Terminal, method for controlling the terminal, and program

Abstract

To provide a terminal that assures the authenticity of a content provided from a digital wallet.SOLUTION: The terminal includes identity confirmation means and storage means. The identity confirmation means uses biometric information obtained from an identification certificate and biometric information about an establishing person who establishes a digital wallet to confirm the identity of the establishing person who establishes the digital wallet. When the identity confirmation is successful, the storage means stores the biometric information obtained from the identification certificate or the biometric information about the establishing person who establishes the digital wallet as biometric information of a digital wallet holder.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present invention relates to a terminal, a system, a method for controlling a terminal, and a storage medium.

Background Art

[0002] There is technology related to digital wallets.

[0003] For example, Patent Document 1 describes that a device and a method for using biometric technology are disclosed to ensure secure transactions using blockchain technology. Further, Patent Document 1 describes reducing at least some security-related problems in conventional blockchain digital wallets, specifically, blockchain digital wallets that cannot reliably authenticate user identification information. Further, Patent Document 1 presents a method and an apparatus for using authentication and data protection to implement a blockchain offline wallet using biometrics.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] When a user uses a digital wallet, digital content (e.g., a certificate such as a student ID) stored in the digital wallet is presented to the verifier of the certificate. At that time, the verifier confirms the authenticity of the presented digital content. That is, the verifier confirms that the user in front of them matches the person in whose name the digital wallet is registered.

[0006] In the technology disclosed in Patent Document 1, the user and the account holder are verified using biometric authentication. Specifically, in Patent Document 1, when a user uses a digital wallet, biometric authentication is used to confirm that the service user and the account holder of the digital wallet are the same person.

[0007] However, if the biometric information used for biometric authentication when a user uses a digital wallet does not match the biometric information of the digital wallet's holder, the verifier may provide services to a user other than the digital wallet's holder. In other words, if someone else registers biometric information under a false name when opening a digital wallet, the verifier cannot verify the authenticity of the digital content provided (e.g., identification documents such as student IDs).

[0008] The primary objective of this invention is to provide a terminal, a system, a method for controlling the terminal, and a storage medium that contribute to ensuring the authenticity of content provided from a digital wallet. [Means for solving the problem]

[0009] According to a first aspect of the present invention, a terminal is provided that includes: an identity verification means for verifying the identity of a person opening a digital wallet using biometric information obtained from an identification document and biometric information of the person opening the digital wallet; and a storage means for storing, if the identity verification is successful, the biometric information obtained from the identification document or the biometric information of the person opening the digital wallet as the biometric information of the digital wallet holder.

[0010] A second aspect of the present invention provides a system comprising a terminal and a business terminal used by a service provider when providing services to a user, wherein the terminal includes: an identity verification means that verifies the identity of the person opening the digital wallet using biometric information obtained from an identification document and biometric information of the person opening the digital wallet; a storage means that, if the identity verification is successful, stores the biometric information obtained from the identification document or the biometric information of the person opening the digital wallet as the biometric information of the digital wallet holder; and a usage control means that provides the business terminal with the content stored in the digital wallet and the biometric information of the digital wallet holder.

[0011] A third aspect of the present invention provides a terminal control method that uses biometric information obtained from an identification document and biometric information of the person opening the digital wallet to verify the identity of the person opening the digital wallet, and if the identity verification is successful, stores the biometric information obtained from the identification document or the biometric information of the person opening the digital wallet as the biometric information of the digital wallet holder.

[0012] A fourth aspect of the present invention is provided, a computer-readable storage medium that stores a program for causing a computer installed in a terminal to perform the following: a process of verifying the identity of the person opening the digital wallet using biometric information obtained from an identification document and biometric information of the person opening the digital wallet; and, if the identity verification is successful, a process of storing the biometric information obtained from the identification document or the biometric information of the person opening the digital wallet as the biometric information of the digital wallet holder. [Effects of the Invention]

[0013] From each perspective of the present invention, a terminal, a system, a method for controlling the terminal, and a storage medium are provided that contribute to ensuring the authenticity of content provided from a digital wallet. However, the effects of the present invention are not limited to those described above. The present invention may also produce other effects in lieu of or in conjunction with the effects described above. [Brief explanation of the drawing]

[0014] [Figure 1] Figure 1 is a diagram illustrating the outline of one embodiment. [Figure 2] Figure 2 is a flowchart showing the operation of one embodiment. [Figure 3] Figure 3 shows an example of a schematic configuration of the information processing system according to the first embodiment. [Figure 4] Figure 4 shows an example of the display of a terminal according to the first embodiment. [Figure 5] Figure 5 is a diagram illustrating the operation of the information processing system according to the first embodiment. [Figure 6] Figure 6 is a diagram illustrating the operation of the information processing system according to the first embodiment. [Figure 7] Figure 7 shows an example of the terminal processing configuration according to the first embodiment. [Figure 8] Figure 8 shows an example of the processing configuration of the digital wallet control unit according to the first embodiment. [Figure 9] Figure 9 is a flowchart showing an example of the operation of the identity verification unit according to the first embodiment. [Figure 10] Figure 10 shows an example of the display of a terminal according to the first embodiment. [Figure 11] Figure 11 is a flowchart showing an example of the operation of the certificate acquisition control unit according to the first embodiment. [Figure 12] Figure 12 shows an example of the processing configuration of a server device according to the first embodiment. [Figure 13] Figure 13 shows an example of the processing configuration of a business terminal according to the first embodiment. [Figure 14] FIG. 14 is a sequence diagram showing an example of the operation of the information processing system according to the first embodiment. [Figure 15] FIG. 15 is a diagram for explaining the operation of the information processing system according to a modification of the first embodiment. [Figure 16] FIG. 16 is a diagram showing an example of the hardware configuration of the terminal according to the present disclosure. [Figure 17] FIG. 17 is a diagram showing an example of the display of the terminal according to a modification of the present disclosure. MODE FOR CARRYING OUT THE INVENTION

[0015] First, an overview of one embodiment will be described. Note that the reference numerals in the drawings appended to this overview are for convenience of each element as an example for assisting understanding, and the description of this overview is not intended to be any limitation. Also, unless otherwise specified, the blocks described in each drawing represent a configuration in terms of functional units, not hardware units. The connection lines between the blocks in each figure include both bidirectional and unidirectional ones. The one-way arrow schematically shows the flow of the main signal (data) and does not exclude bidirectionality. In this specification and the drawings, for elements that can be similarly described, duplicate description may be omitted by assigning the same reference numerals.

[0016] A terminal 100 according to one embodiment includes an identity verification means 101 and a storage means 102 (see FIG. 1). The identity verification means 101 verifies the identity of the applicant who opens the digital wallet by using the biometric information obtained from the identity certificate and the biometric information of the applicant who opens the digital wallet (step S1 in FIG. 2). When the identity verification is successful, the storage means 102 stores the biometric information obtained from the identity certificate or the biometric information of the applicant who opens the digital wallet as the biometric information of the digital wallet holder (step S2).

[0017] Terminal 100 verifies the identity of the digital wallet owner using an identification document issued by a public institution at the time of digital wallet creation. If the verification is successful, terminal 100 stores the biometric information obtained at the time of digital wallet creation as the biometric information of the digital wallet owner. When a user receives a service from a service provider, terminal 30 can provide the service provider with the digital content along with the biometric information of the digital wallet owner. The service provider can verify whether the digital wallet owner providing the certificate and the user in front of them are the same person by performing an authentication process using the biometric information obtained from terminal 30 and the biometric information of the user who wishes to enjoy the service. As a result, even if someone other than the digital wallet owner tries to use the digital wallet owner's terminal 30 to receive services from the service provider, the service provider can detect the fraudulent activity. In other words, the authenticity of the content provided from the digital wallet is guaranteed.

[0018] Specific embodiments will be described in more detail below with reference to the drawings.

[0019] [First Embodiment] The first embodiment will be described in more detail with reference to the drawings.

[0020] [System Configuration] As shown in Figure 3, the information processing system according to the first embodiment includes at least one certificate issuer and at least one service provider.

[0021] A certificate issuer is an entity that issues certificates to users. For example, educational institutions such as universities and vocational schools that issue student IDs are considered certificate issuers. Alternatively, organizations and associations that issue certificates of language proficiency, etc., are also considered certificate issuers. Furthermore, certificate issuers are not limited to private companies; public institutions that issue driver's licenses, etc., are also included as certificate issuers in the disclosure of this application.

[0022] Each certificate issuer has a server device 10. The server device 10 is a server that performs the processing and operations necessary to carry out the certificate issuer's business. The server device 10 may be managed and operated by the certificate issuer, or its management and operation may be entrusted to another business operator, etc. The server device 10 may be installed in the certificate issuer's building, or it may be installed on a network (on the cloud).

[0023] Certificate issuers issue certificates upon request from users. For example, a university issues student ID cards (digital student ID cards) upon request from its students. Alternatively, language training institutions issue certificates (digital certificates) that demonstrate the language proficiency of test takers.

[0024] A service provider is a business that provides services to users. For example, service providers include businesses that operate means of transportation such as railways, buses, and airplanes. Alternatively, businesses such as retail stores and restaurants are also considered service providers. Service providers are not limited to private companies; public institutions such as city halls, as well as organizations such as NGOs (Non-Governmental Organizations) and NPOs (Non-Profit Organizations) are also included as service providers in the disclosure of this application.

[0025] Service providers require users to present identification documents relevant to their company's (organization's) business. For example, a railway company selling student discount passes to students will require those students to present their student ID. Similarly, a retail store selling tobacco, alcohol, etc., to customers will require customers to present identification documents that can verify their age.

[0026] Each service provider is equipped with a service terminal 20 used when providing services to users. The service terminal 20 may be a personal computer, a tablet, or a POS (Point of Sale) terminal. The service provider may also be equipped with a server for providing services to users (not shown in Figure 3, etc.).

[0027] Employees of the service provider operate the service provider terminal 20 to provide services to users. In doing so, the service provider terminal 20 verifies the certificate presented by the user. The service provider terminal 20 notifies the employees of the verification results.

[0028] The user possesses terminal 30. The user operates terminal 30 to request (demand) a certificate from a certificate issuer. The user also uses terminal 30 to present the certificate requested by the service provider (for example, a student ID).

[0029] Each device shown in Figure 3 is connected to a network. Specifically, the server device 10, the operator terminal 20, and the terminal 30 are connected to the network by wired or wireless communication means.

[0030] The configuration of the information processing system shown in Figure 3 is illustrative and not intended to limit its configuration. For example, each certificate issuer may include multiple server devices 10. Similarly, each service provider may include multiple service terminals 20.

[0031] [General operation] Next, we will describe the general operation of the information processing system according to the first embodiment.

[0032] <Preparing your digital wallet> The user's terminal 30 is equipped with a digital wallet function. A digital wallet is an electronic information storage service that guarantees information security, including data integrity, reliability, and availability. While self-sovereign management is desirable for digital wallets, a party other than the user may be the managing entity.

[0033] The user installs an application on their device 30 to create a digital wallet. By opening a digital wallet on device 30, the user can store various digital content on device 30, such as electronic money, student IDs, identification documents such as passports and driver's licenses, various ticket information such as airline tickets and boarding passes, and vaccination certificates.

[0034] For example, the user's terminal 30 stores digital content as shown in Figure 4. The digital content stored on terminal 30 includes official identification documents such as passports and driver's licenses, as well as student ID cards issued by universities.

[0035] Terminal 30 performs identity verification using an identification document issued by a public institution such as a national administrative agency when the digital wallet application is launched for the first time. In other words, terminal 30 verifies the user's identity when the digital wallet is opened.

[0036] For example, terminal 30 verifies the user's identity using an identification document containing the holder's biometric information, such as a My Number Card or passport. Terminal 30 uses the My Number Card or passport as the Root of Trust.

[0037] Examples of biometric information include data (feature quantities) calculated from individual physical characteristics such as face, fingerprints, voiceprints, veins, retina, and iris patterns. Alternatively, biometric information may be image data such as face images or fingerprint images. Biometric information only needs to include information about the user's physical characteristics. This disclosure describes the case where biometric information related to a person's "face" (face image or feature quantities generated from a face image) is used.

[0038] Terminal 30 obtains information about the holder (issuer) of the identification document from the user's identification document. For example, terminal 30 obtains information about the holder of the My Number Card from the IC (Integrated Circuit) of the My Number Card.

[0039] Specifically, terminal 30 acquires the basic information (so-called basic four pieces of information; name, gender, date of birth, and address) of the My Number Card holder and the biometric information (facial image) of the holder. Terminal 30 stores the basic information and biometric information read from the My Number Card internally.

[0040] Furthermore, terminal 30 acquires the user's (digital wallet account holder's) biometric information. For example, terminal 30 acquires and stores a facial image by taking a photograph of the user.

[0041] Terminal 30 performs a matching process (authentication process) using biometric information obtained from the identification document and the user's biometric information. If the authentication process (one-to-one authentication) is successful, Terminal 30 opens a digital wallet. Terminal 30 verifies, through a matching process (authentication process) using biometric information, that the person who issued the identification document and the user using Terminal 30's digital wallet are the same person.

[0042] <Issuance of Certificates> The user obtains digital content to be stored in the digital wallet. For example, the user operates terminal 30 to request a certificate issuer to issue a certificate. For example, a student requests (demands) a student ID card from their university. Specifically, the digital wallet application makes a request for the issuance of a student ID card from the university to which the student belongs.

[0043] Terminal 30 sends a "certificate issuance request" containing information that identifies the user (for example, name, combination of name and date of birth, student ID number, etc.) to the certificate issuer's server device 10 (see Figure 5).

[0044] The certificate issuer determines whether the user requesting the certificate has the authority (qualification) to receive it. For example, server device 10 determines whether the student who wishes to receive a student ID card is enrolled at its university.

[0045] If the student is affiliated with the university, the server device 10 issues a student ID card (digital student ID card). The server device 10 issues a signed certificate from its own organization (certificate issuer; for example, the university). The server device 10 sends the issued signed certificate to the terminal 30.

[0046] Terminal 30 (digital wallet application) verifies the signature of the received certificate.

[0047] If the signature verification is successful, terminal 30 obtains basic information (name, gender, date of birth, address) from the received certificate. In other words, terminal 30 obtains basic information about the issuer of the obtained certificate. Terminal 30 compares the basic information obtained from the identity document (Root of Trust) when the digital wallet application is first launched with the basic information obtained from the certificate generated by the certificate issuer.

[0048] In the example above, terminal 30 compares the basic information obtained from the My Number Card with the basic information obtained from the student ID card. Terminal 30 determines that the comparison was successful if the basic information obtained from the two different sources matches.

[0049] Terminal 30 accepts the certificate received from the certificate issuer if it successfully verifies the signature attached to the certificate and also successfully matches it using two pieces of basic information (the two pieces of basic information match). Terminal 30 stores the certificate obtained from the certificate issuer (for example, a student ID) internally and manages it so that it can be used in a digital wallet.

[0050] <Using Certificates> Users must present the service provider with any identification requested by that service provider. For example, a student purchasing a commuter pass would present their student ID to the railway company.

[0051] For example, the user operates terminal 30 to launch a digital wallet application. The user selects a certificate specified by the service provider (e.g., a student ID) within the digital wallet application.

[0052] Terminal 30 generates a 2D barcode using the certificate selected by the user and biometric information stored internally (for example, a facial image obtained from a My Number Card or a facial image taken when opening a digital wallet). Terminal 30 generates a 2D barcode converted from the certificate specified by the service provider and the user's biometric information. Terminal 30 displays the generated 2D barcode.

[0053] The user presents the terminal 30 displaying the 2D barcode to the service provider (for example, an employee of a railway company) (see Figure 6).

[0054] The service provider (such as an employee of the service provider) operates the service terminal 20 to read the presented 2D barcode. The service provider also operates the service terminal 20 to obtain biometric information of the user in front of them (the user presenting the certificate). For example, the service provider operates the service terminal 20 to take a picture of the user in front of them and obtain a facial image.

[0055] The service provider terminal 20 acquires a two-dimensional barcode (a two-dimensional barcode containing a signed certificate and biometric information) and the biometric information of the user who wishes to receive the service.

[0056] The service provider terminal 20 performs a matching process (authentication process) using biometric information obtained from the 2D barcode and the biometric information of the user in front of it. If the authentication process (one-to-one authentication) is successful, the service provider terminal 20 treats the presented certificate as a valid certificate issued to the user in front of it.

[0057] The service provider terminal 20 notifies the service provider (such as an employee of the service provider) that the presented certificate is legitimate. Alternatively, the service provider terminal 20 may determine the legitimacy and validity of the presented certificate as necessary. For example, the service provider terminal 20 may verify the signature on a student ID card and verify the expiration date of the student ID card. The service provider terminal 20 then notifies the service provider of the verification results.

[0058] When the service provider is presented with the necessary documentation to provide the service to the user, the service provider will provide the service to that user. In the example above, a railway company employee sells a student discount commuter pass to a student.

[0059] In this way, when opening a digital wallet, terminal 30 performs identity verification using biometric information obtained from the account holder's identification document and the account holder's biometric information. If identity verification is successful, terminal 30 makes the digital wallet available for use. Terminal 30 also stores a certificate in the digital wallet whose authenticity is guaranteed by the certificate issuer through an electronic signature, etc. At this time, terminal 30 (digital wallet application) compares the basic information extracted from the identification document with the basic information obtained from the certificate issuer. Terminal 30 verifies the authenticity of the certificate obtained through this comparison. Furthermore, when the user uses the certificate stored in the digital wallet, terminal 30 provides the certificate and the biometric information of the digital wallet holder to the service provider (verifier). The service provider verifies that the user is the digital wallet holder by performing authentication using the biometric information of the digital wallet holder and the biometric information obtained from the user in front of them. If the digital wallet used by the user is a highly trustworthy digital wallet, the service provider can trust the certificate obtained from that digital wallet.

[0060] Next, we will describe the details of each device included in the information processing system according to the first embodiment.

[0061] [Terminal] Figure 7 shows an example of the processing configuration (processing module) of terminal 30 according to the first embodiment. Referring to Figure 7, terminal 30 comprises a communication control unit 201, a digital wallet control unit 202, and a storage unit 203.

[0062] The communication control unit 201 is a means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the server device 10. The communication control unit 201 also transmits data to the server device 10. The communication control unit 201 passes the data received from other devices to other processing modules. The communication control unit 201 transmits the data obtained from other processing modules to other devices. In this way, other processing modules send and receive data with other devices via the communication control unit 201. The communication control unit 201 has the function of a receiving unit that receives data from other devices and the function of a transmitting unit that transmits data to other devices.

[0063] The digital wallet control unit 202 is a means for managing and controlling the digital wallet. As shown in Figure 8, the digital wallet control unit 202 includes a submodule consisting of an identity verification unit 211, a certificate acquisition control unit 212, and a usage control unit 213.

[0064] Detailed instructions regarding the installation of the digital wallet application will be omitted, as its installation is self-evident to those skilled in the art.

[0065] The identity verification unit 211 is a means of verifying the identity of the digital wallet creator. The identity verification unit 211 verifies the identity of the creator of the digital wallet using biometric information obtained from the identification document and the biometric information of the creator of the digital wallet. More specifically, the identity verification unit 211 confirms that the creator of the digital wallet and the name on the identification document issued by a public institution are the same person.

[0066] Figure 9 is a flowchart showing an example of the operation of the identity verification unit 211 according to the first embodiment. The operation of the identity verification unit 211 according to the first embodiment will be explained with reference to Figure 9.

[0067] The identity verification unit 211 obtains information about the holder of the identification document from the identification document held by the user when the digital wallet is opened (initial startup). For example, the identity verification unit 211 obtains the basic information and biometric information of the holder of the identification document from the IC (Integrated Circuit) chip embedded in the My Number Card or passport (step S101).

[0068] For example, when a My Number Card is used as identification, the identity verification unit 211 obtains the PIN for the user authentication electronic certificate using a GUI (Graphical User Interface) or the like (see Figure 10). Alternatively, when a passport is used as identification, the identity verification unit 211 obtains the information written in the MRZ (Machine Readable Zone) on the passport using OCR (Optical Character Recognition) technology.

[0069] The identity verification unit 211 reads information from the IC chip using the acquired PIN (a 4-digit number) and the information written on the MRZ as a password. The identity verification unit 211 stores the basic information (name, gender, date of birth, address) and biometric information (face information, face image) of the holder of the identification document (My Number Card, passport, etc.) read from the identification document in the storage unit 203 (step S102).

[0070] Furthermore, the identity verification unit 211 acquires the biometric information of the user (the user of terminal 30; the owner of the digital wallet) (step S103). For example, the identity verification unit 211 prompts the user to take a picture of their face using a GUI or the like (acquiring a facial image through a selfie).

[0071] The identity verification unit 211 obtains biometric information from an identification document and, upon obtaining biometric information of the user operating the device, performs a matching process using the biometric information obtained from the identification document and the user's biometric information (step S104). The identity verification unit 211 determines whether the two sets of biometric information are substantially identical.

[0072] Specifically, the identity verification unit 211 generates feature quantities from each of the two biometric information pieces (for example, a facial image).

[0073] Regarding the feature generation process, existing technologies can be used, so a detailed explanation will be omitted. For example, the identity verification unit 211 extracts the eyes, nose, mouth, etc., from the face image as feature points. Then, the identity verification unit 211 calculates the position of each feature point and the distance between each feature point as feature quantities (generating a feature vector consisting of multiple feature quantities).

[0074] Next, the identity verification unit 211 performs a matching process (authentication process) using the two generated feature quantities. Specifically, the identity verification unit 211 calculates the similarity between corresponding face images using the two feature quantities. Based on the result of thresholding the calculated similarity, the identity verification unit 211 determines whether the two images are face images of the same person. The similarity can be calculated using methods such as the chi-squared distance or the Euclidean distance. The greater the distance, the lower the similarity, and the closer the distance, the higher the similarity.

[0075] If the similarity is greater than a predetermined value (if the distance is shorter than a predetermined value), the identity verification unit 211 determines that the matching process was successful. If the similarity is less than or equal to the predetermined value, the identity verification unit 211 determines that the matching process failed.

[0076] If the matching process is successful (step S105, Yes branch), the identity verification unit 211 grants the user permission to use the digital wallet (permission to use; step S106). In other words, if the identity verification unit 211 succeeds in the authentication process (one-to-one authentication), it opens a digital wallet.

[0077] The identity verification unit 211, upon successful matching (authentication) using biometric information, treats the person who issued the identification document and the user of terminal 30 as the same person. When the digital wallet is first launched, it is determined whether the person who issued the identification document and the user of terminal 30 are the same person. If the person who issued the identification document and the person who opened the digital wallet are the same person, terminal 30 makes the digital wallet application available.

[0078] If the matching process fails (step S105, No branch), the identity verification unit 211 does not allow the user to use the digital wallet (rejection of use; step S107). In other words, if the authentication process (one-to-one authentication) fails, the user cannot use the digital wallet (cannot open a digital wallet).

[0079] Thus, the identity verification unit 211 determines that identity verification has been successful if it succeeds in the first authentication process using the biometric information obtained from the identification document and the biometric information of the person opening the digital wallet. If identity verification is successful, the digital wallet is opened.

[0080] Please note that, in principle, the basic information extracted from identification documents will not be changed. In order to change this basic information, it is necessary to compare the changed basic information with the basic information obtained from identification documents such as My Number Cards.

[0081] The certificate acquisition control unit 212 is a means for performing control related to the acquisition of certificates.

[0082] The certificate acquisition control unit 212 receives a certificate from a certificate issuer by requesting the issuance of a certificate from the certificate issuer. The certificate acquisition control unit 212 performs a verification process using the basic information about the holder of the identification document obtained from the identification document and the basic information about the holder of the certificate obtained from the received certificate. If the two pieces of basic information match, the certificate acquisition control unit 212 stores the certificate received from the certificate issuer in the digital wallet.

[0083] Figure 11 is a flowchart showing an example of the operation of the certificate acquisition control unit 212 according to the first embodiment. The operation of the certificate acquisition control unit 212 according to the first embodiment will be explained with reference to Figure 11.

[0084] When a user who has opened a digital wallet launches the digital wallet application and performs a predetermined action (for example, pressing the certificate issuance button), the certificate acquisition control unit 212 performs control related to the acquisition of the certificate desired by the user.

[0085] First, the certificate acquisition control unit 212 uses a GUI or the like to acquire the information necessary for requesting a certificate (acquisition of necessary information; step S201). Specifically, the certificate acquisition control unit 212 acquires information about the certificate issuer corresponding to the certificate the user wishes to obtain, the type of certificate desired, etc. Alternatively, the certificate acquisition control unit 212 acquires information that the certificate issuer can use to identify the user (for example, the student ID number when requesting a student ID card).

[0086] The certificate acquisition control unit 212 notifies the certificate issuer of the necessary information it has acquired. For example, the certificate acquisition control unit 212 notifies the certificate issuer of the type of certificate the user wishes to obtain and information to identify the user (e.g., name and student ID number). Specifically, the certificate acquisition control unit 212 sends a "certificate issuance request" including the type of certificate and information to identify the user to the server device 10 of the designated certificate issuer (step S202).

[0087] The certificate acquisition control unit 212 receives a response (affirmative response, negative response) to the certificate issuance request from the server device 10 (step S203).

[0088] If a negative response (certificate not issued) is received (step S204, No branch), the certificate acquisition control unit 212 notifies the user that the certificate was not issued (notification of non-issuance; step S205).

[0089] If an acknowledgment (certificate issued) is received (step S204, Yes branch), the certificate acquisition control unit 212 verifies the signature of the certificate included in the acknowledgment (step S206). The certificate acquisition control unit 212 verifies the signature using the digital signature attached to the certificate and the public key obtained from the digital certificate corresponding to the digital signature.

[0090] If signature verification fails (step S207, No branch), the certificate acquisition control unit 212 discards the certificate received from the certificate issuer. The certificate acquisition control unit 212 also notifies the user that the certificate obtained from the certificate issuer is invalid (notification of invalidity; step S208).

[0091] If the signature verification is successful (step S207, Yes branch), the certificate acquisition control unit 212 obtains the basic information (name, gender, date of birth, address) of the certificate holder (issued party) from the received certificate (basic information acquisition; step S209).

[0092] The certificate acquisition control unit 212 compares the basic information of the holder of the acquired certificate with the basic information obtained from the identification document when the digital wallet was initially launched (step S210). That is, the certificate acquisition control unit 212 compares the basic information of the certificate holder with the basic information of the digital wallet holder (digital wallet creator).

[0093] The certificate acquisition control unit 212 determines that the basic information verification was successful if the two pieces of basic information match (i.e., if each of the basic information components—name, gender, date of birth, and address—matches). The certificate acquisition control unit 212 determines that the basic information verification failed if the two pieces of basic information do not match.

[0094] If the verification of basic information fails (step S211, No branch), the certificate acquisition control unit 212 discards the certificate received from the certificate issuer. The certificate acquisition control unit 212 also notifies the user that the certificate obtained from the certificate issuer is invalid (step S208).

[0095] If the verification of basic information is successful (step S211, Yes branch), the certificate acquisition control unit 212 stores the certificate received from the certificate issuer in the digital wallet (step S212).

[0096] Thus, if the certificate acquisition control unit 212 successfully verifies the signature attached to the certificate and also successfully matches it using two pieces of basic information (the two pieces of basic information match), it determines that the certificate received from the certificate issuer is a valid certificate. The certificate acquisition control unit 212 stores the valid certificate (for example, a student ID card) obtained from the certificate issuer in the storage unit 203.

[0097] The usage control unit 213 is a means for controlling the use of digital content (e.g., digital certificates) stored in the digital wallet.

[0098] The user control unit 213 uses a GUI or similar to obtain the certificate that the user wishes to use. For example, the user control unit 213 displays a list of digital content as shown in Figure 4, allowing the user to select the certificate they wish to use.

[0099] When a user selects an identification document (for example, a student ID), the user control unit 213 generates a two-dimensional barcode using the identification document selected by the user and the biometric information stored in the storage unit 203 (biometric information obtained from the identification document or biometric information obtained from the user). The user control unit 213 then displays the generated two-dimensional barcode.

[0100] Thus, when a user receives a service from a service provider, the user control unit 213 provides the service provider with the certificate stored in the digital wallet and the biometric information of the digital wallet holder.

[0101] The memory unit 203 is a means for storing information necessary for the operation of the terminal 30. If the identity verification unit 211 successfully verifies the identity of the digital wallet holder, the memory unit 203 stores biometric information obtained from the identification document or the biometric information of the digital wallet holder as the biometric information of the digital wallet holder. The biometric information stored as the biometric information of the digital wallet holder may be biometric information obtained from the identification document or biometric information obtained by taking a photograph of the user.

[0102] [Server equipment] Figure 12 shows an example of the processing configuration (processing module) of the server device 10 according to the first embodiment. Referring to Figure 12, the server device 10 comprises a communication control unit 301, a certificate issuance unit 302, and a storage unit 303.

[0103] The communication control unit 301 is a means for controlling communication with other devices. For example, the communication control unit 301 receives data (packets) from terminal 30. The communication control unit 301 also transmits data to terminal 30. The communication control unit 301 passes data received from other devices to other processing modules. The communication control unit 301 transmits data acquired from other processing modules to other devices. In this way, other processing modules send and receive data with other devices via the communication control unit 301. The communication control unit 301 has the function of a receiving unit that receives data from other devices and the function of a transmitting unit that transmits data to other devices.

[0104] The certificate issuing unit 302 is a means of issuing certificates to users. The certificate issuing unit 302 processes the "certificate issuance request" received from the terminal 30.

[0105] Upon receiving a certificate issuance request, the certificate issuance unit 302 searches a database (not shown in Figure 12, etc.) that stores user information, using the information used to identify the user included in the certificate issuance request (for example, name or student ID number) as a key.

[0106] If the above search fails (i.e., the corresponding user is not registered in the database), the certificate issuing unit 302 sends a negative response to the terminal 30 indicating that the certificate issuance failed.

[0107] If the above search is successful, the certificate issuing unit 302 determines whether or not it is possible to issue a certificate to the user based on the information stored in the database and the type of certificate that the user wishes to issue as included in the certificate issuance request. In other words, the certificate issuing unit 302 determines whether or not the user who wishes to issue a certificate has the authority (qualification) to issue a certificate.

[0108] For example, the certificate issuing unit 302 determines that a student has the right to receive a certificate if the student requests one and the user requesting the certificate has not withdrawn from the school. Conversely, the certificate issuing unit 302 determines that a student does not have the right to receive a certificate if the student (former student) recorded in the database has withdrawn from the school.

[0109] Further detailed explanations regarding the issuance of individual certificates (e.g., student IDs, language proficiency certificates, etc.) are omitted here, as providing detailed explanations regarding the issuance of individual certificates would be outside the scope of this disclosure.

[0110] If the user does not have the authority to receive a certificate, the certificate issuing unit 302 sends a negative response to the terminal 30 indicating that the certificate issuance failed (certificate cannot be issued).

[0111] If the user has the authority to receive a certificate, the certificate issuing unit 302 generates a certificate to issue to the user (a digital certificate; for example, a digital student ID). The certificate issuing unit 302 generates a certificate bearing the electronic signature of its organization (for example, a university) and the corresponding electronic certificate.

[0112] The certificate issuing unit 302 generates a certificate that includes the basic information of the user (issuer) receiving the certificate. For example, the certificate issuing unit 302 generates a student ID card that includes the student's name, gender, date of birth, and address.

[0113] The certificate issuing unit 302 sends the generated certificate (a certificate including an electronic document, electronic signature, and electronic certificate) to the terminal 30. The certificate issuing unit 302 sends an acknowledgment (an acknowledgment including a signed certificate) to the terminal 30 indicating that it has successfully issued the requested certificate.

[0114] The memory unit 303 is a means for storing information necessary for the operation of the server device 10.

[0115] [Carrier terminal] Figure 13 shows an example of the processing configuration (processing module) of the carrier terminal 20 according to the first embodiment. Referring to Figure 13, the carrier terminal 20 comprises a communication control unit 401, a service provision control unit 402, and a storage unit 403.

[0116] The communication control unit 401 is a means for controlling communication with other devices. For example, the communication control unit 401 receives data (packets) from a service provider's server (not shown in Figure 3, etc.). The communication control unit 401 also transmits data to the server. The communication control unit 401 passes the data received from other devices to other processing modules. The communication control unit 401 transmits the data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data with other devices via the communication control unit 401. The communication control unit 401 has the function of a receiving unit that receives data from other devices and the function of a transmitting unit that transmits data to other devices.

[0117] The service provision control unit 402 is a means for performing control related to the services provided to the user.

[0118] The service provision control unit 402 controls a 2D barcode reader or the like in response to an operation by an employee of the service provider, and reads the 2D barcode presented by the user (the user receiving the service). The service provision control unit 402 decodes the 2D barcode and obtains a signed certificate and biometric information (biometric information of the digital wallet holder).

[0119] Furthermore, the service provision control unit 402 acquires biometric information (e.g., facial image) of the user in front of it (the user receiving the service) in response to an operation by an employee of the service provider.

[0120] The service provision control unit 402 uses the two acquired biometric information to determine whether the certificate presented to the service provider is a valid certificate.

[0121] Specifically, the service provision control unit 402 performs a matching process (authentication process) between biometric information obtained from a 2D barcode (e.g., a facial image) and biometric information of the user in front of it (e.g., a facial image obtained by photographing the user in front of it).

[0122] The service provision control unit 402 determines that if the two biometric pieces of information are substantially identical (i.e., the matching process is successful), the certificate presented to the service provider is a valid certificate issued to the user in front of it.

[0123] The service provision control unit 402 determines that if the two biometric pieces of information are not substantially identical (i.e., the matching process fails), the certificate presented to the service provider is not a valid certificate issued to the user in front of it.

[0124] If the certificate is invalid, the service provision control unit 402 will notify the service provider's employees or other relevant personnel. For example, the service provision control unit 402 may display a message to that effect on the LCD monitor or output it through the speaker.

[0125] If the certificate is valid, the service provision control unit 402 notifies the service provider (service provider's staff, etc.) that the presented certificate is valid. Alternatively, the service provision control unit 402 may determine the validity, validity, etc., of the presented certificate as necessary. For example, the service provision control unit 402 may verify the signature on the student ID card and verify the expiration date of the student ID card.

[0126] Please note that detailed explanations regarding the necessary certificates and certificate verification for individual service provision will be omitted. This is because detailed explanations regarding certificate verification, etc., would be contrary to the purpose of this disclosure.

[0127] The memory unit 403 is a means for storing information necessary for the operation of the operator terminal 20.

[0128] [System operation] Next, the operation of the information processing system according to the first embodiment will be described.

[0129] Figure 14 is a sequence diagram showing an example of the operation of the information processing system according to the first embodiment. The operation of the information processing system according to the first embodiment will be explained with reference to Figure 14. Note that the explanation of the operation of the information processing system for identity verification and certificate issuance when opening a digital wallet will be omitted.

[0130] Terminal 30 displays a 2D barcode converted from the certificate and biometric information selected by the user, in accordance with the user's instructions (step S01).

[0131] The service provider terminal 20 reads a 2D barcode in response to an operation by an employee of the service provider (step S02).

[0132] Furthermore, the service provider terminal 20 acquires biometric information from the user in front of it in response to an operation by an employee of the service provider (step S03). For example, the service provider terminal 20 takes a picture of the user in front of it and acquires a facial image.

[0133] The operator terminal 20 performs a matching process using the biometric information obtained from the 2D barcode and the biometric information of the user in front of it (step S04).

[0134] If the verification process is successful, the service provider terminal 20 notifies the service provider's employees, etc., that the certificate presented by the user is valid (step S05). The service provider's employees, etc., who receive this notification, provide the service to the user.

[0135] Next, a modified example of the first embodiment will be described.

[0136] <Example 1> In the above embodiment, a two-dimensional barcode was generated using a certificate and biometric information stored in the digital wallet, and the two-dimensional barcode was provided to the service provider for identity verification. Here, a certificate may also be issued for biometric information by a certificate issuer. Specifically, the user requests a certificate issuer to issue a biometric information certificate and stores the issued certificate in the digital wallet. When receiving a service, the user provides the biometric information certificate to the service provider. The service provider may use the provided certificate for identity verification. For example, a certificate for the face, i.e., a face VC, may be issued by a certificate issuer as a Verifiable Credential (VC). Specifically, the user provides face information to the issuer and requests the issuance of a face VC. The issuer compares the presented face with the face information it holds, and if they match, issues a face VC. The user provides the issued face VC to the service provider, and the service provider uses the face VC to perform identity verification.

[0137] <Issuance of Certificates> The user obtains digital content to be stored in the digital wallet. For example, the user operates terminal 30 to request a certificate issuer to issue a certificate. For example, a student requests (demands) their university to issue a student ID and a facial virtual identity (VC). Specifically, the digital wallet application requests the university to issue the student ID and facial virtual identity. An external service provider commissioned by the university may issue the facial virtual identity.

[0138] Terminal 30 sends a "certificate issuance request" to the certificate issuer's server device 10, which includes information that identifies the user (e.g., name, combination of name and date of birth, student ID number, etc.) and biometric information.

[0139] The certificate issuer determines whether the user requesting the certificate has the authority (qualification) to receive it. For example, server device 10 determines whether the student who wishes to obtain a student ID and facial virtual reality (VC) is enrolled at the university, and whether the biometric information provided by the student matches the biometric information held by the university.

[0140] If a student belongs to their university and their biometric information matches, the server device 10 issues a student ID (digital student ID) and a facial recognition certificate (VC). The server device 10 issues a signed certificate from its own organization (certificate issuer; for example, the university). The server device 10 transmits the issued signed certificate to the terminal 30.

[0141] Terminal 30 (digital wallet application) verifies the signature of the received certificate.

[0142] If the signature verification is successful, terminal 30 obtains basic information (name, gender, date of birth, address) and biometric information from the received certificate. In other words, terminal 30 obtains basic information and biometric information about the issuer of the obtained certificate. Terminal 30 compares the basic information and biometric information obtained from the identity document (Root of Trust) when the digital wallet application is first launched with the basic information and biometric information obtained from the certificate generated by the certificate issuer.

[0143] In the example above, terminal 30 compares the basic information obtained from the My Number Card with the basic information obtained from the student ID card. Similarly, terminal 30 compares the biometric information obtained from the My Number Card with the biometric information obtained from the facial video control system (VC). Terminal 30 determines that the comparison was successful if the basic information and biometric information obtained from the two different media match.

[0144] Terminal 30 accepts the certificate received from the certificate issuer if it successfully verifies the signature attached to the certificate and also successfully verifies the two pieces of basic information and biometric information (the two pieces of basic information and biometric information match). Terminal 30 stores the certificate obtained from the certificate issuer (e.g., student ID and facial VC) internally and manages it so that it can be used in the digital wallet. The above describes the case where a facial VC is applied for and issued at the same time as other certificates. A facial VC may be issued at a different time from other certificates. The user provides the certificate issuer with a previously obtained facial certificate in their digital wallet and requests the issuance of a facial VC. The certificate issuer compares the facial information on the certificate presented by the user with the facial information they possess, and issues a facial VC if they match.

[0145] <Using Certificates> Users will present the service provider with any documents requested by that service provider. For example, a student purchasing a commuter pass will present their student ID and facial recognition card to the railway company.

[0146] For example, the user operates terminal 30 to launch a digital wallet application. The user selects a certificate specified by the service provider (e.g., student ID and facial recognition certificate) on the digital wallet application.

[0147] Terminal 30 displays the certificate selected by the user (e.g., student ID and facial recognition).

[0148] The user presents the terminal 30 displaying their student ID and facial recognition to the service provider (for example, an employee of a railway company).

[0149] The service provider (an employee of the service provider, etc.) operates the service terminal 20 to read the presented student ID and facial VC. The service provider also operates the service terminal 20 to obtain biometric information of the user in front of them (the user presenting the identification). For example, the service provider operates the service terminal 20 to take a picture of the user in front of them and obtain a facial image.

[0150] The service provider terminal 20 acquires facial video conferencing (VC) and biometric information of users who wish to receive the service.

[0151] The service provider terminal 20 performs a matching process (authentication process) using the biometric information obtained from the facial VC and the biometric information of the user in front of it. If the authentication process (one-to-one authentication) is successful, the service provider terminal 20 treats the presented certificate as a valid certificate issued to the user in front of it.

[0152] The service provider terminal 20 notifies the service provider (such as an employee of the service provider) that the presented certificate is legitimate. Alternatively, the service provider terminal 20 may determine the legitimacy and validity of the presented certificate as necessary. For example, the service provider terminal 20 may verify the signature on a student ID card and verify the expiration date of the student ID card. The service provider terminal 20 then notifies the service provider of the verification results.

[0153] When the service provider is presented with the necessary documentation to provide the service to the user, the service provider will provide the service to that user. In the example above, a railway company employee sells a student discount commuter pass to a student.

[0154] <Modification 2> The biometric information verification process required when a service provider provides services to a user may be performed on the user's terminal 30. In this case, the user control unit 213 of terminal 30 performs a second authentication process using the biometric information of the digital wallet holder and the user's biometric information, and if the second authentication process is successful, it uses the certificate stored in the digital wallet.

[0155] For example, attendance confirmation for university classes may be performed using terminal 30. In this case, when a student receives a service from the university (when attending a university class), the user control unit 213 of terminal 30 performs an authentication process using the biometric information of the digital wallet holder and the student's biometric information. If the authentication process is successful, the user control unit 213 uses the student ID stored in the digital wallet to determine whether or not the student has the authority to attend the class.

[0156] Beacon-emitting devices are installed in university classrooms. These beacon-emitting devices transmit beacons containing management numbers corresponding to the classes being held in the classroom.

[0157] When terminal 30 receives a beacon emitted by the beacon transmitter, it activates the usage control unit 213. The usage control unit 213 takes a picture of the user (owner of the device). The usage control unit 213 performs a matching process using the biometric information stored in the digital wallet (biometric information of the digital wallet holder) and the biometric information obtained by taking a picture of the owner.

[0158] If the verification process is successful, the user control unit 213 determines that the user operating the device is the holder of the digital wallet. If the user is the holder of the digital wallet (i.e., the user's authenticity is confirmed), the user control unit 213 determines whether the user is eligible to attend classes in the classroom based on the student ID stored in the digital wallet.

[0159] The user control unit 213 identifies the class (class name) being held in the classroom from the management number transmitted by the beacon transmitter and determines whether the student is eligible to attend the class based on the department information etc. listed on the student ID card. If the user control unit 213 determines that the student is eligible to attend the class, it notifies the university-managed server (for example, server device 10) of the student's attendance. In other words, if the user control unit 213 determines that the student is eligible to attend the class, it notifies the university of the student's status as "attending class".

[0160] If the verification process fails, the user control unit 213 determines that the student attempting to attend the class is not the owner of terminal 30 (the digital wallet holder) and instructs the user to leave. Furthermore, if the user control unit 213 determines that the user is not qualified to participate in the class, it instructs the user to leave.

[0161] The user control unit 213 may perform the authentication process and verify the user's authority to attend classes based on the detection of a predetermined action by the user (for example, pressing the attendance button), without receiving a beacon. Alternatively, the terminal 30 may estimate the user's current location using GPS (Global Positioning System). The terminal 30 may activate the user control unit 213 when it determines that the user has entered the classroom. The user control unit 213 then determines whether the user is qualified to attend classes in the classroom based on the student ID stored in the digital wallet.

[0162] Alternatively, attendance confirmation may be performed using a vendor terminal 20 provided by the university. A tablet-type vendor terminal 20 or a kiosk-type vendor terminal 20 may be installed at the entrance of the classroom, and this vendor terminal 20 may perform certificate acquisition and biometric information verification processing. That is, terminal 30 transmits facial images and information related to student IDs to the vendor terminal 20 installed at the entrance of the classroom. The vendor terminal 20 may perform verification processing using the facial image taken by the user in front of it and the facial image acquired from terminal 30.

[0163] Thus, when the user control unit 213 receives a beacon from a beacon transmitter installed in a classroom of an educational institution, it performs a second authentication process. If the second authentication process is successful, the user control unit 213 determines whether the user is qualified to attend classes in the classroom based on the student ID stored in the digital wallet.

[0164] <Variation 3> Multiple digital contents may be sent and received between terminal 30 and the service provider terminal 20. For example, when a user enters a facility such as a museum, a student ID card indicating that the user is a student and a coupon for a predetermined discount may be provided to the service provider terminal 20. In this case, terminal 30 only needs to display a two-dimensional barcode obtained by converting the digital contents (student ID card, coupon) specified by the user with biometric information. The user may also specify the digital contents to present to the service provider based on information provided by the service provider. Alternatively, when the user receives a predetermined service, terminal 30 may automatically specify the digital contents.

[0165] If the service provider terminal 20 successfully matches the facial image obtained by photographing the user in front of it with the facial image obtained from terminal 30, it determines that the acquired student ID is valid. In this case, the user can receive the student discount. Also, if the coupon obtained from terminal 30 is valid, the service provider terminal 20 applies the discount according to the coupon (and notifies the service provider's employees, etc., that the coupon is valid).

[0166] Thus, tablets and kiosk terminals installed at facility entrances, etc., may verify the validity of student IDs, etc., using biometric authentication. The operator terminal 20 prevents non-students from using student discounts.

[0167] <Modification 4> In the above embodiment, a two-dimensional barcode was used to transmit and receive certificates and biometric information between terminal 30 and carrier terminal 20. Certificates and biometric information may also be transmitted and received between terminal 30 and carrier terminal 20 using short-range wireless communication means such as Bluetooth® or NFC (Near Field Communication). Alternatively, certificates and biometric information may be transmitted and received between terminal 30 and carrier terminal 20 using mobile communication means such as 4G (4th Generation) or 5G (5th Generation) or wireless LAN (Local Area Network) such as Wi-Fi (Wireless Fidelity).

[0168] In this case, the user control unit 213 of terminal 30 transmits the certificate selected by the user (signed certificate) and the biometric information of the digital wallet holder to the service provider terminal 20 using short-range wireless communication.

[0169] When the service provider terminal 20 receives the certificate and biometric information, the service provision control unit 402 acquires the biometric information of the user in front of it. Subsequently, the service provision control unit 402 performs biometric authentication using the two biometric pieces of information, as described in the first embodiment.

[0170] <Modification 5> The above embodiment describes a case where a certificate (digital content) issued by a certificate issuer is stored in the digital wallet of terminal 30. The certificate (digital content) may also be issued and verified as an NFT (Non-Fungible Token) or VC (Verifiable Credential) using blockchain technology. Specifically, the certificate issuer registers transaction information obtained through the issuance of the NFT or VC on the blockchain, and the service provider verifies the authenticity of the certificate using the transaction information recorded on the blockchain.

[0171] The user's terminal 30 requests the certificate issuer (server device 10) to issue a certificate (certificate issuance request; step S11 in Figure 15).

[0172] When the server device 10 (certificate issuing unit 302) receives a certificate issuance request from the terminal 30, it generates a signed certificate. The certificate issuer server device 10 issues an NFT or VC for the generated signed certificate (certificate issuance; step S12).

[0173] Furthermore, the certificate issuer's server device 10 registers the transaction information obtained through the issuance of NFTs and VCs on the blockchain (step S13). The transaction information includes the issuer ID, public key, etc.

[0174] Terminal 30 (certificate acquisition control unit 212) stores the received certificate in a digital wallet. For example, if a student's terminal 30 requests the issuance of a student ID card from the university, it stores the student ID card's VC or NFT in the digital wallet. Transaction information related to the student ID card (issuing university ID, public key, etc.) is stored on the blockchain.

[0175] When the terminal 30 (user control unit 213) selects a certificate to be used by the user, it provides the selected certificate and the biometric information of the digital wallet holder to the service provider. The terminal 30 provides the certificate and biometric information to the service provider's business terminal 20 using a 2D barcode or short-range wireless communication means (certificate presentation; step S14).

[0176] The service provider's terminal 20 (service provision control unit 402) verifies the authenticity of the received certificate using transaction information recorded on the blockchain (certificate verification; step S15). The terminal 20 verifies that the certificate has not been tampered with and that it was issued by a trustworthy issuer, etc., using the transaction information obtained from the blockchain. The terminal 20 also acquires biometric information by taking a picture of the user in front of it.

[0177] The service provider terminal 20 performs authentication using biometric information obtained from terminal 30 and biometric information obtained from the user in front of it. If the certificate's reliability is verified and the user's identity is authenticated, the service provider terminal 20 provides the service to the user (service provision; step S16).

[0178] As described above, the terminal 30 according to the first embodiment uses a reliable identification document issued by a public institution, such as a My Number Card, as the Root of Trust when opening a digital wallet. The terminal 30 performs identity verification using biometric information obtained from the identification document (Root of Trust) and the biometric information of the digital wallet owner. Through this identity verification (authentication process using two pieces of biometric information), the terminal 30 ensures that the digital wallet owner and the digital wallet holder are the same person. With this configuration, for example, it is not possible for someone to open a digital wallet by falsely claiming to be the holder (it is not possible to open a digital wallet using someone else's identification document). Furthermore, the service provider verifies that the user using the digital wallet and the digital wallet holder are the same person using biometric authentication. If the digital wallet user and the digital wallet holder do not match, the service provider will not trust the certificate provided by the digital wallet. In other words, it is ensured that the service user and the digital wallet holder are the same person (the authenticity of the match between the service user and the digital wallet holder is ensured). In this way, by having the service provider also perform the authentication process, fraud is prevented in which, after the digital wallet is activated, the user hands over device 30 to another person and that person uses the digital wallet's certificate. Furthermore, after biometric authentication by the service provider, the certificate stored in the digital wallet is used for student discount applications, attendance management, etc.

[0179] Furthermore, when terminal 30 obtains a certificate from the certificate issuer, it performs a verification using the basic information obtained from the identification document and the basic information obtained from the certificate. Through this verification, terminal 30 verifies (confirms) that the issued certificate is not a certificate issued to someone other than the digital wallet holder. Certificates that successfully pass this verification are stored in the digital wallet, thus guaranteeing the authenticity of the digital wallet and the authenticity of the digital content (certificates) provided from the digital wallet.

[0180] Next, we will describe the hardware of each device that makes up the information processing system. Figure 16 shows an example of the hardware configuration of terminal 30.

[0181] Terminal 30 can be configured with an information processing device (a so-called computer), and has the configuration illustrated in Figure 16. For example, terminal 30 includes a processor 311, memory 312, input / output interface 313, and communication interface 314, etc. The components of the processor 311, etc. are connected by an internal bus or the like and are configured to communicate with each other.

[0182] However, the configuration shown in Figure 16 is not intended to limit the hardware configuration of terminal 30. Terminal 30 may include hardware not shown, and may not have an input / output interface 313 if necessary. Also, the number of processors 311 etc. included in terminal 30 is not intended to be limited to the example in Figure 16; for example, terminal 30 may include multiple processors 311.

[0183] The processor 311 is a programmable device such as a CPU (Central Processing Unit), MPU (Micro Processing Unit), or DSP (Digital Signal Processor). Alternatively, the processor 311 may be a device such as an FPGA (Field Programmable Gate Array) or ASIC (Application Specific Integrated Circuit). The processor 311 executes various programs, including an operating system (OS).

[0184] Memory 312 includes RAM (Random Access Memory), ROM (Read Only Memory), HDD (Hard Disk Drive), SSD (Solid State Drive), etc. Memory 312 stores the OS program, application programs, and various data.

[0185] The input / output interface 313 is an interface for a display device or input device (not shown). The display device is, for example, a liquid crystal display. The input device is, for example, a device that accepts user input such as a keyboard or mouse.

[0186] The communication interface 314 is a circuit, module, etc., that communicates with other devices. For example, the communication interface 314 includes a NIC (Network Interface Card), etc.

[0187] The functions of terminal 30 are realized by various processing modules. These processing modules are realized, for example, by the processor 311 executing a program stored in memory 312. The program can also be recorded on a computer-readable storage medium. The storage medium can be a non-transitory medium such as semiconductor memory, hard disk, magnetic recording medium, or optical recording medium. In other words, the present invention can also be embodied as a computer program product. Furthermore, the program can be downloaded via a network or updated using the storage medium on which the program is stored. Moreover, the processing module may be realized by a semiconductor chip.

[0188] Furthermore, the server device 10, the business terminal 20, etc., can also be configured using information processing equipment, similar to the terminal 30. Since their basic hardware configuration is no different from that of the terminal 30, a detailed explanation will be omitted.

[0189] The terminal 30, which is an information processing device, is equipped with a computer, and its functions can be realized by having the computer execute a program. Furthermore, the terminal 30 executes a control method for the terminal 30 using this program. Similarly, the server device 10 is equipped with a computer, and its functions can be realized by having the computer execute a program. Furthermore, the server device 10 executes a control method for the server device 10 using this program.

[0190] [Differentiation] The configuration and operation of the information processing system described in the above embodiment are illustrative examples and are not intended to limit the system configuration.

[0191] When comparing basic information obtained from an identification document (e.g., name, gender, date of birth, address) with basic information obtained from a certificate, terminal 30 may consider variations in the notation of each item constituting the basic information. For example, terminal 30 may consider variations in the notation of names and addresses and calculate the degree of agreement between the two sets of basic information as a matching score. For example, terminal 30 may use a learning model obtained by machine learning to obtain the degree of agreement between the two sets of basic information. Terminal 30 may perform threshold processing on the obtained degree of agreement (matching score), and if the matching score is below a predetermined value, it may discard the obtained certificate.

[0192] The above embodiment describes a case where identity verification (confirmation that the name on the identity document matches the name on the digital wallet) is performed using biometric information obtained from an identity document. However, this identity verification may also be performed using an electronic certificate stored in the identity document. Specifically, terminal 30 obtains an electronic certificate (signature electronic certificate, user authentication electronic certificate) from the My Number Card held by the user. Terminal 30 sends the obtained electronic signature certificate to a certification authority (J-LIS; Japan Agency for Local Authority Information Systems) and requests the certification authority to verify the validity of the electronic certificate. If the electronic certificate is valid, terminal 30 determines that identity verification has been successful.

[0193] Terminal 30 may set an expiration date (validity period) for the digital wallet when opening it. Terminal 30 may set the validity period of the digital wallet according to the identification document used for identity verification and the expiration date of said identification document. For example, if a passport valid for 5 years is used for identity verification, terminal 30 will set the validity period of the digital wallet to 5 years. Alternatively, if a passport valid for 10 years or a My Number Card valid for 10 years is used for identity verification, terminal 30 will set the validity period of the digital wallet to 10 years. Alternatively, terminal 30 may make the validity period of the digital wallet different depending on whether a passport or a My Number Card is used for identity verification. Alternatively, terminal 30 may determine the validity period of the digital wallet according to the remaining validity period of the identification document, rather than the validity period when the identification document was issued. For example, if an identification document with a remaining validity period of 3 years is used for identity verification, terminal 30 will set the validity period of the digital wallet to 3 years. Terminal 30 sets the validity period of the digital wallet to 5 years if an identification document with a remaining validity period of 5 years is used for identity verification.

[0194] Alternatively, terminal 30 may set a limit on the number of times the digital wallet can be used. For example, if terminal 30 detects that the digital wallet has been activated more than a predetermined number of times within a predetermined period, it will determine that the user has misused the digital wallet. In this case, terminal 30 will not activate the digital wallet and will prohibit the user from using the digital wallet.

[0195] When terminal 30 presents the biometric information and certificate of the digital wallet holder to the service provider, it may present some of the information to the service provider by means other than a two-dimensional barcode. For example, as shown in Figure 17, terminal 30 may display a facial image (biometric information) and a two-dimensional barcode converted from the certificate on the same screen. Alternatively, terminal 30 may display a facial image and a two-dimensional barcode converted from the facial image and the certificate on the same screen. An employee of the service provider may verify the identity of the user presenting the certificate using the user's face and the facial image displayed on terminal 30.

[0196] In Modification 1 of the First Embodiment, the case of a student attending a class at a university was used as an example to explain the process of verifying biometric information necessary for a service provider to provide services to a user, which is performed on the user's terminal 30. However, this verification process may also be performed on the user's terminal 30 in situations other than attendance confirmation for classes at a university. That is, when the terminal 30 held by the user successfully verifies the facial image obtained by taking a photograph against a pre-registered face, the terminal 30 issues (displays) a 2D barcode containing "facial recognition successful" and "corresponding certificate information." The service provider terminal 20 only needs to read the issued 2D barcode and obtain information such as certificates necessary for identity verification and service provision. In this case, the service provider terminal 20 does not need to perform verification using facial images or take a photograph of the user (obtain a facial image). Therefore, the service provider terminal 20 only needs to be equipped with a barcode reader and does not need a camera. In addition, to prevent use by users who are not the digital wallet holders, the terminal 30 may display a display as shown in Figure 17 (displaying the 2D barcode and facial image on the same screen). In other words, by having employees of the service provider visually verify the identity of the user, fraud is prevented such as the digital wallet holder handing over the device 30 to another person after identity verification is complete, and then presenting the device 30 to the service provider.

[0197] Furthermore, if the user's terminal 30 performs a biometric information verification process necessary for the service provider to provide services to the user, the terminal 30 may restrict the display of the 2D barcode for a predetermined period of time. For example, the terminal 30 may only display the 2D barcode for a predetermined period of time after successful biometric authentication.

[0198] Some functions of terminal 30 may be implemented in other devices or equipment. More specifically, it is sufficient if the "identity verification unit (means for verifying identity)", "certificate acquisition control unit (means for controlling the acquisition of certificates)", etc., described above are implemented in any of the devices included in the system.

[0199] The form of data transmission and reception between each device (for example, server device 10, terminal 30) is not particularly limited, but the data transmitted and received between these devices may be encrypted. Personal information of users is transmitted and received between these devices, and it is desirable that encrypted data be transmitted and received in order to properly protect this information.

[0200] In the flowcharts (sequence diagrams) used in the above description, multiple processes (processes) are shown in order, but the execution order of the processes performed in the embodiment is not limited to the order in which they are shown. In the embodiment, the order of the illustrated processes can be changed to the extent that it does not impair the content, for example, by executing each process in parallel.

[0201] The embodiments described above are explained in detail to facilitate understanding of the disclosure, and it is not intended that all the configurations described above are necessary. Furthermore, when multiple embodiments are described, each embodiment may be used individually or in combination. For example, it is possible to replace parts of the configuration of one embodiment with those of another embodiment, or to add configurations from other embodiments to the configuration of one embodiment. In addition, it is possible to add, delete, or replace parts of the configuration of one embodiment with those of another.

[0202] As described above, the industrial applicability of the present invention is clear, and it is particularly applicable to information processing systems, etc., that include service providers who provide services to users using certificates stored in a digital wallet.

[0203] Some or all of the above embodiments may also be described as follows, but are not limited to the following: [Note 1] A means of verifying the identity of the person opening the digital wallet, using biometric information obtained from an identification document and biometric information of the person opening the digital wallet. If the aforementioned identity verification is successful, a storage means stores the biometric information obtained from the aforementioned identification document or the biometric information of the person opening the aforementioned digital wallet as the biometric information of the digital wallet holder, A terminal equipped with the following features. [Note 2] The aforementioned identity verification means is the terminal described in Appendix 1, which determines that identity verification has been successful when it successfully performs a first authentication process using biometric information obtained from the identification document and biometric information of the person who opens the digital wallet. [Note 3] The terminal as described in Appendix 2, further comprising a certificate acquisition control means, which receives the certificate from the certificate issuer by requesting the issuance of a certificate from the certificate issuer, and stores the received certificate in the digital wallet if the basic information concerning the holder of the identity document obtained from the identity document matches the basic information concerning the holder of the certificate obtained from the received certificate. [Note 4] The terminal described in Appendix 3, further comprising a usage control means for providing the service provider with a certificate stored in the digital wallet and the biometric information of the digital wallet holder when the user receives a service from the service provider. [Note 5] The terminal described in Appendix 3, further comprising a usage control means that, when a user receives a service from a service provider, performs a second authentication process using the biometric information of the digital wallet holder and the biometric information of the user, and if the second authentication process is successful, uses a certificate stored in the digital wallet. [Note 6] The aforementioned usage control means is The terminal described in Appendix 5, which, upon receiving a beacon from a beacon transmitter installed in a classroom of an educational institution, performs the second authentication process, and, upon success in the second authentication process, determines whether the user is qualified to attend classes held in the classroom based on the student ID stored in the digital wallet. [Note 7] The aforementioned identification document is either a My Number Card or a passport, as specified in any one of the items in Appendix 1 to 6. [Note 8] The aforementioned biometric information is a facial image or a feature quantity generated from the facial image, as described in Appendix 7. [Note 9] The device and A service provider's terminal used when providing services to users, Includes, The aforementioned terminal is A means of verifying the identity of the person opening the digital wallet, using biometric information obtained from an identification document and biometric information of the person opening the digital wallet. If the aforementioned identity verification is successful, a storage means stores the biometric information obtained from the aforementioned identification document or the biometric information of the person opening the aforementioned digital wallet as the biometric information of the digital wallet holder, A usage control means provides the content stored in the digital wallet and the biometric information of the digital wallet holder to the business operator's terminal. A system equipped with these features. [Note 10] On the device, The identity of the person opening the digital wallet is verified using biometric information obtained from an identification document and biometric information of the person opening the digital wallet. A terminal control method that, upon successful identity verification, stores the biometric information obtained from the identification document or the biometric information of the person opening the digital wallet as the biometric information of the digital wallet holder. [Note 11] On the computer installed in the terminal, A process for verifying the identity of the person opening the digital wallet, using biometric information obtained from an identification document and biometric information of the person opening the digital wallet, If the aforementioned identity verification is successful, the process involves storing the biometric information obtained from the aforementioned identification document or the biometric information of the person opening the digital wallet as the biometric information of the digital wallet holder. A computer-readable storage medium that stores a program for executing a computer.

[0204] Furthermore, each disclosure of the above-mentioned prior art documents cited herein is incorporated herein by reference. Although embodiments of the present invention have been described above, the present invention is not limited to these embodiments. It will be understood by those skilled in the art that these embodiments are merely illustrative and that various modifications are possible without departing from the scope and spirit of the present invention. That is, the present invention naturally includes the entire disclosure, including the claims, and various modifications and alterations that can be made by those skilled in the art in accordance with the technical idea. [Explanation of Symbols]

[0205] 10 Server devices 20 Carrier terminals 30 devices 100 devices 101. Methods of Identity Verification 102 Memory means 201 Communication Control Unit 202 Digital Wallet Control Unit 203 Storage section 211 Identity Verification Department 212 Certificate Acquisition Control Unit 213 User Control Unit 301 Communication Control Unit 302 Certificate Issuance Department 303 Storage section 311 Processors 312 memory 313 Input / Output Interfaces 314 Communication Interface 401 Communication Control Unit 402 Service Provisioning Control Unit 403 Storage section

Claims

1. A certificate control unit transmits a user's facial image to a server device operated by a designated organization, thereby requesting the server device to issue an electronic certificate relating to the user's face. A storage unit that stores multiple digital contents of the user and an electronic certificate relating to the face issued by the server device, A transmission unit that transmits one or more digital contents included in the plurality of digital contents and the electronic certificate relating to the face to an information processing device, Equipped with, The certificate control unit verifies the signature attached to the electronic certificate relating to the face issued by the server device, The storage unit stores the electronic certificate relating to the face whose signature has been successfully verified. The certificate control unit, The system determines whether the basic information obtained from the identification document bearing the name of the user matches the basic information obtained from the electronic certificate relating to the face issued by the server device, and whether the facial image obtained from the identification document matches the facial image obtained from the electronic certificate relating to the face issued by the server device. The memory unit stores the electronic certificate relating to the face in which the signature verification has been successful when the basic information obtained from the identification document matches the basic information obtained from the electronic certificate relating to the face, and the facial image obtained from the identification document matches the facial image obtained from the electronic certificate relating to the face.

2. The terminal according to claim 1, wherein the digital content includes at least one of the following: a certificate relating to the user, electronic money, ticket information, and coupon information.

3. The terminal according to claim 1 or 2, wherein the transmitting unit determines one or more of the multiple digital contents to be transmitted to the information processing device in accordance with instructions from the information processing device.

4. On the device, By transmitting the user's facial image to a server device operated by a designated organization, the user requests the server device to issue an electronic certificate relating to the user's face. The system stores multiple digital contents of the user and the electronic certificate relating to the face issued by the server device. A terminal control method for transmitting one or more digital contents included in the plurality of digital contents and an electronic certificate relating to the face to an information processing device, The signature attached to the electronic certificate relating to the face issued by the server device is verified, The electronic certificate relating to the face whose signature has been successfully verified is stored, The system determines whether the basic information obtained from the identification document bearing the name of the user matches the basic information obtained from the electronic certificate relating to the face issued by the server device, and whether the facial image obtained from the identification document matches the facial image obtained from the electronic certificate relating to the face issued by the server device. A terminal control method for storing a digital certificate relating to a face in which the signature verification has been successful, provided that the basic information obtained from the identification document matches the basic information obtained from the digital certificate relating to the face, and the facial image obtained from the identification document matches the facial image obtained from the digital certificate relating to the face.

5. On the computer installed in the terminal, A process that involves transmitting the user's facial image to a server device operated by a designated organization, thereby requesting the server device to issue an electronic certificate relating to the user's face, A process for storing multiple digital contents of the user and an electronic certificate relating to the face issued by the server device, A process of transmitting one or more digital contents included in the aforementioned plurality of digital contents and the electronic certificate relating to the face to an information processing device, A program to execute, To the aforementioned computer, A process for verifying the signature attached to the electronic certificate relating to the face issued by the server device, A process for storing the electronic certificate relating to the face for which the signature has been successfully verified, The process involves determining whether the basic information obtained from the identification document in the name of the user matches the basic information obtained from the electronic certificate relating to the face issued by the server device, and determining whether the facial image obtained from the identification document matches the facial image obtained from the electronic certificate relating to the face issued by the server device. The process involves storing the electronic certificate relating to the face in which the signature verification was successful, provided that the basic information obtained from the aforementioned identification document matches the basic information obtained from the aforementioned electronic certificate relating to the face, and the facial image obtained from the aforementioned identification document matches the facial image obtained from the aforementioned electronic certificate relating to the face. A program to perform further actions.

Images