Terminal, terminal control method and program

Abstract

To provide a terminal that assures the authenticity of a content provided from a digital wallet.SOLUTION: The terminal includes identity confirmation means and storage means. The identity confirmation means uses biometric information obtained from an identification certificate and biometric information about an establishing person who establishes a digital wallet to confirm the identity of the establishing person who establishes the digital wallet. When the identity confirmation is successful, the storage means stores the biometric information obtained from the identification certificate or the biometric information about the establishing person who establishes the digital wallet as biometric information of a digital wallet holder.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to a terminal, a system, a terminal control method, and a storage medium. [Background technology]

[0002] The technology exists for digital wallets.

[0003] For example, Patent Document 1 discloses a device and method for using biometric technology to ensure secure transactions using blockchain technology. Patent Document 1 further discloses that the device and method alleviate at least some security-related issues in conventional blockchain digital wallets, specifically, blockchain digital wallets that cannot reliably authenticate user identity information. Patent Document 1 further discloses a method and apparatus for using authentication and data protection to implement a blockchain offline wallet using biometrics. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Special Publication No. 2022-508773 Summary of the Invention [Problem to be solved by the invention]

[0005] When a user uses a digital wallet, the digital content stored in the digital wallet (for example, a certificate such as a student ID) is presented to a certificate verifier. At that time, the verifier checks the authenticity of the presented digital content. In other words, the verifier checks that the user in front of them matches the name of the digital wallet holder.

[0006] The technology disclosed in Patent Document 1 verifies the user and the holder using biometric authentication. That is, in Patent Document 1, when a user uses a digital wallet, biometric authentication is used to confirm that the service user and the holder of the digital wallet are the same person.

[0007] However, if the biometric information used for biometric authentication when a user uses a digital wallet is not the biometric information of the digital wallet holder, the verifier may provide services to a user other than the digital wallet holder. In other words, if someone else registers biometric information under a false name when opening a digital wallet, the verifier will not be able to verify the authenticity of the digital content provided (for example, a certificate such as a student ID card).

[0008] The main object of the present invention is to provide a terminal, a system, a terminal control method, and a storage medium that contribute to ensuring the authenticity of content provided from a digital wallet. [Means for solving the problem]

[0009] According to a first aspect of the present invention, there is provided a terminal comprising: an identity verification means for verifying the identity of an initiator who opens a digital wallet using biometric information obtained from an identification card and the biometric information of the initiator who opens the digital wallet; and a storage means for storing, if the identity verification is successful, the biometric information obtained from the identification card or the biometric information of the initiator who opens the digital wallet as the biometric information of the digital wallet holder.

[0010] According to a second aspect of the present invention, there is provided a system including a terminal and an operator terminal used when a service provider provides a service to a user, the terminal comprising: identity verification means for verifying the identity of an operator who opens a digital wallet using biometric information obtained from an identification card and the biometric information of the operator who opens the digital wallet; storage means for storing the biometric information obtained from the identification card or the biometric information of the operator who opens the digital wallet as the biometric information of the digital wallet holder if the identity verification is successful; and usage control means for providing the content stored in the digital wallet and the biometric information of the digital wallet holder to the operator terminal.

[0011] According to a third aspect of the present invention, there is provided a method for controlling a terminal, in which the terminal uses biometric information obtained from an identification card and the biometric information of the creator who opens the digital wallet to verify the identity of the creator who opens the digital wallet, and if the identity verification is successful, stores the biometric information obtained from the identification card or the biometric information of the creator who opens the digital wallet as the biometric information of the digital wallet holder.

[0012] According to a fourth aspect of the present invention, there is provided a computer-readable storage medium that stores a program for causing a computer mounted on a terminal to execute the following processes: a process of verifying the identity of an owner of a digital wallet using biometric information obtained from an identification card and the biometric information of the owner of the digital wallet; and, if the identity verification is successful, a process of storing the biometric information obtained from the identification card or the biometric information of the owner of the digital wallet as the biometric information of the digital wallet holder. [Effects of the Invention]

[0013] According to each aspect of the present invention, a terminal, a system, a terminal control method, and a storage medium are provided that contribute to ensuring the authenticity of content provided from a digital wallet. Note that the effects of the present invention are not limited to those described above. The present invention may achieve other effects instead of or in addition to the effects described above. [Brief explanation of the drawings]

[0014] [Figure 1] FIG. 1 is a diagram for explaining an outline of an embodiment. [Figure 2] FIG. 2 is a flowchart illustrating the operation of one embodiment. [Figure 3] FIG. 3 is a diagram illustrating an example of a schematic configuration of an information processing system according to the first embodiment. [Figure 4] FIG. 4 is a diagram showing an example of a display on the terminal according to the first embodiment. [Figure 5] FIG. 5 is a diagram for explaining the operation of the information processing system according to the first embodiment. [Figure 6] FIG. 6 is a diagram for explaining the operation of the information processing system according to the first embodiment. [Figure 7] FIG. 7 is a diagram illustrating an example of a processing configuration of a terminal according to the first embodiment. [Figure 8] FIG. 8 is a diagram illustrating an example of the processing configuration of the digital wallet control unit according to the first embodiment. [Figure 9] FIG. 9 is a flowchart showing an example of the operation of the identity verification unit according to the first embodiment. [Figure 10] FIG. 10 is a diagram illustrating an example of a display on the terminal according to the first embodiment. [Figure 11] FIG. 11 is a flowchart illustrating an example of the operation of the certificate acquisition control unit according to the first embodiment. [Figure 12] FIG. 12 is a diagram illustrating an example of a processing configuration of a server device according to the first embodiment. [Figure 13] FIG. 13 is a diagram illustrating an example of a processing configuration of a carrier terminal according to the first embodiment. [Figure 14] FIG. 14 is a sequence diagram illustrating an example of the operation of the information processing system according to the first embodiment. [Figure 15] FIG. 15 is a diagram for explaining the operation of the information processing system according to the modified example of the first embodiment. [Figure 16] FIG. 16 is a diagram illustrating an example of a hardware configuration of a terminal according to the present disclosure. [Figure 17] FIG. 17 is a diagram showing an example of a display on a terminal according to a modification of the present disclosure. DETAILED DESCRIPTION OF THE INVENTION

[0015] First, an overview of one embodiment will be described. Note that the reference numerals in the drawings are added to each element for convenience as an example to facilitate understanding, and the description of this overview is not intended to be limiting in any way. Furthermore, unless otherwise specified, the blocks shown in each drawing represent functional units, not hardware units. Connection lines between blocks in each drawing include both bidirectional and unidirectional lines. Unidirectional arrows are used to schematically indicate the flow of main signals (data) and do not exclude bidirectionality. Note that in this specification and drawings, elements that can be similarly described may be assigned the same reference numerals to avoid redundant explanation.

[0016] Terminal 100 according to one embodiment includes identity verification means 101 and storage means 102 (see FIG. 1). Identity verification means 101 verifies the identity of the creator of the digital wallet using biometric information obtained from an identification card and the biometric information of the creator of the digital wallet (step S1 in FIG. 2). If identity verification is successful, storage means 102 stores the biometric information obtained from the identification card or the biometric information of the creator of the digital wallet as the biometric information of the digital wallet holder (step S2).

[0017] When the digital wallet is opened, the terminal 100 verifies the identity of the digital wallet holder using an identification card issued by a public institution. If the identity verification is successful, the terminal 100 stores the biometric information acquired when the digital wallet was opened as the biometric information of the digital wallet holder. When the user receives a service from a service provider, the terminal 30 can provide the digital wallet holder's biometric information along with the digital content to the service provider. The service provider can verify whether the digital wallet holder providing the certificate and the present user are the same person by performing an authentication process using the biometric information acquired from the terminal 30 and the biometric information of the user wishing to receive the service. As a result, even if a person other than the digital wallet holder attempts to use the digital wallet holder's terminal 30 to receive a service from the service provider, the service provider can detect such fraudulent activity. In other words, the authenticity of the content provided from the digital wallet is guaranteed.

[0018] Specific embodiments will be described in more detail below with reference to the drawings.

[0019] [First embodiment] The first embodiment will be described in more detail with reference to the drawings.

[0020] [System Configuration] As shown in FIG. 3, the information processing system according to the first embodiment includes at least one or more certificate issuers and at least one or more service providers.

[0021] A certificate issuer is an entity that issues certificates to users. For example, an educational institution such as a university or vocational school that issues student ID cards corresponds to a certificate issuer. Alternatively, an organization or association that issues certificates of language proficiency corresponds to a certificate issuer. Furthermore, certificate issuers are not limited to private companies; public organizations that issue driver's licenses and the like are also included in the certificate issuers disclosed in this application.

[0022] Each certificate issuer is provided with a server device 10. The server device 10 is a server that performs the processes and operations necessary to carry out the business of the certificate issuer. The server device 10 may be managed and operated by the certificate issuer, or may be outsourced to another business entity. The server device 10 may be installed within the premises of the certificate issuer, or may be installed on a network (cloud).

[0023] A certificate issuer issues a certificate in response to a request from a user. For example, a university issues a student ID card (digital student ID) in response to a request from its students. Or, a language institution issues a certificate (digital certificate) indicating the language proficiency of an examinee.

[0024] A service provider is a business that provides services to users. For example, a service provider may be a business that operates transportation such as a railway, bus, or airplane. Alternatively, a service provider may be a retail store, a restaurant, or the like. Service providers are not limited to private companies, and also include public institutions such as city halls, NGOs (Non-Governmental Organizations), NPOs (Non-Profit Organizations), and other organizations.

[0025] Service providers require users to present identification appropriate to their company's (organization's) business. For example, a railway company that sells student discount commuter passes to students may require the students to present their student ID cards. Alternatively, a retail store that sells tobacco, alcohol, etc. to customers may require the users to present identification that can verify their age.

[0026] Each service provider has a business operator terminal 20 used when providing services to users. The business operator terminal 20 may be a terminal such as a personal computer, a tablet terminal, or a POS (Point of Sale) terminal. The service provider may also have a server for providing services to users (not shown in FIG. 3, etc.).

[0027] An employee or the like of a service provider provides a service to a user by operating the business operator terminal 20. At that time, the business operator terminal 20 verifies the certificate presented by the user, etc. The business operator terminal 20 notifies the employee or the like of the verification result.

[0028] The user carries the terminal 30. The user operates the terminal 30 to request (demand) the issuance of a certificate from the certificate issuer. The user also uses the terminal 30 to present the certificate (for example, a student ID card) that the service provider requests.

[0029] 3 are connected to a network. Specifically, the server device 10, the operator terminal 20, and the terminal 30 are connected to the network by wired or wireless communication means.

[0030] The configuration of the information processing system shown in Fig. 3 is an example and is not intended to be limiting. For example, each certificate issuer may include multiple server devices 10. Similarly, each service provider may include multiple business operator terminals 20.

[0031] [General operation] Next, the general operation of the information processing system according to the first embodiment will be described.

[0032] <Preparing your digital wallet> The user's terminal 30 has a digital wallet function. A digital wallet is an electronic information storage service that guarantees information security, such as data integrity, reliability, and availability. While it is desirable for a digital wallet to be managed in a self-sovereign manner, it may also be managed by an entity other than the user.

[0033] A user installs an application to realize a digital wallet on their terminal 30. By opening a digital wallet on terminal 30, the user can store various digital content on terminal 30, such as electronic money, identification documents such as student ID cards, passports and driver's licenses, various ticket information such as airline tickets and boarding passes, and vaccination certificates.

[0034] For example, the user's terminal 30 stores digital content such as that shown in Fig. 4. The digital content stored in the terminal 30 includes official identification documents such as passports and driver's licenses, and student ID cards issued by universities.

[0035] When the digital wallet application is launched for the first time, the terminal 30 performs identity verification using an identification card issued by a public institution such as a national administrative agency. In other words, the terminal 30 performs identity verification of the user when opening a digital wallet.

[0036] For example, the terminal 30 performs identity verification using an identification document that contains the biometric information of the holder, such as a My Number card or a passport. The terminal 30 uses the My Number card or the passport as a root of trust.

[0037] Examples of biometric information include data (features) calculated from physical characteristics unique to an individual, such as a face, fingerprint, voiceprint, veins, retina, and iris pattern. Alternatively, the biometric information may be image data such as a face image or fingerprint image. The biometric information may be any information that includes the user's physical characteristics. In this disclosure, a case where biometric information related to a person's "face" (a face image or features generated from a face image) is used will be described.

[0038] The terminal 30 acquires information about the holder (issued person) of the identification card from the user's identification card. For example, the terminal 30 acquires information about the holder of the My Number card from the IC (Integrated Circuit) of the My Number card.

[0039] Specifically, the terminal 30 acquires basic information of the cardholder (so-called four basic pieces of information: name, sex, date of birth, and address) and biometric information (face image) of the cardholder. The terminal 30 stores the basic information and biometric information read from the card.

[0040] Furthermore, the terminal 30 acquires biometric information of the user (the person who opened the digital wallet). For example, the terminal 30 acquires and stores a facial image by photographing the user.

[0041] Terminal 30 performs a matching process (authentication process) using the biometric information acquired from the identification card and the biometric information of the user. If the authentication process (one-to-one authentication) is successful, terminal 30 opens a digital wallet. Terminal 30 confirms through the matching process (authentication process) using the biometric information that the person in whose name the identification card was issued and the user using the digital wallet of terminal 30 are the same person.

[0042] <Certificate issuance> A user acquires digital content to be stored in a digital wallet. For example, the user operates terminal 30 to request a certificate issuer to issue a certificate. For example, a student requests (requests) the issuance of a student ID card from the university to which the student belongs. Specifically, the digital wallet application requests the issuance of a student ID card from the university to which the student belongs.

[0043] The terminal 30 transmits a "certificate issuance request" including information for identifying the user (for example, name, a combination of name and date of birth, student ID number, etc.) to the server device 10 of the certificate issuer (see FIG. 5).

[0044] The certificate issuer determines whether the user requesting the issuance of a certificate has the authority (qualification) to receive the certificate. For example, the server device 10 determines whether the student requesting the issuance of a student ID card is enrolled in the server device 10's own university.

[0045] If the student belongs to the university, the server device 10 issues a student ID card (digital student ID card). The server device 10 issues a signed certificate of the university (certificate issuer; for example, the university). The server device 10 transmits the issued signed certificate to the terminal 30.

[0046] The terminal 30 (digital wallet application) verifies the signature of the received certificate.

[0047] If the signature verification is successful, the terminal 30 obtains basic information (name, gender, date of birth, address) from the received certificate. That is, the terminal 30 obtains basic information about the recipient of the obtained certificate. The terminal 30 compares the basic information obtained from the identity certificate (Root of Trust) at the initial launch of the digital wallet application with the basic information obtained from the certificate generated by the certificate issuer.

[0048] In the above example, the terminal 30 compares the basic information acquired from the My Number card with the basic information acquired from the student ID card. If the basic information acquired from the two different media matches, the terminal 30 determines that the comparison is successful.

[0049] If the terminal 30 successfully verifies the signature attached to the certificate and also successfully checks the two pieces of basic information (the two pieces of basic information match), it accepts the certificate received from the certificate issuer. The terminal 30 internally stores the certificate (e.g., a student ID card) obtained from the certificate issuer and manages it so that it can be used in a digital wallet.

[0050] <Certificate usage> The user presents the required certificate to the service provider. For example, a student who wishes to purchase a commuter pass presents his / her student ID card to a railway company.

[0051] For example, the user starts a digital wallet application by operating the terminal 30. The user selects a certificate (for example, a student ID card) designated by the service provider on the digital wallet application.

[0052] Terminal 30 generates a two-dimensional barcode using the certificate selected by the user and biometric information stored internally (for example, a facial image obtained from a My Number card or a facial image taken when a digital wallet is opened). Terminal 30 generates a two-dimensional barcode that has been converted from the certificate designated by the service provider and the user's biometric information. Terminal 30 displays the generated two-dimensional barcode.

[0053] The user presents the terminal 30 on which the two-dimensional barcode is displayed to a service provider (for example, a railway company employee) (see FIG. 6).

[0054] The service provider (such as an employee of the service provider) operates the business operator terminal 20 to read the presented two-dimensional barcode. The service provider also operates the business operator terminal 20 to acquire biometric information of the user in front of them (the user who presents the certificate). For example, the service provider operates the business operator terminal 20 to photograph the user in front of them and acquire a facial image.

[0055] The business operator terminal 20 acquires the two-dimensional barcode (the two-dimensional barcode including the signed certificate and biometric information) and the biometric information of the user who desires to receive the service.

[0056] The business operator terminal 20 performs a matching process (authentication process) using the biometric information obtained from the two-dimensional barcode and the biometric information of the user in front of the business operator terminal 20. If the authentication process (one-to-one authentication) is successful, the business operator terminal 20 treats the presented certificate as a legitimate certificate issued to the user in front of the business operator terminal 20.

[0057] The business operator terminal 20 notifies the service provider (such as an employee of the service provider) that the presented certificate is legitimate. Alternatively, the business operator terminal 20 determines the authenticity, validity, etc. of the presented certificate as necessary. For example, the business operator terminal 20 verifies the signature affixed to the student ID card and the expiration date of the student ID card. The business operator terminal 20 notifies the service provider of the verification result.

[0058] When the service provider presents the necessary credentials to provide the service to the user, the service provider will provide the service to the user. In the above example, a railway company employee sells a student commuter pass with a student discount.

[0059] In this way, when opening a digital wallet, terminal 30 performs identity verification using biometric information obtained from the creator's identification card and the creator's biometric information. If identity verification is successful, terminal 30 makes the digital wallet available for use. Terminal 30 also stores in the digital wallet a certificate whose authenticity is guaranteed by the certificate issuer using an electronic signature or the like. At that time, terminal 30 (digital wallet application) compares basic information extracted from the identification card with basic information obtained from the certificate issuer. Terminal 30 verifies the authenticity of the certificate obtained through this comparison. Furthermore, when a user uses a certificate stored in the digital wallet, terminal 30 provides the certificate and the digital wallet holder's biometric information to a service provider (verifier). The service provider verifies that the user is the digital wallet holder by performing authentication using the digital wallet holder's biometric information and biometric information obtained from the current user. If the digital wallet used by the user is a highly trusted digital wallet, the service provider can trust the certificate obtained from that digital wallet.

[0060] Next, details of each device included in the information processing system according to the first embodiment will be described.

[0061] [Device] 7 is a diagram showing an example of a processing configuration (processing module) of the terminal 30 according to the first embodiment. Referring to FIG. 7, the terminal 30 includes a communication control unit 201, a digital wallet control unit 202, and a storage unit 203.

[0062] The communication control unit 201 is a means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the server device 10. The communication control unit 201 also transmits data to the server device 10. The communication control unit 201 passes data received from other devices to other processing modules. The communication control unit 201 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 201. The communication control unit 201 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0063] Digital wallet control unit 202 is a means for managing and controlling digital wallets. As shown in Fig. 8, digital wallet control unit 202 has sub-modules consisting of personal identification unit 211, certificate acquisition control unit 212, and usage control unit 213.

[0064] A detailed description of the installation of the digital wallet application will be omitted, as the installation of the digital wallet application is obvious to those skilled in the art.

[0065] The identity verification unit 211 is a means for verifying the identity of the creator of a digital wallet. The identity verification unit 211 verifies the identity of the creator of the digital wallet by using biometric information obtained from an identification card and the biometric information of the creator who opens the digital wallet. More specifically, the identity verification unit 211 verifies that the creator of the digital wallet and the holder (issuee) of the identification card issued by a public institution are the same person.

[0066] 9 is a flowchart showing an example of the operation of the personal identification unit 211 according to the first embodiment. The operation of the personal identification unit 211 according to the first embodiment will be described with reference to FIG.

[0067] When a digital wallet is opened (when the digital wallet is started for the first time), the personal identification unit 211 acquires information about the holder of the identification card from the identification card held by the user. For example, the personal identification unit 211 acquires basic information and biometric information about the holder of the identification card from an IC (Integrated Circuit) chip mounted on a My Number card or passport (step S101).

[0068] For example, when a My Number card is used as an identification card, the personal identification unit 211 acquires a personal identification number for the user authentication electronic certificate using a GUI (Graphical User Interface) or the like (see FIG. 10). Alternatively, when a passport is used as an identification card, the personal identification unit 211 acquires information written in a Machine Readable Zone (MRZ) written on the face of the passport using OCR (Optical Character Recognition) technology.

[0069] The personal identification unit 211 reads information from the IC chip using the acquired PIN (four-digit number) or information written in the MRZ as a password. The personal identification unit 211 stores basic information (name, sex, date of birth, address) and biometric information (face information, face image) of the holder of the identification card (My Number card, passport, etc.) read from the identification card in the storage unit 203 (step S102).

[0070] Furthermore, the identity verification unit 211 acquires biometric information of the user (user of the terminal 30; person who opened the digital wallet) (step S103). For example, the identity verification unit 211 prompts the user to take a picture of their own face using a GUI or the like (acquiring a facial image by taking a selfie).

[0071] The personal identification unit 211 acquires biometric information from an identification card, and when it acquires the biometric information of the user who operates its own device, it executes a matching process using the biometric information acquired from the identification card and the biometric information of the user (step S104). The personal identification unit 211 determines whether the two pieces of biometric information substantially match.

[0072] Specifically, the personal identification unit 211 generates feature amounts from each of two pieces of biometric information (for example, face images).

[0073] Since existing technology can be used for the process of generating feature amounts, detailed description thereof will be omitted. For example, the personal identification unit 211 extracts the eyes, nose, mouth, etc. from the face image as feature points. Thereafter, the personal identification unit 211 calculates the positions of the feature points and the distances between the feature points as feature amounts (generating a feature vector consisting of multiple feature amounts).

[0074] Next, the personal identification unit 211 executes a matching process (authentication process) using the two generated feature amounts. Specifically, the personal identification unit 211 calculates the similarity between corresponding face images using the two feature amounts. Based on the result of threshold processing on the calculated similarity, the personal identification unit 211 determines whether the two images are face images of the same person. Note that the similarity can be calculated using a chi-squared distance, Euclidean distance, or the like. The greater the distance, the lower the similarity, and the closer the distance, the higher the similarity.

[0075] If the similarity is greater than a predetermined value (if the distance is shorter than a predetermined value), the personal identification unit 211 determines that the matching process has been successful. If the similarity is equal to or less than the predetermined value, the personal identification unit 211 determines that the matching process has failed.

[0076] If the matching process is successful (step S105, Yes branch), the personal identification unit 211 permits the user to use the digital wallet (permission to use; step S106). That is, if the authentication process (one-to-one authentication) is successful, the personal identification unit 211 opens the digital wallet.

[0077] If the matching process (authentication process) using biometric information is successful, the identity verification unit 211 treats the person who was issued the identification card as the same person as the user of the terminal 30. When the digital wallet is started for the first time, it is determined whether the person in the name of the identification card and the user of the terminal 30 are the same person. If the person in the name of the identification card and the person who opened the digital wallet are the same person, the terminal 30 makes the digital wallet application available.

[0078] If the matching process fails (step S105, No branch), the identity verification unit 211 does not permit the user to use the digital wallet (use denial; step S107). In other words, if the authentication process (one-to-one authentication) fails, the user cannot use the digital wallet (cannot open a digital wallet).

[0079] In this way, the identity verification unit 211 determines that identity verification has been successful when the first authentication process using the biometric information obtained from the identification card and the biometric information of the creator who opens the digital wallet is successful. If identity verification is successful, the digital wallet is opened.

[0080] In principle, the basic information extracted from the ID card cannot be changed. To change the basic information, it is necessary to verify the changed basic information against the basic information obtained from the ID card, such as the My Number card.

[0081] The certificate acquisition control unit 212 is a means for controlling the acquisition of a certificate.

[0082] The certificate acquisition control unit 212 receives a certificate from a certificate issuer by requesting the certificate issuer to issue the certificate. The certificate acquisition control unit 212 performs a matching process using basic information about the identity card holder obtained from the identity card and basic information about the identity card holder obtained from the received certificate. If the two pieces of basic information match, the certificate acquisition control unit 212 stores the certificate received from the certificate issuer in a digital wallet.

[0083] 11 is a flowchart showing an example of the operation of the certificate acquisition control unit 212 according to the first embodiment. The operation of the certificate acquisition control unit 212 according to the first embodiment will be described with reference to FIG.

[0084] When a user who has opened a digital wallet starts the digital wallet application and performs a predetermined operation (for example, pressing the certificate issuance button), the certificate acquisition control unit 212 controls the acquisition of the certificate desired by the user.

[0085] First, the certificate acquisition control unit 212 acquires information necessary for requesting the issuance of a certificate using a GUI or the like (acquisition of necessary information; step S201). Specifically, the certificate acquisition control unit 212 acquires information on the certificate issuer corresponding to the certificate the user wishes to have issued, the type of certificate desired, etc. Alternatively, the certificate acquisition control unit 212 acquires information that allows the certificate issuer to identify the user (for example, the student ID number when requesting the issuance of a student ID card), as necessary.

[0086] Certificate acquisition control unit 212 notifies the certificate issuer of the acquired necessary information. For example, certificate acquisition control unit 212 notifies the certificate issuer of the type of certificate the user desires to be issued and information for identifying the user (for example, name and student ID number). Specifically, certificate acquisition control unit 212 transmits a "certificate issuance request" including the type of certificate, information for identifying the user, etc. to server device 10 of the specified certificate issuer (step S202).

[0087] The certificate acquisition control unit 212 receives a response (positive response, negative response) to the certificate issuance request from the server device 10 (step S203).

[0088] If a negative response (certificate not issued) is received (step S204, No branch), the certificate acquisition control unit 212 notifies the user that the certificate has not been issued (notification of non-issue; step S205).

[0089] If a positive response (certificate issued) is received (step S204, Yes branch), certificate acquisition control unit 212 verifies the signature of the certificate included in the positive response (step S206). Certificate acquisition control unit 212 verifies the signature using the digital signature attached to the certificate and the public key obtained from the digital certificate corresponding to the digital signature.

[0090] If the signature verification fails (step S207, No branch), the certificate acquisition control unit 212 discards the certificate received from the certificate issuer. In addition, the certificate acquisition control unit 212 notifies the user that the certificate acquired from the certificate issuer is invalid (notification of invalidity; step S208).

[0091] If the signature verification is successful (step S207, Yes branch), the certificate acquisition control unit 212 acquires basic information (name, gender, date of birth, address) of the certificate holder (issuer) from the received certificate (acquire basic information; step S209).

[0092] The certificate acquisition control unit 212 compares the basic information about the holder of the acquired certificate with the basic information acquired from the identification card at the time of initial startup of the digital wallet (step S210). That is, the certificate acquisition control unit 212 compares the basic information about the certificate holder with the basic information about the digital wallet holder (digital wallet creator).

[0093] If the two pieces of basic information match (if the name, sex, date of birth, and address that make up the basic information match), the certificate acquisition control unit 212 determines that the basic information matching has been successful. If the two pieces of basic information do not match, the certificate acquisition control unit 212 determines that the basic information matching has failed.

[0094] If the verification of the basic information fails (step S211, No branch), certificate acquisition control unit 212 discards the certificate received from the certificate issuer. In addition, certificate acquisition control unit 212 notifies the user that the certificate acquired from the certificate issuer is invalid (step S208).

[0095] If the basic information is successfully verified (step S211, Yes branch), the certificate acquisition control unit 212 stores the certificate received from the certificate issuer in the digital wallet (step S212).

[0096] In this way, if the verification of the signature affixed to the certificate and the comparison using the two pieces of basic information are successful (the two pieces of basic information match), the certificate acquisition control unit 212 determines that the certificate received from the certificate issuer is legitimate. The certificate acquisition control unit 212 stores the legitimate certificate (e.g., a student ID card) acquired from the certificate issuer in the storage unit 203.

[0097] The usage control unit 213 is a means for controlling the usage of digital content (for example, digital certificates) stored in the digital wallet.

[0098] The usage control unit 213 acquires the certificate that the user wishes to use using a GUI, etc. For example, the usage control unit 213 displays a list of digital contents as shown in Fig. 4, and allows the user to select the certificate that he or she wishes to use.

[0099] When the user selects a certificate (for example, a student ID card), the usage control unit 213 generates a two-dimensional barcode using the certificate selected by the user and the biometric information (biometric information acquired from the identification card or biometric information acquired from the user) stored in the storage unit 203. The usage control unit 213 displays the generated two-dimensional barcode.

[0100] In this way, when a user receives a service from a service provider, the usage control unit 213 provides the service provider with the certificate stored in the digital wallet and the biometric information of the digital wallet holder.

[0101] Storage unit 203 is a means for storing information necessary for the operation of terminal 30. When identity verification unit 211 has successfully verified the identity of the digital wallet holder, storage unit 203 stores the biometric information obtained from the identification card or the biometric information of the digital wallet holder as the biometric information of the digital wallet holder. Note that the biometric information stored as the biometric information of the digital wallet holder may be biometric information obtained from the identification card or biometric information obtained by photographing the user.

[0102] [Server device] 12 is a diagram showing an example of a processing configuration (processing module) of the server device 10 according to the first embodiment. Referring to FIG. 12, the server device 10 includes a communication control unit 301, a certificate issuing unit 302, and a storage unit 303.

[0103] The communication control unit 301 is a means for controlling communication with other devices. For example, the communication control unit 301 receives data (packets) from the terminal 30. The communication control unit 301 also transmits data to the terminal 30. The communication control unit 301 passes data received from other devices to other processing modules. The communication control unit 301 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 301. The communication control unit 301 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0104] The certificate issuing unit 302 is a means for issuing a certificate to a user. The certificate issuing unit 302 processes a “certificate issuance request” received from the terminal 30.

[0105] Upon receiving a certificate issuance request, the certificate issuance unit 302 searches a database (not shown in Figure 12, etc.) that stores user information using information for identifying the user (e.g., name or student ID number) included in the certificate issuance request as a key.

[0106] If the search fails (if the corresponding user is not registered in the database), the certificate issuing unit 302 transmits a negative response to the terminal 30 indicating that the certificate issuance has failed.

[0107] If the search is successful, the certificate issuance unit 302 determines whether or not a certificate can be issued to the user based on the information stored in the database and the type of certificate the user desires to be issued, which is included in the certificate issuance request. In other words, the certificate issuance unit 302 determines whether or not the user desiring the certificate has the authority (qualification) to be issued a certificate.

[0108] For example, if a student requests a student ID card and the user requesting the student ID card has not dropped out, the certificate issuance unit 302 determines that the student has the authority to receive a certificate. On the other hand, if a student (former student) recorded in the database has dropped out, the certificate issuance unit 302 determines that the student does not have the authority to receive a certificate.

[0109] Note that a detailed description of the issuance of individual certificates (e.g., student ID cards, language proficiency certificates, etc.) will be omitted because a detailed description of the issuance of individual certificates is outside the scope of the present disclosure.

[0110] If the user does not have the authority to receive the issuance of a certificate, the certificate issuing unit 302 transmits to the terminal 30 a negative response indicating that the certificate issuance has failed (certificate issuance is not possible).

[0111] If the user has the authority to receive a certificate, the certificate issuing unit 302 generates a certificate (digital certificate; for example, a digital student ID card) to be issued to the user. The certificate issuing unit 302 generates a certificate with the digital signature of its own organization (for example, a university) and the corresponding digital certificate attached.

[0112] The certificate issuing unit 302 generates a certificate including basic information of the user (issuee) to whom the certificate is issued. For example, the certificate issuing unit 302 generates a student ID card including the student's name, gender, date of birth, and address.

[0113] The certificate issuing unit 302 transmits the generated certificate (a certificate including an electronic document, an electronic signature, and an electronic certificate) to the terminal 30. The certificate issuing unit 302 transmits an affirmative response (an affirmative response including a signed certificate) to the terminal 30 indicating that the requested certificate has been successfully issued.

[0114] The storage unit 303 is a means for storing information necessary for the operation of the server device 10.

[0115] [Operator terminal] 13 is a diagram showing an example of a processing configuration (processing module) of the operator terminal 20 according to the first embodiment. Referring to FIG. 13, the operator terminal 20 includes a communication control unit 401, a service provision control unit 402, and a storage unit 403.

[0116] The communication control unit 401 is a means for controlling communication with other devices. For example, the communication control unit 401 receives data (packets) from a server (not shown in FIG. 3, etc.) of a service provider. The communication control unit 401 also transmits data to the server. The communication control unit 401 passes data received from other devices to other processing modules. The communication control unit 401 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 401. The communication control unit 401 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0117] The service provision control unit 402 is a means for executing control relating to the services provided to the user.

[0118] The service provision control unit 402 controls a two-dimensional barcode reader or the like in response to an operation by an employee of the service provider, etc., and reads the two-dimensional barcode presented by the user (the user receiving the service). The service provision control unit 402 decodes the two-dimensional barcode and obtains the signed certificate and biometric information (biometric information of the digital wallet holder).

[0119] Furthermore, the service provision control unit 402 acquires biometric information (for example, a face image) of the user in front of the service provider (the user receiving the service) in response to an operation by an employee of the service provider or the like.

[0120] The service provision control unit 402 uses the two pieces of acquired biometric information to determine whether the certificate presented to the service provider is a valid certificate.

[0121] Specifically, the service provision control unit 402 performs a matching process (authentication process) between the biometric information (e.g., a facial image) obtained from the two-dimensional barcode and the biometric information of the user in front (e.g., a facial image obtained by photographing the user in front).

[0122] If the two pieces of biometric information are substantially identical (if the matching process is successful), the service provision control unit 402 determines that the certificate presented to the service provider is a legitimate certificate issued to the user in front of the service provider.

[0123] If the two pieces of biometric information are not substantially identical (if the matching process fails), the service provision control unit 402 determines that the certificate presented to the service provider is not a legitimate certificate issued to the user in front of it.

[0124] If the certificate is not valid, the service provision control unit 402 notifies an employee of the service provider, etc. For example, the service provision control unit 402 displays a message to that effect on an LCD monitor or outputs it from a speaker.

[0125] If the certificate is valid, the service provision control unit 402 notifies the service provider (such as a staff member of the service provider) that the presented certificate is valid. Alternatively, the service provision control unit 402 determines the validity, validity, etc. of the presented certificate as needed. For example, the service provision control unit 402 verifies the signature affixed to the student ID card and the expiration date of the student ID card.

[0126] Note that detailed descriptions of required certificates and certificate verification for providing individual services will be omitted, as detailed descriptions of certificate verification and the like are outside the scope of the present disclosure.

[0127] The storage unit 403 is a means for storing information necessary for the operation of the operator terminal 20 .

[0128] [System Operation] Next, the operation of the information processing system according to the first embodiment will be described.

[0129] Fig. 14 is a sequence diagram showing an example of the operation of the information processing system according to the first embodiment. The operation of the information processing system according to the first embodiment will be described with reference to Fig. 14. Note that a description of the operation of the information processing system for identity verification when opening a digital wallet and for issuing a certificate will be omitted.

[0130] In accordance with the user's operation, the terminal 30 displays the certificate selected by the user and the two-dimensional barcode into which the biometric information has been converted (step S01).

[0131] The business operator terminal 20 reads the two-dimensional barcode in response to an operation by an employee of the service provider or the like (step S02).

[0132] Furthermore, the business operator terminal 20 acquires biometric information from the user in front of the business operator terminal 20 in response to an operation by an employee of the service provider or the like (step S03). For example, the business operator terminal 20 photographs the user in front of the business operator terminal 20 and acquires a facial image.

[0133] The business operator terminal 20 executes a matching process using the biometric information obtained from the two-dimensional barcode and the biometric information of the user in front of the business operator terminal 20 (step S04).

[0134] If the verification process is successful, the business operator terminal 20 notifies the employee of the service provider that the certificate presented by the user is valid (step S05). The employee of the service provider who receives the notification provides the service to the user.

[0135] Next, a modified example of the first embodiment will be described.

[0136] <Variation 1> In the above embodiment, a case has been described in which a two-dimensional barcode is generated using a certificate and biometric information stored in a digital wallet, and the two-dimensional barcode is provided to a service provider for identity authentication. Here, a certificate issuer may also issue a certificate for biometric information. Specifically, a user requests a certificate issuer to issue a certificate for biometric information and stores the issued certificate in a digital wallet. When receiving a service, the user provides the biometric information certificate to a service provider. The service provider may authenticate the user using the provided certificate. For example, a certificate for a face, i.e., a face VC, may be issued by the certificate issuer as a Verifiable Credential (VC). Specifically, the user provides face information to an issuer and requests the issuance of a face VC. The issuer compares the presented face with face information it holds and, if a match is found, issues the face VC. The user provides the issued face VC to the service provider, and the service provider uses the face VC to authenticate the user.

[0137] <Certificate issuance> A user acquires digital content to be stored in a digital wallet. For example, the user operates terminal 30 to request a certificate issuer to issue a certificate. For example, a student requests (requests) the issuance of a student ID card and a face VC from the university to which the student belongs. Specifically, the digital wallet application requests the issuance of a student ID card and a face VC from the university to which the student belongs. Note that the face VC may be issued by an external business operator commissioned by the university.

[0138] The terminal 30 transmits a "certificate issuance request" including information for identifying the user (for example, name, a combination of name and date of birth, student ID number, etc.) and biometric information to the server device 10 of the certificate issuer.

[0139] The certificate issuer determines whether the user requesting the issuance of a certificate has the authority (qualification) to receive the issuance of a certificate. For example, the server device 10 determines whether the student requesting the issuance of a student ID card and a face VC is enrolled in the university, and whether the biometric information presented by the student matches the biometric information held by the university.

[0140] If the student belongs to the university and the biometric information matches, the server device 10 issues a student ID card (digital student ID card) and a face VC. The server device 10 issues a signed certificate of its own organization (certificate issuer; for example, a university). The server device 10 transmits the issued signed certificate to the terminal 30.

[0141] The terminal 30 (digital wallet application) verifies the signature of the received certificate.

[0142] If the signature verification is successful, the terminal 30 obtains basic information (name, gender, date of birth, address) and biometric information from the received certificate. That is, the terminal 30 obtains basic information and biometric information about the recipient of the obtained certificate. The terminal 30 compares the basic information and biometric information obtained from the identification certificate (Root of Trust) at the initial launch of the digital wallet application with the basic information and biometric information obtained from the certificate generated by the certificate issuer.

[0143] In the above example, the terminal 30 compares the basic information acquired from the My Number card with the basic information acquired from the student ID card. Similarly, the terminal 30 compares the biometric information acquired from the My Number card with the biometric information acquired from the face VC. If the basic information and biometric information acquired from the two different media match, the terminal 30 determines that the comparison is successful.

[0144] If the terminal 30 successfully verifies the signature attached to the certificate and also successfully compares the two pieces of basic information and biometric information (the two pieces of basic information and the biometric information match), it accepts the certificate received from the certificate issuer. The terminal 30 internally stores the certificate obtained from the certificate issuer (for example, a student ID card and a face VC) and manages it so that it can be used in the digital wallet. The above describes the case where a face VC is applied for and issued at the same time as other certificates. A face VC may also be issued at a different time from other certificates. The user provides a previously obtained face-attached certificate stored in the digital wallet to the certificate issuer and requests the issuance of a face VC. The certificate issuer compares the face information in the certificate presented by the user with the face information it holds, and if they match, issues a face VC.

[0145] <Certificate usage> The user presents the certificate required by the service provider to the service provider. For example, a student who wants to purchase a commuter pass presents his / her student ID and face VC to the railway company.

[0146] For example, the user starts a digital wallet application by operating the terminal 30. The user selects a certificate (for example, a student ID card and a face VC) designated by the service provider on the digital wallet application.

[0147] The terminal 30 displays the certificate (for example, a student ID card and a face VC) selected by the user.

[0148] The user presents the terminal 30 displaying the student ID card and face VC to a service provider (for example, a railway company employee).

[0149] A service provider (such as an employee of the service provider) operates the business operator terminal 20 to read the presented student ID card and face VC. The service provider also operates the business operator terminal 20 to acquire biometric information of the user in front of them (the user who presents the certificate). For example, the service provider operates the business operator terminal 20 to photograph the user in front of them and acquire a face image.

[0150] The provider terminal 20 acquires the face VC and biometric information of the user who desires to receive the service.

[0151] The business operator terminal 20 performs a matching process (authentication process) using the biometric information obtained from the face VC and the biometric information of the user in front of the business operator terminal 20. If the authentication process (one-to-one authentication) is successful, the business operator terminal 20 treats the presented certificate as a legitimate certificate issued to the user in front of the business operator terminal 20.

[0152] The business operator terminal 20 notifies the service provider (such as an employee of the service provider) that the presented certificate is legitimate. Alternatively, the business operator terminal 20 determines the authenticity, validity, etc. of the presented certificate as necessary. For example, the business operator terminal 20 verifies the signature affixed to the student ID card and the expiration date of the student ID card. The business operator terminal 20 notifies the service provider of the verification result.

[0153] When the service provider presents the necessary credentials to provide the service to the user, the service provider will provide the service to the user. In the above example, a railway company employee sells a student commuter pass with a student discount.

[0154] <Variation 2> The biometric information matching process required when a service provider provides a service to a user may be performed by the user's terminal 30. In this case, the usage control unit 213 of the terminal 30 executes a second authentication process using the biometric information of the digital wallet holder and the biometric information of the user, and if the second authentication process is successful, uses the certificate stored in the digital wallet.

[0155] For example, confirmation of attendance at university classes may be performed by terminal 30. In this case, when a student receives services from the university (when attending a university class), usage control unit 213 of terminal 30 performs authentication processing using the biometric information of the digital wallet holder and the biometric information of the student. If the authentication processing is successful, usage control unit 213 uses the student ID card stored in the digital wallet to determine whether or not the student has the authority to attend the class.

[0156] A device that transmits a beacon is installed in a university classroom. The beacon transmitting device transmits a beacon that includes a management number corresponding to the class being held in the classroom.

[0157] When terminal 30 receives a beacon emitted by the beacon transmitting device, it activates usage control unit 213. Usage control unit 213 takes an image of the user (owner of the device). Usage control unit 213 executes a matching process using the biometric information stored in the digital wallet (biometric information of the digital wallet holder) and the biometric information obtained by photographing the owner.

[0158] If the verification process is successful, the usage control unit 213 determines that the user operating the device is the digital wallet holder. If the user is the digital wallet holder (if the user's authenticity is confirmed), the usage control unit 213 determines whether the user is eligible to take classes held in the classroom based on the student ID card stored in the digital wallet.

[0159] The usage control unit 213 identifies the class (class name) being held in the classroom from the control number transmitted by the beacon transmitting device, and determines whether the student is eligible to attend the class based on information such as the department written on the student ID. If the student is eligible to attend the class, the usage control unit 213 notifies a server (e.g., server device 10) managed by the university of the student's attendance at the class. In other words, if the student is eligible to attend the class, the usage control unit 213 notifies the university of the student's status as "class attendance."

[0160] If the verification process fails, the usage control unit 213 determines that the student attempting to attend the class is not the owner of the terminal 30 (digital wallet holder), and instructs the user to leave the room. Also, if the usage control unit 213 determines that the user is not qualified to attend the class, it instructs the user to leave the room.

[0161] The usage control unit 213 may perform the above authentication process or verify the authority to participate in a class when it detects a predetermined action by the user (for example, pressing the attendance button) without receiving a beacon. Alternatively, the terminal 30 may estimate the user's current location using a Global Positioning System (GPS). The terminal 30 may activate the usage control unit 213 when it is determined that the user has entered a classroom. Thereafter, the usage control unit 213 may determine whether the user is eligible to attend classes held in the classroom based on the student ID stored in the digital wallet.

[0162] Alternatively, attendance confirmation may be performed by a provider terminal 20 provided by the university. A tablet-type provider terminal 20 or a kiosk-type provider terminal 20 may be installed at the entrance to the classroom, and the provider terminal 20 may acquire the certificate and perform the biometric information matching process. That is, the terminal 30 transmits a facial image and information related to the student ID card to the provider terminal 20 installed at the entrance to the classroom. The provider terminal 20 may perform the matching process using a facial image captured by the user in front of the terminal 30 and a facial image acquired from the terminal 30.

[0163] In this way, when the usage control unit 213 receives a beacon from a beacon transmitting device installed in a classroom of an educational institution, it executes the second authentication process. If the second authentication process is successful, the usage control unit 213 determines whether the user is eligible to take classes held in the classroom based on the student ID card stored in the digital wallet.

[0164] <Variation 3> A plurality of digital contents may be transmitted and received between terminal 30 and provider terminal 20. For example, when a user enters a facility such as a museum, a student ID card identifying the user as a student and a coupon for a predetermined discount may be provided to provider terminal 20. In this case, terminal 30 may display a two-dimensional barcode obtained by converting the digital content (student ID card, coupon) designated by the user and biometric information. The user may designate digital content to be presented to a service provider based on information provided by the service provider or the like. Alternatively, terminal 30 may automatically designate digital content when the user receives a predetermined service.

[0165] If the business operator terminal 20 is successful in matching the facial image obtained by photographing the user in front of the user with the facial image acquired from the terminal 30, it determines that the acquired student ID card is legitimate. In this case, the user can receive a student discount. Furthermore, if the coupon acquired from the terminal 30 is valid, the business operator terminal 20 will provide a discount according to the coupon (and notify employees of the service provider that the coupon is valid).

[0166] In this way, a tablet or kiosk terminal installed at the entrance of a facility or the like may use biometric authentication to confirm the validity of a student ID card, etc. The business terminal 20 prevents users other than students from using the student discount.

[0167] <Variation 4> In the above embodiment, it has been described that a certificate and biometric information are transmitted and received between the terminal 30 and the operator terminal 20 using a two-dimensional barcode. The certificate and biometric information may be transmitted and received between the terminal 30 and the operator terminal 20 using a short-range wireless communication means such as Bluetooth (registered trademark) or NFC (Near Field Communication). Alternatively, the certificate and biometric information may be transmitted and received between the terminal 30 and the operator terminal 20 using a mobile communication means such as 4G (4th Generation) or 5G (5th Generation) or a wireless LAN (Local Area Network) such as Wi-Fi (Wireless Fidelity).

[0168] In this case, the usage control unit 213 of the terminal 30 transmits the certificate (signed certificate) selected by the user and the biometric information of the digital wallet holder to the operator terminal 20 using short-range wireless communication means.

[0169] Upon receiving the certificate and the biometric information, the service provision control unit 402 of the provider terminal 20 acquires the biometric information of the user in front of the provider. Thereafter, the service provision control unit 402 performs biometric authentication using the two pieces of biometric information, as described in the first embodiment.

[0170] <Variation 5> In the above embodiment, a case has been described in which a certificate (digital content) issued by a certificate issuer is stored in a digital wallet of the terminal 30. For the certificate (digital content), a non-fungible token (NFT) or a verifiable credential (VC) may be issued and verified using a blockchain. Specifically, the certificate issuer registers transaction information obtained by issuing the NFT or VC in the blockchain, and the service provider verifies the reliability of the certificate using the transaction information recorded in the blockchain.

[0171] The user terminal 30 requests the certificate issuer (server device 10) to issue a certificate (certificate issuance request; step S11 in FIG. 15).

[0172] Server device 10 (certificate issuing unit 302) generates a signed certificate when it receives a certificate issuance request from terminal 30. Server device 10, which is the certificate issuer, issues an NFT or VC for the generated signed certificate (certificate issuance; step S12).

[0173] In addition, the server device 10 of the certificate issuer registers transaction information obtained by issuing an NFT or VC in the blockchain (step S13). The transaction information includes an issuer ID, a public key, and the like.

[0174] The terminal 30 (certificate acquisition control unit 212) stores the received certificate in a digital wallet. For example, when a student's terminal 30 requests the university to issue a student ID card, the terminal 30 stores the VC and NFT of the student ID card in the digital wallet. Transaction information related to the student ID card (issuing university ID, public key, etc.) is stored in the blockchain.

[0175] When the user selects the certificate to be used, the terminal 30 (usage control unit 213) provides the selected certificate and the biometric information of the digital wallet holder to the service provider. The terminal 30 provides the certificate and the biometric information to the business terminal 20 of the service provider using a two-dimensional barcode, short-range wireless communication means, etc. (certificate presentation; step S14).

[0176] The service provider's business terminal 20 (service provision control unit 402) verifies the reliability of the received certificate using transaction information recorded in the blockchain (certificate verification; step S15). The business terminal 20 verifies that the certificate has not been tampered with and that it has been issued by a reliable issuer using the transaction information obtained from the blockchain. The business terminal 20 also acquires biometric information by photographing the user in front of the user.

[0177] The business operator terminal 20 performs authentication processing using the biometric information acquired from the terminal 30 and the biometric information acquired from the user in front of the terminal 30. If the verification of the reliability of the certificate and the authentication of the user are successful, the business operator terminal 20 provides the service to the user (service provision; step S16).

[0178] As described above, the terminal 30 according to the first embodiment uses a trusted identification card issued by a public institution, such as a My Number Card, as the root of trust (Root of Trust) when opening a digital wallet. The terminal 30 performs identity verification using biometric information obtained from the identification card (Root of Trust) and the biometric information of the digital wallet creator. The terminal 30 ensures that the digital wallet creator and the digital wallet holder are the same person through this identity verification (authentication process using two pieces of biometric information). This configuration, for example, prevents a third party from opening a digital wallet under a false name (a digital wallet cannot be opened using another party's identification). Furthermore, the service provider uses biometric authentication to verify that the user using the digital wallet and the digital wallet holder match. If the digital wallet user and the digital wallet holder do not match, the service provider will not trust the certificate provided by the digital wallet. In other words, it is guaranteed that the service user and the digital wallet holder match (the authenticity of the match between the service user and the digital wallet holder is guaranteed). In this way, by having the service provider also perform the authentication process, it is possible to prevent fraudulent use of the certificate in the digital wallet by a user who hands over the terminal 30 to another person after the digital wallet is started. Furthermore, after biometric authentication by the service provider, the certificate stored in the digital wallet is used for student discount applications, attendance management, etc.

[0179] Furthermore, when terminal 30 obtains a certificate from a certificate issuer, it compares basic information obtained from the identification card with basic information obtained from the certificate. Through this comparison, terminal 30 verifies (confirms) that the issued certificate has not been issued to anyone other than the digital wallet holder. A certificate that has been successfully verified is stored in the digital wallet, ensuring the authenticity of the digital wallet and also the authenticity of the digital content (certificate) provided from the digital wallet.

[0180] Next, the hardware of each device constituting the information processing system will be described. Fig. 16 is a diagram showing an example of the hardware configuration of the terminal 30.

[0181] The terminal 30 can be configured by an information processing device (so-called computer), and has the configuration exemplified in Fig. 16. For example, the terminal 30 has a processor 311, a memory 312, an input / output interface 313, a communication interface 314, etc. The components such as the processor 311 are connected by an internal bus or the like, and are configured to be able to communicate with each other.

[0182] However, the configuration shown in Fig. 16 is not intended to limit the hardware configuration of the terminal 30. The terminal 30 may include hardware not shown, and may not include the input / output interface 313 as necessary. Furthermore, the number of processors 311 and the like included in the terminal 30 is not intended to be limited to the example shown in Fig. 16, and for example, the terminal 30 may include multiple processors 311.

[0183] The processor 311 is a programmable device such as a central processing unit (CPU), a micro processing unit (MPU), or a digital signal processor (DSP). Alternatively, the processor 311 may be a device such as a field programmable gate array (FPGA) or an application specific integrated circuit (ASIC). The processor 311 executes various programs including an operating system (OS).

[0184] The memory 312 is a random access memory (RAM), a read only memory (ROM), a hard disk drive (HDD), a solid state drive (SSD), etc. The memory 312 stores an OS program, application programs, and various data.

[0185] The input / output interface 313 is an interface for a display device and an input device (not shown). The display device is, for example, a liquid crystal display. The input device is, for example, a device that accepts user operations such as a keyboard or a mouse.

[0186] The communication interface 314 is a circuit, module, etc. that communicates with other devices. For example, the communication interface 314 includes a network interface card (NIC).

[0187] The functions of the terminal 30 are realized by various processing modules. The processing modules are realized, for example, by the processor 311 executing a program stored in the memory 312. The program can be recorded on a computer-readable storage medium. The storage medium can be a non-transitory medium such as a semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. That is, the present invention can also be embodied as a computer program product. The program can be downloaded via a network or updated using a storage medium storing the program. The processing modules can also be realized by a semiconductor chip.

[0188] The server device 10, the business operator terminal 20, etc. can also be configured by information processing devices in the same way as the terminal 30, and their basic hardware configurations are no different from those of the terminal 30, so a description thereof will be omitted.

[0189] Terminal 30, which is an information processing device, is equipped with a computer, and functions of terminal 30 can be realized by having the computer execute a program. Furthermore, terminal 30 executes a control method for terminal 30 by using the program. Similarly, server device 10 is equipped with a computer, and functions of server device 10 can be realized by having the computer execute a program. Furthermore, server device 10 executes a control method for server device 10 by using the program.

[0190] [Variations] The configuration, operation, etc. of the information processing system described in the above embodiment are merely examples, and are not intended to limit the configuration, etc. of the system.

[0191] When comparing basic information (e.g., name, gender, date of birth, address) acquired from an identification card with basic information acquired from a certificate, terminal 30 may take into consideration variations in spelling of each item constituting the basic information. For example, terminal 30 may calculate the degree of match between two pieces of basic information as a matching score, taking into consideration variations in spelling of name and address. For example, terminal 30 may acquire the degree of match between two pieces of basic information using a learning model obtained by machine learning. Terminal 30 may perform threshold processing on the acquired degree of match (matching score), and discard the acquired certificate if the matching score is equal to or less than a predetermined value.

[0192] In the above embodiment, a case has been described in which identity verification (confirming that the name on the identity card matches the name of the person who opened the digital wallet) is performed using biometric information obtained from an identity card. However, identity verification may also be performed using an electronic certificate stored in the identity card. Specifically, the terminal 30 acquires an electronic certificate (an electronic signature certificate and an electronic user certificate) from the My Number card possessed by the user. The terminal 30 transmits the acquired electronic signature to a certification authority (J-LIS; Japan Agency for Local Authority Information Systems) and requests the certification authority to verify the validity of the electronic certificate. If the electronic certificate is valid, the terminal 30 determines that identity verification has been successful.

[0193] When opening a digital wallet, the terminal 30 may set an expiration date (validity period) for the opened digital wallet. The terminal 30 may set the expiration date of the digital wallet based on the identification used for identity verification and the expiration date of the identification. For example, if a passport valid for five years is used for identity verification, the terminal 30 sets the validity period of the digital wallet to five years. Alternatively, if a passport valid for ten years or a My Number card valid for ten years is used for identity verification, the terminal 30 may set the validity period of the digital wallet to ten years. Alternatively, the terminal 30 may set the validity period of the digital wallet to be different depending on whether a passport or a My Number card is used for identity verification. Alternatively, the terminal 30 may determine the validity period of the digital wallet based on the remaining validity period of the identification, rather than the validity period at the time the identification was issued. For example, if an identification with a remaining validity period of three years is used for identity verification, the terminal 30 sets the validity period of the digital wallet to three years. If an identification card with a remaining validity of five years is used for identity verification, the terminal 30 sets the validity period of the digital wallet to five years.

[0194] Alternatively, terminal 30 may set a limit on the number of times the digital wallet can be used. For example, if terminal 30 detects that the digital wallet has been launched a predetermined number of times or more within a predetermined period, it determines that the user has fraudulently used the digital wallet. In this case, terminal 30 will not launch the digital wallet and will prohibit the user from using the digital wallet.

[0195] When presenting the digital wallet holder's biometric information and certificate to the service provider, the terminal 30 may present some of the information to the service provider by means other than a two-dimensional barcode. For example, as shown in FIG. 17, the terminal 30 may display a facial image (biometric information) and a two-dimensional barcode converted from the certificate, etc., on the same screen. Alternatively, the terminal 30 may display a facial image and a two-dimensional barcode converted from the facial image and certificate on the same screen. An employee of the service provider may verify the identity of the user presenting the certificate using the face of the user and the facial image displayed on the terminal 30.

[0196] In the first modification of the first embodiment, a case where a student attends a class held at a university has been described as an example in which a user's terminal 30 performs a biometric information matching process required for a service provider to provide a service to the user. However, the matching process may also be performed on the user's terminal 30 for purposes other than confirming attendance at a class held at a university. That is, when the user's terminal 30 successfully matches a facial image captured by a photograph with a pre-registered face, the terminal 30 issues (displays) a two-dimensional barcode indicating that facial authentication was successful and including corresponding certificate information. The business operator terminal 20 can then read the issued two-dimensional barcode and obtain information such as the certificate required for identity verification and service provision. In this case, the business operator terminal 20 does not need to perform a matching process using a facial image or photograph the user (acquire a facial image). Therefore, the business operator terminal 20 only needs to be equipped with a barcode reader; a camera is not required. In addition, to prevent use by a user who is not the digital wallet holder, the terminal 30 may display a display such as that shown in FIG. 17 (displaying a two-dimensional barcode and a facial image on the same screen). In other words, by visually verifying the identity of the person, an employee of the service provider or the like can prevent fraud such as the digital wallet holder handing over terminal 30 to another person after identity verification is complete, and then presenting terminal 30 to the service provider.

[0197] When a biometric information matching process required for a service provider to provide a service to a user is executed on the user's terminal 30, the terminal 30 may limit the display of the 2D barcode to a predetermined time. For example, the terminal 30 may be configured to display the 2D barcode only for a predetermined time after successful biometric authentication.

[0198] Some functions of the terminal 30 may be implemented in another apparatus, device, etc. More specifically, the above-described "identity verification unit (identity verification means)," "certificate acquisition control unit (certificate acquisition control means)," etc. may be implemented in any of the apparatuses included in the system.

[0199] The form of data transmission and reception between each device (for example, server device 10, terminal 30) is not particularly limited, but the data transmitted and received between these devices may be encrypted. Personal information of users and the like is transmitted and received between these devices, and in order to appropriately protect this information, it is desirable that encrypted data be transmitted and received.

[0200] In the flow charts (flowcharts, sequence diagrams) used in the above explanation, multiple steps (processes) are described in order, but the execution order of the steps executed in the embodiments is not limited to the order described. In the embodiments, the order of the illustrated steps can be changed to the extent that the content is not affected, such as by executing each process in parallel.

[0201] The above-described embodiments have been described in detail to facilitate understanding of the present disclosure, and it is not intended that all of the above-described configurations are required. Furthermore, when multiple embodiments are described, each embodiment may be used alone or in combination. For example, it is possible to replace part of the configuration of one embodiment with the configuration of another embodiment, or to add the configuration of another embodiment to the configuration of one embodiment. Furthermore, it is possible to add, delete, or replace part of the configuration of one embodiment with another configuration.

[0202] The above explanation makes clear the industrial applicability of the present invention, and the present invention is suitably applicable to information processing systems including service providers that provide services to users using certificates stored in digital wallets.

[0203] Some or all of the above embodiments can be described as, but are not limited to, the following supplementary notes. [Appendix 1] an identity verification means for verifying the identity of a creator who opens a digital wallet using biometric information obtained from an identification card and biometric information of the creator who opens the digital wallet; a storage means for storing, if the identity verification is successful, biometric information obtained from the identification card or biometric information of the person who opens the digital wallet as biometric information of the digital wallet holder; A terminal comprising: [Appendix 2] The terminal described in Appendix 1, wherein the identity verification means determines that the identity verification is successful if a first authentication process using biometric information obtained from the identification card and biometric information of the creator who opens the digital wallet is successful. [Appendix 3] The terminal described in Appendix 2 further comprises a certificate acquisition control means that receives the certificate from a certificate issuer by requesting the certificate issuer to issue the certificate, and stores the received certificate in the digital wallet if basic information about the certificate holder obtained from the identification card matches basic information about the certificate holder obtained from the received certificate. [Appendix 4] The terminal described in Appendix 3, further comprising a usage control means for providing the certificate stored in the digital wallet and the biometric information of the digital wallet holder to the service provider when the user receives a service from the service provider. [Appendix 5] The terminal described in Appendix 3 further comprises a usage control means that, when a user receives a service from a service provider, performs a second authentication process using the biometric information of the digital wallet holder and the biometric information of the user, and if the second authentication process is successful, uses the certificate stored in the digital wallet. [Appendix 6] The usage control means The terminal described in Appendix 5, which, when receiving a beacon from a beacon transmitting device installed in a classroom of an educational institution, executes the second authentication process, and if the second authentication process is successful, determines whether the user is eligible to take classes held in the classroom based on the student ID stored in the digital wallet. [Appendix 7] The terminal according to any one of appendices 1 to 6, wherein the identification card is a My Number card or a passport. [Appendix 8] The terminal according to claim 7, wherein the biometric information is a facial image or a feature generated from the facial image. [Appendix 9] A terminal and a carrier terminal used when a service provider provides a service to a user; Including, The terminal an identity verification means for verifying the identity of a creator who opens a digital wallet using biometric information obtained from an identification card and biometric information of the creator who opens the digital wallet; a storage means for storing, if the identity verification is successful, biometric information obtained from the identification card or biometric information of the person who opens the digital wallet as biometric information of the digital wallet holder; a usage control means for providing the content stored in the digital wallet and the biometric information of the digital wallet holder to the business operator terminal; A system comprising: [Appendix 10] On the device, Verifying the identity of the creator of the digital wallet using biometric information obtained from the identification card and the biometric information of the creator of the digital wallet; A terminal control method in which, if the identity verification is successful, the biometric information obtained from the identification card or the biometric information of the person who opens the digital wallet is stored as the biometric information of the digital wallet holder. [Appendix 11] The computer installed in the device A process of verifying the identity of the creator of the digital wallet using biometric information obtained from the identification card and the biometric information of the creator of the digital wallet; If the identity verification is successful, a process of storing the biometric information obtained from the identification card or the biometric information of the creator who opens the digital wallet as the biometric information of the digital wallet holder; A computer-readable storage medium that stores a program for executing the above.

[0204] The disclosures of the above-cited prior art documents are incorporated herein by reference. Although the embodiments of the present invention have been described above, the present invention is not limited to these embodiments. Those skilled in the art will understand that these embodiments are merely illustrative and that various modifications are possible without departing from the scope and spirit of the present invention. In other words, the present invention naturally includes various modifications and alterations that may be made by those skilled in the art in accordance with the entire disclosure, including the claims, and the technical concepts thereof. [Explanation of symbols]

[0205] 10 Server device 20 Operator terminal 30 devices 100 devices 101 Identity Verification Methods 102 Memory means 201 Communication control unit 202 Digital Wallet Control Unit 203 Storage section 211 Identity Verification Department 212 Certificate Acquisition Control Unit 213 Usage Control Unit 301 Communication Control Unit 302 Certificate Issuance Department 303 Storage section 311 processor 312 memory 313 Input / Output Interface 314 Communication Interface 401 Communication control unit 402 Service provision control unit 403 Storage section

Claims

1. An acquisition means for acquiring a facial image from the identification card of a person who opens a digital wallet; a storage means for storing the facial image obtained from the identification card or the facial image of the creator who opens the digital wallet as a facial image of the digital wallet holder when identity verification using the facial image obtained from the identification card and the facial image of the creator who opens the digital wallet is successful; a transmitting means for transmitting a face image obtained from the identification card or a face image of the creator of the digital wallet to an external device as a request for issuance of a face VC (Verifiable Credential); a receiving means for receiving the face VC issued by the external device that has successfully collated the transmitted face image with a face image held by the external device; A terminal comprising:

2. An acquisition means for acquiring a facial image from the identification card of a person who opens a digital wallet; a storage means for storing the facial image obtained from the identification card or the facial image of the creator who opens the digital wallet as a facial image of the digital wallet holder when identity verification using the facial image obtained from the identification card and the facial image of the creator who opens the digital wallet is successful; an identity verification means for verifying the identity of a person who opens the digital wallet using a facial image obtained from the identification card and a facial image of the person who opens the digital wallet; a transmitting means for transmitting a face image obtained from the identification card or a face image of the creator of the digital wallet to an external device as a request for issuance of a face VC (Verifiable Credential); a receiving means for receiving the face VC issued by the external device that has successfully collated the transmitted face image with a face image held by the external device; A terminal comprising:

3. A facial image is obtained from the identification card of the person who opens the digital wallet, If identity verification using the facial image obtained from the identification card and the facial image of the creator who opens the digital wallet is successful, the facial image obtained from the identification card or the facial image of the creator who opens the digital wallet is stored as a facial image of the digital wallet holder; Sending a face image obtained from the identification card or a face image of the person who opens the digital wallet to an external device as a request for issuing a face VC (Verifiable Credential); A terminal control method for receiving the face VC issued by the external device that has successfully collated the transmitted face image with a face image held by the external device.

4. A facial image is obtained from the identification card of a person who opens a digital wallet, If identity verification using the facial image obtained from the identification card and the facial image of the creator who opens the digital wallet is successful, the facial image obtained from the identification card or the facial image of the creator who opens the digital wallet is stored as a facial image of the digital wallet holder; performing identity verification using a facial image obtained from the identification card and a facial image of the creator of the digital wallet; Sending a face image obtained from the identification card or a face image of the person who opens the digital wallet to an external device as a request for issuing a face VC (Verifiable Credential); A terminal control method for receiving the face VC issued by the external device that has successfully collated the transmitted face image with a face image held by the external device.

5. A computer, A process of acquiring a facial image from an identification card of a person who opens a digital wallet; a process of storing the facial image obtained from the identification card or the facial image of the creator who opens the digital wallet as a facial image of the digital wallet holder when identity verification using the facial image obtained from the identification card and the facial image of the creator who opens the digital wallet is successful; A process of transmitting a face image obtained from the identification card or a face image of the creator who opens the digital wallet to an external device as a request for issuance of a face VC (Verifiable Credential); A process of receiving the face VC issued by the external device that has successfully matched the transmitted face image with a face image held by the external device; A program to execute.

6. A computer, A process of acquiring a facial image from an identification card of a person who opens a digital wallet; a process of storing the facial image obtained from the identification card or the facial image of the creator who opens the digital wallet as a facial image of the digital wallet holder when identity verification using the facial image obtained from the identification card and the facial image of the creator who opens the digital wallet is successful; a process of performing identity verification using a facial image obtained from the identification card and a facial image of the creator of the digital wallet; A process of transmitting a face image obtained from the identification card or a face image of the creator who opens the digital wallet to an external device as a request for issuance of a face VC (Verifiable Credential); A process of receiving the face VC issued by the external device that has successfully matched the transmitted face image with a face image held by the external device; A program to execute.

Images