Information processing device, information processing method, and recording medium

Abstract

This information processing device (10) comprises: a password acquisition means (110) that acquires a password set for an object held by a user; a first image acquisition means (120) that acquires a first image, which is a face image of the user and is stored in the held object, by using the password; a second image acquisition means (130) that images the face of the user to acquire a second image, which is a face image of the user; and an authentication means (140) that compares the first image and the second image to execute facial authentication of the user. Such an information processing device makes it possible to suitably manage information by using a password.

Description

Information processing device, information processing method, and recording medium

[0001] The present disclosure relates to the technical fields of an information processing device, an information processing method, and a recording medium.

[0002] When accessing the recorded information, it may be necessary to input, for example, a password, etc. For example, Patent Document 1 discloses the use of a personal identification number, personal identification code, etc. to access a unique information storage device that stores various types of personal information data.

[0003] As other related technologies, for example, Patent Document 2 discloses generating a one-time password using an OTP generation key, and Patent Document 3 discloses performing identity authentication based on a photograph read from an official identification card or the like and an image of the user.

[0004] JP 2005-276109 A JP 2015-228098 A JP 2020-064541 A

[0005] This disclosure aims to improve upon the techniques disclosed in the prior art documents.

[0006] One aspect of the information processing device disclosed herein comprises a password acquisition means for acquiring a password set in a user's possession, a first image acquisition means for using the password to acquire a first image which is a facial image of the user stored in the possession, a second image acquisition means for photographing the user's face to acquire a second image which is a facial image of the user, and an authentication means for comparing the first image with the second image to perform facial authentication of the user.

[0007] One aspect of the information processing method disclosed herein involves using at least one computer to obtain a password set on a user's possessions, using the password to obtain a first image that is a facial image of the user stored on the possessions, photographing the user's face to obtain a second image that is a facial image of the user, and comparing the first image with the second image to perform facial authentication of the user.

[0008] One aspect of the recording medium of this disclosure is a computer program recorded on at least one computer that causes the computer to execute an information processing method, which includes obtaining a password set on a user's possessions, using the password to obtain a first image that is a facial image of the user stored on the possessions, photographing the user's face to obtain a second image that is a facial image of the user, and comparing the first image with the second image to perform facial authentication of the user.

[0009] Another aspect of the information processing device disclosed herein includes a possession information acquisition means for acquiring possession information from a user's possessions, a biometric information acquisition means for acquiring biometric information from the user, and a password generation means for combining the possession information and the biometric information to generate a password to be set on the user's possessions.

[0010] Another aspect of the information processing method disclosed herein is to use at least one computer to obtain possession information from a user's possessions, obtain biometric information from the user, and combine the possession information and the biometric information to generate a password to be set for the user's possessions.

[0011] Another aspect of the recording medium of this disclosure is a computer program recorded on at least one computer that causes the computer to execute an information processing method, which includes acquiring possession information from a user's possessions, acquiring biometric information from the user, and combining the possession information with the biometric information to generate a password to be set for the user's possessions.

[0012] 1 is a block diagram showing a hardware configuration of an information processing device according to a first embodiment. 2 is a block diagram showing a functional configuration of an information processing device according to a first embodiment. 3 is a flowchart showing a flow of an operation of an information processing device according to a second embodiment. 4 is a flowchart showing a flow of an authentication operation by an information processing device according to a second embodiment. 5 is a block diagram showing a functional configuration of an information processing device according to a third embodiment. 6 is a flowchart showing a flow of a password generation operation by an information processing device according to a third embodiment. 7 is a block diagram showing a functional configuration of an information processing device according to a fourth embodiment. 8 is a flowchart showing a flow of a password generation operation by an information processing device according to a fourth embodiment. 9 is a flowchart showing a flow of a password generation operation by an information processing device according to a fifth embodiment. 10 is a flowchart showing a flow of a password generation operation by an information processing device according to a fifth embodiment. 11 is a block diagram showing a functional configuration of an information processing device according to a sixth embodiment. 12 is a flowchart showing a flow of an operation of an information processing device according to a sixth embodiment.

[0013] Hereinafter, embodiments of an information processing device, an information processing method, and a recording medium will be described with reference to the drawings.

[0014] First Embodiment An information processing apparatus according to a first embodiment will be described with reference to FIGS. 1 to 3. FIG.

[0015] (Hardware Configuration) First, the hardware configuration of the information processing apparatus according to the first embodiment will be described with reference to Fig. 1. Fig. 1 is a block diagram showing the hardware configuration of the information processing apparatus according to the first embodiment.

[0016] 1 , an information processing device 10 according to the first embodiment includes a processor 11, a RAM (Random Access Memory) 12, a ROM (Read Only Memory) 13, and a storage device 14. The information processing device 10 may further include an input device 15, an output device 16, and a camera 18. The processor 11, RAM 12, ROM 13, storage device 14, input device 15, output device 16, and camera 18 are connected via a data bus 17.

[0017] The processor 11 loads a computer program. For example, the processor 11 is configured to load a computer program stored in at least one of the RAM 12, the ROM 13, and the storage device 14. Alternatively, the processor 11 may load a computer program stored in a computer-readable storage medium using a storage medium reading device (not shown). The processor 11 may acquire (i.e., load) the computer program from a device (not shown) located outside the information processing device 10 via a network interface. The processor 11 controls the RAM 12, the storage device 14, the input device 15, and the output device 16 by executing the loaded computer program. In particular, in this embodiment, when the processor 11 executes the loaded computer program, a functional block for acquiring a password and performing authentication processing is realized within the processor 11. In other words, the processor 11 may function as a controller that executes each control in the information processing device 10.

[0018] The processor 11 may be configured as, for example, a CPU (Central Processing Unit), a GPU (Graphics Processing Unit), an FPGA (Field-Programmable Gate Array), a DSP (Demand-Side Platform), or an ASIC (Application Specific Integrated Circuit). The processor 11 may be configured as one of these, or may be configured to use multiple processors in parallel.

[0019] The RAM 12 temporarily stores computer programs executed by the processor 11. The RAM 12 temporarily stores data that the processor 11 temporarily uses while it is executing the computer programs. The RAM 12 may be, for example, a dynamic random access memory (D-RAM) or a static random access memory (SRAM). Alternatively, other types of volatile memory may be used instead of the RAM 12.

[0020] The ROM 13 stores computer programs executed by the processor 11. The ROM 13 may also store fixed data. The ROM 13 may be, for example, a PROM (Programmable Read Only Memory) or an EPROM (Erasable Read Only Memory). Alternatively, other types of non-volatile memory may be used instead of the ROM 13.

[0021] The storage device 14 stores data that is to be saved long-term by the information processing device 10. The storage device 14 may operate as a temporary storage device for the processor 11. The storage device 14 may include, for example, at least one of a hard disk device, a magneto-optical disk device, an SSD (Solid State Drive), and a disk array device.

[0022] The input device 15 is a device that receives input instructions from a user of the information processing device 10. The input device 15 may include, for example, at least one of a keyboard, a mouse, and a touch panel. The input device 15 may be configured as a mobile terminal such as a smartphone or a tablet. The input device 15 may also be, for example, a device that includes a microphone and is capable of voice input.

[0023] The output device 16 is a device that outputs information related to the information processing device 10 to the outside. For example, the output device 16 may be a display device (e.g., a display) that can display information related to the information processing device 10. The output device 16 may also be a speaker or the like that can output information related to the information processing device 10 as audio. The output device 16 may be configured as a mobile terminal such as a smartphone or a tablet. The output device 16 may also be a device that outputs information in a format other than an image. For example, the output device 16 may be a speaker that outputs information related to the information processing device 10 as audio.

[0024] The camera 18 is configured to be able to capture a facial image of the user. The camera 18 may be, for example, a installed camera, or may be a camera included in a terminal (e.g., a smartphone, a tablet, etc.) owned by the user. Note that multiple cameras 18 may be provided.

[0025] 1 illustrates an example of an information processing device 10 including multiple devices, but all or some of the functions may be realized by a single device. In this case, the information processing device may be configured to include only the processor 11, RAM 12, and ROM 13 described above, and the other components (i.e., the storage device 14, input device 15, output device 16, and camera 18) may be provided by an external device connected to the information processing device. Furthermore, some of the computing functions of the information processing device may be realized by an external device (e.g., an external server, a cloud, etc.).

[0026] (Functional Configuration) Next, the functional configuration of the information processing device 10 according to the first embodiment will be described with reference to Fig. 2. Fig. 2 is a block diagram showing the functional configuration of the information processing device according to the first embodiment.

[0027] The information processing device 10 according to the first embodiment is configured as a device that uses passwords to manage information about possessions held by a user. The possessions are configured to be able to store various types of information, and examples of the possessions include terminals such as smartphones and tablets, or cards equipped with IC chips.

[0028] 2, the information processing device 10 according to the first embodiment is configured to include, as components for realizing its functions, a password acquisition unit 110, a first image acquisition unit 120, a second image acquisition unit 130, and an authentication unit 140. Each of the password acquisition unit 110, the first image acquisition unit 120, the second image acquisition unit 130, and the authentication unit 140 may be a processing block realized by, for example, the above-mentioned processor 11 (see FIG. 1).

[0029] The password acquisition unit 110 is configured to be able to acquire a password set in a user's possession. The password may be, for example, a password for accessing information stored in the possession. The password acquisition unit 110 may acquire a password entered by the user, for example. Alternatively, the password acquisition unit 110 may read and acquire the password. Alternatively, the password acquisition unit 110 may generate and acquire the password using the input information. Note that the configuration for generating a password will be described in detail in another embodiment described later. The password acquired by the password acquisition unit 110 is configured to be output to the first image acquisition unit 120.

[0030] The first image acquisition unit 120 is configured to acquire a first image, which is a facial image of the user stored in the possession, using the password acquired by the password acquisition unit 110. The first image can be acquired using the password and is protected so that it cannot be acquired (accessed) without knowing the password. Examples of the first image include facial images stored on a driver's license or a My Number card, but the first image according to this embodiment is not limited to these. The first image acquired by the first image acquisition unit 120 is configured to be output to the authentication unit 140.

[0031] The second image acquisition unit 130 is configured to be able to photograph the user holding the item and acquire a second image, which is a facial image of the user. The second image may be automatically captured by, for example, an installed camera 18, or may be captured by the user's operation using a camera 18 held by the user (e.g., a smartphone camera). When the user captures the second image, the second image acquisition unit 130 may display a message or the like prompting the user to capture a photograph of their own face. The second image acquired by the second image acquisition unit 130 is configured to be output to the authentication unit 140.

[0032] The authentication unit 140 performs facial authentication by comparing the first image acquired by the first image acquisition unit 120 (i.e., the image stored in the held item) with the second image acquired by the second image acquisition unit 130 (i.e., the image acquired by photographing the user). Since existing technologies can be appropriately adopted for the specific method of facial authentication, detailed explanations thereof will be omitted here. The authentication unit 140 may have a function to output the result of facial authentication (hereinafter, appropriately referred to as the "authentication result"). In this case, the authentication unit 140 may output the authentication result via a display, a speaker, or the like. Furthermore, the authentication unit 140 may be configured to be able to execute various processes depending on whether the authentication result is successful or not.

[0033] (Flow of Operation) Next, the overall flow of operation by the information processing device 10 according to the first embodiment will be described with reference to Fig. 3. Fig. 3 is a flowchart showing the flow of operation of the information processing device according to the first embodiment.

[0034] 3, when the operation of the information processing device 10 according to the first embodiment starts, the password acquisition unit 110 first acquires a password (step S101). Then, the first image acquisition unit 120 acquires a first image using the password acquired by the password acquisition unit 110 (step S102).

[0035] Next, the second image acquisition unit 130 acquires a second image by photographing the user holding the item (step S103). Note that the process of step S103 may be executed simultaneously in parallel with the processes of steps S101 and S102 described above. Alternatively, the process of step S103 may be executed before the processes of steps S101 and S102 described above.

[0036] Next, the authentication unit 140 performs face authentication by comparing the first image acquired by the first image acquisition unit 120 with the second image acquired by the second image acquisition unit 130 (step S104), and then outputs the authentication result (step S105).

[0037] (Technical Effects) Next, technical effects obtained by the information processing device 10 according to the first embodiment will be described.

[0038] As described with reference to FIGS. 1 to 3 , the information processing device 10 according to the first embodiment performs facial authentication using a first image acquired using a password and a second image acquired by photographing the user. This allows for appropriate management of information stored in a personal item, regardless of the confidentiality of the password. For example, even if a password is fraudulently used, facial authentication will fail if the user whose facial image is stored in the personal item does not match the user whose image was photographed. Therefore, by permitting or prohibiting access to information stored in the personal item depending on the authentication result, information can be appropriately managed.

[0039] Furthermore, since confidentiality is ensured by facial recognition, confidentiality is no longer required for passwords. This means, for example, that there is no need to remember passwords. Specifically, even if a password is known and available to an unspecified number of users, facial recognition protects the information stored in your possessions.

[0040] Second Embodiment An information processing device 10 according to a second embodiment will be described with reference to Figures 4 and 5. Note that the second embodiment differs from the first embodiment described above only in some configurations and operations, and other parts may be the same as the first embodiment. Therefore, the following will describe in detail the parts that differ from the first embodiment already described, and will omit explanations of other overlapping parts as appropriate.

[0041] (Functional Configuration) First, the functional configuration of the information processing device 10 according to the second embodiment will be described with reference to Fig. 4. Fig. 4 is a block diagram showing the functional configuration of the information processing device according to the second embodiment. Note that in Fig. 4, the same elements as those shown in Fig. 2 are denoted by the same reference numerals.

[0042] As shown in Fig. 4, the information processing device 10 according to the second embodiment is configured to include, as components for realizing its functions, a password acquisition unit 110, a first image acquisition unit 120, a second image acquisition unit 130, an authentication unit 140, and an invalidation unit 150. That is, the information processing device 10 according to the second embodiment further includes the invalidation unit 150 in addition to the configuration of the first embodiment (see Fig. 2). The invalidation unit 150 may be a processing block realized by, for example, the above-mentioned processor 11 (see Fig. 1).

[0043] The invalidation unit 150 is configured to be able to invalidate a password set for a possession. Specifically, the invalidation unit 150 is configured to invalidate a password when facial authentication by the authentication unit 140 fails. Note that the invalidation unit 150 may invalidate a password when facial authentication fails multiple times in succession. Furthermore, the invalidation unit 150 may invalidate a password temporarily. For example, the invalidation unit 150 may invalidate a password until a predetermined period has elapsed since facial authentication by the authentication unit 140 failed.

[0044] (Authentication Operation) Next, the flow of the authentication operation (i.e., the operation when performing face authentication using the first image and the second image) by the information processing device 10 according to the second embodiment will be described with reference to Fig. 5. Fig. 5 is a flowchart showing the flow of the authentication operation by the information processing device according to the second embodiment.

[0045] 5, when the authentication operation by the information processing device 10 according to the second embodiment is started, the authentication unit 140 first determines whether the first image and the second image match (step S201). If the first image and the second image match (step S201: YES), the authentication unit 140 outputs a result indicating successful authentication (step S202). In this case, the invalidation unit 150 does not invalidate the password.

[0046] On the other hand, if the first image and the second image match (step S201: YES), the authentication unit 140 outputs a result indicating that the authentication failed (step S203). In this case, the invalidation unit 150 executes a process to invalidate the password (step S204).

[0047] In addition to or instead of the process of invalidating the password, the invalidation unit 150 may execute other processes (i.e., processes for protecting information when facial authentication fails). For example, when facial authentication fails, the invalidation unit 150 may execute processes such as outputting an alert or temporarily locking owned items.

[0048] (Technical Effects) Next, technical effects obtained by the information processing device 10 according to the second embodiment will be described.

[0049] As described with reference to FIGS. 4 and 5 , in the information processing device 10 according to the second embodiment, if face authentication fails, the password is invalidated. In this way, if a user other than the user who owns the property uses the password, the password is invalidated and the information stored in the property cannot be accessed. This makes it possible to prevent unauthorized use of the password. This effect is particularly pronounced when the password is known, for example.

[0050] Third Embodiment An information processing device 10 according to a third embodiment will be described with reference to Figures 6 and 7. Note that the third embodiment differs only in part of the configuration and operation from the first and second embodiments described above, and other parts may be the same as the first and second embodiments. Therefore, the following will describe in detail the parts that differ from the embodiments already described, and will omit a description of other overlapping parts as appropriate.

[0051] (Functional Configuration) First, the functional configuration of the information processing device 10 according to the third embodiment will be described with reference to Fig. 6. Fig. 6 is a block diagram showing the functional configuration of the information processing device according to the third embodiment. Note that in Fig. 6, the same elements as those shown in Fig. 2 are denoted by the same reference numerals.

[0052] 6, the information processing device 10 according to the third embodiment is configured to include, as components for realizing its functions, a password acquisition unit 110, a first image acquisition unit 120, a second image acquisition unit 130, an authentication unit 140, and a first password generation unit 160. That is, the information processing device 10 according to the third embodiment further includes a first password generation unit 160 in addition to the configuration of the first embodiment (see FIG. 2). The first password generation unit 160 may be a processing block realized by, for example, the above-described processor 11 (see FIG. 1).

[0053] The first password generation unit 160 is configured to generate a password based on possession information acquired from a possession. The possession information may be characters written on the possession. For example, the possession information may be characters (such as name, address, and various numbers) readable from the face of a driver's license, My Number card, passport, or various cards. Alternatively, the possession information may be the color, pattern, design, or shape of the possession. Alternatively, the possession information may be information stored in the possession information. For example, the possession information may be information stored in a magnetic stripe or IC chip on a card, or information indicating a unique ID of a device such as a smartphone. Note that a specific algorithm for generating a password from possession information can be appropriately adopted from existing algorithms, and therefore a detailed description thereof will be omitted here.

[0054] (Password Generation Operation) Next, the flow of the password generation operation by the information processing device 10 according to the third embodiment (i.e., the operation when the first password generation unit 160 generates a password) will be described with reference to Fig. 7. Fig. 7 is a flowchart showing the flow of the password generation operation by the information processing device according to the third embodiment.

[0055] 7 , when the information processing device 10 according to the third embodiment starts a password generation operation, the first password generation unit 160 first acquires possession information from the user's possessions (step S301). The first password generation unit 160 then creates a seed from the possession information acquired from the possessions (step S302). That is, the first password generation unit 160 executes a process of converting the possession information, as acquired, into a state from which a password can be generated (for example, a process of converting the possession information into a character string).

[0056] Next, the first password generation unit 160 generates a password using a seed generated from the owned property information (step S303). Note that the first password generation unit 160 may generate a password using multiple types of seeds. For example, the first password generation unit 160 may acquire multiple types of owned property information, convert each of the pieces of information into multiple seeds, and generate a password by combining the multiple seeds. Furthermore, the first password generation unit 160 may generate a password using a seed converted from information other than owned property information (for example, stored information with a low load) in addition to the seed converted from the owned property information.

[0057] (Technical Effects) Next, technical effects obtained by the information processing device 10 according to the third embodiment will be described.

[0058] As described with reference to FIGS. 6 and 7 , in the information processing device 10 according to the third embodiment, a password is generated based on the owned property information. In this way, even if the user does not remember a password, the password can be generated appropriately from the owned property information. This reduces the burden on the user of having to remember passwords. Note that enabling password generation from owned property information may result in a loss of confidentiality of the password (for example, there is a risk that the password may be misused by another user who has illegally obtained the owned property), but as already described, this does not cause any inconvenience because the information stored in the owned property is ultimately protected by facial authentication.

[0059] <Fourth embodiment> An information processing device 10 according to a fourth embodiment will be described with reference to Figures 8 and 9. Note that the fourth embodiment differs only in part of the configuration and operation from the first to third embodiments described above, and other parts may be the same as the first to third embodiments. Therefore, the following will describe in detail the parts that differ from the embodiments already described, and will omit a description of other overlapping parts as appropriate.

[0060] (Functional Configuration) First, the functional configuration of the information processing device 10 according to the fourth embodiment will be described with reference to Fig. 8. Fig. 8 is a block diagram showing the functional configuration of the information processing device according to the fourth embodiment. Note that in Fig. 8, the same elements as those shown in Fig. 2 are denoted by the same reference numerals.

[0061] 8, the information processing device 10 according to the fourth embodiment is configured to include, as components for realizing its functions, a password acquisition unit 110, a first image acquisition unit 120, a second image acquisition unit 130, an authentication unit 140, and a second password generation unit 170. That is, the information processing device 10 according to the fourth embodiment further includes, in addition to the configuration of the first embodiment (see FIG. 2), a second password generation unit 170. The second password generation unit 170 may be a processing block realized by, for example, the above-mentioned processor 11 (see FIG. 1).

[0062] The second password generation unit 170 is configured to generate a password based on biometric information acquired from the user. The biometric information may be a feature obtainable from the user's body. For example, the biometric information may be a feature indicating the user's face, fingerprint, palm print, iris, or ear acoustics. These features may be obtained, for example, from an image captured by the camera 18, or may be obtained by various scanners, sensors, etc. When acquiring the biometric information, processing to prevent fraud (e.g., spoofing detection or liveness detection) may be performed. Note that a specific algorithm for generating a password from biometric information can be appropriately adopted from existing algorithms, and therefore a detailed description thereof will be omitted here.

[0063] (Password Generation Operation) Next, the flow of the password generation operation by the information processing device 10 according to the fourth embodiment (i.e., the operation when the second password generation unit 170 generates a password) will be described with reference to Fig. 9. Fig. 9 is a flowchart showing the flow of the password generation operation by the information processing device according to the fourth embodiment.

[0064] 9 , when the information processing device 10 according to the fourth embodiment starts a password generation operation, the second password generation unit 170 first acquires biometric information from the user (step S401). The second password generation unit 170 then converts the acquired biometric information into a seed (step S402). That is, the second password generation unit 170 executes a process of converting the acquired biometric information into a state from which a password can be generated (for example, a process of converting the biometric information into a character string).

[0065] Next, the second password generation unit 170 generates a password using the seed generated from the biometric information (step S403). Note that the second password generation unit 170 may generate a password using multiple types of seeds. For example, the second password generation unit 170 may acquire multiple types of biometric information, convert each of the types into multiple seeds, and generate a password by combining the multiple seeds. Furthermore, the second password generation unit 170 may generate a password using a seed converted from information other than biometric information (e.g., storage information with a low load) in addition to a seed converted from biometric information.

[0066] (Technical Effects) Next, technical effects obtained by the information processing device 10 according to the fourth embodiment will be described.

[0067] As described with reference to FIGS. 8 and 9 , in the information processing device 10 according to the fourth embodiment, a password is generated based on biometric information. In this way, even if a user does not have a password stored, the password can be generated appropriately from the biometric information. This reduces the burden on the user of having to memorize passwords. Furthermore, since biometric information is difficult to forge, the reliability of passwords can be increased. Even if the biometric information used to generate a password is forged, no inconvenience will occur because the information stored in the user's possession is ultimately protected by facial authentication.

[0068] Fifth Embodiment An information processing device 10 according to a fifth embodiment will be described with reference to Figures 10 and 11. The fifth embodiment differs only in part of the configuration and operation from the first to fourth embodiments described above, and other parts may be the same as the first to fourth embodiments. Therefore, the following will describe in detail the parts that differ from the embodiments already described, and will omit a description of other overlapping parts as appropriate.

[0069] (Functional Configuration) First, the functional configuration of the information processing device 10 according to the fifth embodiment will be described with reference to Fig. 10. Fig. 10 is a block diagram showing the functional configuration of the information processing device according to the fifth embodiment. Note that in Fig. 10, the same elements as those shown in Fig. 2 are denoted by the same reference numerals.

[0070] 10 , the information processing device 10 according to the fifth embodiment is configured to include, as components for realizing its functions, a password acquisition unit 110, a first image acquisition unit 120, a second image acquisition unit 130, an authentication unit 140, and a third password generation unit 180. That is, the information processing device 10 according to the fifth embodiment further includes a third password generation unit 180 in addition to the configuration of the first embodiment (see FIG. 2 ). The third password generation unit 180 may be a processing block realized by, for example, the above-mentioned processor 11 (see FIG. 1 ).

[0071] The third password generation unit 180 is configured to be able to generate a password based on both owned property information acquired from owned property and biometric information acquired from the user. The owned property information here may be the same as the owned property information described in the third embodiment (i.e., the information used by the first password generation unit 160). The biometric information may be the same as the biometric information described in the fourth embodiment (i.e., the information used by the second password generation unit 170). Since existing algorithms can be used as appropriate for generating a password from owned property information and biometric information, detailed explanations thereof will be omitted here.

[0072] (Password Generation Operation) Next, the flow of the password generation operation by the information processing device 10 according to the fifth embodiment (i.e., the operation when the third password generation unit 180 generates a password) will be described with reference to Fig. 11. Fig. 11 is a flowchart showing the flow of the password generation operation by the information processing device according to the fifth embodiment.

[0073] 11 , when the information processing device 10 according to the fifth embodiment starts a password generation operation, the third password generation unit 180 first acquires possession information from the user's possessions (step S501). Then, the third password generation unit 180 generates a seed from the possession information acquired from the possessions (step S502).

[0074] The third password generation unit 180 also acquires biometric information from the user (step S503). The third password generation unit 180 then generates a seed from the biometric information acquired from the user (step S504). Note that the processes of steps S501 and S502 (i.e., the processes of acquiring and seeding owned property information) and steps S503 and S504 (i.e., the processes of acquiring and seeding biometric information) may be executed simultaneously in parallel, or may be executed one after the other.

[0075] Next, the third password generation unit 180 generates a password by combining the seed generated from the property information and the seed generated from the biometric information (step S505). Note that the third password generation unit 180 may generate a password using multiple types of seeds generated from the property information and multiple types of seeds generated from the biometric information. Furthermore, the third password generation unit 180 may generate a password using a seed converted from information other than the property information and biometric information (for example, stored information with a low load) in addition to the seed converted from the property information and the biometric information.

[0076] (Technical Effects) Next, technical effects obtained by the information processing device 10 according to the fifth embodiment will be described.

[0077] As described with reference to Figures 10 and 11, in the information processing device 10 according to the fifth embodiment, a password is generated based on both the possession information and the biometric information. In this way, even if the user does not remember a password, the password can be generated appropriately from the possession information and the biometric information. This reduces the burden on the user of having to remember passwords. Furthermore, compared to when a password is generated using only the possession information or when a password is generated using only the biometric information, a password with higher confidentiality can be generated.

[0078] The information processing device 10 may be configured to include at least two of the first password generation unit 160 described in the third embodiment, the second password generation unit 170 described in the fourth embodiment, and the third password generation unit 180 described in the fifth embodiment. That is, the information processing device 10 may be configured to be able to appropriately select and execute password generation using owned property information, password generation using biometric information, and password generation using both owned property information and biometric information.

[0079] Sixth Embodiment An information processing device 20 according to a sixth embodiment will be described with reference to FIG. 12 . The information processing device 20 according to the sixth embodiment is configured as a device for generating passwords, unlike the first to fifth embodiments described above. However, the information processing device 20 according to the sixth embodiment has many parts in common with the first to fifth embodiments, and for example, the hardware configuration may be the same as that of the first embodiment (see FIG. 1 ). Therefore, the following will describe in detail the parts that differ from the embodiments already described, and will omit a description of other overlapping parts as appropriate.

[0080] (Functional Configuration) First, the functional configuration of the information processing device 20 according to the sixth embodiment will be described with reference to Fig. 12. Fig. 12 is a block diagram showing the functional configuration of the information processing device according to the sixth embodiment.

[0081] 12, the information processing device 20 according to the sixth embodiment includes, as components for realizing its functions, a possession information acquisition unit 210, a biometric information acquisition unit 220, and a password generation unit 230. Each of the possession information acquisition unit 210, the biometric information acquisition unit 220, and the password generation unit 230 may be a processing block realized by, for example, the above-mentioned processor 11 (see FIG. 1).

[0082] The owned property information acquisition unit 210 is configured to be able to acquire owned property information from the user's owned property. The owned property information acquired by the owned property information acquisition unit 210 may be the same as the owned property information described in the third embodiment (i.e., the information used by the first password generation unit 160). The owned property information acquisition unit 210 may have a function to generate seeds for the owned property information. The owned property information acquired by the owned property information acquisition unit 210 is configured to be output to the password generation unit 230.

[0083] The biometric information acquisition unit 220 is configured to be able to acquire biometric information from a user. The biometric information acquired by the biometric information acquisition unit 220 may be the same as the biometric information described in the fourth embodiment (i.e., the information used by the second password generation unit 170). The biometric information acquisition unit 220 may have a function to generate a seed from the biometric information. The biometric information acquired by the biometric information acquisition unit 220 is configured to be output to the password generation unit 230.

[0084] The password generation unit 230 is configured to be able to generate a password based on both the possession information acquired by the possession information acquisition unit 210 and the biometric information acquired by the biometric information acquisition unit 220. Note that a specific algorithm for generating a password from the possession information and biometric information can be an existing one, as appropriate, and therefore a detailed description thereof will be omitted here.

[0085] (Flow of Operation) Next, the overall flow of operation by the information processing device 20 according to the sixth embodiment will be described with reference to Fig. 13. Fig. 13 is a flowchart showing the flow of operation of the information processing device according to the sixth embodiment.

[0086] 13, the information processing device 20 according to the sixth embodiment first determines whether or not a password generation request has been received (step S601). This password generation request may be, for example, a user operation or may be output from another device. If there is no password generation request (step S601: NO), the information processing device 20 may omit the subsequent processing and terminate the series of operations.

[0087] If a password generation request is received (step S601: YES), the possession information acquisition unit 210 acquires possession information from the user's possessions (step S602).The possession information acquisition unit 210 then creates a seed from the possession information acquired from the possessions (step S603).

[0088] On the other hand, the biometric information acquisition unit 220 acquires biometric information from the user (step S604). Then, the biometric information acquisition unit 220 seeds the biometric information acquired from the user (step S605). Note that the processes of steps S602 and S603 (i.e., the processes of acquiring and seeding owned item information) and the processes of steps S604 and S605 (i.e., the processes of acquiring and seeding biometric information) may be executed simultaneously in parallel, or may be executed one after the other.

[0089] Next, the password generation unit 230 generates a password by combining the seed generated by the possession information acquisition unit 210 and the seed generated by the biometric information acquisition unit 220 (step S606). Note that the password generation unit 230 may generate a password using multiple types of seeds generated from possession information and multiple types of seeds generated from biometric information. Furthermore, the password generation unit 230 may generate a password using a seed converted from information other than possession information and biometric information (for example, stored information with a low load) in addition to the seed converted from possession information and biometric information.

[0090] Next, the password generation unit 230 outputs the generated password (step S607). The password generation unit 230 may, for example, output the generated password to a display and present it to the user. Alternatively, the password generation unit 230 may output the generated password to an external device (for example, a device that uses the password).

[0091] (Technical Effects) Next, technical effects obtained by the information processing device 20 according to the sixth embodiment will be described.

[0092] As described with reference to Figures 12 and 13, the information processing device 20 according to the sixth embodiment generates a password by combining possession information and biometric information. In this way, even if a user does not remember a password, the password can be generated appropriately from possession information and biometric information. This reduces the burden on the user of having to remember passwords. Furthermore, by combining possession information and biometric information, a password with higher confidentiality can be generated.

[0093] The scope of each embodiment also includes a processing method in which a program that operates the configuration of each embodiment to realize the functions of the above-described embodiments is recorded on a recording medium, the program recorded on the recording medium is read as code, and the program is executed on a computer. In other words, a computer-readable recording medium is also included in the scope of each embodiment. Furthermore, each embodiment includes not only a recording medium on which the above-described program is recorded, but also the program itself.

[0094] Examples of recording media that can be used include floppy disks, hard disks, optical disks, magneto-optical disks, CD-ROMs, magnetic tapes, non-volatile memory cards, and ROMs. Furthermore, the scope of each embodiment is not limited to programs that execute processing by themselves, but also includes programs that execute processing by operating on an OS in cooperation with other software or functions of an expansion board. Furthermore, the program itself may be stored on a server, and part or all of the program may be downloaded from the server to a user terminal.

[0095] <Supplementary Notes> The above-described embodiment may be further described as in the following supplementary notes, but is not limited to the following.

[0096] (Supplementary Note 1) The information processing device described in Supplementary Note 1 is an information processing device that includes a password acquisition means that acquires a password set in a user's possession, a first image acquisition means that uses the password to acquire a first image that is a facial image of the user stored in the possession, a second image acquisition means that photographs the user's face to acquire a second image that is a facial image of the user, and an authentication means that compares the first image with the second image to perform facial authentication of the user.

[0097] (Supplementary Note 2) The information processing device according to Supplementary Note 2 is the information processing device according to Supplementary Note 1, further comprising: a disabling unit that disables the password when the face authentication fails.

[0098] (Appendix 3) The information processing device described in Appendix 3 is the information processing device described in Appendix 1 or 2, further comprising a first password generation means for generating the password based on possession information acquired from the possession, and the password acquisition means for acquiring the password generated by the first password generation means.

[0099] (Appendix 4) The information processing device described in Appendix 4 is the information processing device described in Appendix 1 or 2, further comprising a second password generation means that generates the password based on biometric information acquired from the user, and the password acquisition means acquires the password generated by the second password generation means.

[0100] (Appendix 5) The information processing device described in Appendix 5 is the information processing device described in Appendix 1 or 2, further comprising a third password generation means that generates the password by combining possession information acquired from the possession and biometric information acquired from the user, and the password acquisition means acquires the password generated by the third password generation means.

[0101] (Appendix 6) The information processing method described in Appendix 6 is an information processing method that, by at least one computer, obtains a password set on a user's possessions, uses the password to obtain a first image that is a facial image of the user stored on the possessions, photographs the user's face to obtain a second image that is a facial image of the user, and compares the first image with the second image to perform facial authentication of the user.

[0102] (Appendix 7) The recording medium described in Appendix 7 is a recording medium having recorded thereon a computer program for causing at least one computer to execute an information processing method, which includes obtaining a password set on a user's possession, using the password to obtain a first image that is a facial image of the user stored on the possession, photographing the user's face to obtain a second image that is a facial image of the user, and comparing the first image with the second image to perform facial authentication of the user.

[0103] (Appendix 8) The information processing system described in Appendix 8 is an information processing system including a password acquisition means for acquiring a password set in a user's possession, a first image acquisition means for using the password to acquire a first image which is a facial image of the user stored in the possession, a second image acquisition means for photographing the user's face to acquire a second image which is a facial image of the user, and an authentication means for comparing the first image with the second image to perform facial authentication of the user.

[0104] (Appendix 9) The computer program described in Appendix 9 is a computer program that causes at least one computer to execute an information processing method that acquires a password set on a user's possessions, uses the password to acquire a first image that is a facial image of the user stored on the possessions, photographs the user's face to acquire a second image that is a facial image of the user, and compares the first image with the second image to perform facial authentication of the user.

[0105] (Appendix 10) The information processing device described in Appendix 10 is an information processing device that includes a possession information acquisition means that acquires possession information from a user's possessions, a biometric information acquisition means that acquires biometric information from the user, and a password generation means that combines the possession information and the biometric information to generate a password to be set on the user's possessions.

[0106] (Appendix 11) The information processing method described in Appendix 11 is an information processing method in which, using at least one computer, possession information is acquired from a user's possessions, biometric information is acquired from the user, and the possession information and the biometric information are combined to generate a password to be set for the user's possessions.

[0107] (Appendix 12) The recording medium described in Appendix 11 is a recording medium having recorded thereon a computer program that causes at least one computer to execute an information processing method that acquires possession information from a user's possessions, acquires biometric information from the user, and combines the possession information with the biometric information to generate a password to be set for the user's possessions.

[0108] (Appendix 13) The information processing system described in Appendix 13 is an information processing system that includes a possession information acquisition means that acquires possession information from a user's possessions, a biometric information acquisition means that acquires biometric information from the user, and a password generation means that combines the possession information and the biometric information to generate a password to be set on the user's possessions.

[0109] (Appendix 14) The computer program described in Appendix 14 is a computer program that causes at least one computer to execute an information processing method that acquires possession information from a user's possessions, acquires biometric information from the user, and combines the possession information and the biometric information to generate a password to be set for the user's possessions.

[0110] This disclosure may be modified as appropriate within the scope that does not contradict the gist or idea of ​​the invention that can be read from the claims and the entire specification, and information processing devices, information processing methods, and recording media that involve such modifications are also included in the technical idea of ​​this disclosure.

[0111] REFERENCE SIGNS LIST 10, 20 Information processing device 11 Processor 18 Camera 110 Password acquisition unit 120 First image acquisition unit 130 Second image acquisition unit 140 Authentication unit 150 Invalidation unit 160 First password generation unit 170 Second password generation unit 180 Third password generation unit 210 Possession information acquisition unit 220 Biometric information acquisition unit 230 Password generation unit

Claims

1. a password acquisition means for acquiring a password set in an item owned by a user; a first image acquisition means for acquiring a first image, which is a facial image of the user stored in the possession, by using the password; A second image acquisition means for acquiring a second image which is a facial image of the user by photographing the face of the user; an authentication means for performing face authentication of the user by comparing the first image with the second image; An information processing device comprising:

2. The device further includes an invalidation means for invalidating the password when the face authentication fails. The information processing device according to claim 1 .

3. a first password generating unit configured to generate the password based on possession information acquired from the possession; The password acquisition means acquires the password generated by the first password generation means.

3. The information processing device according to claim 1 or 2.

4. a second password generating unit configured to generate the password based on biometric information acquired from the user; The password acquisition means acquires the password generated by the second password generation means.

3. The information processing device according to claim 1 or 2.

5. a third password generating means for generating the password by combining possession information acquired from the possession and biometric information acquired from the user; the password acquisition means acquires the password generated by the third password generation means; 3. The information processing device according to claim 1 or 2.

6. by at least one computer, Obtain the password set in the user's possession, obtaining a first image, which is a facial image of the user stored in the possession, using the password; capturing an image of the user's face to obtain a second image which is a facial image of the user; Matching the first image with the second image to perform face authentication of the user. Information processing methods.

7. At least one computer Obtain the password set in the user's possession, obtaining a first image, which is a facial image of the user stored in the possession, using the password; capturing an image of the user's face to obtain a second image which is a facial image of the user; Matching the first image with the second image to perform face authentication of the user. A computer program for executing an information processing method.

8. a possession information acquiring means for acquiring possession information from possessions of a user; a biometric information acquiring means for acquiring biometric information from the user; a password generating means for generating a password to be set on the user's possession by combining the possession information and the biometric information; An information processing device comprising:

9. by at least one computer, Obtaining possession information from the user's possessions; acquiring biometric information from the user; generating a password to be set on the user's possession by combining the possession information and the biometric information; Information processing methods.

10. At least one computer Obtaining possession information from the user's possessions; acquiring biometric information from the user; generating a password to be set on the user's possession by combining the possession information and the biometric information; A computer program for executing an information processing method.