Information processing device, information communication system, information processing method, and program

The information processing device and system authenticate users through two-stage verification of device identifiers and location to ensure only authorized individuals can access interactive services, addressing the confidentiality issues in conventional STBs.

JP7806321B1Active Publication Date: 2026-01-26KDDI CORP
View PDF 5 Cites 0 Cited by

Patent Information

Application Number
JP2025055586
Authority / Receiving Office
JP · JP
Patent Type
Patents
Current Assignee / Owner
Filing Date
2025-03-28
Publication Date
2026-01-26
Estimated Expiration
2045-03-28

AI Technical Summary

Technical Problem

Conventional set-top boxes (STBs) allow unrestricted use by household members, compromising confidentiality in interactive services involving personal information, as they lack the ability to limit access to specific users within the household.

Method used

An information processing device and system that manages contract information associating first and second device identifiers, performs two-stage authentication using communication identification and location verification, and controls communication based on matching identifiers and location relationships to ensure only authorized users can access interactive services.

Benefits of technology

Enables secure provision of interactive services to specific users in specific locations, ensuring confidentiality and reliability in accessing personal information.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure 0007806321000001_ABST
    Figure 0007806321000001_ABST
Patent Text Reader

Abstract

To realize that only specific users at specific locations can receive interactive services. [Solution] The information processing device includes a contract information management unit that manages contract information that associates first identifier information indicating a first device that can use a video service pursuant to a contract between a specified operator and a user and second identifier information indicating a second device that is different from the first device and owned by the user; a receiving unit that receives a video service request from the first device and also receives the first identifier information; a transmitting unit that transmits communication identification information to the first device for identifying the communication indicated by the video service request; a matching unit that, when receiving communication identification information from the second device, compares the second identifier information of the second device with the second identifier information associated with the first identifier information managed as contract information; and a communication control unit that starts communication based on the video service request if the comparison results in a match between the two.
Need to check novelty before this filing date? Find Prior Art

Description

[Technical Field]

[0001] The present invention relates to an information processing device, an information communication system, an information processing method, and a program. [Background technology]

[0002] Conventionally, as an interactive service using video and audio, facilities such as stores have provided remote customer service using dedicated terminals equipped with monitors, cameras, microphones, etc. (see, for example, Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Publication No. 2022-26728 Summary of the Invention [Problem to be solved by the invention]

[0004] Here, there is known an STB (set-top box) that can be connected to a television set to watch cable television, etc. It is conceivable that a similar two-way service, an interactive session, can be provided to homes that have this STB installed.

[0005] Because STBs are devices that are always kept in the home, the risk of them being used by others is low, but because they are designed for families, they can be used by anyone living in the same household. Confidentiality becomes an issue when attempting to use such STBs for interactive services, such as interactive sessions involving personal information (medical services, government services, etc.). While it was possible for STBs to authenticate the contracted household using a unique device identifier, it was not possible to limit use to only some users within the household, particularly the STB contracted person.

[0006] The present invention has been made in consideration of the above points, and aims to provide an information processing device, an information communication system, an information processing method, and a program that allow only specific users in specific locations to receive interactive services. [Means for solving the problem]

[0007] (1) One aspect of the present invention is an information processing device comprising: a contract information management unit that manages contract information that associates first identifier information indicating a first device that can use a video service under a contract between a specified provider and a user and second identifier information indicating a second device that is different from the first device and owned by the user; a receiving unit that receives a video service request from the first device and also receives the first identifier information; a transmitting unit that transmits to the first device communication identification information for identifying the communication indicated by the video service request; a matching unit that, when receiving the communication identification information from the second device, compares the second identifier information of the second device with the second identifier information associated in the contract information with the first identifier information received by the receiving unit; and a communication control unit that, when the comparison by the matching unit results in a match, starts communication based on the video service request.

[0008] (2) Also, one aspect of the present invention is that in the information processing device of (1) described above, the matching unit matches the communication identification information received from the second device with the communication identification information transmitted to the first device by the transmitting unit, and matches the second identifier information of the second device with the second identifier information associated in the contract information with the first identifier information received by the receiving unit, and the communication control unit starts communication based on the video service request when both pieces of communication identification information match and both pieces of second identifier information match.

[0009] (3) In addition, in one aspect of the present invention, in the information processing device of (1) described above, the second identifier information of the second device is a telephone number registered in the second device; the second identifier information associated with the first identifier information in the contract information is a telephone number associated with the first identifier information of the first device; The verification unit verifies both of the telephone numbers.

[0010] (4) Also, one aspect of the present invention is that in the information processing device described above in (1), the contract includes a contract for the use of multiple video services, and the communication control unit determines whether or not to cause the transmission unit to transmit the communication identification information to the first device depending on the content of the video service request received by the receiving unit.

[0011] (5) Furthermore, one aspect of the present invention is an information processing device as described above in (1), further comprising a determination unit that acquires location information of the second device and determines whether the location information is in a predetermined location relationship with the location information of the first device, and the communication control unit starts communication based on the video service request when the comparison unit finds that the second identifier information of the second device matches the second identifier information associated in the contract information with the first identifier information received by the receiving unit, and when the determination unit finds that the first device and the second device are in a predetermined location relationship.

[0012] (6) Also, in one aspect of the present invention, in the information processing device of (1) above, the video service is a remote video communication service between the first device and the second device and a third device other than the first device and the second device.

[0013] (7) In addition, one aspect of the present invention is an information processing device according to the above (6), further comprising: a second transmitting unit that transmits contract information of the user to the third device when the receiving unit receives the video service request; The device further includes a second receiving unit that receives identity verification requirement information transmitted from the third device based on the contract information after the second transmitting unit has transmitted the contract information and before starting communication based on the video service request.

[0014] (8) Also, one aspect of the present invention is that in the information processing device described above in (7), the transmitting unit transmits the communication identification information to the first device when identity verification is required based on the identity verification requirement information.

[0015] (9) Furthermore, one aspect of the present invention is that, in the information processing device described above in (1), it further includes an identifier data generation unit that generates identifier data that can be displayed as a video and includes at least the communication identification information, and the transmission unit transmits the identifier data to the first device.

[0016] (10) Another aspect of the present invention is an information communication system including the information processing device according to any one of (6) to (8) above, the first device, the second device, and the third device.

[0017] (11) Another aspect of the present invention is an information processing method comprising the steps of: managing contract information that associates first identifier information indicating a first device that can use a video service under a contract between a specified provider and a user with second identifier information indicating a second device that is different from the first device and owned by the user; receiving a video service request from the first device and receiving the first identifier information; transmitting communication identification information to the first device for identifying the communication indicated by the video service request; when receiving the communication identification information from the second device, comparing the second identifier information of the second device with the second identifier information associated in the contract information with the received first identifier information; and, if the comparison results in a match, starting communication based on the video service request.

[0018] (12) Another aspect of the present invention is a program that causes a computer to execute the following steps: managing contract information that associates first identifier information indicating a first device that can use a video service pursuant to a contract between a specified provider and a user and second identifier information indicating a second device that is different from the first device and owned by the user; receiving a video service request from the first device and receiving the first identifier information; sending communication identification information to the first device for identifying the communication indicated by the video service request; when receiving the communication identification information from the second device, comparing the second identifier information of the second device with the second identifier information associated in the contract information with the received first identifier information; and, if the comparison results in a match, starting communication based on the video service request. [Effects of the Invention]

[0019] According to the present invention, it is possible to provide an information processing device, an information communication system, an information processing method, and a program that enable only specific users in specific locations to receive interactive services. [Brief explanation of the drawings]

[0020] [Figure 1] 1 is a block diagram showing a configuration of an information communication system according to an embodiment of the present invention; [Figure 2] 10 is a flowchart illustrating processing performed by the information communication system according to the present embodiment. [Figure 3] 10 is a flowchart illustrating processing performed by the information communication system according to the present embodiment. [Figure 4] 10A and 10B are diagrams showing an example of an image displayed on a television receiver connected to an STB in the information communication system according to the present embodiment. [Figure 5] 1 is a block diagram showing an example of the internal configuration of an information processing apparatus according to an embodiment of the present invention; DETAILED DESCRIPTION OF THE INVENTION

[0021] [Embodiment] An information processing device, an information communication system, an information processing method, and a program according to the present embodiment will be described in detail below with reference to preferred embodiments and the accompanying drawings. In the drawings, identical or similar parts are designated by identical or similar reference numerals. Note that the present embodiment is not limited to these embodiments and includes various modifications or improvements. In other words, the components described below include those that can be easily imagined by a person skilled in the art or that are substantially identical, and the components described below can be combined as appropriate. Furthermore, various omissions, substitutions, or modifications of components may be made in the present embodiment without departing from the spirit and scope of the present invention. In addition, in the drawings, the scale and number of each structure may differ from the scale and number of the actual structure to facilitate understanding of each structure.

[0022] [Information and Communication Systems] FIG. 1 is a block diagram showing the configuration of an information communication system according to this embodiment. First, an example of the configuration of the information communication system 1 will be described with reference to the diagram. The information communication system 1 includes an operator-side PC 10, a cloud system 20, an STB 30, and a user device 40. The operator-side PC 10, the cloud system 20, the STB 30, and the user device 40 are connected via a network NW such as the Internet. The user device 40 can also make calls to a predetermined telephone number of the cloud system 20 via a communication line TL such as a telephone line network. The cloud system 20 can be considered an information processing device that controls an interactive session between the operator-side PC 10, the STB 30, and the user device 40. In other words, the interactive session, which is a video service, can be considered a remote video communication service between the STB 30, which is a first device, the user device 40, which is a second device, and the operator-side PC 10, which is a third device.

[0023] [Operator PC configuration] The operator's PC 10 is a computer used by an operator who provides various user services through an interactive session. An operator refers to a specialist in the user services (for example, a doctor, pharmacist, engineer, etc.). The operator's PC 10 is a device that can send and receive video data and audio data to the STB 30 when an interactive session is started. The operator's PC 10 includes a video and audio output unit 11, a video and audio encoding unit 12, and an interactive control UI (user interface) 13. The video and audio output unit 11 outputs video to a monitor (not shown) and audio to a speaker (not shown).

[0024] The video / audio encoding unit 12 encodes video captured by a camera (not shown) and audio collected by a microphone (not shown), and transmits the encoded video to the cloud system 20. The interaction control UI 13 is a user interface that controls an interaction session between the STB 30 and a user who uses the user device 40.

[0025] [Cloud system configuration] In response to a connection request for an interactive session from the STB 30, the cloud system 20 performs personal authentication using a user device 40, such as a smartphone, owned by the user who uses the STB 30. The cloud system 20 also controls the connection / disconnection of the interactive session between the user operator's PC 10 and the STB 30. The cloud system 20 includes a session management unit 21, a video / audio transfer unit 24, a two-dimensional barcode generation unit 25, a contract information acquisition unit 26, a contract information DB (database) 27, and a telephone receiving unit 28.

[0026] The session management unit 21 manages the interactive session between the operator-side PC 10, the STB 30, and the user device 40. More specifically, the session management unit 21 performs identity authentication to authenticate that the user who is in front of or can operate the STB 30 that has requested connection to the interactive session is the subscriber of that STB 30, based on a session ID for uniquely identifying the interactive session, which is generated in response to a connection request for the interactive session from the STB 30, and the telephone number of the user device 40 owned by the subscriber of the STB 30.

[0027] The video and audio transfer unit 24 transfers various data, including video data (including an interaction control UI) and audio data, between the operator's PC 10 and the STB 30. Furthermore, while the user device 40 is connected to the interaction session by the session management unit 21, the video and audio transfer unit 24 transfers the video data and audio data from the user device 40 to the operator's PC 10, and also superimposes the video data from the user device 40 on the video from the operator's PC 10 and transfers it to the STB 30. In other words, audio data from the user device 40 is not transferred to the STB 30. This is to prevent the user from feeling uncomfortable due to their own audio being output from the STB 30.

[0028] When a user requests connection from the STB 30 to an interactive session with the operator's PC 10, the two-dimensional barcode generation unit 25 generates a two-dimensional barcode for user authentication. An example of a two-dimensional barcode is a QR code (registered trademark). The two-dimensional barcode is generated in a tel link format (e.g., 03-9999-9999#123456) that includes the telephone number of the called party registered in the telephone receiving unit 28, with a six-digit session ID as an argument to uniquely identify the interactive session. Note that "#123456" is the session ID. In other words, the two-dimensional barcode generation unit 25 can be said to be an identifier data generation unit that generates a two-dimensional barcode that is identifier data that can be displayed as a video and that includes at least the session ID, which is communication-specific information.

[0029] The two-dimensional barcode is superimposed on the video data from the operator's PC 10 by the video and audio transfer unit 24 and transferred to the STB 30. In other words, the video and audio transfer unit 24 can be said to be a transmission unit that transmits the two-dimensional barcode, which is identifier data, to the STB 30, which is the first device.

[0030] The contract information acquisition unit 26 identifies the subscriber of the STB from the contract information DB 27 based on the STB identifier information (MAC address, Media Access Control address, etc.) transmitted from the STB 30 upon requesting connection to the interactive session, and acquires subscriber information including the subscriber's name, telephone number, address, subscribed services, and fee plan. The subscriber information is transmitted to the operator's PC 10 by the video / audio transfer unit 24. The contract information DB 27 stores subscriber information including the subscriber's name, telephone number, address, subscribed services, and fee plan for each STB identifier. The contract information is provided in advance by, for example, an STB provider. In other words, the contract information acquisition unit 26 and the contract information DB 27 can be considered a contract information management unit that manages contract information that associates STB identifier information, which is first identifier information indicating the STB 30, which is a first device that can use video services under a contract between a predetermined provider and a user, with a telephone number, which is second identifier information indicating the user device 40, which is a second device owned by the user and different from the first device. Furthermore, the telephone number, which is the second identifier information associated in the contract information with the STB identifier information, which is the first identifier information, can be said to be the telephone number associated with the first identifier information of the STB30, which is the first device.

[0031] The telephone receiving unit 28 has a specific telephone number (called party) prepared for personal authentication, and when a call is received from the user device 40 to the specific telephone number, the telephone receiving unit 28 acquires the caller number and session ID from the user device 40. The caller number and session ID are provided to the session management unit 21 for personal authentication.

[0032] [STB configuration] The STB 30 is a device that, when connected to a television set 60, accepts operations from a user via a remote controller (hereinafter also referred to as a remote control) 50 and displays various programs and program guides on the television set 60. The STB 30 has the above-mentioned unique STB identifier information (MAC address), which makes it possible to uniquely identify the STB 30. In other words, the STB 30 can be said to be a device that has STB identifier information, which is first identifier information that indicates the STB 30, which is a first device that can use video services based on a contract between a predetermined provider and a user. The STB 30 includes a video / audio setting operation unit 31, a video / audio output unit 32, a video / audio setting display unit 33, and a remote control operation acceptance unit 34. However, the STB 30 does not basically include a camera function or a microphone function.

[0033] When the video / audio setting operation unit 31 receives updated setting information from the cloud system 20, it updates the UI displayed on the screen of the television receiver 60 according to the setting information. In the personal authentication process, the video / audio output unit 32 superimposes the above-mentioned two-dimensional barcode transferred from the cloud system 20 on video data from the operator's PC 10 and outputs it to the externally connected television receiver 60. Furthermore, during an interactive session, the video / audio output unit 32 outputs video data and audio data transferred from the cloud system 20 to the externally connected television receiver 60. The video data output from the STB 30 includes video data from the operator's PC 10 and video data (picture-in-picture; sub-screen) from the user device 40. On the other hand, the audio data output from the STB 30 includes only audio data from the operator's PC 10.

[0034] The video / audio setting display unit 33 displays on the television receiver 60 a UI that allows the on / off setting of the camera 42 (video) and the microphone 41 (audio) of the user device 40 to be set by the remote control 50. The remote control operation receiving unit 34 receives operations from the remote control 50.

[0035] [User Device Configuration] The user device 40 is an electronic device that has a telephone function, a camera function, and a microphone function, such as a smartphone or tablet terminal owned by a user. The user device 40 has a pre-registered telephone number and is capable of communication via a telephone network. In other words, the user device 40 is a device that has a telephone number as second identifier information that indicates the user device 40, which is a second device owned by the user and is different from the STB 30, which is a first device. The telephone number as second identifier information of the user device 40, which is a second device, can be said to be the telephone number registered in the second device.

[0036] The user device 40 includes a microphone 41, a camera 42, a video / audio encoding unit 43, a setting control unit 44, a browser (application) 45, and a telephone function unit 46. The microphone 41 and the camera 42 are mounted on the user device. The microphone 41 collects the user's voice, and the camera 42 captures the user's image (such as a self-portrait).

[0037] The video / audio encoding unit 43 encodes the audio collected by the microphone 41 and the video captured by the camera 42. The setting control unit 44 controls the on / off settings of the microphone 41 and the camera 42 in response to a request from the cloud system 20 to change the setting state. The browser 45 is an existing application for browsing web pages, and transmits video data and audio data obtained by encoding the video and audio from the camera 42 and the microphone 41 to the cloud system 20. In this embodiment, it is possible to connect to an interactive session using an existing browser application, without installing a new application on the user device 40, such as a smartphone.

[0038] The telephone function unit 46 is an application that is automatically started when a two-dimensional barcode displayed on the screen of the television receiver 60 is read. When a user performs a call operation, the telephone function unit 46 makes a call to the telephone number included in the two-dimensional barcode, i.e., the telephone number of the called party registered in the telephone receiving unit 28 of the cloud system 20.

[0039] [Remote control and TV receiver] The remote control 50 is an input unit for instructing the operation of the STB 60 (channel selection, volume adjustment, etc.). In particular, input such as selection, confirmation, and cancellation can be made to the UI displayed on the television set 60 by operating the remote control 50. The television set 60 is a display device for displaying video data received by the STB 30. In addition to the television set 60, a display that does not have a tuner and is also capable of audio output may be used. Note that if the display does not have an audio output function (an amplifier, a speaker, etc.), a separate audio output device with audio output function can be connected to the STB 30. The television set 60, or the display and audio output device, may be configured integrally with the STB 30.

[0040] In the above-described information and communication system 1, when an interactive session is accessed from the STB 30, the screen of the operator-side PC 10 for that interactive session displays the name, telephone number, address, etc. of the subscriber based on the subscriber information (subscriber information linked to the STB identifier information of the STB 30). The operator checks the subscriber information, and if personal authentication is required, operates "personal authentication request" on the operator-side PC 10. Therefore, if the operator determines that personal authentication is not required, personal authentication is not performed.

[0041] When a personal authentication request is made, the cloud system 20 uses the session ID as an argument in the two-dimensional barcode generation unit 25 to generate a two-dimensional barcode in tel link format that includes the telephone number of the called party registered in the telephone receiving unit 28. The two-dimensional barcode is displayed on the screen of the television receiver 60 of the STB 30.

[0042] The user reads the two-dimensional barcode on the screen of the television set 60 using the camera 42 of the user device 40. In the user device 40, the telephone function unit 46, which is an application, is automatically launched using the telephone number and session ID of the called party acquired from the read two-dimensional barcode. When the user presses the OK key, the telephone function unit 46 makes a call to the telephone receiving unit 28 of the cloud system 20 using the acquired telephone number of the called party.

[0043] When the cloud system 20 receives an incoming call from the user device 40, it acquires the caller number and session ID from the user device 40. The cloud system 20 compares the session ID issued for transmission to the STB 30 with the session ID acquired from the user device 40, and also compares the acquired caller number with the subscriber's telephone number acquired from the contract information. If the caller number matches the telephone number acquired from the subscriber information, and if the subscriber's telephone number matches the acquired caller number, it is possible to identify the user operating the STB 30 as the subscriber himself / herself. In other words, identity authentication is completed.

[0044] In addition, the display on the screen of the television receiver 60 is not limited to a two-dimensional barcode with the recipient's telephone number embedded therein, but may also be a two-dimensional barcode for sending a C-mail containing an identity verification code in the body of the barcode.

[0045] [Identity authentication method] Next, personal authentication will be described with reference to Fig. 2 and Fig. 3. Fig. 2 and Fig. 3 are flowcharts for explaining the processing performed by the information communication system 1 according to this embodiment.

[0046] First, prior to identity authentication, contract information acquisition unit 26 acquires contract information provided in advance by an STB provider or the like, and links subscriber information including the subscriber's name, telephone number, address, currently subscribed services, fee plan, etc. to each STB identifier information, and stores and manages it in contract information DB 27. In other words, this can be said to be a process or step of managing contract information that associates STB identifier information, which is first identifier information indicating STB 30, which is a first device that can use an interactive session, which is a video service, under a contract between a specific provider and a user, with a telephone number, which is second identifier information indicating user device 40, which is a second device different from the first device and owned by the user. The interactive session, which is a video service, may include, for example, an authentication request.

[0047] (Step S10) First, the user operates the remote control 50 to start a remote customer service application on the STB 30. The remote customer service application is an application for conducting an interactive session with the operator's PC 10, and is responsible for sending and receiving video data and audio data, and inputting operations on the remote control 50.

[0048] (Step S12) Next, in the STB 30, the remote customer service application transmits the SIP (Session Initiation Protocol) / SDP (Session Description Protocol) or the like including the STB identifier information (MAC address) to the cloud system 20.

[0049] (Step S14) In cloud system 20, session management unit 21 receives SIP / SDP from STB 30, and contract information acquisition unit 26 acquires subscriber information (such as the subscriber's name, telephone number, address, and current rate plan) corresponding to the STB identifier information from contract information DB 27. In other words, step S14 can be said to be a receiving unit in which session management unit 21 receives a video service request from STB 30, which is the first device, and also receives STB identifier information, which is first identifier information. Also, step S14 can be said to be a process or step in which session management unit 21 receives a video service request from STB 30, which is the first device, and also receives STB identifier information, which is first identifier information.

[0050] Furthermore, the video / audio transfer unit 24 transmits the acquired contractor information to the operator's PC 10 that is providing the interactive session for which the connection request was made. In other words, the video / audio transfer unit 24 can be said to be a second transmission unit that transmits the user's contract information to the operator's PC 10, which is a third device, when the session management unit 21, which is a receiving unit, receives a video service request.

[0051] (Step S16) In the operator's PC 10, the video / audio output unit 11 displays the received subscriber information on a display (not shown).

[0052] (Step S18) The operator checks the displayed contractor information, and if it is determined that personal authentication is necessary, operates an "personal authentication request" on the operator's PC 10. The operator's PC 10 transmits the "personal authentication request" to the cloud system 20.

[0053] (Step S20) In the cloud system 20, upon receiving a personal authentication request from the operator's PC 10, the session management unit 21 issues an n-digit (e.g., 6-digit) session ID for uniquely identifying the interactive session for which the connection request has been made. In other words, the session management unit 21 can be said to be a second receiving unit that receives personal authentication necessity information transmitted from the operator's PC 10, which is a third device, based on the contract information after the video / audio transfer unit 24, which is a second transmitting unit, transmits the contract information and before starting communication based on the video service request.

[0054] (Step S22) Next, in the cloud system 20, the two-dimensional barcode generation unit 25 uses the session ID as an argument to generate a two-dimensional barcode in tel link format that includes the callee's telephone number registered in the telephone receiving unit 28 and the session ID. Then, the video / audio transfer unit 24 transmits the two-dimensional barcode to the STB 30. In other words, the video / audio transfer unit 24 can be said to be a transmission unit that transmits communication identification information for identifying the communication indicated by the video service request to the STB 30, which is the first device. Also, the video / audio transfer unit 24 can be said to be a transmission unit that transmits the session ID, which is communication identification information, to the STB 30, which is the first device, when identity verification is required based on the identity verification requirement information. Also, step S22 can be said to be a process or step of transmitting the session ID, which is communication identification information for identifying the communication indicated by the video service request, to the STB 30, which is the first device.

[0055] (Step S24) When the STB 30 receives the two-dimensional barcode from the cloud system 20, the video / audio output unit 32 displays the two-dimensional barcode on the television receiver 60 by superimposing it on the video data from the operator's PC 10.

[0056] 4 is a diagram showing an example of an image displayed on a television receiver connected to an STB in the information communication system according to this embodiment. In the example shown in the figure, an image 80 of the operator's PC 10 is displayed on the television receiver 60, and a two-dimensional barcode 82 is displayed in the lower right corner superimposed on the image 80 of the operator's PC 10, along with a message 81 that reads, "For identity verification, please read the two-dimensional barcode and make a call (there is no telephone charge)."

[0057] (Step S26) When the user reads the two-dimensional barcode on the screen of the television receiver 60 with the camera 42 of the user device 40, the user device 40 obtains the called party's telephone number and session ID from the read two-dimensional barcode, and the telephone function unit 46, which is an application, is started. Fig. 4 shows how the telephone function unit 46, which is an application, is started in the user device 40 that has read the two-dimensional barcode with the camera 42.

[0058] (Step S28) Next, in the user device 40, when the user presses the OK key, the telephone function unit 46 makes a call to the telephone receiving unit 28 of the cloud system 20 using the acquired telephone number of the called party.

[0059] (Step S30) In the cloud system 20, when the call receiving unit 28 receives a call from the user device 40, the call receiving unit 28 acquires the caller number and the session ID from the user device 40.

[0060] (Step S32) In the cloud system 20, the session management unit 21 compares the session ID issued in step S20 with the session ID acquired by the telephone receiving unit 28, and also compares the telephone number of the subscriber acquired from the contract information DB 27 by the contract information acquisition unit 26 in step S14 with the caller number acquired by the telephone receiving unit 28, and determines whether they match. In other words, when the session management unit 21 receives a session ID, which is communication identification information, from the user device 40, which is the second device, it can be said to be a matching unit that matches the caller number, which is second identifier information of the second device, with the telephone number, which is second identifier information associated in the contract information with the STB identifier information, which is first identifier information received by the receiving unit. The session management unit 21 can also be said to be a collating unit that collates a session ID, which is communication identification information received from the user device 40 (the second device), with the communication identification information transmitted to the STB 30 (the first device) by the video / audio transfer unit 24 (the transmitting unit), and collates a caller number, which is second identifier information of the user device 40 (the second device), with a telephone number, which is second identifier information associated in the contract information with the STB identifier information, which is first identifier information, received by the receiving unit. It can also be said to be a communication control unit that starts communication based on a video service request when both the session ID, which is communication identification information, and both the telephone numbers, which are second identifier information, match. Specifically, if the video service request is an authentication request, communication based on a video service request can also be said to be processing based on the authentication request. The session management unit 21 can also be said to be a collating unit that collates both the telephone numbers. Furthermore, step S32 can be said to be a process of comparing, when a session ID, which is communication identification information, is received from the second device, the user device 40, the telephone number, which is the second identifier information on the second device, with the telephone number, which is the second identifier information associated in the contract information with the received first identifier information, the STB identifier information.

[0061] If the two session IDs match, it can be determined that the user of the user device 40 who made the call was in front of the STB 30 or was operating the STB 30. Furthermore, if the subscriber's telephone number and the caller's number match, it can be determined that the user of the user device 40 who made the call is the subscriber himself. Therefore, if they match, it can be determined that the user who was in front of or operating the STB 30 is the subscriber of the STB 30 himself. In other words, this means that identity authentication has been performed correctly.

[0062] If both the subscriber's telephone number and the session ID match (YES in step S32), proceed to step S34; if neither the subscriber's telephone number nor the session ID match (NO in step S32), proceed to step S36.

[0063] (Step S34) If both the subscriber's telephone number and session ID match (YES in step S32), the cloud system 20 determines that the user has been authenticated, i.e., the subscriber himself / herself, and therefore allows services including contract changes and billing, information disclosure with the user's consent, and information provision to third parties, and proceeds to the interactive session. In other words, the session management unit 21 can be said to be a communication control unit that starts communication based on a video service request when the session management unit 21, which is a matching unit, matches the results of the matching. Furthermore, step S46 can be said to be a process or step that starts communication based on a video service request when the session management unit 21, which is a matching unit, matches the results of the matching.

[0064] (Step S36) On the other hand, if neither the subscriber's telephone number nor the session ID matches (NO in step S32), the user cannot be authenticated, i.e., is not the subscriber himself / herself, and therefore services including contract changes and billing, information disclosure with the consent of the user, and provision of information to third parties are prohibited. After that, the relevant processing is carried out by displaying a message to the effect that authentication could not be carried out on the screen of the television set 60 connected to the STB 30.

[0065] [Internal configuration] FIG. 5 is a block diagram showing an example of the internal configuration of an information processing device according to this embodiment. At least some of the functions of the information processing device can be implemented using a computer. As shown in the figure, the computer includes a central processing unit 901, a RAM 902, an input / output port 903, input / output devices 904 and 905, and a bus 906. The computer itself can be implemented using existing technology. The central processing unit 901 executes instructions contained in a program read from the RAM 902 or the like. In accordance with each instruction, the central processing unit 901 writes data to the RAM 902, reads data from the RAM 902, and performs arithmetic and logical operations. The RAM 902 stores data and programs. Each element included in the RAM 902 has an address and can be accessed using the address. RAM is an abbreviation for "random access memory." The input / output port 903 is a port through which the central processing unit 901 exchanges data with external input / output devices. The input / output devices 904 and 905 are input / output devices. Input / output devices 904 and 905 exchange data with the central processing unit 901 via an input / output port 903. A bus 906 is a common communication path used within the computer. For example, the central processing unit 901 reads and writes data from and to RAM 902 via the bus 906. Also, for example, the central processing unit 901 accesses an input / output port via the bus 906. All or part of the functional units provided in the information processing device may be realized using hardware such as an ASIC, a PLD, or an FPGA. All or part of the functional units may be realized by a combination of software and hardware.

[0066] [Summary of the embodiment] According to the above-described embodiment, in the cloud system (information processing device) 20, the contract information management unit manages contract information that associates first identifier information indicating a first device that can use a video service under a contract between a predetermined provider and a user with second identifier information indicating a second device that is different from the first device and owned by the user. The receiving unit receives a video service request from the first device and also receives the first identifier information. The transmitting unit transmits communication identification information to the first device for identifying the communication indicated by the video service request. When receiving the communication identification information from the second device, the matching unit compares the second identifier information of the second device with the second identifier information associated in the contract information with the first identifier information received by the receiving unit. If the matching unit finds a match between the first identifier information and the second identifier information, the communication control unit starts communication based on the video service request. That is, according to the present embodiment, two-stage authentication is realized in which communication based on an interactive session is started when the first identifier information of the second device matches the first identification information of the subscriber of the first device. This enables only specific users in specific locations to receive interactive services. Furthermore, even if a device is available to multiple users, personal authentication can be easily and reliably performed.

[0067] Furthermore, according to the above-described embodiment, in the cloud system (information processing device) 20, the collating unit collates the communication identification information received from the second device with the communication identification information transmitted to the first device by the transmitting unit, and collates the second identifier information of the second device with the second identifier information associated with the first identifier information received by the receiving unit in the contract information. The communication control unit starts communication based on the video service request when both pieces of communication identification information match and both pieces of second identifier information match. By adopting such a configuration, communication based on an interactive session is started when the communication identification information received from the second device matches the communication identification information transmitted to the first device and the telephone number of the second device matches the telephone number of the subscriber of the first device. This makes it possible for only specific users in specific locations to receive interactive services.

[0068] Furthermore, according to the above-described embodiment, the second identifier information of the second device is a telephone number registered in the second device, and the second identifier information associated with the first identifier information in the contract information is a telephone number associated with the first identifier information of the first device. The matching unit matches both telephone numbers. That is, according to the present embodiment, when the telephone number of the second device matches the telephone number of the subscriber of the first device, communication based on an interactive session is started, so that only specific users in specific locations can receive the provision of two-way services.

[0069] According to the above-described embodiment, the contract includes a contract for using multiple video services. The communication control unit determines whether to cause the transmission unit to transmit communication identification information to the first device, depending on the content of the video service request received by the reception unit. By adopting such a configuration, it is possible to determine in advance whether or not personal authentication is required, depending on the content of the video service request, thereby eliminating unnecessary processing.

[0070] Furthermore, according to the above-described embodiment, the determination unit acquires location information of the second device and determines whether the location information has a predetermined location relationship with the location information of the first device. If the matching unit determines that the second identifier information of the second device matches the second identifier information associated in the contract information with the first identifier information received by the receiving unit, and if the determination unit determines that the first device and the second device have a predetermined location relationship, the communication control unit starts communication based on the video service request. That is, according to this embodiment, if the telephone number of the second device matches the telephone number of the subscriber of the first device and the location information of the first device matches the location information of the second device, it is determined that identity authentication has been completed, and communication based on an interactive session is started. This makes it possible for only specific users in specific locations to receive interactive services.

[0071] Furthermore, according to the above-described embodiment, the video service is a remote video communication service between the first device, the second device, and a third device other than the first device and the second device. By adopting such a configuration, even if the first device does not have a camera function or a microphone function, by using the second device that has a camera function and a microphone function, the video service can be provided between the first device and the third device.

[0072] Furthermore, according to the above-described embodiment, when the receiving unit receives a video service request, the second transmitting unit transmits the user's contract information to the third device. After the second transmitting unit transmits the contract information, the second receiving unit receives identity verification necessity information transmitted from the third device based on the contract information before starting communication based on the video service request. That is, according to this embodiment, the operator of the third device is made to confirm the contract information to determine whether authentication is necessary. Therefore, whether identity authentication is necessary can be determined in advance, thereby making it possible to eliminate unnecessary processing.

[0073] Furthermore, according to the above-described embodiment, when identity verification is required based on the identity verification necessity information, the transmission unit transmits the communication identification information to the first device. By adopting such a configuration, it becomes possible to proceed with identity verification processing only when identity verification is required.

[0074] According to the above-described embodiment, the identifier data generation unit generates identifier data that includes at least communication identification information and can be displayed as a video. The transmission unit transmits the identifier data to the first device. By adopting this configuration, the third device can obtain the communication identification information simply by reading the identifier data displayed on the first device.

[0075] Furthermore, the above-described embodiment makes it possible for "only specific users in specific locations to receive interactive services," so that even interactive services in which highly confidential information such as personal information is transmitted and received can be safely provided. Therefore, this embodiment can contribute to Goal 9 of the United Nations-led Sustainable Development Goals (SDGs), which is to "build resilient infrastructure, promote inclusive and sustainable industrialization, and foster innovation."

[0076] Furthermore, in the above-described embodiment, STB30 was used as the device on the user side, but this is not limited to this, and any device that is capable of two-way communication, runs an application, and does not have a camera function or a microphone function may be used, for example, a television receiver (Android (registered trademark) TV), a projector, a combination of a desktop PC and a display device (TV, monitor), or a device with a large screen in the home on which an application runs.

[0077] Furthermore, in the above-described embodiment, only the subscriber of STB30 himself is authenticated, but this is not limited to this. Information on multiple users who make up the subscriber's family (such as names, interactive sessions to be used, and the phone numbers of each user's smartphone) may be registered, and personal authentication may be performed for each user, allowing the authenticated user to use pre-registered interactive sessions.

[0078] Furthermore, in the above-described embodiment, the contract for an interactive session available between the operator-side PC 10 and the STB 30 may include a contract for the use of multiple interactive sessions. The cloud system 20 may determine whether to perform personal authentication or proceed directly to the interactive session, depending on the content of the interactive session connection request received from the STB 30, without the operator of the operator-side PC 10 making a decision. For example, the decision may be made based on the content, such as whether video content can be viewed without personal authentication, or whether specific video content requires personal authentication. In other words, the contract includes a contract for the use of multiple video services, and the communication control unit determines whether to execute the transmission unit's transmission of communication identification information to the STB 30, which is the first device, depending on the content of the video service request received by the reception unit.

[0079] In the above-described embodiment, the cloud system 20 may further include a determination unit that acquires location information of the user device 40 and determines whether the location information has a predetermined location relationship with the location information of the STB 30, i.e., whether the location information is within a viewing distance. The session management unit 21 may start communication based on a video service request when the caller number of the user device 40 matches the telephone number in the contract information associated with the STB identifier information of the STB 30, and when the issued session ID matches the session ID acquired from the user device 40, and when the determination unit determines that the user device 40 and the STB 30 have a predetermined location relationship. This makes it possible to realize three-step authentication including location information. In other words, the cloud system 20 further includes a determination unit that acquires location information of the second device and determines whether the location information is in a predetermined location relationship with the location information of the first device, and the communication control unit starts communication based on the video service request when the comparison unit finds that the second identifier information of the second device matches the second identifier information associated with the first identifier information managed as contract information, and when the determination unit finds that the first device and the second device are in a predetermined location relationship.

[0080] Note that the functions of the cloud system 20 may be implemented using electronic circuits as necessary. Furthermore, the functional units that implement the functions do not need to be included in a single device; the cloud system 20 may be configured with multiple devices. At least some of the functions of the cloud system 20 may be implemented using a computer. The computer includes a central processing unit, RAM, input / output ports, input / output devices, and a bus. The computer itself can be implemented using existing technology. The central processing unit executes instructions contained in a program loaded from RAM or the like. According to each instruction, the central processing unit writes data to RAM, reads data from RAM, and performs arithmetic and logical operations. RAM stores data and programs. Each element in RAM has an address and can be accessed using the address. Note that RAM stands for "random access memory." Input / output ports are ports through which the central processing unit exchanges data with external input / output devices. Input / output devices exchange data with the central processing unit via the input / output ports. A bus is a common communication path used within a computer. For example, the central processing unit reads and writes data from RAM via the bus. Also, for example, the central processing unit accesses an input / output port via a bus. Also, all or part of the functional units provided in the cloud system 20 may be realized using hardware such as an ASIC, a PLD, or an FPGA. Also, all or part of each functional unit may be realized by a combination of software and hardware.

[0081] In addition, all or part of the functions of each unit of the cloud system 20 in the above-described embodiment may be realized by recording a program for realizing these functions on a computer-readable recording medium, and reading and executing the program recorded on the recording medium into a computer system. Note that the term "computer system" here includes hardware such as an OS and peripheral devices.

[0082] Furthermore, "computer-readable recording media" refers to portable media such as flexible disks, optical magnetic disks, ROMs, and CD-ROMs, as well as storage units such as hard disks built into computer systems. Furthermore, "computer-readable recording media" may also include devices that dynamically store programs for a short period of time, such as communication lines used when transmitting programs over networks such as the Internet or over communication lines such as telephone networks, or devices that store programs for a fixed period of time, such as volatile memory within computer systems that serve as servers or clients. Furthermore, the programs may be programs that implement some of the aforementioned functions, or may be programs that can realize the aforementioned functions in combination with programs already stored in the computer system.

[0083] Although the embodiments of the present invention have been described above, these embodiments and their modifications are presented as examples and are not intended to limit the scope of the invention. These embodiments and their modifications can be embodied in various other forms, and various omissions, substitutions, changes, and combinations can be made without departing from the spirit of the invention. These embodiments and their modifications are intended to be included within the scope and spirit of the invention, as well as within the scope of the invention and its equivalents as set forth in the claims. [Explanation of symbols]

[0084] 1...information and communication system, 10...operator's PC, 11...video and audio output unit, 12...video and audio encoding unit, 13...interaction control UI, 20...cloud system, 21...session management unit, 24...video and audio transfer unit, 25...two-dimensional barcode generation unit, 26...contract information acquisition unit, 27...contract information DB, 28...telephone receiving unit, 30...STB, 31...video and audio setting operation unit, 32...video and audio output unit, 33...video and audio setting display unit, 34...remote control operation reception unit, 40...user device, 41...microphone, 42...camera, 43...video and audio encoding unit, 44...setting control unit, 45...browser, 46...telephone function unit, 50...remote control, 60...display

Claims

1. a contract information management unit that manages contract information that associates first identifier information indicating a first device that can use a video service under a contract between a predetermined provider and a user with second identifier information indicating a second device that is different from the first device and owned by the user; a receiving unit that receives a video service request from the first device and receives the first identifier information; a transmitter that transmits communication identification information for identifying a communication indicated by the video service request to the first device; a matching unit that, when receiving the communication identification information from the second device, matches the second identifier information of the second device with the second identifier information associated in the contract information with the first identifier information received by the receiving unit; a communication control unit that starts communication based on the video service request when the two match as a result of the comparison by the comparison unit; An information processing device comprising:

2. the matching unit matches the communication identification information received from the second device with the communication identification information transmitted to the first device by the transmitting unit, and matches the second identifier information of the second device with the second identifier information associated in the contract information with the first identifier information received by the receiving unit; the communication control unit starts communication based on the video service request when both of the communication identification information match and both of the second identifier information match. The information processing device according to claim 1 .

3. the second identifier information of the second device is a telephone number registered in the second device; the second identifier information associated with the first identifier information in the contract information is a telephone number associated with the first identifier information of the first device; The matching unit matches both of the telephone numbers. The information processing device according to claim 1 .

4. the contract includes a contract for using a plurality of video services; the communication control unit determines whether or not to transmit the communication identification information to the first device by the transmission unit, depending on the content of the video service request received by the reception unit. The information processing device according to claim 1 .

5. a determination unit that acquires location information of the second device and determines whether the location information has a predetermined positional relationship with location information of the first device; the communication control unit starts communication based on the video service request when the comparison result by the comparison unit indicates that the second identifier information of the second device matches the second identifier information associated in the contract information with the first identifier information received by the receiving unit, and when the determination result by the determination unit indicates that the first device and the second device are in a predetermined positional relationship. The information processing device according to claim 1 .

6. the video service is a remote video communication service between the first device, the second device, and a third device other than the first device and the second device; The information processing device according to claim 1 .

7. a second transmitting unit that transmits contract information of the user to the third device when the receiving unit receives the video service request; and a second receiving unit configured to receive, after the second transmitting unit has transmitted the contract information and before starting communication based on the video service request, personal identification information transmitted from the third device based on the contract information. The information processing device according to claim 6 .

8. the transmitting unit transmits the communication identification information to the first device when identity verification is required based on the identity verification necessity information. The information processing device according to claim 7 .

9. further comprising an identifier data generating unit that generates identifier data that includes at least the communication identification information and that can be displayed as a video; the transmitting unit transmits the identifier data to the first device; The information processing device according to claim 1 .

10. An information processing device according to any one of claims 6 to 8; the first device; the second device; and the third device; and An information and communication system comprising:

11. managing contract information that associates first identifier information indicating a first device that can use a video service under a contract between a predetermined provider and a user with second identifier information indicating a second device that is different from the first device and owned by the user; receiving a video service request from the first device and receiving the first identifier information; transmitting communication identification information for identifying a communication indicated by the video service request to the first device; When the communication identification information is received from the second device, comparing the second identifier information of the second device with the second identifier information associated with the received first identifier information in the contract information; a step of starting communication based on the video service request when the two match as a result of the comparison; An information processing method comprising:

12. On the computer, managing contract information that associates first identifier information indicating a first device that can use a video service under a contract between a predetermined provider and a user with second identifier information indicating a second device that is different from the first device and owned by the user; receiving a video service request from the first device and receiving the first identifier information; transmitting communication identification information for identifying a communication indicated by the video service request to the first device; When the communication identification information is received from the second device, comparing the second identifier information of the second device with the second identifier information associated with the received first identifier information in the contract information; a step of starting communication based on the video service request when the two match as a result of the comparison; A program that executes the following.

Citation Information

Patent Citations

  • OFDM signal transmission system, mobile terminal and e-commerce system

    JP2007310872A

  • Media processing method and arrangement

    JP2012517767A

  • Concierge device and method for registering, controlling and supporting consumer electronics

    JP2020005264A

  • Temporary subscription access via an alternate television receiver

    US20150230004A1

  • Communication terminal, communication system, communication method and program

    JP2022026728A