Information processing system, information processing device, information processing method, and storage medium

Abstract

An information processing system includes: a first authentication means for performing first biometric authentication of a high security level on the basis of first biological information of a subject and preliminarily registered biological information; an output means for outputting identification information on the subject when the first biometric authentication is successful; and a second authentication means for performing second biometric authentication of a low security level on the basis of second biological information of the subject, the identification information, and preliminarily registered biological information.

Description

Information processing system, information processing device, information processing method, and recording medium

[0001] The present disclosure relates to the technical fields of an information processing system, an information processing device, an information processing method, and a recording medium.

[0002] One example of this type of system is a parking lot management system that, when a first facial image of a user of a vehicle entering a parking lot matches a pre-stored registered facial image, sends temporary PIN information to the user's terminal, and when the vehicle leaves the parking lot, performs authentication using the temporary PIN information (see Patent Document 1).

[0003] WO 2023 / 119504

[0004] An object of this disclosure is to provide an information processing device, an information processing method, and a recording medium that aim to improve the technology related to the prior art documents mentioned above.

[0005] One aspect of the information processing system includes a first authentication means that performs a first biometric authentication with a high security level based on first biometric information of a subject and pre-registered biometric information, an output means that outputs identification information about the subject if the first biometric authentication is successful, and a second authentication means that performs a second biometric authentication with a low security level based on second biometric information of the subject, the identification information, and pre-registered biometric information.

[0006] One aspect of the information processing device includes an acquisition means for acquiring biometric information of a subject, an authentication means for performing biometric authentication of the subject based on the biometric information and pre-registered biometric information, and an output means for outputting identification information regarding the subject if the biometric authentication is successful.

[0007] One aspect of the information processing method involves performing a first biometric authentication with a high security level based on first biometric information of a subject and pre-registered biometric information, outputting identification information about the subject if the first biometric authentication is successful, and performing a second biometric authentication with a low security level based on second biometric information of the subject, the identification information, and the pre-registered biometric information.

[0008] Another aspect of the information processing method involves acquiring biometric information of a subject, performing biometric authentication of the subject based on the biometric information and pre-registered biometric information, and outputting identification information about the subject if the biometric authentication is successful.

[0009] One aspect of the recording medium has recorded thereon a computer program for causing a computer to execute an information processing method that acquires biometric information of a subject, performs biometric authentication of the subject based on the biometric information and pre-registered biometric information, and outputs identification information regarding the subject if the biometric authentication is successful.

[0010] FIG. 1 is a block diagram showing an example of the configuration of an information processing system according to an embodiment. FIG. 2 is a flowchart showing an example of the operation of the information processing system according to an embodiment. FIG. 3 is a block diagram showing an example of the configuration of a computer. FIG. 4 is a block diagram showing another example of the configuration of the information processing system according to an embodiment. FIG. 5 is a block diagram showing an example of the configuration of an authentication device according to an embodiment. FIG. 6 is a block diagram showing an example of the configuration of another authentication device according to an embodiment. FIG. 7 is a flowchart showing an example of the operation of another authentication device according to an embodiment. FIG. 8 is a flowchart showing another example of the operation of another authentication device according to an embodiment. FIG. 9 is a diagram showing an example of a display image according to an embodiment.

[0011] First Embodiment A first embodiment relating to an information processing system, an information processing device, an information processing method, and a recording medium will be described with reference to Figures 1 to 3. Hereinafter, the first embodiment relating to an information processing system, an information processing device, an information processing method, and a recording medium will be described using an information processing system 1.

[0012] 1, the information processing system 1 includes an authentication device 11, an output device 12, and an authentication device 13. As shown in FIG. 1, the authentication device 11 and the output device 12 are installed in a location A. The authentication device 13 is installed in a location B. In other words, the authentication device 13 is installed in a different location from the authentication device 11 and the output device 12.

[0013] The authentication device 11 and the output device 12 are configured to be able to communicate with each other. The authentication device 11 and the output device 12 may communicate with each other via wired or wireless communication. The authentication device 11 and the output device 12 may be housed in the same housing. In other words, the authentication device 11 and the output device 12 may be configured as an integrated device. In this case, the authentication device 11 and the output device 12 may constitute a single information processing device.

[0014] Here, it is assumed that the authentication device 11 is an authentication device with a higher security level than the authentication device 13. In other words, it is assumed that the authentication device 13 is an authentication device with a lower security level than the authentication device 11.

[0015] For example, the authentication devices 11 and 13 may be face authentication devices that perform face authentication. The resolution of the face image of the person to be authenticated that the authentication device 11 uses for face authentication may be higher than the resolution of the face image of the person to be authenticated that the authentication device 13 uses for face authentication. In other words, the authentication device 11 may perform face authentication using a high-resolution face image, while the authentication device 13 may perform face authentication using a low-resolution face image. In this case, it can be said that the authentication device 11 has a higher security level than the authentication device 13.

[0016] For example, the authentication device 11 may be an iris authentication device that performs iris authentication. The authentication device 13 may be a face authentication device that performs face authentication. Iris authentication often has higher authentication accuracy than face authentication. In addition, irises are more difficult to forge than faces. For this reason, the authentication device 11 can be said to have a higher security level than the authentication device 13.

[0017] For example, the authentication device 11 may be a multimodal biometric authentication device that performs multimodal biometric authentication by combining two or more biometric authentication methods. The authentication device 13 may be a single-modal biometric authentication device that performs a single biometric authentication (i.e., single-modal biometric authentication). Multimodal biometric authentication has a higher security level than single-modal biometric authentication. Therefore, it can be said that the authentication device 11 has a higher security level than the authentication device 13. Note that examples of biometric authentication methods include at least one of face authentication, iris authentication, fingerprint authentication, palm print authentication, vein authentication, voice authentication, and ear acoustic authentication.

[0018] (Operation of Information Processing System) The operation of the information processing system 1 will be described with reference to Fig. 2 in addition to Fig. 1. In Fig. 1, it is assumed that a user U performs biometric authentication at a location A at time t1. It is assumed that the user U performs biometric authentication at a location B at time t2, which is later than time t1. Here, the user U is the subject of biometric authentication. In other words, the user U is the person to be authenticated.

[0019] 2, the authentication device 11 acquires biometric information of the user U (step S101). The biometric information acquired by the authentication device 11 corresponds to the biometric authentication method of the authentication device 11. For example, if the authentication device 11 performs face authentication, the biometric information may be a facial image including the face of the user U. For example, if the authentication device 11 performs iris authentication, the biometric information may be an eye image including the iris of the user U. For example, the biometric information may be a feature extracted from a facial image or an eye image.

[0020] Next, the authentication device 11 performs biometric authentication based on the biometric information of the user U and pre-registered biometric information (step S102). Note that various existing methods of biometric authentication can be applied, and therefore detailed explanations thereof will be omitted. The authentication device 11 transmits authentication result information indicating the result of the biometric authentication to the output device 12. Note that there may be one or more pieces of registered biometric information.

[0021] Next, the output device 12 determines whether the authentication is successful or not based on the authentication result information transmitted from the authentication device 11 (step S103). Here, "authentication is successful" may mean that the biometric information of the user U matches the registered biometric information. In other words, it may mean that the biometric information of the user U is registered in advance. In other words, it may mean that the user U is a registered person who has been registered in advance. Note that "match" is not limited to "perfect match" but also includes "a state in which there is a relatively high degree of match, although it is not a perfect match." "A state in which there is a relatively high degree of match" may include, for example, "a state in which the degree of match is equal to or greater than a predetermined threshold."

[0022] If it is determined in the process of step S103 that the authentication is not successful (step S103: No), the operation shown in Fig. 2 ends. Note that "authentication is not successful" may be referred to as "authentication failure."

[0023] If it is determined in the process of step S103 that the authentication is successful (step S103: Yes), the output device 12 outputs identification information regarding the user U (step S104). The identification information is information that proves that the biometric authentication of the user U has been successful by the high-security level authentication device 11.

[0024] The identification information may include at least one of information for identifying the user U (e.g., ID, name, facial image, etc.), a timestamp indicating the time when the biometric authentication was successful, and information indicating the authentication device 11 that performed the biometric authentication. For example, the output device 12 may output the identification information as a one-dimensional or two-dimensional barcode or a character string. The output device 12 may output the identification information by printing the identification information on a paper medium. Alternatively, the output device 12 may output the identification information by transmitting the identification information to a communication terminal carried by the user U.

[0025] Note that the processing of step S103 may be performed by the authentication device 11, rather than the output device 12. If the biometric authentication of user U is successful, the authentication device 11 may transmit information indicating that the biometric authentication is successful to the output device 12. The output device 12 may output identification information regarding user U on the condition that it has received information indicating that the biometric authentication is successful. On the other hand, if the biometric authentication of user U fails, the authentication device 11 may not need to transmit information to the output device 12. Since the output device 12 does not receive information from the authentication device 11, the output device 12 does not output identification information regarding user U.

[0026] After the processing of step S104, the user U moves from location A to location B. At location B, the authentication device 13 acquires identification information related to the user U (step S105). The authentication device 13 may extract one piece of registered biometric information corresponding to the user U indicated by the identification information from a plurality of pieces of registered biometric information that have been registered in advance.

[0027] Next, the authentication device 13 acquires biometric information of the user U (step S106). The biometric information acquired by the authentication device 13 corresponds to the biometric authentication method of the authentication device 13. Therefore, the type of biometric information acquired by the authentication device 11 in the process of step S101 and the type of biometric information acquired by the authentication device 13 in the process of step S106 may be different or the same. The process of step S106 may be performed in parallel with the process of step S105. Alternatively, the process of step S106 may be performed before the process of step S105.

[0028] Next, the authentication device 13 may perform biometric authentication based on the biometric information of the user U and the extracted registered biometric information (step S107). That is, the authentication device 13 may perform biometric authentication of the user U by one-to-one authentication.

[0029] In the processing of step S107, the authentication device 13 may perform biometric authentication based on the biometric information of the user U and multiple pieces of registered biometric information. That is, the authentication device 13 may perform biometric authentication of the user U using 1:N authentication. If the biometric authentication of the user U is successful, the authentication device 13 may determine whether the user U identified by the biometric authentication is the same as the user U indicated by the identification information.

[0030] In this way, the information processing system 1 performs a high-security level first biometric authentication (i.e., biometric authentication by the authentication device 11) based on the first biometric information of the user U and pre-registered registered biometric information, and if the first biometric authentication is successful, outputs identification information about the user U, and performs a low-security level second biometric authentication (i.e., biometric authentication by the authentication device 13) based on the second biometric information of the user U, the identification information, and pre-registered registered biometric information.

[0031] (Configuration of Computer) Each of the authentication device 11, the output device 12, and the authentication device 13 described above may be realized by a computer COM shown in FIG.

[0032] 3, the computer COM includes an arithmetic unit 110, a storage device 120, a communication device 130, an input device 140, and an output device 150. The arithmetic unit 110, the storage device 120, the communication device 130, the input device 140, and the output device 150 may be connected via a data bus 160. Note that the computer COM does not necessarily have to include at least one of the input device 140 and the output device 150.

[0033] The arithmetic device 110 may include a processor 1101. The arithmetic device 110 may include other processors in addition to the processor 1101. That is, the arithmetic device 110 may include one or more processors. The processor 1101 may be a multi-core processor. When the arithmetic device 110 includes a single processor 1101 that is a multi-core processor, it can be said that the arithmetic device 110 logically includes multiple processors.

[0034] The processor 1101 may be, for example, at least one of a CPU (Central Processing Unit), a GPU (Graphics Processing Unit), an FPGA (Field Programmable Gate Array), a TPU (Tensor Processing Unit), and a quantum processor.

[0035] The storage device 120 may include a memory 1201. The storage device 120 may include other memories in addition to the memory 1201. That is, the storage device 120 may include one or more memories. The memory 1201 may be, for example, at least one of a RAM (Random Access Memory), a ROM (Read Only Memory), a hard disk device, a magneto-optical disk device, an SSD (Solid State Drive), and an optical disk array. Therefore, the storage device 120 may include the memory 1201 as a non-transitory recording medium.

[0036] The storage device 120 can store desired data. A computer program 1201a to be executed by the arithmetic device 110 may be stored in the memory 1201 of the storage device 120. The storage device 120 may temporarily store data that is temporarily used by the arithmetic device 110 when the arithmetic device 110 is executing the computer program 1201a.

[0037] The computer program 1201a may be recorded on a computer-readable, non-transitory recording medium. In this case, the computer program 1201a may be stored in the memory 1201 by reading the recording medium using a recording medium reading device (not shown) included in the computer COM. The recording medium may be at least one of an optical disk, a magnetic medium, a magneto-optical disk, a semiconductor memory, and any other medium capable of storing a program. The computer program 1201a may be acquired (in other words, downloaded) from a device (not shown) external to the computer COM via the communication device 130. The acquired computer program 1201a may be stored in the memory 1201.

[0038] The communication device 130 may be capable of communicating with devices external to the computer COM. The communication device 130 may perform wired communication or wireless communication.

[0039] The input device 140 is a device capable of accepting information input to the computer COM from outside. The input device 140 may include an operating device (e.g., a keyboard, a mouse, a touch panel, etc.) that can be operated by a user of the computer COM. The input device 140 may include a recording medium reading device that can read information recorded on a recording medium that is detachable from the computer COM, such as a USB (Universal Serial Bus) memory. Note that when information is input to the computer COM via the communication device 130 (in other words, when the computer COM obtains information via the communication device 130), the communication device 130 may function as an input device.

[0040] The output device 150 is a device capable of outputting information to the outside of the computer COM. The output device 150 may output visual information such as text or images, auditory information such as sound, or tactile information such as vibration, as the information. The output device 150 may include, for example, at least one of a display, a speaker, a printer, and a vibration motor. The output device 150 may be capable of outputting information to a recording medium detachable from the computer COM, such as a USB memory. Note that when the computer COM outputs information via the communication device 130, the communication device 130 may function as an output device.

[0041] For example, when the authentication device 11 is realized by a computer COM, the processor 1101 of the arithmetic device 110 may execute the processing to be performed by the authentication device 11 together with the memory 1201 of the storage device 120 in which the computer program 1201a is stored (in other words, together with the memory 1201 and the computer program 1201a stored in the memory 1201). For example, the processor 1101 may execute the computer program 1201a to realize, within the arithmetic device 110 (for example, within the processor 1101), a logical functional block for executing the processing to be performed by the authentication device 11.

[0042] For example, when the output device 12 is realized by a computer COM, the processor 1101 of the arithmetic device 110, together with the memory 1201 of the storage device 120 in which a computer program 1201a is stored, may execute the processing to be performed by the output device 12. For example, the processor 1101 may execute the computer program 1201a to realize, within the arithmetic device 110, logical functional blocks for executing the processing to be performed by the output device 12.

[0043] For example, when the authentication device 13 is realized by a computer COM, the processor 1101 of the arithmetic device 110, together with the memory 1201 of the storage device 120 in which the computer program 1201a is stored, may execute the processing to be performed by the authentication device 13. For example, the processor 1101 may execute the computer program 1201a to realize a logical function block in the arithmetic device 110 for executing the processing to be performed by the authentication device 13.

[0044] Note that, when the authentication device 11 and the output device 12 are configured as an integrated unit, a single computer COM may realize a single information processing device configured by the authentication device 11 and the output device 12. In this case, the single information processing device may perform an information processing method that acquires biometric information of a user U, performs biometric authentication of the user U based on the biometric information and pre-registered biometric information, and, if the biometric authentication is successful, outputs identification information related to the user U. In this case, the single information processing device may include an acquisition means that acquires the biometric information of the user U, an authentication means that performs biometric authentication of the user U based on the biometric information and pre-registered biometric information, and an output means that outputs identification information related to the user U if the biometric authentication is successful.

[0045] The processor 1101 of the arithmetic device 110 may execute processing that should be performed by the single information processing device, together with the memory 1201 of the storage device 120, in which a computer program 1201a is stored. In this case, the computer program 1201a may be a computer program that causes the computer COM to execute an information processing method that acquires biometric information of a user U, performs biometric authentication of the user U based on the biometric information and pre-registered biometric information, and outputs identification information related to the user U if the biometric authentication is successful.

[0046] As described above, the computer program 1201 a may be recorded on a computer-readable, non-transitory recording medium. The recording medium may have recorded thereon a computer program for causing a computer COM to execute an information processing method for acquiring biometric information of a user U, performing biometric authentication of the user U based on the acquired biometric information and pre-registered biometric information, and outputting identification information related to the user U if the biometric authentication is successful.

[0047] (Technical Effect) The introduction cost of an authentication device with a relatively high authentication accuracy (and therefore a relatively high security level) is often relatively high. Due to the introduction cost, the spread of high-security level authentication devices is slow. On the other hand, safety concerns remain for authentication devices with a low security level (in other words, with a relatively low authentication accuracy).

[0048] In contrast, in the information processing system 1, the authentication device 13 performs biometric authentication of the user U based on the biometric information of the user U, the identification information about the user U output by the output device 12, and multiple pieces of registered biometric information that have been registered in advance.

[0049] For example, before biometric authentication of user U is performed, the authentication device 13 may extract registered biometric information corresponding to user U from multiple pieces of registered biometric information based on the identification information. Then, the authentication device 13 may perform 1:1 authentication based on user U's biometric information and the extracted registered biometric information. Here, 1:1 authentication has a higher security level than 1:N authentication. Therefore, the security level of the authentication device 13 can be improved. Alternatively, the authentication device 13 may perform 1:N authentication based on user U's biometric information and multiple pieces of registered biometric information. If the biometric authentication is successful, the authentication device 13 may determine whether the user U identified by the biometric authentication is the same as the user U indicated by the identification information. In this case, the authentication result of the authentication device 13 can be confirmed using the identification information. This also improves the security level of the authentication device 13.

[0050] As described above, the identification information is information that proves that biometric authentication of user U was successful in the high-security authentication device 11. For this reason, it can be said that the authentication device 11 guarantees that user U, who possesses the identification information, is the actual user. When user U, whose identity is guaranteed by the authentication device 11, is determined to be the actual user through biometric authentication by the authentication device 13, it can be said that there is an extremely high degree of certainty that user U is the actual user. According to the information processing system 1, by using identification information that proves that biometric authentication of user U was successful in the high-security authentication device 11, it is possible to improve the security level of the low-security authentication device 13.

[0051] Second Embodiment A second embodiment relating to an information processing system, an information processing device, an information processing method, and a recording medium will be described with reference to Figures 4 to 7. Below, the second embodiment relating to an information processing system, an information processing device, an information processing method, and a recording medium will be described using an information processing system 2. Note that, for the second embodiment, descriptions that overlap with the description of the first embodiment will be omitted as appropriate. Note that common parts in the drawings are assigned the same reference numerals.

[0052] (Configuration of Information Processing System) In Fig. 4, the information processing system 2 includes an authentication device 11, an output device 12, an authentication device 13, and a server 20. As shown in Fig. 4, the authentication device 11 and the output device 12 are installed at location A. The authentication device 13 is installed at location B. The authentication device 11, the authentication device 13, and the server 20 are configured to be able to communicate with each other via a network NW. The server 20 may be a cloud server. The network NW may be a wide area network such as the Internet. Alternatively, the network NW may be a narrow area network such as a local area network.

[0053] Here, the authentication device 11 is a multimodal biometric authentication device. The authentication device 13 is a single-modal biometric authentication device. In other words, the authentication device 11 is an authentication device with a higher security level than the authentication device 13. In other words, the authentication device 13 is an authentication device with a lower security level than the authentication device 11. For example, the authentication device 11 may be a face / iris multimodal biometric authentication device that uses face information and iris information. For example, the authentication device 11 may be a fingerprint / vein multimodal biometric authentication device that uses fingerprint information and finger vein information. For example, the authentication device 13 may be a face authentication device.

[0054] An example of the configuration of the authentication device 11 will be described with reference to Fig. 5. In Fig. 5, the authentication device 11 includes a calculation unit 111, a storage unit 112, a communication unit 113, an input unit 114, and an output unit 115. Note that the authentication device 11 does not necessarily include at least one of the input unit 114 and the output unit 115. Note that the calculation unit 111, the storage unit 112, the communication unit 113, the input unit 114, and the output unit 115 are elements corresponding to the calculation device 110, the storage device 120, the communication device 130, the input device 140, and the output device 150, respectively. Therefore, descriptions of the calculation unit 111, the storage unit 112, the communication unit 113, the input unit 114, and the output unit 115 will be omitted.

[0055] The calculation unit 111 has an acquisition unit 1111, a collation unit 1112, and a determination unit 1113, which are logically realized functional blocks or physically realized processing circuits. At least one of the acquisition unit 1111, the collation unit 1112, and the determination unit 1113 may be realized in a form in which a logical functional block and a physical processing circuit (i.e., hardware) are mixed.

[0056] The acquisition unit 1111 acquires biometric information of the user U. The matching unit 1112 matches the biometric information of the user U with multiple pieces of registered biometric information that have been registered in advance. For example, the matching unit 1112 may calculate a matching score indicating the degree of match between the user's biometric information and each of the multiple pieces of registered biometric information. The multiple pieces of registered biometric information may be stored in the storage unit 112. For example, if the authentication device 11 is a face / iris multimodal biometric authentication device, the matching unit 1112 may calculate three matching scores for each of the user U's face, left iris, and right iris.

[0057] For example, the determination unit 1113 determines whether the matching score is equal to or greater than a predetermined threshold. For example, if the authentication device 11 is a face / iris multimodal biometric authentication device, the determination unit 1113 may determine whether the matching score for the face is equal to or greater than a predetermined threshold for the face. Similarly, the determination unit 1113 may determine whether the matching score for the left iris is equal to or greater than a predetermined threshold for the left iris. Similarly, the determination unit 1113 may determine whether the matching score for the right iris is equal to or greater than a predetermined threshold for the right iris.

[0058] For example, if the matching score for the face is equal to or greater than the threshold for the face, and the matching score for the left iris is equal to or greater than the threshold for the left iris, and the matching score for the right iris is equal to or greater than the threshold for the right iris, the judgment unit 1113 may determine that user U is a registered person associated with the registered biometric information used to calculate the matching score.

[0059] An example of the configuration of the output device 12 will be described with reference to Fig. 6. In Fig. 6, the output device 12 includes a calculation unit 121, a storage unit 122, a communication unit 123, an input unit 124, and an output unit 125. The output device 12 does not necessarily include the input unit 124. The calculation unit 121, the storage unit 122, the communication unit 123, the input unit 124, and the output unit 125 are elements corresponding to the calculation device 110, the storage device 120, the communication device 130, the input device 140, and the output device 150, respectively. Therefore, descriptions of the calculation unit 121, the storage unit 122, the communication unit 123, the input unit 124, and the output unit 125 will be omitted.

[0060] The calculation unit 121 has, as logically realized functional blocks or physically realized processing circuits, an acquisition unit 1211, a generation unit 1212, and an issuance unit 1213. Note that at least one of the acquisition unit 1211, the generation unit 1212, and the issuance unit 1213 may be realized in a form in which a logical functional block and a physical processing circuit (i.e., hardware) are mixed.

[0061] For example, the authentication device 11 may transmit authentication result information indicating the result of biometric authentication of the user U to the output device 12. In this case, the acquisition unit 1211 may acquire the authentication result information. In this case, the generation unit 1212 may determine whether the authentication is successful or not based on the authentication result information. If it is determined that the authentication is successful, the generation unit 1212 may generate identification information regarding the user U.

[0062] Alternatively, for example, if the biometric authentication of the user U is successful, the authentication device 11 may transmit information indicating that the biometric authentication is successful to the output device 12. In this case, the acquisition unit 1211 may acquire the information indicating that the biometric authentication is successful. If the acquisition unit 1211 acquires the information indicating that the biometric authentication is successful, the generation unit 1212 may generate identification information regarding the user U.

[0063] The issuing unit 1213 issues the generated identification information. For example, the issuing unit 1213 may control the output unit 125 so that a paper medium on which the generated identification information is printed is output from a printer, which is an example of the output unit 125. For example, the issuing unit 1213 may control the communication unit 123 so that the generated identification information is sent to a communication terminal carried by the user U. The issuing unit 1213 may control the output unit 125 so that at least one of text and an image indicating that the identification information has been issued is displayed on the display unit 1251.

[0064] The output device 12 may transmit identification information about the user U to the authentication device 11. The authentication device 11 may register the identification information about the user U in the server 20 in association with a registrant corresponding to the user U identified by biometric authentication.

[0065] An example of the configuration of the authentication device 13 will be described with reference to Fig. 7. In Fig. 7, the authentication device 13 includes a calculation unit 131, a storage unit 132, a communication unit 133, an input unit 134, and an output unit 135. Note that the authentication device 13 does not necessarily have to include at least one of the input unit 134 and the output unit 135. Note that the calculation unit 131, the storage unit 132, the communication unit 133, the input unit 134, and the output unit 135 are elements corresponding to the calculation device 110, the storage device 120, the communication device 130, the input device 140, and the output device 150, respectively. Therefore, descriptions of the calculation unit 131, the storage unit 132, the communication unit 133, the input unit 134, and the output unit 135 will be omitted.

[0066] The calculation unit 131 has, as logically realized functional blocks or physically realized processing circuits, an acquisition unit 1311, a collation unit 1312, and a determination unit 1313. Note that at least one of the acquisition unit 1311, the collation unit 1312, and the determination unit 1313 may be realized in a form in which a logical functional block and a physical processing circuit (i.e., hardware) are mixed.

[0067] The acquisition unit 1311 acquires identification information related to the user U. Here, the authentication device 13 may determine whether the identification information acquired by the acquisition unit 1311 is authentic, based on the identification information registered in the server 20. For example, the identification information output (issued) by the output device 12 may be information for accessing the identification information registered in the server 20. In this case, the acquisition unit 1311 may acquire the identification information related to the user U from the server 20, based on the acquired identification information.

[0068] The acquisition unit 1311 further acquires biometric information of the user U. For example, the matching unit 1312 may extract one piece of registered biometric information corresponding to the user U indicated by the identification information from a plurality of pieces of registered biometric information that have been registered in advance. The matching unit 1312 matches the biometric information of the user U with the extracted registered biometric information. For example, the matching unit 1312 may calculate a matching score indicating the degree of match between the user's biometric information and the extracted registered biometric information. The plurality of pieces of registered biometric information may be stored in the storage unit 132.

[0069] For example, the determination unit 1313 determines whether the matching score is equal to or greater than a predetermined threshold. If it is determined that the matching score is equal to or greater than the predetermined threshold, the determination unit 1313 may determine that the user U is a registered person related to the extracted registered biometric information. In this case, the authentication device 13 may perform one-to-one authentication.

[0070] For example, the matching unit 1312 may calculate a matching score indicating the degree of match between the user's biometric information and each of the multiple registered biometric information. For example, the determination unit 1113 may determine whether the matching score is equal to or greater than a predetermined threshold. If it is determined that the matching score is equal to or greater than the predetermined threshold, the determination unit 1313 may determine that the user U is a registered person associated with the registered biometric information used to calculate the matching score. In this case, the authentication device 13 may perform 1:N authentication. If the biometric authentication of the user U is successful, the determination unit 1313 may determine whether the user U identified by the biometric authentication is the same as the user U indicated by the identification information.

[0071] (Technical Effect) According to the information processing system 1 of the second embodiment, similarly to the information processing system 1 of the first embodiment described above, it is possible to improve the security level of the authentication device 13 having a low security level. In particular, in the second embodiment, the authentication device 11 is a multimodal biometric authentication device. Therefore, in the second embodiment, it can be said that the authentication device 11, which is a multimodal biometric authentication device, guarantees that the user U who possesses the identification information is the person in question. When the biometric authentication of the user U who possesses the identification information is successful in the authentication device 13, it is extremely unlikely that the user U is a third party impersonating the user U. Therefore, according to the second embodiment, it is possible to improve the security level of biometric authentication in a situation where relatively expensive multimodal biometric authentication devices are not widely used.

[0072] <Third embodiment> A third embodiment relating to an information processing system, an information processing device, an information processing method, and a recording medium will be described. Below, the third embodiment relating to an information processing system, an information processing device, an information processing method, and a recording medium will be described using an information processing system 2. Note that, for the third embodiment, descriptions that overlap with the descriptions for the first and second embodiments will be omitted as appropriate. Note that common parts in the drawings are assigned the same reference numerals.

[0073] In the third embodiment, a specific example of identification information related to a user U will be described. In the third embodiment, the location A where the authentication device 11 and the output device 12 are installed is assumed to be an airport. For example, the authentication device 11 and the output device 12 may be installed in an immigration inspection area of ​​the airport. The user U may be a person subject to immigration inspection.

[0074] For example, the authentication device 11 may read information related to the passport of the user U. Examples of the information related to the passport include at least one of a passport number, a facial image, a name, a signature, and an expiration date. For example, the authentication device 11 may read the information related to the passport from an integrated circuit (IC) chip included in the passport. Alternatively, the authentication device 11 may read the information related to the passport by recognizing characters written on the passport using optical character recognition (OCR) technology.

[0075] The authentication device 11 may extract, based on the passport-related information, registered biometric information corresponding to the user U indicated by the passport-related information from a plurality of pre-registered registered biometric information. The authentication device 11 may perform biometric authentication of the user U based on the user U's biometric information and the extracted registered biometric information. In other words, the authentication device 11 may perform one-to-one authentication. If the biometric authentication of the user U is successful, the authentication device 11 may transmit authentication result information indicating the result of the biometric authentication and information related to the user U's passport to the output device 12.

[0076] Alternatively, information related to user U's passport may be associated with user U and registered in advance in the server 20. The authentication device 11 may perform biometric authentication of user U based on the user U's biometric information and multiple pieces of registered biometric information that have been registered in advance. That is, the authentication device 11 may perform 1:N authentication. If the biometric authentication of user U is successful, the authentication device 11 may acquire information related to the passport associated with user U identified by the biometric authentication from the server 20. The authentication device 11 may transmit authentication result information indicating the result of the biometric authentication and information related to user U's passport to the output device 12.

[0077] For example, the output device 12 may output identification information about the user U based on information about the user U's passport. The identification information may include information indicating that the biometric authentication of the user U was successful (success information, information indicating the authentication location, authentication time, etc.) and at least one of the ID, facial image, passport number, name, signature, and passport expiration date of the user U. In this case, the output device 12 may output a two-dimensional barcode as the identification information. Note that the output device 12 may also output a one-dimensional barcode as the identification information.

[0078] (Technical Effect) Two-dimensional barcodes and one-dimensional barcodes can be more easily read by a computer (e.g., authentication device 13) than, for example, a character string. According to the third embodiment, it is possible to output identification information about user U that can be easily read by a computer. For example, if the authentication device 13 is a face authentication device, the authentication device 13 may capture an image of the user U's face using an imaging device (not shown) that captures an image of the user U's face, after reading the two-dimensional barcode or one-dimensional barcode as identification information.

[0079] <Fourth embodiment> A fourth embodiment relating to an information processing system, an information processing device, an information processing method, and a recording medium will be described. Below, the fourth embodiment relating to an information processing system, an information processing device, an information processing method, and a recording medium will be described using an information processing system 2. Note that, for the fourth embodiment, descriptions that overlap with the descriptions for the first to third embodiments will be omitted as appropriate. Note that common parts in the drawings are assigned the same reference numerals.

[0080] In the fourth embodiment, another specific example of identification information related to the user U will be described. In the fourth embodiment, the location A where the authentication device 11 and the output device 12 are installed is assumed to be an airport. For example, the authentication device 11 and the output device 12 may be installed near a SIM (Subscriber Identity Module) sales area in the airport. The user U is assumed to perform biometric authentication using the authentication device 11 after purchasing a new SIM card or eSIM.

[0081] The authentication device 11 may perform biometric authentication of the user U based on the biometric information of the user U and multiple pieces of pre-registered biometric information. That is, the authentication device 11 may perform 1:N authentication. If the biometric authentication of the user U is successful, the authentication device 11 may transmit authentication result information indicating the result of the biometric authentication to the output device 12.

[0082] For example, the output device 12 may acquire information related to a communication terminal owned by the user U (i.e., a communication terminal including a newly purchased SIM card or eSIM). Examples of the information related to the communication terminal include at least one of subscriber information, a telephone number, and a terminal number. The output device 12 may output identification information related to the user U based on the information related to the communication terminal owned by the user U. The identification information may include information indicating that the biometric authentication of the user U was successful (success information, information indicating the authentication location, authentication time, etc.), and at least one of the ID, facial image, name, information related to the SIM card or eSIM (subscriber information, telephone number, information indicating the purchase location, etc.), and the terminal number related to the user U. In this case, the output device 12 may output key information including a list of characters as the identification information related to the user U. The key information may be referred to as a passcode. The key information may also be the telephone number or terminal number of the communication terminal owned by the user U.

[0083] (Technical Effect) Key information including a list of characters can be more easily recognized by the user U than, for example, a barcode. According to the fourth embodiment, it is possible to output identification information about the user U that can be easily recognized by the user U.

[0084] Fifth Embodiment A fifth embodiment relating to an information processing system, an information processing device, an information processing method, and a recording medium will be described with reference to Fig. 8. Hereinafter, the fifth embodiment relating to an information processing system, an information processing device, an information processing method, and a recording medium will be described using an information processing system 2. Note that, for the fifth embodiment, descriptions that overlap with the descriptions for the first to fourth embodiments will be omitted as appropriate. Note that common parts in the drawings are assigned the same reference numerals.

[0085] In the fifth embodiment, the identification information regarding the user U includes location information indicating a location where the identification information can be used (for example, location B in FIG. 4 ). In the fifth embodiment, when the authentication device 11 performs biometric authentication of the user U, the authentication device 11 or the output device 12 may acquire the user U's activity schedule. The user U's activity schedule may include information indicating at least one of the accommodation facilities where the user U will be staying and the stores that the user U will visit. The output device 12 may generate the location information based on the user U's activity schedule. Then, the output device 12 may output the identification information regarding the user U that includes the location information.

[0086] The operation of the authentication device 13 according to the fifth embodiment will be described with reference to the flowchart in Fig. 8. Assume that the output device 12 outputs identification information about a user U, and the user U moves from location A to location B. In Fig. 8, the authentication device 13 acquires the identification information about the user U (step S201). The authentication device 13 determines whether the location indicated by the location information included in the identification information indicates the location where the authentication device 13 is installed (location B in this case) (step S202).

[0087] In the process of step S202, if it is determined that the location indicated by the location information does not indicate the location where the authentication device 13 is installed (step S202: No), the operation shown in Fig. 8 is terminated. On the other hand, in the process of step S202, if it is determined that the location indicated by the location information indicates the location where the authentication device 13 is installed (step S202: Yes), the authentication device 13 acquires biometric information of the user U (step S203).

[0088] Next, the authentication device 13 performs biometric authentication based on the biometric information of the user U and the pre-registered biometric information (step S204). Note that the authentication device 13 may perform 1:1 authentication or 1:N authentication.

[0089] (Technical Effect) In the information processing system 2 according to the fifth embodiment, identification information relating to user U includes location information indicating a location where the identification information can be used. As described above, the location information is generated based on the user U's planned activities. Therefore, the identification information relating to user U cannot be used in a location that is not included in the user U's planned activities. Therefore, the information processing system 2 according to the fifth embodiment can prevent a third party other than user U from fraudulently using the identification information relating to user U.

[0090] Sixth Embodiment A sixth embodiment relating to an information processing system, an information processing device, an information processing method, and a recording medium will be described with reference to Fig. 9. Hereinafter, the sixth embodiment relating to an information processing system, an information processing device, an information processing method, and a recording medium will be described using an information processing system 2. Note that, for the sixth embodiment, descriptions that overlap with the descriptions for the first to fifth embodiments will be omitted as appropriate. Note that the same reference numerals are used to designate common parts on the drawings.

[0091] In the sixth embodiment, the identification information for user U includes expiration information indicating an expiration date of the identification information. The operation of the authentication device 13 according to the sixth embodiment will be described with reference to the flowchart in Fig. 9. Assume that the output device 12 outputs the identification information for user U, and user U moves from location A to location B. In Fig. 9, the authentication device 13 acquires the identification information for user U (step S301).

[0092] The authentication device 13 determines whether the current time is within the expiration date indicated by the expiration date information included in the identification information (step S302). If it is determined in the processing of step S302 that the current time is not within the expiration date (step S302: No), the operation shown in Fig. 9 is terminated. On the other hand, if it is determined in the processing of step S302 that the current time is within the expiration date (step S302: Yes), the authentication device 13 acquires biometric information of the user U (step S303).

[0093] Next, the authentication device 13 performs biometric authentication based on the biometric information of the user U and the pre-registered biometric information (step S304). The authentication device 13 may perform 1:1 authentication or 1:N authentication. If the expiration date of the identification information has passed (i.e., the identification information is invalid), for example, the user U may perform biometric authentication using the authentication device 11, and the identification information for the user U may be reissued.

[0094] (Technical Effect) In the information processing system 2 according to the sixth embodiment, identification information relating to user U includes expiration information indicating an expiration date of the identification information. Therefore, identification information whose expiration date has passed cannot be used. Therefore, the information processing system 2 according to the sixth embodiment can prevent a third party other than user U from fraudulently using identification information relating to user U.

[0095] (Modification) The identification information of the user U may include count information indicating the number of times the identification information can be used. The number of times the identification information can be used may be "1." In other words, the identification information of the user may be disposable identification information.

[0096] Seventh Embodiment A seventh embodiment relating to an information processing system, an information processing device, an information processing method, and a recording medium will be described with reference to Fig. 10. Hereinafter, the seventh embodiment relating to an information processing system, an information processing device, an information processing method, and a recording medium will be described using an information processing system 2. Note that, for the seventh embodiment, descriptions that overlap with the descriptions for the first to sixth embodiments will be omitted as appropriate. Note that common parts in the drawings are assigned the same reference numerals.

[0097] In the seventh embodiment, similar to the fifth embodiment described above, the identification information of the user U includes location information indicating a location where the identification information can be used. Also, in the seventh embodiment, similar to the sixth embodiment described above, the identification information of the user U includes expiration information indicating an expiration date of the identification information.

[0098] The operation of the authentication device 13 according to the seventh embodiment will be described with reference to the flowchart in Fig. 10. Assume that the output device 12 outputs identification information about a user U, and the user U moves from location A to location B. In Fig. 10, the authentication device 13 acquires the identification information about the user U (step S401).

[0099] The authentication device 13 determines whether the current time is within the expiration date indicated by the expiration date information included in the identification information (step S402). If it is determined in the processing of step S402 that the current time is not within the expiration date (step S402: No), the operation shown in Fig. 10 is terminated. On the other hand, if it is determined in the processing of step S402 that the current time is within the expiration date (step S402: Yes), the authentication device 13 determines whether the location indicated by the location information included in the identification information indicates the location where the authentication device 13 is installed (here, location B) (step S403).

[0100] In the process of step S403, if it is determined that the location indicated by the location information does not indicate the location where the authentication device 13 is installed (step S403: No), the operation shown in Fig. 10 is terminated. On the other hand, in the process of step S403, if it is determined that the location indicated by the location information indicates the location where the authentication device 13 is installed (step S403: Yes), the authentication device 13 acquires biometric information of the user U (step S404).

[0101] Next, the authentication device 13 performs biometric authentication based on the biometric information of the user U and the pre-registered biometric information (step S405). Note that the authentication device 13 may perform 1:1 authentication or 1:N authentication.

[0102] (Technical effect) According to the information processing system 2 of the seventh embodiment, similar to the information processing systems 2 of the fifth and sixth embodiments described above, it is possible to prevent a third party other than user U from fraudulently using identification information related to user U.

[0103] Eighth Embodiment An eighth embodiment relating to an information processing system, an information processing device, an information processing method, and a recording medium will be described with reference to FIG. 11 . Hereinafter, the eighth embodiment relating to an information processing system, an information processing device, an information processing method, and a recording medium will be described using an information processing system 2. Note that, for the eighth embodiment, descriptions that overlap with the descriptions of the first to seventh embodiments will be omitted as appropriate. Note that common parts in the drawings are assigned the same reference numerals.

[0104] As described in the fifth and seventh embodiments, the identification information of the user U may include location information indicating a location where the identification information can be used. In the eighth embodiment, a specific example of the operation of the output device 12 for including location information in the identification information will be described with reference to FIG.

[0105] After the authentication device 11 has successfully performed biometric authentication on the user U, the calculation unit 121 of the output device 12 may control the output unit 125 so that an image 200 shown in Fig. 11 is displayed on the display unit 1251. The image 200 is an example of an image that presents to the user U one or more locations around the current location (see "Present" in Fig. 11) where biometric authentication using identification information related to the user U can be performed. Note that "one or more locations where biometric authentication using identification information can be performed" may refer to a location (e.g., accommodation facility, store, etc.) where an authentication device corresponding to the authentication device 13 of the information processing system 2 is installed.

[0106] The user U may select a location where the user U desires to undergo biometric authentication using identification information via the input unit 124 while referring to the image 200 displayed on the display unit 1251. In this case, it can be said that the input unit 124 accepts the input of the user U (i.e., the selection of a location where the user U desires to undergo biometric authentication using identification information). Note that the selection of a location where the user U desires to undergo biometric authentication using identification information can be said to be the user U inputting his or her own plan of action. The generation unit 1212 of the output device 12 (see FIG. 6 ) may generate identification information related to the user U, including location information indicating the location selected by the user U.

[0107] (Technical Effect) According to the information processing system 2 according to the eighth embodiment, the user U can relatively easily input a location (in other words, an action plan) where biometric authentication using identification information is desired.

[0108] Ninth Embodiment A ninth embodiment relating to an information processing system, an information processing device, an information processing method, and a recording medium will be described. Hereinafter, the ninth embodiment relating to an information processing system, an information processing device, an information processing method, and a recording medium will be described using an information processing system 2. Note that, for the ninth embodiment, descriptions that overlap with the descriptions for the first to eighth embodiments will be omitted as appropriate. Note that common parts in the drawings are assigned the same reference numerals.

[0109] In the information processing system 2 according to the ninth embodiment, when biometric authentication using identification information related to a user U is performed in the authentication device 13, the user U is notified that the biometric authentication has been performed. This notification may be sent to the user U regardless of whether the biometric authentication is successful or not. The notification may be sent by the authentication device 13 or the server 20.

[0110] For example, when the authentication device 13 makes the above notification, the calculation unit 131 of the authentication device 13 may transmit a notification indicating that biometric authentication has been performed to the communication terminal of the user U associated with the identification information via the communication unit 133. For example, when the server 20 makes the above notification, the calculation unit 131 of the authentication device 13 may transmit a notification indicating that biometric authentication has been performed to the server 20 via the communication unit 133. The server 20, having received the notification indicating that biometric authentication has been performed, may transmit a notification indicating that biometric authentication has been performed to the communication terminal of the user U associated with the identification information.

[0111] (Technical Effect) In the information processing system 2 according to the ninth embodiment, the user U is notified that biometric authentication has been performed. For example, the notification may be saved in a predetermined application (e.g., a mailer, a dedicated application related to the information processing system 2, etc.). This configuration allows the user U to relatively easily check his or her own behavioral history. Furthermore, if the notification is sent even though the user U has not performed biometric authentication, the user U can recognize that his or her identification information has been fraudulently used by another person.

[0112] <Supplementary Notes> A part or all of the above-described embodiments can be described as, but are not limited to, the following supplementary notes.

[0113] (Supplementary Note 1) An information processing system comprising: a first authentication means for performing a first biometric authentication with a high security level based on first biometric information of a subject and pre-registered biometric information; an output means for outputting identification information regarding the subject when the first biometric authentication is successful; and a second authentication means for performing a second biometric authentication with a low security level based on second biometric information of the subject, the identification information, and pre-registered biometric information.

[0114] (Supplementary Note 2) The information processing system according to Supplementary Note 1, wherein the first biometric information includes multiple types of biometric information, the first authentication means performs multimodal biometric authentication as the first biometric authentication, the second biometric information includes a single type of biometric information, and the second authentication means performs single-modal biometric authentication as the second biometric authentication.

[0115] (Supplementary Note 3) An information processing system according to Supplementary Note 1 or 2, wherein the first biometric information includes facial information and iris information of the subject, the first authentication means performs facial authentication and iris authentication as the first biometric authentication, the second biometric information includes facial information of the subject, and the second authentication means performs facial authentication as the second biometric authentication.

[0116] (Supplementary Note 4) The information processing system according to any one of Supplementary Notes 1 to 3, wherein the output unit outputs a one-dimensional or two-dimensional barcode as the identification information.

[0117] (Supplementary Note 5) The information processing system according to any one of Supplementary Notes 1 to 3, wherein the output unit outputs key information as the identification information.

[0118] (Supplementary Note 6) The information processing system according to any one of Supplementary Notes 1 to 3, wherein the output means outputs a one-dimensional or two-dimensional barcode as the identification information based on information contained in the passport of the subject.

[0119] (Supplementary Note 7) The information processing system according to any one of Supplementary Notes 1 to 3, wherein the output means outputs key information as the identification information based on information relating to a communication terminal carried by the subject person.

[0120] (Supplementary Note 8) The information processing system according to any one of Supplementary Notes 1 to 7, wherein the identification information includes location information indicating a location where the second biometric authentication is performed.

[0121] (Supplementary Note 9) The information processing system according to any one of Supplementary Notes 1 to 8, wherein the identification information includes expiration date information indicating an expiration date.

[0122] (Supplementary Note 10) The information processing system according to Supplementary Note 8, wherein the second authentication means performs the second biometric authentication when the location indicated by the location information included in the identification information corresponds to the location associated with the second authentication means.

[0123] (Supplementary Note 11) The information processing system according to Supplementary Note 9, wherein the second authentication means performs the second biometric authentication if the identification information is within the expiration date indicated by the expiration date information included in the identification information.

[0124] (Appendix 12) An information processing system as described in any one of Appendices 1 to 11, comprising: a display means for displaying one or more locations where the second biometric authentication is performed; and a reception means for receiving input from the subject, wherein the output means includes, in the identification information, location information indicating a location selected by the subject via the reception means from among the one or more locations.

[0125] (Appendix 13) An information processing system according to any one of Appendices 1 to 12, comprising a transmitting means for transmitting authentication execution information indicating that the second biometric authentication has been performed to the subject when the second biometric authentication has been performed.

[0126] (Supplementary Note 14) An information processing device comprising: an acquisition means for acquiring biometric information of a subject; an authentication means for performing biometric authentication of the subject based on the biometric information and pre-registered biometric information; and an output means for outputting identification information regarding the subject when the biometric authentication is successful.

[0127] (Supplementary Note 15) The information processing device according to Supplementary Note 14, wherein the biometric information includes a plurality of types of biometric information, and the authentication unit performs multimodal biometric authentication as the biometric authentication.

[0128] (Supplementary Note 16) The information processing device according to Supplementary Note 14 or 15, wherein the biometric information includes face information and iris information of the subject, and the authentication means performs face authentication and iris authentication as the biometric authentication.

[0129] (Supplementary Note 17) An information processing method that performs a first biometric authentication with a high security level based on first biometric information of a subject and pre-registered biometric information, outputs identification information about the subject if the first biometric authentication is successful, and performs a second biometric authentication with a low security level based on second biometric information of the subject, the identification information, and pre-registered biometric information.

[0130] (Supplementary Note 18) An information processing method that acquires biometric information of a subject, performs biometric authentication of the subject based on the biometric information and pre-registered biometric information, and outputs identification information regarding the subject if the biometric authentication is successful.

[0131] (Supplementary Note 19) A recording medium having recorded thereon a computer program for causing a computer to execute an information processing method for acquiring biometric information of a subject, performing biometric authentication of the subject based on the biometric information and pre-registered biometric information, and outputting identification information regarding the subject if the biometric authentication is successful.

[0132] Furthermore, some or all of the configurations described in Supplementary Notes 2 to 13, which are dependent on Supplementary Note 1, may also be dependent on Supplementary Note 17 in the same dependent relationship as Supplements 2 to 13. Furthermore, some or all of the configurations described in Supplementary Notes 2 to 9, which are dependent on Supplementary Note 1, may also be dependent on Supplementary Notes 14, 18, and 19 in the same dependent relationship as Supplementary Notes 2 to 9. Furthermore, not limited to Supplementary Notes 1, 14, 17, 18, and 19, some or all of the configurations described as Supplements may also be dependent on various hardware, software, various recording means for recording software, or systems, within the scope of the above-mentioned embodiments.

[0133] This disclosure may be modified as appropriate within the scope that does not contradict the gist or idea of ​​the invention that can be read from the claims and the entire specification, and information processing systems, information processing devices, information processing methods, and recording media that involve such modifications are also included in the technical idea of ​​this disclosure.

[0134] 1, 2 Information processing system 11, 13 Authentication device 12 Output device

Claims

1. An information processing system comprising: a first authentication means for performing a first biometric authentication with a high security level based on first biometric information of a subject and pre-registered biometric information; an output means for outputting identification information regarding the subject if the first biometric authentication is successful; and a second authentication means for performing a second biometric authentication with a low security level based on second biometric information of the subject, the identification information, and pre-registered biometric information.

2. The information processing system of claim 1, wherein the first biometric information includes multiple types of biometric information, the first authentication means performs multimodal biometric authentication as the first biometric authentication, the second biometric information includes a single type of biometric information, and the second authentication means performs single-modal biometric authentication as the second biometric authentication.

3. The information processing system of claim 1, wherein the first biometric information includes facial information and iris information of the subject, the first authentication means performs facial authentication and iris authentication as the first biometric authentication, the second biometric information includes facial information of the subject, and the second authentication means performs facial authentication as the second biometric authentication.

4. An information processing system according to claim 1, wherein said output means outputs a one-dimensional or two-dimensional barcode as said identification information.

5. An information processing system according to claim 1, wherein said output means outputs key information as said identification information.

6. An information processing system according to claim 1, wherein said output means outputs a one-dimensional or two-dimensional barcode as said identification information based on information contained in said subject's passport.

7. The information processing system according to claim 1, wherein the output means outputs key information as the identification information based on information relating to a communication terminal carried by the subject person.

8. The information processing system according to claim 1, wherein the identification information includes location information indicating a location where the second biometric authentication is performed.

9. The information processing system according to claim 1, wherein the identification information includes expiration information indicating an expiration date.

10. An information processing system as described in claim 8, wherein the second authentication means performs the second biometric authentication when the location indicated by the location information included in the identification information corresponds to the location associated with the second authentication means.

11. An information processing system according to claim 9, wherein the second authentication means performs the second biometric authentication if the expiration date indicated by the expiration information included in the identification information is within the expiration date.

12. An information processing system as described in claim 1, comprising: a display means for displaying one or more locations where the second biometric authentication is performed; and a reception means for receiving input from the subject, wherein the output means includes in the identification information location information indicating a location selected by the subject via the reception means from among the one or more locations.

13. An information processing system according to claim 1, further comprising a transmitting means for transmitting authentication execution information indicating that the second biometric authentication has been performed to the subject when the second biometric authentication has been performed.

14. An information processing device comprising: an acquisition means for acquiring biometric information of a subject; an authentication means for performing biometric authentication of the subject based on the biometric information and pre-registered biometric information; and an output means for outputting identification information regarding the subject if the biometric authentication is successful.

15. The information processing device according to claim 14, wherein the biometric information includes multiple types of biometric information, and the authentication means performs multimodal biometric authentication as the biometric authentication.

16. An information processing device according to claim 14, wherein the biometric information includes face information and iris information of the subject, and the authentication means performs face authentication and iris authentication as the biometric authentication.

17. An information processing method that performs a first biometric authentication with a high security level based on first biometric information of a subject and pre-registered biometric information, outputs identification information about the subject if the first biometric authentication is successful, and performs a second biometric authentication with a low security level based on second biometric information of the subject, the identification information, and pre-registered biometric information.

18. An information processing method that acquires biometric information of a subject, performs biometric authentication of the subject based on the biometric information and pre-registered biometric information, and outputs identification information regarding the subject if the biometric authentication is successful.

19. A recording medium having recorded thereon a computer program for causing a computer to execute an information processing method that acquires biometric information of a subject, performs biometric authentication of the subject based on the biometric information and pre-registered biometric information, and outputs identification information regarding the subject if the biometric authentication is successful.

Images