Authentication payment system, authentication payment method, and authentication payment program

Abstract

To enhance user convenience while securing the security of payment.SOLUTION: A processor of an authenticated payment system can execute: face collation (ST104) for selecting candidates of a person to be authenticated based on a similarity between face information on the person to be authenticated and the face information for each registrant; PIN collation (ST107) based on a PIN input by the person to be authenticated; payment amount determination (ST105) of determining whether or not the PIN collation can be omitted depending on whether or not the present payment amount is greater than or equal to a predetermined reference value; and multi-matching determination (ST106) for determining whether or not a plurality of candidates for the person to be authenticated are selected in the face collation. When executing the face collation, executing the payment amount determination, and then, determining that a second collation process can be omitted and also when executing the multi-matching determination, so that one candidate for the person to be authenticated is selected in the face collation and the person to be authenticated is identified, the processor omits the PIN collation.SELECTED DRAWING: Figure 3

Description

Technical Field

[0001] The present invention relates to an authentication and settlement system in which one or more processors execute a process of performing at least collation based on biometric information on an authenticated person, identifying the authenticated person based on the collation result, and instructing execution of settlement processing, an authentication and settlement terminal in which a processor executes processing necessary for authentication and settlement according to a user's operation, and an authentication and settlement method.

Background Art

[0002] When performing cashless payment for the price of goods purchased at a store, etc., an authentication and settlement system in which various identity authentications are performed to identify the user has become widespread. In particular, in recent years, since the accuracy of face collation has improved, face authentication is being adopted in order to improve the convenience of users. In addition, since the risk of settlement due to mis-collation is high in authentication by a single element, an authentication and settlement system that employs multi-factor authentication has become widespread.

[0003] As an example of such an authentication and settlement system that employs multi-factor authentication, conventionally, an IC card in which a password and biometric information (fingerprint) are stored has been used. When the settlement amount is less than a set value, collation is performed between the password input by the authenticated person and the password stored in the IC card. When the settlement amount is higher than the set value, a technique is known in which collation is performed between the biometric information acquired from the authenticated person and the biometric information stored in the IC card (see Patent Document 1).

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] As in the prior art, the verification that compares the biometric information obtained from the person to be authenticated with the biometric information stored in the IC card is one-to-one authentication. On the other hand, the biometric information for each registrant is registered in a database managed by a cloud server, and the verification that compares the biometric information obtained from the person to be authenticated with the biometric information for each registrant is one-to-N authentication.

[0006] Here, when one-to-N authentication is performed in biometric authentication such as face authentication, the biometric information obtained from the person to be authenticated is compared with the biometric information for each registrant, and a person whose similarity (matching score) between the two is equal to or higher than a threshold value is selected as a candidate. For this reason, a multi-match may occur in which a plurality of candidates for the person to be authenticated are selected. When a multi-match occurs, the person to be authenticated cannot be identified as a single individual, so settlement cannot be made.

[0007] In addition, in cashless settlement by authentication, there is a risk of settlement due to illegal acts such as impersonating others or using a forged IC card. In particular, in authentication by a single element, for example, authentication only by face matching, there are cases where illegal acts cannot be appropriately eliminated, so the risk of settlement increases.

[0008] On the other hand, for example, if multi-factor authentication is performed by performing verification using a PIN (Personal Identification Number) in addition to face matching, even if a multi-match occurs in face matching, the person to be authenticated can be identified as a single individual, and the possibility of eliminating illegal acts is increased, and the risk of settlement is reduced.

[0009] However, when performing PIN verification in addition to face verification, there is a problem that the user feels very troublesome because the user is further required to input a PIN after the face verification is completed. Therefore, in order to improve the convenience of the user, it is desirable that PIN input be omitted as much as possible. However, in the prior art, there is no consideration from such a viewpoint, and it is not possible to improve the convenience of the user while ensuring the security of settlement.

[0010] Therefore, the main object of the present invention is to provide an authentication settlement system, an authentication settlement terminal, and an authentication settlement method that can enhance the convenience of users while ensuring the security of settlements.

Means for Solving the Problems

[0011] The authentication settlement system of the present invention is an authentication settlement system in which one or more processors execute a process of performing at least collation based on biometric information on an authenticated person, identifying the authenticated person based on the collation result, and instructing the execution of settlement processing. The processor selects candidates for the authenticated person based on the similarity between the biometric information of the authenticated person and the biometric information for each registrant in a first collation process, a second collation process based on information different from the first collation process, a first determination process for determining whether or not to omit the second collation process based on a predetermined determination criterion, and a second determination process for determining whether or not a plurality of candidates for the authenticated person are selected in the first collation process. The processor can execute the first collation process, execute the first determination process, determine that the second collation process can be omitted, execute the second determination process, and omit the second collation process when one candidate for the authenticated person is selected and the authenticated person is identified in the first collation process.

[0012] Further, the authentication settlement terminal of the present invention is an authentication settlement terminal in which a processor executes processes necessary for authentication and settlement in response to a user's operation. The authentication settlement terminal is connected to an authentication server capable of executing a first collation process for selecting candidates for the authenticated person based on the similarity between the biometric information of the authenticated person and the biometric information for each registrant, and a second collation process based on information different from the first collation process. The processor executes a first determination process for determining whether or not to omit the second collation process based on a predetermined determination criterion, and a second determination process for determining whether or not a plurality of candidates for the authenticated person are selected in the first collation process. When it is determined that the second collation process can be omitted and one candidate for the authenticated person is selected and the authenticated person is identified in the first collation process, the second collation process is omitted.

[0013] Further, the authentication and settlement method of the present invention is an authentication and settlement method in which one or more processors execute a process of performing at least collation based on biometric information on an authenticated person, identifying the authenticated person based on the collation result, and instructing the execution of settlement processing. The authentication and settlement method includes a first collation process of selecting candidates for the authenticated person based on the similarity between the biometric information of the authenticated person and the biometric information of each registrant, a second collation process based on information different from the first collation process, a first determination process of determining whether the second collation process can be omitted based on a predetermined determination criterion, and a second determination process of determining whether a plurality of candidates for the authenticated person are selected in the first collation process. The method can execute the first collation process, execute the first determination process, determine that the second collation process can be omitted, and execute the second determination process. When one candidate for the authenticated person is selected and the authenticated person is identified in the first collation process, the second collation process is omitted.

Advantages of the Invention

[0014] According to the present invention, when it is determined that the second collation process can be omitted based on a predetermined determination criterion, the second collation process is omitted except in the case where a plurality of candidates for the authenticated person are selected (multi-match) in the first collation process. Therefore, it is possible to avoid bothering the user. Thereby, while ensuring the security of settlement, the convenience of the user can be improved.

Brief Description of the Drawings

[0015]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Figure 13

Figure 14

Figure 15

Modes for Carrying Out the Invention

[0016] A first invention made to solve the above problems is an authentication and settlement system in which one or more processors execute a process of performing at least collation based on biometric information on an authenticated person, specifying the authenticated person based on the collation result, and instructing the execution of settlement processing. The processor is capable of executing a first collation process of selecting candidates for the authenticated person based on the similarity between the biometric information of the authenticated person and the biometric information for each registrant, a second collation process based on information different from the first collation process, a first determination process of determining whether or not the second collation process can be omitted based on a predetermined determination criterion, and a second determination process of determining whether or not a plurality of candidates for the authenticated person are selected in the first collation process. The first collation process is executed, the first determination process is executed, it is determined that the second collation process can be omitted, and the second determination process is executed. When one candidate for the authenticated person is selected in the first collation process and the authenticated person is specified, the second collation process is omitted.

[0017] According to this, when it is determined that the second collation process can be omitted based on a predetermined determination criterion, the second collation process is omitted except in the case where a plurality of candidates for the authenticated person are selected (multi-match) in the first collation process. Therefore, it is possible to avoid making the user feel bothered. Thereby, while ensuring the security of settlement, the convenience of the user can be enhanced.

[0018] Further, in a second invention, the processor is configured to perform a settlement amount determination for determining whether or not the second collation process can be omitted according to whether or not the current settlement amount is equal to or more than a predetermined reference value as the first determination process.

[0019] According to this, since the omission of PIN collation is appropriately performed according to the level of settlement risk, it is possible to ensure the security of settlement while enhancing the convenience of the user.

[0020] Further, in the third invention, the processor sets a range of normal payment behavior for each user in advance based on historical information regarding the payment behavior of the user in each payment, performs a payment behavior determination to determine whether the current payment behavior is included within the range of normal payment behavior, and determines whether the second collation process can be omitted according to the result.

[0021] According to this, when the user's current payment behavior is not included within the range of normal payment behavior, that is, when it deviates from the tendency of past payment behaviors, there is a high possibility that the current payment is an illegal payment. Therefore, in such a case, by performing the second collation process, the risk of payment can be reduced, and in particular, illegal payments such as identity theft can be eliminated.

[0022] Further, in the fourth invention, the processor performs a payment amount determination as the first determination process to determine whether the second collation process can be omitted according to whether the current payment amount is equal to or greater than a predetermined reference value, and performs the payment behavior determination as the third determination process.

[0023] According to this, since the omission of PIN collation is appropriately performed according to the level of payment risk, it is possible to enhance the convenience of the user while ensuring the security of the payment.

[0024] Further, in the fifth invention, the processor performs the payment behavior determination as the first determination process.

[0025] According to this, it is possible to simplify the determination procedure regarding whether the omission of PIN collation can be performed according to the level of payment risk.

[0026] Further, in the sixth invention, the processor performs the payment behavior determination based on at least any one of the payment location, payment amount, and payment target as the payment behavior.

[0027] According to this, it is possible to appropriately determine the settlement behavior. Note that the settlement target is a product or service that is provided to the user and for which cashless settlement is required for payment of the price or fee.

[0028] Further, in the seventh invention, when a plurality of candidates for the person to be authenticated are selected in the first verification process, the processor acquires stay person information regarding a person who is highly likely to be staying in the facility at the time of settlement from a system that manages the persons using the facility, and identifies the person to be authenticated based on the stay person information.

[0029] According to this, even in the case of a state (multi-match) where a plurality of candidates for the person to be authenticated are selected in the first verification process, the person to be authenticated can be identified by using the information managed by the external system, so that the opportunity to omit the second verification process can be increased.

[0030] Further, in the eighth invention, as the first determination process, the processor determines whether the current settlement behavior is a settlement behavior with low risk based on the current settlement amount and the similarity obtained in the first verification process.

[0031] According to this, since the omission of PIN verification is appropriately performed according to the level of risk of settlement, it is possible to improve the convenience of the user while ensuring the security of settlement.

[0032] Further, in the ninth invention, when a plurality of candidates for the person to be authenticated are selected in the first verification process, the processor provides candidate person information regarding the selected plurality of candidates to a confirmation terminal operable by the staff of the facility, and in the confirmation terminal, acquires from the confirmation terminal the personal confirmation information regarding the same person as the person to be authenticated that the staff confirms among the plurality of candidates included in the candidate person information obtained according to the operation of the staff, and identifies the person to be authenticated based on the personal confirmation information.

[0033] According to this, since the worker can visually compare the candidate person information with the person to be authenticated or verbally question the person to be authenticated, the worker can confirm the identity of the person to be authenticated, and thus can narrow down a plurality of candidate persons selected by face matching to one person.

[0034] Further, a tenth invention is an authentication and settlement terminal in which a processor executes processes necessary for authentication and settlement according to a user's operation. The authentication and settlement system is connected to an authentication server that executes a process of performing at least collation based on biometric information on the person to be authenticated, identifying the person to be authenticated based on the collation result, and instructing the execution of settlement processing. The authentication server can execute a first collation process for selecting candidates for the person to be authenticated based on the similarity between the biometric information of the person to be authenticated and the biometric information for each registered person, and a second collation process based on information different from the first collation process. The processor executes a first determination process for determining whether or not the second collation process can be omitted based on a predetermined determination criterion, and a second determination process for determining whether or not a plurality of candidates for the person to be authenticated are selected in the first collation process. When it is determined that the second collation process can be omitted and when one candidate for the person to be authenticated is selected and the person to be authenticated is identified in the first collation process, the second collation process is omitted.

[0035] According to this, similar to the first invention, it is possible to improve the convenience of the user while ensuring the security of settlement.

[0036] Further, the eleventh invention is an authentication and settlement method in which one or more processors execute a process of performing at least collation based on biometric information on an authenticated person, specifying the authenticated person based on the collation result, and instructing the execution of settlement processing. The method includes a first collation process of selecting candidates for the authenticated person based on the similarity between the biometric information of the authenticated person and the biometric information for each registrant, a second collation process based on information different from the first collation process, a first determination process of determining whether or not the second collation process can be omitted based on a predetermined determination criterion, and a second determination process of determining whether or not a plurality of candidates for the authenticated person are selected in the first collation process. The method is capable of executing the first collation process, executing the first determination process, determining that the second collation process can be omitted, and executing the second determination process. When one candidate for the authenticated person is selected in the first collation process and the authenticated person is specified, the second collation process is omitted.

[0037] According to this, similar to the first invention, it is possible to enhance the convenience of the user while ensuring the security of the settlement.

[0038] Hereinafter, embodiments of the present invention will be described with reference to the drawings.

[0039] (First Embodiment) FIG. 1 is an overall configuration diagram of an authentication and settlement system 1 according to the first embodiment.

[0040] The authentication and settlement system 1 performs settlement such as payment of the price when purchasing a product at a store by cashless settlement by specifying a user (customer) by personal authentication. The authentication and settlement system 1 includes a plurality of authentication and settlement terminals 2, an authentication server 3, and a settlement server 4. The authentication and settlement terminals 2, the authentication server 3, and the settlement server 4 are connected to a network such as the Internet.

[0041] The authentication and settlement terminal 2 is installed at the place (such as the cashier counter) in the store where settlement is carried out. The authentication and settlement terminal 2 displays screens related to authentication and settlement. When making a settlement, the user can perform the operations necessary for authentication and settlement on the screen displayed on the authentication and settlement terminal 2.

[0042] The authentication server 3 performs face verification (first verification) based on an image of the user's face and PIN verification (second verification) based on the PIN (Personal Identification Number) entered by the user for the user (the person to be authenticated) who performs authentication and settlement operations on the authentication and settlement terminal 2. When the face verification and PIN verification are successful, the authentication server 3 notifies the settlement server 4 that the authentication of the user (the person to be authenticated) has been successful, and instructs the settlement server 4 to execute the settlement process for the identified user. Also, when a predetermined condition is satisfied, the PIN verification is omitted. In this case, the authentication server 3 instructs the settlement server 4 to execute the settlement process only when the face verification is successful.

[0043] When the authentication is successful in the authentication server 3, the settlement server 4 executes the settlement process for the user (the person to be authenticated) notified from the authentication server 3 based on information such as the credit card of the user registered in advance.

[0044] Next, the schematic configurations of the authentication and settlement terminal 2 and the authentication server 3 according to the first embodiment will be described. FIG. 2 is a block diagram showing the schematic configurations of the authentication and settlement terminal 2 and the authentication server 3.

[0045] The authentication and settlement terminal 2 includes a camera 21, a display 22, a communication unit 23, a storage unit 24, and a processor 25.

[0046] The camera 21 captures an image of the user's (the person to be authenticated) face.

[0047] The display 22 displays screens related to authentication and settlement.

[0048] The communication unit 23 communicates with the authentication server 3.

[0049] The storage unit 24 stores programs and the like to be executed by the processor 25.

[0050] The processor 25 performs various processes by executing the programs stored in the storage unit 24. In the present embodiment, the processor 25 performs a settlement amount determination process, a multi-match determination process, and the like.

[0051] In the settlement amount determination process (first determination process), the processor 25 determines whether or not it is possible to omit the PIN verification process (second verification process) according to whether or not the settlement amount is equal to or greater than a predetermined reference value.

[0052] In the multi-match determination process (second determination process), the processor 25 determines whether or not it is in a state (multi-match) in which a plurality of persons are selected as candidates for the person to be authenticated in the face verification process performed by the authentication server 3.

[0053] The authentication server 3 includes a communication unit 31, a storage unit 32, and a processor 33.

[0054] The communication unit 31 communicates with the authentication and settlement terminal 2 and the settlement server 4.

[0055] The storage unit 32 stores programs and the like to be executed by the processor 33. The storage unit 32 also stores the registration information of the face information database. In the face information database, face information (face feature amounts extracted from face images) for each person (registrant) for whom a registration process has been performed in advance is registered.

[0056] The processor 33 performs various processes by executing the programs stored in the storage unit 32. In the present embodiment, the processor 33 performs a face verification process, a PIN verification process, and the like.

[0057] In the face verification process, the processor 33 compares the face information (face feature amount) extracted from the face image of the person to be authenticated with the face information (face feature amount) of each registered person registered in the face information database (1-to-N verification), and obtains a verification score representing the similarity between the two. The verification score is compared with a predetermined threshold value, and a person whose verification score is equal to or higher than the threshold value is selected as a candidate.

[0058] In the PIN verification process, the processor 33 compares the PIN input by the person to be authenticated in the authentication payment terminal 2 with the PIN of the candidate person selected in the face verification process, and determines whether the two match.

[0059] Note that in this embodiment, the face information database is managed by the authentication server 3 (cloud server), but the authentication payment terminal 2 may manage the face information database. In this case, for example, face information regarding users of the store where the authentication payment terminal 2 is installed is registered in the face information database. Also, an edge server may be installed at the facility level, and the edge server may manage the face information database. In this case, for example, face information regarding users of the facility is registered in the face information database.

[0060] Here, in a large-scale commercial facility such as a shopping mall, a plurality of stores are included in one facility, and the authentication payment terminal 2 is installed in each of the plurality of stores. Also, there may be a case where one facility is composed of one store. Also, in the case of a large store, the authentication payment terminal 2 may be installed for each of a plurality of sales floors, that is, a plurality of authentication payment terminals 2 may be installed in one store.

[0061] Also, when the authentication payment terminal 2 manages the face information database, the face verification process is performed not by the authentication server 3 but by the authentication payment terminal 2. Also, the PIN verification process may also be performed by the authentication payment terminal 2. Conversely, processes such as the settlement amount determination process and the multi-match determination process may be performed not by the authentication payment terminal 2 but by the authentication server 3.

[0062] Next, the processing performed in the authentication settlement system 1 according to the first embodiment will be described. FIG. 3 is a flowchart showing the procedure of the processing performed in the authentication settlement system 1. FIG. 4 is an explanatory diagram showing the screen displayed on the authentication settlement terminal 2.

[0063] At the authentication settlement terminal 2, first, the settlement amount is input by the operation of the store clerk (ST101). At this time, on the authentication settlement terminal 2, the settlement amount input screen shown in FIG. 4(A) is displayed. The store clerk can input the settlement amount by operating the numeric keypad on the settlement amount input screen. When the store clerk confirms the input settlement amount, the store clerk operates the decision button.

[0064] Next, at the authentication settlement terminal 2, the settlement amount is confirmed by the user (ST102). At this time, on the authentication settlement terminal 2, the settlement amount confirmation screen shown in FIG. 4(B) is displayed. The user can confirm the settlement amount (payment amount) on the settlement amount confirmation screen. When the user confirms the settlement amount, the user operates the decision button. If there is an error in the settlement amount, the cancel button is operated and the process returns to the settlement amount input screen shown in FIG. 4(A).

[0065] Next, at the authentication settlement terminal 2, the face of the user is photographed by the camera 21, and at the authentication server 3, face verification is performed based on the face image of the user (ST103). At this time, on the authentication settlement terminal 2, the face verification in progress screen shown in FIG. 4(C) is displayed. The face verification in progress screen displays the face of the user photographed by the camera 21. Also, the name of the person identified by the face verification is displayed on the face verification in progress screen.

[0066] Next, at the authentication settlement terminal 2, the processor 25 determines whether the face verification was successful based on the verification result transmitted from the authentication server 3 (ST104). Here, if the face verification fails (No in ST104), next, at the authentication settlement terminal 2, a result indicating that the face verification has failed is displayed (ST109). Specifically, the verification error screen shown in FIG. 4(D) is displayed.

[0067] On the one hand, if face verification is successful (Yes in ST104), next, the processor 25 determines whether the settlement amount is equal to or greater than a predetermined reference value (ST105).

[0068] Here, if the settlement amount is equal to or greater than the reference value (Yes in ST105), next, at the authentication settlement terminal 2, the user inputs a PIN, and at the authentication server 3, PIN verification is performed based on the input PIN (ST107). At this time, at the authentication settlement terminal 2, the PIN input screen shown in FIG. 4(E) is displayed. The user can input the PIN by operating the numeric keypad on the PIN input screen. When the user finishes inputting the PIN, the user operates the decision button.

[0069] Next, at the authentication server 3, when the PIN verification is successful, it notifies the settlement server 4 that the authentication of the user has been successful, and instructs the settlement server 4 to execute the settlement process for the identified user (the authenticated person). The settlement server 4 executes the settlement process for the identified user (ST108). At this time, at the authentication settlement terminal 2, the settlement processing screen shown in FIG. 4(F) is displayed.

[0070] Next, when the settlement is successfully completed, the settlement server 4 notifies the authentication server 3 that the settlement has been completed, and the authentication server 3 notifies the authentication settlement terminal 2 that the settlement has been completed. Next, at the authentication settlement terminal 2, the result of the completion of the settlement is displayed (ST109). At this time, at the authentication settlement terminal 2, the settlement completion screen shown in FIG. 4(G) is displayed.

[0071] On the other hand, when the PIN verification fails at the authentication server 3, it notifies the authentication settlement terminal 2 that the authentication of the user has failed. Also, when the settlement cannot be successfully completed at the settlement server 4, it notifies the authentication server 3 that the settlement cannot be made, and the authentication server 3 notifies the authentication settlement terminal 2 that the settlement cannot be made. Next, at the authentication settlement terminal 2, the result that the settlement cannot be made is displayed (ST109). At this time, at the authentication settlement terminal 2, the settlement error screen shown in FIG. 4(H) is displayed.

[0072] Also, if the settlement amount is less than the reference value (No in ST105), next, in the authentication settlement terminal 2, the processor 25 determines whether the current face matching result is a multi-match (ST106). At this time, in the authentication settlement terminal 2, the determination of multi-match is performed based on the information of the face matching result acquired from the authentication server 3.

[0073] Here, if the current face matching result is a multi-match (Yes in ST105), it proceeds to PIN input and PIN verification (ST107). On the other hand, if the current face matching result is not a multi-match (No in ST106), PIN input and PIN verification (ST107) are omitted and the settlement process (ST108) is entered. At this time, the authentication settlement terminal 2 notifies the authentication server 3 that PIN verification is omitted, and the authentication server 3 notifies the settlement server 4 that the authentication of the user has been successful with only the success of face matching. Note that the number (master PIN code) for which PIN verification is successful for all users may be transmitted from the authentication settlement terminal 2 to the authentication server 3, and the PIN verification performed by the authentication server 3 may be substantially omitted.

[0074] As described above, in this embodiment, when it is determined that the settlement amount is small and PIN verification can be omitted, PIN verification is omitted except in the case where multiple candidates for the authenticated person are selected in face matching (multi-match), so that it is possible to avoid bothering the user. Thereby, while ensuring the security of settlement, the convenience of the user can be improved.

[0075] Note that in the authentication settlement terminal 2, either a first flow including the PIN verification omission process (ST105, ST106) or a second flow not including the PIN verification omission process is set according to the operation of the administrator for each store. At the time of settlement, either the first flow or the second flow is selected and executed based on the setting for each store. Also, for each authentication settlement terminal 2 in addition to the store, either the first flow or the second flow may be set.

[0076] In addition, the user terminal (such as a smartphone) possessed by the user may be used as the authentication payment terminal 2 by installing a payment application. In this case, on the user terminal acting as the authentication payment terminal 2, the user may perform an operation of registering a PIN in advance, so that the PIN is saved in the user terminal in advance, and the PIN input may be omitted. Also, the user may select to omit the PIN input in advance, in which case the setting information for each user regarding whether to omit the PIN input may be saved in the authentication server 3.

[0077] By the way, in face verification, a face image of the person to be authenticated taken from the front is used. In addition to this front face image, a face image of the person to be authenticated taken obliquely, for example, a left-facing face image, may also be used. Thereby, the accuracy of face verification can be improved and the risk of payment can be reduced. Also, the person to be authenticated may be made to perform a predetermined action (gesture), and verification may be performed based on the characteristics regarding the way the body of the person to be authenticated moves. Thereby, the accuracy of verification is improved, and in particular, the function of eliminating impersonation is improved, so that the risk of payment can be reduced.

[0078] In addition, in the present embodiment, face verification as the first verification and PIN verification as the second verification are performed. The first verification is performed using biometric information as personal identification information. The second verification is performed using personal identification information different from the first verification. The second verification may be performed using biometric information, or may be performed using personal identification information different from biometric information. That is, the first verification and the second verification may be so-called multimodal biometric authentication performed using different biometric information, such as face and fingerprint, or face and voiceprint. Also, personal identification information other than biometric information may be, in addition to the PIN, a phone number, a password, or the like. Also, when the user terminal possessed by the user is used as the authentication payment terminal 2, information indicating that the user has logged in to the system by inputting a user ID and a password, etc., may be used as personal identification information other than biometric information.

[0079] (Second Embodiment) Next, the second embodiment will be described. Note that points not particularly mentioned here are the same as those in the above embodiment. FIG. 5 is an overall configuration diagram of the authentication settlement system 1 according to the second embodiment.

[0080] If the user's current settlement behavior is not within the range of the user's normal settlement behavior, that is, if it deviates from the tendency of past settlement behavior, there is a high possibility that the current settlement is an illegal settlement. Therefore, in this embodiment, a settlement behavior determination (third determination process) is performed to determine whether the current settlement behavior is within the range of normal settlement behavior. And if the current settlement behavior is not within the range of normal settlement behavior, in order to reduce the risk of settlement, PIN verification is performed. On the other hand, if the current settlement behavior is within the range of normal settlement behavior, since the risk of settlement is low, PIN verification is omitted.

[0081] Particularly in this embodiment, the settlement behavior determination is performed based on the settlement location as the settlement behavior. That is, it is determined whether the current settlement location is within the range of normal settlement locations. Here, specifically, the settlement location is the store related to the current settlement, or the facility where the store is installed, or the area where the store is installed.

[0082] Specifically, if the settlement at the store used this time is the first time, it is determined that the current settlement location is not within the range of normal settlement locations. Also, if the settlement at the facility where the store used this time is installed is the first time, it is determined that the current settlement location is not within the range of normal settlement locations. Also, if the settlement in the area where the store used this time is installed is the first time, it is determined that the current settlement location is not within the range of normal settlement locations.

[0083] In addition, if the authentication payment terminal 2 is installed in a store or the like, the payment location (store, facility, area) can be specified from the installation location of the authentication payment terminal 2. On the other hand, a user terminal (smartphone) possessed by a user may be used as the authentication payment terminal 2 by installing a payment application. In this case, the payment location can be specified by acquiring its own location information using a positioning system such as GPS provided in the authentication payment terminal 2.

[0084] As shown in FIG. 5, in this embodiment, the authentication payment system 1 includes a management server 5. The management server 5 manages a history information database. In the history information database, information related to past payments, specifically, information related to the payment location (store, facility, area) is registered for each user as history information. The management server 5 acquires information related to the payment location in each payment from the authentication server 3 and registers the information in the history information database. In addition, the management server 5 performs a process (payment behavior analysis) of generating information related to the normal payment location (store, facility, area) for each registrant from the information related to the payment location in each payment.

[0085] The authentication server 3 acquires information related to the normal payment location (store, facility, area) of the candidate person selected by face verification from the management server 5 and provides it to the authentication payment terminal 2. The authentication payment terminal 2 determines whether the current payment location is included within the range of the normal payment location (payment behavior determination) based on the information related to the normal payment location of the candidate person.

[0086] In this embodiment, the history information is managed by the management server 5 (cloud server), but in the authentication payment terminal 2 installed in the store, the history information related to the store may be managed. In this case, the payment behavior determination with the store as the payment location can be performed only by the authentication payment terminal 2.

[0087] Next, the procedure of the process performed by the authentication payment system 1 according to the second embodiment will be described. FIG. 6 is a flowchart showing the procedure of the process performed by the authentication payment system 1.

[0088] In the authentication and settlement terminal 2, the processes of ST101 to ST109 are performed in the same manner as in the first embodiment (see FIG. 3). However, in this embodiment, the processes according to the determination result in the multi-match determination (ST106) are different.

[0089] That is, in the authentication and settlement terminal 2, when the processor 25 determines that the current face matching result is not a multi-match (No in ST106), next, the processor 25 determines whether the current settlement action is included within the range of normal settlement actions (ST121). Specifically, it is determined whether the current settlement location is included within the range of normal settlement locations.

[0090] Here, when the current settlement action is not included within the range of normal settlement actions (No in ST121), it proceeds to PIN input and PIN verification (ST107). On the other hand, when the current settlement action is included within the range of normal settlement actions (Yes in ST121), PIN input and PIN verification (ST107) are omitted and it proceeds to the settlement process (ST108).

[0091] Thus, in this embodiment, when the user's current settlement action is not included within the range of normal settlement actions, that is, when it deviates from the tendency of past settlement actions, there is a high possibility that the current settlement is an illegal settlement. Therefore, in such a case, by performing PIN verification, the risk of settlement can be reduced, and in particular, illegal settlements such as identity theft can be eliminated.

[0092] (First Variation of the Second Embodiment) Next, the first variation of the second embodiment will be described. Note that points not particularly mentioned here are the same as in the above-described embodiment. Note that the configuration of the authentication and settlement system 1 according to this variation is the same as in the second embodiment (see FIG. 5). Also, the procedure of the process performed in the authentication and settlement system 1 according to this variation is the same as in the second embodiment (see FIG. 6).

[0093] In the second embodiment, a determination (settlement behavior determination) is made as to whether the current settlement behavior is included within the range of the candidate person's normal settlement behavior, and the settlement behavior determination is made particularly based on the settlement location. On the other hand, in this modification example, the settlement behavior determination is made based on the settlement amount (see ST121 in FIG. 6). That is, it is determined whether the current settlement amount is within the range of the candidate person's normal settlement amount, and if the current settlement amount is within the range of the candidate person's normal settlement amount, the PIN verification is omitted.

[0094] The management server 5 of the authentication settlement system 1 acquires information regarding the settlement amount in each settlement from the authentication server 3 and registers the information in the history information database. Further, the management server 5 performs a process (settlement behavior analysis) of generating information regarding the range of the normal settlement amount for each registrant from the information regarding the settlement amount in each settlement. At this time, for example, the average value of the past settlement amounts may be calculated, and a range with a predetermined width centered on the average value may be set as the range of the normal settlement amount.

[0095] (Second Modification Example of the Second Embodiment) Next, a second modification example of the second embodiment will be described. Note that points not particularly mentioned here are the same as those in the above-described embodiment. FIG. 7 is an overall configuration diagram of the authentication settlement system 1 according to this modification example. Note that the procedure of the process performed by the authentication settlement system 1 according to this modification example is the same as that of the second embodiment (see FIG. 6).

[0096] In the second embodiment, a determination (settlement behavior determination) is made as to whether the current settlement behavior is included within the range of the user's normal settlement behavior, and the settlement behavior determination is made particularly based on the settlement location. Also, in the first modification example, the settlement behavior determination is made based on the settlement amount. On the other hand, in this modification example, the settlement behavior determination is made based on the purchased goods (see ST121 in FIG. 6). That is, it is determined whether the current purchased goods are within the range of the user's normal purchased goods, and if the current purchased goods are within the range of the user's normal purchased goods, the PIN input is omitted. Note that the range of the purchased goods is, for example, the product category to which the purchased goods belong.

[0097] Here, the authentication server 3 can obtain information on the payment location and payment amount based on the information of the authentication payment terminal 2 itself where the payment operation is performed and the information input by the authentication payment terminal 2. However, it cannot obtain information on the purchased goods, specifically, the breakdown of the purchased goods (type, unit price, quantity). Therefore, in this embodiment, the authentication payment system 1 cooperates with the POS system 6 (Point of Sale system: sales point information management system) to obtain information on the purchased goods.

[0098] The POS system 6 includes a POS terminal 61 and a POS server 62. The POS terminal 61 is for the store clerk to perform an operation of inputting information on the purchased goods. The POS server 62 manages the sales information of the goods in the store according to the input operation at the POS terminal 61.

[0099] The management server 5 of the authentication payment system 1 obtains information on the purchased goods in each payment from the POS server 62 and registers the information on the purchased goods in the history information database. In addition, the management server 5 performs a process (payment behavior analysis) of generating information on the range of normal purchased goods for each registrant from the information on the purchased goods in each payment.

[0100] The authentication server 3 obtains information on the range of normal purchased goods regarding the candidate person selected by face verification from the management server 5 and provides it to the authentication payment terminal 2. The authentication payment terminal 2 makes a determination (payment behavior determination) as to whether the purchased goods this time are within the range of normal purchased goods based on the information on the range of normal purchased goods regarding the candidate person.

[0101] Note that in this modification example, an example of payment for the purchase of goods by the user in the store has been described. However, the same process is possible for payments related to the fees for the user to use various services.

[0102] Also, in this modified example, the authentication settlement system 1 can obtain information on purchased goods, that is, the breakdown of purchased goods (type, unit price, quantity), by cooperating with the POS system 6. In this case, since the settlement amount (total amount of purchased goods) can be calculated in the authentication settlement system 1, the operation for the store clerk to input the settlement amount on the settlement amount input screen (see Fig. 4(A)) becomes unnecessary.

[0103] (Third Embodiment) Next, the third embodiment will be described. Note that points not particularly mentioned here are the same as those in the above embodiments. Fig. 8 is a flowchart showing the procedure of the process performed by the authentication settlement system 1 according to the third embodiment.

[0104] In the first embodiment, a determination as to whether the settlement amount is equal to or greater than a reference value (settlement amount determination) is made. When the settlement amount is equal to or greater than the reference value, that is, when the risk of settlement is high, PIN verification is performed. Also, in the second embodiment, while the settlement amount determination is made, when the current face verification result is not a multi-match, a determination as to whether the current settlement action is included within the range of normal settlement actions (settlement action determination) is made. When the current settlement action is not included within the range of normal settlement actions, that is, when there is a possibility of an illegal settlement, PIN verification is performed.

[0105] On the other hand, in this embodiment, when the settlement amount is equal to or greater than the reference value or when the settlement action is not included within the range of normal settlement actions, it is similarly regarded as a case where the risk of settlement is high. Therefore, instead of the settlement amount determination in the first embodiment, a settlement action determination similar to that in the second embodiment is made.

[0106] As shown in Fig. 8, in the authentication settlement terminal 2, the processes of ST101 to ST104 and ST106 to ST109 are performed in the same manner as in the first embodiment (see Fig. 3). However, in this embodiment, instead of the settlement amount determination (ST105) in the first embodiment, a settlement action determination (ST131) is performed.

[0107] That is, in the authentication payment terminal 2, when face verification is successful (Yes in ST104), next, the processor 25 determines whether the current payment action is included within the scope of normal payment actions (ST131). Here, if the current payment action is not included within the scope of normal payment actions (No in ST131), it proceeds to PIN input and PIN verification (ST107).

[0108] On the other hand, if the current payment action is included within the scope of normal payment actions (Yes in ST131), next, the processor 25 determines whether the current face verification result is a multi-match (ST106).

[0109] Here, if the current face verification result is a multi-match (Yes in ST106), it proceeds to PIN input and PIN verification (ST107). On the other hand, if the current face verification result is not a multi-match (No in ST106), PIN input and PIN verification (ST107) are omitted and it proceeds to the payment process (ST108).

[0110] (Fourth Embodiment) Next, the fourth embodiment will be described. Note that points not particularly mentioned here are the same as those in the above embodiments. FIG. 9 is an overall configuration diagram of the authentication payment system 1 according to the fourth embodiment.

[0111] For example, in each store (sales floor) within a facility such as a shopping mall, the authentication payment system 1 is used for paying the price of purchased goods. In this case, the person who makes a payment using the authentication payment terminal 2 is limited to a person who enters from the entrance of the facility and stays inside the facility at the time of payment. Therefore, in this embodiment, when a multi-match occurs in the current face verification result, the authentication payment system 1 cooperates with the facility entrance / exit management system 7 to identify the person (the person to be authenticated) who makes the payment.

[0112] That is, the authentication and settlement system 1 acquires the staying person information regarding the person staying in the facility from the entrance / exit management system 7, and based on the staying person information, narrows down a plurality of candidate persons selected by face matching. Here, if the candidate persons can be narrowed down to one person, PIN matching is omitted.

[0113] The entrance / exit management system 7 includes an entrance camera 71 and a management server 72. The entrance camera 71 photographs the persons entering and exiting from the entrance of the facility. The management server 72 manages the persons (staying persons) currently staying in the facility based on the information of the persons detected from the photographed images of the entrance camera 71. Specifically, among the persons who have entered from the entrance of the facility and have not yet exited from the entrance, the persons are extracted as staying persons.

[0114] The authentication server 3 acquires the staying person information regarding the person staying in the facility from the management server 72 of the entrance / exit management system 7, and provides the staying person information to the authentication and settlement terminal 2. When a multi-match occurs in the current face matching result, the authentication and settlement terminal 2 narrows down the candidate persons to one person based on the staying person information. Specifically, person matching is performed between the persons staying in the facility and the plurality of candidate persons selected by face matching. Here, if the person matching is successful, that is, if any of the plurality of candidate persons selected by face matching matches the person staying in the facility, it is determined that the person is the person who will perform the settlement (the authenticated person).

[0115] In addition, in the person matching, the person information regarding the person staying in the facility acquired in the entrance / exit management system 7 is compared with the person information regarding the candidate persons selected by face matching acquired in the authentication and settlement system 1. Here, the person information includes name, address, attributes (such as gender, age), etc.

[0116] Next, the procedure of the process performed by the authentication and settlement system 1 according to the fourth embodiment will be described. FIG. 10 is a flowchart showing the procedure of the process performed by the authentication and settlement system 1.

[0117] In the authentication and settlement terminal 2, the processes of ST101 to ST109 are performed in the same manner as in the first embodiment (see FIG. 3). However, in this embodiment, the processes according to the determination result in the multi-match determination (ST106) are different.

[0118] That is, in the authentication and settlement terminal 2, when the processor 25 determines that the current face matching result is a multi-match (Yes in ST105), next, the processor 25 determines whether it is possible to narrow down the candidate persons to one based on the staying person information acquired from the entrance / exit management system 7 (ST141). Here, if it is not possible to narrow down the candidate persons to one (No in ST141), the process proceeds to PIN input and PIN verification (ST107). On the other hand, if it is possible to narrow down the candidate persons to one (Yes in ST141), the PIN input and PIN verification (ST107) are omitted, and the process proceeds to the settlement process (ST108).

[0119] As described above, in this embodiment, even when there are multiple candidates for the person to be authenticated in the face matching (multi-match), by using the database managed by the external system, the person to be authenticated can be identified, so the opportunity to omit the PIN input and PIN verification can be increased.

[0120] (Fifth Embodiment) Next, the fifth embodiment will be described. Note that the points not particularly mentioned here are the same as those in the above embodiments. FIG. 11 is an overall configuration diagram of the authentication and settlement system 1 according to the fifth embodiment. Note that the procedure of the process performed in the authentication and settlement system 1 according to the fifth embodiment is the same as that in the fourth embodiment (see FIG. 10).

[0121] There are facilities that require reservations to use, such as facilities where various events are held (concert halls, event halls, movie theaters, etc.). In such facilities, the person who makes a payment using the authentication payment terminal 2 is limited to the person who is staying in the facility at the time of payment, that is, the person who has made a reservation to use the facility at the time of payment. Therefore, in this embodiment, when a multi-match occurs in the current face matching result, the person who makes the payment is identified in cooperation with the reservation management system 8 of the facility.

[0122] That is, the authentication payment system 1 obtains reservation person information (staying person information) about the person who has made a reservation to use the facility at the time of payment, that is, the person who is staying in the facility at the time of payment, from the reservation management system 8, and based on the reservation person information, narrows down the multiple candidate persons selected by face matching. Here, if the candidate person can be narrowed down to one person, PIN matching is omitted.

[0123] The reservation management system 8 includes a reservation terminal 81 and a management server 82. The reservation terminal 81 is for a person who wishes to make a reservation to perform a reservation operation. The management server 82 accepts the reservation of the person who wishes to make a reservation in response to the reservation operation on the reservation terminal 81 and manages the reservation status for each person.

[0124] The authentication server 3 obtains reservation person information (staying person information) about the person who has made a reservation to use the facility at the time of payment, that is, the person who is staying in the facility at the time of payment, from the management server 82 of the reservation management system 8, and provides the reservation person information to the authentication payment terminal 2.

[0125] When a multi-match occurs in the current face matching result, the authentication payment terminal 2 narrows down the candidate persons to one person based on the reservation person information. Specifically, person matching is performed between the person who has made a reservation to use the facility at the time of payment and the multiple candidate persons selected by face matching. Here, if the person matching is successful, that is, if any of the multiple candidate persons selected by face matching matches the person who has made a reservation to use the facility at the time of payment, it is determined that that person is the person who makes the payment (the authenticated person).

[0126] The procedure of the process performed by the authentication and settlement system 1 in this embodiment is the same as that of the fourth embodiment (see FIG. 10). However, in this embodiment, in the narrowing-down determination (ST141), it is determined whether or not the candidate person can be narrowed down to one person based on the reserved person information acquired from the reservation management system 8.

[0127] (Sixth Embodiment) Next, the sixth embodiment will be described. Note that points not particularly mentioned here are the same as those in the above-described embodiments. FIG. 12 is a flowchart showing the procedure of the process performed by the authentication and settlement system 1 according to the sixth embodiment.

[0128] PIN verification (second verification) is preferably performed when the risk of the settlement action is high, and PIN verification can be omitted when the risk of the settlement action is low. That is, the necessity of PIN verification can be determined according to the level of the risk of the settlement. Therefore, in this embodiment, a settlement risk determination is performed to determine whether the current settlement action is a low-risk settlement action. And when the current settlement action is a low-risk settlement action, PIN verification is omitted.

[0129] As shown in FIG. 12, in the authentication and settlement terminal 2, the processes of ST101 to ST109 are performed in the same manner as in the second embodiment (see FIG. 6). However, in this embodiment, the process according to the determination result in the multi-match determination (ST106) is different.

[0130] That is, in the authentication and settlement terminal 2, when the processor 25 determines that the current face verification result is not a multi-match (No in ST106), next, the processor 25 determines whether the current settlement action is a low-risk settlement action (ST151). Here, when the current settlement action is a high-risk settlement action (No in ST151), it proceeds to PIN input and PIN verification (ST107). On the other hand, when the current settlement action is a low-risk settlement action (Yes in ST151), PIN input and PIN verification (ST107) are omitted, and it proceeds to the settlement process (ST108).

[0131] Here, the authentication payment terminal 2 calculates a risk evaluation value representing the level of risk of the current payment action. If the risk evaluation value is less than a predetermined threshold, PIN verification is omitted. The risk evaluation value is calculated based on the payment amount and the score (similarity) of face verification. Specifically, for example, the payment amount is multiplied by the score (reciprocal) of face verification to calculate the risk evaluation value. The evaluation value represents the level of risk. When the payment amount is high or the score is low, the risk is high, so the risk evaluation value becomes large. Conversely, when the payment amount is low or the score is high, the risk is low, so the risk evaluation value becomes small.

[0132] Thus, when the payment amount is high and the score is low, the risk is high, so PIN verification is not omitted. On the other hand, when the payment amount is low and the score is high, the risk is low, so PIN verification is omitted. Also, when the payment amount is low, PIN verification may be omitted even if the score is not high. Also, when the score is high, PIN verification may be omitted even if the payment amount is not low.

[0133] As described above, in this embodiment, since PIN verification is appropriately omitted according to the level of payment risk, it is possible to improve the convenience of users while ensuring the security of payments.

[0134] (Modification of the Sixth Embodiment) Next, a modification of the sixth embodiment will be described. Note that points not specifically mentioned here are the same as those in the above embodiment. The procedure of the process performed in the authentication payment system 1 according to this modification is the same as that in the sixth embodiment (see FIG. 12).

[0135] In the sixth embodiment, a risk evaluation value representing the level of risk of the payment behavior is calculated based on the payment amount and the face matching score (similarity), and whether or not to omit the PIN matching is determined based on the risk evaluation value. On the other hand, in this modification, the risk of the payment behavior is set based on the content of the payment behavior, and whether or not to omit the PIN matching is determined according to whether or not the current payment behavior is a low-risk payment behavior.

[0136] Specifically, for example, when the current payment behavior is prepaid payment, that is, when paying the price within the range of the pre-deposited amount, it is a low-risk payment behavior, so the PIN input is omitted. On the other hand, when the payment amount exceeds the prepaid amount and auto-charge by credit payment is required, it is a high-risk payment behavior, so PIN input is required.

[0137] (Seventh Embodiment) Next, the seventh embodiment will be described. Note that the points not particularly mentioned here are the same as those in the above embodiments. FIG. 13 is a flowchart showing the procedure of the process performed in the authentication payment system 1 according to the seventh embodiment.

[0138] When a multi-match occurs in the face matching result, the person cannot be identified as one person and the payment cannot be made, so PIN matching (second matching) is required. On the other hand, when the threshold value of face matching is set high, it becomes difficult for a multi-match to occur in the face matching result, so PIN matching can be omitted. Therefore, in this embodiment, when a multi-match occurs in the face matching result, the threshold value of face matching is changed by a predetermined value and face matching is performed again. Also, when the multi-match is not resolved in the second face matching, the threshold value is changed step by step until the multi-match is resolved, and face matching is repeatedly performed.

[0139] As shown in FIG. 13, in the authentication payment terminal 2, the processes of ST101 to ST109 are performed in the same manner as in the first embodiment (see FIG. 3). However, in this embodiment, the processes according to the determination result in the multi-match determination (ST101) are different.

[0140] That is, in the authentication payment terminal 2, when the processor 25 determines that the current face matching result is a multi-match (Yes in ST106), next, the processor 25 changes the face matching threshold (ST161) and then returns to face matching (ST103). That is, in the authentication server 3, face matching is executed again based on the changed threshold.

[0141] As described above, in this embodiment, when a multi-match occurs in the face matching result, the threshold is gradually changed until the multi-match is resolved, and face matching is repeatedly executed. Therefore, the person to be authenticated is identified and PIN input is omitted, thus improving the convenience for the user.

[0142] (Eighth Embodiment) Next, the eighth embodiment will be described. Note that points not specifically mentioned here are the same as those in the above embodiments. FIG. 14 is an overall configuration diagram of the authentication payment system 1 according to the eighth embodiment. The procedure of the process performed in the authentication payment system 1 according to the eighth embodiment is the same as that in the fourth embodiment (see FIG. 10).

[0143] In the fourth and fifth embodiments, when a multi-match occurs in which a plurality of candidates for the person to be authenticated are selected, based on the staying person information regarding the person staying in the facility, the plurality of candidate persons selected by face matching are narrowed down to one person. On the other hand, in this embodiment, when a multi-match occurs, the store clerk (a facility employee) who faces the person to be authenticated visually confirms the identity of the person, and the plurality of candidate persons selected by face matching are narrowed down to one person. Note that, in the following, the case where the clerk and the person to be authenticated face each other will be described as an example, but the clerk does not necessarily have to face the person to be authenticated, and it is sufficient if the identity of the person to be authenticated can be confirmed by means such as visual confirmation.

[0144] In this embodiment, the authentication and settlement system 1 includes a confirmation terminal 9. The confirmation terminal 9 can be operated by a store clerk. When a multi-match occurs in face verification, the authentication server 3 transmits candidate person information regarding a plurality of registered persons selected as candidates for the person to be authenticated to the confirmation terminal 9. The confirmation terminal 9 displays the candidate person information received from the authentication server 3 on the screen. The store clerk visually compares the candidate person information displayed on the screen of the confirmation terminal 9 with the person to be authenticated who is present in person, or verbally asks the person to be authenticated questions, thereby verifying the identity of the person to be authenticated. The confirmation terminal 9 transmits the identity verification information obtained according to the operation of the store clerk to the authentication server 3.

[0145] Specifically, when a person identical to the person to be authenticated is found among the candidates for the person to be authenticated, identity verification information including the information of the registered person who matches the person to be authenticated is transmitted to the authentication server 3. On the other hand, when a person identical to the person to be authenticated is not found among the candidates for the person to be authenticated, identity verification information including information indicating that there is no registered person who matches the person to be authenticated is transmitted to the authentication server 3.

[0146] When the authentication server 3 receives the identity verification information from the confirmation terminal 9, it transmits the identity verification information to the authentication and settlement terminal 2.

[0147] In the narrowing-down determination (ST141 in FIG. 10), the authentication and settlement terminal 2 determines whether it is possible to narrow down the candidate persons to one based on the identity verification information obtained from the authentication server 3.

[0148] Next, the confirmation screen 101 displayed on the confirmation terminal 9 according to the eighth embodiment will be described. FIG. 15 is an explanatory diagram showing the confirmation screen 101.

[0149] On the confirmation screen 101, a face image 102 of the person to be authenticated captured by the camera 21 of the authentication payment terminal 2 is displayed. Also, on the confirmation screen 101, a face image 103 of a registered person selected as a candidate for the person to be authenticated is displayed. Note that the face image 103 of the registered person is included in the candidate person information provided by the authentication server. The store clerk visually compares the face of the person to be authenticated in person with the face image 102 of the person to be authenticated and the face image 103 of the registered person to determine whether they are the same person.

[0150] Also, on the confirmation screen 101, a send button 104 and a return button 105 are provided. When the store clerk operates the send button 104, the face image 103 of the next registered person is displayed. Also, when the store clerk operates the return button 105, the face image 103 of the previous registered person is displayed. Thereby, the store clerk can sequentially confirm the face images 103 of all the registered persons selected as candidates for the person to be authenticated.

[0151] Also, on the confirmation screen 101, a character 106 representing the name of the registered person selected as a candidate for the person to be authenticated is displayed. In addition, on the confirmation screen 101, a matching score, the serial number and the total number of the selected candidates for the person to be authenticated, etc. are displayed. Note that the name of the registered person and the matching score are included in the candidate person information provided by the authentication server.

[0152] The store clerk can verbally ask the person to be authenticated in person for their name and confirm whether the person to be authenticated is the registered person according to whether it matches the name of the registered person displayed on the confirmation screen 101. Note that identity verification may be performed based on information such as the address in addition to the name.

[0153] In addition, the confirmation screen 101 is provided with a decision button 107 and a cancel button 108. When the store clerk finds a person identical to the person to be authenticated among the candidates for the person to be authenticated, the store clerk operates the decision button 107. As a result, the identity confirmation information including the information of the registrant matching the person to be authenticated is transmitted to the authentication server 3. On the other hand, when the store clerk does not find a person identical to the person to be authenticated among the candidates for the person to be authenticated, the store clerk operates the cancel button 108. As a result, the identity confirmation information including the information that there is no registrant matching the person to be authenticated is transmitted to the authentication server 3.

[0154] As described above, in this embodiment, the store clerk who faces the person to be authenticated visually compares the candidate person information provided from the authentication server with the person to be authenticated himself / herself, or verbally asks the person to be authenticated questions, thereby performing the identity confirmation of the person to be authenticated. As a result, a plurality of candidate persons selected by face matching can be narrowed down to one person.

[0155] As described above, embodiments have been described as examples of the technology disclosed in the present application. However, the technology in the present disclosure is not limited to this, and can also be applied to embodiments in which changes, replacements, additions, omissions, etc. are made. It is also possible to combine the components described in the above embodiments to form a new embodiment.

Industrial Applicability

[0156] The authentication and settlement system, authentication and settlement terminal, and authentication and settlement method according to the present invention have the effect of being able to improve the convenience of users while ensuring the security of settlement, perform at least collation based on biometric information on the person to be authenticated, and identify the person to be authenticated based on the collation result and instruct the execution of settlement processing. It is useful as an authentication and settlement system in which one or more processors execute the process, an authentication and settlement terminal in which the processor executes the processes necessary for authentication and settlement according to the operation of the user, and an authentication and settlement method.

Explanation of Reference Numerals

[0157] 1: Authentication and settlement system 2: Authentication and settlement terminal 3: Authentication Server 4: Payment Server 5: Management Server 6: POS System 7: Entrance / Exit Management System 8: Reservation Management System 9: Confirmation Terminal 21: Camera 22: Display 23: Communication Unit 24: Memory Unit 25: Processor 31: Communication Unit 32: Memory Unit 33: Processor 61: POS Terminal 62: POS Server 71: Entrance Camera 72: Management Server 81: Reservation Terminal 82: Management Server

Claims

1. An authentication and settlement system in which one or more processors execute a process of performing at least collation based on biometric information on an authenticator, identifying the authenticator based on the result of the collation, and instructing the execution of settlement processing, wherein the processor is capable of: performing a first collation process of selecting candidates for the authenticator based on the similarity between the biometric information of the authenticator and the biometric information of each registrant; performing a second collation process based on the input personal identification number; performing a first determination process of determining whether or not the second collation process can be omitted based on a predetermined determination criterion; performing a second determination process of determining whether or not a plurality of candidates for the authenticator are selected in the first collation process; when the first collation process is executed, the first determination process is executed to determine that the second collation process can be omitted, and the second determination process is executed, and when a plurality of candidates for the authenticator are selected in the first collation process, displaying candidate person information regarding the selected plurality of candidates on a confirmation terminal operable by a facility staff member; An authentication and settlement system, characterized in that one candidate determined according to the operation of the staff member from among the plurality of candidates in the candidate person information is identified as the authenticator on the confirmation terminal.

2. The candidate person information displayed on the confirmation terminal includes registered image information of the candidate, The authentication and settlement system according to claim 1.

3. The candidate person information displayed on the confirmation terminal includes name information of the candidate, The authentication and settlement system according to claim 1.

4. The processor is capable of: selecting, as a candidate, a person whose similarity when comparing the biometric information acquired from the authenticator with the biometric information of each registrant is equal to or greater than a threshold value; The candidate person information displayed on the confirmation terminal includes the similarity, The authentication and settlement system according to claim 1.

5. The processor is capable of: executing the first collation process, executing the first determination process to determine that the second collation process can be omitted, and when the authenticator is identified by the staff member, omitting the second collation process, The authentication and settlement system according to claim 1.

6. The processor is capable of: executing the first collation process, executing the first determination process to determine that the second collation process can be omitted, and when the authenticator is not identified by the staff member, proceeding to the second collation process, The authentication and settlement system according to claim 1.

7. The processor is configured to perform a payment amount determination as the first determination process, which determines whether it is possible to omit the second verification process according to whether the current payment amount is equal to or greater than a predetermined reference value. The authentication payment system according to claim 1, characterized in that **Claim 8** The processor is configured to set a range of normal payment behavior for each user in advance based on history information regarding at least any one of the user's payment location, payment amount, and payment target in past payments. When it is determined in the first determination process that the second verification process can be omitted, and when no multiple candidates for the authenticated person are selected in the second determination process, then perform a payment behavior determination to determine whether the current payment behavior is included within the range of the normal payment behavior, and determine whether it is possible to omit the second verification process according to the result of the payment behavior determination. The authentication payment system according to claim 1, characterized in that **Claim 9** The processor is configured to perform a payment amount determination as the first determination process, which determines whether it is possible to omit the second verification process according to whether the current payment amount is equal to or greater than a predetermined reference value. perform a payment behavior determination as the third determination process. The authentication payment system according to claim 8, characterized in that **Claim 10** The processor is configured to perform the payment behavior determination as the first determination process. The authentication payment system according to claim 8, characterized in that **Claim 11** The processor is configured to after it is determined in the first determination process that the second verification process can be omitted, when multiple candidates for the authenticated person are selected in the first verification process, obtain staying person information regarding a person who is highly likely to be staying in the facility at the time of payment from a system that manages the persons using the facility, and identify the authenticated person based on the staying person information. The authentication payment system according to claim 1, characterized in that **Claim 12** The predetermined determination criterion is a criterion using the magnitude of the current payment amount and the similarity obtained in the first verification process. The authentication payment system according to claim 1, characterized in that **Claim 13** An authentication payment method in which one or more processors execute a process of performing at least a verification based on biometric information on an authenticated person, identifying the authenticated person based on the result of the verification, and instructing the execution of a payment process, a first verification process of selecting candidates for the authenticated person based on the similarity between the biometric information of the authenticated person and the biometric information of each registrant. a second verification process based on the input personal identification number, a first determination process for determining whether or not to omit the second verification process based on a predetermined determination criterion, a second determination process for determining whether or not a plurality of candidates for the person to be authenticated are selected in the first verification process, is executable, when the first verification process is executed, the first determination process is executed to determine that the second verification process can be omitted, and the second determination process is executed and a plurality of candidates for the person to be authenticated are selected in the first verification process, candidate person information regarding the selected plurality of candidates is displayed on a confirmation terminal operable by a facility staff member, and in the confirmation terminal, one candidate determined according to the operation of the staff member from among the plurality of candidates in the candidate person information is specified as the person to be authenticated. A authentication settlement method characterized by this.

14. An authentication settlement program for causing a computer to execute a process of performing at least verification based on biometric information on a person to be authenticated, specifying the person to be authenticated based on the result of the verification, and instructing execution of a settlement process, wherein the computer, by the authentication settlement program, a first verification process for selecting a candidate for the person to be authenticated based on the similarity between the biometric information of the person to be authenticated and the biometric information for each registrant, a second verification process based on the input personal identification number, a first determination process for determining whether or not to omit the second verification process based on a predetermined determination criterion, a second determination process for determining whether or not a plurality of candidates for the person to be authenticated are selected in the first verification process, is executable, when the first verification process is executed, the first determination process is executed to determine that the second verification process can be omitted, and the second determination process is executed and a plurality of candidates for the person to be authenticated are selected in the first verification process, candidate person information regarding the selected plurality of candidates is displayed on a confirmation terminal operable by a facility staff member, and in the confirmation terminal, one candidate determined according to the operation of the staff member from among the plurality of candidates in the candidate person information is specified as the person to be authenticated. An authentication settlement program characterized by this.

Images