Authentication device, authentication method, and recording medium

Abstract

This authentication device comprises a first acquisition unit, a second acquisition unit, and an authentication unit. The first acquisition unit acquires reference avatar information indicating a first face image, which is a face image of a person of interest to be used as a reference, and a reference avatar generated using first seed information, which is information that is not the face image. The second acquisition unit acquires authentication avatar information indicating an authentication avatar generated by the same method as the reference avatar, by using the first seed information and a second face image, which is a face image at the time of authentication of the person of interest. The authentication unit performs authentication processing of at least one of the authentication avatar and the person of interest by using the reference avatar information and the authentication avatar information.

Description

Authentication device, authentication method, and recording medium

[0001] The present invention relates to an authentication device, an authentication method, and a recording medium.

[0002] In recent years, the use of avatars in virtual spaces has been increasing. Patent Document 1 describes a method for authenticating an avatar and information presented by the avatar by adding a digital signature to avatar data.

[0003] International Publication No. 2023 / 017580

[0004] The inventors have considered using an avatar to authenticate the avatar or the person on whom the avatar is based, and one example of the objective of the present invention is to use an avatar to authenticate the avatar or the person on whom the avatar is based.

[0005] An authentication device according to one aspect of the present disclosure comprises: a first acquisition means for acquiring reference avatar information indicating a reference avatar generated using a first facial image, which is a reference facial image of a target person, and first seed information, which is information different from the facial image; a second acquisition means for acquiring authentication avatar information indicating an authentication avatar generated by the same method as the reference avatar, using a second facial image, which is a facial image of the target person at the time of authentication, and the first seed information; and an authentication means for performing authentication processing of at least one of the authentication avatar and the target person, using the reference avatar information and the authentication avatar information.

[0006] In another aspect of the present disclosure, an authentication method includes a computer: acquiring reference avatar information indicating a reference avatar generated using a first facial image, which is a reference facial image of a target person, and first seed information, which is information different from the facial image; acquiring authentication avatar information indicating an authentication avatar generated using the same method as the reference avatar, using a second facial image, which is a facial image of the target person at the time of authentication, and the first seed information; and performing authentication processing of at least one of the authentication avatar and the target person using the reference avatar information and the authentication avatar information.

[0007] In yet another aspect of the present disclosure, a recording medium records a program that causes a computer to have: a first acquisition means that acquires reference avatar information indicating a reference avatar generated using a first facial image that is a reference facial image of a target person and first seed information that is information different from the facial image; a second acquisition means that acquires authentication avatar information indicating an authentication avatar generated by the same method as the reference avatar, using a second facial image that is a facial image of the target person at the time of authentication and the first seed information; and an authentication means that performs authentication processing of at least one of the authentication avatar and the target person using the reference avatar information and the authentication avatar information.

[0008] According to the present disclosure, an avatar can be used to authenticate the avatar or the person on whose behalf the avatar is based.

[0009] 1 is a diagram illustrating an example of a usage environment of an authentication device according to the present disclosure; FIG. 2 is a diagram illustrating an example of a functional configuration of the authentication device; FIG. 3 is a diagram illustrating an example of information stored in a storage unit; FIG. 4 is a diagram illustrating an example of a hardware configuration of the authentication device; FIG. 5 is a flowchart illustrating an example of a processing operation of the authentication device; FIG. 6 is a diagram illustrating an example of a functional configuration of the authentication device; FIG. 7 is a flowchart illustrating an example of a processing operation of the authentication device; FIG. 8 is a flowchart illustrating an example of a processing operation of the authentication device; FIG. 9 is a flowchart illustrating an example of a processing operation of the authentication device; FIG. 10 is a flowchart illustrating an example of a processing operation of the authentication device; FIG. 11 is a diagram illustrating an example of information stored in a storage unit; FIG. 12 is a diagram illustrating an example of a usage environment of the authentication device.

[0010] Hereinafter, in this disclosure, the drawings relate to one or more embodiments. In addition, in all drawings, similar components are given similar reference numerals and descriptions thereof will be omitted as appropriate.

[0011] The authentication device 10 is a device that authenticates an avatar, and is used together with, for example, a communication device 20, as shown in Fig. 1. The communication device 20 is operated by the person who is the basis of the avatar, i.e., the target person. In the example shown in this figure, the authentication device 10 is used together with multiple communication devices 20. The multiple communication devices 20 are operated by different target people.

[0012] The communication device 20 has an imaging unit. An image of the target person generated by this imaging unit, for example, a facial image of the target person, is transmitted to the avatar generation device. The avatar generation device may be the authentication device 10 or a device other than the authentication device 10. The target person may have one image or multiple images. In the latter case, the multiple frame images may be frame images that form a video. The imaging unit may be configured integrally with the communication device 20, or may be connected as an external device via a wired or wireless connection.

[0013] In this embodiment, other biometric information may be used instead of a facial image. This biometric information may include, for example, at least one of an iris, a fingerprint, an auricle, and a voiceprint. In this case, the communication device 20 has a sensor that generates this biometric information instead of or in addition to the imaging unit. However, since the iris, fingerprint, and auricle can also be generated using an image generated by the imaging unit, it may not be necessary to provide a dedicated sensor for these.

[0014] The following description will be given assuming that the communication device 20 generates a face image.

[0015] The avatar generation device generates an avatar using the facial image generated by the communication device 20. The avatar may be two-dimensional or three-dimensional. One method for generating an avatar is to use a person generation algorithm that uses a generative adversarial network (GAN).

[0016] The avatars generated by the avatar generation device include a reference avatar and an authentication avatar generated during authentication. The reference avatar corresponds to a facial image registered in advance in face authentication, for example, and the authentication avatar corresponds to a facial image captured during authentication in face authentication. The authentication avatar is generated using the same method as the reference avatar. Here, "same method" means that the same avatar is generated when the information on which the avatar is based is the same, for example, when the same facial image and seed information are used. Here, "same" basically means completely identical, but some differences are acceptable. Note that the seed information is information different from, for example, a facial image.

[0017] The identity of two avatars is determined, for example, using the similarity between the two avatars. Note that the similarity can be obtained by comparing two-dimensional information such as images. Furthermore, the similarity can be obtained not only by comparing two-dimensional information but also by comparing three-dimensional information. Therefore, by determining that avatars with a similarity equal to or greater than a threshold are identical, even if avatars with slight differences are generated, they can be determined to be the same avatar.

[0018] The authentication device 10 then performs authentication processing on the authentication avatar using the reference avatar.

[0019] 2, the authentication device 10 includes a first acquisition unit 110, a second acquisition unit 120, and an authentication unit 130, and can utilize a storage unit 30. The storage unit 30 may be a part of the authentication device 10, or may be located outside the authentication device 10.

[0020] The first acquisition unit 110 acquires reference avatar information indicating a reference avatar. The reference avatar is generated using a first facial image, which is a facial image serving as a reference for the target person, and first seed information, which is information different from the facial image. The first facial image is, for example, an image generated when registering for use of the virtual space, and the first seed information is, for example, identification information unique to the target person, such as information set at the time of registration. The first seed information may be generated by the authentication device 10 or input by the target person. In the latter case, the first seed information may be a string of alphanumeric characters assigned to the target person in advance. As an example, the first seed information is a password used by the target person when logging in to the virtual space. However, the first facial image and the first seed information are not limited to these.

[0021] The reference avatar information is stored in, for example, the storage unit 30. In this case, the avatar generation device acquires the first face image and first seed information from, for example, the communication device 20, and generates the reference avatar information using these. The avatar generation device then stores this reference avatar information in the storage unit 30. At this time, the avatar generation device may also store the first seed information in the storage unit 30. The first acquisition unit 110 then acquires the reference avatar information from the storage unit 30.

[0022] However, the storage unit 30 may store the first image and the first seed information without storing the reference avatar information. In this case, the avatar generation device may read the first image and the first seed information from the storage unit 30, generate the reference avatar information, and transmit it to the first acquisition unit 110.

[0023] The second acquisition unit 120 acquires authentication avatar information indicating an authentication avatar. The authentication avatar is generated by the same method as the reference avatar, using a second face image, which is a face image of the target person at the time of authentication, and first seed information. Here, the term "same method" means that the same avatar is generated when the face image and seed are the same, as described with reference to FIG. 1. Here, "same" basically means that the avatar is completely the same, but slight differences are acceptable.

[0024] The second acquisition unit 120 acquires authentication avatar information from, for example, an avatar generation device. In this case, the avatar generation device acquires the second facial image from, for example, the communication device 20. At this time, the avatar generation device acquires first seed information from, for example, the communication device 20. In this case, the first seed information is input to the communication device 20 by, for example, the target person. However, the avatar generation device may also acquire the first seed information from the storage unit 30. The avatar generation device then generates authentication avatar information using the second facial image and the first seed information and transmits the generated authentication avatar information to the second acquisition unit 120.

[0025] The authentication unit 130 performs authentication processing of at least one of the authentication avatar and the target person using the reference avatar information and the authentication avatar information. For example, if the authentication unit 130 can determine that the reference avatar and the authentication avatar are substantially identical, it determines that the authentication of the authentication avatar and the target person has been successful, for example, that the person on which the reference avatar was based and the person on which the authentication avatar was based are the same person.

[0026] The authentication unit 130 performs the above-described authentication process, for example, using the similarity between an image representing an authentication avatar and an image representing a reference avatar. As an example, the authentication unit 130 calculates the similarity between these two images, and determines that authentication has been successful if this similarity is equal to or greater than a reference value. Note that methods for calculating the similarity between images include, for example, a method using a known statistical method or a method using a machine learning model.

[0027] The storage unit 30 stores information used by the authentication device 10 and the avatar generation device. For example, as shown in FIG. 3 , the storage unit 30 stores target person identification information, first seed information, and reference avatar information that identify multiple target people, in association with one another. The storage unit 30 may further store a first image linked to the target person identification information. The authentication device 10 can read the first seed information, reference avatar information, and first image of the target person from the storage unit 30 by using the target person identification information.

[0028] The authentication device 10 has, as a hardware configuration, for example, as shown in FIG. 4, a bus 1010, a processor 1020, a memory 1030, a storage device 1040, an input / output interface 1050, and a network interface 1060.

[0029] The bus 1010 is a data transmission path for transmitting and receiving data among the processor 1020, memory 1030, storage device 1040, input / output interface 1050, and network interface 1060. However, the method of connecting the processor 1020 and the like to each other is not limited to bus connection.

[0030] The processor 1020 is implemented by a CPU (Central Processing Unit), a GPU (Graphics Processing Unit), or the like.

[0031] The memory 1030 is a main storage device realized by a RAM (Random Access Memory) or the like.

[0032] The storage device 1040 is an auxiliary storage device realized by removable media such as a hard disk drive (HDD), a solid state drive (SSD), a memory card, or a read-only memory (ROM), and has a recording medium. The recording medium of the storage device 1040 stores program modules that realize each function of the authentication device 10 (e.g., the first acquisition unit 110, the second acquisition unit 120, and the authentication unit 130, as well as the avatar generation unit 140, the avatar control unit 150, and the storage processing unit 160 described below). The processor 1020 loads and executes each of these program modules into the memory 1030, thereby realizing each function corresponding to the program module. The storage device 1040 may also function as a memory unit (e.g., the memory unit 30) that stores various information.

[0033] The input / output interface 1050 is an interface for connecting the authentication device 10 to various input / output devices.

[0034] The network interface 1060 is an interface for connecting the authentication device 10 to a network. This network is, for example, a local area network (LAN) or a wide area network (WAN). The network interface 1060 may be connected to the network wirelessly or by wire. The authentication device 10 may communicate with the communication device 20 via the network interface 1060.

[0035] The authentication device 10 may be realized by a plurality of devices each having the configuration shown in FIG.

[0036] The authentication device 10 operates, for example, as shown in Fig. 5. First, the first acquisition unit 110 acquires reference avatar information. The second acquisition unit 120 acquires authentication avatar information (step S10). Next, the authentication unit 130 uses the reference avatar information and the authentication avatar information to perform authentication processing on at least one of the authentication avatar and the target person (step S20).

[0037] 5 is performed as at least a part of the authentication process when a target person logs in to a virtual space using an authentication avatar, for example. However, the timing when the process shown in FIG. 5 is performed is not limited to this.

[0038] In this way, when the authentication device 10 is used, it is possible to perform authentication processing of at least one of the authentication avatar and the target person using the authentication avatar.

[0039] 6, the authentication device 10 may have an avatar generation unit 140, an avatar control unit 150, and a storage processing unit 160 in addition to a first acquisition unit 110, a second acquisition unit 120, and an authentication unit 130. The authentication device 10 shown in this figure is used when a target person logs in to a virtual space and uses an avatar.

[0040] The avatar generation unit 140 generates avatar information representing an avatar. For example, the avatar generation unit 140 generates reference avatar information and authentication avatar information. In other words, the authentication device 10 also functions as an avatar generation device. The avatar generation unit 140 also generates avatar information other than the authentication avatar information as needed, even after the target person logs in to the virtual space. The second acquisition unit 120 then acquires the authentication avatar information from the avatar generation unit 140.

[0041] The avatar control unit 150 controls an authentication avatar that exists in the virtual space. For example, the target person transmits control information for controlling the behavior of the authentication avatar to the avatar control unit 150 via the communication device 20. The avatar control unit 150 controls the behavior of the authentication avatar in accordance with this control information. Examples of the actions controlled here include, but are not limited to, movement, motion, speech, participation in an event, purchasing goods or services at a virtual store in the virtual space, and exchanging information with other avatars. Examples of the information exchanged here include information used only in the virtual space, such as virtual currency, electronic business cards, and second seed information. The second seed information is information different from the first seed information and is seed information for generating an avatar different from the authentication avatar.

[0042] The storage processing unit 160 stores the activity information in the storage unit 30. The activity information indicates at least a portion of the activity performed by the authentication avatar in the virtual space. For example, the activity information includes the trajectory of the authentication avatar, the destinations visited by the authentication avatar, information exchanged between the authentication avatar and other avatars, and information that can identify the destinations of the exchanges. An example of this information is second seed information received from other avatars. The storage processing unit 160 may store the activity information in the storage unit 30 in association with information that identifies the location in the virtual space where the activity was performed.

[0043] After the target person logs in to the virtual space, the avatar control unit 150 may obtain the activity information from the storage unit 30 and control the authentication avatar using the activity information. A specific example of this control will be described later.

[0044] When generating an account required for a target person to use a virtual space, the authentication device 10 performs, for example, the process shown in FIG.

[0045] First, the communication device 20 captures a facial image of the target person and transmits this facial image as a first facial image to the authentication device 10. The avatar generation unit 140 of the authentication device 10 acquires this first facial image (step S110). The communication device 20 also prompts the target person to input first seed information and transmits the input first seed information to the authentication device 10. The avatar generation unit 140 acquires this first seed information (step S120). The first seed information is used, for example, as a password for logging in to a virtual space.

[0046] The avatar generation unit 140 then generates reference avatar information using the first facial image and the first seed information, and stores this reference avatar information together with the first seed information in the storage unit 30 (step S130). At this time, the avatar generation unit 140 also stores other information in the storage unit 30 as needed. Examples of the other information are target person identification information and the first facial image. The target person identification information is assigned to the target person by the authentication device 10, for example, when an account is created.

[0047] Thereafter, when the target person logs in to the virtual space, the authentication device 10 performs, for example, the process shown in FIG.

[0048] First, the communication device 20 generates a facial image of the target person and transmits this facial image to the authentication device 10 as a second facial image. At that time, the communication device 20 also transmits the target person identification information to the authentication device 10. The avatar generation unit 140 of the authentication device 10 acquires this second facial image and also acquires first seed information. For example, the first seed information is input to the communication device 20 by the target person. The avatar generation unit 140 acquires the first seed information from the communication device 20. An example of such an example is when the first seed information is a password used to log in to a virtual space. Note that the avatar generation unit 140 may read out the first seed information corresponding to the target person identification information from the storage unit 30 (step S210).

[0049] Next, the avatar generation unit 140 generates authentication avatar information using the second face image and the first seed information (step S220).

[0050] The first acquisition unit 110 then reads, from the storage unit 30, reference avatar information corresponding to the target person identification information transmitted by the communication device 20 (step S230). The authentication unit 130 then performs authentication processing using the reference avatar information read in step S230 and the authentication avatar information generated in step S220 (step S240).

[0051] If the authentication process by the authentication unit 130 is successful, the avatar control unit 150 permits the target person to use the authentication avatar in the virtual space and controls the behavior of the authentication avatar in accordance with the information transmitted from the communication device 20 (step S250). At this time, the storage processing unit 160 stores the behavior information in the storage unit 30 as necessary.

[0052] In step S230 of Fig. 8, the authentication unit 130 may read reference avatar information corresponding to each of a plurality of persons and perform authentication processing for the authentication avatar information for the plurality of reference avatar information. In this case, the authentication unit 130 identifies reference avatar information whose similarity meets a criterion and determines that the target person corresponding to this reference avatar information has been authenticated. This processing is effective, for example, when the storage unit 30 does not store target person identification information.

[0053] In step S250, the avatar control unit 150 of the authentication device 10 may perform the process shown in Fig. 9. First, if activity information corresponding to the current position of the authentication avatar in the virtual space is stored in the storage unit 30, the avatar control unit 150 reads this activity information from the storage unit 30 (step S310). The activity information read here may be information generated after the current login or information generated during a previous login.

[0054] Next, the avatar control unit 150 executes processing using this activity information (step S320). For example, if the activity information indicates a past conversation between the avatar and another avatar, the avatar control unit 150 causes the communication device 20 to display information indicating the content of this conversation. If the activity information is electronic business card information received from another avatar, the avatar control unit 150 causes the communication device 20 to display this business card information.

[0055] In step S250, the avatar control unit 150 of the authentication device 10 may perform the process shown in FIG. 10. This process is for temporarily changing the target person's avatar from the authentication avatar to another avatar. Hereinafter, the other avatar will be referred to as the display avatar. The display avatar is created using, for example, an authentication face image and second seed information. The second seed information is, for example, information previously received from another avatar, but is not limited to this.

[0056] First, the avatar control unit 150 determines whether a predetermined criterion is satisfied (step S410). An example of the predetermined criterion includes at least the fact that the current location of the authentication avatar is the location where the second seed information was received. The predetermined criterion may further include the fact that the authentication avatar is currently interacting with the avatar that received the second seed information.

[0057] If the predetermined criteria are met (step S410: Yes), the avatar generation unit 140 reads the second seed information from the storage unit 30 (step S420) and generates display avatar information using the second seed information and the second facial image (step S430). Here, the communication device 20 may generate a new facial image for generating the display avatar information and transmit it to the authentication device 10. In this case, the avatar generation unit 140 generates the display avatar information using the facial image and the second seed information.

[0058] The avatar control unit 150 then switches the avatar displayed in the virtual space from the authentication avatar to the avatar indicated by the display avatar information, i.e., the display avatar (step S440). After that, when a predetermined criterion is met, the avatar control unit 150 switches the avatar displayed in the virtual space back from the display avatar to the authentication avatar (step S450). One example of the predetermined criterion is the passage of a predetermined amount of time, but it may also be that the current location of the display avatar is a predetermined distance away from the location where the second seed information was received.

[0059] In this way, the avatar of the target person is switched, and the target person can make a strong impression on the person operating the other avatar.

[0060] In step S250, the avatar control unit 150 of the authentication device 10 may perform the process shown in Fig. 11. This process is performed when the target person performs a payment process in a virtual space.

[0061] First, the avatar generation unit 140 transmits information requesting a new facial image to the communication device 20. The communication device 20 outputs this information and allows the target person to recognize it. An example of this output is a display. The target person then operates the communication device 20 to generate a facial image and transmit it to the authentication device 10. The avatar generation unit 140 acquires this facial image (step S210).

[0062] Next, the avatar generation unit 140 generates payment avatar information using the first seed information and the face image acquired in step S210 (step S220). Here, the avatar generation unit 140 reads the first seed information from, for example, the storage unit 30.

[0063] The authentication unit 130 then reads out the reference avatar information from the storage unit 30 (step S230), and performs authentication processing for payment using the reference avatar information and the payment avatar information. A detailed example of the authentication processing performed here is the same as the authentication processing using the reference avatar information and the authentication avatar information (step S240).

[0064] If the authentication is successful (step S240: Yes), the authentication device 10 performs a payment process (step S250). In this payment, electronic money that can be used in the real world or only in the virtual world may be used.

[0065] In this way, the authentication device 10 performs the authentication process again at the time of payment, thereby preventing fraudulent payments from being made.

[0066] When generating an avatar, attributes of the avatar may be specified. The attributes indicated by the basic attribute information include, for example, at least one of gender, age, hairstyle, presence and type of accessories such as glasses or hats, body shape, and face shape. If attributes are specified by a target person when generating quasi-avatar information, the same attributes must be used when generating authentication avatar information.

[0067] In this case, the avatar generation unit 140 stores attribute information in the storage unit 30, as shown in Fig. 12, for example. The attribute information indicates the attributes used when generating the reference avatar. When generating authentication avatar information, the avatar generation unit 140 reads the attribute information from the storage unit 30 and generates authentication avatar information using the attribute information.

[0068] As a result, the reference avatar and the authentication avatar have the same attributes, so even if attribute information is used when generating the reference avatar information, the authentication accuracy by the authentication unit 130 does not decrease.

[0069] 1, the authentication device 10 is a device different from the communication device 20. However, as shown in Fig. 13, the communication device 20 may also function as the authentication device 10. In this case, the communication device 20 communicates with the virtual space providing device 40.

[0070] For example, the communication device 20 has the first acquisition unit 110, the second acquisition unit 120, and the authentication unit 130 shown in Fig. 6. The virtual space providing device 40 has the avatar generation unit 140, the avatar control unit 150, and the storage processing unit 160 shown in Fig. 6. Both the communication device 20 and the virtual space providing device 40 can use the storage unit 30.

[0071] 1 , the communication device 20 may include an avatar generation unit 140, an avatar control unit 150, and a storage processing unit 160. In this case, the communication device 20 transmits generated avatar information, such as reference avatar information, authentication avatar information, display avatar information, and payment avatar information, to the authentication device 10. The communication device 20 may also use the storage unit 30. For example, the communication device 20 stores information to be stored in the storage unit 30, such as a first facial image and first seed information, in the storage unit 30.

[0072] In this case, in the authentication process at the time of payment shown in FIG. 11 , the authentication device 10 may generate new seed information with an expiration date instead of the first seed information and transmit it to the communication device 20. An example of this seed information is a one-time password. In this case, the communication device 20 uses this seed information when generating payment avatar information. Furthermore, the authentication device 10 or the communication device 20 generates second reference avatar information using this seed information and the first face image stored in the storage unit 30. The authentication unit 130 of the authentication device 10 then performs authentication processing using the payment avatar information and the second reference avatar information.

[0073] Although the present disclosure has been described above with reference to the embodiments, the present disclosure is not limited to the above-described embodiments. Various modifications that can be understood by those skilled in the art can be made to the configuration and details of the present disclosure within the scope of the present disclosure. Furthermore, each embodiment can be combined with other embodiments as appropriate.

[0074] In addition, although the flowcharts used in the above description show a sequence of steps (processes), the order of steps executed in each embodiment is not limited to the sequence shown in the flowcharts. In each embodiment, the order of steps shown in the diagrams can be changed as long as it does not cause any problems in terms of the content.

[0075] Some or all of the above embodiments may be described as, but are not limited to, the following notes. 1. An authentication device comprising: a first acquisition means for acquiring reference avatar information indicating a reference avatar generated using a first face image that is a reference face image of a target person and first seed information that is information different from the face image; a second acquisition means for acquiring authentication avatar information indicating an authentication avatar generated by the same method as the reference avatar, using a second face image that is a face image of the target person at the time of authentication and the first seed information; and an authentication means for performing authentication processing of at least one of the authentication avatar and the target person, using the reference avatar information and the authentication avatar information. 2. The authentication device described in above 1, wherein the first seed information is used when the target person logs in to a virtual space. 3. The authentication device described in above 2, wherein the authentication device comprises avatar control means for controlling the authentication avatar that exists in the virtual space. 4. 5. The authentication device described in above 3, wherein the avatar control means acquires activity information indicating at least a part of past activities of the authentication avatar in the virtual space after the target person logs in to the virtual space, and controls the authentication avatar using the activity information. 5. The authentication device described in above 3 or 4, wherein the authentication device comprises: storage processing means for storing second seed information acquired by the authentication avatar in the virtual space in storage means, linking it to the target person; and avatar generation means for generating display avatar information indicating a display avatar to be used at least temporarily in the virtual space in place of the authentication avatar, using the second seed information. 6. The authentication device described in above 3 or 4, wherein the authentication means performs authentication processing of the target person for the payment using the reference avatar information and the payment avatar information.7. The authentication device according to any one of claims 1 to 6 above, further comprising: avatar generation means for generating the authentication avatar information using the second facial image and the first seed information, wherein the second acquisition means acquires the authentication avatar information from the avatar generation means. 8. The authentication device according to any one of claims 7 above, wherein attribute information indicating attributes of the reference avatar is used when the reference avatar information is generated, and the attribute information is stored in storage means, wherein the second acquisition means further generates the authentication avatar information using the attribute information stored in the storage means. 9. The authentication device according to any one of claims 1 to 8 above, wherein the authentication means performs the authentication process using a similarity between an image representing the authentication avatar and an image representing the reference avatar. 10. The authentication device according to any one of claims 1 to 9 above, wherein the first acquisition means acquires the reference avatar information from storage means that stores the reference avatar. 11. 12. An authentication method in which a computer acquires reference avatar information indicating a reference avatar generated using a first facial image that is a reference facial image of a target person and first seed information that is information different from the facial image, acquires authentication avatar information indicating an authentication avatar generated using the same method as the reference avatar using a second facial image that is a facial image of the target person at the time of authentication and the first seed information, and performs authentication processing of at least one of the authentication avatar and the target person using the reference avatar information and the authentication avatar information. 13. A program comprising: a computer having: a first acquisition means for acquiring reference avatar information indicating a reference avatar generated using the first facial image that is a reference facial image of the target person and the first seed information that is information different from the facial image, second acquisition means for acquiring authentication avatar information indicating an authentication avatar generated using the same method as the reference avatar using a second facial image that is a facial image of the target person at the time of authentication and the first seed information, and authentication means for performing authentication processing of at least one of the authentication avatar and the target person using the reference avatar information and the authentication avatar information. 13. A recording medium on which the program according to 12 above is recorded.

[0076] Furthermore, some or all of the configurations described in Supplementary Notes 2 to 10, which are dependent on Supplementary Note 1, may also be dependent on Supplementary Notes 11, 12, and 13 in the same dependent relationship as Supplementary Notes 2 to 10. Furthermore, not limited to Supplementary Notes 1, 11, 12, and 13, some or all of the configurations described as Supplements may be made dependent on various hardware, software, various recording means for recording software, or systems, within the scope of each of the above-mentioned embodiments.

[0077] This application claims priority based on Japanese Patent Application No. 2024-047721, filed March 25, 2024, the disclosure of which is incorporated herein by reference in its entirety.

[0078] REFERENCE SIGNS LIST 10 Authentication device 20 Communication device 30 Storage unit 40 Virtual space providing device 110 First acquisition unit 120 Second acquisition unit 130 Authentication unit 140 Virtual space providing device 150 Avatar control unit 160 Storage processing unit

Claims

1. An authentication device comprising: a first acquisition means for acquiring reference avatar information indicating a reference avatar generated using a first facial image, which is a reference facial image of a target person, and first seed information, which is information different from the facial image; a second acquisition means for acquiring authentication avatar information indicating an authentication avatar generated using the same method as the reference avatar, using a second facial image, which is a facial image of the target person at the time of authentication, and the first seed information; and an authentication means for performing authentication processing of at least one of the authentication avatar and the target person using the reference avatar information and the authentication avatar information.

2. An authentication device according to claim 1, wherein the first seed information is used when the target person logs in to a virtual space.

3. An authentication device according to claim 2, further comprising an avatar control means for controlling the authentication avatar present in the virtual space.

4. An authentication device as described in claim 3, wherein the avatar control means acquires behavior information indicating at least a portion of the authentication avatar's past behavior in the virtual space after the target person logs in to the virtual space, and controls the authentication avatar using the behavior information.

5. An authentication device as claimed in claim 3 or 4, comprising: a storage processing means for storing second seed information acquired by the authentication avatar in the virtual space in a storage means, linking the second seed information to the target person; and an avatar generation means for using the second seed information to generate display avatar information indicating a display avatar to be used at least temporarily in the virtual space in place of the authentication avatar.

6. An authentication device according to claim 3 or 4, comprising an avatar generation means for reacquiring a facial image of the target person when a payment is made in the virtual space and generating payment avatar information using the facial image, and the authentication means performs authentication processing of the target person for the payment using the reference avatar information and the payment avatar information.

7. An authentication device according to any one of claims 1 to 6, further comprising an avatar generation means for generating the authentication avatar information using the second facial image and the first seed information, and wherein the second acquisition means acquires the authentication avatar information from the avatar generation means.

8. An authentication device as described in claim 7, wherein when the reference avatar information is generated, attribute information indicating the attributes of the reference avatar is used, and the attribute information is stored in a storage means, and the second acquisition means further generates the authentication avatar information using the attribute information stored in the storage means.

9. An authentication device according to any one of claims 1 to 8, wherein the authentication means performs the authentication process using the degree of similarity between an image representing the authentication avatar and an image representing the reference avatar.

10. An authentication device according to any one of claims 1 to 9, wherein the first acquisition means acquires the reference avatar information from storage means that stores the reference avatar.

11. An authentication method in which a computer obtains reference avatar information indicating a reference avatar generated using a first facial image, which is a reference facial image of a target person, and first seed information, which is information different from the facial image; obtains authentication avatar information indicating an authentication avatar generated using the same method as the reference avatar, using a second facial image, which is a facial image of the target person at the time of authentication, and the first seed information; and performs authentication processing of at least one of the authentication avatar and the target person using the reference avatar information and the authentication avatar information.

12. A computer-readable recording medium having recorded thereon a program that provides a computer with: a first acquisition means for acquiring reference avatar information indicating a reference avatar generated using a first facial image, which is a reference facial image of a target person, and first seed information, which is information different from the facial image; a second acquisition means for acquiring authentication avatar information indicating an authentication avatar generated using the same method as the reference avatar, using a second facial image, which is a facial image of the target person at the time of authentication, and the first seed information; and an authentication means for performing authentication processing of at least one of the authentication avatar and the target person, using the reference avatar information and the authentication avatar information.

Images