Authentication System

Abstract

To provide a user authentication system for an online conference that confirms, with high credibility, identity of users participating in the conference.SOLUTION: An authentication system 10 includes a client terminal 1A that is used by a user A to participate in a conference, a mobile terminal 3, and a web server 2. The user A uses an IC card 4 as an identification card. A code transmission unit 22 transmits a QR code 5 embedded with a conference ID identifying the conference to the client terminal 1A in response to an access from the client terminal 1A. An ID acquisition unit 31 acquires the conference ID from the QR code 5 displayed on the client terminal 1A, meanwhile, an IC data acquisition unit 33 acquires personal information 3c including face photograph data of the user A from the IC card 4. An authentication unit 23 receives the personal information 3c and the conference ID: 3a transmitted from the mobile terminal 3 to authenticate the user A as the user A of the client terminal 1A, thereby, confirming identity of the user.SELECTED DRAWING: Figure 2

Description

Technical Field

[0001] The present invention relates to a user authentication system for online meetings.

Background Art

[0002] In recent years, the use of online meetings has been increasing. When allowing a person who wishes to participate in such an online meeting to participate, it is important to confirm and authenticate the identity of the participant. For example, in the case of a meeting with confidentiality obligations, participants are limited to specific qualified persons. Also, when a pharmacy sells a prescribed drug face-to-face online, identification of the purchaser is required. Furthermore, in an exchange meeting where fans of a specific person or group, such as a talent, singer, sports team or athlete, are gathered in an online format, identification of the participants may be required.

[0003] When a guest user, who is a person who has not registered an account in advance, participates in an online meeting, with the cooperation of a registered user, the participation of the unregistered person is authenticated on the spot as being legitimate, and a method of allowing the unregistered person to use the online meeting system is known (see, for example, Patent Document 1).

[0004] The guest user uses the camera of the meeting terminal (client terminal) to image a QR code (registered trademark) displayed on the meeting board in the meeting room in the real space or displayed on the meeting terminal of an adjacent registered user. The guest user decodes the QR code to obtain meeting identification information, and transmits the meeting identification information and the user information of the guest user himself / herself to the meeting server (web server). The meeting server transmits the information of the guest user to the meeting terminal of the registered user and requests an authentication determination. The registered user performs password authentication, fingerprint authentication, etc. on the guest user, determines whether to authenticate or reject participation in the meeting, and reports it to the meeting server.

[0005] In addition, a remote pharmaceutical sales system is known in which a pharmacist meets face-to-face with a purchaser using a video conferencing system via a network to answer questions, decides on a recommended pharmaceutical while viewing each other on screen, and delivers the pharmaceutical directly to the purchaser without going through a third party (see, for example, Patent Document 2).

[0006] Pharmaceutical purchasers have an IC card that stores their personal information after they have registered as users in advance, and each time they purchase a medicine, they insert this IC card into the IC card slot of the pharmaceutical sales system to authenticate their identity.The personal information stored on the IC card includes the purchaser's name, date of birth (age), history of medicines taken, medical records, chronic illnesses, the purchaser's address, mobile phone number, email address, height, weight, etc., and the purchaser's photograph can also be attached to the card itself. [Prior art documents] [Patent documents]

[0007] [Patent Document 1] Japanese Patent Application Publication No. 2017-111608 [Patent Document 2] Japanese Patent Application Laid-Open No. 2013-109414 Summary of the Invention [Problem to be solved by the invention]

[0008] However, in the system disclosed in the above-mentioned Patent Document 1, authentication is performed using a password or fingerprint, but there is a possibility of impersonation or counterfeiting, making the system less reliable. Furthermore, in the system using authentication using personal information stored on an IC card, such as that disclosed in Patent Document 2, an IC card reader is used that is provided in a system dedicated to pharmaceutical sales. Most general-purpose PC (personal computer) terminals used in regular online conferences are not equipped with IC card readers, and if a borrowed PC with IC card reader functionality is used, there is a problem in that the security of the PC cannot be guaranteed.

[0009] Generally, in-person identification is carried out by presenting an identity certificate or the like that only the person himself / herself can possess. However, physical certificates or the like, including photos, can be forged. Furthermore, when presenting these in video during an online in-person meeting, the credibility becomes even lower. Therefore, there is a need for a method of personal identification that is difficult to forge and whose credibility is guaranteed even online.

[0010] The present invention solves the above problems, and an object thereof is to provide a user authentication system for an online meeting in which a user can participate in a meeting using a general-purpose electronic device as a meeting terminal and the personal identification of the user participating in the meeting can be performed with high credibility.

Means for Solving the Problems

[0011] To achieve the above object, a user authentication system for an online meeting according to the present invention is an authentication system for authenticating a user who participates in a video-based online meeting, a client terminal used by the user to participate in the meeting, and a web server that provides services related to the meeting to participants in the meeting, and is provided with The web server includes an app providing unit that can provide an authentication app to be installed on the client terminal in response to an access from the client terminal, and an authentication unit that authenticates the user. The client terminal includes an IC data acquisition unit that acquires personal information including data of the user's face photo from an IC card owned by the user, and a data transmission unit that transmits the personal information as personal identification data to the web server using the authentication app. The authentication app , a front operates the IC data acquisition unit and the data transmission unit, The authentication unit of the web server authenticates the user as the user of the client terminal by receiving the personal information transmitted from the client terminal, and performs personal identification. This is the gist of the present invention.

[0012] In this authentication system, the web server includes a code sending unit that sends a QR code in which a conference ID for identifying the conference is embedded to the client terminal in response to access from the client terminal so as to be displayable on the client terminal; the client terminal includes an ID acquisition unit that acquires the conference ID from the QR code data transmitted from the web server; the data transmission unit of the client terminal transmits the conference ID together with the personal information to the web server; It is desirable that the authentication unit of the web server authenticates the user as a user of the client terminal and verifies the user's identity by receiving the conference ID in addition to the personal information sent from the client terminal.

[0013] In this authentication system, authentication system for authenticating users participating in a video-based online meeting, a client terminal used by the user to participate in the meeting, a mobile terminal used by the user in combination with the client terminal, a web server that provides services related to the meeting to participants in the meeting, and includes: the web server includes an app providing unit that can provide and install an authentication app on the mobile terminal in response to an access from the mobile terminal, and an authentication unit that authenticates the user, the mobile terminal includes an IC data acquisition unit that acquires personal information including data of the user's face photo from an IC card owned by the user, and a data transmission unit that transmits the personal information as self-identification data to the web server using the authentication app, the web server includes a code sending unit that sends a QR code in which a conference ID for identifying the conference is embedded to the client terminal in response to access from the client terminal so as to be displayable on the client terminal; the mobile terminal includes an ID acquisition unit that acquires the conference ID by capturing an image of the QR code displayed on the client terminal; the authentication app operates the ID acquisition unit, the IC data acquisition unit, and the data transmission unit, the ID acquisition unit of the mobile terminal acquires the meeting ID, The IC data acquisition unit of the mobile terminal the individual Obtaining personal information the data transmission unit of the mobile terminal transmits the conference ID together with the personal information to the web server; It is desirable that the authentication unit of the web server authenticates the user as the user of the client terminal and verifies the identity of the user by receiving the conference ID in addition to the personal information transmitted from the mobile terminal.

[0014] In this authentication system, It is desirable that the web server includes a data distribution unit that distributes the data of the user's face photo to a predetermined terminal used by the participants of the conference so that the participants of the conference can view the face photo of the user on the screen.

[0015] In this authentication system, The authentication unit of the web server includes a face recognition unit that performs image processing on the data of the user's face photo and the data of the user's face image in the video image transmitted from a predetermined terminal used by the user by means of an AI function to verify the identity of the user, and it is desirable to perform an authentication process based on the identity verification result by the face recognition unit.

[0016] In this authentication system, It is desirable that the IC card is an IC card that records a my number card or an electronic certificate including the data of the user's face photo issued by a public personal authentication service.

Effect of the Invention

[0017] According to the authentication system of the present invention, since the mobile terminal acquires personal information including the data of the user's face photo from the IC card and transmits it to the web server as data for identity verification, the identity verification of the user who requests authentication can be performed with high reliability.

Brief Description of the Drawings

[0018]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Mode for Carrying Out the Invention

[0019] Hereinafter, a user authentication system for online meetings according to the first embodiment of the present invention (hereinafter, referred to as the authentication system) will be described with reference to the drawings. In the following description, the term "online" means that participants in the meeting face each other via an image by data communication and do not directly face living humans. Also, the meeting is not limited to a situation where a plurality of related persons participate to make some decision, but includes exchanging opinions and information, and further, simply facing each other, etc. Such meetings include one-on-one meetings between two persons. Online meetings include various other gatherings such as planning meetings, countermeasure meetings, board of directors meetings, training sessions, lectures, etc. in companies, schools, various organizations, etc.

[0020] As shown in FIGS. 1 and 2, the authentication system 10 is an authentication system for authenticating user A who participates in a video-based online meeting, and includes a client terminal 1A and a mobile terminal 3 used by user A to participate in the meeting, and a web server 2. In this authentication system 10, user A who participates in the meeting holds his / her own IC card 4 used as an identity certificate.

[0021] In this embodiment, users B, C, D, and E who participate in the meeting using the authentication system 10 participate using their respective client terminals 1B, 1C, 1D, and 1E. Each of users B, C, D, and E holds a mobile terminal 3 and his / her own IC card 4. The client terminals 1A to 1E (collectively referred to as client terminal 1), the web server 2, and the mobile terminal 3 are connected to the network 9 so that data communication is possible.

[0022] The client terminal 1A includes a browser 11 that displays the meeting screen and the QR code 5 transmitted from the web server 2. A general-purpose PC (personal computer) having the function of the browser 11 and connectable to the network 9 can be used as the client terminal 1A. In addition to displaying the meeting scene and the video of the participants transmitted from other terminals, the client terminal 1 is equipped with a video camera composed of a camera, a microphone, a speaker, etc. for users A to E to capture their own images, etc. and transmit them to other client terminals 1, so as to acquire images and sounds.

[0023] The web server 2 is a server that provides services related to the meeting to users who are participants in the meeting, and includes an app providing unit 21, a code transmitting unit 22, an authentication unit 23, and a data distribution unit 24.

[0024] The app providing unit 21 provides the authentication app 30 to be installable on the mobile terminal 3 in response to access from the mobile terminal 3.

[0025] In response to access from the client terminal 1A, the code sending unit 22 sends the QR code 5, into which a conference ID for identifying the online conference is embedded, to the client terminal 1A. The conference ID is not limited to information for identifying the online conference, but also includes information for identifying the user who has requested authentication to participate in the conference. Therefore, the QR code 5 is a code unique to the user A who requested and received it.

[0026] The authentication unit 23 authenticates the user A and the client terminal 1A based on the data transmitted from the mobile terminal 3. By receiving the personal information 3c and the conference ID 3a transmitted from the mobile terminal 3, the authentication unit 23 authenticates the user A as the user A of the client terminal 1A and verifies the user's identity.

[0027] The authentication unit 23 may optionally include a face recognition unit 23a that performs identity verification by performing image processing using an AI function on data of a face photograph of user A and data of a face image of user A in a video image transmitted from a predetermined terminal used by user A. The authentication unit 23 can perform authentication processing and authentication judgment more strictly and appropriately over time based on the identity verification result by the face recognition unit 23a.

[0028] The data distribution unit 24 distributes data of the face photo of user A to predetermined terminals used by the participants of the conference so that the participants of the conference can check the face photo of user A on the screen.

[0029] The mobile terminal 3 includes an ID acquisition unit 31, an IC data acquisition unit 33, and a data transmission unit 34. The mobile terminal 3 is a mobile electronic device such as a smartphone or tablet that has an imaging unit 32 that is a camera and can be connected to the network 9. Such a mobile terminal 3 includes a browser as a user interface.

[0030] The mobile terminal 3 has installed thereon an authentication application 30 downloaded from the web server 2. The authentication application 30 assists the user, performs data processing, and controls the hardware of the mobile terminal 3 to operate an ID acquisition unit 31, an IC data acquisition unit 33, and a data transmission unit 34.

[0031] The ID acquisition unit 31 captures the QR code 5 displayed on the client terminal 1A to acquire a conference ID.

[0032] The IC data acquisition unit 33 acquires personal information 3c including data of a face photo of user A from the IC card 4 owned by user A. The IC data acquisition unit 33 performs reading or writing on the IC chip built in the IC card 4 by means of short-range wireless communication (NFC).

[0033] The data transmission unit 34 transmits the conference ID: 3a and the personal information 3c as authentication data 3b for identity verification to the web server 2 using the authentication application 30.

[0034] The IC card 4 is a card incorporating an IC chip capable of reading and writing by means of short-range wireless communication (NFC). Stored in the IC chip of the IC card 4 are an electronic certificate (certificate for user authentication, electronic certificate for signature) and image data of the owner's face photo on the ticket surface, etc. as authentication information used to authenticate the owner, user A. As the IC card 4, for example, a personal number card (My Number Card) issued under a public personal authentication service that can be obtained at a municipal or town / village office may be used.

[0035] When the IC data acquisition unit 33 performs short-range wireless communication with the IC card 4, user A is required to input a PIN code or the like. The fact that data such as personal information has been read from the IC card 4 means that a PIN code or the like that only the owner of the IC card 4 can know has been input. Therefore, user A, who is the operator of the mobile terminal 3, is recognized as the owner of the IC card 4. Also, user A is identified by the authentication data 3b for identity verification.

[0036] In addition, the face photo data obtained from the IC card 4 included in the personal identification data 3b can be displayed as a face photo that can be visually confirmed. When the IC card 4 is a My Number card, data of a resident register (name, address, etc.) is included as official personal authentication, so personal identification can be performed with high reliability.

[0037] Under the operation and control of the authentication application software, the authentication application 30, the data of the QR code 5 displayed on the screen of the client terminal 1A and the data of the IC card 4 are read. Through these two operations, the two devices, the client terminal 1A and the mobile terminal 3, are associated, and the data between the devices is associated.

[0038] Next, in addition to FIGS. 1 and 2, referring to the operation sequence of FIG. 3, the user authentication executed in the authentication system 10 will be described in chronological order. User A of the client terminal 1A uses the mobile terminal 3 to request the web server 2 to provide a download of the application 30 for user authentication in order to participate in a meeting after receiving authentication by the web server 2 (S1).

[0039] When the application providing unit 21 of the web server 2 receives a download request for the application 30 from the mobile terminal 3, the application providing unit 21 transmits the application 30 to the mobile terminal 3. The mobile terminal 3 executes the download (S2). The application 30 is downloaded from the application providing unit 21 of the web server 2. When the application 30 is installed in the mobile terminal 3, the ID acquisition unit 31, the IC data acquisition unit 33, and the data transmission unit 34 become operable (S3).

[0040] User A operates the client terminal 1A to request the web server 2 for authentication for participating in the meeting (S4).

[0041] The code transmission unit 22 of the web server 2 transmits a QR code 5 embedded with a meeting ID that identifies an online meeting in response to an access from the client terminal 1A to the client terminal 1A (S5).

[0042] The QR code 5 is displayed on the screen of the client terminal 1A by the browser 11 (S6).

[0043] The mobile terminal 3 captures the QR code 5 displayed on the screen of the client terminal 1A by the imaging means 32 according to the operation of the user A (S7). The image data of the QR code 5 is decoded by the ID acquisition unit 31 of the mobile terminal 3, and the meeting ID: 31a embedded in the QR code 5 is acquired (S8).

[0044] The IC data acquisition unit 33 of the mobile terminal 3 acquires personal information 3c including data of the face photo of the user A from the IC card 4 according to the operation of the user A (S9).

[0045] The data transmission unit 34 of the mobile terminal 3 transmits the meeting ID: 3a and the personal information 3c as the data 3b for personal confirmation to the web server 2 according to the operation of the user A (S10).

[0046] The authentication unit 23 of the web server 2 authenticates the user A as the user A of the client terminal 1A by receiving the data 3b for personal confirmation (personal information 3c including face photo data and meeting ID: 3a) transmitted from the mobile terminal 3. Also, by performing person authentication based on the data 3b for personal confirmation, the participation of the user A in the meeting on the client terminal 1A is authenticated (S11).

[0047] The authentication unit 23 of the web server 2 transmits a notification that the meeting participation of the user A has been authenticated to the client terminal 1A via the data distribution unit 24 or directly from the data distribution unit 24 (S12).

[0048] The data distribution unit 24 of the web server 2 distributes a notification to the client terminals 1B to 1E to notify the other users B to E that user A's participation in the conference has been authenticated (S13). The client terminals 1B to 1E to which this notification is distributed may or may not be limited to the client terminals 1B to 1E of users who have been authenticated to participate in the online conference.

[0049] In addition, in conjunction with the delivery of the notification of user A's authentication, the data delivery unit 24 delivers data of user A's facial photograph to a predetermined terminal (client terminal 1B to 1E) used by the conference participants so that the conference participants can check user A's facial photograph on the screen.

[0050] In addition, from the time when the authentication process for user A is started, the data distribution unit 24 may distribute a notification regarding the authentication process to the client terminals 1B to 1E of other users B to E so that each of them can view it at their own discretion (see Figures 4 and 5).

[0051] (Example of a client terminal screen) 4 and 5 show examples of the screen 6 of the client terminal 1B of a user B, who is different from the user A requesting authentication, before (FIG. 4) and after (FIG. 5) authentication after the start of the authentication process for user A. In this example, the screen 6 is divided into a large partial screen 61 on the left, a small screen on the lower right, and a small screen 63 on the upper right.

[0052] Such a screen is provided, for example, by accessing a homepage related to the authentication system 10 and the operation of a video-based online conference on the web server 2. The web server 2 may be configured to have separate functions: a conference server that processes data and information related to the online conference itself and provides it to users, and an authentication server that processes authentication of participants in the conference.

[0053] Partial screen 61 is a screen on which a video image of the face of user A requesting authentication is displayed. In the upper right corner of partial screen 61, a facial photo 6a obtained from user A's IC card 4 and sent is displayed in the upper row, user A's name 6b in the middle row, and authentication status 6c regarding conference participation in the lower row. In FIG. 4, since authentication has not yet occurred, authentication status 6c is displayed as "Authentication: Not Yet", and in FIG. 5 it is displayed as "Authentication: Completed".

[0054] The small screen 62 displays a photograph of the face of user B of the client terminal 1B displaying screen 6. Whether to display the photograph of the face of user B on this small screen 62 or to display another image is optional and can be selected by user B. The small screen 63 displays a QR code 5 unique to user B, with the conference ID information embedded in it.

[0055] (User B requests authentication) Next, focusing on screen 6 of client terminal 1, the authentication process sequence for user B, not user A, will be described. The configuration of screen 6 in FIGS. 4 and 5 can also be used as a screen for user B to proceed with the authentication process when user B is not yet authenticated and is not yet permitted to participate in the conference. First, a video-based online conference using online conference user authentication system 10 begins. The use of authentication system 10 does not require prior authentication, and the web server 2 can be accessed from mobile terminal 4 and client terminal 1.

[0056] When user B starts the authentication process and steps (S1) to (S6) in FIG. 3 are completed, a QR code 5 for authentication unique to that user is displayed on a small screen 63 on the screen 6 of client terminal 1B. When requesting this QR code 5 from the web server 2, user B writes his or her name in the application. Then, on a partial screen 61 of the screen 6 of the client terminal 1 of a user other than user B, the name of user B is displayed as name 6b in the middle of the upper right corner, and "Authentication: Not Yet" is displayed as authentication status 6c in the lower line.

[0057] If authentication is desired, capture the user's own authentication QR code 5 displayed on the screen with the mobile terminal 3, and read the identifier (conference ID: 3a) included in the QR code 5 by the ID reading unit 31 using the authentication app 30, which is a dedicated app.

[0058] Also, the IC card 4 held by user B is read by the IC data acquisition unit 33 using the authentication app 30, and personal information (such as a face photo, name, address, etc.) included in the IC card 4 is acquired.

[0059] The information of user B read from the IC card 4 is transmitted to the web server 2 together with the identifier (conference ID: 3a), etc. by the data transmission unit 34 using the authentication app 30.

[0060] The web server 2 identifies the currently ongoing conference by the identifier, etc., changes user B to authenticated, and displays the face photo 6a, name 6b, and authentication status 6c, that is, "Authenticated: Yes", on the screen 6 of other users who view the video image of user B in the partial screen 61.

[0061] According to the authentication system 10 of the present embodiment, since the user who requests self - authentication acquires personal information including the data of their own face photo from their own IC card 4 with the mobile terminal 3 and transmits it to the web server 2 as data for personal confirmation, the user can receive authentication with high credibility.

[0062] Also, according to the authentication system 10, since the system is configured to use the face photo data recorded on the anti - forgery IC card, even during the ongoing conference after participation is authenticated, in an online face - to - face state, the face photo based on the face photo data submitted to the authentication unit 23 can be compared with the face image in the video image for appropriate personal confirmation, and the conference can be maintained safely. This personal confirmation by image comparison may be automated using image data matching technology.

[0063] Furthermore, according to the authentication system 10, since the system is composed of the face photo data recorded on the anti-counterfeiting IC card and the combination of general-purpose electronic devices (PC and smartphone), it is possible to construct an authentication system that can easily and inexpensively authenticate user A who participates in the video-based online meeting while ensuring the reliability of authentication.

[0064] (Second Embodiment) The user authentication system according to the second embodiment of the present invention will be described with reference to FIGS. 6, 7, and 8. As shown in FIGS. 6 and 7, the authentication system 10 of this embodiment is configured such that the client terminal 1A used by user A to participate in the video-based online meeting is a mobile terminal. The client terminal 1A is composed of, for example, a smartphone. Similarly to user A, the client terminal 1D of user D is also composed of a mobile terminal. Note that users B, C, and E are the same as the authentication system 10 of the first embodiment.

[0065] In the authentication system 10 of the first embodiment, it was assumed that the client terminal 1A was a PC or the like used by user A, and the mobile terminal 3 was a smartphone or the like possessed by user A. This is because most general users use a PC for online meetings, but general-purpose PCs do not have a configuration corresponding to the IC data acquisition unit 33, so a smartphone equipped with this configuration is used to enable the acquisition of personal information. However, in recent years, it is not uncommon for users to participate in online meetings using only a smartphone without using a PC. Therefore, in this embodiment, by using a smartphone equipped with a configuration corresponding to the IC data acquisition unit 33, the procedure that was previously performed by combining the above-described client terminal 1A and mobile terminal 3 is now performed on a single client terminal 1A (mobile terminal). Therefore, the mobile terminal 3 in the description of the authentication system 10 of the first embodiment described above may be read as the client terminal 1A.

[0066] As shown in FIG. 8, the authentication process sequence in the authentication system 10 of the present embodiment is a process between the client terminal 1A configured by a mobile terminal and the web server 2. Further, the client terminal 1A which is a mobile terminal performs short-range wireless communication (NFC) with the IC card 4 to acquire data necessary for authentication.

[0067] On the other hand, in the present embodiment, the QR code 5 transmitted from the web server 2 to the client terminal 1A and displayed on the screen does not need to be imaged by the imaging means 32 (camera). The QR code 5 is processed by the ID acquisition unit 31 for the image data obtained using the print screen function or the screen capture function to obtain the conference ID (S48). Further, the ID acquisition unit 31 configured by installing the authentication application 30 may directly decode the data of the QR code 5 to acquire the conference ID. Other operations are the same as the operations of the authentication system 10 shown in the first embodiment above.

[0068] The mobile terminal constituting the authentication system 10 may use, for example, a tablet-type mobile electronic device or connect and use an auxiliary display device in order to view the conference situation on a large screen.

[0069] (Third Embodiment) The user authentication system according to the third embodiment of the present invention will be described with reference to FIGS. 9, 10, and 11. As shown in FIGS. 9 and 10, the authentication system 10 of the present embodiment assumes that all users A to E participating in the video-based online conference use smartphones (mobile terminals) as the client terminal 1.

[0070] Also, in the present embodiment, the information of the conference ID is directly transmitted to the ID acquisition unit 31 in the form of an encrypted code, rather than in the form of a QR code. Therefore, no QR code is displayed on the client terminal 1, and there is no need to capture the QR code or the like. As shown in FIG. 11, when the conference ID code is transmitted from the web server 2 (S25), the client terminal 1A acquires the conference ID from the received conference ID code, and after acquiring the personal information in the same procedure as described above (S29), it transmits the personal verification data including the conference ID to the web server 2 (S30). The other configurations and the operations of each part are the same as those described in the above-described first and second embodiments.

[0071] Note that the present invention is not limited to the above configuration and various modifications are possible. For example, the configurations of the above-described embodiments can be combined with each other. The first and second embodiments are configured to acquire the conference ID from the QR code transmitted from the web server 2 to the client terminal 1, and the third embodiment is configured to transmit the conference ID code other than the QR code from the web server 2 to the client terminal 1. However, for example, a system that uses these in combination may also be used.

Explanation of Reference Numerals

[0072] 1, 1A, 1B, 1C, 1D, 1E Client Terminal 10 Authentication System 11 Browser 2 Web Server 21 Application Supply Unit 22 Code Transmission Unit 23 Authentication Unit 23a Face Recognition Unit 24 Data Distribution Unit 3 Mobile Terminal 3a Conference ID 3b Personal Verification Data 3c Personal Information 30 Authentication Application 31 ID Acquisition Unit 32 Imaging Means 33 IC Data Acquisition Unit 34 Data Transmission Unit 4 IC cards 5 QR code (registered trademark)

Claims

1. An authentication system for authenticating a user participating in an online meeting in a video format, comprising: a client terminal used by the user to participate in the meeting; a web server that provides services related to the meeting to participants in the meeting, wherein the web server includes an application providing unit that can provide an authentication application to be installed on the client terminal in response to an access from the client terminal, and an authentication unit that authenticates the user; wherein the client terminal includes an IC data acquisition unit that acquires personal information including data of a face photo of the user from an IC card owned by the user, and a data transmission unit that transmits the personal information as data for personal confirmation to the web server using the authentication application; the authentication application operates the IC data acquisition unit and the data transmission unit; the authentication unit of the web server authenticates the user as the user of the client terminal and performs personal confirmation by receiving the personal information transmitted from the client terminal. The authentication system is characterized by this.

2. The web server includes a code transmission unit that can transmit a QR code embedded with a meeting ID for specifying the meeting to the client terminal in response to an access from the client terminal; the client terminal includes an ID acquisition unit that acquires the meeting ID from the data of the QR code transmitted from the web server; the data transmission unit of the client terminal transmits the meeting ID to the web server together with the personal information; the authentication unit of the web server authenticates the user as the user of the client terminal and performs personal confirmation by receiving the meeting ID in addition to the personal information transmitted from the client terminal. The authentication system according to claim 1 is characterized by this.

3. An authentication system for authenticating a user participating in an online meeting in a video format, comprising: a client terminal used by the user to participate in the meeting; a mobile terminal used by the user in combination with the client terminal; a web server that provides services related to the meeting to participants in the meeting, The web server includes an app providing unit that can provide and install an authentication app to the mobile terminal in response to an access from the mobile terminal, and an authentication unit that authenticates the user. The mobile terminal includes an IC data acquisition unit that acquires personal information including data of the user's face photo from an IC card owned by the user, and a data transmission unit that transmits the personal information to the web server using the authentication app as data for personal confirmation. The web server includes a code transmission unit that can transmit and display a QR code embedded with a meeting ID that identifies the meeting to the client terminal in response to an access from the client terminal. The mobile terminal includes an ID acquisition unit that captures the QR code displayed on the client terminal and acquires the meeting ID. The authentication app operates the ID acquisition unit, the IC data acquisition unit, and the data transmission unit. The ID acquisition unit of the mobile terminal acquires the meeting ID. The IC data acquisition unit of the mobile terminal acquires the personal information. The data transmission unit of the mobile terminal transmits the meeting ID together with the personal information to the web server. The authentication unit of the web server authenticates the user as the user of the client terminal and performs personal confirmation by receiving the meeting ID in addition to the personal information transmitted from the mobile terminal. The authentication system is characterized by this.

4. The web server according to any one of claims 1 to 3, characterized in that it includes a data distribution unit that distributes data of the user's face photo to a predetermined terminal used by the participants of the meeting so that the participants of the meeting can view the user's face photo on the screen.

5. The authentication unit of the web server includes a face recognition unit that performs image processing on the data of the user's face photo and the data of the user's face image in the video image transmitted from a predetermined terminal used by the user by means of an AI function to perform personal confirmation, and performs authentication processing based on the personal confirmation result by the face recognition unit. The authentication system according to any one of claims 1 to 4 is characterized by this.

6. The authentication system according to any one of claims 1 to 5, characterized in that the IC card is an IC card that records a my number card or an electronic certificate including the face photo data of the person issued by a public personal authentication service.

Images