Information processing system, information processing method, and recording medium

Abstract

An information processing system (10) comprises: an authenticating means (110) for executing biometric authentication using biometric information from a first user; an acquiring means (120) for acquiring information related to an activity history of the first user if the biometric authentication is successful; a storing means (130) for storing information related to the activity history; a generating means (140) for generating risk information indicating a risk in relation to the first user on the basis of the stored information related to the activity history; and an outputting means (150) for outputting risk information about the first user in response to a request from a second user different from the first user. According to such an information processing system, information indicating a risk in relation to a user can be outputted appropriately upon request.

Description

[Technical Field]

[0001] The present disclosure relates to the technical fields of an information processing system, an information processing method, and a recording medium. [Background technology]

[0002] Known systems of this type collect user behavioral histories. For example, Patent Document 1 discloses a technology that uses name-tag-type sensor nodes to observe user actions and behavior and collect the acquired data via wireless communication. Patent Document 2 discloses a technology that uses a mobile terminal to detect users' entry and exit and accumulates log data related to their entry and exit history. Patent Document 3 discloses a technology that collects the behavioral history of infectious disease patients and maps it on a map or creates a behavior list.

[0003] As other related technologies, Patent Document 4 discloses a technology for authenticating users using a wearable terminal. Patent Document 5 discloses a technology for identifying users by attaching a sensor to headphones and using differences in the acoustic characteristics of the ears and physical characteristics. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] International Publication No. 2011 / 055628 [Patent Document 2] Japanese Patent Application Publication No. 2018-181006 [Patent Document 3] Japanese Patent Application Laid-Open No. 2011-070248 [Patent Document 4] Special Publication No. 2020-505675 [Patent Document 5] Japanese Patent Application Laid-Open No. 2004-065363 Summary of the Invention [Problem to be solved by the invention]

[0005] This disclosure aims to improve upon the techniques disclosed in the prior art documents. [Means for solving the problem]

[0006] One aspect of the information processing system disclosed herein includes an authentication means for performing biometric authentication using biometric information of a first user, an acquisition means for acquiring information regarding the behavioral history of the first user if the biometric authentication is successful, a storage means for storing information regarding the behavioral history, a generation means for generating risk information indicating risks regarding the first user based on the stored information regarding the behavioral history, and an output means for outputting the risk information of the first user in response to a request from a second user different from the first user.

[0007] One aspect of the information processing method disclosed herein is an information processing method executed by at least one computer, which performs biometric authentication using biometric information of a first user, and if the biometric authentication is successful, obtains information regarding the first user's behavioral history, accumulates information regarding the behavioral history, generates risk information indicating risks regarding the first user based on the accumulated information regarding the behavioral history, and outputs the risk information of the first user in response to a request from a second user different from the first user.

[0008] One aspect of the recording medium of this disclosure is a computer program recorded on at least one computer that causes the computer to execute an information processing method, which includes performing biometric authentication using biometric information of a first user, and if the biometric authentication is successful, obtaining information regarding the first user's behavioral history, accumulating information regarding the behavioral history, generating risk information indicating risks regarding the first user based on the accumulated information regarding the behavioral history, and outputting the risk information of the first user in response to a request from a second user different from the first user. [Brief explanation of the drawings]

[0009] [Figure 1]1 is a block diagram showing a hardware configuration of an information processing system according to a first embodiment. [Figure 2] 1 is a block diagram showing a functional configuration of an information processing system according to a first embodiment. [Figure 3] 5 is a flowchart showing the flow of a storage operation of the information processing system according to the first embodiment. [Figure 4] 5 is a flowchart showing the flow of an output operation of the information processing system according to the first embodiment. [Figure 5] FIG. 10 is a block diagram showing the functional configuration of an information processing system according to a second embodiment. [Figure 6] 10 is a flowchart showing the flow of an output operation of an information processing system according to a second embodiment. [Figure 7] 11 is a table showing an example of behavior history information handled by the information processing system according to the third embodiment. [Figure 8] FIG. 10 is a block diagram showing the functional configuration of an information processing system according to a fourth embodiment. [Figure 9] 10 is a flowchart showing the flow of a threshold value changing operation of an information processing system according to a fourth embodiment. [Figure 10] FIG. 11 is a block diagram showing the functional configuration of an information processing system according to a fifth embodiment. [Figure 11] 13 is a flowchart showing the flow of a biometric authentication operation of an information processing system according to a fifth embodiment. [Figure 12] FIG. 13 is a block diagram showing the functional configuration of an information processing system according to a sixth embodiment. [Figure 13] 13 is a flowchart showing the flow of a biometric authentication operation of an information processing system according to a sixth embodiment. [Figure 14] FIG. 13 is a block diagram showing the functional configuration of an information processing system according to a seventh embodiment. [Figure 15] 13 is a flowchart showing the flow of a factor determining operation of an information processing system according to a seventh embodiment. [Figure 16] 13 is a graph showing an example of authentication history information handled by the information processing system according to the seventh embodiment. [Figure 17] FIG. 13 is a block diagram showing the functional configuration of an information processing system according to an eighth embodiment. [Figure 18] 13 is a flowchart showing the flow of a body temperature measurement operation of an information processing system according to the eighth embodiment. [Figure 19] FIG. 13 is a plan view showing an example of displaying measurement results by an information processing system according to the eighth embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0010] Hereinafter, embodiments of an information processing system, an information processing method, and a recording medium will be described with reference to the drawings.

[0011] First Embodiment An information processing system according to a first embodiment will be described with reference to FIGS.

[0012] (Hardware configuration) First, the hardware configuration of the information processing system according to the first embodiment will be described with reference to Fig. 1. Fig. 1 is a block diagram showing the hardware configuration of the information processing system according to the first embodiment.

[0013] 1, an information processing system 10 according to the first embodiment includes a processor 11, a RAM (Random Access Memory) 12, a ROM (Read Only Memory) 13, and a storage device 14. The information processing system 10 may further include an input device 15 and an output device 16. The information processing system 10 also includes a sensor 18. The processor 11, RAM 12, ROM 13, storage device 14, input device 15, output device 16, and sensor 18 are connected to each other via a data bus 17.

[0014] The processor 11 loads a computer program. For example, the processor 11 is configured to load a computer program stored in at least one of the RAM 12, the ROM 13, and the storage device 14. Alternatively, the processor 11 may load a computer program stored in a computer-readable storage medium using a storage medium reading device (not shown). The processor 11 may acquire (i.e., load) the computer program from a device (not shown) located outside the information processing system 10 via a network interface. The processor 11 controls the RAM 12, the storage device 14, the input device 15, and the output device 16 by executing the loaded computer program. In particular, in this embodiment, when the processor 11 executes the loaded computer program, a functional block for outputting risk information is realized within the processor 11.

[0015] The processor 11 may be configured as, for example, a central processing unit (CPU), a graphics processing unit (GPU), a field-programmable gate array (FPGA), a demand-side platform (DSP), or an application-specific integrated circuit (ASIC). The processor 11 may be configured as one of these, or may be configured to use multiple processors in parallel.

[0016] The RAM 12 temporarily stores computer programs executed by the processor 11. The RAM 12 temporarily stores data that is temporarily used by the processor 11 while the processor 11 is executing the computer programs. The RAM 12 may be, for example, a D-RAM (Dynamic RAM).

[0017] The ROM 13 stores computer programs executed by the processor 11. The ROM 13 may also store fixed data. The ROM 13 may be, for example, a programmable ROM (P-ROM).

[0018] The storage device 14 stores data that is to be saved long-term by the information processing system 10. The storage device 14 may operate as a temporary storage device for the processor 11. The storage device 14 may include, for example, at least one of a hard disk device, a magneto-optical disk device, an SSD (Solid State Drive), and a disk array device.

[0019] The input device 15 is a device that receives input instructions from a user of the information processing system 10. The input device 15 may include, for example, at least one of a keyboard, a mouse, and a touch panel.

[0020] The output device 16 is a device that outputs information related to the information processing system 10 to the outside. For example, the output device 16 may be a display device (e.g., a display) that can display information related to the information processing system 10. The output device 16 may also be a speaker or the like that can output information related to the information processing system 10 as audio. The output device 16 may be configured as a mobile terminal such as a smartphone or a tablet.

[0021] The sensor 18 is configured to be able to detect information about the user himself / herself, information about the environment around the user, etc. The sensor 18 may include a camera (i.e., an image sensor). The sensor 18 may also be provided in the wearable terminal. A plurality of sensors 18 may be provided, or a plurality of types of sensors 18 may also be provided. The sensor 18 according to this embodiment may also be configured to be able to acquire information about the behavioral history, which will be described later. The information about the behavioral history will be described in detail later.

[0022] (Functional configuration) Next, the functional configuration of the information processing system 10 according to the first embodiment will be described with reference to Fig. 2. Fig. 2 is a block diagram showing the functional configuration of the information processing system according to the first embodiment.

[0023] As shown in Fig. 2, the information processing system 10 according to the first embodiment is configured to include, as components for realizing its functions, a biometric authentication unit 110, a behavioral history acquisition unit 120, a behavioral history accumulation unit 130, a risk information generation unit 140, and a risk information output unit 150. Each of the biometric authentication unit 110, the behavioral history acquisition unit 120, the risk information generation unit 140, and the risk information output unit 150 may be a processing block realized by, for example, the above-mentioned processor 11 (see Fig. 1). The behavioral history accumulation unit 130 may be realized by, for example, the above-mentioned storage device 14 (see Fig. 1).

[0024] The biometric authentication unit 110 is configured to be able to perform biometric authentication using biometric information of the first user. The biometric authentication unit 110 may be configured to acquire the biometric information of the first user using, for example, a sensor 18. The biometric authentication performed by the biometric authentication unit 110 may determine, for example, whether the first user is a pre-registered user. The type of biometric authentication is not particularly limited, and may be, for example, face authentication, iris authentication, fingerprint authentication, etc. As the specific method of biometric authentication can be appropriately adopted from existing technologies, a detailed description thereof will be omitted here. The authentication result of the biometric authentication unit 110 is configured to be output to the behavioral history acquisition unit 120.

[0025] The behavioral history acquisition unit 120 is configured to be able to acquire information about the behavioral history of the first user when the biometric authentication unit 110 has successfully performed biometric authentication. The behavioral history acquisition unit 120 may acquire the behavioral history information using, for example, the sensor 18. Note that the "information about the behavioral history" here refers to information acquired based on the user's behavioral history, and may include information about the user's own behavior and state as well as information about the user's surrounding environment. The information about the behavioral history may include multiple types of information. Hereinafter, for convenience of explanation, the information about the behavioral history may be referred to as "behavioral history information" as appropriate. Specific examples of behavioral history information will be described in other embodiments described later. The behavioral history information acquired by the behavioral history acquisition unit 120 is configured to be output to the behavioral history accumulation unit 130.

[0026] The behavior history accumulation unit 130 is configured to be able to accumulate the behavior history information of the first user acquired by the behavior history acquisition unit 120. The behavior history accumulation unit 130 may be configured to accumulate all of the first user's past behavior history information, or may be configured to accumulate only a portion of it. The behavior history accumulation unit 130 may also have a function to appropriately delete past behavior history information that is no longer necessary. The behavior history accumulation unit 130 may be configured as a database managed by, for example, a reliable information manager (for example, an information bank or a private company designated by a country or public institution). The behavior history information accumulated in the behavior history accumulation unit 130 is configured to be readable by the risk information generation unit 140.

[0027] The risk information generation unit 140 is configured to be able to generate risk information based on the behavioral history information of the first user accumulated in the behavioral history accumulation unit 130. Here, "risk information" is information indicating the risk related to the first user. The risk information may include, for example, a value indicating the degree of risk, or may be information indicating the presence or absence of risk. The type of risk is not particularly limited, but an example is the risk of infection with an infectious disease. The risk information generated by the risk information generation unit 140 is configured to be output to the risk information output unit 150.

[0028] The risk information output unit 150 is configured to be able to output the information generated by the risk information generation unit 140. For example, the risk information output unit 150 may be configured to output the risk information using the output device 16 described above. More specifically, the risk information output unit 150 may be configured to display the risk information on a display or output the risk information as audio through a speaker. Furthermore, the risk information output unit 150 is particularly configured to be able to output the risk information in response to a request from a second user different from the first user (i.e., a user other than the user for whom the risk information was generated). An example of the first user and the second user is a driver of public transportation and his passengers.

[0029] (Storage operation) Next, the flow of operations (hereinafter referred to as "storage operations") performed by the information processing system 10 according to the first embodiment when storing behavior history information will be described with reference to Fig. 3. Fig. 3 is a flowchart showing the flow of the storage operations performed by the information processing system according to the first embodiment.

[0030] 3, in the storage operation by the information processing system 10 according to the first embodiment, first, the biometric authentication unit 110 acquires biometric information of the first user (step S101). Then, the biometric authentication unit 110 performs biometric authentication using the acquired biometric information of the first user (step S102). Note that if the biometric authentication fails (step S102: NO), the subsequent processes are omitted and the series of storage operations ends (in this case, the biometric information is not stored).

[0031] On the other hand, if the biometric authentication is successful (step S102: YES), the behavior history acquisition unit 120 acquires behavior history information of the first user (step S103). Then, the behavior history accumulation unit 130 accumulates the acquired behavior history information of the first user (step S104).

[0032] (output operation) Next, the flow of operations (hereinafter referred to as "output operations") when risk information is output by the information processing system 10 according to the first embodiment will be described with reference to Fig. 4. Fig. 4 is a flowchart showing the flow of the output operations of the information processing system according to the first embodiment.

[0033] 4, in the output operation by the information processing system 10 according to the first embodiment, first, it is determined whether or not the second user has requested the output of the risk information of the first user (step S151). If there is no output request from the second user (step S151: NO), the subsequent processes are omitted and the series of output operations ends (in this case, the risk information is not output).

[0034] On the other hand, if there is an output request from the second user (step S151: YES), the risk information generation unit 140 reads out the behavior history information of the first user accumulated in the behavior history accumulation unit 130, and generates risk information of the first user (step S152). Then, the risk information output unit 150 outputs the risk information of the first user (step S153).

[0035] The risk information output unit 150 typically outputs the risk information to the second user, but may also output the risk information to the first user. Alternatively, the first user may be notified that the risk information has been output to the second user.

[0036] In the above example, the risk information is generated after an output request from the second user is received, but the risk information may be generated in advance before an output request from the second user is received (for example, when sufficient behavioral history information of the first user has been accumulated). In this case, the behavioral history accumulation unit 130 may be configured to be able to accumulate the generated risk information in addition to the behavioral history information.

[0037] (Technical Effects) Next, the technical effects obtained by the information processing system 10 according to the first embodiment will be described.

[0038] As described with reference to Figures 1 to 4, in the information processing system 10 according to the first embodiment, behavioral history information is accumulated in accordance with the results of biometric authentication of the first user, and risk information generated from the behavioral history information is output in response to a request from the second user. In this way, accurate risk information can be generated based on the behavioral history information of the first user. This allows the second user to accurately grasp the risks associated with the first user.

[0039] Second Embodiment An information processing system 10 according to the second embodiment will be described with reference to Figures 5 and 6. The second embodiment differs from the first embodiment described above only in some configurations and operations, and other parts may be the same as the first embodiment. Therefore, the following will describe in detail the parts that differ from the first embodiment already described, and will omit explanations of other overlapping parts as appropriate.

[0040] (Functional configuration) First, the functional configuration of the information processing system 10 according to the second embodiment will be described with reference to Fig. 5. Fig. 5 is a block diagram showing the functional configuration of the information processing system according to the second embodiment. Note that in Fig. 5, the same elements as those shown in Fig. 2 are denoted by the same reference numerals.

[0041] 5, the information processing system 10 according to the second embodiment is configured to include, as components for realizing its functions, a biometric authentication unit 110, a behavioral history acquisition unit 120, a behavioral history accumulation unit 130, a risk information generation unit 140, and a risk information output unit 150. The risk information output unit 150 according to the second embodiment particularly includes a matching unit 151.

[0042] The matching unit 151 is configured to be able to perform matching processing using biometric information. Specifically, the matching unit 151 is configured to be able to perform matching processing (in other words, processing to identify the first user) using biometric information of the first user input by the second user. The matching unit 151 may be configured to be able to acquire biometric information of the first user from a terminal operated by the second user. For example, the matching unit 151 may acquire an image of the first user captured by a built-in camera of a smartphone owned by the second user, and acquire biometric information from the image of the first user. The risk information output unit 150 is configured to output risk information of the first user according to the matching result of the matching unit 151. That is, the risk information output unit 150 is configured to output risk information of the first user identified in the matching processing.

[0043] (output operation) Next, the flow of output operations by the information processing system 10 according to the second embodiment will be described with reference to Fig. 6. Fig. 6 is a flowchart showing the flow of output operations by the information processing system according to the second embodiment. Note that in Fig. 6, the same processes as those shown in Fig. 4 are denoted by the same reference numerals.

[0044] 6, in the output operation by the information processing system 10 according to the second embodiment, first, the matching unit 151 acquires biometric information of the first user (step S251). Then, the matching unit 151 executes a matching process using the acquired biometric information of the first user (step S252). Note that if the matching process fails (i.e., the first user cannot be identified) (step S252: NO), the subsequent processes are omitted and the series of output operations ends (in this case, risk information is not output).

[0045] On the other hand, if the matching process is successful (i.e., the first user can be identified) (step S252: YES), the risk information generation unit 140 reads out the behavior history information of the first user stored in the behavior history storage unit 130, and generates risk information of the first user (step S152). Then, the risk information output unit 150 outputs the risk information of the first user (step S153).

[0046] (Technical Effects) Next, the technical effects obtained by the information processing system 10 according to the second embodiment will be described.

[0047] 5 and 6, in the information processing system 10 according to the second embodiment, risk information is output according to the result of matching using biometric information. In this way, even if behavior history information relating to multiple users is accumulated, it is possible to identify the first user of interest from among the accumulated behavior history information and output appropriate risk information.

[0048] Third Embodiment An information processing system 10 according to the third embodiment will be described with reference to Fig. 7. The third embodiment describes a specific example of the behavior history information handled in the first and second embodiments described above, and the configuration and operation thereof may be the same as those of the first and second embodiments. Therefore, the following will describe in detail the parts that differ from the embodiments already described, and will omit a description of other overlapping parts as appropriate.

[0049] (Examples of behavioral history information) First, a specific example of behavior history information handled by the information processing system 10 according to the third embodiment will be described with reference to Fig. 7. Fig. 7 is a table showing an example of behavior history information handled by the information processing system according to the third embodiment.

[0050] 7, the behavior history information handled by the information processing system 10 according to the third embodiment may include movement history, environmental information, human body information, and conversation history. Note that the behavior history information may include all of the movement history, environmental information, human body information, and conversation history, or may include at least one of them.

[0051] The movement history is information indicating the history of movements of the first user. The movement history may include information on the user's past locations, which can be obtained from a GPS (Global Positioning System), for example, as well as information on the times when the user visited those locations.

[0052] The environmental information is information linked to the above-mentioned movement history, and is information indicating the environment of the places the user has visited. The environmental information may include, for example, information about temperature, air pressure, ventilation conditions, and the like.

[0053] The human body information is information about the first user himself / herself, and may include, for example, information about the first user's body temperature, pulse rate, etc.

[0054] The conversation history is information indicating the history of conversations that the first user has had, and may include information such as the duration of the conversation, who the conversation was with, and whether or not the user was wearing a mask during the conversation.

[0055] The various types of information described above are examples, and the behavior history information may include other information not listed here.

[0056] (Technical Effects) Next, the technical effects obtained by the information processing system 10 according to the third embodiment will be described.

[0057] 7, in the information processing system 10 according to the third embodiment, the behavior history information includes at least one of movement history, environmental information, human body information, and conversation history. In this way, it becomes possible to appropriately generate risk information based on the behavior history information.

[0058] <Fourth embodiment> An information processing system 10 according to the fourth embodiment will be described with reference to Figures 8 and 9. The fourth embodiment differs only in part of the configuration and operation from the first to third embodiments described above, and other parts may be the same as the first to third embodiments. Therefore, the following will describe in detail the parts that differ from the embodiments already described, and will omit a description of other overlapping parts as appropriate.

[0059] (Functional configuration) First, the functional configuration of the information processing system 10 according to the fourth embodiment will be described with reference to Fig. 8. Fig. 8 is a block diagram showing the functional configuration of the information processing system according to the fourth embodiment. Note that in Fig. 8, the same elements as those shown in Fig. 2 are denoted by the same reference numerals.

[0060] As shown in FIG. 8, the information processing system 10 according to the fourth embodiment includes, as components for realizing its functions, a biometric authentication unit 110, a behavioral history acquisition unit 120, a behavioral history storage unit 130, a risk information generation unit 140, a risk information output unit 150, and a threshold value modification unit 200. The threshold value modification unit 200 includes a behavioral pattern storage unit 210, a behavioral pattern comparison unit 220, and a threshold value determination unit 230. The behavioral pattern storage unit 210 may be realized by, for example, the above-mentioned storage device 14 (see FIG. 1). The behavioral pattern comparison unit 220 and the threshold value determination unit 230 may each be a processing block realized by, for example, the above-mentioned processor 11 (see FIG. 1).

[0061] The behavior pattern storage unit 210 is configured to be able to store the behavior patterns of the first user. Note that the "behavior pattern" here refers to information indicating the first user's daily behavior patterns and behavioral tendencies, and may include, for example, information regarding the first user's movement history. Furthermore, the behavior pattern may at least partially overlap with the behavior history information already described. In this case, the behavior pattern storage unit 210 and the behavior history storage unit 130 may be configured as a common storage unit.

[0062] The behavior pattern comparison unit 220 is configured to be able to compare the behavior pattern of the first user over a predetermined period (e.g., the behavior pattern of the most recent day) with past behavior patterns (e.g., behavior patterns accumulated over the past several tens of days). The behavior pattern comparison unit 220 is configured to output whether or not the behavior pattern over the predetermined period matches the past behavior pattern. The behavior pattern comparison unit 220 may, for example, calculate the similarity between each behavior pattern to determine whether or not they match.

[0063] The threshold determination unit 230 is configured to be able to determine a threshold for the biometric authentication unit 110 (specifically, an authentication threshold for determining whether biometric authentication is successful or unsuccessful) based on the comparison result of the behavior pattern comparison unit 220. The threshold determination unit 230 determines a threshold for the biometric authentication unit 110 that makes it difficult for biometric authentication to succeed when a behavior pattern over a predetermined period does not match a past behavior pattern. The threshold change unit 200 reflects the threshold determined by the threshold determination unit 230 in the biometric authentication unit 110 (i.e., changes the threshold).

[0064] (Threshold change operation) Next, the flow of an operation for changing a threshold value for biometric authentication by the information processing system 10 according to the fourth embodiment (hereinafter referred to as "threshold changing operation") will be described with reference to Fig. 9. Fig. 9 is a flowchart showing the flow of the threshold changing operation by the information processing system according to the fourth embodiment. Note that the series of processes shown in Fig. 9 is started when the behavior pattern storage unit 210 has stored a sufficient number of behavior patterns.

[0065] 9, in the threshold value changing operation by the information processing system 10 according to the fourth embodiment, the behavior pattern comparing unit 220 first compares the behavior pattern for a predetermined period with the past behavior pattern (step S401). Then, the threshold value determining unit 230 determines whether the behavior pattern for the predetermined period matches the past behavior pattern based on the behavior pattern comparison result (step S402).

[0066] Next, if the behavior pattern for the predetermined period matches the past behavior pattern (step S402: YES), the threshold determination unit 230 determines that the first user is likely to be the person (i.e., the same person who exhibited the past behavior pattern) and determines a threshold that makes it easier for biometric authentication to succeed (step S403).On the other hand, if the behavior pattern for the predetermined period does not match the past behavior pattern (step S402: NO), the threshold determination unit 230 determines that the first user is unlikely to be the person, and determines a threshold that makes it harder for biometric authentication to succeed (step S404).

[0067] Next, the threshold changing unit 200 changes the threshold used by the biometric authentication unit 110 to the threshold determined by the threshold determining unit 230 (step S405).

[0068] (Technical Effects) Next, the technical effects obtained by the information processing system 10 according to the fourth embodiment will be described.

[0069] 8 and 9, in the information processing system 10 according to the fourth embodiment, the threshold value for biometric authentication is changed depending on the behavioral pattern of the user. In this way, it is possible to change the likelihood of success of biometric authentication based on the identity of the first user estimated from the behavioral pattern. As a result, it is possible to perform biometric authentication with higher accuracy, and it is possible to prevent fraud such as impersonation, for example.

[0070] Fifth Embodiment An information processing system 10 according to the fifth embodiment will be described with reference to Figures 10 and 11. The fifth embodiment differs from the first to fourth embodiments described above only in part of its configuration and operation, and other parts may be the same as the first to fourth embodiments. Therefore, the following will describe in detail the parts that differ from the embodiments already described, and will omit a description of other overlapping parts as appropriate.

[0071] (Functional configuration) First, the functional configuration of the information processing system 10 according to the fifth embodiment will be described with reference to Fig. 10. Fig. 10 is a block diagram showing the functional configuration of the information processing system according to the fifth embodiment. Note that in Fig. 10, the same elements as those shown in Fig. 2 are denoted by the same reference numerals.

[0072] 10, the information processing system 10 according to the fifth embodiment is configured to include, as components for realizing its functions, a biometric authentication unit 110, a behavior history acquisition unit 120, a behavior history accumulation unit 130, a risk information generation unit 140, and a risk information output unit 150. The biometric authentication unit 110 according to the fifth embodiment particularly includes a motion information acquisition unit 111.

[0073] When performing biometric authentication of the first user, the operation information acquisition unit 111 detects whether or not the first user is wearing an object (for example, a mask, sunglasses, hat The motion information acquisition unit 111 is configured to detect gestures in the vicinity of a mask (e.g., a finger, a finger, a fingertip, a finger ...

[0074] The motion information acquired by the motion information acquisition unit 111 is used for biometric authentication processing by the biometric authentication unit 110. Note that the method of using the motion information in biometric authentication is not particularly limited. For example, the motion information may be used directly for authentication processing like biometric information, or may be used as auxiliary information for appropriately performing authentication processing.

[0075] (Biometric authentication operation) Next, the flow of operations when biometric authentication is performed by the information processing system 10 according to the fifth embodiment (hereinafter referred to as "biometric authentication operations") will be described with reference to Fig. 11. Fig. 11 is a flowchart showing the flow of biometric authentication operations of the information processing system according to the fifth embodiment.

[0076] 11, in the biometric authentication operation by the information processing system 10 according to the fifth embodiment, first, the biometric authentication unit 110 acquires biometric information of the first user (step S501). Then, the biometric authentication unit 110 performs biometric authentication using the acquired biometric information (step S502). Note that if the biometric authentication is successful at this stage (step S502: YES), the subsequent processes are omitted, and the series of biometric authentication operations ends (i.e., no process related to the motion information is executed).

[0077] On the other hand, if the biometric authentication fails (step S502: NO), the motion information acquisition unit 111 detects gestures around the obstruction and acquires motion information (step S503). Then, the biometric authentication unit 110 compares the acquired motion information with pre-registered motion information (step S504). The motion information to be compared here is registered according to the motions performed by each user when registering the user.

[0078] Next, the biometric authentication unit 110 creates a candidate list based on the result of matching the motion information (step S505). Specifically, the biometric authentication unit 110 creates a list of users whose motion information matches (i.e., users who have registered gestures similar to the gesture detected this time). Then, the biometric authentication unit 110 narrows down the authentication targets to the users included in the candidate list and performs biometric authentication again (step S506). The biometric authentication here is performed using the biometric information acquired in step S501. information Alternatively, the above-mentioned biometric information may be acquired using biometric information different from that of the previous one (for example, by acquiring biometric information from a newly captured image).

[0079] In the above example, the case where the motion information is used as an auxiliary after the biometric authentication fails is described. However, the authentication process using the motion information may be performed from the beginning. For example, two-factor authentication using both the biometric information and the motion information may be performed in the initial stage. Furthermore, the liveness may be determined from the gesture or a motion accompanying the gesture.

[0080] (Technical Effects) Next, the technical effects obtained by the information processing system 10 according to the fifth embodiment will be described.

[0081] 10 and 11, in the information processing system 10 according to the fifth embodiment, in the biometric authentication operation, motion information acquired by detecting a gesture performed around an obstruction is used. In this way, even if the first user is wearing a obstruction, the presence of the obstruction is used for gesture detection, making it possible to perform biometric authentication with high accuracy.

[0082] Sixth Embodiment An information processing system 10 according to a sixth embodiment will be described with reference to Figures 12 and 13. The sixth embodiment differs from the fifth embodiment described above only in some configurations and operations, and other parts may be the same as the fifth embodiment. Therefore, the following will describe in detail the parts that differ from the embodiments already described, and will omit a description of other overlapping parts as appropriate.

[0083] (Functional configuration) First, the functional configuration of the information processing system 10 according to the sixth embodiment will be described with reference to Fig. 12. Fig. 12 is a block diagram showing the functional configuration of the information processing system according to the sixth embodiment. In Fig. 12, the same elements as those shown in Fig. 10 are denoted by the same reference numerals.

[0084] 12, the information processing system 10 according to the sixth embodiment is configured to include, as components for realizing its functions, a biometric authentication unit 110, a behavioral history acquisition unit 120, a behavioral history accumulation unit 130, a risk information generation unit 140, and a risk information output unit 150. The biometric authentication unit 110 according to the sixth embodiment particularly includes a shielding object information acquisition unit 112.

[0085] The obstructing object information acquisition unit 112 is configured to detect at least one of a change in the surface area and a position of an obstructing object partially covering the face of the first user when performing biometric authentication of the first user, and acquire obstructing object information corresponding to the change in the obstructing object. The obstructing object information acquisition unit 112 may include, for example, a camera, and may detect at least one of a change in the surface area and a position of the mask when the mask is moved down. The obstructing object information acquisition unit 112 may detect at least one of a change in the surface area and a position of the obstructing object based on, for example, an inter-frame difference between a plurality of images.

[0086] The obstruction information acquired by the obstruction information acquisition unit 112 is used in the biometric authentication process by the biometric authentication unit 110. Note that the method of using the obstruction information in the biometric authentication is not particularly limited. For example, the obstruction information may be used directly in the authentication process like biometric information, or may be used as auxiliary information for appropriately performing the authentication process.

[0087] (Biometric authentication operation) Next, the flow of biometric authentication operation by the information processing system 10 according to the sixth embodiment will be described with reference to Fig. 13. Fig. 13 is a flowchart showing the flow of biometric authentication operation by the information processing system according to the sixth embodiment. Note that in Fig. 13, the same processes as those shown in Fig. 11 are denoted by the same reference numerals.

[0088] 13, in the biometric authentication operation by the information processing system 10 according to the sixth embodiment, the biometric authentication unit 110 first acquires biometric information of the first user (step S501). Then, the biometric authentication unit 110 performs biometric authentication using the acquired biometric information (step S502). If the biometric authentication is successful at this stage (step S502: YES), the subsequent processes are omitted, and the series of biometric authentication operations ends (i.e., no process related to the motion information is executed).

[0089] On the other hand, if the biometric authentication fails (step S502: NO), the obstructing object information acquisition unit 112 detects a change in the surface area or position of the obstructing object and acquires the obstructing object information (step S601). Then, the biometric authentication unit 110 compares the acquired obstructing object information with pre-registered obstructing object information (step S602). The obstructing object information to be compared here is assumed to be registered according to the actions performed by each user when registering the user.

[0090] Next, the biometric authentication unit 110 creates a candidate list based on the result of matching the obstruction information (step S505). Specifically, the biometric authentication unit 110 creates a list of users whose behavior information matches (i.e., users who have registered behaviors that result in similar changes to the obstruction change detected this time). Then, the biometric authentication unit 110 narrows down the authentication targets to the users included in the candidate list and performs biometric authentication again (step S506). The biometric authentication here is performed using the biometric information acquired in step S501. information Alternatively, the above-mentioned biometric information may be acquired using biometric information different from that of the previous one (for example, by acquiring biometric information from a newly captured image).

[0091] In the above example, the case where the obstruction information is used as a supplementary method after biometric authentication fails has been described. However, the authentication process may be performed using the motion information from the beginning. For example, two-factor authentication using both the biometric information and the obstruction information may be performed in the initial stage. Furthermore, liveness determination may be performed based on the motion when changing the obstruction or a motion accompanying such a motion.

[0092] (Technical Effects) Next, the technical effects obtained by the information processing system 10 according to the sixth embodiment will be described.

[0093] 12 and 13, in the information processing system 10 according to the sixth embodiment, the biometric authentication operation uses the obstruction information acquired by detecting a change in the obstruction. In this way, even if the first user is wearing the obstruction, the movement of the obstruction can be utilized for authentication, thereby enabling accurate biometric authentication.

[0094] Seventh Embodiment An information processing system 10 according to the seventh embodiment will be described with reference to Figures 14 to 16. The seventh embodiment differs only in part of the configuration and operation from the first to sixth embodiments described above, and other parts may be the same as the first to sixth embodiments. Therefore, the following will describe in detail the parts that differ from the embodiments already described, and will omit a description of other overlapping parts as appropriate.

[0095] (Functional configuration) First, the functional configuration of the information processing system 10 according to the seventh embodiment will be described with reference to Fig. 14. Fig. 14 is a block diagram showing the functional configuration of the information processing system according to the seventh embodiment. In Fig. 14, the same elements as those shown in Fig. 2 are denoted by the same reference numerals.

[0096] As shown in FIG. 14, the information processing system 10 according to the seventh embodiment is configured to include, as components for realizing its functions, a biometric authentication unit 110, a behavioral history acquisition unit 120, a behavioral history accumulation unit 130, a risk information generation unit 140, a risk information output unit 150, and a factor determination unit 300. The factor determination unit 300 includes an authentication history accumulation unit 310, a determination processing unit 320, and a determination result output unit 330. The authentication history accumulation unit 310 may be realized by, for example, the storage device 14 (see FIG. 1) described above. The determination processing unit 320 and the determination result output unit 330 may each be a processing block realized by, for example, the processor 11 (see FIG. 1) described above.

[0097] The authentication history storage unit 310 is configured to be able to store past authentication histories from the biometric authentication unit 110. The authentication history storage unit 310 is configured to store, as history, information indicating the success or failure of authentication as well as values used in authentication (for example, the degree of match of feature amounts, etc.).

[0098] The judgment processing unit 320 is configured to be able to use the past authentication history stored in the authentication history storage unit 310 to determine whether the cause of rejection of the person in biometric authentication is due to the input conditions of the biometric information (e.g., the device or environment that reads the biometric information) or due to changes in the biometric information over time (e.g., changes in the face due to aging, etc.).

[0099] The determination result output unit 330 is configured to be able to output the determination result by the determination processing unit 320 (i.e., factors that cause false rejection in biometric authentication). The determination result output unit 330 may output a result that identifies one of the factors that cause false rejection, or may output information (e.g., percentage information) that indicates the possibility that the factor that causes false rejection is the input conditions of the biometric information and the possibility that the factor that causes false rejection is a change over time in the biometric information. Furthermore, the determination result output unit 330 may be configured to be able to output instruction information for executing specific processing according to the determination result. For example, the determination result output unit 330 may be configured to output information for executing processing to improve the factors that cause false rejection.

[0100] (Factor determination operation) Next, the flow of the operation of determining the cause of an authentication error by the information processing system 10 according to the seventh embodiment (hereinafter referred to as "cause determination operation") will be described with reference to Fig. 15. Fig. 15 is a flowchart showing the flow of the cause determination operation of the information processing system according to the seventh embodiment. Note that the cause determination operation may be performed when an actual false rejection occurs, or may be performed when it is determined that there is a high possibility that false rejection will occur.

[0101] As shown in FIG. 15, in the factor determination operation by the information processing system 10 according to the seventh embodiment, first, the determination processing unit 320 acquires past authentication history from the authentication history accumulation unit 310 (step S701).

[0102] Next, the determination processing unit 320 determines the cause of false rejection from the acquired past authentication history (step S702). The determination processing unit 320 may determine the cause of false rejection based on, for example, a change trend in the authentication history. A more detailed determination method will be described later with a specific example.

[0103] Next, the determination result output unit 330 outputs the determination result of the determination processing unit 320 (step S703). The determination result output unit 330 may perform the output using the output device 16 described above, for example.

[0104] When the cause of false rejection is the input conditions of the biometric information, the determination result output unit 330 may output information that prompts the user to change the input conditions of the biometric information. For example, the determination result output unit 330 may output information that prompts the user to change the camera orientation or lighting, or to replace the device itself. Furthermore, when the cause of false rejection is a change in the biometric information over time, the determination result output unit 330 may output information that prompts the user to update the biometric information. For example, the determination result output unit 330 may output information that prompts the user to take a new photo to be used for biometric authentication.

[0105] (Specific judgment examples) Next, a specific example of the determination method in the factor determination operation described above will be described with reference to Fig. 16. Fig. 16 is a graph showing an example of authentication history information handled by the information processing system according to the seventh embodiment.

[0106] In the example shown in Figure 16, authentication is determined to be successful when the similarity of the biometric information (i.e., the similarity between the biometric information acquired for authentication and the registered biometric information) exceeds the matching threshold. As can be seen from the figure, the similarity of the biometric information decreases over time and approaches the matching threshold. In such a situation, there is a high possibility of false rejection.

[0107] In the example shown in FIG. 16, the similarity decreases gradually and steadily. In such a case, it can be determined that the cause of false rejection is likely to be a change in biometric information over time. On the other hand, if the cause is the input conditions of the biometric information, it is estimated that the similarity changes relatively sharply. Therefore, in such a case, it can be determined that the cause of false rejection is likely to be a change in biometric information over time.

[0108] The above-described determination method is merely an example, and other criteria may be used to determine the cause of false rejection. Specifically, information for linking the change trend of the authentication history with the cause of false rejection may be registered in advance.

[0109] (Technical Effects) Next, the technical effects obtained by the information processing system 10 according to the seventh embodiment will be described.

[0110] As described with reference to Figures 14 to 16, in the information processing system 10 according to the seventh embodiment, factors that cause false rejection are determined based on past authentication history. This makes it possible to quickly and accurately identify factors that cause false rejection. Therefore, it is possible to take measures to prevent false rejection from occurring, and to prevent a deterioration in authentication accuracy.

[0111] Eighth Embodiment An information processing system 10 according to the eighth embodiment will be described with reference to Figures 17 to 19. The eighth embodiment differs only in part of the configuration and operation from the first to seventh embodiments described above, and other parts may be the same as the first to seventh embodiments. Therefore, the following will describe in detail the parts that differ from the embodiments already described, and will omit a description of other overlapping parts as appropriate.

[0112] (Functional configuration) First, the functional configuration of the information processing system 10 according to the eighth embodiment will be described with reference to Fig. 17. Fig. 17 is a block diagram showing the functional configuration of the information processing system according to the eighth embodiment. In Fig. 17, the same elements as those shown in Fig. 2 are denoted by the same reference numerals.

[0113] As shown in Fig. 17, the information processing system 10 according to the eighth embodiment is configured to include, as components for realizing its functions, a biometric authentication unit 110, a behavioral history acquisition unit 120, a behavioral history accumulation unit 130, a risk information generation unit 140, a risk information output unit 150, a body temperature display unit 410, and a display mode change unit 420. The body temperature display unit 410 may be realized by, for example, the above-mentioned output device 16 (see Fig. 1). The display mode change unit 420 may be a processing block realized by, for example, the above-mentioned processor 11 (see Fig. 1).

[0114] The body temperature display unit 410 is configured to be able to display the body temperature of the first user acquired as behavior history information. The body temperature display unit 410 may be configured to be able to display an image of the first user and other user information (for example, information such as name, age, attributes, etc.) in addition to the body temperature of the first user. The body temperature display unit 410 is installed so that the body temperature of the first user can be visually recognized by users other than the first user (for example, subsequent users) and a system administrator, for example.

[0115] The display mode change unit 420 is configured to be able to change the display mode of the body temperature display unit 410 depending on the body temperature measurement result. The display mode change unit 420 may be configured to change the display mode of the body temperature display unit 410 depending on whether the measured body temperature is equal to or higher than a predetermined value, for example. The predetermined value here may be, for example, a threshold value for determining fever. The display mode change unit 420 may be configured to select a display mode depending on the body temperature measurement result from a plurality of pre-registered display modes. Details of the display modes will be described later with specific examples.

[0116] (Temperature measurement operation) Next, the flow of operations when measuring and displaying body temperature by the information processing system 10 according to the eighth embodiment (hereinafter referred to as "body temperature measurement operations") will be described with reference to Fig. 18. Fig. 18 is a flowchart showing the flow of body temperature measurement operations by the information processing system according to the eighth embodiment.

[0117] 18, in the body temperature measurement operation by the information processing system 10 according to the eighth embodiment, first, the body temperature of the first user is measured (step S801). Then, the display mode change unit 420 determines whether the measured body temperature of the first user is equal to or higher than a predetermined value (step S802).

[0118] If the first user's body temperature is not equal to or greater than the predetermined value (step S802: NO), the display mode change unit 420 changes the display mode of the body temperature display unit 410 to display it in a normal UI. On the other hand, if the first user's body temperature is equal to or greater than the predetermined value (step S802: YES), the display mode change unit 420 changes the display mode of the body temperature display unit 410 to display it in a privacy-conscious UI (step S804). The privacy-conscious UI may be, for example, a display mode that displays less information than the normal UI. Specifically, the privacy-conscious UI may not directly display the first user's body temperature.

[0119] In the case of a privacy-conscious UI, the body temperature display unit 410 notifies the user of the measured body temperature via a separate route (step S805). For example, the body temperature display unit 410 does not directly display information about the measured body temperature, but notifies the user of the measurement result by sending the information to a separate terminal to which the information is to be notified (specifically, a terminal that can only be viewed by the person to whom the information should be notified).

[0120] (Specific display examples) Next, a specific example of the display mode in the above-mentioned body temperature measurement operation will be described with reference to Fig. 19. Fig. 19 is a plan view showing an example of the display of the measurement result by the information processing system according to the eighth embodiment.

[0121] FIG. 19(a) shows an example of a display using the normal UI. In the normal UI, the first user's name and body temperature are displayed above the image of the first user. While the normal UI can display measurement results in an easy-to-understand manner, there is a risk that the first user's personal information may be known to people other than the first user. This type of display mode is not desirable when, for example, the first user has a fever (e.g., when there is a high risk of infection with an infectious disease).

[0122] FIG. 19(b) shows an example of a display using a privacy-conscious UI. Unlike a normal UI, a privacy-conscious UI does not display personal information such as the first user's image, name, or body temperature. Instead, a message saying "The measurement results have been sent to your device. Please check" is displayed. The measured body temperature may be sent to, for example, a smartphone owned by the first user. At this time, a push notification may be sent. Such a privacy-conscious UI allows the first user to be notified of the measured body temperature without revealing the first user's personal information to others.

[0123] In the above-described privacy-conscious UI, all of the information displayed in the normal UI is not displayed, but for example, a display mode may be adopted in which some information is displayed as is and only information closely related to privacy is not displayed. Also, in the above example, a configuration in which two display modes (i.e., the normal UI and the privacy-conscious UI) are used depending on the body temperature is described, but for example, three or more display modes may be used. For example, a display mode in which the displayed information gradually decreases as the body temperature increases may be adopted.

[0124] (Technical Effects) Next, the technical effects obtained by the information processing system 10 according to the eighth embodiment will be described.

[0125] 17 to 19, in the information processing system 10 according to the eighth embodiment, the UI for displaying the body temperature is changed based on the body temperature measurement result. In this way, it is possible to perform an appropriate display that takes into consideration the privacy of the first user.

[0126] The scope of each embodiment also includes a processing method in which a program that operates the configuration of each embodiment to realize the functions of the above-described embodiments is recorded on a recording medium, the program recorded on the recording medium is read as code, and the program is executed on a computer. In other words, a computer-readable recording medium is also included in the scope of each embodiment. Furthermore, each embodiment includes not only a recording medium on which the above-described program is recorded, but also the program itself.

[0127] Examples of recording media that can be used include floppy disks, hard disks, optical disks, magneto-optical disks, CD-ROMs, magnetic tapes, non-volatile memory cards, and ROMs. The scope of each embodiment is not limited to programs recorded on the recording media that execute processing by themselves, but also includes programs that run on an OS in cooperation with other software and functions of an expansion board to execute processing.

[0128] <Additional Notes> The above-described embodiment may be further described as follows, but is not limited to the following.

[0129] (Appendix 1) The information processing system described in Appendix 1 is an information processing system including an authentication means for performing biometric authentication using biometric information of a first user, an acquisition means for acquiring information regarding the behavioral history of the first user if the biometric authentication is successful, a storage means for storing information regarding the behavioral history, a generation means for generating risk information indicating risks regarding the first user based on the stored information regarding the behavioral history, and an output means for outputting the risk information of the first user in response to a request from a second user different from the first user.

[0130] (Appendix 2) The information processing system described in Supplementary Note 2 is the information processing system described in Supplementary Note 1, wherein the output means outputs the risk information of the first user depending on the result of a matching process using biometric information.

[0131] (Appendix 3) The information processing system described in Appendix 3 is the information processing system described in Appendix 1 or 2, wherein the information regarding the behavioral history includes at least one of the first user's movement history, environmental information corresponding to the movement history, human body information, and conversation history.

[0132] (Appendix 4) The information processing system described in Appendix 4 is an information processing system described in any one of Appendixes 1 to 3, further comprising a threshold change means for changing the biometric authentication threshold so that the biometric authentication is less likely to be successful when the behavioral pattern of the first user over a predetermined period of time does not match the past behavioral pattern of the first user.

[0133] (Appendix 5) The information processing system described in Appendix 5 is an information processing system described in any one of Appendixes 1 to 4, in which the authentication means performs the biometric authentication using, in addition to the biometric information of the first user, movement information obtained by detecting gestures around an obstruction that partially covers the face of the first user.

[0134] (Appendix 6) The information processing system described in Appendix 6 is an information processing system described in any one of Appendixes 1 to 5, in which the authentication means performs the biometric authentication using, in addition to the biometric information of the first user, obstruction change information obtained by detecting a change in the surface area or position of an obstruction that partially covers the face of the first user.

[0135] (Appendix 7) The information processing system described in Supplementary Note 7 is the information processing system described in any one of Supplementary Notes 1 to 6, further comprising a factor determination means for determining, based on the authentication history of the biometric authentication, whether the cause of the rejection of the person in the biometric authentication is due to the input conditions of the biometric information or due to changes in the biometric information over time.

[0136] (Appendix 8) The information processing system described in Appendix 8 is an information processing system described in any one of Appendixes 1 to 7, further comprising a display means for displaying the body temperature of the first user acquired as information regarding the behavioral history, and a display mode change means for changing the display mode of the display means based on the body temperature measurement results.

[0137] (Appendix 9) The information processing method described in Appendix 9 is an information processing method executed by at least one computer, which performs biometric authentication using biometric information of a first user, and if the biometric authentication is successful, obtains information regarding the behavioral history of the first user, accumulates information regarding the behavioral history, generates risk information indicating risks regarding the first user based on the accumulated information regarding the behavioral history, and outputs the risk information of the first user in response to a request from a second user different from the first user.

[0138] (Appendix 10) The recording medium described in Appendix 10 is a recording medium having recorded thereon a computer program that causes at least one computer to execute an information processing method, which includes performing biometric authentication using biometric information of a first user, and if the biometric authentication is successful, obtaining information regarding the first user's behavioral history, accumulating information regarding the behavioral history, generating risk information indicating risks regarding the first user based on the accumulated information regarding the behavioral history, and outputting the risk information of the first user in response to a request from a second user different from the first user.

[0139] (Appendix 11) The computer program described in Appendix 11 is a computer program that causes at least one computer to execute an information processing method, which performs biometric authentication using biometric information of a first user, and if the biometric authentication is successful, acquires information regarding the first user's behavioral history, accumulates information regarding the behavioral history, generates risk information indicating risks regarding the first user based on the accumulated information regarding the behavioral history, and outputs the risk information of the first user in response to a request from a second user different from the first user.

[0140] This disclosure may be modified as appropriate within the scope that does not contradict the gist or idea of the invention that can be read from the claims and the entire specification, and information processing systems, information processing methods, and recording media that involve such modifications are also included in the technical idea of this disclosure. [Explanation of symbols]

[0141] 10 Information Processing Systems 11 processors 14 Storage device 18 Sensors 110 Biometric Authentication Department 111 Operation information acquisition unit 112 Obstruction information acquisition unit 120 Behavioral History Acquisition Unit 130 Behavioral History Storage Unit 140 Risk Information Generation Department 150 Risk information output unit 151 Collation Unit 200 Threshold change unit 210 Behavioral Pattern Storage Unit 220 Behavioral Pattern Comparison Section 230 Threshold determination unit 300 Factor determination unit 310 Authentication history storage unit 320 Judgment processing unit 330 Judgment result output unit 410 Body temperature display section 420 Display mode change unit

Claims

1. an authentication means for performing biometric authentication using biometric information of the first user; an acquisition means for acquiring information about the behavior history of the first user when the biometric authentication is successful; a storage means for storing information about the behavioral history; generating means for generating risk information indicating a risk related to the first user based on information about the accumulated behavioral history; an output means for outputting the risk information of the first user in response to a request from a second user different from the first user; a threshold changing means for changing the threshold of the biometric authentication so that the biometric authentication is less likely to succeed when the behavior pattern of the first user for a predetermined period of time does not match the past behavior pattern of the first user; An information processing system comprising:

2. The device further comprises a matching means capable of performing a matching process to identify the first user using biometric information of the first user input by a second user; The information processing system according to claim 1 , wherein the output means outputs the risk information of the first user in accordance with a result of a matching process using the biometric information.

3. The information processing system according to claim 1 , wherein the information relating to the behavior history includes at least one of a movement history of the first user, environmental information corresponding to the movement history, human body information, and a conversation history.

4. 4. The information processing system according to claim 1, wherein the authentication means performs the biometric authentication using, in addition to the biometric information of the first user, motion information obtained by detecting gestures in the vicinity of an obstruction that partially covers the face of the first user.

5. The information processing system according to any one of claims 1 to 4, wherein the authentication means performs the biometric authentication using, in addition to the biometric information of the first user, obstruction change information obtained by detecting a change in the surface area or position of an obstruction that partially covers the face of the first user.

6. 6. The information processing system according to claim 1, further comprising a factor determination means for determining, based on an authentication history of the biometric authentication, whether a factor causing rejection of the person in the biometric authentication is due to an input condition of the biometric information or due to a change in the biometric information over time.

7. a display means for displaying the body temperature of the first user acquired as information regarding the behavior history; a display mode changing means for changing the display mode of the display means based on the result of the body temperature measurement; The information processing system according to claim 1 , further comprising:

8. 1. An information processing method executed by at least one computer, comprising: performing biometric authentication using biometric information of the first user; If the biometric authentication is successful, information about the behavior history of the first user is acquired; Accumulating information about the behavioral history; generating risk information indicating risks related to the first user based on information related to the accumulated behavioral history; outputting the risk information of the first user in response to a request from a second user different from the first user; changing the threshold value of the biometric authentication so that the biometric authentication is less likely to succeed when the behavior pattern of the first user for a predetermined period of time does not match the past behavior pattern of the first user; Information processing methods.

9. At least one computer performing biometric authentication using biometric information of the first user; If the biometric authentication is successful, information about the behavior history of the first user is acquired; Accumulating information about the behavioral history; generating risk information indicating risks related to the first user based on information related to the accumulated behavioral history; outputting the risk information of the first user in response to a request from a second user different from the first user; changing the threshold value of the biometric authentication so that the biometric authentication is less likely to succeed when the behavior pattern of the first user for a predetermined period of time does not match the past behavior pattern of the first user; A computer program that executes an information processing method.

Images