Information processing method, information processing device, and authentication system

Abstract

In this information processing method, a computer device executes processing for continuously calculating an identity score by using first identity information based on an authentication action and second identity information based on activity information among identity information capable of determining whether or not a person is the person himself / herself.

Description

Information processing method, information processing device, and authentication system

[0001] The present technology relates to an information processing method, an information processing device, and an authentication system.

[0002] In online communication where faces cannot be seen, there is a possibility of impersonation by a person other than the person in question. In response to this, Patent Document 1 below discloses a technology for easily and accurately realizing identity authentication suited to a service by determining a quantitative probability value that takes into account the dependency between determination elements.

[0003] JP 2009-175984 A

[0004] However, the technology described in Patent Document 1 requires active authentication action each time personal authentication is performed, which places a heavy burden on the user and is troublesome.

[0005] This technology aims to solve the above problems and reduce the burden on users regarding personal authentication.

[0006] In the information processing method according to the present technology, a computer device executes a process of continuously calculating an identity score using identity information, which is information that can determine whether a person is the person himself / herself, including first identity information that is identity information based on authentication behavior and second identity information that is identity information based on activity information. As a result, for example, the identity score is continuously calculated based on activity information acquired after identity authentication is successful through authentication behavior.

[0007] The information processing device of the present technology is equipped with a calculation unit that continuously calculates an identity score using identity information, which is information that can determine whether or not a person is the person in question, including first identity information, which is identity information based on authentication behavior, and second identity information, which is identity information based on activity information.

[0008] The authentication system of the present technology includes one or more edge devices that are target devices of authentication actions for authenticating identity and that are capable of acquiring activity information, and a server device that acquires, from the edge devices, identity information that can determine whether a person is the identity of the person, first identity information that is identity information based on the authentication action and second identity information that is identity information based on the activity information, and continuously calculates an identity score using the first identity information and the second identity information. The above-mentioned information processing method can also be realized by such an information processing device or authentication system.

[0009] 1 is a block diagram illustrating a configuration of an authentication system. FIG. 1 is a diagram illustrating an example of a hardware configuration of a computer device. FIG. 2 is a block diagram illustrating a functional configuration of a server device. FIG. 2 is a diagram illustrating a first example of a transition of an identity score. FIG. 3 is a diagram illustrating a second example of a transition of an identity score. FIG. 4 is a diagram illustrating a fourth example of a transition of an identity score. FIG. 3 is a diagram illustrating an example of a normal screen. FIG. 4 is a diagram illustrating an example of a history screen. FIG. 5 is a diagram illustrating an example of a notice display screen. FIG. 6 is a diagram illustrating an example of a recommendation screen. FIG. 7 is a diagram illustrating an example of an authentication screen. FIG. 8 is a diagram illustrating an example of a defect report input screen. FIG. 9 is a diagram illustrating an example of an authentication result display screen. FIG. 10 is a diagram illustrating an example of a request selection screen. FIG. 11 is a diagram illustrating an example of a yes / no selection screen. FIG. 12 is a diagram illustrating an example of a service screen. FIG. 13 is a diagram illustrating an example of a service screen in which person B's avatar has become thinner. FIG. 14 is a diagram illustrating an example of a service screen in which person B has been automatically logged off. FIG. 15 is a flowchart illustrating an example of a process executed by the server device to calculate an identity score. FIG. 16 is a flowchart illustrating an example of a process executed by the server device to perform actionless identity authentication. FIG. 17 is a flowchart illustrating another example of a process executed by the server device to calculate an identity score. FIG. 18 is a flowchart illustrating an example of a process executed by the server device to provide a communication service between users using a service screen. It is a block diagram for explaining the configuration of the authentication system in the second embodiment. It is a block diagram showing the functional configuration of the authentication service device in the second embodiment. It is a block diagram showing the functional configuration of the external server device in the second embodiment.

[0010] The following describes the embodiments in the following order: <1. Configuration of authentication system> <2. Configuration of computer device> <3. Functional configuration of server device> <4. Transition examples of identity score> <4-1. Transition example 1> <4-2. Transition example 2> <4-3. Transition example 3> <4-4. Transition example 4> <5. Screen example 1> <6. Screen example 2> <7. Processing example> <8. Combination of input devices> <9. Regarding full-screen fingerprint authentication> <10. Second embodiment> <11. Summary> <12. This technology>

[0011] 1 shows a configuration example of an authentication system Sys according to the present technology. The authentication system Sys includes one or more input devices 1 and a server device 2. In the authentication system Sys according to the present embodiment, the multiple input devices 1 include a source device 1 s, a linked device 1 c, and an activity information device 1 a.

[0012] Each input device 1 and the server device 2 can transmit and receive data to and from each other via the communication network NW. Note that the cooperating device 1c and the activity information device 1a may be configured to be able to communicate directly with the source device 1s via Bluetooth (registered trademark), tethering, or a wired connection, as shown by the dashed lines in Fig. 1, in which case the cooperating device 1c and the activity information device 1a do not need to be directly connected to the communication network NW.

[0013] The input device 1 is an edge device used by a user, and is an information processing device into which various pieces of information about the user are input.

[0014] The input device 1 is an edge device that transmits information used for authentication and information on the authentication result to the server device 2 when a user performs an active authentication action to verify the user's identity.

[0015] The input device 1 is also an edge device that transmits to the server device 2 activity information relating to the user, which information indicates that the user is the user of a certain account.

[0016] Here, the information transmitted from the input device 1 to the server device 2 as a result of active authentication behavior and capable of determining whether or not a person is the person who owns a certain account is referred to as "first identity information D1." That is, the authentication result of fingerprint authentication performed by the user and information on the ID (Identification) and password entered by the user are referred to as the first identity information D1.

[0017] Furthermore, information obtained through the user's activities and capable of determining that the user is the person in charge of a certain account is referred to as "second identity information D2." That is, information obtained about the user's voice, movements, and location is referred to as second identity information D2.

[0018] In addition, IMU (Inertial Measurement Unit) data obtained by the input device 1 when the user lifts the input device 1 or when the user wearing the input device 1 moves is also an example of second personal information D2 that differs for each individual.

[0019] Furthermore, distance information between input devices 1 used by the user can also be used to determine whether the user is using the input device 1, and is therefore an example of second identity information D2.

[0020] The source device 1 s serving as the input device 1 is an edge device that is the target of authentication actions for performing personal authentication. The source device 1 s performs authentication actions to realize, for example, PIN (Personal Identification Number) code authentication, password authentication, pattern authentication, fingerprint authentication, or face authentication.

[0021] The source device 1s is a device that can perform biometric authentication relatively easily, such as a smartphone or a tablet terminal.

[0022] The source device 1s can also acquire country or region information from the user's voice, location information from GNSS (Global Navigation Satellite Systems), etc., network information, etc. The information can be transmitted to the server device 2 as second identity information D2.

[0023] The source device 1 s as a smartphone is capable of acquiring both the first personal information D1 and the second personal information D2 and transmitting them to the server device 2 .

[0024] The linked device 1c as the input device 1 is an information processing device used by a user in collaboration with the source device 1s. The linked device 1c is also capable of at least some of the various authentication actions described above.

[0025] The linked device 1c is, for example, a personal computer (PC) or a smartphone or tablet terminal that is separate from the source device 1s.

[0026] The linked device 1c is also capable of acquiring the user's voice, location information, and country or region information.

[0027] That is, the linked device 1c as a PC is capable of acquiring both the first personal identification information D1 and the second personal identification information D2 and transmitting them to the server device 2.

[0028] The activity information device 1a as the input device 1 is capable of acquiring the user's activity information such as the user's voice, movements, pulse rate, heart rate, etc., and transmitting this to the server device 2 as second personal information D2.

[0029] The activity information device 1a corresponds to various edge devices that can be worn by a user, such as a smart watch, earphones, headphones, 3D (Dimension) glasses, or VR (Virtual Reality) goggles.

[0030] The server device 2 receives the first identity information D1 and the second identity information D2 from the input device 1, and calculates an identity score Sc based on the information.

[0031] The first identity information D1 received by the server device 2 may be a user ID or password entered by the user on the input device 1, a facial image or fingerprint information in facial authentication, or the result information of the authentication process performed on the input device 1.

[0032] The second personal information D2 received by the server device 2 is activity information obtained based on the user's activity on the input device 1.

[0033] The first personal information D1 and the second personal information D2 may be encrypted or processed before being sent to the server device 2.

[0034] The server device 2 calculates the identity score Sc for each account or user ID, for example.

[0035] The server device 2 performs authentication processing based on the identity score Sc and the authentication behavior of the user, and provides various services. For example, if the identity score Sc is equal to or greater than a certain level, the server device 2 exempts (skips) the identity authentication operation that is normally required.

[0036] The server device 2 is an information processing device that provides various services such as an online shopping service, a banking service, a chat service, an online game service, and a communication service.

[0037] Various configurations of the communication network NW are conceivable. For example, the Internet, an intranet, an extranet, a local area network (LAN), a community antenna television (CATV) communication network, a virtual private network, a telephone line network, a mobile communication network, a satellite communication network, and the like are conceivable as the communication network NW. Various examples of transmission media that constitute all or part of the communication network NW are also conceivable. For example, wired media such as IEEE (Institute of Electrical and Electronics Engineers) 1394, USB (Universal Serial Bus), power line carriers, and telephone lines are conceivable, as well as wireless media such as infrared media such as IrDA (Infrared Data Association), Bluetooth, 802.11 wireless, mobile phone networks, satellite circuits, and terrestrial digital networks are conceivable.

[0038] Such an authentication system Sys can be applied to, for example, security gates, medical equipment, cash register payment terminals, PCs, smartphones, smart watches, game consoles, cameras, television sets, and automobiles.

[0039] For example, in the case of a PC, authentication processing according to the identity score Sc is performed during login authentication of the PC, thereby skipping identity authentication depending on the situation.

[0040] 2. Configuration of Computer Devices The hardware configuration of computers such as the input device 1 and the server device 2 included in the authentication system Sys will be described with reference to FIG.

[0041] The computer device includes a CPU 71. The CPU 71 functions as an arithmetic processing unit that performs the various processes described above and below, and executes the various processes according to a program stored in a ROM 72 or a nonvolatile memory unit 74 such as an EEP-ROM (Electrically Erasable Programmable Read-Only Memory), or a program loaded from a storage unit 79 to a RAM 73. The RAM 73 also stores data necessary for the CPU 71 to execute the various processes, as appropriate.

[0042] The CPU 71, ROM 72, RAM 73, and nonvolatile memory unit 74 are interconnected via a bus 83. To this bus 83, an input / output interface (I / F) 75 is also connected.

[0043] An input unit 76 consisting of operators and operation devices is connected to the input / output interface 75. For example, the input unit 76 may be various operators and operation devices such as a keyboard, a mouse, keys, a dial, a touch panel, a touch pad, a remote controller, etc. The input unit 76 detects user operations, and the CPU 71 interprets signals corresponding to the input operations.

[0044] A display unit 77, such as an LCD or an organic EL panel, and an audio output unit 78, such as a speaker, are connected integrally or separately to the input / output interface 75. The display unit 77 is a display unit that displays various information, and is configured, for example, by a display device provided in the housing of the computer device, or a separate display device connected to the computer device.

[0045] The display unit 77 displays images for various image processing, moving images to be processed, etc. on the display screen based on instructions from the CPU 71. The display unit 77 also displays various operation menus, icons, messages, etc., i.e., a GUI (Graphical User Interface), based on instructions from the CPU 71.

[0046] The input / output interface 75 may be connected to a storage unit 79 configured with a hard disk or solid-state memory, or a communication unit 80 configured with a modem or the like.

[0047] The communication unit 80 performs communication processing via a transmission path such as the Internet, and communication with various devices via wired / wireless communication, bus communication, and the like.

[0048] A drive 81 is also connected to the input / output interface 75 as required, and a removable storage medium 82 such as a magnetic disk, optical disk, magneto-optical disk, or semiconductor memory is appropriately mounted thereon.

[0049] The drive 81 can read data files such as programs used for various processes from the removable storage medium 82. The read data files are stored in the storage unit 79, and images and sounds contained in the data files are output on the display unit 77 and the audio output unit 78. Furthermore, the computer programs and the like read from the removable storage medium 82 are installed in the storage unit 79 as needed.

[0050] In this computer device, for example, software for the processing of this embodiment can be installed via network communication by the communication unit 80 or via a removable storage medium 82. Alternatively, the software may be stored in advance in the ROM 72, the storage unit 79, or the like.

[0051] The CPU 71 performs processing operations based on various programs, thereby performing the necessary information processing and communication processing of the server device 2, which is a computer device equipped with the above-mentioned arithmetic processing unit. Note that these computer devices are not limited to being configured as a single computer device as shown in FIG. 2 , but may also be configured as a system of multiple computer devices. The multiple computer devices may be systemized using a LAN or the like, or may be located in remote locations via a VPN (Virtual Private Network) using the Internet or the like. The multiple computer devices may include computer devices serving as a server group (cloud) available through a cloud computing service.

[0052] It should be noted that each computer device does not need to include all of the units shown in Fig. 2. For example, the activity information device 1a serving as the input device 1 may not include the display unit 77 if it is an earphone or a headphone.

[0053] 3. Functional Configuration of Server Device The functions provided by the CPU 71 of the server device 2 executing the programs will be described with reference to FIG.

[0054] The CPU 71 has an identity score calculation function F1, an automatic authentication function F2, an automatic logoff function F3, an inference function F4, a request presentation function F5, an information presentation function F6, and a defect information management function F7.

[0055] The identity score calculation function F1 calculates, for example, an identity score Sc for each account. When one user uses one account, it can be said that the identity score Sc is calculated for each user.

[0056] The identity score Sc is calculated so that it increases each time authentication is successful through an authentication action such as a login operation and decreases over time. The gradient of the decrease (the slope of the decrease) changes depending on the activity information obtainable from the user. That is, the server device 2 causes different effects on the identity score Sc depending on whether the server device 2 obtains the first identity information D1 or the second identity information D2.

[0057] The login operation here refers to a login operation to a service provided by the server device 2, and is considered to be separate from a login operation for unlocking the smartphone serving as the source device 1 s. However, whether or not to perform login for unlocking the source device 1 s may be determined depending on the identity score Sc.

[0058] When the server device 2 acquires the first identity information D1 and the authentication is successful, the server device 2 increases the identity score Sc. This process is executed each time different first identity information D1 is acquired, i.e., each time an authentication action for identity authentication is performed.

[0059] Furthermore, when the second identity information D2 is acquired, the server device 2 changes the decreasing gradient of the identity score Sc.

[0060] The extent to which the identity score Sc increases when authentication based on the first identity information D1 is successful varies depending on the type of authentication behavior, the type of device used in the authentication behavior, and its reliability.

[0061] For example, if authentication is successful using the first identity information D1 acquired in response to authentication behavior involving inputting a password of about several digits, the degree of increase in the identity score Sc is kept low.

[0062] On the other hand, if authentication is successful using the first identity information D1 acquired in response to an authentication action using face authentication, fingerprint authentication, or iris authentication, the degree of increase in the identity score Sc increases.

[0063] Note that successful authentication using a PIN code requires two conditions: the user possesses a device with a set PIN code, and the entered PIN code is correct. Therefore, PIN code authentication can be considered multi-factor authentication, including two of "knowledge," "possessions," and "biometric information." On the other hand, successful facial authentication, fingerprint authentication, and iris authentication require only a match in the biometric information. Therefore, these biometric authentications include only the "biometric information" of "knowledge," "possessions," and "biometric information," and are not multi-factor authentication. Taking this into consideration, if a PIN code is considered to have stronger authentication strength than biometric authentication, the degree of increase in the identity score Sc may be greater when PIN code authentication is successful than when biometric authentication is successful.

[0064] The decrease gradient of the identity score Sc varies depending on whether the second identity information D2 has been acquired and the content of the second identity information D2. For example, the reference decrease gradient when the second identity information D2 cannot be acquired is set to a "first gradient G1."

[0065] For example, if the acquired second identity information D2 is confirmed to be that of the person using the account, the decrease gradient is slowed down. The decrease gradient at this time becomes a second gradient G2 that is gentler than the first gradient G1. In this case, the identity score calculation function F1 may slow down the decrease gradient more greatly as the second identity information D2 is continuously obtained.

[0066] On the other hand, if the acquired second identity information D2 is presumed to belong to someone other than the person using the account, the decrease gradient is increased rather than slowed down, resulting in a third gradient G3 that is steeper than the first gradient G1.

[0067] The degree of slowing of the decrease gradient may be changed depending on the reliability of the input device 1 from which the second identity information D2 was acquired. For example, if the input device 1 from which the second identity information D2 was acquired is the source device 1s, the degree of slowing of the decrease gradient is made greater. On the other hand, if the input device 1 from which the second identity information D2 was acquired is a linked device 1c (e.g., a PC), the degree of slowing of the decrease gradient is made smaller. Furthermore, if the input device 1 from which the second identity information D2 was acquired is the activity information device 1a, the degree of slowing of the decrease gradient is made greater than that of the linked device 1c.

[0068] Note that even for the same source device 1 s or activity information device 1 a, the degree of slowing down may be changed depending on the type of terminal. For example, if the second identity information D2 obtained from a smartwatch is information that can more securely assure identity than the second identity information D2 obtained from earphones, the degree of slowing down of the decrease slope when information is obtained from a smartwatch may be made greater.

[0069] The second personal information D2 may be the above-mentioned IMU data or distance information between the input devices 1. The degree of slowing down of the decrease gradient may be changed depending on the type of such second personal information D2. For example, the distance information between the input devices 1 contributes more to slowing down the decrease gradient than the IMU data.

[0070] Note that the distance information between the input devices 1 may be roughly calculated by the input device 1 or the server device 2 by comparing the volume of the sound when the same sound is picked up. For example, when a user's speaking voice is picked up by multiple input devices 1, the distance of the smartwatch from the smartphone can be calculated based on how much the volume of the sound picked up by the smartwatch as the activity information device 1a is smaller than the volume of the sound picked up by the smartphone as the source device 1s.

[0071] Then, if the sound picked up by the smartphone cannot be picked up by the smartwatch, it may be estimated that the smartwatch is located far away from the smartphone.

[0072] Furthermore, distance information between the input devices 1 may be calculated using Bluetooth, UWB (Ultra-Wide Band), etc. In this case, the distance information may be calculated (estimated) on the edge device side such as the input device 1.

[0073] The automatic authentication function F2 checks the identity score Sc when identity authentication becomes necessary and prompts the user to perform authentication, and if the identity score Sc is equal to or greater than the first threshold Th1, the automatic authentication function F2 skips the identity authentication without requesting authentication. Skipping identity authentication can be said to be a way of assuming that the authentication action has been performed appropriately.

[0074] Here, the first threshold value Th1 may be set to be different depending on the type of operation that requires personal authentication.

[0075] For example, the first threshold Th1 when personal authentication is required for an operation to make a payment in a banking service is set higher than the first threshold Th1 when personal authentication is required for an operation to make a balance inquiry. This increases the likelihood that authentication action for personal authentication will be required when making a payment, thereby improving security.

[0076] Note that depending on the operation type, the first threshold value Th1 may be set to an infinitely high value. That is, if the operation type that requires personal authentication corresponds to that type, authentication behavior for personal authentication may be required no matter how high the identity score Sc is.

[0077] The automatic logoff function F3 is a function that performs a logoff process on all input devices 1 when an abnormality is detected in some of the input devices 1 being used by the account to which the user is logged in.

[0078] For example, when distance information between input devices 1 is acquired, if the distance between some of the input devices 1 and the source device 1s increases, it is assumed that the terminal has been taken away and a logoff process is executed on all input devices 1.

[0079] This allows for improved convenience by skipping personal authentication, while also improving security.

[0080] In the automatic logoff function F3, some devices among the input devices 1 may be excluded from the logoff process. For example, an input device 1 on which an authentication action that is highly likely to be performed by the user, such as fingerprint authentication or face authentication, has been performed and which has been continuously operated thereafter may be determined to be highly likely to be continuously used by the user who owns the account, and may be excluded from the automatic logoff process.

[0081] The inference function F4 is a function for inferring whether the received second identity information D2 belongs to the person who owns the account, and this function uses, for example, an AI (Artificial Intelligence) model.

[0082] The inference function F4 also has a function of relearning the AI ​​model. For example, the AI ​​model is updated by providing the second personal information D2 acquired from the input device 1 to the AI ​​model as learning data.

[0083] The request presentation function F5 is a function for presenting various types of information to the user, such as a presentation for requesting authentication action for identity verification when the identity score Sc falls below the second threshold value Th2.

[0084] For example, if you perform an operation to view a web page where the identity score Sc has fallen below the second threshold value Th2 over time, and you are automatically logged off, you may need to perform a login operation to enter account information, password, etc., and then perform steps to reach the desired web page.

[0085] However, by requesting authentication action for identity verification using the request presentation function F5, a screen for accepting the authentication action is temporarily displayed before transitioning to the web page, and once the authentication action is performed, transitioning to the requested web page occurs. This allows the user to smoothly perform the intended operation without performing cumbersome operations, reducing the burden on the user.

[0086] Furthermore, since the rate of decrease of the identity score Sc is known in the server device 2, it is also possible to calculate the time remaining until the identity score Sc falls below the second threshold value Th2. Therefore, an authentication action to increase the identity score Sc may be requested in advance when the time remaining until the identity score Sc falls below the second threshold value Th2 becomes short.

[0087] The user can prevent automatic logoff processing by performing authentication at a convenient timing between when the authentication action is requested and when the identity score Sc actually falls below the second threshold value Th2. Furthermore, since the timing of performing authentication action is somewhat flexible, convenience for the user can be improved.

[0088] Furthermore, the request presentation function F5 may present a suggestion to slow down the rate of decrease of the identity score Sc when there is little time left until the identity score Sc falls below the second threshold Th2. That is, the request presentation function F5 may request the user to take action to obtain more second identity information D2.

[0089] For example, the request presentation function F5 requests (recommends) the wearing of the activity information device 1a in order to obtain the second personal information D2 as activity information.

[0090] It is desirable that the activity information device 1a that the user is required to wear is one that has a large effect of slowing down the rate of decline. For example, the request presentation function F5 requests the user to wear a smart watch that can acquire pulse rate and blood vessel patterns, or VR goggles that can acquire iris information, rather than earphones.

[0091] However, the input device 1 requested to be attached by the request presentation function F5 is selected from devices excluding those already attached.

[0092] The information presentation function F6 is a function for presenting information about the identity score Sc to the user.

[0093] For example, the information presentation function F6 presents to the user a request history for authentication actions made to the user by the request presentation function F5, a history of authentication actions and their results, and the like.

[0094] Furthermore, the information presentation function F6 presents the user with a history of increases and decreases in the identity score Sc.

[0095] Furthermore, the information presentation function F6 performs a process of presenting (displaying) the identity score Sc for each user in a communication environment in which multiple users participate. When presenting the identity score Sc for each user, the way in which it is presented may be different for the user himself / herself and for others. An example of how to present it differently will be described in detail later.

[0096] The defect information management function F7 is a function that provides an environment in which a user can report defects regarding increases or decreases in the identity score Sc or the presentation thereof, and also stores and manages defect reports received from users.

[0097] For example, if the identity score Sc does not increase despite successful authentication after performing an authentication action for identity authentication, or if the rate of decrease in the identity score Sc is too large, an environment is provided in which the user can report the event. Examples of the screen presented to the user will be described later.

[0098] The defect report is stored in the storage unit 79 of the server device 2 and can be viewed by the administrator or the like as needed.

[0099] 4. Examples of Transition of Identity Score Several examples of transition of identity score Sc will be described.

[0100] <4-1. Transition Example 1> The first transition example is a case where the input device 1 used by the user is only the source device 1s, as shown in FIG.

[0101] When a user performs an authentication action, such as logging in to their account, using the source device 1s, first identity information D1 based on the authentication action is transmitted to the server device 2 (at timing t1). The server device 2 performs identity authentication processing using the acquired first identity information D1 and also executes processing to calculate an identity score Sc based on whether authentication of the first identity information D1 is successful. As shown in FIG. 4 , if authentication is successful, the identity score Sc increases.

[0102] The calculation process of the identity score Sc continues in the server device 2. At this time, the identity score Sc decreases with the passage of time, and the decreasing gradient is set to a first gradient G1 (indicated by the two-dot chain line in the drawing).

[0103] However, if second identity information D2 as activity information can be continuously obtained from the source device 1s, the server device 2 uses a second gradient G2 (solid line) that is gentler than the first gradient G1 shown by the dotted line when reducing the identity score Sc.

[0104] Since the decreasing gradient is the second gradient G2, the identity score Sc at the current time t2 is equal to or greater than the first threshold Th1. Therefore, even if an operation that would normally require authentication action to confirm identity is performed at this point, identity authentication is performed automatically without any action, and the user does not need to perform any authentication action.

[0105] In this way, even if authentication action for identity verification is required when the identity score Sc decreases with the first gradient G1, the authentication action for identity verification can be skipped by decreasing the identity score Sc with the second gradient G2.

[0106] 4-2. Transition Example 2 The second transition example is a case where the user uses a source device 1s and a linked device 1c as the input device 1, as shown in FIG.

[0107] When the user performs an authentication action, such as logging in to their account, using the source device 1s, first identity information D1 based on the authentication action is transmitted to the server device 2 (timing t3). The server device 2 performs identity authentication processing using the acquired first identity information D1 and executes processing to calculate an identity score Sc based on the success or failure of authentication of the first identity information D1. As a result, the identity score Sc is increased appropriately.

[0108] Thereafter, the identity score Sc decreases over time at a first gradient G1.

[0109] Subsequently, when the user performs authentication by inputting the same account information, etc. using the linked device 1c, first personal information D1 based on the authentication is transmitted to the server device 2 (timing t4).

[0110] The degree of increase in the identity score Sc at timing t4 differs depending on the type of authentication behavior using the linked device 1c. For example, if four-digit password authentication is successful, the degree of increase will be small, as shown by the solid line in Figure 5. On the other hand, if eight-digit password authentication is successful, the degree of increase will be large, as shown by the two-dot chain line in Figure 5.

[0111] Alternatively, the increase in the identity score Sc may be varied depending on the type of linked device 1c.

[0112] In the example shown in Fig. 5, since the second identity information D2 as activity information is acquired by either the source device 1s or the linked device 1c after timing t4, the decrease gradient of the identity score Sc is set to the second gradient G2. Note that the second gradient G2 shown in Fig. 5 may be different from the second gradient G2 shown in Fig. 4. For example, the second gradient G2 may vary depending on the type or amount of information of the second identity information D2 acquired from the input device 1.

[0113] For example, the second identity information D2 is the inter-device distance between the source device 1s and the linked device 1c, and based on the close inter-device distance, it can be determined that both input devices 1 are being used by legitimate users, and the gradient of decrease in the identity score Sc is made gentler.

[0114] By making the decrease gradient of the identity score Sc gentler, the identity score Sc at the current time shown at timing t5 is equal to or greater than the first threshold value Th1, and identity authentication is achieved without any action.

[0115] An example of such a case is a music creation service. First, the user starts up the smartphone as the source device 1s and logs in to the service (timing t3) to perform recording.

[0116] After the recording operation, the PC as the linked device 1c is started up and the user logs in to the service (timing t4) to edit the recorded data.

[0117] Subsequently, if additional recording work is performed again using the smartphone as the source device 1s at the present time of timing t5, actionless personal authentication is performed even though the smartphone has been left unattended, and the work can be continued without taking any active authentication action.

[0118] 6, the third transition example is a case where the user uses the source device 1s and the activity information device 1a as the input device 1. This example is also an example where an abnormality occurs midway.

[0119] When the user performs an authentication action, such as logging in to their account, using the source device 1s, first identity information D1 based on the authentication action is transmitted to the server device 2 (timing t6). The server device 2 performs identity authentication processing using the acquired first identity information D1 and executes processing to calculate an identity score Sc based on the success or failure of authentication of the first identity information D1. As a result, the identity score Sc is increased appropriately.

[0120] Thereafter, the identity score Sc decreases over time at a first gradient G1.

[0121] Subsequently, when the user puts on the activity information device 1a at timing t7, the server device 2 starts to acquire the second personal information D2 based on the fact that the activity information device 1a is put on.

[0122] Therefore, the gradient of decrease of the identity score Sc becomes a second gradient G2 that is gentler than the first gradient G1 based on the second identity information D2.

[0123] Here, the second gradient G2 is determined depending on the type of activity information device 1a and the type, frequency, and content of the second personal information D2 that can be acquired.

[0124] For example, if it is determined based on the IMU data of the activity information device 1a that the way the activity information device 1a is moved is highly likely to be that of the person in question, the identity score Sc is reduced by the second gradient G2a. On the other hand, if the same voice is acquired and information indicating that the distance to the source device 1s is short is acquired, the identity score Sc is deemed to be higher and is reduced by a second gradient G2b that is gentler than the second gradient G2a.

[0125] If an abnormality occurs in the activity information device 1a at timing t8, the server device 2 detects the abnormality based on the acquired second identity information D2, executes a logoff process on each input device 1 logged in with the same account, and reduces the identity score Sc to, for example, a lower limit value. An abnormality in the activity information device 1a occurs, for example, when the distance between the activity information device 1a and the source device 1s becomes significantly large. Specifically, this corresponds to a case where the activity information device 1a or the source device 1s is taken away.

[0126] If an abnormality occurs in the activity information device 1a, the identity score Sc may be decreased at a third gradient G3 that is steeper than the first gradient G1, as indicated by the two-dot chain line in FIG.

[0127] When the user performs authentication again at timing t9 on the source device 1s, the server device 2 appropriately increases the identity score Sc depending on whether the authentication was successful or not.

[0128] The decreasing gradient of the identity score Sc after the timing t9 is based on the second identity information D2 acquired from each input device 1.

[0129] For example, if the second identity information D2 cannot be acquired, the identity score Sc decreases with a first gradient G1. On the other hand, if the second identity information D2 can be acquired, the identity score Sc decreases with a second gradient G2a or G2b depending on the content or type of information, or the type of device from which the second identity information D2 is acquired.

[0130] 4-4. Transition Example 4 The fourth transition example is a case where the user uses the source device 1s, the linked device 1c, and the activity information device 1a as the input device 1, as shown in FIG.

[0131] First, at timing t10, the activity information device 1a is started to be used.

[0132] When a user performs an authentication action, such as logging in to their account, using the source device 1s, first identity information D1 based on the authentication action is transmitted to the server device 2 (timing t11). The server device 2 performs identity authentication processing using the acquired first identity information D1 and executes processing to calculate an identity score Sc based on the success or failure of authentication of the first identity information D1. As a result, the identity score Sc is increased appropriately.

[0133] At the time t11, the user has already started using the activity information device 1a, and therefore the second identity information D2 as activity information can be continuously acquired by the server device 2. Therefore, the gradient of decrease in the identity score Sc after the time t11 is set to a second gradient G2c that is gentler than the first gradient G1.

[0134] Here, when the user performs authentication using the linked device 1c at timing t12, first identity information D1 based on the authentication behavior is transmitted to the server device 2. The server device 2 performs identity authentication processing using the acquired first identity information D1 and appropriately increases the identity score Sc based on the success or failure of the authentication.

[0135] From timing t12 onwards, activity information is obtained not only from the activity information device 1a but also from the linked device 1c, so the server device 2 reduces the identity score Sc at a second gradient G2d which is gentler than the second gradient G2c.

[0136] At timing t13 after timing t12, when the user performs another authentication action using the source device 1 s, first identity information D1 based on the authentication action is transmitted to the server device 2. Then, the server device 2 further increases the identity score Sc according to the result of the authentication process using the acquired first identity information D1.

[0137] 7, the gradient of decrease in the identity score Sc becomes gentler as the amount of acquired second identity information D2 increases. Furthermore, by performing authentication actions consecutively at times t11, t12, t13, etc., it is possible to raise the identity score Sc to a higher value than the result of the first authentication action at time t11, and it becomes possible to skip authentication actions for various operations.

[0138] As time passes from timing t13, when the identity score Sc decreases to be less than the second threshold value Th2 (timing t14), the server device 2 transmits a request to the input device 1 to request the user to perform authentication action.

[0139] In response to this authentication request, the user performs authentication using the source device 1s, and if the authentication is successful, the identity score Sc increases again as shown in FIG.

[0140] 5. Screen Example 1 Examples of screens presented to the user when implementing the above-described functions, specifically, screen example 1 displayed on the display unit 77 of the input device 1, will be described with reference to the accompanying drawings.

[0141] The first screen example described below is a screen presented on the input device 1 used by the user, and is a normal screen 100 when the user is logged in to a service (see FIG. 8 ). A history display icon Ai1, a warning icon Ai2, and a suggestion icon Ai3 are displayed at the top of the normal screen 100. Note that each icon can be displayed or hidden depending on the situation. Also, in FIG. 8 , various images, other icons, controls, etc. that are displayed below the history display icon Ai1, warning icon Ai2, and suggestion icon Ai3 when using each service are omitted.

[0142] When the user operates the history display icon Ai1, a history screen 101 for presenting the history of personal authentication is displayed on the display unit 77 of the input device 1 (see FIG. 9).

[0143] The history screen 101 displays the history of the identity score Sc and the history of the authentication results. The history of the authentication results displays the results of identity authentication based on the user's voluntary authentication behavior, the results of responding to authentication requests issued by the service each time the identity score Sc falls below the second threshold value Th2, and the like.

[0144] When the user operates the warning icon Ai2 shown in FIG. 8, a warning display screen 102 that displays warnings to be communicated to the user is displayed on the display unit 77 of the input device 1 (see FIG. 10).

[0145] The notice display screen 102 displays the history of the identity score Sc and the history of the authentication results, similar to the history screen 101. The authentication result history displays the results of identity authentication based on the user's voluntary authentication behavior and the response results to authentication requests issued by the service each time the identity score Sc falls below the second threshold value Th2, as well as a notice indicating that an authentication request for identity authentication is currently being executed.

[0146] When a user operates the proposed icon Ai3 shown in Figure 8, the display unit 77 of the input device 1 displays a recommendation screen 103 indicating that the identity score Sc is predicted to fall below the second threshold value Th2 in the near future and recommending countermeasures (see Figure 11).

[0147] The recommendation screen 103 displays information about the activity information device 1a that is recommended for the user to wear, and the user's identity score history.

[0148] 11, a display is displayed recommending wearing a smart watch as the activity information device 1a. Also, in the example shown in Fig. 11, the user is notified that the identity score Sc will fall below the second threshold value Th2 in X hours from the present in the identity score history.

[0149] 9, the user can perform an operation to provide feedback on a defect. Specifically, when the user performs an operation to select a predetermined time period or a part of the authentication result history in the history of the identity score Sc displayed on the history screen 101, the user can correct the history information that is the subject of the operation.

[0150] Specifically, when the above-described selection operation is performed, an authentication screen 104 (see FIG. 12) is displayed on the display unit 77 of the input device 1. The authentication screen 104 displays a history display icon Ai1, a notification message to the user, a biometric authentication icon Ai4, a password icon Ai5, and a back button Ai6.

[0151] The biometric authentication icon Ai4 is an icon for performing biometric authentication to report a malfunction, and when this icon is operated, a screen for performing biometric authentication is displayed on the display unit 77 of the input device 1.

[0152] The password icon Ai5 is an icon for entering a PIN code or password for reporting a defect, and when this icon is operated, a screen for entering the PIN code or password is displayed on the display unit 77 of the input device 1.

[0153] The back button Ai6 is an icon for canceling the display of the authentication screen 104 and displaying the history screen 101.

[0154] When the user presses the biometric authentication icon Ai4 or the password icon Ai5 and inputs the specified information into the input screen displayed on the display unit 77, a defect report input screen 105 is displayed on the display unit 77 of the input device 1 (see Figure 13).

[0155] The defect report input screen 105 is provided with a history display icon Ai1, a report icon Ai0 indicating that the defect report input screen 105 is currently being displayed, a notification message to the user, an input field, and a report button Ai7. For example, a sentence as an input example is displayed in the input field.

[0156] When the user presses the report button Ai7 after completing the input in the input field, the input content and information identifying the user are sent to the server device 2. The server device 2 stores the history of the defect report.

[0157] 6. Screen Example 2 Next, a description will be given with reference to the attached drawing of screen example 2 displayed on the display unit 77 of the input device 1. Screen example 2 is an example of a screen presented to a user when multiple people gather and communicate in a virtual space such as an online chat room, metaverse, or network game.

[0158] An example of a screen that is displayed before or after entering such a virtual space is the authentication result display screen 106 shown in Fig. 14. The user viewing each screen is referred to as the "first user U1." The other user who is the target user of communication with the first user U1 is referred to as the "second user U2."

[0159] Furthermore, the first user U1 may be referred to as "Mr. A," and the multiple second users U2 may be referred to as "Mr. B," "Mr. C," "Mr. D," and so on.

[0160] On the authentication result display screen 106, a request button Ai8 and status information St are displayed for each second user U2.

[0161] The request button Ai8 is an operator for requesting that a first user U1, ie, Mr. A, continuously authenticate another user, ie, a second user U2.

[0162] The responses of other users to the request are displayed as status information St. Specifically, the request to B is not yet implemented ("Unrequested" in the figure). The request to C has been approved by C ("Allowed" in the figure). The request to D has been rejected by D ("Rejected" in the figure).

[0163] For example, when a first user U1, namely, Person A, operates the request button Ai8 to make a request to a second user U2, namely, Person B, a request selection screen 107 for selecting the content of the request is displayed on the display unit 77 of the input device 1 (see FIG. 15).

[0164] The request selection screen 107 displays a notification message to the user along with a first option Ai9 that does not request continuous identity authentication from Mr. B, a second option Ai10 that does not request identity authentication until the reliability becomes significantly low, a third option Ai11 that requests identity authentication when the reliability falls to a medium level, and a fourth option Ai12 that requests identity authentication when the reliability falls only slightly.

[0165] That is, the lower the option is placed, the more frequent and strict the personal authentication requirement for Mr. B is.

[0166] When the first user U1, Mr. A, operates one of the options, the display unit 77 of the input device 1 of the second user U2, Mr. B, displays a yes / no selection screen 200 with a notification message to Mr. B, as well as an OK button Ai13, a Refuse button Ai14, and request content Tx1 (see Figure 16).

[0167] The permission button Ai13 is an operator for approving a request from person A, and the rejection button Ai14 is an operator for rejecting a request from person A.

[0168] The request content Tx1 is a text message for notifying B of the details of the request made by A regarding the frequency of personal authentication. In the example of Fig. 16, the text message notifies B, the second user U2, that A, the first user U1, has requested infrequent and continuous personal authentication.

[0169] When an agreement on continuous identity authentication is reached between Mr. A and Mr. B, specifically when Mr. B presses the permission button Ai13 shown in Figure 16, a service screen 108 is displayed on the display unit 77 of Mr. A's input device 1, displaying a virtual space for communication with Mr. B (see Figure 17).

[0170] As shown in Figure 17, avatars AVa and AVb of users A and B are displayed in the virtual space, and score display bars Ba and Bb indicating the current level of the identity score Sc are placed next to each avatar AVa and AVb.

[0171] The identity score Sc of each user can be confirmed by the score display bars Ba and Bb. In addition, the avatars AVa and AVb may appear thinner as the identity score Sc decreases (see FIG. 18).

[0172] When the identity score Sc of each user falls below the agreed level, a logoff process is executed for the user whose identity score Sc has fallen below the level. As a result, a notification message informing the user that the communication partner (in this example, Person B) has been automatically logged off is displayed on the display unit 77 of the input device 1 of the communication partner (in this example, Person A) of the user who is the target of the logoff process (in this example, Person B), and the avatar AV of the communication partner is no longer displayed (see FIG. 19 ).

[0173] 17, 18, and 19, the display unit 77 of A's input device 1 displays a score display bar Ba for A himself / herself and a score display bar Bb for another user B in different formats. Specifically, the score display bar Ba for A himself / herself is displayed at a fine granularity such as 100 levels, whereas the score display bar Bb for another user is displayed at a coarse granularity such as 3 levels.

[0174] In addition, if the identity score Sc falls below an agreed level, the user may first be requested to perform an operation to increase the identity score Sc, and if the request is not complied with, a logoff process may be performed.

[0175] Although each of the diagrams in FIGS. 17 to 19 shows an example of one-to-one communication, a similar configuration can also be applied to a case where three or more people communicate simultaneously.

[0176] For example, an avatar AV and a score display bar B are displayed for each user participating in communication, and an automatic logoff process is executed when the identity score Sc falls below a level agreed upon by each user. At this time, the level of continuous identity authentication required by person A from person C may differ from the level of continuous identity authentication required by person B from person C. In this case, the logoff process is executed in accordance with the strictest requirement. This can eliminate inconsistencies such as the appearance that only some users are participating.

[0177] 7. Processing Example> An example of processing executed by the server device 2 to realize each of the above-described examples will be described. The CPU 71 of the server device 2 repeatedly executes the series of processing shown in FIG. 20 as long as the user continues to log in, and continuously calculates the identity score Sc for each user.

[0178] First, in step S101, the CPU 71 of the server device 2 determines whether or not the personal authentication has been successful within a certain time period.

[0179] If it is determined that the personal authentication has been successful within the certain time period (step S101: Yes), the CPU 71 determines in step S102 whether the result has been reflected in the personal identity score Sc. Then, only if the result has not been reflected in the personal identity score Sc (step S102: No), the CPU 71 performs a process of increasing the personal identity score Sc in step S103. After executing step S103, the CPU 71 returns to step S101.

[0180] On the other hand, after a No determination is made in step S101 or a Yes determination is made in step S102, the CPU 71 proceeds to step S104.

[0181] In step S104, the CPU 71 determines whether the identity score Sc is equal to or greater than the second threshold value Th2. If it is determined that the identity score Sc is less than the second threshold value Th2 (step S104: No), the CPU 71 performs processing in step S105 to request the user to authenticate themselves, and then proceeds to processing in step S108.

[0182] Furthermore, if it is determined that the identity score Sc is equal to or greater than the second threshold value Th2 (step S104: Yes), the CPU 71 determines in step S106 whether the identity score Sc remains equal to or greater than the second threshold value Th2 after a predetermined time period.

[0183] If it is determined that the second threshold value Th2 will be less than the second threshold value Th2 within the specified time (step S106: No), the CPU 71 executes a process in step S107 to recommend wearing the activity information device 1a, and proceeds to the process in step S108.

[0184] Furthermore, if it is determined in step S106 that the voltage is still equal to or greater than the second threshold value Th2 after the predetermined time period (step S106: Yes), the CPU 71 also proceeds to step S108.

[0185] In step S108, the CPU 71 performs a process of calculating (updating) the identity score Sc. In this process, the identity score Sc is calculated based on the identity score Sc calculated immediately before, the elapsed time since the previous calculation, and the decrease gradient. The initial value of the decrease gradient is set to the first gradient G1.

[0186] In step S109, the CPU 71 determines whether or not there is unprocessed second personal information D2 that has been acquired within a certain time period. If it is determined that there is no unprocessed second personal information D2 that has been acquired within a certain time period (step S109: No), the CPU 71 returns to the process of step S101.

[0187] On the other hand, if it is determined that there is unprocessed second personal information D2 within a certain period of time (step S109: Yes), the CPU 71 proceeds to step S110 and performs a process of storing the second personal information D2 in the memory unit 79.

[0188] Next, in step S111, the CPU 71 of the server device 2 determines whether it is possible to determine whether the second identity information D2 to be processed belongs to the person in question or to another person. If it is determined that it is not possible to determine the second identity information D2 (step S111: No), it cannot be determined that the second identity information D2 belongs to another person, and therefore the process returns to step S101 without changing the decreasing gradient of the identity score Sc.

[0189] On the other hand, if it is determined that the identity can be determined (step S111: Yes), the CPU 71 determines in step S112 whether or not the acquired second personal identification information D2 is that of the person in question.

[0190] If it is determined that the score belongs to the person in question (step S112: Yes), the CPU 71 performs a process of slowing down the gradient of decrease in the identity score Sc in step S113, and returns to the process of step S101. For example, in the process of step S113, a second gradient G2 that is slower than the first gradient G1 is calculated.

[0191] On the other hand, if it is determined that the personal information does not belong to the person in question, in other words, if it is determined that the personal information belongs to another person (step S112: No), the CPU 71 performs processing in step S114 to make the decrease gradient of the personal information score Sc steeper, and returns to the processing in step S101. For example, in the processing in step S114, a third gradient G3 steeper than the first gradient G1 is calculated.

[0192] Another example of processing executed by the CPU 71 of the server device 2 will be described with reference to FIG.

[0193] The CPU 71 of the server device 2 determines whether or not an operation requiring personal authentication has been detected in the input device 1. If it is determined that an operation requiring personal authentication has not been detected (step S200: No), the CPU 71 executes step S200 again.

[0194] On the other hand, if it is determined that an operation requiring personal authentication has been detected (step S200: Yes), the CPU 71 determines in step S201 whether the personal identity score Sc is equal to or greater than a first threshold value Th1. The first threshold value Th1 used here varies depending on the content of the operation performed by the user, etc.

[0195] If it is determined that the identity score Sc is equal to or greater than the first threshold value Th1 (step S201: Yes), the CPU 71 executes automatic authentication in step S202, which eliminates the need for the user to perform authentication, thereby reducing the burden on the user.

[0196] Furthermore, if it is determined that the identity score Sc is less than the first threshold value Th1 (step S201: No), the CPU 71 transmits a request for identity authentication to the input device 1 in step S203. As a result, an authentication screen or the like is presented on the input device 1 used by the user.

[0197] A modified example of the series of processes shown in Fig. 20 is shown in Fig. 22. Note that the same processes are given the same step numbers and descriptions thereof will be omitted.

[0198] In the modified example, the process is different when it is determined in the determination process of step S112 that the second identity information D2 does not belong to the user (step S112: No). Specifically, when it is determined that an abnormality has occurred because someone other than the user is using the input device 1, the CPU 71 of the server device 2 executes an automatic logoff process in step S121.

[0199] This makes it more difficult to perform any subsequent fraudulent operations, thereby improving security. Note that the personal authentication request of step S105 may be executed after the processing of step S121. If the user is confirmed to be the person in question in the personal authentication request of step S105, the user may continue to use the service.

[0200] 23 shows an example of processing executed by the server device 2 for the above-described screen example 2. In step S301, the CPU 71 of the server device 2 performs processing to present a login UI to the user. This processing is performed, for example, in response to the first user U1 launching an application for communicating with the second user U2.

[0201] In step S302, the CPU 71 of the server device 2 acquires the first personal information D1 in response to an input operation on the login UI.

[0202] In step S303, the CPU 71 of the server device 2 performs authentication processing using the first personal information D1, and performs branching processing depending on the result of the authentication processing.

[0203] If the authentication process fails (step S303: No), the CPU 71 of the server device 2 returns to the process of step S301 again.

[0204] On the other hand, if the authentication process is successful (step S303: Yes), the CPU 71 of the server device 2 proceeds to step S304 and checks whether there is a request for continued authentication for another user (second user U2).

[0205] For example, when the request button Ai8 shown in FIG. 14 is operated by the user, the CPU 71 of the server device 2 determines that there is a request for continuous authentication for another user.

[0206] If it is determined that the request has not been received (step S304: No), the CPU 71 of the server device 2 returns to step S304. Instead of returning to step S304, the CPU 71 of the server device 2 may display a screen for communication based on the assumption that the second user U2 may impersonate someone other than the first user U1. The first user U1 can communicate with the second user U2, who is another user, after acknowledging this.

[0207] If it is determined that there is a request for continued authentication for another user (step S304: Yes), the CPU 71 of the server device 2 notifies the second user U2, who is the requested user, of the content selected by the first user U1, i.e., information about which option was selected in Figure 15, in step S305.

[0208] In step S306, the CPU 71 of the server device 2 performs branching processing according to the selection result of the second user U2 regarding the allow button Ai13 or the reject button Ai14 shown in FIG.

[0209] If it is determined that the reject button Ai14 has been selected (step S306: No), the CPU 71 of the server device 2 notifies the first user U1, who is the requesting user, that the request has been rejected in step S307, and returns to step S307. Note that instead of returning to step S304, the CPU 71 of the server device 2 may display a screen for communication based on the assumption that the second user U2 may impersonate someone other than the second user U2.

[0210] If it is determined that the permission button Ai13 has been selected (step S306: Yes), the CPU 71 of the server device 2 starts communication between the first user U1 and the second user U2 in step S308. As a result, a screen such as that shown in FIG. 17 is presented to the first user U1.

[0211] In step S309, the CPU 71 of the server device 2 determines whether the identity score Sc for the first user U1 has fallen below the agreement level between users.

[0212] If it is determined that the identity score Sc is not below the agreement level between users (step S309: No), the CPU 71 of the server device 2 performs display processing according to the identity score Sc for the second user U2, who is another user, in step S310. As a result, processing such as displaying the avatar AV in a lighter color according to the identity score Sc of the second user U2 (see FIG. 18 ) is performed. Furthermore, if the automatic logoff processing for the second user U2 has been performed due to a decrease in the identity score Sc of the second user U2, a screen that does not display the second user U2 is presented to the first user U1, as shown in FIG. 19 .

[0213] Furthermore, if it is determined that the identity score Sc for the first user U1 falls below the agreement level between users (step S309: Yes), the CPU 71 of the server device 2 executes automatic logoff processing for the first user U1 in step S311. As a result, the first user U1 is no longer displayed on the screen presented to the second user U2.

[0214] In addition, by appropriately executing the processing of step S105 and step S107 shown in Figure 20 before the identity score Sc falls below the agreement level, the identity score Sc can be maintained above the agreement level, making it possible to avoid automatic logoff processing.

[0215] 8. Combination of Input Devices As described above, the input device 1 includes the source device 1s, the linked device 1c, the activity information device 1a, and the like.

[0216] These input devices 1 may be combined in any manner. For example, even when the source device 1s is used alone, by continuously acquiring the second identity information D2, it is possible to reduce the frequency of inputting a password or the like when unlocking the screen.

[0217] Furthermore, when the source device 1s and the linked device 1c are used in combination, the frequency of obtaining the second identity information D2 can be increased by using multiple devices, which makes the gradient of decrease in the identity score Sc more gradual, thereby reducing the frequency of identity authentication and increasing the possibility of automatic authentication without any action.

[0218] In addition, when the source device 1s and the activity information device 1a are used in combination, impersonation can be prevented by determining whether each terminal is being used by the person in question based on the second identity information D2 from the activity information device 1a.

[0219] Furthermore, when the source device 1s, linked device 1c, and activity information device 1a are used in combination, it is possible to determine whether or not a person is the person in question based on the information sequentially sent from the input device 1 to the server device 2, which is effective, for example, when managing personal information in a self-sovereign manner.

[0220] 9. Full-Screen Fingerprint Authentication The input device 1 used by the user may be a device capable of full-screen fingerprint authentication.

[0221] For example, the source device 1 s serving as the input device 1 may be provided with a full-screen fingerprint authentication function, so that each time a user touches the display unit 77 with their fingertip, the fingerprint of the finger used for the operation may be acquired.

[0222] By acquiring the user's fingerprint information each time the above-mentioned contact operation is performed on the source device 1s, fingerprint authentication is performed on the source device 1s or the server device 2, and the identity score Sc can be improved.

[0223] It should be noted that the manner in which a user's fingertip touches the input device 1 may differ from user to user. Therefore, the user's touch operation is an operation that can not only acquire first identity information D1 as fingerprint information, but also acquire second identity information D2 that differs from user to user, such as the way the finger was moved, the type of finger used for the operation (thumb, index finger, etc.), and which part of the fingertip was used for the operation.

[0224] 10. Second Embodiment The server device 2 of the authentication system Sys in the first embodiment has the various functions shown in Fig. 3. The server device 2 of the authentication system Sys in the second embodiment has some of the various functions shown in Fig. 3.

[0225] Specifically, the server device 2 in the authentication system Sys is an authentication service device 2a that manages the identity score Sc and provides identity authentication services for the identity score Sc (see FIG. 24).

[0226] In addition, an external server device 3 that provides unique services is provided outside the authentication system Sys. The unique services referred to here include various services such as the above-mentioned online shopping service, banking service, chat service, online game service, and communication service.

[0227] That is, the function provided by the authentication service device 2 a may be a function as SaaS (Software as a Service) that is used by the external server device 3 .

[0228] The external server device 3 provides a specific service using the identity score Sc provided by the authentication service device 2a.

[0229] The authentication service device 2a is, for example, a device that calculates and manages the identity score Sc and provides the identity score Sc.

[0230] For example, the authentication service device 2a provides a function for the identity score Sc when an external server device 3 managed by another company authenticates the identity of each user when providing a service. This enables the other company managing the external server device 3 to perform processing to confirm the identity of the user without having to prepare its own system for identity authentication.

[0231] In addition, the authentication service device 2a may receive information about login operations to external services provided by the external server device 3 from the external server device 3, and perform authentication processing based on the first identity information D1 and reflect the information in the identity score Sc.

[0232] The functions of the authentication service device 2a and the external server device 3 will be described with reference to Fig. 25 and Fig. 26. Note that duplicate explanations of the parts explained with reference to Fig. 3 will be avoided where appropriate.

[0233] As shown in FIG. 25, the CPU 71 of the authentication service apparatus 2a has an identity score calculation function F1, an inference function F4, an information presentation function F6, and a defect information management function F7.

[0234] As shown in FIG. 26, the CPU 71 of the external server device 3 has an automatic authentication function F2, an automatic logoff function F3, a request presentation function F5, and a service providing function F8.

[0235] As described above, the identity score calculation function F1 performs a process of calculating an identity score Sc for each account or each user. In this calculation process, the identity score Sc is calculated taking into account the result of authentication using the first identity information D1 obtained by the authentication action and the decreasing gradient due to the second identity information D2.

[0236] The information presentation function F6 is a function that presents various types of information in response to a request from the user or a request from the external server device 3.

[0237] For example, when the external server device 3 performs identity verification for a certain user, it sends a request to the authentication service device 2a to introduce the identity score Sc for the user, or sends a confirmation request to determine whether the identity score Sc for the user exceeds a threshold value.

[0238] In response to receiving the request from the external server device 3, the information presentation function F6 of the authentication service device 2a transmits the identity score Sc and the result of comparison with the threshold value to the external server device 3.

[0239] Based on the information provided by the authentication service device 2a, the external server device 3 activates an automatic authentication function F2, an automatic logoff function F3, or a request presentation function F5 that makes a request to increase the identity score Sc.

[0240] Note that, when a user is using various services provided by the external server device 3 through the service providing function F8, the information presentation function F6 of the authentication service device 2a may execute processing to notify the external server device 3 that the identity score Sc has decreased if the identity score Sc is about to fall below or has fallen below a level required for continued use of the service. In this case, the external server device 3 may be configured to transmit information on a threshold value for comparison with the identity score Sc to the authentication service device 2a. The authentication service device 2a can realize the above-mentioned notification using the threshold value received from the external server device 3.

[0241] In response to receiving this notification, the external server device 3 executes automatic logoff using the automatic logoff function F3, or executes processing to request authentication action for identity verification using the request presentation function F5.

[0242] Note that information transmission from the authentication service device 2a may be performed to an input device 1 such as a smartphone, instead of the external server device 3. For example, in response to an authentication action such as an unlocking operation or a sign-in (sign-on) operation of the source device 1s, the first identity information D1 is transmitted from the source device 1s to the authentication service device 2a. The authentication service device 2a performs identity authentication using the first identity information D1, and calculates an identity score Sc based on the result, etc.

[0243] The authentication service apparatus 2a transmits the current identity score Sc to the source device 1s, or transmits information indicating whether the identity score Sc exceeds a threshold or information indicating the success or failure of the authentication action for the source device 1s to the source device 1s.

[0244] The source device 1s determines whether the authentication action has been successful or not based on the information received from the authentication service apparatus 2a, and performs operations such as unlocking the terminal as appropriate.

[0245] In the example shown in FIG. 24, the authentication system Sys includes the input device 1, but the authentication system Sys may include only the authentication service apparatus 2a.

[0246] The CPU 71 of the authentication service device 2a in the second embodiment appropriately executes a series of processes shown in, for example, Figures 20, 21, 22, and 23, but some of the processes may be executed by the external server device 3.

[0247] Specifically, the processes in steps S105 and S107 in FIGS. 20 and 22, the processes in FIGS. 21 and 23 may be implemented by the external server device 3.

[0248] <11. Summary> As described in the above examples, the information processing method executed by a computer device such as the server device 2 or the authentication service device 2a involves the computer device continuously calculating an identity score Sc (step S108) using identity information, which is information that can determine whether a person is the person in question. The identity score Sc is continuously calculated based on activity information acquired after successful identity authentication through authentication, for example. Therefore, depending on the continuously calculated identity score Sc, it is possible to omit subsequent authentication actions or lengthen the interval between automatic logoff processes, thereby reducing the burden on the user and improving convenience. Furthermore, by reducing the number of authentication actions, the processing required for authentication can be reduced, thereby reducing the processing load on the edge device (input device 1) and the server device 2 and reducing communication traffic.

[0249] As described with reference to Figures 3 and 4, in the update process of the identity score Sc (step S108) executed by the computer device, the identity score Sc may be decreased with the passage of time at a first gradient G1. By calculating the identity score Sc so that it gradually decreases with the passage of time, authentication action is required again after a long period of time has passed. This makes it possible to suppress fraudulent behavior.

[0250] As described with reference to Figures 3 to 7, in the information processing method executed by a computer device, the influence of the first identity information D1 and the influence of the second identity information D2 on the identity score Sc may be different. For example, the acquired first identity information D1 has the effect of increasing the identity score Sc, and the acquired second identity information D2 has the effect of changing the degree of decrease in the identity score Sc. This allows the information acquired from the user to be appropriately reflected in the identity score Sc. Therefore, subsequent authentication processes, etc. can be performed appropriately.

[0251] As described with reference to each diagram such as Figures 3 to 7, in the process (step S108) of calculating the identity score Sc provided in the information processing method executed by the computer device, the identity score Sc may be increased if identity authentication based on the first identity information D1 is successful. The first identity information D1 is information obtained based on authentication behavior, for example, by a login operation. It is preferable that the identity score Sc is highest immediately after login and decreases over time. According to this configuration, the identity score Sc can be increased if identity authentication based on the first identity information D1 is successful.

[0252] As described with reference to each diagram, such as Figures 3 to 7, in the process (step S108) of calculating the identity score Sc provided in the information processing method executed by the computer device, if the acquired second identity information D2 indicates that the person is the person, the identity score Sc may be decreased at a second gradient G2 that is gentler than the first gradient G1. While the second identity information D2 is being properly acquired, it is likely that the person who logged in continues to operate the edge device (input device 1). In such a case, by slowing down the decrease in the identity score Sc, the time until authentication action is requested again can be extended, thereby reducing the burden on the user.

[0253] As described with reference to Figures 3 and 6, in the process (step S108) of calculating the identity score Sc included in the information processing method executed by the computer device, if the acquired second identity information D2 indicates that the person is not the person in question, the identity score Sc may be reduced by a third gradient G3 steeper than the first gradient G1. For example, if the second identity information D2 is voice information and includes a voice other than that of the person in question, there is a possibility that the edge device (input device 1) is being used by a user other than the person in question. In such a case, fraudulent use can be prevented by accelerating the reduction of the identity score Sc and shortening the time until authentication action is requested again.

[0254] As described with reference to Figures 3, 6, and 7, in the information processing method executed by the computer device, the impact on the identity score Sc may differ depending on the content of the first identity information D1 and the second identity information D2. The content of the first identity information D1 may be, for example, the type of authentication behavior related to the first identity information D1 or the type of edge device (input device 1) used for the authentication behavior. The content of the second identity information D2 may be, for example, the type of edge device (input device 1) from which the activity information was acquired. By changing the rate of increase in the identity score Sc or the rate of change in the gradient depending on the content of the identity information, it is possible to optimize the balance between reducing the user's burden and preventing fraudulent activities.

[0255] As described with reference to Figures 3 and 5, in the process (step S108) of calculating the identity score Sc included in the information processing method executed by the computer device, the increase in the identity score Sc may be varied depending on at least one of the type of device (input device 1) that was the target of the authentication action related to the first identity information D1 and the type of authentication action related to the first identity information D1. For example, when comparing a smartphone with a PC, the smartphone is more personal. With this configuration, for example, it is possible to increase the increase when the device used in the authentication action is a PC compared to the increase when the device is a PC. Furthermore, when comparing four-digit password authentication and eight-digit password authentication as types of authentication action, the authentication strength of the eight-digit password authentication is higher. With this configuration, it is possible to increase the increase when eight-digit password authentication is performed compared to the increase when four-digit password authentication is performed.

[0256] As described with reference to Figures 3 and 6, in the process (step S108) of calculating the identity score Sc included in the information processing method executed by the computer device, the identity score Sc may be decreased at a gradient determined depending on the type of device related to the second identity information D2. For example, when comparing a smartphone with a PC, it can be considered that the smartphone is more personal, and that the activity information acquired on the smartphone is more representative of the identity. This configuration makes it possible to appropriately determine the degree of identity assurance depending on the type of edge device (input device 1) from which the activity information was acquired, and to change the rate of decrease in the identity score Sc. Therefore, a more appropriate identity score Sc can be calculated.

[0257] As described with reference to Figures 3, 6, etc., in the process (step S108) of calculating the identity score Sc included in the information processing method executed by the computer device, the identity score Sc may be reduced at a gradient determined depending on the type of second identity information D2. For example, when comparing activity information based on audio information acquired by an edge device (input device 1) capable of acquiring audio with activity information based on device movement acquired by an edge device (input device 1) capable of acquiring IMU data, the former is considered to be activity information with a higher degree of identity assurance. This configuration makes it possible to appropriately determine the degree of identity assurance depending on the type of activity information and change the rate of reduction of the identity score Sc. Therefore, a more appropriate identity score Sc can be calculated.

[0258] As described with reference to each diagram, such as Figures 3 to 5, in an information processing method executed by a computer device, when a user performs an operation requiring identity authentication, the computer device may execute a process (step S201) of comparing the identity score Sc at the time of the operation with a first threshold Th1, and a process (step S202) of skipping identity authentication if the identity score Sc is equal to or greater than the first threshold Th1. That is, whether or not identity authentication is to be performed can be determined depending on the identity score Sc. Therefore, if the identity score Sc is high, the identity authentication process can be skipped, and if the identity score Sc is low, the identity authentication process can be performed. This makes it possible to appropriately reduce the burden on the user and prevent fraudulent behavior.

[0259] As described with reference to FIG. 3 and other figures, in the information processing method executed by a computer device, the first threshold Th1 may be set to vary depending on the type of operation requiring identity authentication. For example, in the case of banking operations, the types of operations include a deposit balance inquiry operation and a payment operation. By setting the first threshold Th1 higher for a payment operation than for a deposit balance inquiry operation, identity authentication is required for operations that have a greater impact on the user if they cause harm to the user, and identity authentication is not required for operations that have a smaller impact. This makes it possible to appropriately reduce the burden on users and prevent fraudulent activities.

[0260] As described with reference to Figures 3, 6, etc., in the information processing method executed by the computer device, the computer device may execute a process (e.g., step S121) of automatically logging off when an abnormality is detected. An abnormality may be detected, for example, when a login operation is performed on an edge device (input device 1) that is far from the device, or when a login operation is performed in a different country or region. In such cases, executing the automatic logoff process makes it possible to appropriately suppress fraudulent activities.

[0261] As described with reference to Figures 3, 7, etc., in the information processing method executed by the computer device, the computer device may execute a process (step S105) of prompting authentication behavior when the calculated identity score Sc is less than the second threshold value Th2. If the identity score Sc becomes low, it may be better not to proceed with the process, since identity cannot be guaranteed even for operations that do not require identity authentication. According to this configuration, by executing a process of prompting authentication behavior in such cases, it is possible to prevent the identity score Sc from decreasing too much.

[0262] As described with reference to Figures 3 and 11, in the information processing method executed by the computer device, the computer device may execute a process of determining whether the identity score Sc will become less than the second threshold value Th2 within a predetermined time (step S106), and a process of prompting the user to take action to obtain activity information if it is determined that the identity score Sc will become less than the second threshold value Th2 (step S106: No). If it is predicted in advance that the identity score Sc will become too low in the near future, the user can be prompted to wear an edge device (input device 1) that can obtain activity information in order to slow the rate of decrease in the identity score Sc, thereby extending the time until authentication action is required. This reduces the number of subsequent authentication actions and reduces the burden on the user.

[0263] As described above, in the information processing method executed by the computer device, the first identity information D1 may be information obtained based on a touch operation on a device (input device 1) having a full-screen fingerprint authentication function. This allows the first identity information D1 to be transmitted to the server device 2 simply by the user performing a touch operation that is not an authentication operation, thereby enabling identity verification without the user being aware that they are performing an authentication action. Furthermore, for example, identity verification by fingerprint authentication is automatically performed when the user is simply browsing a webpage, which allows the user to skip authentication actions solely for identity verification even in situations requiring relatively strong authentication actions, such as payment operations, thereby improving convenience. Note that the touch operation here refers to an operation of contacting at least a part of a fingerprint with the display unit 77 of the input device 1, and includes various operations such as tapping, swiping, and flicking.

[0264] As described with reference to Figures 8 to 10, in the information processing method executed by a computer device, the computer device may execute a process for displaying the history of authentication actions (a process for presenting the screens shown in Figures 9, 10, etc.). This allows the user to know whether or not fraudulent authentication actions have been performed by others. Therefore, if traces of fraudulent activity are discovered, it is possible to quickly take action and reduce damage.

[0265] As described with reference to each of Figures 8 to 11 , in the information processing method executed by a computer device, the computer device may execute a process of displaying time-series data of the identity score Sc (a process of presenting the screens shown in Figures 9 , 10 , and 11 , etc.). By having the user check the time-series data of the identity score Sc, it becomes possible to more appropriately discover fraudulent authentication behavior by others.

[0266] As described with reference to each of the drawings such as Figures 17 to 19 and 23, in an information processing method executed by a computer device, the computer device may execute a process of displaying the identity score Sc for the first user U1, who is the user himself, and the identity score Sc for the second user U2, who is a different person, in different modes (a process of displaying in the modes shown in Figures 17 and 18). For example, the identity score Sc for the first user U1 can be displayed in detail, and the identity of the second user U2 can be displayed as a rough guide. Therefore, the user can roughly grasp whether the second user U2, who is a different person, is impersonating the user, and can take appropriate action, such as avoiding highly confidential topics.

[0267] The server device 2 as an information processing device is equipped with a calculation unit (identity score calculation function F1 of CPU 71) that continuously calculates an identity score Sc using identity information, which is information that can determine whether or not a person is the identity of the person, including first identity information D1, which is identity information based on authentication behavior, and second identity information D2, which is identity information based on activity information.

[0268] The authentication system Sys comprises one or more edge devices (input device 1) that are target devices for authentication actions to authenticate identity and are capable of acquiring activity information, and a server device 2 that acquires from the edge device (input device 1) identity information that can be used to determine whether a person is the identity of the person, including first identity information D1 that is identity information based on authentication actions and second identity information D2 that is identity information based on activity information, and continuously calculates an identity score Sc using the first identity information D1 and the second identity information D2.

[0269] The program of the embodiment is a program that causes a processor such as a CPU to execute the various processes described above. Such a program enables the processor such as a microcomputer to realize each function of the server device 2 described above.

[0270] These programs can be pre-recorded on a hard disk drive (HDD) or a ROM in a microcomputer having a CPU, which serves as a built-in recording medium in a computer or other device. Alternatively, the programs can be temporarily or permanently stored (recorded) on removable recording media such as a flexible disk, a CD-ROM (Compact Disc Read Only Memory), a Magneto Optical (MO) disc, a DVD (Digital Versatile Disc), a Blu-ray Disc (registered trademark), a magnetic disk, a semiconductor memory, or a memory card. Such removable recording media can be provided as so-called packaged software. Furthermore, such programs can be installed on a personal computer or the like from a removable recording medium, or can be downloaded from a download site via a network such as a local area network (LAN) or the Internet.

[0271] The effects described in this specification are merely examples and are not limiting, and other effects may also be present.

[0272] Furthermore, the above-described examples may be combined in any manner, and even when various combinations are used, the various effects described above can be obtained.

[0273] <12. The Present Technology> (1) An information processing method in which a computer device executes a process of continuously calculating an identity score using identity information, which is information that can determine whether a person is the real person, including first identity information that is identity information based on authentication behavior and second identity information that is identity information based on activity information. (2) The information processing method described in (1) above, in which, in the identity score update process, the identity score is decreased with a first gradient over time. (3) The information processing method described in (2) above, in which the influence of the first identity information and the influence of the second identity information on the identity score are different. (4) The information processing method described in (3) above, in which, in the identity score calculation process, the identity score is increased if identity authentication based on the first identity information is successful. (5) The information processing method described in any of (3) to (4) above, in which, in the identity score calculation process, the identity score is decreased with a second gradient G2 that is gentler than the first gradient if the acquired second identity information indicates that the person is the real person. (6) The information processing method according to any of (3) to (5), wherein, in the process of calculating the identity score, the identity score is reduced at a third gradient steeper than the first gradient if the acquired second identity information indicates that the person is not the identity of the person. (7) The information processing method according to any of (1) to (6), wherein the impact on the identity score is made to differ depending on the contents of the first identity information and the second identity information. (8) The information processing method according to (7), wherein, in the process of calculating the identity score, the extent of increase in the identity score is made to differ depending on at least one of the type of device that was the target of the authentication action related to the first identity information and the type of the authentication action related to the first identity information. (9) The information processing method according to any of (7) to (8), wherein, in the process of calculating the identity score, the identity score is reduced at a gradient determined depending on the type of device related to the second identity information.(10) The information processing method according to any one of (7) to (9), wherein, in the process of calculating the identity score, the identity score is decreased with a gradient determined according to the type of the second identity information. (11) The information processing method according to any one of (1) to (10), wherein, when a user performs an operation requiring identity authentication, a computer device executes the following processes: comparing the identity score at the time of the operation with a first threshold; and skipping the identity authentication if the identity score is equal to or greater than the first threshold. (12) The information processing method according to (11), wherein the first threshold differs depending on the type of the operation requiring identity authentication. (13) The information processing method according to any one of (1) to (12), wherein a computer device executes a process of automatically logging off when an abnormality is detected. (14) The information processing method according to any one of (1) to (13), wherein, when the calculated identity score is less than a second threshold, a computer device executes a process of prompting the authentication action. (15) The information processing method according to (14), wherein a computer device executes the following processes: determining whether the identity score will become less than the second threshold within a predetermined time; and, when it is determined that the identity score will become less than the second threshold, prompting a user to take action to obtain the activity information. (16) The information processing method according to any of (1) to (15), wherein the first identity information is information obtained based on a touch operation on a device having a full-screen fingerprint authentication function. (17) The information processing method according to any of (1) to (16), wherein a computer device executes the process of displaying time-series data of the identity score. (18) The information processing method according to any of (1) to (17), wherein a computer device executes the process of displaying the identity score for a first user who is the identity user and the identity score for a second user who is another user in different modes. (19) An information processing device including a calculation unit that continuously calculates an identity score using identity information, which is information that can determine whether a person is the person in question, including first identity information, which is identity information based on authentication behavior, and second identity information, which is identity information based on activity information.(20) An authentication system comprising: one or more edge devices that are target devices for authentication actions to authenticate identity and that are capable of acquiring activity information; and a server device that acquires from the edge devices identity information that can determine whether a person is the identity of the person, including first identity information that is identity information based on the authentication action and second identity information that is identity information based on the activity information, and continuously calculates an identity score using the first identity information and the second identity information.

[0274] REFERENCE SIGNS LIST 1 Input device (edge ​​device) 2 Server device (information processing device, computer device) 2a Authentication service device (information processing device, computer device) Sys Authentication system D1 First identity information D2 Second identity information Sc Identity score G1 First gradient G2, G2a, G2b Second gradient G3 Third gradient Th1 First threshold Th2 Second threshold U1 First user U2 Second user

Claims

1. An information processing method in which a computer device executes a process of continuously calculating an identity score using identity information that can be used to determine whether a person is the actual person, the identity information being first identity information based on authentication behavior, and the identity information being second identity information based on activity information.

2. The information processing method according to claim 1, wherein the identity score is decreased with a first gradient over time in the updating process of the identity score.

3. The information processing method according to claim 2, wherein the influence of the first identity information and the influence of the second identity information on the identity score are different.

4. The information processing method according to claim 3, wherein in the process of calculating the identity score, the identity score is increased if identity authentication based on the first identity information is successful.

5. An information processing method as described in claim 3, wherein in the process of calculating the identity score, if the acquired second identity information indicates that the person is the identity of the person, the identity score is reduced with a second gradient G2 which is gentler than the first gradient.

6. An information processing method as described in claim 3, wherein in the process of calculating the identity score, if the acquired second identity information indicates that the person is not the actual person, the identity score is reduced with a third gradient steeper than the first gradient.

7. The information processing method according to claim 1, wherein the influence on the identity score varies depending on the contents of the first identity information and the second identity information.

8. An information processing method as described in claim 7, wherein in the process of calculating the authenticity score, the increase in the authenticity score is varied depending on at least one of the type of device that was the subject of the authentication action related to the first authenticity information and the type of the authentication action related to the first authenticity information.

9. The information processing method according to claim 7, wherein in the process of calculating the identity score, the identity score is reduced with a gradient determined according to the type of device related to the second identity information.

10. The information processing method according to claim 7, wherein in the process of calculating the identity score, the identity score is decreased with a gradient determined according to the type of the second identity information.

11. The information processing method of claim 1, wherein when a user performs an operation requiring identity authentication, a computer device executes the following processes: a process of comparing the identity score at the time of the operation with a first threshold; and a process of skipping the identity authentication if the identity score is equal to or greater than the first threshold.

12. The information processing method according to claim 11, wherein the first threshold value varies depending on the type of the operation that requires the personal authentication.

13. The information processing method according to claim 1, wherein the computer device executes a process for automatically logging off when an abnormality is detected.

14. The information processing method according to claim 1, wherein a computer device executes a process for prompting the authentication action when the calculated identity score is less than a second threshold value.

15. The information processing method described in claim 14, wherein a computer device executes a process of determining whether the personality score will become less than the second threshold within a predetermined time, and a process of prompting the user to take action to obtain the activity information if it is determined that the personality score will become less than the second threshold.

16. The information processing method according to claim 1, wherein the first identity information is information obtained based on a touch operation on a device having a full-screen fingerprint authentication function.

17. The information processing method according to claim 1, wherein a computer device executes a process for displaying the time series data of the identity score.

18. The information processing method according to claim 1, wherein a computer device executes a process for displaying the identity score for a first user who is the person in question and the identity score for a second user who is a different person in different formats.

19. An information processing device having a calculation unit that continuously calculates an identity score using identity information that can be used to determine whether a person is the actual person, the identity information being first identity information based on authentication behavior, and the identity information being second identity information based on activity information.

20. An authentication system comprising: one or more edge devices which are target devices for authentication actions to authenticate identity and which are capable of acquiring activity information; and a server device which acquires from the edge devices identity information which is information capable of determining whether a person is the identity of the person, the identity information being first identity information which is based on the authentication action and second identity information which is based on the activity information, and continuously calculates an identity score using the first identity information and the second identity information.

Images