variations] The configuration, operation, and the like of the authentication system described in the above embodiment are merely examples, and are not intended to limit the system configuration, and the like.

[0266] In the above embodiment, the operation of the authentication system has been described using a person's "face" as an example of biometric information. However, the authentication system disclosed in the present application can also use other types of biometric information. For example, data including physical characteristics unique to an individual, such as a fingerprint, voiceprint, vein, retina, or iris pattern, may be used. In other words, the biometric information of a user may be any information that includes the user's physical characteristics.

[0267] The user's terminal 40 may obtain consent from the user to transmit the original biometric information (e.g., a facial image) to the service provider every time it receives an original provision request from the control server 10. Specifically, upon receiving the original provision request, the service selection unit 505 of the terminal 40 obtains whether the original biometric information (e.g., a facial image) can be provided using a GUI or the like. Upon obtaining consent from the user to provide the original biometric information, the service selection unit 505 transmits the original biometric information stored therein to the control server 10.

[0268] When a user selects a service provider, the control server 10 may change the service provider that the user can select according to the user type. That is, when there is a service provider that provides services only to authenticated users among a plurality of service providers, the control server 10 may prohibit normal users from selecting the service provider. In this case, the control server 10 notifies the user of restrictions on the service provider (the existence of a service provider that can provide services only to authenticated users) using various interfaces. For example, as shown in FIG. 23, the control server 10 displays a message such as "Only authenticated users can select" on the icon of the service provider with the above restrictions. Alternatively, as shown in FIG. 24, the control server 10 may hide service providers (icons of service providers) that normal users cannot select. Alternatively, as shown in FIG. 25, the control server 10 may display icons of service providers that normal users cannot select inactive (displayed by dotted lines in the example of FIG. 25). Alternatively, the control server 10 may display icons of service providers that normal users cannot select transparently. Furthermore, when the control server 10 notifies the user of the existence of a service provider that cannot be selected by a normal user, the control server 10 may prepare an interface that prompts the user to register as an authenticated user. For example, as shown in Fig. 26, the control server 10 may display an "authentication user registration button" near the icon of the service provider. Alternatively, the control server 10 may display a message such as "You cannot use the service because you are a normal user, but you will be able to use the service once you have completed the authentication user registration."

[0269] When the service server 20 authenticates the person to be authenticated, the service server 20 may notify the user's terminal 40 of the details of the authentication. At that time, the service server 20 transmits an authentication execution notification to the terminal 40, including the authentication date and time, the authentication location, the authentication process details, the user type, and the like. The terminal 40 stores the information included in the authentication execution notification and generates an authentication history (see FIG. 27). Furthermore, the terminal 40 displays the authentication history in response to an operation by the user. Alternatively, when the terminal 40 receives the authentication execution notification, it displays a pop-up using the information included in the notification (see FIG. 28).

[0270] In the above embodiment, the case where the account management database is configured inside the control server 10 has been described, but the database may be constructed in an external database server or the like. That is, some of the functions of the control server 10 may be implemented in another server. More specifically, the above-described "service selection control unit (service selection control means)" and the like may be implemented in any of the devices included in the system.

[0271] Although the format of data transmission and reception between each device (the control server 10, the service server 20, and the authentication terminal 30) is not particularly limited, the data transmitted and received between these devices may be encrypted. Biometric information and the like is transmitted and received between these devices, and in order to appropriately protect this information, it is desirable to transmit and receive encrypted data.

[0272] In the flow charts (flow charts, sequence diagrams) used in the above description, multiple steps (processes) are described in order, but the order of execution of the steps executed in the embodiments is not limited to the order described. In the embodiments, the order of the steps shown in the figures can be changed to a degree that does not interfere with the content, such as executing each process in parallel.

[0273] The above-mentioned embodiments have been described in detail to facilitate understanding of the present disclosure, and it is not intended that all of the configurations described above are necessary. In addition, when a plurality of embodiments are described, each embodiment may be used alone or in combination. For example, it is possible to replace a part of the configuration of an embodiment with the configuration of another embodiment, or to add the configuration of another embodiment to the configuration of an embodiment. Furthermore, it is possible to add, delete, or replace a part of the configuration of an embodiment with another configuration.

[0274] From the above explanation, the industrial applicability of the present invention is clear, and the present invention can be suitably applied to an information processing system that provides a biometric authentication service.

[0275] A part or all of the above-described embodiments can be described as, but is not limited to, the following supplementary notes. [Appendix 1] an identity verification control means for verifying the identity of a user who wishes to register in the system as an authenticated user who is entitled to more services than a normal user, managing the user type of a user who has been successfully verified as the authenticated user, and managing the user type of a user who has not been successfully verified as the normal user; a service selection control means for enabling a user to select a service provider from which the user wishes to receive a service from among a plurality of service providers that provide services using biometric authentication; a user registration control means for notifying a service provider selected by the user of original biometric information that is an original of authentication information used for biometric authentication and the user type; A server device comprising: [Appendix 2] 2. The server device according to claim 1, wherein the identity verification control means performs the identity verification using an electronic certificate obtained from a first certificate of the user. [Appendix 3] When the identity verification is successful, the identity verification control means obtains the user's date of birth, The server device according to claim 2, wherein the user registration control means further notifies the acquired date of birth to a service provider selected by the user. [Appendix 4] further comprising an attribute information acquiring means for acquiring attribute information of the user from the second certificate of the user; The server device according to claim 2, wherein the user registration control means further notifies the acquired attribute information to a service provider selected by the user. [Appendix 5] The server device described in any one of Appendices 1 to 4, wherein the user registration control means acquires the original biometric information by requesting the provision of the original biometric information from a terminal held by the user, and transmits a user registration request including at least the acquired original biometric information and the user type to a server of a service provider selected by the user. [Appendix 6] The server device described in Appendix 5, wherein the user registration control means transmits the user registration request to the server, the request including at least a system ID for managing the user on the device itself, the acquired original biometric information, and the user type. [Appendix 7] The server device according to claim 6, wherein the original biometric information is a face image. [Appendix 8] 3. The server device according to claim 2, wherein the first certificate is a My Number Card. [Appendix 9] A terminal owned by a user; A plurality of service servers that provide services using biometric authentication and are managed by a plurality of service providers, respectively; A server device; Including, The server device includes: an identity verification control means for verifying the identity of a user who wishes to register in the system as an authenticated user who is entitled to more services than a normal user, managing the user type of a user who has been successfully verified as the authenticated user, and managing the user type of a user who has not been successfully verified as the normal user; a service selection control means for enabling a user to select a service provider from which the user wishes to receive a service from among the plurality of service providers; a user registration control means for acquiring original biometric information from the user's terminal, the original biometric information being an original of authentication information used for biometric authentication, and transmitting a user registration request including the original biometric information and the user type to a service server of a service provider selected by the user; A system comprising: [Appendix 10] The system described in Appendix 9, wherein a service server among the plurality of service servers that receives the user registration request determines whether or not to provide the service desired by the person to be authenticated, depending on the user type. [Appendix 11] The system according to claim 9 or 10, wherein the terminal carried by the user displays information according to the user type. [Appendix 12] In the server device, performing identity verification of a user who wishes to register in the system as an authenticated user who is able to receive more services than a normal user, managing the user type of the user who has been successfully verified as the authenticated user, and managing the user type of the user who has not been successfully verified as the normal user; A system is provided that enables a user to select a service provider from among a plurality of service providers that provide services using biometric authentication, A method for controlling a server device, which notifies a service provider selected by the user of original biometric information that serves as an original of authentication information used for biometric authentication and the user type. [Appendix 13] A computer installed in the server device A process of performing identity verification of a user who wishes to register in the system as an authenticated user who can receive more services than a normal user, managing the user type of the user who has been successfully verified as the authenticated user, and managing the user type of the user who has not been successfully verified as the normal user; A process for enabling a user to select a service provider from which the user wishes to receive a service from among a plurality of service providers that provide services using biometric authentication; a process of notifying a service provider selected by the user of original biometric information that is an original of authentication information used for biometric authentication and the user type; A computer-readable storage medium that stores a program for executing the above.

[0276] The disclosures of the above cited prior art documents are incorporated herein by reference. Although the embodiments of the present invention have been described above, the present invention is not limited to these embodiments. It will be understood by those skilled in the art that these embodiments are merely illustrative and that various modifications are possible without departing from the scope and spirit of the present invention. In other words, the present invention naturally includes various modifications and amendments that a person skilled in the art can make in accordance with the entire disclosure, including the scope of the claims, and the technical ideas. [Explanation of symbols]

[0277] 10 Control Server 20 Service Server 30 Authentication terminal 40 Terminals 50 Certificate Authority Server 100 Server device 101 Identity Verification Control Measures 102 Service selection control means 103 User registration control means 201 Communication control section 202 Account Management Department 203 Business Management Department 204 Personal Identification Control Unit 205 Service selection control unit 206 User registration control section 207 Memory section 208 Attribute information acquisition section 301 Communication Control Unit 302 Business Information Management Department 303 User registration control unit 304 Authentication Department 305 Storage section 311 Processor 312 Memory 313 Input / Output Interface 314 Communication Interface 401 Communication control section 402 Service provision control section 403 Authentication Request Section 404 Storage section 501 Communication control section 502 Account creation control unit 503 Original information acquisition department 504 Personal Identification Control Unit 505 Service Selection Department 506 Storage section

Claims

1. an identity verification control means for verifying the identity of a user who wishes to register in the system as an authenticated user, managing the user type of the user who has been successfully verified as the authenticated user, and managing the user type of the user who has not been successfully verified as a normal user; a service selection control means for enabling a user to select a service provider from which the user wishes to receive a service from among a plurality of service providers that provide services using biometric authentication; a user registration control means for notifying a service provider selected by the user of original biometric information that is an original of authentication information used for biometric authentication and the user type; A server device comprising:

2. 2. The server device according to claim 1, wherein said identity verification control means performs said identity verification using an electronic certificate obtained from a first certificate of said user.

3. When the identity verification is successful, the identity verification control means obtains the user's date of birth, 3. The server device according to claim 2, wherein said user registration control means further notifies said acquired date of birth to a service provider selected by said user.

4. The method further includes: acquiring attribute information of the user from the second certificate of the user; 3. The server device according to claim 2, wherein said user registration control means further notifies said acquired attribute information to a service provider selected by said user.

5. The server device according to any one of claims 1 to 4, wherein the user registration control means acquires the original biometric information by requesting the provision of the original biometric information from a terminal held by the user, and transmits a user registration request including at least the acquired original biometric information and the user type to a server of a service provider selected by the user.

6. The server device according to claim 5, wherein the user registration control means transmits to the server the user registration request including at least a system ID for managing the user on the device itself, the acquired original biometric information, and the user type.

7. The server device according to claim 6 , wherein the original biometric information is a face image.

8. The server device according to claim 2 , wherein the first certificate is a My Number card.

9. A terminal owned by a user; A plurality of service servers that provide services using biometric authentication and are managed by a plurality of service providers, respectively; A server device; Including, The server device includes: an identity verification control means for verifying the identity of a user who wishes to register in the system as an authenticated user, managing the user type of the user who has been successfully verified as the authenticated user, and managing the user type of the user who has not been successfully verified as a normal user; a service selection control means for enabling a user to select a service provider from which the user wishes to receive a service from among the plurality of service providers; a user registration control means for acquiring original biometric information from the user's terminal, the original biometric information being an original of authentication information used for biometric authentication, and transmitting a user registration request including the original biometric information and the user type to a service server of a service provider selected by the user; A system comprising:

10. 10. The system according to claim 9, wherein a service server among the plurality of service servers that has received the user registration request determines whether or not to provide a service desired by the person to be authenticated, depending on the user type.

11. The system according to claim 9 or 10, wherein the terminal carried by the user performs display according to the user type.

12. In the server device, performing identity verification of a user who wishes to register in the system as an authenticated user, managing the user type of the user who has been successfully verified as the authenticated user, and managing the user type of the user who has not been successfully verified as a normal user; A system is provided that enables a user to select a service provider from among a plurality of service providers that provide services using biometric authentication, A method for controlling a server device, which notifies a service provider selected by the user of original biometric information that serves as an original of authentication information used for biometric authentication and the user type.

13. A computer installed in the server device A process of performing identity verification of a user who wishes to register in the system as an authenticated user, managing the user type of the user who has been successfully verified as the authenticated user, and managing the user type of the user who has not been successfully verified as a normal user; A process for enabling a user to select a service provider from which the user wishes to receive a service from among a plurality of service providers that provide services using biometric authentication; a process of notifying a service provider selected by the user of original biometric information that is an original of authentication information used for biometric authentication and the user type; A program for executing the above.

Images