Personal identification device and personal identification method

Abstract

When personal identification information read from an IC chip contains characters belonging to a special character group such as variant characters, the possibility that a user U will abandon the personal identification procedure is reduced. [Solution] The identity verification device of the present disclosure includes an acquisition unit 230a, a determination unit 230b, and a first transmission unit 230c. The acquisition unit 230a acquires character information from a terminal that reads character information from a recording medium embedded in a card on which the user's name and address are stored and on which the user's name, address, and facial photograph are printed. The determination unit 230b determines whether the character information acquired by the acquisition unit 230a includes a character belonging to a special character group. If the determination result of the determination unit 230b is positive, the first transmission unit 230c transmits a first notification to the terminal that guides the user to a procedure for identity verification using method (e).

Description

[Technical Field]

[0001] The present disclosure relates to an identity verification device and an identity verification method. [Background technology]

[0002] An IC chip is embedded in a My Number card, a driver's license, etc. This IC chip stores character information used for identity verification, such as a user's name and address. The character information may be read from this IC chip and used for identity verification. For example, Patent Document 1 discloses an identity verification technology that compares information read from the IC chip with information declared by the user. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 2024-002779 Summary of the Invention [Problem to be solved by the invention]

[0004] However, if the character information read from the IC chip contains characters belonging to special character groups such as variant characters, the system may automatically reject the match, causing the user to abandon the identity verification procedure. Special characters are characters that can cause garbled characters. Examples of variant characters include old characters, colloquial characters, and abbreviated characters. [Means for solving the problem]

[0005] An identity verification device according to one embodiment of the present disclosure has a recording medium storing character information representing at least a user's name and address, and includes an acquisition unit that acquires the character information from a terminal that reads the character information from the recording medium on a card on which the character information is printed by communicating with the terminal; a determination unit that determines whether the character information acquired by the acquisition unit includes a character belonging to a special character group; and a first transmission unit that, if the determination result of the determination unit is positive, sends to the terminal a first notification that guides the user to a procedure for identity verification based on an image of the card face.

[0006] Furthermore, an identity verification method according to one embodiment of the present disclosure includes: acquiring character information from a terminal that reads the character information from a recording medium stored on a card on which the character information is printed, the terminal having the recording medium storing character information representing at least the user's name and address; determining whether the character information acquired from the terminal includes a character belonging to a special character group; and, if the determination result is positive, sending a first notification to the terminal that guides the user to a procedure for identity verification based on an image of the card face. [Effects of the Invention]

[0007] According to the present disclosure, even if the character information read from the recording medium contains special characters, the user can be guided to a procedure for identity verification that is not based on the character information, thereby reducing the possibility that the user will abandon the identity verification process. [Brief explanation of the drawings]

[0008] [Figure 1] 1 is a block diagram showing an example configuration of a communication system 1 including an identity verification device 20 according to an embodiment of the present disclosure. [Figure 2] FIG. 2 is a diagram for explaining a card 30. [Figure 3] 1 is a block diagram showing an example of the configuration of a terminal 10. FIG. [Figure 4]10 is a diagram showing an example of a UI screen displayed on a display device 140 of the terminal 10. FIG. [Figure 5] 10 is a diagram showing an example of a UI screen displayed on a display device 140 of the terminal 10. FIG. [Figure 6] 10 is a diagram showing an example of a UI screen displayed on a display device 140 of the terminal 10. FIG. [Figure 7] FIG. 2 is a block diagram showing an example of the configuration of a personal verification device 20. [Figure 8] FIG. 2 is a sequence diagram showing the flow of processing in the identity verification method of the present embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0009] (A. Embodiment) Fig. 1 is a block diagram showing a configuration of a communication system 1 including an identity verification device 20 according to an embodiment of the present disclosure. As shown in Fig. 1, the communication system 1 includes a terminal 10 in addition to the identity verification device 20. As shown in Fig. 1, the terminal 10 and the identity verification device 20 are connected to a communication network NW by wire or wirelessly. The communication network NW is, for example, the Internet.

[0010] The terminal 10 is a computer device equipped with a communication function for communicating with other devices via a communication network NW, a program execution function, and a near field communication (NFC) function. The terminal 10 in this embodiment is a smartphone, but may also be a tablet terminal, a notebook personal computer, or the like. Although one terminal 10 is illustrated in FIG. 1, a plurality of terminals 10 may be included in the communication system 1.

[0011] A user U who uses the terminal 10 possesses a card 30 for identity verification of the user U. The card 30 is an IC card in which a recording medium 40 recording identity verification information is embedded. Specific examples of identity verification information include character information representing the name of the user U who possesses the card 30, character information representing the address of the user U, and character information representing the date of birth of the user U. Specific examples of the card 30 include a My Number card and a driver's license. Note that reading identity verification information from the recording medium 40 is premised on successful authentication using a personal identification number or the like. The identity verification information in this embodiment is character information representing the name of the user U, character information representing the address of the user U, and character information representing the date of birth of the user U, but it is sufficient if it is character information representing at least the name and address of the user U.

[0012] FIG. 2 shows an example of the front surface G1 and the back surface G2 of the card 30. As shown in FIG. 2, the front surface G1 of the card 30 is printed with text information representing the name of the user U who owns the card 30, text information representing the address, text information representing the date of birth, and a photograph of the user U. The front surface G1 of the card 30 is an example of a card face in the present disclosure. As shown in FIG. 2, the name of the user U is "○○●〇." 〇 represents a common kanji character, and ● represents a character belonging to a special character group different from the common kanji character. Specific examples of characters belonging to the special character group include variant characters. A variant character is a character that has a different style from a common kanji character with the same meaning. Specific examples of variant characters include old characters, colloquial characters, and abbreviated characters. As shown in FIG. 2, a recording medium 40 is embedded in the back surface G2 of the card 30.

[0013] The card 30 can be used, for example, to open an account at a financial institution such as a bank or to verify the identity of a user U in a public personal authentication system (JPKI). Identity verification using the card 30 can be performed in three ways: the following methods (e) and (f), and identity verification using public personal authentication. Method (e) is a method of verifying the identity of a user based on the appearance of the user undergoing identity verification and an identity verification document containing the user's identity verification information. Identity verification using method (e) using the card 30 involves sending an image of the user U's appearance (e.g., a facial photograph) and a captured image of the face of the card 30 to the authentication side, and visually comparing the image with a name or other information previously registered on the authentication side. Method (f) is a method of verifying the identity of a user undergoing identity verification by sending an image of the user's appearance and identity verification information read from the recording medium 40 of the card 30 to the authentication side and comparing the image with the previously registered information. Public personal authentication is a method of verifying the identity of a user using a signature digital certificate installed on the My Number card.

[0014] The personal identification device 20 in Fig. 2 is a device for performing personal identification by the above-mentioned method (e) or (f), and is used by a person in charge X who visually checks the personal identification against pre-registered information. For example, in personal identification by method (e), the personal identification device 20 displays on a display device a facial image sent from the party to be authenticated and a captured image of the personal identification document, and the person in charge X visually checks the facial image displayed on the display device and the captured image of the personal identification document against the pre-registered information, thereby realizing personal identification. In addition, in personal identification by method (f), the personal identification device 20 displays on a display device a facial image sent from the party to be authenticated and personal identification information, and the person in charge X visually checks the facial image displayed on the display device and the personal identification information against the pre-registered information, thereby realizing personal identification.

[0015] The terminal 10 is pre-installed with a program PR1 for providing a user with a payment service via a communication network NW. In this payment service, the aforementioned identity verification is performed prior to the provision of the service. Conventionally, identity verification programs installed on computers with near-field wireless communication capabilities, such as the terminal 10, have often supported the aforementioned method (F) but not the method (E). However, identity verification using the method (F) has presented a problem in that, if the character information constituting the identity verification information contains variant characters, garbled characters occur when the identity verification information is displayed on a display device at the authenticating side, hindering identity verification. The terminal 10 and identity verification device 20 of this embodiment are configured to guide the authenticatee to identity verification using the method (E) when the character information constituting the identity verification information contains variant characters, which is a feature of the present disclosure. The following description focuses on the terminal 10 and identity verification device 20, which prominently demonstrate the features of the present disclosure.

[0016] Fig. 3 is a block diagram showing an example configuration of the terminal 10. As shown in Fig. 3, the terminal 10 includes a communication device 110, a storage device 120, a processing device 230, a display device 140, an input device 150, an imaging device 160, a reading device 170, and a bus 180 that interconnects these devices.

[0017] The communication device 110 includes, for example, a wireless communication circuit. The communication device 110 communicates with other devices wirelessly via a communication network NW. A specific example of another device that communicates with the communication device 110 is the personal identification device 20.

[0018] The display device 140 includes a liquid crystal display and a drive circuit for the liquid crystal display. The display device 140 displays various images under the control of the processing device 130. The input device 150 is, for example, a transparent touch sensor that covers the display area of ​​the display device 140. In this embodiment, the display device 140 and the input device 150 form a touch panel. The input device 150 detects a touch operation by the user U. The input device 150 provides operation content data representing the detected operation content to the processing device 130. By exchanging this operation content data, the operation performed by the user U on the input device 150 is transmitted to the processing device 130. The input device 150 may include an operator such as a numeric keypad, or may also include a pointing device such as a mouse.

[0019] The imaging device 160 is, for example, a camera including a CCD image sensor. Under the control of the processing device 130, the imaging device 160 captures an image within its imaging field of view and provides image data representing the captured image to the processing device 130. The imaging device 160 is used to capture an image of the user U's appearance. The reading device 170 includes an NFC interface. When the reading device 170 is held over the card 30, the reading device 170 communicates with the recording medium 40 via near-field wireless communication under the control of the processing device 130, and if authentication using a PIN or the like is successful, reads personal identification information from the recording medium 40. The reading device 170 provides the personal identification information read from the recording medium 40 to the processing device 130.

[0020] The storage device 120 is a recording medium readable by the processing device 130. The storage device 120 includes, for example, a nonvolatile memory and a volatile memory. The nonvolatile memory is, for example, a read-only memory (ROM), an erasable programmable read-only memory (EPROM), and an electrically erasable programmable read-only memory (EEPROM). The volatile memory is, for example, a random access memory (RAM). The storage device 120 stores a program PR1. The program PR1 is an example of an application program in the present disclosure.

[0021] The processing device 130 includes one or more central processing units (CPUs). The one or more CPUs are an example of one or more processors. Each of the processor and the CPU is an example of a computer. The processing device 130 reads the program PR1 from the storage device 120 when an instruction to execute the program PR1 is given by operating the input device 150. The processing device 130 then executes the program PR1 read from the storage device 120. There are two types of startup parameters for the program PR1: a first parameter that enables the use of the (f) method, and a second parameter that enables the use of the (e) method. When the user U manually instructs the start of execution of the program PR1, the first parameter is set as the startup parameter. The second parameter is set when the program PR1 is started using link information contained in an email, which will be described later.

[0022] The processing device 130, which has started executing the program PR1, first displays a UI screen GA on the display device 140 to notify the user of the benefits of identity verification. FIG. 4 is a diagram showing an example of the UI screen GA. Identity verification is premised on user registration on the authentication side. Therefore, if user registration on the authentication side has not been performed, the processing device 130 may display a UI screen GB on the display device 140, as shown in FIG. 5, which includes an error message notifying the user that "identity verification is premised on user registration on the authentication side."

[0023] When the first parameter described above is set as a startup parameter, the processing device 130, operating according to the program PR1, receives an instruction from the user U to perform identity verification and displays a screen prompting the user to capture a facial image and acquire identity verification information from the recording medium 40. After acquiring image data of the facial image and the identity verification information recorded on the recording medium 40, the processing device 130 transmits the acquired image data and identity verification information to the identity verification device 20. Then, upon receiving an ACK from the identity verification device 20, the display device 140 displays a UI screen GC shown in FIG. 6. As shown in FIG. 6, the UI screen GC includes a message indicating that additional verification may be required for some users. An instance where additional verification is required corresponds to an instance where the identity verification information includes a character belonging to a special character group. On the other hand, when the second parameter is set as the startup parameter, the processing device 130 operating according to the program PR1, upon receiving an instruction from the user U to perform identity verification, displays a screen prompting the user to take an image of the facial image and an image of the face of the card 30, and transmits image data of the acquired facial image and image data representing an image of the face of the card 30 to the identity verification device 20. The above is the configuration of the terminal 10.

[0024] Fig. 7 is a block diagram showing an example of the configuration of the identity verification device 20. As shown in Fig. 7, the identity verification device 20 includes a communication device 210, a storage device 220, a processing device 230, a display device 240, and a bus 260 that interconnects these devices.

[0025] The communication device 210 has a communication circuit and communicates with other devices wirelessly or via a wired connection via the communication network NW. A specific example of another device that communicates with the communication device 210 is the terminal 10. The display device 240, like the display device 140, includes a liquid crystal display and a drive circuit for the liquid crystal display. The display device 240 displays various images under the control of the processing device 230. The storage device 220, like the storage device 120, includes a non-volatile memory and a volatile memory. The non-volatile memory is, for example, a ROM, an EPROM, and an EEPROM. The volatile memory is, for example, a RAM. The storage device 220 stores the program PR2.

[0026] The processing device 230 includes one or more CPUs. The one or more CPUs are an example of one or more processors. Each of the processor and the CPU is an example of a computer. The processing device 230 reads the program PR2 from the storage device 220, for example, when the power (not shown) of the personal verification device 20 is turned on. The processing device 230 executes the program PR2 read from the storage device 220. The processing device 230 operating in accordance with the program PR2 functions as an acquisition unit 230a, a determination unit 230b, a first transmission unit 230c, a second transmission unit 230d, and a display control unit 230e.

[0027] The acquisition unit 230a communicates with the terminal 10 using the communication device 210, and thereby acquires from the terminal 10 an image of the user U's appearance and personal identification information read from the recording medium 40 using the reading device 170. If the determination result by the determination unit 230b is positive, the acquisition unit 230a further acquires an image of the user U's appearance and a captured image of the face of the card 30 from the terminal 10.

[0028] The determination unit 230b determines whether the personal identification information acquired by the acquisition unit 230a includes a character belonging to the special character group. Specifically, the determination unit 230b determines for each character whether the character belongs to the special character group based on the character code of each of the multiple characters constituting the character information represented by the personal identification information. For example, if the character code of a character belonging to the special character group is composed of the character code of a base character and a code indicating a variant character called a variant selector, the determination unit 230b determines that the character being determined belongs to the special character group if there is a variant selector. In this embodiment, if at least one of the multiple characters constituting the character information represented by the personal identification information is a character belonging to the special character group, the determination result of the determination unit 230b is positive.

[0029] If the determination result by the determination unit 230b is positive, i.e., if the identity verification information acquired by the acquisition unit 230a contains a character belonging to the special character group, the first transmission unit 230c uses the communication device 210 to send an email to the terminal 10, guiding the user U to identity verification using method (e). Link information for instructing the user U to launch the program PR1 is embedded in this email. The link information includes the second parameter described above. This email is an example of a first notification in the present disclosure.

[0030] The second transmission unit 230d, upon the acquisition of the personal identification information by the acquisition unit 230a, transmits to the terminal 10 a notification (the above-mentioned ACK) indicating that personal identification may be performed using the (E) method. As described above, when the terminal 10 receives the above-mentioned notification, it displays the above-mentioned UI screen GC on the display device 140. The notification indicating that personal identification may be performed using the (E) method is an example of a second notification in the present disclosure.

[0031] If the determination result of the determination unit 230b is positive, the display control unit 230e causes the display device 240 to display the image of the user U's appearance acquired by the acquisition unit 230a and the captured image of the face of the card 30. Unlike when personal identification information is displayed on the display device 240, when the captured image of the face of the card 30 is displayed on the display device 240, even if the name or the like printed on the face of the card 30 contains characters belonging to the special character group, the characters will not be garbled. Therefore, there is no problem with personal identification by method (e) based on the image of the user U's appearance displayed on the display device 240 and the captured image of the face of the card 30.

[0032] FIG. 8 is a sequence diagram showing the flow of processing in the personal identification method of this embodiment. When the user U starts the program PR1 on the terminal 10 and instructs to execute identity verification, the processing device 130 of the terminal 10 executes a first authentication process SA110. In the first authentication process SA110, the processing device 130 displays a screen prompting the user to take a facial image and acquire identity verification information from the recording medium 40, and transmits a communication message MES1 including image data of the acquired facial image and the identity verification information read from the recording medium 40 to the identity verification device 20.

[0033] The processing device 230 of the identity verification device 20, upon receiving the communication message MES1, functions as an acquisition unit 230a and executes a first acquisition process SB110. In the first acquisition process SB110, the processing device 230 acquires an image of the user U's appearance and identity verification information read from the recording medium 40 using the reading device 170. In a second transmission process SB120 subsequent to the first acquisition process SB110, the processing device 230 functions as a second transmission unit 230d and transmits to the terminal 10 a communication message (the above-mentioned ACK) MES2 indicating that identity verification using method (E) may be performed. Upon receiving the communication message MES2, the processing device 130 of the terminal 10 executes a result display process SA120 and displays a UI screen GC on the display device 140.

[0034] In the determination process SB130 executed in the identity verification device 20 subsequent to the second transmission process SB120, the processing device 230 functions as a determination unit 230b and determines whether or not the identity verification information acquired in the first acquisition process SB110 contains a character belonging to the special character group. If the determination result of the determination process SB130 is "negative," i.e., "No," the processing device 230 executes the identity verification process SB140 by the (f) method. On the other hand, if the determination result of the determination process SB130 is "positive," i.e., "Yes," the processing device 230 executes the first transmission process SB150. As described above, since the name of the user U contains a character belonging to the special character group, in this operation example, the determination result of the determination process SB130 is positive, and the first transmission process SB150 is executed.

[0035] In the first transmission process SB150, the processing device 230 functions as a first transmission unit 230c and transmits an email MES3 to the terminal 10, which guides the user U to identity verification by method (e). Link information is embedded in this email to instruct the user U to start the program PR1. The link information includes the second parameter described above.

[0036] When the processing device 130 of the terminal 10 is instructed to execute the program PR1 by selecting the link information in the email, it sets the second parameters included in the link information and starts executing the program PR1. Thereafter, the processing device 130 executes the second authentication process SA130 in response to an instruction from the user U to execute identity verification. In the second authentication process SA130, the processing device 130 displays a screen prompting the user to capture an image of the facial image and an image of the face of the card 30, and transmits a communication message MES4 including image data of the acquired facial image and image data representing an image of the face of the card 30 to the identity verification device 20.

[0037] Upon receiving the communication message MES4, the processing device 230 of the identity verification device 20 functions as an acquisition unit 230a and executes a second acquisition process SB160. In the second acquisition process SB160, the processing device 230 acquires an image of the user U's appearance and a captured image of the face of the card 30. In the authentication process SB170 by method (e) that follows the second acquisition process SB160, the processing device 230 functions as a display control unit 230e and causes the display device 240 to display the image of the user U's appearance and a captured image of the face of the card 30. The person in charge X visually compares the image of the appearance displayed on the display device 240 with the captured image of the identity verification document against pre-registered information, thereby performing identity verification. The above is the operation of this embodiment.

[0038] As described above, according to this embodiment, even if the identity verification information read from the recording medium 40 contains special characters, the identity verification will not be automatically denied, and the user U can be guided to the identity verification procedure of method (e), i.e., the identity verification procedure that is not based on the identity verification information read from the recording medium 40, thereby reducing the possibility that the user U will abandon the identity verification procedure.

[0039] (B: Transformation) The above embodiment can be modified as follows. (B-1: Variation 1) The second transmission unit 230d is not necessarily required and may be omitted. Furthermore, in the above embodiment, the program PR1 was pre-stored in the storage device 120 of the terminal 10, but the program PR1 may be manufactured or sold separately. When selling the program PR1, PR1 may be provided to a purchaser by writing it to a computer-readable recording medium such as a flash ROM and distributing it, or by downloading it via a telecommunications line. Similarly, the program PR2 may be manufactured or sold separately.

[0040] (B-2: Variation 2) The acquisition unit 230a, determination unit 230b, first transmission unit 230c, second transmission unit 230d, and display control unit 230e in the above embodiment may be configured as electronic circuits such as ASICs, and the personal identification device 20 may be configured by combining these electronic circuits.

[0041] (C:Other) (1) In the above-described embodiment, ROM and RAM are exemplified as storage device 120 and storage device 220, but storage device 120 and storage device 220 may also be a flexible disk, a magneto-optical disk (e.g., a compact disk, a digital versatile disk, a Blu-ray (registered trademark) disc), a smart card, a flash memory device (e.g., a card, a stick, a key drive), a CD-ROM (Compact Disc-ROM), a register, a removable disk, a hard disk, a floppy (registered trademark) disk, a magnetic strip, a database, a server, or other suitable storage medium.

[0042] (2) In the above-described embodiments, the described information, signals, etc. may be represented using any of a variety of different technologies. For example, data, instructions, commands, information, signals, bits, symbols, chips, etc. that may be referred to throughout the above description may be represented by voltages, currents, electromagnetic waves, magnetic fields or magnetic particles, optical fields or photons, or any combination thereof.

[0043] (3) In the above-described embodiment, input and output information may be stored in a specific location (for example, memory) or may be managed using a table. Input and output information may be overwritten, updated, or added to. Output information may be deleted. Input information may be transmitted to another device.

[0044] (4) In the above-described embodiment, the determination may be made based on a value represented by one bit (0 or 1), a Boolean value (true or false), or a comparison of numerical values ​​(e.g., comparison with a predetermined value).

[0045] (5) The order of the process procedures, sequences, flowcharts, etc. illustrated in the above-described embodiments may be rearranged unless inconsistent. For example, the methods described in this disclosure present elements of various steps using an example order, and are not limited to the particular order presented.

[0046] (6) Each function illustrated in FIG. 3 is realized by any combination of at least one of hardware and software. Similarly, each function illustrated in FIG. 7 is realized by any combination of at least one of hardware and software. Furthermore, the method of realizing each functional block is not particularly limited. That is, each functional block may be realized using a single device that is physically or logically coupled, or may be realized using two or more physically or logically separated devices that are connected directly or indirectly (for example, using wires, wirelessly, etc.) and these multiple devices. A functional block may be realized by combining the single device or the multiple devices with software.

[0047] (7) The programs exemplified in the above-described embodiments should be broadly construed to mean instructions, instruction sets, code, code segments, program code, programs, subprograms, software modules, applications, software applications, software packages, routines, subroutines, objects, executable files, threads of execution, procedures, functions, etc., regardless of whether they are called software, firmware, middleware, microcode, hardware description language, or by other names.

[0048] Software, instructions, information, etc. may also be transmitted or received over a transmission medium. For example, if software is transmitted from a website, server, or other remote source using wired technologies (such as coaxial cable, fiber optic cable, twisted pair, Digital Subscriber Line (DSL)), and / or wireless technologies (such as infrared, microwave), then these wired and / or wireless technologies are included within the definition of transmission media.

[0049] (8) In each of the foregoing embodiments, the terms "system" and "network" are used interchangeably.

[0050] (9) The information, parameters, etc. described in this disclosure may be expressed using absolute values, relative values ​​from a predetermined value, or corresponding other information.

[0051] (10) In the above-described embodiments, the terms "connected," "coupled," or any variation thereof refers to any direct or indirect connection or coupling between two or more elements, and may include the presence of one or more intermediate elements between two elements that are "connected" or "coupled" to each other. The coupling or connection between elements may be physical, logical, or a combination thereof. For example, "connected" may be read as "access." As used in this disclosure, two elements may be considered to be "connected" or "coupled" to each other using at least one of one or more wires, cables, and printed electrical connections, as well as electromagnetic energy having wavelengths in the radio frequency range, microwave range, and optical (both visible and invisible) range, as some non-limiting and non-exhaustive examples.

[0052] (11) In the above embodiments, the phrase "based on" does not mean "based only on," unless otherwise specified. In other words, the phrase "based on" means both "based only on" and "based at least on."

[0053] (12) As used in this disclosure, the terms "determining" and "determining" may encompass a wide variety of actions. "Determining" and "determining" may include, for example, judging, calculating, computing, processing, deriving, investigating, looking up, searching, inquiring (e.g., searching in a table, database, or other data structure), ascertaining, and the like. "Determining" and "determining" may also include receiving (e.g., receiving information), transmitting (e.g., sending information), input, output, accessing (e.g., accessing data in memory), and the like. Furthermore, "judgment" and "decision" can include regarding resolving, selecting, choosing, establishing, comparing, etc. as having been "judgment" or "decision." In other words, "judgment" and "decision" can include regarding some action as having been "judgment" or "decision." Furthermore, "judgment (decision)" can be interpreted as "assuming," "expecting," "considering," etc.

[0054] (13) In the above embodiments, when "include," "including," and variations thereof are used, these terms are intended to be inclusive, similar to the term "comprising." Furthermore, the term "or" as used in this disclosure is not intended to be an exclusive or.

[0055] (14) In this disclosure, where articles are added by translation, such as a, an, and the in English, the disclosure may include that the nouns following these articles are plural.

[0056] (15) In this disclosure, the term "A and B are different" may mean "A and B are different from each other." The term may also mean "A and B are each different from C." Terms such as "separate" and "combined" may also be interpreted in the same way as "different."

[0057] (16) Each aspect / embodiment described in this disclosure may be used alone, in combination, or switched depending on the implementation. Notification of predetermined information (e.g., notification that "X is true") is not limited to explicit notification, but may be implicit (e.g., not notifying the predetermined information).

[0058] (D: Aspects understood from the above-described embodiments or modifications) Although the present disclosure has been described in detail above, it is clear to those skilled in the art that the present disclosure is not limited to the embodiments described herein. The present disclosure can be implemented in modified and altered forms without departing from the spirit and scope of the present disclosure as defined by the claims. Therefore, the description of the present disclosure is intended to be illustrative and does not have any limiting meaning on the present disclosure. The following aspects can be understood from at least one of the above-described embodiments or modifications.

[0059] An identity verification device according to a first aspect of the present disclosure includes: a recording medium storing character information representing at least a user's name and address; an acquisition unit that communicates with a terminal that reads the character information from the recording medium on which the character information is printed on the face of a card; an acquisition unit that acquires the character information from the terminal by communicating with the terminal; a determination unit that determines whether the character information acquired by the acquisition unit includes a character belonging to a special character group; and a first transmission unit that, if the determination result of the determination unit is positive, transmits to the terminal a first notification that guides the user to a procedure for identity verification based on an image of the face of the card. According to the identity verification device of this aspect, even if the character information read from the recording medium includes a special character, the user can be guided to a procedure for identity verification that is not based on the character information, thereby reducing the possibility that the user will abandon identity verification.

[0060] In a second aspect (an example of the first aspect) of the present disclosure, a face photograph of the user is printed on the face of the card, and the acquisition unit in the identity verification device according to this aspect may further acquire an image of the user's face and an image of the face of the card from the terminal when the determination result of the determination unit is positive, and may include a display control unit that causes a display device to display the image of the user's face and the image of the face of the card acquired by the acquisition unit when the determination result of the determination unit is positive. According to this aspect, identity verification based on the image of the user's face and the image of the face of the card, i.e., identity verification by method (E), can be smoothly carried out.

[0061] In the third aspect (an example of the first aspect or an example of the second aspect) of the present disclosure, the special character group includes variant characters. According to this aspect, even if variant characters are included in the character information read from the recording medium, the user can be guided to Method E, thereby reducing the possibility of abandoning the identity verification process.

[0062] In a fourth aspect of the present disclosure (an example of the first aspect, an example of the second aspect, or an example of the third aspect), an application program capable of executing the procedure is stored in the terminal, and the first notification is an email having embedded link information for instructing the user to start the application program. According to this aspect, even if the character information read from the recording medium includes a character belonging to a special character group, the user can be guided to Method E, thereby reducing the possibility of abandoning identity verification.

[0063] In a fifth aspect (an example of the fourth aspect) of the present disclosure, the link information includes a parameter that instructs the terminal to display a screen prompting the execution of the procedure when the application program is started. According to this aspect, a screen for guiding to Method E is displayed when the application program is started, thereby enabling smooth guidance to Method E.

[0064] An identity verification device according to a sixth aspect (examples of the first aspect, the second aspect, the third aspect, the fourth aspect, and the fifth aspect) of the present disclosure further includes a second transmission unit that, when the acquisition unit acquires the character information, transmits to the terminal a second notification indicating that identity verification using the procedure may be performed. According to this aspect, it is possible to notify the user that identity verification using Method E may be performed.

[0065] An identity verification method according to a seventh aspect of the present disclosure includes: acquiring character information from a terminal that reads the character information from a recording medium stored in the recording medium of a card on which the character information is printed, by communicating with the terminal; determining whether the character information acquired from the terminal includes a character belonging to a special character group; and, if the determination result is positive, transmitting a first notification to the terminal that guides the user to a procedure for identity verification based on an image of the face of the card. According to this aspect, as in the first aspect, even if the character information read from the recording medium includes a special character, the user can be guided to a procedure for identity verification that is not based on the character information, thereby reducing the possibility that the user will abandon the identity verification process. [Explanation of symbols]

[0066] 1...communication system, 10...terminal, 20...personal verification device, 30...card, 40...recording medium, NW...communication network, 110, 210...communication device, 120, 220...storage device, 130, 230...processing device, 140, 240...display device, 150...input device, 160...imaging device, 170...reading device, 180, 280...bus, 230a...acquisition unit, 230b...determination unit, 230c...first transmission unit, 230d...second transmission unit, 230e...display control unit, PR1...program, PR2...program.

Claims

1. an acquisition unit that has a recording medium storing character information representing at least the user's name and address, and that communicates with a terminal that reads the character information from the recording medium in a card on which the character information is printed, and acquires the character information from the terminal; a determination unit that determines whether the character information acquired by the acquisition unit includes a character that belongs to a special character group; a first transmission unit that transmits, when the determination result of the determination unit is positive, a first notification to the terminal that guides the user to a procedure for identity verification based on an image of the face of the card; An identity verification device having the above.

2. The face of the card has a photograph of the user printed on it, When the determination result of the determination unit is positive, the acquisition unit further acquires an image of the user's face and an image of the face of the card from the terminal; a display control unit that displays, on a display device, the image of the user's face acquired by the acquisition unit and an image of the face of the card when the determination result of the determination unit is positive; The personal identification device according to claim 1 .

3. The personal identification device according to claim 1 , wherein the special character group includes variant characters.

4. an application program capable of executing the procedure is stored in the terminal; 2. The personal identification device according to claim 1, wherein the first notification is an email containing embedded link information for prompting the user to start the application program.

5. 5. The personal identification device according to claim 4, wherein said link information includes a parameter for instructing said terminal to display a screen prompting said user to execute said procedure when said application program is started.

6. The identity verification device according to claim 1, further comprising a second transmission unit that, upon acquisition of the character information by the acquisition unit, transmits to the terminal a second notification indicating that identity verification may be performed through the procedure.

7. 1. An identity verification method that is executed by a computer using a card having a recording medium that stores character information representing at least a user's name and address, and the character information is printed on the card surface, comprising: a step of the computer acquiring the character information from a terminal that reads the character information from the recording medium by communicating with the terminal; a step of the computer determining whether the character information acquired from the terminal includes a character belonging to a special character group; If the determination result of the determining step is positive, the computer sends a first notification to the terminal, which guides the user to a procedure for identity verification based on an image of the face of the card; Identity verification methods, including:

Images