Terminal, system, terminal control method, and storage medium

Abstract

Provided is a terminal that contributes to preventing the unauthorized use of a certificate or the like stored in a smartphone or the like. The terminal comprises a storage means and a use control means. The storage means stores biometric information of a user acquired when a digital wallet is opened, and stores, in the digital wallet, a certificate issued from a certificate issuer. The use control means provides, to a service provider, at least the stored biometric information and the certificate stored in the digital wallet and designated by the service provider.

Description

Terminal, system, terminal control method and storage medium

[0001] The present invention is based on the priority claim of Japanese Patent Application No. 2023-148273 (filed September 13, 2023), the entire contents of which are incorporated herein by reference. The present invention relates to a terminal, a system, a terminal control method, and a program.

[0002] There are technologies for authenticating users.

[0003] For example, Patent Document 1 describes a system that achieves combined ID and facial authentication without registering the visitor's facial image data in the system. The mobile terminal in Patent Document 1 generates a two-dimensional code from an authentication ID previously acquired from an information management device and features of the visitor's facial image, and displays the two-dimensional code on a screen. The entry / exit control device acquires the authentication ID issued by the information management device in advance and acquires the authentication ID and features of the visitor's facial image read from the two-dimensional code displayed on the mobile terminal. The entry / exit control device compares the authentication ID acquired from the two-dimensional code with the authentication ID issued by the information management device, and further compares the features of the visitor's facial image acquired from the two-dimensional code with the features of the visitor's facial image captured by a camera that photographs visitors entering and exiting the room.

[0004] Japanese Patent Application Laid-Open No. 2022-135182

[0005] As disclosed in Patent Document 1, a server on a network often centrally manages the IDs of users (users receiving services). However, in recent years, due to growing awareness of personal information protection, systems in which users themselves manage their information (self-sovereign systems) have begun to become widespread.

[0006] In a self-sovereign system, electronic certificates are stored on devices such as smartphones owned by individuals. When a user receives a service, the certificate stored on the smartphone is provided to the service provider.

[0007] The above system assumes that the user who received the certificate stored on the smartphone is the same person who uses the certificate (the user who provides the certificate to the service provider). However, existing systems do not verify that the person to whom the certificate was issued is the same person who uses the certificate. As a result, there is a concern that the certificate may be misused.

[0008] The main object of the present invention is to provide a terminal, a system, a terminal control method, and a program that contribute to preventing the fraudulent use of certificates and the like stored in smartphones and the like.

[0009] According to a first aspect of the present invention, there is provided a terminal comprising: a storage means for storing a user's biometric information obtained when a digital wallet is opened, and storing a certificate issued by a certificate issuer in the digital wallet; and a usage control means for providing a service provider with at least the stored biometric information and a certificate stored in the digital wallet that is specified by the service provider.

[0010] According to a second aspect of the present invention, there is provided a system including a service provider device and a terminal carried by a user, the terminal comprising a storage means for storing the user's biometric information obtained when a digital wallet is opened and storing a certificate issued by a certificate issuer in the digital wallet, and a usage control means for providing the service provider device with at least the stored biometric information and a certificate stored in the digital wallet that is specified by the service provider.

[0011] According to a third aspect of the present invention, there is provided a terminal control method comprising: a storage step of storing a user's biometric information obtained when a digital wallet is opened and storing a certificate issued by a certificate issuer in the digital wallet; and a usage control step of providing a service provider with at least the stored biometric information and a certificate stored in the digital wallet that is specified by the service provider.

[0012] According to a fourth aspect of the present invention, there is provided a program for causing a computer installed in a terminal to execute a storage process for storing a user's biometric information obtained when a digital wallet is opened and storing a certificate issued by a certificate issuer in the digital wallet, and a usage control process for providing a service provider with at least the stored biometric information and a certificate stored in the digital wallet that is specified by the service provider.

[0013] According to each aspect of the present invention, a terminal, a system, a terminal control method, and a program are provided that contribute to preventing fraudulent use of certificates and the like stored in smartphones and the like. Note that the effects of the present invention are not limited to those described above. The present invention may achieve other effects instead of or in addition to the effects described above.

[0014] FIG. 1 is a diagram illustrating an overview of an embodiment. FIG. 2 is a flowchart illustrating an operation of an embodiment. FIG. 3 is a diagram illustrating an example of a schematic configuration of an information processing system according to an embodiment of the present disclosure. FIG. 4 is a diagram illustrating an example of a display on a terminal according to an embodiment of the present disclosure. FIG. 5 is a diagram illustrating an operation of the information processing system according to an embodiment of the present disclosure. FIG. 6 is a diagram illustrating an operation of the information processing system according to an embodiment of the present disclosure. FIG. 7 is a diagram illustrating an example of a processing configuration of a terminal according to an embodiment of the present disclosure. FIG. 8 is a flowchart illustrating an example of an operation of an identity verification unit according to an embodiment of the present disclosure. FIG. 9 is a flowchart illustrating an example of an operation of an acquisition control unit according to an embodiment of the present disclosure. FIG. 10 is a diagram illustrating an example of a processing configuration of a server device according to an embodiment of the present disclosure. FIG. 11 is a diagram illustrating an example of a processing configuration of a service server according to an embodiment of the present disclosure. FIG. 12 is a flowchart illustrating an example of an operation of a service provision control unit according to an embodiment of the present disclosure. FIG. 13 is a sequence diagram illustrating an example of an operation of the information processing system according to an embodiment of the present disclosure. FIG. 14 is a sequence diagram illustrating an example of an operation of the information processing system according to an embodiment of the present disclosure. FIG. 15 is a diagram illustrating an operation of an information processing system according to a modified example of an embodiment of the present disclosure. FIG. 16 is a diagram illustrating an example of a display on a terminal according to a modified example of an embodiment of the present disclosure. FIG. 17 is a diagram illustrating an example of a hardware configuration of a terminal according to the present disclosure.

[0015] First, an overview of one embodiment will be described. Note that the reference numerals in the drawings are added to each element for convenience as an example to facilitate understanding, and the description of this overview is not intended to be limiting in any way. Furthermore, unless otherwise specified, the blocks shown in each drawing represent functional units, not hardware units. Connection lines between blocks in each drawing include both bidirectional and unidirectional lines. Unidirectional arrows are used to schematically indicate the flow of the main signal (data) and do not exclude bidirectionality. Note that in this specification and drawings, elements that can be similarly described may be assigned the same reference numerals to avoid redundant explanation.

[0016] A terminal 100 according to one embodiment includes a storage unit 101 and a usage control unit 102 (see FIG. 1). The storage unit 101 stores the user's biometric information acquired when the digital wallet is opened, and stores a certificate issued by a certificate issuer in the digital wallet (step S1 in FIG. 2). The usage control unit 102 provides the service provider with at least the stored biometric information and a certificate stored in the digital wallet that is specified by the service provider (step S2).

[0017] When opening a digital wallet, the terminal 100 performs identity verification using biometric information. If the identity verification is successful, the terminal 100 stores the biometric information used when opening the digital wallet. When the user receives a service from a service provider, the terminal 100 provides the stored biometric information to the service provider. The service provider can perform one-to-one authentication using the biometric information acquired from the terminal 100 (the biometric information when opening the digital wallet) and the biometric information of the user in front (the holder of the terminal 100). By authenticating the user who wishes to receive a service, the service provider can confirm that the person to whom the certificate stored in the digital wallet is issued and the person requesting the service are the same person. As a result, fraudulent acts of attempting to receive a service using another person's smartphone, etc. are prevented. In other words, fraudulent use of certificates, etc. stored in a smartphone, etc. is prevented.

[0018] Specific embodiments will be described in more detail below with reference to the drawings.

[0019] First Embodiment The first embodiment will be described in more detail with reference to the drawings.

[0020] [System Configuration] As shown in FIG. 3, the information processing system according to the first embodiment includes at least one certificate issuer and at least one service provider.

[0021] A certificate issuer is an entity that issues certificates to users. Specifically, a certificate issuer is an organization or the like that has the authority to issue certificates that certify the "qualifications" of users. For example, a certificate issuer issues certificates that certify the user's identity, certificates that certify the user's affiliation (or past affiliation), certificates that certify the user's capabilities, etc.

[0022] For example, a certificate issuer would be a public institution that issues identification documents such as a driver's license, passport, or My Number card. Alternatively, a certificate issuer would be a company that issues employment certificates to its employees or retirees, or an educational institution such as a university or vocational school that issues graduation certificates to graduates. Alternatively, a certificate issuer would be an organization or association that issues certificates certifying the qualifications or language proficiency required for a specific job.

[0023] Each certificate issuer is equipped with a server device 10. The server device 10 is a server that performs the processes and operations necessary to carry out the business of the certificate issuer. The server device 10 may be managed and operated by the certificate issuer, or may be managed and operated by another business or the like. The server device 10 may be installed within the premises of the certificate issuer, or may be installed on a network (on the cloud).

[0024] A certificate issuer issues a certificate in response to a request from a user. For example, a company issues an employment certificate (certificate of employment, certificate of employment) in response to a request from an employee.

[0025] A service provider is a business that provides services to users. For example, a business that provides job change support (job change matching) services or employment support (job matching) services is an example of a service provider. Another example of a service provider is a general company that uses job change support services or employment support services to interview job seekers or job seekers.

[0026] Alternatively, examples of service providers include banks, securities companies, etc. that provide financial services. Alternatively, service providers include operators of transportation such as railways, buses, and airplanes. Alternatively, service providers include operators of retail stores, restaurants, etc. Service providers are not limited to private companies, and also include public institutions such as city halls, and organizations such as NGOs (Non-Governmental Organizations) and NPOs (Non-Profit Organizations).

[0027] Depending on the type and business model of the service provider, the same business may act as both a certificate issuer and a service provider.

[0028] A service provider requires a user to present at least one certificate that corresponds to the business of the service provider (the organization). For example, a job change support service provider requires a service user to provide an employment certificate, a graduation certificate, etc.

[0029] Each service provider has a service server 20 and a business terminal 21 for providing services to users. For example, the service server 20 provides services to users via a website.

[0030] Alternatively, an employee of the service provider provides the service to the user by operating the business operator terminal 21. The business operator terminal 21 may be a terminal such as a personal computer, a tablet terminal, a POS (Point of Sale) terminal, or a signage terminal.

[0031] Alternatively, the service server 20 and the business operator terminal 21 may be connected, and employees of the service provider may provide services to users while referring to information stored in the service server 20 via the business operator terminal 21.

[0032] When providing a service to a user, the service server 20 and the provider terminal 21 verify at least one certificate presented by the user. By verifying the certificate, the service server 20 and the provider terminal 21 confirm that the certificate, which is the basis for providing the service to the user, has not been tampered with and has been issued by a legitimate issuer. If the certificate verification is successful, the service is provided to the user.

[0033] A user possesses a terminal 30. For example, the user operates the terminal 30 to request (demand) the issuance of a certificate from a certificate issuer. The user also uses the terminal 30 to provide the service provider with a certificate (e.g., an employment certificate or a graduation certificate) that the service provider requests.

[0034] 3 are connected to a network. Specifically, the server device 10, the service server 20, the operator terminal 21, and the terminal 30 are connected to the network by wired or wireless communication means.

[0035] The configuration of the information processing system shown in Figure 3 is an example and is not intended to be limiting. For example, each certificate issuer may include multiple server devices 10. Similarly, each service provider may include multiple service servers 20 and multiple business terminals 21.

[0036] [Overall Operation] Next, an overall operation of the information processing system according to the first embodiment will be described.

[0037] <Preparing a Digital Wallet> The user terminal 30 has a digital wallet function. A digital wallet is an electronic information storage service that guarantees information security such as data integrity, reliability, and availability.

[0038] A user installs an application for realizing a digital wallet on their terminal 30. By opening a digital wallet on terminal 30, the user can store various digital content on terminal 30, such as electronic money, identification documents such as a student ID, passport or driver's license, various ticket information such as airline tickets or boarding passes, and vaccination certificates.

[0039] For example, the user's terminal 30 stores digital content such as that shown in Fig. 4. The digital content stored in the terminal 30 includes official identification documents such as passports and driver's licenses, as well as employment certificates and graduation certificates issued by companies and universities.

[0040] When the digital wallet application is launched for the first time, the terminal 30 performs identity verification using an identification card issued by a public institution such as a government agency. The terminal 30 also performs identity verification of the user when opening a digital wallet.

[0041] For example, the terminal 30 performs identity verification using an identification document that contains the biometric information of the holder, such as a My Number card or a passport. The terminal 30 uses the My Number card or the passport as a root of trust.

[0042] Examples of biometric information include data (features) calculated from physical characteristics unique to an individual, such as a face, fingerprint, voiceprint, veins, retina, or iris pattern. Alternatively, the biometric information may be image data such as a face image or fingerprint image. The biometric information may be any information that includes the user's physical characteristics. In this disclosure, a case where biometric information related to a person's "face" (a face image or features generated from a face image) is used will be described.

[0043] The terminal 30 acquires information about the holder (issuer) of the identification card from the user's identification card. For example, the terminal 30 acquires information about the holder of the My Number card from an integrated circuit (IC) of the My Number card.

[0044] Specifically, the terminal 30 acquires basic information of the cardholder (the so-called four basic pieces of information: name, sex, date of birth, and address) and biometric information (facial image) of the cardholder. The terminal 30 stores the basic information and biometric information read from the card.

[0045] Furthermore, the terminal 30 acquires biometric information of the user (the person who opened the digital wallet). For example, the terminal 30 acquires and stores a facial image of the user by photographing the user.

[0046] The terminal 30 performs a matching process (authentication process) using the biometric information acquired from the identification card and the biometric information of the user. If the authentication process (one-to-one authentication) is successful, the terminal 30 opens a digital wallet. The terminal 30 confirms through the matching process (authentication process) using the biometric information that the person in whose name the identification card was issued and the user using the digital wallet of the terminal 30 are the same person.

[0047] <Issuance of a Certificate> A user acquires digital content to be stored in a digital wallet. For example, the user operates the terminal 30 to request the certificate issuer to issue a certificate. For example, the user requests (requests) the issuance of an employment certificate from their employer or the company from which they left.

[0048] Specifically, the digital wallet application requests the issuance of an employment certificate from a company that issues the certificate. The certificate issuer issues verifiable credentials (VCs) as certificates, whose contents can be verified online. In the following explanation, VCs will be referred to as "credential certificates."

[0049] Prior to requesting the issuance of a credential certificate, the user's terminal 30 generates a pair of a public key and a private key. The terminal 30 also generates a decentralized identifier (DID). The terminal 30 registers the generated DID (user ID; holder ID) and public key in the blockchain (step S01 in FIG. 5).

[0050] Furthermore, the user's terminal 30 presents the user ID and requests the certificate issuer (server device 10) to issue a credential certificate. Specifically, the terminal 30 transmits a "certificate issuance request" including information about the certificate to be issued, information identifying the user (e.g., employee number, student ID number, etc.), the user ID, etc. to the certificate issuer's server device 10 (step S02).

[0051] The server device 10 generates and stores in advance the DID (issuer ID), private key, and public key of the issuer.

[0052] Upon receiving a certificate issuance request, the certificate issuer determines whether the user requesting the issuance of a credential certificate (VC) is eligible to receive the certificate. For example, the server device 10 determines whether the user requesting the issuance of an employment certificate is currently employed by the company (whether the user was previously employed by the company).

[0053] If the user is eligible to receive a credential certificate, the server device 10 generates a credential certificate (VC) including an issuer ID and a user ID.

[0054] Specifically, the server device 10 generates a credential certificate (VC) that includes metadata including the type of credential certificate, the name of the issuing organization, the date and time of issuance, etc., a qualification information body, and the issuer's public key information, electronic signature, etc. Note that the qualification information body describes specific information certified by the issuer (for example, information about the employee's employment status, etc.).

[0055] The server device 10 transmits the generated credential certificate to the terminal 30 of the user (the user who will become the certificate holder; the person requesting the issuance of the certificate) (certificate issuance; step S03).

[0056] Furthermore, the server device 10 registers the issuer ID and the generated public key, etc. in the blockchain (step S04).

[0057] The terminal 30 stores the received credentials (VCs) in the digital wallet. For example, when the terminal 30 requests the issuance of an employment certificate from the employer, the terminal 30 stores the credentials (VCs) related to the employee's employment in the digital wallet.

[0058] <Use of certificates> A user presents a certificate required by a service provider to the service provider. For example, a user considering changing jobs would present an employment certificate or graduation certificate to a job change support service provider.

[0059] The operation of the information processing system will be described below by taking as an example the case where a user receives job change support services.

[0060] First, the user registers to receive the job change support service. The user operates the terminal 30 to access the service server 20 of the job change support service provider.

[0061] When a user requests the provision of a service, the service server 20 acquires the biometric information (facial image) stored in the terminal 30 and the biometric information (facial image) of the operator operating the terminal 30. For example, the service server 20 transmits a "biometric information provision request" to the terminal 30 (step S11 in FIG. 6).

[0062] When the terminal 30 receives the biometric information provision request, the terminal 30 captures an image of the operator operating the terminal 30 to acquire biometric information (a facial image) of the operator. The terminal 30 then transmits the acquired biometric information and pre-registered biometric information (the facial image used for identity verification) to the service server 20 (step S12).

[0063] The service server 20 verifies the identity of the user by performing one-to-one authentication using the acquired two pieces of biometric information. If the identity verification is successful (if one-to-one authentication is successful), the service server 20 requests the terminal 30 to provide information (certificates) necessary to provide the job change support service. For example, the service server 20 requests the submission of an employment certificate, a graduation certificate, certificates related to various qualifications and languages, etc.

[0064] Specifically, the service server 20 transmits a "certificate request" to the terminal 30 (step S13). The certificate request contains information about at least one certificate required for the job change support service provider to provide the service. For example, the certificate request contains information about the type of certificate that the job change support service provider requests to be provided.

[0065] In response to receiving the certificate provision request, the terminal 30 transmits the credential certificates (VCs) stored in the digital wallet to the service server 20. Specifically, the terminal 30 selects a specified credential certificate from among the multiple credential certificates stored in the digital wallet. The terminal 30 then signs the selected credential certificate using a private key corresponding to the user's DID (user ID). The terminal 30 transmits at least one signed credential certificate to the service server 20 (step S14).

[0066] The service server 20 acquires the issuer ID and the user ID included in the received credential certificate, and then acquires the public key corresponding to the acquired issuer ID and the public key corresponding to the acquired user ID from the blockchain (step S15).

[0067] Thereafter, the service server 20 verifies at least one credential certificate received from the terminal 30. Specifically, the service server 20 verifies the signature of the holder and the signature of the issuer attached to the credential certificate. By verifying these signatures, the service server 20 confirms that the credential certificate obtained from the user (credential certificate holder) has not been tampered with and that it has been issued by a trustworthy issuer.

[0068] If the service server 20 successfully verifies the acquired credential certificate (e.g., employment certificate, graduation certificate, etc.), it provides the service to the user (becomes ready to provide the service to the user). For example, the service server 20 of a job change support service provider provides information on companies that match the user's work history. Alternatively, the service server 20 provides the user with information on a job change event jointly held by multiple companies, etc. (the event date and time, venue, etc.).

[0069] A user who receives information from a job change support service provider (service server 20 of the provider) visits the introduced companies and event venues.

[0070] A business terminal 21 is installed at each company visited and at each booth at the event venue (booth of a company participating in the job change event).

[0071] The company interviews the job seeker. Specifically, a company employee or the like interviews the job seeker using the business operator terminal 21. In this case, the business operator terminal 21, like the service server 20, performs identity verification of the user and acquires a certificate (credential certificate) required to provide the service (interview the job seeker).

[0072] The business operator terminal 21 and the terminal 30 communicate with each other using a short-range wireless communication means such as Bluetooth (registered trademark). The business operator terminal 21 transmits a biometric information provision request to the terminal 30 to acquire two pieces of biometric information required for identity verification.

[0073] Furthermore, the business operator terminal 21 obtains at least one credential certificate necessary for providing the service by transmitting a certificate provision request to the terminal 30. The business operator terminal 21 verifies the credential certificate using the public key obtained from the blockchain. If the credential certificate verification is successful, a company representative or the like conducts an interview with the job seeker while referring to the information described in the credential certificate.

[0074] Next, details of each device included in the information processing system according to the first embodiment will be described.

[0075] 7 is a diagram illustrating an example of a processing configuration (processing module) of the terminal 30 according to an embodiment of the present disclosure. Referring to FIG. 7, the terminal 30 includes a communication control unit 201, a personal identification unit 202, an acquisition control unit 203, a usage control unit 204, and a storage unit 205.

[0076] The communication control unit 201 is a means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the server device 10. The communication control unit 201 also transmits data to the server device 10. The communication control unit 201 passes data received from other devices to other processing modules. The communication control unit 201 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 201. The communication control unit 201 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0077] The communication control unit 201 also supports short-range wireless communication such as Bluetooth (registered trademark). The communication control unit 201 communicates with the operator terminal 21 using short-range wireless communication.

[0078] The digital wallet application is realized by the modules of the identity verification unit 202, acquisition control unit 203, and usage control unit 204. Note that detailed explanation of the installation of the digital wallet application will be omitted, as the installation of the digital wallet application is obvious to those skilled in the art.

[0079] The identity verification unit 202 is a means for verifying the identity of the creator of a digital wallet. The identity verification unit 202 verifies the identity of the creator of the digital wallet by using biometric information obtained from the identification card and the biometric information of the creator who opens the digital wallet. More specifically, the identity verification unit 202 verifies that the creator of the digital wallet and the holder (issuer) of the identification card issued by a public institution are the same person.

[0080] 8 is a flowchart showing an example of the operation of the personal identification unit 202. The operation of the personal identification unit 202 will be described with reference to FIG.

[0081] When the digital wallet is opened (when the digital wallet is started for the first time), the personal identification unit 202 acquires information about the holder of the identification card from the identification card held by the user. For example, the personal identification unit 202 acquires basic information and biometric information about the holder of the identification card from an IC (Integrated Circuit) chip mounted on a My Number card or passport (step S101).

[0082] For example, when a My Number card is used as an identification card, the personal identification unit 202 acquires a personal identification number for the user authentication electronic certificate using a GUI (Graphical User Interface) or the like. Alternatively, when a passport is used as an identification card, the personal identification unit 202 acquires information written in a Machine Readable Zone (MRZ) on the face of the passport using OCR (Optical Character Recognition) technology.

[0083] The personal identification unit 202 reads information from the IC chip using the acquired PIN (four-digit number) or the information written in the MRZ as a password. The personal identification unit 202 stores basic information (name, sex, date of birth, address) and biometric information (face information, face image) of the holder of the identification card (My Number card, passport, etc.) read from the identification card in the storage unit 205 (step S102).

[0084] Furthermore, the identity verification unit 202 acquires biometric information of the user (user of the terminal 30; person who opened the digital wallet) (step S103). For example, the identity verification unit 202 prompts the user to take a picture of their own face using a GUI or the like (acquiring a facial image by taking a selfie).

[0085] The personal identification unit 202 acquires biometric information from the identification card and, upon acquiring the biometric information of the user operating the device, executes a matching process using the biometric information acquired from the identification card and the biometric information of the user (step S104). The personal identification unit 202 determines whether the two pieces of biometric information substantially match.

[0086] Specifically, the personal identification unit 202 generates feature quantities from each of the two pieces of biometric information (for example, face images).

[0087] Since existing technology can be used for the process of generating feature amounts, detailed description thereof will be omitted. For example, the personal identification unit 202 extracts the eyes, nose, mouth, etc. from the face image as feature points. Then, the personal identification unit 202 calculates the positions of each feature point and the distances between each feature point as feature amounts (generating a feature vector consisting of multiple feature amounts).

[0088] Next, the identity verification unit 202 performs a matching process (authentication process) using the two generated feature amounts. Specifically, the identity verification unit 202 calculates the similarity between corresponding face images using the two feature amounts. Based on the result of threshold processing on the calculated similarity, the identity verification unit 202 determines whether the two images are face images of the same person. Note that the similarity can be calculated using a chi-squared distance, Euclidean distance, or the like. The greater the distance, the lower the similarity, and the closer the distance, the higher the similarity.

[0089] If the similarity is greater than a predetermined value (if the distance is shorter than a predetermined value), the identity verification unit 202 determines that the matching process has been successful. If the similarity is equal to or less than the predetermined value, the identity verification unit 202 determines that the matching process has failed.

[0090] If the matching process is successful (step S105, Yes branch), the personal identification unit 202 permits the user to use the digital wallet (use permission; step S106). That is, if the authentication process (one-to-one authentication) is successful, the personal identification unit 202 opens the digital wallet.

[0091] If the matching process (authentication process) using biometric information is successful, the identity verification unit 202 treats the person who was issued the identification card as the same person as the user of the terminal 30. When the digital wallet is launched for the first time, it is determined whether the person in the name of the identification card and the user of the terminal 30 are the same person. If the person in the name of the identification card and the person who opened the digital wallet are the same person, the terminal 30 makes the digital wallet application available.

[0092] If the matching process fails (step S105, No branch), the identity verification unit 202 does not permit the user to use the digital wallet (use denial; step S107). In other words, if the authentication process (one-to-one authentication) fails, the user cannot use the digital wallet (cannot open a digital wallet).

[0093] In this way, the identity verification unit 202 determines that identity verification has been successful when the authentication process using the biometric information obtained from the identification card and the biometric information of the creator who opens the digital wallet is successful. If identity verification is successful, the digital wallet is opened.

[0094] The acquisition control unit 203 is a means for controlling the acquisition of credential certificates (VCs). The acquisition control unit 203 requests a certificate issuer to issue a certificate selected by the user, and stores the certificate acquired from the certificate issuer in the digital wallet.

[0095] 9 is a flowchart showing an example of the operation of the acquisition control unit 203. The operation of the acquisition control unit 203 according to the embodiment of the present disclosure will be described with reference to FIG.

[0096] When a user who has opened a digital wallet starts the digital wallet application and performs a predetermined operation (for example, pressing the certificate issuance button), the acquisition control unit 203 controls the acquisition of the credential certificate desired by the user.

[0097] First, the acquisition control unit 203 generates a pair of a public key and a private key and a user ID (user DID), which is a distributed identifier. The acquisition control unit 203 registers the generated user ID and public key in the blockchain (registering the public key, etc.; step S201).

[0098] Next, the acquisition control unit 203 acquires information necessary for requesting issuance of a credential certificate using a GUI or the like (acquisition of necessary information; step S202).

[0099] Specifically, the acquisition control unit 203 acquires information about the certificate issuer that has the authority to issue the credential certificate that the user desires to have issued, the type of certificate desired, etc. Alternatively, the acquisition control unit 203 acquires information that allows the certificate issuer to identify the user (for example, an employee number or a student ID number) as needed.

[0100] The acquisition control unit 203 notifies the certificate issuer of the acquired necessary information and user ID. Specifically, the acquisition control unit 203 notifies the certificate issuer of the type of credential certificate, information for identifying the recipient of the certificate (e.g., employee number or student ID number), and the user ID. The acquisition control unit 203 transmits a "certificate issuance request" including the type of credential certificate, information for identifying the recipient, the user ID, etc. to the server device 10 of the certificate issuer selected by the user (step S203).

[0101] The acquisition control unit 203 may also sign the information included in the certificate issuance request using a private key corresponding to the public key registered in the blockchain.

[0102] The acquisition control unit 203 receives a response (positive response or negative response) to the certificate issuance request from the server device 10 (step S204).

[0103] If a negative response is received indicating that the certificate has not been issued (step S205, No branch), the acquisition control unit 203 notifies the user that the credential certificate has not been issued (notification of non-issuance; step S206).

[0104] If an affirmative response indicating that the certificate has been successfully issued is received (step S205, Yes branch), the acquisition control unit 203 stores the credential certificate received from the certificate issuer in the digital wallet (step S207). At this time, the acquisition control unit 203 may notify the user that the credential certificate has been issued.

[0105] The acquisition control unit 203 may verify the signature attached to the credential certificate acquired from the certificate issuer. In this case, the acquisition control unit 203 acquires from the blockchain a public key corresponding to the issuer ID written in the credential certificate. The acquisition control unit 203 may verify the signature attached to the credential certificate using the acquired public key, and if the verification is successful, store the credential certificate in the digital wallet.

[0106] In this way, the acquisition control unit 203 acquires a credential certificate from a certificate issuer and stores the acquired credential certificate in a digital wallet. At this time, if the acquisition control unit 203 successfully verifies the signature of the acquired credential certificate, the acquisition control unit 203 may store the acquired credential certificate in the digital wallet.

[0107] The usage control unit 204 is a means for controlling the use of digital content (credential certificates) stored in the digital wallet. The usage control unit 204 provides the service provider with at least the biometric information stored in the terminal 30 and the certificates stored in the digital wallet that are specified by the service provider.

[0108] Specifically, the usage control unit 204 processes requests for providing biometric information and requests for providing a certificate received from the service provider's devices (service server 20, business operator terminal 21).

[0109] When receiving the biometric information provision request, the usage control unit 204 acquires biometric information (for example, a facial image) of the operator of the device using a GUI, etc. The usage control unit 204 takes a picture of the operator's face by taking a selfie.

[0110] The usage control unit 204 transmits the acquired biometric information and the biometric information used for identity verification when opening the digital wallet to the service provider's device. Note that the biometric information used for identity verification when opening the digital wallet may be biometric information acquired from an identification card or biometric information obtained by photographing the user.

[0111] If the two pieces of biometric information are acquired, the usage control unit 204 transmits a positive response including the two pieces of biometric information to the service provider's device. If at least one of the two pieces of biometric information cannot be acquired, the usage control unit 204 transmits a negative response indicating that the biometric information cannot be provided to the service provider's device.

[0112] In this way, in response to a request from the service provider, the usage control unit 204 provides the service provider with biometric information obtained from the identification card or the biometric information of the person who opens the digital wallet, and the biometric information of the operator who operates the device.

[0113] Upon receiving the certificate provision request, the usage control unit 204 selects a credential certificate designated by the service provider from among multiple credential certificates stored in the digital wallet, and then signs the selected credential certificate using a private key corresponding to the user's DID (user ID).

[0114] The usage control unit 204 signs the credential certificate to be submitted to the service provider using a private key (a private key corresponding to the user ID) generated when the credential certificate requested by the service provider was issued. For example, when an employment certificate is requested, the usage control unit 204 signs the employment certificate (credential employment certificate) using a private key corresponding to the user ID sent to the server device 10 of the employer. Alternatively, when a graduation certificate is requested, the usage control unit 204 signs the graduation certificate (credential graduation certificate) using a private key corresponding to the user ID sent to the server device 10 of the graduated university.

[0115] If the credential certificate specified by the service provider can be provided, the usage control unit 204 sends an affirmative response including the signed credential certificate (at least one credential certificate) to the service provider's device. If the credential certificate specified by the service provider cannot be provided, the usage control unit 204 sends a negative response indicating that the credential certificate cannot be provided to the service provider's device.

[0116] The storage unit 205 is a means for storing information necessary for the operation of the terminal 30. The storage unit 205 stores the user's biometric information acquired when the digital wallet is opened, and stores certificates issued by certificate issuers in the digital wallet. Furthermore, the storage unit 205 stores information about each certificate issuer (such as the name of the certificate issuer and the address of the server device 10).

[0117] 10 is a diagram illustrating an example of a processing configuration (processing module) of the server device 10 according to an embodiment of the present disclosure. Referring to FIG. 10, the server device 10 includes a communication control unit 301, a certificate issuing unit 302, and a storage unit 303.

[0118] The communication control unit 301 is a means for controlling communication with other devices. For example, the communication control unit 301 receives data (packets) from the terminal 30. The communication control unit 301 also transmits data to the terminal 30. The communication control unit 301 passes data received from other devices to other processing modules. The communication control unit 301 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 301. The communication control unit 301 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0119] The certificate issuing unit 302 is a means for issuing a credential certificate to a user. The certificate issuing unit 302 processes a “certificate issuance request” received from the terminal 30.

[0120] Upon receiving a certificate issuance request, the certificate issuance unit 302 searches a database (not shown in FIG. 10, etc.) that stores user information using information included in the certificate issuance request (e.g., employee number or student ID number) as a key to identify the person to whom the certificate is to be issued.

[0121] If the search fails (if the corresponding user is not registered in the database), the certificate issuing unit 302 sends a negative response to the terminal 30 indicating that the certificate issuance has failed.

[0122] If the search is successful, the certificate issuance unit 302 determines whether or not a credential certificate can be issued to the user based on the information stored in the database and the type of credential certificate that the user desires to be issued and that is included in the certificate issuance request. That is, the certificate issuance unit 302 determines whether or not the user desiring the issuance of a credential certificate is eligible to receive the issuance of a certificate.

[0123] For example, if an employment certificate is desired and the timing of the request for issuance is appropriate, the certificate issuing unit 302 determines that the employment certificate can be issued. On the other hand, if a predetermined period of time has passed since the user recorded in the database left the company, the certificate issuing unit 302 determines that the employment certificate cannot be issued.

[0124] Note that a detailed description of the issuance of individual credential certificates (e.g., graduation certificates, language proficiency certificates, etc.) will be omitted because a detailed description of the issuance of individual certificates is outside the scope of the present disclosure.

[0125] If the credential certificate cannot be issued to the user, the certificate issuing unit 302 transmits a negative response to the terminal 30 indicating that the certificate issuance has failed (the certificate cannot be issued).

[0126] If it is possible to issue a credential certificate to the user, the certificate issuing unit 302 generates a certificate (credential certificate; VCs) to be issued to the user. The certificate issuing unit 302 generates a credential certificate that includes an issuer ID and a user ID (the DID of the person to whom the certificate is to be issued; the user ID included in the certificate issuance request).

[0127] Specifically, the certificate issuing unit 302 generates a credential certificate (VCs) that includes metadata including the type of credential certificate, the issuing organization name, the date and time of issue, etc., the qualification information itself, the issuer's public key information, a digital signature, etc. The digital signature affixed to the credential certificate is issued using a private key corresponding to a pre-generated issuer ID.

[0128] The certificate issuing unit 302 transmits the generated credential certificate to the terminal 30. Furthermore, the certificate issuing unit 302 registers the issuer ID, public key, etc., which have been generated in advance, in the blockchain.

[0129] The storage unit 303 is a means for storing information necessary for the operation of the server device 10. A database for storing information necessary for issuing a credential certificate (e.g., an employee's employee number, department, date of joining the company, etc.) is constructed in the storage unit 303.

[0130] 11 is a diagram illustrating an example of a processing configuration (processing module) of the service server 20 according to an embodiment of the present disclosure. Referring to FIG. 11, the service server 20 includes a communication control unit 401, a service provision control unit 402, and a storage unit 403.

[0131] The communication control unit 401 is a means for controlling communication with other devices. For example, the communication control unit 401 receives data (packets) from the terminal 30. The communication control unit 401 also transmits data to the terminal 30. The communication control unit 401 passes data received from other devices to other processing modules. The communication control unit 401 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 401. The communication control unit 401 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0132] The service provision control unit 402 is a means for executing control relating to the services provided to the user.

[0133] When a user accesses a predetermined web page or the like and requests the provision of a service, the service provision control unit 402 acquires a certificate (credential certificate) necessary for identity verification of the user and for providing the service. The service provision control unit 402 performs identity verification and acquires a credential certificate before providing the service to the user.

[0134] The operation of the service provision control unit 402 will be described with reference to FIG.

[0135] The service provision control unit 402 transmits a biometric information provision request to the user's terminal 30 (step S301). That is, the service provision control unit 402 requests the provision of biometric information stored in the terminal 30 (biometric information used for identity verification; biometric information when the digital wallet was opened).

[0136] When a negative response (biometric information cannot be provided) is received from the terminal 30 (step S302, No branch), the service provision control unit 402 notifies the user that the service cannot be provided because identity verification has failed (step S303).

[0137] When a positive response (a response including two pieces of biometric information) is received from the terminal 30 (step S302, branch Yes), the service provision control unit 402 performs identity verification of the user (step S304). The service provision control unit 402 determines whether the two pieces of biometric information substantially match and performs identity verification.

[0138] The process of identity verification by the service provision control unit 402 can be the same as the process by the identity verification unit 202 of the terminal 30, and therefore a description thereof will be omitted.

[0139] If the identity verification fails (step S305, No branch), the service provision control unit 402 notifies the user that the service cannot be provided due to the failure of identity verification (step S303).

[0140] If the identity verification is successful (step S305, Yes branch), the service provision control unit 402 acquires information (certificates) necessary to provide the service to the user. For example, the service provision control unit 402 of a service provider that provides a job change support service acquires an employment certificate, a graduation certificate, certificates related to various qualifications and languages, etc.

[0141] Specifically, the service provision control unit 402 transmits a "certificate provision request" to the terminal 30 (step S306). The service provision control unit 402 transmits the certificate provision request to the terminal 30, the certificate provision request including information (e.g., the type of certificate) about at least one certificate required for the service provider to provide the service.

[0142] If a negative response (certificate cannot be provided) is received from the terminal 30 (step S307, No branch), the service provision control unit 402 notifies the user that the service cannot be provided because the necessary information cannot be obtained (step S303).

[0143] If an affirmative response (a response including a credential certificate) is received from the terminal 30 (step S307, branch Yes), the service provision control unit 402 verifies the credential certificate included in the affirmative response (step S308).

[0144] Specifically, the service provision control unit 402 acquires the issuer ID and user ID written in the credential certificate. The service provision control unit 402 acquires a public key corresponding to the acquired issuer ID from the blockchain. Similarly, the service provision control unit 402 acquires a public key corresponding to the acquired user ID from the blockchain.

[0145] The service provision control unit 402 verifies the signature of the holder (user desiring to receive the service) and the signature of the issuer attached to the credential certificate. When multiple credential certificates are acquired from the terminal 30, the service provision control unit 402 verifies the signatures of the holder and the issuer for each of the multiple credential certificates.

[0146] If the credential verification fails (step S309, No branch), the service provision control unit 402 notifies the user that the service cannot be provided because the necessary information cannot be acquired (step S303).

[0147] If the credential verification is successful (step S309, Yes branch), the service provision control unit 402 provides the service to the user (step S310).

[0148] For example, the service provision control unit 402 of a job change support service provider creates an account by associating the user's basic information (basic information; for example, name, gender, date of birth, address, etc.) with information obtained from the credential certificate (work history, educational background, etc.). Once the account is created, the service provision control unit 402 performs matching using information on companies participating in the job change support service (companies hiring) and the user's information. The service provision control unit 402 presents the matching results (information on potential companies to change jobs to) to the user.

[0149] A detailed description of the individual service offerings will be omitted, as a detailed description of the services unique to each service provider is outside the scope of the present disclosure.

[0150] The storage unit 403 is a means for storing information necessary for the operation of the service server 20. For example, the storage unit 403 stores the type of service provided to the user and the type of certificate necessary for providing the service in association with each other.

[0151] [Provider Terminal] Detailed description of the configuration and operation of the provider terminal 21 will be omitted. The basic configuration and operation of the provider terminal 21 can be the same as the configuration and operation of the service server 20. The provider terminal 21 communicates with the terminal 30 via short-range wireless communication such as Bluetooth (registered trademark) to acquire biometric information and a credential certificate. If the provider terminal 21 successfully verifies the identity of the user and the credential certificate, the service provider provides the service to the user.

[0152] [System Operation] Next, the operation of the information processing system according to the first embodiment will be described.

[0153] 13 is a sequence diagram illustrating an example of the operation of the information processing system according to the embodiment of the present disclosure. The operation of the information processing system according to the first embodiment regarding certificate issuance will be described with reference to FIG.

[0154] The terminal 30 generates a public key, a private key, and a user ID, and registers the user ID and public key in the blockchain (step S21).

[0155] The terminal 30 transmits a certificate issuance request including the user ID to the server device 10 of the certificate issuer (step S22).

[0156] The server device 10 generates qualification information for the user (the person to whom the credential certificate is to be issued) and generates a credential certificate including the generated qualification information (step S23). The server device 10 generates a credential certificate including the user ID and the issuer ID and having a digital signature attached.

[0157] The server device 10 transmits the generated credential certificate to the terminal 30 (step S24).

[0158] The terminal 30 stores the credential certificate in the digital wallet (step S25).

[0159] 14 is a sequence diagram illustrating an example of the operation of the information processing system according to the embodiment of the present disclosure. The operation of the information processing system according to the first embodiment regarding certificate provision will be described with reference to FIG.

[0160] The service provider's device (service server 20 in FIG. 14) transmits a biometric information provision request to terminal 30 (step S31).

[0161] The terminal 30 transmits the biometric information stored in the terminal 30 itself and the biometric information obtained by photographing the operator of the terminal 30 itself to the service server 20 (step S32).

[0162] The service server 20 performs identity verification using the two pieces of biometric information (step S33).

[0163] If the identity verification is successful, the service server 20 transmits a certificate request specifying the necessary credential certificate to the terminal 30 (step S34).

[0164] The terminal 30 reads the credential certificate designated by the service provider from the digital wallet, and transmits the read credential certificate to the service server 20 (step S35).

[0165] The service server 20 verifies the acquired credentials (step S36).

[0166] If the credential certificate is successfully verified, the service server 20 provides the service to the user (step S37).

[0167] For example, when a user uses a job change support service, the job change support service provider verifies that the owner of terminal 30 and the applicant applying for the job change support service are the same person. The job change support service provider performs this verification by verifying the identity of the user using two pieces of biometric information. If the identity verification is successful, the job change support service provider requests the submission of personal information (such as name and gender) as well as an employment certificate or other information for user registration. For example, the job change support service provider requests the submission of an employment certificate proving that the user has worked for a target company. The job change support service provider uses the qualification information listed on the obtained employment certificate to perform job change matching and provide the information to the user.

[0168] When the user arrives at a potential company or event venue for which information has been provided, the business operator terminal 21 installed at the event venue or the like performs identity verification and obtains a credential certificate. That is, when the user interviews with potential companies or participates in an event, authentication is performed using a tablet or the like installed at each location, and if authentication is successful, a credential certificate is provided to the company or the like. That is, the user discloses the qualification information (registration information; credential certificate) stored in the digital wallet of the terminal 30 only to companies and events selected by the user (companies and events for which the user has opted in).

[0169] Similarly, when a user (student) uses a job-hunting support service, identity verification and credential certificates are obtained by the job-hunting support service provider and potential employers, just as with a job-change support service. The user provides each service provider with documents such as a student registration certificate, a certificate certifying the details of an internship while enrolled, and a certificate certifying the fact of studying abroad.

[0170] Next, a modification of the first embodiment will be described.

[0171] <Modification 1> In the above embodiment, the case where the service provider's device (service server 20, business operator terminal 21) performs identity verification of the user has been described. However, the identity verification may be performed by the user's terminal 30.

[0172] For example, the service provider's device transmits a certificate request to the terminal 30 without transmitting a biometric information request. Upon receiving the certificate request, the terminal 30 photographs the user (the owner of the terminal 30). The terminal 30 performs identity verification (one-to-one authentication) using the biometric information obtained by photographing the user and the biometric information acquired when the digital wallet was opened.

[0173] If the identity verification is successful, the terminal 30 reads the credential certificate specified by the service provider from the digital wallet and transmits the read credential certificate to the device of the service provider.

[0174] <Modification 2> In the above embodiment, it has been described that the credential certificate is provided from the user to the service provider via a communication means such as the Internet or Bluetooth (registered trademark). The credential certificate may also be provided from the user (holder) to the service provider (verifier) ​​using a means such as a two-dimensional barcode (see FIG. 15 ).

[0175] For example, when providing a service to a user, an employee of the service provider orally informs the user of the certificate required to receive the service. The user operates the terminal 30 to select the communicated credential certificate. The terminal 30 then affixes a signature to the selected credential certificate and converts the signed credential certificate into a two-dimensional barcode. The terminal 30 displays the two-dimensional barcode.

[0176] An employee of the service provider operates the business operator terminal 21 to read the two-dimensional barcode, and then decodes the two-dimensional barcode to obtain a credential certificate.

[0177] The two-dimensional barcode may contain biometric information (a facial image) obtained when the digital wallet was opened. In this case, the business operator terminal 21 takes a photograph of the user in front of the user and acquires the facial image. The business operator terminal 21 may perform identity verification using the acquired facial image and a facial image obtained from the two-dimensional barcode.

[0178] Alternatively, the business operator terminal 21 may display a facial image obtained from the two-dimensional barcode on a display. An employee of the service provider may compare the facial image displayed on the display with the face of the user in front of the user to verify the user's identity.

[0179] <Modification 3> When providing a service to a user, a verifiable presentation (VP) may be transmitted and received between the user and the service provider instead of a credential certificate. That is, a portion of the VCs issued by the certificate issuer may be provided from the user (holder) to the service provider (verifier) ​​as a verifiable presentation.

[0180] For example, if a graduation certificate contains a user's date of birth or address at the time of graduation, the service provider may not need that information. Furthermore, users may not want to provide unnecessary personal information to third parties when receiving services. To meet such requirements, "selective minimal disclosure" using verifiable presentation (VP) may be implemented.

[0181] To achieve the selective minimal disclosure, the certificate issuer of the credential certificate separates data to be subject to selective minimal disclosure from a data set and calculates a hash value of the separated data. The certificate issuer (server device 10) then embeds the hash value of the separated data in the data set. The server device 10 then signs the entire data set, including the hash value of the separated data, and generates a credential certificate.

[0182] When providing a service to a user, the service provider's device notifies the terminal 30 of the required items along with the type of certificate required. For example, the service server 20 notifies the terminal 30 of the graduation certificate and the required items (e.g., name, graduation year, graduation department).

[0183] The terminal 30 presents the information (certificate type, required items) acquired from the service provider to the user. The terminal 30 also displays a GUI that allows the user to select items to be provided to the service provider from among the multiple items described in the credential certificate. For example, the terminal 30 uses a GUI such as that shown in FIG. 16 to acquire the items in the certificate that the user allows the service provider to provide.

[0184] The terminal 30 sends a verifiable presentation (VP) containing the selected items and signed with the user's private key to the service server 20 .

[0185] The service server 20 verifies the signature of the VP in the same manner as in the case of the credential certificate, and if the verification is successful, provides the service to the user.

[0186] Alternatively, the terminal 30 may automatically generate a VP having the certificate and necessary items specified by the service provider, and transmit the automatically generated VP to the service server 20 .

[0187] <Modification 4> In the above embodiment, a case has been described in which a user (holder of a credential certificate) provides a service provider (verifier) ​​with a credential certificate stored in a digital wallet. Services provided by the service provider include businesses that provide services without requiring the specific details described in the credential certificate.

[0188] For example, there are businesses that provide services that require the user's highest level of education but do not require information about the specific university or department attended, etc. There is no need to provide such businesses with graduation certificates that contain a lot of personal information.

[0189] Therefore, the information processing system disclosed herein may use technology such as zero-knowledge proof to provide the service provider (verifier) ​​with only the fact that the proposition held by the user (credential certificate holder) is true. In the above example, the user may inform the service provider only that he or she is a university graduate, without providing the specific university from which he or she graduated.

[0190] To realize proof using the above-mentioned zero-knowledge proof, the user terminal 30 and the service provider's device (service server 20, business operator terminal 21) exchange only the information required by the service provider using an interactive knowledge proof protocol.

[0191] <Modification 5> If the certificate specified by the service provider is not stored in the digital wallet, the terminal 30 may obtain the unstored certificate from the certificate issuer.

[0192] The usage control unit 204 of the terminal 30 notifies the acquisition control unit 203 of a credential certificate (type of credential certificate) that is specified by the service provider's service server 20 or the operator terminal 21 and is not stored in the digital wallet.

[0193] The acquisition control unit 203 acquires the notified certificate from the certificate issuer. Specifically, the acquisition control unit 203 transmits the above-described “certificate issuance request” to the server device 10.

[0194] When the acquisition control unit 203 acquires the credential certificate from the certificate issuer (server device 10), it stores the acquired credential certificate in the digital wallet and notifies the usage control unit 204 that the credential certificate has been stored in the digital wallet.

[0195] For example, if the employment certificate required to receive the job change support service is not stored in the digital wallet, the terminal 30 requests the employer to issue an employment certificate. The terminal 30 then transmits the obtained employment certificate to the job change support service provider (the service server 20 of the job change support service provider).

[0196] As described above, the terminal 30 according to the first embodiment performs identity verification using biometric information when opening a digital wallet. If identity verification is successful, the biometric information used when opening the digital wallet is stored in the terminal 30. When a user requests a service from a service provider, the service provider requests the provision of the biometric information stored in the terminal 30. The terminal 30 provides the service provider with at least the biometric information acquired when opening the digital wallet. The service provider performs one-to-one authentication using the biometric information acquired from the terminal 30 (the biometric information when opening the digital wallet) and the biometric information of the user (the holder of the terminal 30) in front of the user. If authentication is successful, the service provider can confirm that the person to whom the certificate stored in the digital wallet is issued and the person requesting the service are the same person. If it is confirmed that the person to whom the certificate is issued and the person requesting the service are the same person, the service provider provides the user with the service using the certificate acquired from the terminal 30. As a result, fraudulent use of certificates stored on smartphones, etc. is prevented.

[0197] The terminal 30 verifies the identity of the digital wallet holder using an identification card issued by a public institution when the digital wallet is opened. If the identity verification is successful, the terminal 30 stores the biometric information acquired when the digital wallet was opened as the biometric information of the digital wallet holder. When the user receives a service from a service provider, the terminal 30 provides the biometric information of the digital wallet holder to the service provider. The service provider performs an authentication process using the biometric information acquired from the terminal 30 and the biometric information of the user wishing to receive the service, thereby verifying whether the digital wallet holder providing the certificate and the user in front of the service are the same person. As a result, even if a person other than the digital wallet holder attempts to use the digital wallet holder's terminal 30 to receive a service from the service provider, the service provider can detect such fraudulent activity. In other words, the authenticity of the certificate provided by the digital wallet is guaranteed.

[0198] Furthermore, the terminal 30 provides the service provider with the credential certificate (VCs) obtained from the certificate issuer. By verifying the signature of the credential certificate obtained from the terminal 30, the service provider can confirm that the credential certificate has not been tampered with and that the credential certificate was issued by a legitimate certificate issuer. As a result, the service provider can provide appropriate services to users based on highly reliable information.

[0199] Furthermore, users can manage their own personal information (certificates) themselves and provide the personal information (certificates) stored in the terminal 30 only to service providers of their own choosing. In this way, the information processing system disclosed in the present application can provide a self-sovereign identity system in which the user himself / herself is the person responsible for managing personal information. Users can select for themselves to whom to disclose their information for each service they use.

[0200] Next, the hardware of each device constituting the information processing system will be described. Fig. 17 is a diagram showing an example of the hardware configuration of the terminal 30.

[0201] The terminal 30 can be configured by an information processing device (so-called computer), and has the configuration exemplified in Fig. 17. For example, the terminal 30 includes a processor 311, a memory 312, an input / output interface 313, and a communication interface 314. The components such as the processor 311 are connected by an internal bus or the like, and are configured to be able to communicate with each other.

[0202] However, the configuration shown in Fig. 17 is not intended to limit the hardware configuration of the terminal 30. The terminal 30 may include hardware not shown, and may not include the input / output interface 313 as necessary. Furthermore, the number of processors 311 and the like included in the terminal 30 is not intended to be limited to the example shown in Fig. 17, and for example, the terminal 30 may include multiple processors 311.

[0203] The processor 311 is a programmable device such as a central processing unit (CPU), a micro processing unit (MPU), or a digital signal processor (DSP). Alternatively, the processor 311 may be a device such as a field programmable gate array (FPGA) or an application specific integrated circuit (ASIC). The processor 311 executes various programs including an operating system (OS).

[0204] The memory 312 is a random access memory (RAM), a read only memory (ROM), a hard disk drive (HDD), a solid state drive (SSD), etc. The memory 312 stores an OS program, application programs, and various data.

[0205] The input / output interface 313 is an interface for a display device and an input device (not shown). The display device is, for example, a liquid crystal display, etc. The input device is, for example, a device that accepts user operations, such as a keyboard or a mouse.

[0206] The communication interface 314 is a circuit, module, etc. that communicates with other devices. For example, the communication interface 314 includes a network interface card (NIC).

[0207] The functions of the terminal 30 are realized by various processing modules. The processing modules are realized, for example, by the processor 311 executing a program stored in the memory 312. The program can be recorded on a computer-readable storage medium. The storage medium can be a non-transitory medium such as a semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. That is, the present invention can also be embodied as a computer program product. The program can be downloaded via a network or updated using a storage medium storing the program. The processing modules can also be realized by a semiconductor chip.

[0208] The server device 10, the service server 20, the business terminal 21, etc. can also be configured by information processing devices in the same way as the terminal 30, and their basic hardware configurations are no different from those of the terminal 30, so a description thereof will be omitted.

[0209] Terminal 30, which is an information processing device, is equipped with a computer, and functions of terminal 30 can be realized by causing the computer to execute a program. Terminal 30 also executes a control method for terminal 30 using the program. Similarly, server device 10 is equipped with a computer, and functions of server device 10 can be realized by causing the computer to execute a program. Server device 10 also executes a control method for server device 10 using the program.

[0210] [Modification] The configuration, operation, etc. of the information processing system described in the above embodiment are merely examples, and are not intended to limit the configuration, etc. of the system.

[0211] In the above embodiment, the server device 10 of the certificate issuer issues a credential certificate that does not require a certification authority for certificate verification. However, the server device 10 may also issue a certificate that requires a certification authority (a certificate based on a public key infrastructure).

[0212] The service provider's device (service server 20, business operator terminal 21) may request the submission of biometric information and a certificate at the same time. Specifically, the service server 20 or the like does not send a request for biometric information, but first sends a request for certificate. The terminal 30 that receives the request for certificate transmits the biometric information required for identity verification by the service provider and the specified credential certificate to the service server 20 or the like.

[0213] When a service is provided by the business operator terminal 21, the business operator terminal 21 may photograph the user (the holder of the terminal 30) to acquire biometric information. In this case, the terminal 30 may transmit pre-registered biometric information (biometric information used when opening the digital wallet) to the business operator terminal 21 in response to a biometric information provision request received from the business operator terminal 21. The business operator terminal 21 may perform identity verification using the facial image obtained by photographing and the facial image obtained from the terminal 30. After successful identity verification, the business operator terminal 21 transmits a certificate provision request to the terminal 30.

[0214] In the above embodiment, a case has been described in which identity verification (confirming that the identity card holder and the digital wallet creator match) is performed using biometric information obtained from an identification card. However, identity verification may also be performed using an electronic certificate stored in the identification card. Specifically, the terminal 30 acquires an electronic certificate (an electronic signature certificate and an electronic user certificate) from the My Number card held by the user. The terminal 30 transmits the acquired electronic signature to a certification authority (J-LIS; Japan Agency for Local Authority Information Systems) and requests the certification authority to verify the validity of the electronic certificate. If the electronic certificate is valid, the terminal 30 determines that identity verification has been successful.

[0215] Some functions of the terminal 30 may be implemented in another apparatus, device, etc. More specifically, the above-described "identification unit (identification means)," "acquisition control unit (acquisition control means)," etc. may be implemented in any of the apparatuses included in the system.

[0216] The form of data transmission between each device (e.g., server device 10, terminal 30) is not particularly limited, but the data transmitted between these devices may be encrypted. Personal information of users and the like is transmitted between these devices, and in order to appropriately protect this information, it is desirable to transmit and receive encrypted data.

[0217] In the flow charts (flowcharts, sequence diagrams) used in the above explanation, multiple steps (processes) are described in order, but the order of execution of the steps executed in the embodiments is not limited to the order described. In the embodiments, the order of the steps shown in the drawings can be changed to the extent that the content is not affected, such as by executing each process in parallel.

[0218] The above-described embodiments have been described in detail to facilitate understanding of the present disclosure, and it is not intended that all of the above-described configurations are required. Furthermore, when multiple embodiments are described, each embodiment may be used alone or in combination. For example, it is possible to replace part of the configuration of one embodiment with the configuration of another embodiment, or to add the configuration of another embodiment to the configuration of one embodiment. Furthermore, it is possible to add, delete, or replace part of the configuration of one embodiment with another configuration.

[0219] The above explanation makes clear the industrial applicability of the present invention, and the present invention is suitably applicable to information processing systems including service providers that provide services to users using certificates stored in digital wallets.

[0220] Some or all of the above embodiments can be described as, but are not limited to, the following supplementary notes.

[0221] [Supplementary Note 1] A terminal comprising: a storage means for storing biometric information of a user obtained when a digital wallet is opened, and for storing a certificate issued by a certificate issuer in the digital wallet; and a usage control means for providing a service provider with at least the stored biometric information and a certificate stored in the digital wallet and designated by the service provider. [Supplementary Note 2] The terminal of Supplementary Note 1 further comprises an identity verification means for verifying the identity of a creator who opens the digital wallet using biometric information obtained from an identification card and the biometric information of the creator who opens the digital wallet. [Supplementary Note 3] The terminal of Supplementary Note 2 further comprises an acquisition control means for requesting the certificate issuer to issue a certificate selected by the user, and storing the certificate obtained from the certificate issuer in the digital wallet. [Supplementary Note 4] The terminal of Supplementary Note 3, wherein the usage control means provides the service provider with the biometric information obtained from the identification card or the biometric information of the creator who opens the digital wallet, and the biometric information of an operator who operates the terminal, in response to a request from the service provider. [Supplementary Note 5] The terminal according to Supplementary Note 3, wherein the acquisition control means acquires a credential certificate from the certificate issuer and stores the acquired credential certificate in the digital wallet. [Supplementary Note 6] The terminal according to Supplementary Note 5, wherein the acquisition control means stores the acquired credential certificate in the digital wallet when verification of a signature on the acquired credential certificate is successful. [Supplementary Note 7] A system including: a service provider device; and a terminal possessed by a user, wherein the terminal comprises: storage means for storing biometric information of the user acquired when opening a digital wallet and storing a certificate issued by a certificate issuer in the digital wallet, and usage control means for providing at least the stored biometric information and a certificate stored in the digital wallet that is specified by the service provider to the service provider device.[Supplementary Note 8] The system of Supplementary Note 7, wherein the terminal further comprises an identity verification means for verifying the identity of the creator who opens the digital wallet using biometric information obtained from an identification card and the biometric information of the creator who opens the digital wallet. [Supplementary Note 9] The system of Supplementary Note 8, wherein the terminal further comprises an acquisition control means for requesting the certificate issuer to issue a certificate selected by the user and storing the certificate obtained from the certificate issuer in the digital wallet. [Supplementary Note 10] The system of Supplementary Note 9, wherein the usage control means provides the service provider with the biometric information obtained from the identification card or the biometric information of the creator who opens the digital wallet, and the biometric information of an operator who operates the device, in response to a request from the service provider. [Supplementary Note 11] The system of Supplementary Note 9, wherein the acquisition control means obtains a credential certificate from the certificate issuer and stores the obtained credential certificate in the digital wallet. [Supplementary Note 12] The system according to Supplementary Note 11, wherein the acquisition control means stores the acquired credential certificate in the digital wallet if the signature of the acquired credential certificate is successfully verified. [Supplementary Note 13] A terminal control method comprising: a storage step of storing biometric information of a user acquired when opening a digital wallet and storing a certificate issued by a certificate issuer in the digital wallet; and a usage control step of providing a service provider with at least the stored biometric information and a certificate stored in the digital wallet that is designated by the service provider. [Supplementary Note 14] The terminal control method according to Supplementary Note 13, further comprising an identity verification step of verifying the identity of a creator who opens the digital wallet using biometric information obtained from an identification card and the biometric information of the creator who opens the digital wallet. [Supplementary Note 15] The terminal control method according to Supplementary Note 14, further comprising an acquisition control step of requesting the certificate issuer to issue a certificate selected by the user and storing the certificate acquired from the certificate issuer in the digital wallet.[Supplementary Note 16] The terminal control method according to Supplementary Note 15, wherein the usage control step provides the service provider with biometric information obtained from the identification card or biometric information of the creator who opens the digital wallet, and biometric information of the operator who operates the terminal, in response to a request from the service provider. [Supplementary Note 17] The terminal control method according to Supplementary Note 15, wherein the acquisition control step acquires a credential certificate from the certificate issuer and stores the acquired credential certificate in the digital wallet. [Supplementary Note 18] The terminal control method according to Supplementary Note 17, wherein the acquisition control step stores the acquired credential certificate in the digital wallet if verification of the signature of the acquired credential certificate is successful. [Supplementary Note 19] A program for causing a computer installed in a terminal to execute: a storage process for storing the user's biometric information acquired when opening a digital wallet, and storing a certificate issued by a certificate issuer in the digital wallet; and a usage control process for providing at least the stored biometric information and a certificate stored in the digital wallet that is specified by the service provider, to a service provider. [Supplementary Note 20] The program according to Supplementary Note 19, further causing the program to execute an identity verification process that verifies the identity of an administrator who opens the digital wallet using biometric information obtained from an identification card and the biometric information of the administrator who opens the digital wallet. [Supplementary Note 21] The program according to Supplementary Note 20, further causing the program to execute an acquisition control process that requests the certificate issuer to issue a certificate selected by the user and stores the certificate obtained from the certificate issuer in the digital wallet. [Supplementary Note 22] The program according to Supplementary Note 21, in which the usage control process provides the service provider with biometric information obtained from the identification card or the biometric information of the administrator who opens the digital wallet, and the biometric information of an operator who operates the device, in response to a request from the service provider. [Supplementary Note 23] The program according to Supplementary Note 21, in which the acquisition control process obtains a credential certificate from the certificate issuer and stores the obtained credential certificate in the digital wallet.[Supplementary Note 24] The program according to Supplementary Note 23, wherein the acquisition control process stores the acquired credential certificate in the digital wallet when the signature of the acquired credential certificate is successfully verified.

[0222] Furthermore, some or all of the configurations described in Supplementary Notes 2 to 6 that are dependent on Supplementary Note 1 above may also be dependent on Supplementary Notes 7, 13, and 19 in the same dependent relationship as Supplementary Notes 2 to 6. Furthermore, not limited to Supplementary Notes 1, 7, 13, and 19, some or all of the configurations described as Supplements may be made dependent on various hardware, software, various recording means for recording software, or systems, within the scope of each of the above-mentioned embodiments.

[0223] The disclosures of the above-cited prior art documents are incorporated herein by reference. Although the embodiments of the present invention have been described above, the present invention is not limited to these embodiments. Those skilled in the art will understand that these embodiments are merely illustrative and that various modifications are possible without departing from the scope and spirit of the present invention. In other words, the present invention naturally includes various modifications and alterations that may be made by those skilled in the art in accordance with the entire disclosure, including the claims, and the technical concepts thereof.

[0224] REFERENCE SIGNS LIST 10 Server device 20 Service server 21 Operator terminal 30 Terminal 100 Terminal 101 Storage means 102 Usage control means 201 Communication control unit 202 Personal identification unit 203 Acquisition control unit 204 Usage control unit 205 Storage unit 301 Communication control unit 302 Certificate issuing unit 303 Storage unit 311 Processor 312 Memory 313 Input / output interface 314 Communication interface 401 Communication control unit 402 Service provision control unit 403 Storage unit

Claims

1. A terminal comprising: a storage means for storing a user's biometric information obtained when a digital wallet is opened, and storing a certificate issued by a certificate issuer in the digital wallet; and a usage control means for providing a service provider with at least the stored biometric information and a certificate stored in the digital wallet that is specified by the service provider.

2. The terminal according to claim 1, further comprising an identity verification means for verifying the identity of the creator of said digital wallet using biometric information obtained from an identification card and the biometric information of the creator of said digital wallet.

3. The terminal according to claim 2, further comprising an acquisition control means for requesting said certificate issuer to issue a certificate selected by said user, and storing the certificate acquired from said certificate issuer in said digital wallet.

4. The terminal according to claim 3, wherein the usage control means, in response to a request from the service provider, provides the service provider with biometric information obtained from the identification card or the biometric information of the creator who opens the digital wallet and the biometric information of the operator who operates the device.

5. The terminal according to claim 3, wherein said acquisition control means acquires a credential certificate from said certificate issuer and stores said acquired credential certificate in said digital wallet.

6. The terminal according to claim 5, wherein said acquisition control means stores said acquired credential certificate in said digital wallet when the signature of said acquired credential certificate is successfully verified.

7. A system comprising: a service provider device; and a terminal carried by a user, wherein the terminal is equipped with: a storage means for storing the user's biometric information obtained when a digital wallet is opened, and storing a certificate issued by a certificate issuer in the digital wallet; and a usage control means for providing the service provider device with at least the stored biometric information and a certificate stored in the digital wallet that is specified by the service provider.

8. A terminal control method comprising: a storage process for storing a user's biometric information obtained when a digital wallet is opened, and storing a certificate issued by a certificate issuer in the digital wallet; and a usage control process for providing a service provider with at least the stored biometric information and a certificate stored in the digital wallet that is specified by the service provider.

9. A computer-readable storage medium storing a program for causing a computer installed in a terminal to execute the following steps: a storage process for storing a user's biometric information obtained when a digital wallet is opened and storing a certificate issued by a certificate issuer in the digital wallet; and a usage control process for providing a service provider with at least the stored biometric information and a certificate stored in the digital wallet that is specified by the service provider.

Images