Server device, system, server device control method and program

Abstract

To provide a server device to realize diverse user registration fulfilling user expectations.SOLUTION: A server device comprises personal identity verification control means, service selection control means, and user registration control means. The personal identification control means confirms the personal identification of a user wishing a system registration as an authentication user. The personal identity verification control means manages user types of the users whose personal identity verification is successful as authenticated users. The identification control means manages the user types of the users whose personal identify verification is not successful as ordinary users. The service selection control means enables a user to select, from among multiple service providers to provide the services using biometric authentication, a service provider from whom the user wants to receive a service. The user registration control means notifies the service provider selected by the user of original biological information which constitutes the original of the authentication information used for the biometric authentication and of the user type.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to a server device, a system, a method for controlling a server device, and a storage medium. [Background technology]

[0002] Biometric authentication technology exists.

[0003] For example, Patent Document 1 describes automating entrance reception and ensuring reliable personal authentication. The entrance reception terminal in Patent Document 1 uses a personal identification card with a built-in IC chip to accept the entrance of a visitor carrying the personal identification card. The IC chip pre-stores an access permission number, personal information, and personal authentication information. The entrance reception terminal includes an input means for accepting an input of the access permission number, a reading means for reading the personal information and personal authentication information stored in the IC chip from the personal identification card, an acquisition means for acquiring the visitor's biometric authentication information, an authentication means, and an issuance means. The authentication means compares the read personal authentication information with the acquired biometric authentication information to perform personal authentication. The issuance means issues an entrance pass if the authentication is confirmed. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Publication No. 2018-124622 Summary of the Invention [Problem to be solved by the invention]

[0005] In recent years, various services using biometric authentication have begun to be provided. For example, not only is biometric authentication used to control entry to facilities as shown in Patent Document 1, but it is also now possible to use it to pay for purchased goods. Here, users include those who want to enjoy the maximum services provided by biometric authentication and those who want to easily enjoy services provided by biometric authentication.

[0006] In other words, there is a demand for a variety of user registration methods that meet the needs of users. However, this demand cannot be met by applying the technology disclosed in Patent Document 1. Patent Document 1 is intended to disclose technology related to strengthening identity verification.

[0007] A primary object of the present invention is to provide a server device, a system, a method for controlling a server device, and a storage medium that contribute to realizing a variety of user registrations that meet the needs of users. [Means for solving the problem]

[0008] According to a first aspect of the present invention, there is provided a server device comprising: an identity verification control means for verifying the identity of a user who wishes to register in the system as an authenticated user who is entitled to more services than a normal user, and managing the user type of a user who has been successfully verified as the authenticated user, and managing the user type of a user who has not been successfully verified as the normal user; a service selection control means for enabling a user to select a service provider from which the user wishes to receive a service, from among a plurality of service providers that provide services using biometric authentication; and a user registration control means for notifying the service provider selected by the user of original biometric information that is the original of authentication information used for biometric authentication and the user type.

[0009] According to a second aspect of the present invention, there is provided a system including a terminal carried by a user, a plurality of service servers managed by each of a plurality of service providers that provide services using biometric authentication, and a server device, wherein the server device performs identity verification of a user who wishes to register in the system as an authenticated user who is entitled to more services than a normal user, and manages the user type of a user who has successfully been verified as the authenticated user and the user type of a user who has not successfully been verified as the normal user, a service selection control means that enables the user to select a service provider from which the user wishes to receive services from among the plurality of service providers, and a user registration control means that acquires original biometric information that is the original of authentication information used for biometric authentication from the user's terminal, and transmits a user registration request including the original biometric information and the user type to the service server of the service provider selected by the user.

[0010] According to a third aspect of the present invention, there is provided a control method for a server device, which performs identity verification of a user who wishes to register in the system as an authenticated user who is entitled to more services than a normal user, manages the user type of a user who has been successfully verified as the authenticated user, and manages the user type of a user who has not been successfully verified as the normal user, enables the user to select a service provider from which the user wishes to receive a service from among a plurality of service providers that provide services using biometric authentication, and notifies the service provider selected by the user of original biometric information that is the original of authentication information used for biometric authentication and the user type.

[0011] According to a fourth aspect of the present invention, there is provided a computer-readable storage medium that stores a program for causing a computer mounted on a server device to execute the following processes: performing identity verification of a user who wishes to register in the system as an authenticated user who is entitled to more services than a normal user; managing the user type of a user who has been successfully verified as the authenticated user; and managing the user type of a user who has not been successfully verified as the normal user; enabling the user to select a service provider from which the user wishes to receive services from among a plurality of service providers that provide services using biometric authentication; and notifying the service provider selected by the user of original biometric information that is the original of authentication information used for biometric authentication and the user type. [Effects of the Invention]

[0012] According to each aspect of the present invention, a server device, a system, a method for controlling a server device, and a storage medium are provided that contribute to realizing a variety of user registrations that satisfy the wishes of users. Note that the effects of the present invention are not limited to those described above. The present invention may achieve other effects instead of or in addition to the effects described above. [Brief explanation of the drawings]

[0013] [Figure 1] FIG. 1 is a diagram for explaining an outline of an embodiment. [Figure 2] FIG. 2 is a flowchart showing an example of the operation of one embodiment. [Figure 3] FIG. 3 is a diagram illustrating an example of a schematic configuration of an authentication system according to the first embodiment. [Figure 4] FIG. 4 is a diagram for explaining the operation of the authentication system according to the first embodiment. [Figure 5] FIG. 5 is a diagram for explaining the operation of the authentication system according to the first embodiment. [Figure 6] FIG. 6 is a diagram for explaining the operation of the authentication system according to the first embodiment. [Figure 7]FIG. 7 is a diagram for explaining the operation of the authentication system according to the first embodiment. [Figure 8] FIG. 8 is a diagram illustrating an example of a processing configuration of the control server according to the first embodiment. [Figure 9] FIG. 9 is a diagram illustrating an example of an account management database according to the first embodiment. [Figure 10] FIG. 10 is a diagram illustrating an example of a display on the terminal according to the first embodiment. [Figure 11] FIG. 11 is a diagram illustrating an example of a processing configuration of the service server according to the first embodiment. [Figure 12] FIG. 12 is a diagram illustrating an example of a user management database according to the first embodiment. [Figure 13] FIG. 13 is a flowchart illustrating an example of the operation of the authentication unit according to the first embodiment. [Figure 14] FIG. 14 is a diagram illustrating an example of a processing configuration of the authentication terminal according to the first embodiment. [Figure 15] FIG. 15 is a diagram illustrating an example of a processing configuration of a terminal according to the first embodiment. [Figure 16] FIG. 16 is a diagram illustrating an example of a display on the terminal according to the first embodiment. [Figure 17] FIG. 17 is a diagram showing an example of a display on the terminal according to the first embodiment. [Figure 18] FIG. 18 is a sequence diagram showing an example of the operation of the authentication system according to the first embodiment. [Figure 19] FIG. 19 is a diagram illustrating an example of a display on a terminal according to a modification of the first embodiment. [Figure 20] FIG. 20 is a flowchart showing an example of the operation of the authentication unit according to the second embodiment. [Figure 21] FIG. 21 is a diagram illustrating an example of a processing configuration of a control server according to the third embodiment. [Figure 22] FIG. 22 is a diagram illustrating an example of a hardware configuration of a control server according to the present disclosure. [Figure 23]FIG. 23 is a diagram showing an example of a display on a terminal according to a modification of the present disclosure. [Figure 24] FIG. 24 is a diagram showing an example of a display on a terminal according to a modification of the present disclosure. [Figure 25] FIG. 25 is a diagram showing an example of a display on a terminal according to a modification of the present disclosure. [Figure 26] FIG. 26 is a diagram showing an example of a display on a terminal according to a modification of the present disclosure. [Figure 27] FIG. 27 is a diagram showing an example of a display on a terminal according to a modification of the present disclosure. [Figure 28] FIG. 28 is a diagram showing an example of a display on a terminal according to a modification of the present disclosure. DETAILED DESCRIPTION OF THE INVENTION

[0014] First, an overview of one embodiment will be described. Note that the reference numerals in the drawings are added to each element for convenience as an example to facilitate understanding, and the description of this overview is not intended to be limiting in any way. Furthermore, unless otherwise specified, the blocks shown in each drawing represent functional units, not hardware units. Connection lines between blocks in each drawing include both bidirectional and unidirectional lines. Unidirectional arrows are used to schematically indicate the flow of main signals (data) and do not exclude bidirectionality. Note that in this specification and drawings, elements that can be similarly described may be assigned the same reference numerals to avoid redundant explanation.

[0015] A server device 100 according to an embodiment includes an identity verification control means 101, a service selection control means 102, and a user registration control means 103 (see FIG. 1). The identity verification control means 101 performs identity verification of a user who wishes to register in the system as an authenticated user, who is entitled to more services than a normal user (step S1 in FIG. 2). The identity verification control means 101 manages the user type of a user who has successfully been verified as an authenticated user (step S2). The identity verification control means 101 also manages the user type of a user who has not successfully been verified as a normal user (the default user type is a normal user). The service selection control means 102 allows the user to select a service provider from which the user wishes to receive a service using biometric authentication from among multiple service providers that provide services using biometric authentication (step S3). The user registration control means 103 notifies the service provider selected by the user of the original biometric information, which is the original of the authentication information used for biometric authentication, and the user type (step S4).

[0016] The server device 100 performs identity verification of users who wish to register in the system as authenticated users, and manages users who successfully undergo identity verification as authenticated users. In contrast, the server device 100 manages users who do not wish to undergo identity verification as normal users. The server device 100 notifies the service provider of the user's type along with the original biometric information. The service provider uses the acquired original biometric information and user type to provide the user with services that use biometric authentication. At that time, the service provider changes the services provided depending on the user type. As a result, many services that use biometric authentication are provided to authenticated users, and limited services are provided to users who do not wish to undergo identity verification and simply want to receive services that use biometric authentication. In this way, the server device 100 realizes diverse user registration that meets the needs of users.

[0017] Specific embodiments will be described in more detail below with reference to the drawings.

[0018] [First embodiment] The first embodiment will be described in more detail with reference to the drawings.

[0019] [System Configuration] Fig. 3 is a diagram showing an example of a schematic configuration of an authentication system (information processing system) according to the first embodiment. As shown in Fig. 3, the authentication system includes a plurality of service providers A to C and an authentication center.

[0020] A service provider is a business that provides services to users using biometric authentication. The authentication system disclosed herein is premised on service providers belonging to various business types and industries providing services using biometric authentication. Note that the services provided by the service providers may be paid or free of charge.

[0021] For example, examples of service providers include businesses that provide rental housing services such as condominiums, businesses where employees work (users' workplaces), casino operators, businesses that provide events such as concerts, businesses that operate means of transportation such as airplanes, etc. Service providers disclosed in this application also include businesses that provide accommodation services, businesses such as retail stores, businesses that provide financial services, educational businesses, etc. Furthermore, service providers are not limited to private businesses. Public institutions such as local governments may also be service providers.

[0022] The authentication center controls and manages the biometric authentication of each of the multiple service providers. Businesses (service providers) that provide services using biometric authentication to users (general consumers, local residents) must enter into a contract with the authentication center.

[0023] The authentication center includes a control server 10. The control server 10 performs the main functions of the authentication center. The control server 10 may be installed in the building of the authentication center, or may be a server installed on a network (cloud).

[0024] As described above, service providers offer users services that use biometric authentication. For example, biometric authentication is performed when a user arrives at the office or returns home to their apartment, allowing only legitimately qualified users (employees, residents) to enter the office, etc. Alternatively, biometric authentication can be used to issue documents such as a family register or resident card from a local government. Biometric authentication is also used for ticket verification at an event venue, check-in procedures at a hotel, immigration procedures at an airport, and the like. In these types of services (procedures), services are provided to legitimately qualified users. Alternatively, biometric authentication is used to perform payment procedures at retail stores, etc.

[0025] 3, each service provider includes a service server 20 and at least one authentication terminal 30. The devices included in the service provider (service server 20, authentication terminal 30) are connected to each other so that they can communicate with each other. Specifically, the service server 20 and the authentication terminal 30 are connected by wired or wireless communication means.

[0026] The service server 20 is connected to the control server 10 via a network. The service server 20 may be installed in the building of the service provider, or may be installed on the cloud.

[0027] The service server 20 stores information required when providing services to users. Specifically, the service server 20 stores business information required when each service provider provides a service using biometric authentication, and information required for biometric authentication. The service server 20 uses a user management database to store the business information and information required for biometric authentication. The user management database will be described in detail later.

[0028] For example, the service server 20 of the company where the user works stores information such as the user's (employee's) name, date of birth, employee number, department, and workplace as business information. Alternatively, the service server 20 of a local government stores information such as the resident's name, address, and date of birth as business information. Furthermore, the service server 20 of an event company that hosts an event stores information related to tickets purchased by event participants as business information. Furthermore, the service server 20 of a retail store or the like stores credit card information (payment information) required for payment as business information.

[0029] The information necessary for biometric authentication stored in the service server 20 will be described in detail later.

[0030] The authentication terminal 30 is a device that serves as an interface for users receiving services. The authentication terminal 30 is installed at the service provision location of each service provider. More specifically, the authentication terminal 30 is installed in a store or the like that users actually visit. The authentication terminal 30 may also be installed in a business that has a contractual relationship with the service provider. For example, the authentication terminal 30 that serves as an interface when users receive services from a local government may be installed in a convenience store or the like.

[0031] The authentication terminal 30 has functions and forms according to the type of business of the service provider. For example, an authentication terminal 30 installed in a workplace or event venue can be a gate device equipped with a gate that restricts the passage of users (persons to be authenticated). Alternatively, an authentication terminal 30 installed in a city hall or the like can be equipped with a touch panel that accepts operations from residents and a printer that prints resident registration cards and the like. Furthermore, a tablet-type terminal can be used as an authentication terminal 30 installed in a retail store.

[0032] Note that Figure 3 is an example and is not intended to limit the configuration of the authentication system disclosed herein. For example, the authentication center may include two or more control servers 10. Furthermore, it is sufficient that at least one or more service providers participate in the authentication system. Furthermore, it is sufficient that each service provider has at least one or more service servers 20 and at least one or more authentication terminals 30.

[0033] [General operation] Next, the general operation of the authentication system according to the first embodiment will be described.

[0034] <Create an account> A user who wishes to receive a service from a service provider must create an account in the system. Specifically, the user operates a terminal 40 owned by the user to access the control server 10 (see FIG. 4).

[0035] A user inputs login information (e.g., login ID, password), name, date of birth, etc., on a WEB page provided by the control server 10. When the control server 10 acquires the login information, etc., it generates an ID for identifying the user. In the following explanation, the ID generated by the control server 10 will be referred to as a "system ID." The control server 10 associates the generated system ID with the login information, etc., and stores them in an account management database. Details of the account management database will be described later.

[0036] <Biometric information registration> A user who wishes to receive services using biometric authentication must register his or her own biometric information in the terminal 40.

[0037] To provide a service using biometric authentication, authentication information generated from biometric information must be registered with the service provider in advance. For example, when a service is provided using face authentication, features (feature vectors) generated from a face image must be registered in advance as authentication information. Alternatively, when a service is provided using fingerprint authentication, features generated from a fingerprint image must be registered in advance as authentication information.

[0038] In the following explanation, information that serves as the original (basis) for generating authentication information, such as a face image or a fingerprint image, will be referred to as "original biometric information." Also, features generated from the original biometric information and registered in advance will be referred to as "registered authentication information."

[0039] A user who has completed the creation of a system account must register original biometric information (e.g., a facial image) in the terminal 40 that he or she possesses. The terminal 40 acquires the original biometric information using a GUI (Graphical User Interface) or the like. The terminal 40 stores the acquired original biometric information (e.g., a facial image) internally. In this way, the terminal 40 stores the original biometric information that serves as the original of authentication information used for biometric authentication.

[0040] <Identity Verification> Here, there are two types of users in the authentication system.

[0041] The first user is a user who receives services from a service provider without undergoing identity verification by the system. In the following explanation, the first user will be referred to as a "normal user."

[0042] The second user is a user who receives services from a service provider after undergoing identity verification by the system. In the following explanation, the second user will be referred to as an "authenticated user." Authenticated users can receive more services than regular users.

[0043] The user can choose to create an account as a normal user or as an authenticated user.

[0044] When a user requests to create an account as an authenticated user, the control server 10 performs identity verification of the user. For example, when the control server 10 acquires the user's request (to create an account as an authenticated user) using a GUI or the like, it executes control related to the identity verification of the user.

[0045] The identity of a user is verified using a certificate issued by a public institution. Specifically, the control server 10 performs identity verification using a certificate such as a My Number card, a driver's license, or a passport. In the first embodiment, a case where a My Number card is used as an identity verification document will be described. When identity verification is performed using a driver's license or the like, the control server 10 may perform one-to-one authentication using a facial image obtained from the driver's license or the like and a facial image obtained by photographing.

[0046] When a user requests to receive a service as an authenticated user, the control server 10 requests the terminal 40 possessed by the user to provide information necessary for identity verification. Specifically, the control server 10 transmits a "request for identity verification information" to the terminal 40 (step S01 in FIG. 5).

[0047] In response to receiving the request for providing personal identification information, the terminal 40 reads information from the user's My Number card. Specifically, the terminal 40 obtains the digital certificates (digital signature certificate, digital user certificate) stored in the IC (Integrated Circuit) chip of the My Number card.

[0048] At that time, the terminal 40 acquires from the user a password (a 4-digit password or a 6- to 16-digit password) for reading the electronic certificate from the My Number card, and acquires the electronic certificate using the password. Below, we will explain the case where the terminal 40 acquires the signature electronic certificate from the My Number card. In the following explanation, unless otherwise specified, the electronic certificate refers to the signature electronic certificate.

[0049] The terminal 40 transmits the acquired electronic certificate to the control server 10 as "identification information" (step S02).

[0050] The control server 10 transmits the acquired digital certificate to a certification authority server 50 operated by the Japan Agency for Local Authority Information Systems (J-LIS) (step S03). By transmitting the acquired digital certificate, the control server 10 requests the certification authority server 50 to verify the digital certificate.

[0051] The control server 10 receives the verification result of the digital certificate from the certificate authority server 50 (step S04). When the control server 10 receives a response from the certificate authority server 50 indicating that the digital certificate is valid, it determines that the identity verification has been successful.

[0052] If the user's identity is successfully verified, the control server 10 manages the user as an "authenticated user." The control server 10 manages users whose identity has not been verified as "normal users."

[0053] <Select a service> A user who has registered in the system (created a system account) and registered their original biometric information selects the service provider from which they would like to receive biometric authentication services. The user selects the service provider from which they would like to receive services from among the multiple service providers participating in the authentication system (service providers that have contracts with the authentication center).

[0054] The control server 10 stores information about service providers participating in the authentication system. For example, the control server 10 stores the name, business type, location, etc. of each service provider. The control server 10 holds information about each of multiple service providers and allows users to select a service provider.

[0055] When a user operates the terminal 40 to perform a predetermined operation on the portal site, the control server 10 displays a GUI or the like on the terminal 40, which enables the user to select a desired service (service provider). The control server 10 uses the GUI to obtain the service (biometric authentication service) desired by the user.

[0056] <User registration> When the service provider selected by the user is acquired, the control server 10 executes control related to "user registration" that enables the selected service provider to provide the user with a service that uses biometric authentication.

[0057] Specifically, the control server 10 controls the selected service provider to acquire the original biometric information stored in the user's terminal 40. The service provider generates registered authentication information from the acquired original biometric information and associates the generated registered authentication information with business information, thereby becoming ready to provide the service to the user.

[0058] A user operates a terminal 40 to access the control server 10 and log in to the user's portal site. When the user performs a predetermined operation on the portal site (for example, pressing a service provider selection button), the control server 10 displays a GUI including a list of service providers on the terminal 40.

[0059] Once a service provider is selected, the control server 10 requests the user to provide original biometric information. Specifically, the control server 10 transmits an "original provision request" to the user's terminal 40 (see step S11 in FIG. 6).

[0060] Upon receiving the original provision request, the terminal 40 transmits the original biometric information (for example, a facial image) of the user to the control server 10 (step S12).

[0061] The control server 10 notifies the service provider selected by the user of the user's system ID, user type (normal user, authenticated user), acquired original biometric information, personal identification information, etc. The personal identification information is information for identifying the user. Examples of personal identification information include the user's name, or a combination of the user's name and date of birth.

[0062] The control server 10 transmits a "user registration request" including the system ID, user type, original biometric information, individual identification information, etc. to the service server 20 of the service provider selected by the user (step S13).

[0063] Upon receiving the user registration request, the service server 20 searches the user management database using the acquired personal identification information to identify the user who wishes to register (to receive services using biometric authentication). The service server 20 stores the system ID, user type, and registration authentication information (e.g., feature values) obtained from the original biometric information in the entry for the identified user.

[0064] The service server 20 transmits a response including the result of the user registration (success or failure of the user registration) to the control server 10 (step S14).

[0065] The control server 10 deletes the original biometric information (e.g., a facial image) acquired from the user when it transmits a user registration request to the service server 20 or when it receives a response to the request. Furthermore, when the service server 20 generates registration authentication information (e.g., feature amounts), it deletes the original biometric information acquired from the control server 10.

[0066] <Provision of services> After completing the service selection, the user visits the service provider to receive the service. For example, the user visits the facility, store, etc. of the service provider where the user will receive the service selected by the user, such as an office, city hall, casino, amusement park, event venue, or retail store.

[0067] The authentication terminal 30 acquires biometric information of a user (person to be authenticated) who receives the service. For example, the authentication terminal 30 photographs the person to be authenticated and acquires biometric information (for example, a facial image) corresponding to the original biometric information.

[0068] Furthermore, the authentication terminal 30 acquires information about services that the user (person to be authenticated) desires to receive (hereinafter referred to as provided service information). For example, when the user enters an office, "enter facility" is acquired as the provided service information. Alternatively, when the user desires to receive a resident certificate, "issue resident certificate" is acquired as the provided service information.

[0069] The authentication terminal 30 may automatically determine the service information to be provided depending on the type of service desired by the user, the configuration of the device itself, etc., or may acquire the service information to be provided from the user using a GUI, etc. For example, in the above example, the authentication terminal 30 automatically acquires "entry to facility." Also, the authentication terminal 30 acquires "issuance of resident certificate" in response to the user's operation.

[0070] The authentication terminal 30 transmits an authentication request including the acquired biometric information and provided service information to the service server 20 (see FIG. 7). The authentication terminal 30 also transmits information accompanying the provided service information to the service server 20 as necessary. For example, when provided service information related to "purchase of a product" is acquired, information such as the product name and product price is transmitted to the service server 20 together with the provided service information as accompanying information of the provided service information.

[0071] The service server 20 authenticates the user (person to be authenticated) using the biometric information and provided service information included in the authentication request, and the biometric information, user type, and business information registered in the user management database.

[0072] Here, the services that a service provider can provide to a normal user are different from the services that can be provided to an authenticated user. In addition to the services provided to a normal user, an authenticated user is also provided with services that would normally require user identification. In other words, the services provided to an authenticated user include the services provided to a normal user.

[0073] In the above example, the service related to "entering the office" can be provided to the authenticated user regardless of the user type, whereas the service related to "issuing a resident card" can be provided only to authenticated users.

[0074] Upon receiving the authentication request, the service server 20 identifies the person to be authenticated who is registered in the user management database through a matching process using biometric information.

[0075] Specifically, the service server 20 generates authentication information for matching from biometric information (e.g., a facial image) included in the authentication request. For example, the service server 20 generates features from the acquired facial image. The service server 20 executes a matching process (one-to-N matching; N is a positive integer, the same applies hereinafter) using the generated authentication information for matching (hereinafter referred to as matching authentication information) and registered authentication information registered in the user management database.

[0076] If the verification process fails, the service server 20 sets the authentication result to “authentication failed.” If the verification process is successful, the service server 20 uses the provided service information included in the authentication request and the user type of the person to be authenticated to determine whether or not the service desired by the person to be authenticated can be provided to the person to be authenticated.

[0077] If the service server 20 determines that it cannot provide the service to the authenticated user based on the provided service information and the user type, it sets the authentication result to "authentication failed." In this case, the service is not provided to the normal user. In the subsequent processing, the service server 20 determines whether or not to provide the service to the authenticated user.

[0078] If it is determined that a service can be provided to the authenticated person using the provided service information and user type, the service server 20 determines whether or not the service can be provided to the user using the business information of the user identified by the matching process.

[0079] For example, consider a case where the provided service information is "entry to facility." In this case, the service server 20 of the employee's company sets the authentication result to "authentication successful" if the person to be authenticated is an employee of the company and is qualified to enter the office. On the other hand, if the person to be authenticated is an employee of the company but is not qualified to enter the office, the service server 20 sets the authentication result to "authentication failed."

[0080] Alternatively, the service server 20 of the city hall that receives a request for issuing a resident certificate sets the authentication result as "authentication successful" if it is possible to issue a resident certificate for the person to be authenticated. On the other hand, if the service server 20 cannot issue a resident certificate because the person to be authenticated has already moved out, for example, it sets the authentication result as "authentication failed."

[0081] The service server 20 transmits the authentication result (authentication success, authentication failure) to the authentication terminal 30.

[0082] The authentication terminal 30 executes processing according to the authentication result. For example, upon receiving a successful authentication, the authentication terminal 30 installed in an office opens the gate and allows the person to pass through. Alternatively, upon receiving a successful authentication, the authentication terminal 30 installed in a city hall or the like issues a resident's card.

[0083] Next, each device included in the authentication system according to the first embodiment will be described in detail.

[0084] [Control Server] 8 is a diagram showing an example of a processing configuration (processing modules) of the control server 10 according to the first embodiment. Referring to FIG. 8, the control server 10 includes a communication control unit 201, an account management unit 202, a business operator management unit 203, a personal identification control unit 204, a service selection control unit 205, a user registration control unit 206, and a storage unit 207.

[0085] The communication control unit 201 is a means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the service server 20. The communication control unit 201 also transmits data to the service server 20. The communication control unit 201 passes data received from other devices to other processing modules. The communication control unit 201 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 201. The communication control unit 201 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0086] The account management unit 202 is a means for managing user accounts. When a user operates the terminal 40 to access a predetermined homepage or the like, the account management unit 202 acquires information necessary to create an account for the user.

[0087] Specifically, the account management unit 202 acquires personal information such as login information, name, date of birth, etc. After acquiring the login information, etc., the account management unit 202 generates a system ID for identifying the user. The system ID may be any information that can uniquely identify the user. For example, the account management unit 202 may assign a unique value each time an account is created and use this as the system ID.

[0088] In addition, the account management unit 202 acquires from the user a preference regarding the user type (normal user, authenticated user). If the user wishes to create an account as an authenticated user, the account management unit 202 notifies the identity verification control unit 204 of this.

[0089] The account management unit 202 associates the generated system ID, login information, name, etc. and stores them in the account management database (see FIG. 9). Note that the account management database shown in FIG. 9 is an example and is not intended to limit the items to be stored. For example, the account creation date and time, etc. may also be stored in the account management database.

[0090] Furthermore, the account management unit 202 acquires login information for logging in to the portal site from the user's terminal 40. The account management unit 202 performs authentication using the login information.

[0091] The business management unit 203 is a means for managing service providers (service businesses) participating in the authentication system. The business management unit 203 acquires business information (service provider name, business type, location, address of service server 20, etc.) to be registered in the system from staff of each service provider.

[0092] For example, the business management unit 203 may provide each service provider with an interface for inputting business information, etc. Alternatively, each service provider may send a USB (Universal Serial Bus) memory or the like storing the business information, etc. to the authentication center. The business management unit 203 may acquire the business information, etc. from a staff member of the authentication center, etc.

[0093] The business management unit 203 generates an ID (business ID) for the service provider from which the business information, etc. has been acquired. The business management unit 203 stores the generated business ID and the acquired business information, etc. in association with each other.

[0094] The identity verification control unit 204 is a means for controlling identity verification of users. The identity verification control unit 204 performs identity verification of users who wish to register in the system as authenticated users. The identity verification control unit 204 manages the user type of users who have successfully been verified as "authenticated users." The identity verification control unit 204 manages the user type of users who have not successfully been verified (users who have not undergone identity verification) as "normal users."

[0095] The identity verification control unit 204 receives a notification from the account management unit 202 that the user wishes to create an account as an authenticated user. When the identity verification control unit 204 recognizes the user's wish (desire to be registered as an authenticated user) from the notification, it transmits a "request to provide identity verification information" to the terminal 40 of the user.

[0096] The personal identification control unit 204 receives a response (positive response, negative response) to the request for providing personal identification information.

[0097] If a negative response is received (if the digital certificate as personal identification information cannot be obtained), the personal identification control unit 204 notifies the user that they cannot be registered as an authenticated user.

[0098] If an affirmative response is received (if an electronic certificate is obtained as personal identification information), the personal identification control unit 204 transmits the electronic certificate read from the user's My Number card to the certificate authority server 50.

[0099] The personal identification control unit 204 receives the verification result of the digital certificate from the certificate authority server 50 .

[0100] If verification fails (the digital certificate is invalid), the identity verification control unit 204 notifies the user that the user cannot be registered as an authenticated user. In this case, the identity verification control unit 204 notifies the user that the user is registered as a normal user and that there are restrictions on the services that can be received.

[0101] If the verification is successful (the digital certificate is valid), the identity verification control unit 204 notifies the user that the user has been registered as an authenticated user. In this case, the identity verification control unit 204 notifies the user that the user has been registered as an authenticated user and can receive more services than a normal user.

[0102] Furthermore, the personal identification control unit 204 manages users whose personal identification has been successful as authenticated users. The personal identification control unit 204 registers users whose personal identification has been successful as authenticated users in the account management database.

[0103] The initial value of the user type stored in the account management database is "normal user."

[0104] In this way, the identity verification control unit 204 verifies the identity of a user who wishes to register in the system as an authenticated user, using the electronic certificate obtained from the user's first certificate (My Number card).

[0105] The service selection control unit 205 is a means for controlling the selection of a biometric authentication service (service provider) by the user. The service selection control unit 205 enables the user to select a service provider from which the user wishes to receive a service from among a plurality of service providers that offer services using biometric authentication.

[0106] When a user operates the terminal 40 to log in to the portal site and performs a predetermined operation on the portal site, the service selection control unit 205 displays, for example, a GUI such as that shown in FIG.

[0107] When displaying the GUI, the service selection control unit 205 displays the service providers so that the user can distinguish between service providers that have already been selected and those that have not been selected. In the example of Fig. 10, a service provider with a check mark in the upper right corner of the icon indicating the service provider indicates a service provider that has already been selected, and a service provider with no check mark indicates a service provider that has not been selected.

[0108] The service selection control unit 205 uses the business information and information registered in the account management database to display a GUI such as that shown in Fig. 10. Specifically, the service selection control unit 205 references the business information and generates a list of service providers that have concluded contracts with the authentication center. The service selection control unit 205 also references the selected service field in the account management database and acquires the service provider (the business ID of the service provider) that the user has selected.

[0109] Furthermore, when displaying the list of service providers, the service selection control unit 205 may also provide the user with more detailed information about each service provider (for example, type of business, services provided, store location, etc.).

[0110] The service selection control unit 205 passes information on the service provider selected by the user (for example, the business ID of the service provider for which the user wishes to register) to the user registration control unit 206.

[0111] The user registration control unit 206 is a means for controlling "user registration" by the control server 10. The user registration control unit 206 controls "user registration" that enables a service provider selected by a user to provide the user with a service using biometric authentication.

[0112] When the user selects a service provider, the user registration control unit 206 transmits an "original provision request" to the terminal 40 carried by the user. The user registration control unit 206 receives the original biometric information (for example, a facial image) of the user from the terminal 40.

[0113] The user registration control unit 206 transmits a user registration request including the user's system ID, user type, original biometric information, individual identification information, etc. to the service server 20 of the service provider corresponding to the service selected by the user.

[0114] The user registration control unit 206 acquires the system ID, user type, and personal identification information (for example, name or a combination of name and date of birth) from the account management database.

[0115] The user registration control unit 206 receives a response (positive response, negative response) to the user registration request.

[0116] If a positive response (user registration successful) is received, the user registration control unit 206 registers the business ID of the service provider selected by the user in the account management database. Also, if a positive response is received, the user registration control unit 206 notifies the user that user registration for the selected service provider was successful.

[0117] If a negative response (user registration failed) is received, user registration control unit 206 notifies the user accordingly.

[0118] In this way, the user registration control unit 206 notifies the service provider selected by the user of the original biometric information that serves as the original of the authentication information used for biometric authentication and the user type. More specifically, the user registration control unit 206 acquires the original biometric information by requesting the user's terminal 40 to provide the original biometric information. The user registration control unit 206 transmits a user registration request including at least the acquired original biometric information and user type to the service server 20 of the service provider selected by the user.

[0119] The storage unit 207 is a means for storing information necessary for the operation of the control server 10.

[0120] [Service Server] 11 is a diagram showing an example of a processing configuration (processing modules) of the service server 20 according to the first embodiment. Referring to FIG. 11, the service server 20 includes a communication control unit 301, a business information management unit 302, a user registration control unit 303, an authentication unit 304, and a storage unit 305.

[0121] The communication control unit 301 is a means for controlling communication with other devices. For example, the communication control unit 301 receives data (packets) from the control server 10. The communication control unit 301 also transmits data to the control server 10. The communication control unit 301 passes data received from other devices to other processing modules. The communication control unit 301 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 301. The communication control unit 301 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0122] The business information management unit 302 is a means for managing and controlling business information required by the service provider to provide the service.

[0123] The business information management unit 302 acquires business information necessary for the provision of services by its own company or organization using any means. For example, the business information management unit 302 of the user's company acquires information such as the employee's name, date of birth, employee number, department, and place of work as business information.

[0124] The business information management unit 302 may acquire the business information from staff of the service provider or may acquire the business information directly from the user using a means such as a homepage.

[0125] The business information management unit 302 manages business information using a user management database.

[0126] A detailed description of the business information management unit 302 will be omitted, as the details of business information for each service and the method of acquiring the information are different from the gist of the present disclosure.

[0127] The user registration control unit 303 is a means for controlling user registration by the service provider, and processes a user registration request received from the control server 10.

[0128] Upon receiving a user registration request, the user registration control unit 303 searches the user management database using the personal identification information (for example, name) included in the user registration request as a key, and identifies the corresponding user (entry).

[0129] If the corresponding user is registered in the user management database, the user registration control unit 303 generates registration authentication information from the acquired original biometric information (e.g., a facial image). For example, when a facial image is acquired, the user registration control unit 303 generates, as registration authentication information, a feature amount (feature vector) corresponding to the facial recognition algorithm adopted by the company.

[0130] Since existing technology can be used for the process of generating feature amounts, detailed description thereof will be omitted. For example, the user registration control unit 303 extracts the eyes, nose, mouth, etc. from the face image as feature points. Then, the user registration control unit 303 calculates the position of each feature point and the distance between each feature point as feature amounts, and generates a feature vector (vector information that characterizes the face image) consisting of multiple feature amounts.

[0131] When the registered authentication information (e.g., feature amounts) is generated, the user registration control unit 303 associates the system ID, the generated registered authentication information (feature amounts), user type, and business information and stores them in the user management database (see FIG. 12).

[0132] 12 is an example and is not intended to limit the items to be stored, etc. For example, the date and time of user registration may be registered in the user management database.

[0133] When the user registration is completed normally, the user registration control unit 303 sends an affirmative response indicating that the user registration was successful to the control server 10. The user registration control unit 303 generates registration authentication information (for example, feature amounts), registers the generated registration authentication information in the user management database, and then deletes the original biometric information obtained from the control server 10.

[0134] If the user registration is not completed successfully, the user registration control unit 303 sends a negative response indicating that the user registration has failed to the control server 10. For example, a negative response is sent to the control server 10 when the personal identification information (e.g., name) received from the control server 10 is not registered in the user management database or when valid registration authentication information cannot be generated from the original biometric information.

[0135] The authentication unit 304 is a means for performing biometric authentication of the person to be authenticated.

[0136] 13 is a flowchart showing an example of the operation of the authentication unit 304 according to the first embodiment. The operation of the authentication unit 304 will be described with reference to FIG.

[0137] When an authentication request is received from the authentication terminal 30, the authentication unit 304 executes a matching process using biometric information (step S101).

[0138] Specifically, the authentication unit 304 generates verification authentication information from the biometric information included in the authentication request. For example, when a facial image is acquired, the authentication unit 304 generates features corresponding to the facial recognition algorithm adopted by the company. The authentication unit 304 executes a verification process using the generated verification authentication information (features) and registered authentication information (features) registered in the user management database.

[0139] Specifically, the authentication unit 304 calculates the similarity between the feature (feature vector) to be matched and each of the multiple feature values ​​on the registration side. The similarity can be calculated using a chi-square distance, Euclidean distance, or the like. Note that the greater the distance, the lower the similarity, and the closer the distance, the higher the similarity.

[0140] If there is no feature whose similarity is equal to or greater than a predetermined value, the authentication unit 304 determines that the matching process has failed. If there is a feature whose similarity is equal to or greater than a predetermined value, the authentication unit 304 determines that the matching process has been successful. If the matching process is successful, the user of the entry with the most similar feature (registered authentication information) among multiple entries registered in the user management database is identified as the person to be authenticated.

[0141] If the matching process fails (step S102, No branch), the authentication unit 304 ends the process. In this case, the authentication unit 304 may notify the authentication terminal 30 that the authentication has failed. Alternatively, the authentication unit 304 may store the fact that the matching process has failed and details of the matching process as a log in order to confirm the soundness of the face authentication.

[0142] If the matching process is successful (step S102, Yes branch), the authentication unit 304 determines whether or not a service can be provided to the person to be authenticated, using the provided service information included in the authentication request and the user type of the person to be authenticated identified by the matching process. Note that the authentication unit 304 also performs this determination using accompanying information of the provided service information, as necessary. The authentication unit 304 determines whether or not a service can be provided based on the user type (step S103).

[0143] For example, the authentication unit 304 refers to table information that stores whether or not registration as an authenticated user is required for each service.

[0144] If the service desired by the person to be authenticated is a service that can be provided to normal users and authenticated users, the authentication unit 304 determines that the service can be provided.

[0145] If the service desired by the person to be authenticated can only be provided to authenticated users, the authentication unit 304 determines that the service can be provided if the user identified by the matching process is an authenticated user. On the other hand, if the user identified by the matching process is a normal user, the authentication unit 304 determines that the service cannot be provided. For example, the authentication unit 304 determines that a service such as "issuance of a resident certificate" can only be provided to authenticated users.

[0146] In this way, authentication unit 304 determines whether or not the service desired by the person to be authenticated can be provided, depending on the user type selected by the user (normal user, authenticated user).

[0147] If the service cannot be provided (step S104, No branch), the authentication unit 304 sets the authentication result to "authentication failed" (step S105).

[0148] If the service can be provided (step S104, Yes branch), the authentication unit 304 determines whether the service can be provided to the person to be authenticated using the business information of the person to be authenticated identified by the matching process. The authentication unit 304 determines whether the service can be provided based on the business information (step S106).

[0149] For example, the authentication unit 304 of the service server 20 of an employee's company determines that the service can be provided if the person to be authenticated is an employee of the company and is qualified to enter the office. Alternatively, the authentication unit 304 of the service server 20 of a city hall that has received a request for the issuance of a resident registration card determines that the service can be provided if a resident registration card can be issued for the person to be authenticated. Alternatively, the authentication unit 304 of the service server 20 of a retail store or the like determines that the service can be provided if payment for a product using credit card information or the like is successful.

[0150] Note that a detailed description of the authentication process using business information at each service provider will be omitted, as the process specific to each service provider is outside the scope of the present disclosure.

[0151] If the service cannot be provided (step S107, No branch), the authentication unit 304 sets the authentication result to "authentication failed" (step S105).

[0152] If the service can be provided (step S107, branch Yes), the authentication unit 304 sets the authentication result to "authentication successful" (step S108).

[0153] The authentication unit 304 transmits the authentication result (authentication success, authentication failure) to the authentication terminal 30 (step S109).

[0154] If the authentication fails, the authentication unit 304 transmits a negative response to that effect to the authentication terminal 30.

[0155] If the authentication is successful, the authentication unit 304 transmits an affirmative response indicating this to the authentication terminal 30. At that time, the authentication unit 304 transmits an affirmative response including information necessary to provide the service to the user to the authentication terminal 30, as necessary. In the example of issuing a resident certificate above, information necessary to issue (print) a resident certificate is transmitted to the authentication terminal 30.

[0156] The storage unit 305 is a means for storing information necessary for the operation of the service server 20 .

[0157] [Authentication terminal] 14 is a diagram showing an example of a processing configuration (processing module) of the authentication terminal 30 according to the first embodiment. Referring to FIG. 14, the authentication terminal 30 includes a communication control unit 401, a provided service control unit 402, an authentication request unit 403, and a storage unit 404.

[0158] The communication control unit 401 is a means for controlling communication with other devices. For example, the communication control unit 401 receives data (packets) from the service server 20. The communication control unit 401 also transmits data to the service server 20. The communication control unit 401 passes data received from other devices to other processing modules. The communication control unit 401 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 401. The communication control unit 401 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0159] The provided service control unit 402 is a means for executing control relating to the services provided to the user. The provided service control unit 402 realizes the functions assigned to the authentication terminal 30.

[0160] When a user requests to receive a service, the provided service control unit 402 acquires biometric information (e.g., a facial image) of the user (person to be authenticated). For example, the provided service control unit 402 periodically or at a predetermined timing captures an image of the area in front of the device. The provided service control unit 402 determines whether the acquired image contains a human facial image, and if a facial image is included, extracts the facial image from the acquired image data.

[0161] Note that the face image detection process and face image extraction process performed by the provided service control unit 402 can use existing technologies, and therefore detailed description thereof will be omitted. For example, the provided service control unit 402 may extract face images (face regions) from image data using a learning model trained by a CNN (Convolutional Neural Network). Alternatively, the provided service control unit 402 may extract face images using a method such as template matching.

[0162] Furthermore, the provided service control unit 402 generates or acquires provided service information according to the functions assigned to the authentication terminal 30, the services selected by the user, etc.

[0163] For example, when the provided service control unit 402 of the authentication terminal 30 installed at the entrance of an office detects a user in front of the terminal, it generates "enter facility" as the provided service information. Alternatively, when the provided service control unit 402 of the authentication terminal 30 installed at a city hall or the like recognizes, using a GUI or the like, that the user wishes to be issued a resident certificate, it generates "issue resident certificate" as the provided service information.

[0164] The provided service control unit 402 passes the acquired biometric information (for example, a facial image) and provided service information to the authentication request unit 403.

[0165] The authentication request unit 403 is a means for requesting authentication of the person to be authenticated from the service server 20. When authentication of the person to be authenticated becomes necessary, the authentication request unit 403 transmits an authentication request including biometric information of the person to be authenticated (the user in front of the authentication terminal 30) and information on the services provided to the service server 20.

[0166] The authentication request unit 403 receives the authentication result (authentication success, authentication failure) from the service server 20. The authentication request unit 403 passes the received authentication result to the service provided control unit 402.

[0167] For example, when the provided service control unit 402 of the authentication terminal 30 installed at the user's workplace receives a successful authentication, it opens the gate and allows the authenticated person to enter. Alternatively, when the provided service control unit 402 of the authentication terminal 30 installed at a city hall receives an affirmative response in response to an authentication request for "issuance of resident certificate," it issues a resident certificate using the information included in the affirmative response (information for issuing a resident certificate).

[0168] Furthermore, by registering with the system as an authenticated user, users can enter facilities that require identity verification using a My Number card, such as casinos, using biometric authentication (so-called face pass entry).

[0169] When receiving a message indicating that authentication has failed, the provided service control unit 402 may output a predetermined message, etc. For example, when receiving a message indicating that authentication has failed for the issuance of a resident registration certificate, the provided service control unit 402 of the authentication terminal 30 installed in a city hall may provide information such as a booth where a staff member is waiting.

[0170] Note that a detailed description of the provided service control unit 402 included in the authentication terminal 30 of each service provider will be omitted because the realization of the functions of the authentication terminal 30 by the provided service control unit 402 is different from the gist of the present disclosure.

[0171] The storage unit 404 is a means for storing information necessary for the operation of the authentication terminal 30 .

[0172] [Device] 15 is a diagram showing an example of a processing configuration (processing module) of the terminal 40 according to the first embodiment. Referring to FIG. 15, the terminal 40 includes a communication control unit 501, an account creation control unit 502, an original information acquisition unit 503, a personal identification control unit 504, a service selection unit 505, and a storage unit 506.

[0173] The communication control unit 501 is a means for controlling communication with other devices. For example, the communication control unit 501 receives data (packets) from the control server 10. The communication control unit 501 also transmits data to the control server 10. The communication control unit 501 passes data received from other devices to other processing modules. The communication control unit 501 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 501. The communication control unit 501 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0174] The account creation control unit 502 is a means for controlling account creation by a user. The account creation control unit 502 accesses a predetermined web page or the like provided by the control server 10 in response to an operation by the user.

[0175] In response to a user's operation, the account creation control unit 502 inputs login information, name, date of birth, etc. into the web page. The account creation control unit 502 also inputs the user's preference regarding the user type (for example, account registration as an authenticated user) into the web page.

[0176] The original information acquisition unit 503 is a means for acquiring biometric information of a user (original biometric information). The original information acquisition unit 503 displays a GUI or the like for acquiring original biometric information (e.g., a facial image) in response to an operation by the user. For example, the original information acquisition unit 503 acquires the original biometric information using a GUI such as that shown in FIG. 16.

[0177] The original information acquisition unit 503 stores the acquired original biometric information (e.g., a facial image) in the storage unit 506. At this time, the original information acquisition unit 503 may encrypt, code, or the like the acquired original biometric information, and store the encrypted original biometric information in the storage unit 506. That is, the terminal 40 held by the user may hold the encrypted original biometric information. The encrypted original biometric information may be decrypted when the original biometric information is transmitted to the control server 10. Alternatively, information for decrypting the encrypted original biometric information (e.g., a common key) may be shared between the terminal 40 and the control server 10, and the control server 10 may decrypt the encrypted original biometric information.

[0178] In principle, the terminal 40 does not delete the original biometric information (for example, a facial image) of the user. That is, the terminal 40 does not delete the original biometric information stored in the storage unit 506 unless there is a clear instruction from the user.

[0179] The personal identification control unit 504 is a means for executing control relating to personal identification required for registration in the system as an authenticated user. The personal identification control unit 504 processes a “request for providing personal identification information” received from the control server 10.

[0180] When receiving a request to provide personal identification information from the control server 10, the personal identification control unit 504 acquires an electronic certificate from the user's My Number card. At this time, it is necessary to input a personal identification number (password) corresponding to the electronic certificate. The personal identification control unit 504 displays a GUI such as that shown in FIG. 17 and acquires the personal identification number (a string of 6 to 16 alphanumeric characters).

[0181] The personal identification control unit 504 attempts to read the electronic certificate (digital signature certificate) from the IC chip of the My Number card using the acquired PIN. If the correct PIN is entered, the personal identification control unit 504 can read the electronic certificate.

[0182] If the digital certificate is acquired, the personal identification control unit 504 transmits an affirmative response to the control server 10, which includes the digital certificate as "personal identification information."

[0183] If the electronic certificate (personal identification information) cannot be acquired, the personal identification control unit 504 transmits a negative response to the control server 10 indicating that the electronic certificate (personal identification information) cannot be acquired.

[0184] The service selection unit 505 is a means for enabling a user to select a biometric authentication service. In response to an operation by the user, the service selection unit 505 logs in to a portal site provided by the control server 10. The service selection unit 505 transmits information about a service provider selected by the user using a GUI provided by the control server 10 to the control server 10.

[0185] The service selection unit 505 receives the original provision request from the control server 10. Upon receiving the request, the service selection unit 505 transmits the original biometric information stored in the storage unit 506 to the control server 10.

[0186] The storage unit 506 is a means for storing information necessary for the operation of the terminal 40 .

[0187] [Certification Authority Server] A detailed description of the configuration and operation of the certificate authority server 50 will be omitted. The certificate authority server 50 determines the validity of the acquired digital certificate and notifies the control server 10 of the determination result (whether the digital certificate is valid or invalid).

[0188] [System Operation] Next, the operation of the authentication system according to the first embodiment will be described. Note that a description of the operation related to account creation, etc. will be omitted. Fig. 18 is a sequence diagram showing an example of the operation of the authentication system according to the first embodiment.

[0189] The terminal 40 transmits information about the service selected by the user (information about the service provider from which the user wishes to receive biometric authentication service) to the control server 10 (transmitting service information; step S21).

[0190] When the user selects the service that he or she wishes to receive, the control server 10 transmits an original provision request to the terminal 40 of the user (step S22).

[0191] In response to receiving the original provision request, the terminal 40 transmits the original biometric information (for example, a facial image) to the control server 10 (step S23).

[0192] The control server 10 transmits a user registration request including the system ID, the user type, the acquired original biometric information, the individual identification information, etc. to the service server 20 of the service provider selected by the user (step S24).

[0193] The service server 20 generates authentication information for registration (registration authentication information) from the acquired original biometric information (step S25). The generated registration authentication information etc. is registered in the user management database.

[0194] Next, a modified example of the first embodiment will be described.

[0195] <Modification 1 of the First Embodiment> A user may select a service provider using a predetermined code. For example, a management code may be used that allows the user to easily specify a service provider from among many service providers. For example, when the user selects a predetermined icon from the list of icons shown in FIG. 10, the control server 10 displays a GUI that prompts the user to enter a management code. The control server 10 treats the service provider corresponding to the management code entered by the user as the service provider selected by the user.

[0196] Alternatively, the control server 10 may treat the management code entered by the user like a password. Specifically, when the user selects a service provider, the control server 10 prompts the user to enter the management code of the selected service provider. If the management code entered by the user matches the predetermined management code of the selected service provider, the control server 10 may accept the user's selection of the service provider. In other words, if the two management codes do not match, the control server 10 rejects the user's selection of the service provider.

[0197] <Modification 2 of the First Embodiment> In the above embodiment, the service provider (service server 20) identifies the user using personal identification information when registering the user. However, the user may be selected using an ID (hereinafter referred to as an individual ID) that the service provider uses to manage the user (customer).

[0198] Specifically, when the user selects a service provider, the control server 10 transmits a redirect URL (Uniform Resource Locator) in which the user's system ID and user type are embedded to the terminal 40. The redirect URL is a URL for the user to log in to the portal site (account) of the selected service provider.

[0199] When the user logs in to the service provider's login page according to the received redirect URL, the service server 20 acquires the user's individual ID (login ID) and the system ID and user type embedded in the redirect URL.

[0200] The service server 20 searches the user management database using the acquired individual ID, identifies the corresponding entry (user), and stores the system ID and user type in the identified entry.

[0201] In this way, a redirect URL in which the system ID and user type are embedded may be used to realize user registration.

[0202] <Modification 3 of the First Embodiment> In the above embodiment, the case where the user selects the user type (normal user, authenticated user) when creating a system account has been described. However, the user type may be changed after the system account is created.

[0203] In this case, when a user logs in to a system account and performs a predetermined operation (for example, pressing an authentication user registration button), the control server 10 controls the identity verification of the user. Specifically, the control server 10 (identity verification control unit 204) transmits an identity verification information provision request to the terminal 40 to obtain identity verification information (digital certificate).

[0204] If the acquired digital certificate is valid, the identity verification control unit 204 notifies each service provider for which user registration for the user has been completed of the change in user type. Specifically, the identity verification control unit 204 sends a "user type change notification" including the system ID and the changed user type (authenticated user) to the service server 20 of each service provider set in the selected service field of the account management database.

[0205] The service server 20 (user registration control unit 303) searches the user management database using the acquired system ID as a key to identify the corresponding entry. The user registration control unit 303 sets the authenticated user in the user type field of the identified entry.

[0206] If a user wishes to change their user type from an authenticated user to a regular user, the control server 10 simply sends a "user type change notification" including the system ID and the changed user type (regular user) to the service server 20 of each service provider selected by the user.

[0207] <Fourth Modification of the First Embodiment> The control server 10 and the terminal 40 may notify the user of the status of the user type by any means. That is, the terminal 40 carried by the user may display information according to the user type (normal user, authenticated user).

[0208] For example, when a user logs in to a system account, the control server 10 may display the status of the user type on the user's portal site. For example, the control server 10 (account management unit 202) may display on the terminal 40 the status shown in Fig. 19. Note that while Fig. 19 displays the user type using text, the control server 10 can display the user type using any method or mode. For example, the control server 10 may display the user type by using graphics (icons), symbols, blinking icons, etc.

[0209] Alternatively, the terminal 40 acquires the user type from the control server 10 and stores the acquired user type. The terminal 40 may display an icon or the like corresponding to the user type on the standby screen, menu screen, or the like.

[0210] <Fifth Modification of the First Embodiment> The control server 10 may perform identity verification using a certificate other than the My Number card. For example, the control server 10 (identification control unit 204) may perform identity verification using a certificate with a facial photograph attached, such as a driver's license or passport.

[0211] When the terminal 40 (personal identification control unit 504) receives a request to provide personal identification information from the control server 10, it acquires image data obtained by photographing the user (a so-called selfie) and image data obtained by photographing a driver's license, etc. The terminal 40 transmits the acquired two image data to the control server 10 as personal identification information.

[0212] The control server 10 performs one-to-one authentication using a photographed face image obtained by photographing the user and a certificate face image recorded on the certificate. If the one-to-one authentication is successful, the control server 10 determines that identity verification is successful. If the one-to-one authentication is unsuccessful, the control server 10 determines that identity verification is unsuccessful.

[0213] If the user's identity is successfully verified, the control server 10 treats the user as an authenticated user.

[0214] As described above, in the first embodiment, in an authentication system in which users themselves manage original biometric information (e.g., facial images) required for providing services using biometric authentication, the identity of the user is verified using a certificate such as a My Number card. Authenticated users whose identity has been verified are treated differently from regular users whose identity has not been verified. Authenticated users can receive services that are superior to those available to regular users. For example, authenticated users can use biometric authentication to receive services that would normally require identity verification using a My Number card or the like (services that require identity verification by a staff member, etc.), such as the issuance of a resident certificate. As a result, convenience for users (authenticated users) is improved, and operational efficiency for service providers (municipalities in the above example) is improved. Furthermore, services using biometric authentication are provided within a limited scope even to users who are hesitant to verify their identity using a My Number card or the like.

[0215] [Second embodiment] Next, the second embodiment will be described in detail with reference to the drawings.

[0216] In the second embodiment, a case will be described in which, at the time of user registration, the control server 10 notifies the service provider (service server 20) of the age information (date of birth) of the authenticated user. The service server 20 according to the second embodiment determines whether or not to provide a service based on the age of the authenticated user.

[0217] The configuration of the authentication system according to the second embodiment can be the same as that of the first embodiment, and therefore the description corresponding to Fig. 3 will be omitted. Also, the processing configuration of the control server 10 and the like according to the second embodiment can be the same as that of the first embodiment, and therefore the description thereof will be omitted.

[0218] The following description will focus on the differences between the first and second embodiments.

[0219] When a user wishes to receive a service as an authenticated user, the control server 10 (personal identification control unit 204) acquires the user's date of birth from the digital signature certificate. The digital signature certificate includes the four basic pieces of information (name, gender, address, and date of birth). The personal identification control unit 204 stores the acquired date of birth in the account management database.

[0220] When registering a user for a service provider selected by the user, the control server 10 (user registration control unit 206) sends a "user registration request" to the service server 20, which includes the system ID, user type, date of birth, original biometric information, and personal identification information.

[0221] The service server 20 (user registration control unit 303) stores the acquired system ID, user type, date of birth, etc. in the user management database.

[0222] When authenticating a user, the service server 20 (authentication unit 304) uses the birth date (age) of the user (person to be authenticated).

[0223] Fig. 20 is a flowchart showing an example of the operation of the authentication unit 304 according to the second embodiment. Note that the same reference numerals are given to processes that can have the same processing content in Fig. 13 and Fig. 20, and the description thereof will be omitted.

[0224] Here, some services provided to users require age verification. For example, there are age restrictions on purchasing products such as alcohol and tobacco. The authentication unit 304 determines whether or not to provide a service to a user based on the user's age (step S201).

[0225] For example, the authentication unit 304 refers to table information that describes whether or not there is an age restriction for each service and the minimum age limit for which the service can be provided.

[0226] If the service desired by the user does not require age verification, the authentication unit 304 determines that the service can be provided.

[0227] If the service desired by the user requires age verification, the authentication unit 304 calculates the user's age from the date of birth identified by the matching process and determines whether the user has reached the specified age set as a requirement for providing the service.

[0228] If the user (person to be authenticated) has reached a predetermined age, the authentication unit 304 determines that the service can be provided. On the other hand, if the user (person to be authenticated) has not reached the predetermined age, the authentication unit 304 determines that the service cannot be provided.

[0229] If it is determined that the service cannot be provided based on the age of the user (step S202, No branch), the authentication unit 304 sets the authentication result to authentication failure (step S105).

[0230] If it is determined that the service can be provided based on the age of the user (step S202, Yes branch), the authentication unit 304 makes a determination based on the business information (step S106).

[0231] The service server 20 may utilize the age of the person to be authenticated when providing services. The service server 20 may provide a discount on the fee if the person to be authenticated is above a predetermined age (for example, 60 years old or older). In other words, the service server 20 may provide a silver discount (senior discount) or the like using the age of the person to be authenticated.

[0232] As described above, when the control server 10 according to the second embodiment successfully verifies the identity of a user, it acquires the date of birth from the digital certificate of the authenticated user whose identity has been successfully verified. The control server 10 then notifies the service provider selected by the user of the acquired date of birth in addition to the system ID, user type, original biometric information, etc. The service provider can determine whether to provide age-restricted services based on the age obtained from the Individual Number Card (digital signature certificate), allowing for safe service provision. Furthermore, users can purchase alcohol, tobacco, and other products through biometric authentication without presenting a certificate such as an Individual Number Card to a retail store clerk or other person for age verification. This improves user convenience. Furthermore, retail stores and other businesses no longer need to employ staff to verify identity, improving operational efficiency.

[0233] [Third embodiment] Next, the third embodiment will be described in detail with reference to the drawings.

[0234] In the third embodiment, a case will be described in which a user provides a system with a second certificate other than a first certificate (e.g., a My Number card) for registration as an authenticated user. A control server 10 according to the third embodiment notifies a service provider of attribute information such as the user's position, status, situation, condition, skills, and qualifications obtained from the second certificate. The service provider authenticates the user and provides services based on the notified attribute information.

[0235] The configuration of the authentication system according to the third embodiment can be the same as that of the first embodiment, so a description corresponding to FIG. 3 will be omitted.

[0236] The following description will focus on the differences between the first to third embodiments.

[0237] When creating an account, the control server 10 acquires attribute information from a certificate other than the certificate (identification document; My Number card) for registering the user as an authenticated user. Specifically, the control server 10 acquires the attribute information from a certificate that certifies the user's position, status, situation, condition, skills, qualifications, etc.

[0238] For example, the above certificates include a student ID card that proves that you are a student, a disability certificate that proves that you are disabled, a driver's license that proves that you are able to drive a car, and an identification card that proves that you have a specific qualification (such as a doctor).Also, a health insurance card is included in the above certificates.

[0239] Fig. 21 is a diagram showing an example of the processing configuration (processing modules) of the control server 10 according to the third embodiment. Referring to Fig. 21, an attribute information acquisition unit 208 is added to the configuration of the control server 10 according to the first embodiment.

[0240] The attribute information acquisition unit 208 is a means for acquiring attribute information from a second certificate that is different from a first certificate used for identity verification for authentication user registration.

[0241] When a user wishes to register a student ID card, disability certificate, etc. on the portal site when or after creating a system account, the attribute information acquisition unit 208 acquires image data showing the student ID card, etc. using a GUI, etc.

[0242] The attribute information acquisition unit 208 extracts information such as the name and date of birth written on the student ID card from the acquired image data. For example, the attribute information acquisition unit 208 acquires the name, date of birth, etc. written on the student ID card using OCR (Optical Character Recognition) technology or the like.

[0243] The attribute information acquisition unit 208 compares the name, date of birth, etc. obtained from the second certificate (student ID, disability certificate, etc.) with the name, date of birth, etc. of the user (an authenticated user whose identity has been verified), and if the two match, determines that a valid certificate has been registered.

[0244] If the certificate is determined to be valid, the attribute information acquisition unit 208 acquires attribute information such as the user's status, position, and situation from the second certificate (student ID, disability certificate, etc.). For example, the attribute information acquisition unit 208 acquires the attribute information by inputting image data showing the certificate into the learning model.

[0245] The learning model is generated by executing machine learning using training data in which labels (position, position, situation, etc.) are assigned to image data. Any algorithm such as a support vector machine, boosting, or neural network can be used to generate the learning model. Since well-known techniques can be used for the algorithms such as the support vector machine, a description thereof will be omitted.

[0246] When the attribute information of the user is acquired from the second certificate, the attribute information acquisition unit 208 stores the acquired attribute information in the account management database.

[0247] When registering a user for a service provider selected by the user, the control server 10 (user registration control unit 206) sends a "user registration request" to the service server 20, which includes the system ID, user type, attribute information, original biometric information, and personal identification information.

[0248] The service server 20 (user registration control unit 303) stores the acquired system ID, user type, and attribute information in the user management database.

[0249] The service server 20 (authentication unit 304) performs authentication processing and grants predetermined benefits using attribute information (position, status, situation, skills, qualifications, etc.) of the person to be authenticated registered in the user management database.

[0250] For example, if the person to be authenticated is a student, the service server 20 may sell the person a commuter pass or the like at a student discount. Alternatively, if the person to be authenticated is a disabled person, the service server 20 may discount the fare for a bus, train, or the like. Alternatively, if the person to be authenticated has purchased a Silver Pass, the service server 20 may discount the fare for a bus, train, or the like.

[0251] <Modification of the third embodiment> The control server 10 may acquire information from a document other than the certificate for acquiring the user's attribute information, and notify the service provider of the acquired information.

[0252] For example, the control server 10 may accept registration of a medication notebook from a user and obtain information about the user's medication (medication information) from the medication notebook. When registering a user, the control server 10 may notify the service provider of the medication information together with the original biometric information, etc.

[0253] A service provider (for example, a hospital or pharmacy) may use the acquired medication information for the treatment of the user (patient), medication guidance, and the like.

[0254] As described above, the control server 10 according to the third embodiment acquires attribute information of a user from the user's second certificate (e.g., a student ID card or a disability certificate). The control server 10 notifies the service provider selected by the user of the acquired attribute information in addition to the original biometric information and user type. The service provider can authenticate the authenticatee or provide services based on the attribute information acquired from a certificate such as a student ID card or a disability certificate. The user does not need to present the certificate to a staff member or store clerk of the service provider in order to receive benefits, etc., that are acquired by having the certificate. This improves user convenience. Furthermore, the service provider does not need to secure personnel for certificate verification, thereby improving business efficiency.

[0255] Next, the hardware of each device constituting the authentication system will be described. Fig. 22 is a diagram showing an example of the hardware configuration of the control server 10.

[0256] The control server 10 can be configured using an information processing device (a so-called computer), and has the configuration shown in Fig. 22. For example, the control server 10 includes a processor 311, a memory 312, an input / output interface 313, and a communication interface 314. The components such as the processor 311 are connected by an internal bus or the like, and are configured to be able to communicate with each other.

[0257] However, the configuration shown in Fig. 22 is not intended to limit the hardware configuration of the control server 10. The control server 10 may include hardware not shown, and may not include the input / output interface 313 as necessary. Furthermore, the number of processors 311 and the like included in the control server 10 is not intended to be limited to the example shown in Fig. 22; for example, the control server 10 may include multiple processors 311.

[0258] The processor 311 is a programmable device such as a central processing unit (CPU), a micro processing unit (MPU), or a digital signal processor (DSP). Alternatively, the processor 311 may be a device such as a field programmable gate array (FPGA) or an application specific integrated circuit (ASIC). The processor 311 executes various programs including an operating system (OS).

[0259] The memory 312 is a random access memory (RAM), a read only memory (ROM), a hard disk drive (HDD), a solid state drive (SSD), etc. The memory 312 stores an OS program, application programs, and various data.

[0260] The input / output interface 313 is an interface for a display device and an input device (not shown). The display device is, for example, a liquid crystal display, etc. The input device is, for example, a device that accepts user operations such as a keyboard or a mouse.

[0261] The communication interface 314 is a circuit, module, etc. that communicates with other devices. For example, the communication interface 314 includes a network interface card (NIC).

[0262] The functions of the control server 10 are realized by various processing modules. The processing modules are realized, for example, by the processor 311 executing a program stored in the memory 312. The program can be recorded on a computer-readable storage medium. The storage medium can be a non-transitory medium such as a semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. That is, the present invention can also be embodied as a computer program product. The program can be downloaded via a network or updated using a storage medium storing the program. The processing modules can also be realized by semiconductor chips.

[0263] The service server 20, authentication terminal 30, terminal 40, etc. can also be configured using information processing devices similar to the control server 10, and their basic hardware configurations are not different from those of the control server 10, so a description thereof will be omitted. For example, the authentication terminal 30 may be provided with a camera device for photographing the person to be authenticated.

[0264] The control server 10, which is an information processing device, is equipped with a computer, and the functions of the control server 10 can be realized by having the computer execute a program. The control server 10 also executes the control method of the control server 10 using the program. Similarly, the terminal 40, which is an information processing device, is equipped with a computer, and the functions of the terminal 40 can be realized by having the computer execute a program. The terminal 40 also executes the control method of the terminal 40 using the program.

[0265] [Variations] The configuration, operation, etc. of the authentication system described in the above embodiment are merely examples, and are not intended to limit the configuration, etc. of the system.

[0266] In the above embodiment, the operation of the authentication system has been described using a person's "face" as an example of biometric information. However, the authentication system disclosed herein can also use other types of biometric information. For example, data containing physical characteristics unique to an individual, such as fingerprints, voiceprints, veins, retina, or iris patterns, may be used. In other words, the user's biometric information may be any information that includes the user's physical characteristics.

[0267] The user terminal 40 may obtain consent from the user to transmit the original biometric information (e.g., a facial image) to the service provider each time it receives a request to provide the original from the control server 10. Specifically, upon receiving the request to provide the original, the service selection unit 505 of the terminal 40 obtains, using a GUI or the like, whether or not the original biometric information (e.g., a facial image) can be provided. Upon obtaining consent from the user to provide the original biometric information, the service selection unit 505 transmits the original biometric information stored therein to the control server 10.

[0268] When a user selects a service provider, the control server 10 may change the service providers that the user can select depending on the user type. That is, if there is a service provider among multiple service providers that provides services only to authenticated users, the control server 10 may prohibit normal users from selecting that service provider. In this case, the control server 10 notifies the user of the restrictions on the service provider (the existence of a service provider that can only provide services to authenticated users) using various interfaces. For example, as shown in FIG. 23 , the control server 10 displays a message such as “Selectable only by authenticated users” on the icon of the service provider with the restrictions. Alternatively, as shown in FIG. 24 , the control server 10 may hide service providers (service provider icons) that normal users cannot select. Alternatively, as shown in FIG. 25 , the control server 10 may display the icons of service providers that normal users cannot select inactively (displayed by dotted lines in the example of FIG. 25 ). Alternatively, the control server 10 may display the icons of service providers that normal users cannot select transparently. Furthermore, when the control server 10 notifies the user of the existence of a service provider that cannot be selected by a normal user, the control server 10 may provide an interface that prompts the user to register as an authenticated user. For example, as shown in Fig. 26, the control server 10 may display an "authenticated user registration button" near the icon of the service provider. Alternatively, the control server 10 may display a message such as "You are a normal user and cannot use the service, but you will be able to use the service once you have completed the authenticated user registration."

[0269] After authenticating the person to be authenticated, the service server 20 may notify the user terminal 40 of the details of the authentication. At that time, the service server 20 transmits an authentication execution notice to the terminal 40, including the authentication date and time, the authentication location, details of the authentication process, the user type, etc. The terminal 40 stores the information included in the authentication execution notice and generates an authentication history (see FIG. 27). Furthermore, the terminal 40 displays the authentication history in response to an operation by the user. Alternatively, upon receiving the authentication execution notice, the terminal 40 displays a pop-up using the information included in the notice (see FIG. 28).

[0270] In the above embodiment, the case where the account management database is configured inside the control server 10 has been described, but the database may also be configured on an external database server or the like. That is, some of the functions of the control server 10 may be implemented on another server. More specifically, the above-described "service selection control unit (service selection control means)" and the like may be implemented on any of the devices included in the system.

[0271] The form of data transmission and reception between the devices (control server 10, service server 20, authentication terminal 30) is not particularly limited, but the data transmitted and received between these devices may be encrypted. Biometric information and the like is transmitted and received between these devices, and in order to appropriately protect this information, it is desirable to transmit and receive encrypted data.

[0272] In the flow charts (flowcharts, sequence diagrams) used in the above explanation, multiple steps (processes) are described in order, but the execution order of the steps executed in the embodiments is not limited to the order described. In the embodiments, the order of the illustrated steps can be changed to the extent that the content is not affected, such as by executing each process in parallel.

[0273] The above-described embodiments have been described in detail to facilitate understanding of the present disclosure, and it is not intended that all of the above-described configurations are required. Furthermore, when multiple embodiments are described, each embodiment may be used alone or in combination. For example, it is possible to replace part of the configuration of one embodiment with the configuration of another embodiment, or to add the configuration of another embodiment to the configuration of one embodiment. Furthermore, it is possible to add, delete, or replace part of the configuration of one embodiment with another configuration.

[0274] From the above explanation, it is clear that the present invention has industrial applicability, and the present invention can be suitably applied to information processing systems that provide biometric authentication services.

[0275] Some or all of the above embodiments can be described as, but are not limited to, the following supplementary notes. [Appendix 1] an identity verification control means for verifying the identity of a user who wishes to register in the system as an authenticated user who is entitled to more services than a normal user, and for managing the user type of a user who has been successfully verified as the authenticated user, and for managing the user type of a user who has not been successfully verified as the normal user; a service selection control means for enabling a user to select a service provider from which the user wishes to receive a service from among a plurality of service providers that provide services using biometric authentication; a user registration control means for notifying a service provider selected by the user of original biometric information that serves as an original of authentication information used for biometric authentication and the user type; A server device comprising: [Appendix 2] 2. The server device according to claim 1, wherein the identity verification control means performs the identity verification using an electronic certificate obtained from the first certificate of the user. [Appendix 3] When the identity verification is successful, the identity verification control means acquires the user's date of birth, 3. The server device according to claim 2, wherein the user registration control means further notifies the service provider selected by the user of the acquired date of birth. [Appendix 4] further comprising an attribute information acquisition means for acquiring attribute information of the user from the second certificate of the user; 3. The server device according to claim 2, wherein the user registration control means further notifies the acquired attribute information to a service provider selected by the user. [Appendix 5] The server device described in any one of Appendices 1 to 4, wherein the user registration control means acquires the original biometric information by requesting the provision of the original biometric information from a terminal held by the user, and sends a user registration request including at least the acquired original biometric information and the user type to a server of a service provider selected by the user. [Appendix 6] The server device described in Appendix 5, wherein the user registration control means sends the user registration request to the server, the request including at least a system ID for managing the user on the device itself, the acquired original biometric information, and the user type. [Appendix 7] 7. The server device according to claim 6, wherein the original biometric information is a facial image. [Appendix 8] 3. The server device according to claim 2, wherein the first certificate is a My Number Card. [Appendix 9] A device owned by the user, a plurality of service servers that provide services using biometric authentication and are managed by a plurality of service providers, respectively; a server device; Including, The server device an identity verification control means for verifying the identity of a user who wishes to register in the system as an authenticated user who is entitled to more services than a normal user, and for managing the user type of a user who has been successfully verified as the authenticated user, and for managing the user type of a user who has not been successfully verified as the normal user; a service selection control means for enabling a user to select a service provider from which the user wishes to receive a service from among the plurality of service providers; a user registration control means for acquiring original biometric information from the user terminal, which is the original of authentication information used for biometric authentication, and transmitting a user registration request including the original biometric information and the user type to a service server of a service provider selected by the user; A system comprising: [Appendix 10] A system as described in Appendix 9, wherein a service server among the plurality of service servers that receives the user registration request determines whether or not to provide the service desired by the person to be authenticated, depending on the user type. [Appendix 11] The system described in Appendix 9 or 10, wherein the terminal carried by the user displays information according to the user type. [Appendix 12] In the server device, performing identity verification of a user who wishes to register in the system as an authenticated user who is entitled to more services than a normal user, managing the user type of the user whose identity verification has been successful as the authenticated user, and managing the user type of the user whose identity verification has not been successful as the normal user; A system that allows users to select the service provider from which they wish to receive services from among multiple service providers that provide services using biometric authentication, A control method for a server device for notifying a service provider selected by the user of original biometric information that serves as the original of authentication information used for biometric authentication and the user type. [Appendix 13] The computer installed in the server device A process of verifying the identity of a user who wishes to register in the system as an authenticated user who can receive more services than a normal user, managing the user type of the user who has been successfully verified as the authenticated user, and managing the user type of the user who has not been successfully verified as the normal user; A process that enables a user to select a service provider from which the user wishes to receive a service from among a plurality of service providers that provide services using biometric authentication; a process of notifying a service provider selected by the user of original biometric information that serves as an original of authentication information used for biometric authentication and the user type; A computer-readable storage medium that stores a program for executing the above.

[0276] The disclosures of the above-cited prior art documents are incorporated herein by reference. Although the embodiments of the present invention have been described above, the present invention is not limited to these embodiments. Those skilled in the art will understand that these embodiments are merely illustrative and that various modifications are possible without departing from the scope and spirit of the present invention. In other words, the present invention naturally includes various modifications and alterations that may be made by those skilled in the art in accordance with the entire disclosure, including the claims, and the technical concepts thereof. [Explanation of symbols]

[0277] 10 Control Server 20 Service Server 30 Authentication Terminal 40 terminals 50 Certificate Authority Server 100 Server device 101 Identity verification control measures 102 Service selection control means 103 User registration control means 201 Communication control unit 202 Account Management Department 203 Business Management Department 204 Identity verification control section 205 Service selection control unit 206 User registration control unit 207 Memory section 208 Attribute information acquisition section 301 Communication Control Unit 302 Business Information Management Department 303 User registration control unit 304 Authentication Section 305 Storage section 311 processor 312 memory 313 Input / Output Interface 314 Communication Interface 401 Communication control unit 402 Service provision control section 403 Authentication Request Section 404 Storage section 501 Communication control unit 502 Account creation control unit 503 Original information acquisition department 504 Identity verification control unit 505 Service Selection Department 506 Storage section

Claims

1. an identity verification control means for verifying the identity of a user, managing the user type of a user who has successfully verified the identity as an authenticated user, and managing the user type of a user who has not successfully verified the identity as a normal user; a user registration control means for notifying a service provider selected by the user from among a plurality of service providers that provide services using biometric authentication of the user's biometric information to be used for the biometric authentication and the user type; A server device comprising:

2. 2. The server device according to claim 1, wherein said personal identification control means performs said personal identification using an electronic certificate obtained from a first certificate of said user.

3. When the identity verification is successful, the identity verification control means acquires the date of birth of the user, 3. The server device according to claim 2, wherein said user registration control means further notifies said acquired date of birth to a service provider selected by said user.

4. further comprising an attribute information acquisition means for acquiring attribute information of the user from the second certificate of the user; 3. The server device according to claim 2, wherein said user registration control means further notifies said acquired attribute information to a service provider selected by said user.

5. The server device according to any one of claims 1 to 4, wherein the user registration control means acquires the biometric information by requesting the provision of the biometric information from a terminal held by the user, and transmits a user registration request including at least the acquired biometric information and the user type to a server of a service provider selected by the user.

6. The server device according to claim 5, wherein the user registration control means transmits the user registration request to the server, the user registration request including at least a system ID for managing the user on the device itself, the acquired biometric information, and the user type.

7. 5. The server device according to claim 1, further comprising a service selection control means for enabling the user to select a service provider from which the user wishes to receive a service, from among a plurality of service providers that provide services using the biometric authentication.

8. A device owned by the user, a plurality of service servers that provide services using biometric authentication and are managed by a plurality of service providers, respectively; a server device; Including, The server device an identity verification control means for verifying the identity of a user, managing the user type of a user who has successfully verified the identity as an authenticated user, and managing the user type of a user who has not successfully verified the identity as a normal user; a user registration control means for notifying a service server of a service provider selected by the user from among the plurality of service providers of the biometric information of the user to be used for the biometric authentication and the user type; A system comprising:

9. 9. The system according to claim 8, wherein a service server among the plurality of service servers to which the biometric information of the user and the user type have been notified determines whether or not to provide the service desired by the person to be authenticated, depending on the user type.

10. The system according to claim 8 or 9, wherein the terminal carried by the user displays information according to the user type.

11. In the server device, performing identity verification of the user, and managing the user type of the user who has succeeded in the identity verification as an authenticated user, and managing the user type of the user who has not succeeded in the identity verification as a normal user; A method for controlling a server device, which notifies a service provider selected by the user from among a plurality of service providers that provide services using biometric authentication of the user's biometric information to be used for the biometric authentication and the user type.

12. The computer installed in the server device A process of verifying the identity of a user, managing the user type of a user who has successfully verified the identity as an authenticated user, and managing the user type of a user who has not successfully verified the identity as a normal user; a process of notifying a service provider selected by the user from among a plurality of service providers that provide services using biometric authentication of the user's biometric information to be used for the biometric authentication and the user type; A program to execute.

Images