Terminal device, terminal control method, and terminal control program

Abstract

This terminal device comprises a registration means that registers identity information including biological information and attribute information of a user, and a determination control means that operates within the host device and that, if a determination request regarding the identity information has been received from a service-providing application which provides at least one service to the user, performs identity authentication of the user using the registered biological information, and if the user has succeeded in the identity authentication, determines whether a determination condition based on the determination request is satisfied using the registered identity information, and outputs the determination results of the determination to the service-providing application.

Description

Terminal device, terminal control method, and terminal control program

[0001] The present disclosure relates to a terminal device, a terminal control method, and a terminal control program.

[0002] In recent years, various application programs (hereinafter referred to as "apps") have been installed on mobile terminals. Users use a single mobile terminal to access a variety of services by using different apps.

[0003] Patent Literature 1 discloses a technology relating to cooperation between a first application and a second application installed on a user terminal. The first application provides a first service to the user. The second application provides a second service to the user. In Patent Literature 1, the first application is a super application, and the second application is a mini application that can be used from the super application.

[0004] Japanese Patent Application Laid-Open No. 2023-066916

[0005] Here, the services provided by each app installed on a mobile device include services that provide benefits to members and payment services. These services require multiple verification processes (or determination processes) related to personal information, such as identity verification (authentication process) and determination of the user's attributes. However, in order to perform multiple verification processes related to personal information in each app, the user must perform operations and procedures, such as registering personal information and performing authentication processes, for each app. Therefore, there is a problem in that using a terminal device such as a mobile device to use multiple services, each of which requires multiple verification processes related to personal information, requires complicated user operations and procedures. Note that the technology disclosed in Patent Document 1 above relates to collaboration between apps that are related to a super app and a mini app.

[0006] In view of the above-mentioned problems, the object of the present disclosure is to provide a terminal device, a terminal control method, and a terminal control program for supporting the provision of services that require verification processing (or determination processing) regarding personal information using an app that operates independently of other apps within the terminal device.

[0007] The terminal device according to the present disclosure comprises: a registration means for registering personal information including biometric information and attribute information of a user; and a determination control means for operating within the device and, when receiving a determination request regarding the personal information from a service providing app that provides at least one service to the user, performing identity authentication of the user using the registered biometric information, and, if the user is successful in identity authentication, determining whether or not the user satisfies a determination condition based on the determination request using the registered personal information, and outputting the determination result to the service providing app.

[0008] The terminal control method according to the present disclosure includes a computer registering personal information including biometric information and attribute information of a user in a storage device, accepting a determination request regarding the personal information from a service providing app that operates within the computer and provides at least one service to the user, performing identity authentication of the user using the registered biometric information when the determination request is accepted, and determining whether or not the user satisfies a determination condition based on the determination request using the registered personal information when the user is successfully authenticated, and outputting the determination result to the service providing app.

[0009] The terminal control program according to the present disclosure causes a computer to execute the following processes: registering personal information including biometric information and attribute information of a user in a storage device; accepting a determination request regarding the personal information from a service providing application that operates within the computer and provides at least one service to the user; authenticating the user using the registered biometric information when the determination request is accepted; determining whether the user satisfies the determination conditions based on the determination request using the registered personal information when the user is successfully authenticated; and outputting the determination result to the service providing application.

[0010] The present disclosure makes it possible to support the provision of services that require verification processing (or determination processing) regarding personal information, using an application that operates independently of other applications within a terminal device.

[0011] FIG. 1 is a block diagram showing the configuration of a terminal device according to the present disclosure. FIG. 2 is a flowchart showing the flow of a terminal control method according to the present disclosure. FIG. 3 is a block diagram showing the overall configuration of a service providing system according to the present disclosure. FIG. 4 is a block diagram showing the configuration of a user terminal according to the present disclosure. FIG. 5 is a flowchart showing the flow of personal identification information registration processing according to the present disclosure. FIG. 6 is a sequence chart showing the flow of member service usage processing according to the present disclosure. FIG. 7 is a flowchart showing the flow of determination control processing according to the present disclosure. FIG. 8 is a sequence chart showing the flow of payment service usage processing according to the present disclosure. FIG. 9 is a sequence chart showing the flow of member service usage processing according to the present disclosure. FIG. 10 is a block diagram showing the configuration of a user terminal according to the present disclosure. FIG. 11 is a sequence chart showing the flow of member service usage processing according to the present disclosure. FIG. 12 is a flowchart showing the flow of determination control processing according to the present disclosure. FIG. 13 is a block diagram showing the overall configuration of a service providing system according to the present disclosure. FIG. 14 is a block diagram showing the configuration of a user terminal according to the present disclosure. FIG. 15 is a block diagram showing the hardware configuration of a terminal device according to the present disclosure.

[0012] Hereinafter, embodiments of the present disclosure will be described in detail with reference to the drawings. In each drawing, the same or corresponding elements are designated by the same reference numerals, and for clarity of explanation, duplicate explanations will be omitted as necessary.

[0013] (First Embodiment) Fig. 1 is a block diagram showing the configuration of a terminal device 1. The terminal device 1 includes a registration unit 11 and a determination control unit 12. The terminal device 1 is an information processing device in which a plurality of independently operating applications are installed. Specifically, the terminal device 1 has installed therein at least a service providing application and an application having a terminal control processing function, which will be described later. The "service providing application" is an application program that operates within the terminal device 1 itself and provides at least one service to the user. The "application having a terminal control processing function" is an application program that operates within the terminal device 1 itself and has at least the functions of the registration unit 11 and the determination control unit 12.

[0014] The registration unit 11 registers personal information including biometric information and attribute information of the user. Specifically, the registration unit 11 registers the personal information acquired from the outside by storing the personal information in either an internal storage device (not shown) of the terminal device 1 or an external storage device (not shown) connected to the terminal device 1.

[0015] The determination control unit 12 receives a determination request regarding personal information from the service providing app. Here, the "determination request regarding personal information" is a request to return a determination result as to whether or not information regarding the personal information satisfies a predetermined determination condition. When the determination control unit 12 receives the determination request regarding personal information, it authenticates the user using registered biometric information. When the user is successfully authenticated, the determination control unit 12 uses the registered personal information to determine whether or not the determination condition based on the determination request is satisfied. The determination control unit 12 then outputs the determination result to the service providing app.

[0016] FIG. 2 is a flowchart showing the flow of the terminal control method. First, the registration unit 11 registers personal information, including biometric information and attribute information of the user, in a predetermined storage device (S11). Next, the determination control unit 12 receives a determination request for the personal information from a service providing application (S12). Here, as described above, the "service providing application" operates within the terminal device 1 and provides at least one service to the user. When the determination control unit 12 receives the determination request in step S12, it authenticates the user using the biometric information registered in step S11 (S13). Then, the determination control unit 12 determines whether the user has been successfully authenticated (S14). If the user has been successfully authenticated in step S14, the determination control unit 12 determines whether the user satisfies the determination condition based on the determination request using the personal information registered in step S11 (S15). Then, the determination control unit 12 outputs the determination result of step S15 to the service providing application (S16). Note that the determination result may be the authentication result of step S14. Furthermore, if the user fails the personal authentication in step S14, the determination control unit 12 outputs the authentication result of the personal authentication in step S14 to the service providing application.

[0017] Here, if multiple applications running on the same terminal device each implement a determination process related to personal information, the user must register (or perform a procedure) and authenticate the personal information for each application, resulting in cumbersome procedures and operations. In contrast, in the terminal device 1 according to the present disclosure, the service providing application does not perform the determination process related to personal information itself. Instead, the determination control unit 12 uniformly accepts determination requests from the service providing applications and outputs the determination results to the application that originated the request. Therefore, the user performs a single registration operation of personal information with the registration unit 11. Meanwhile, the user is not required to perform a registration operation (procedure) of personal information with the service providing application. Furthermore, the service providing application makes a determination request related to personal information to the determination control unit 12 through the user's operation. Then, the determination control unit 12 performs user authentication on behalf of the service providing application and performs a determination process related to the personal information in response to successful authentication, and outputs the determination result to the service providing application. Therefore, the service providing application can provide a service to an appropriate user using the determination result related to the personal information obtained from the determination control unit 12, without performing the personal authentication and determination process related to the personal information that would normally be performed by the application itself. In the above-described relationship between a super app and a mini app, the user invokes a mini app on the display screen of the super app and then operates the mini app launched by the invoked operation. This results in the user operating both the super app and the mini app, resulting in cumbersome operations. In contrast, the terminal device 1 according to the present disclosure seamlessly links a service providing app with an app having the functions of the registration unit 11 and the determination control unit 12, thereby providing appropriate users with services provided by the service providing app. Therefore, by operating the service providing app, the user can actually receive a service based on the determination result of a personal information determination process performed by the determination control unit 12 in another app. Therefore, the technology according to the present disclosure can support the provision of a service that requires personal information verification (or determination) using an app that operates independently of other apps within the terminal device.

[0018] The terminal device 1 includes a processor, a memory, and a storage device (not shown). The storage device stores a computer program that implements the processing of the terminal control method shown in Fig. 2, for example. The processor then loads the computer program from the storage device into the memory and executes the computer program. This allows the processor to implement the functions of the registration unit 11 and the determination control unit 12.

[0019] Alternatively, each component of the terminal device 1 may be realized by dedicated hardware. Furthermore, some or all of the components of each device may be realized by general-purpose or dedicated circuits, processors, etc., or a combination thereof. These may be configured by a single chip, or by multiple chips connected via a bus. Some or all of the components of each device may be realized by a combination of the above-mentioned circuits, etc., and a program. Furthermore, a CPU (Central Processing Unit), a GPU (Graphics Processing Unit), an FPGA (Field-Programmable Gate Array), a quantum processor (quantum computer control chip), etc., may be used as the processor.

[0020] Furthermore, when some or all of the components of the terminal device 1 are realized by multiple information processing devices, circuits, etc., the multiple information processing devices, circuits, etc. may be centrally or decentralized. For example, the information processing devices, circuits, etc. may be realized as a client-server system, a cloud computing system, or the like, in which each device is connected via a communication network. Furthermore, the functions of the terminal device 1, etc. may be provided in a SaaS (Software as a Service) format.

[0021] (Embodiment 2) FIG. 3 is a block diagram showing the overall configuration of a service providing system 1000. The service providing system 1000 is an information system for providing a plurality of services to a user U via an app installed on the user terminal 100. The service providing system 1000 includes a user terminal 100, an identity verification service system 210, a member service system 220, a payment service system 230, and a payment terminal 240. The user terminal 100, the identity verification service system 210, the member service system 220, the payment service system 230, and the payment terminal 240 are communicably connected via a communication network N. Here, the communication network N is a communication line network including wired and wireless lines. Furthermore, the member service system 220 and the payment service system 230 are examples of information systems related to services provided to the user U. In other words, the services provided by the service providing system 1000 are not limited to member-oriented services or payment services.

[0022] It is assumed that the user U carries a personal identification card 300 and a user terminal 100. The personal identification card 300 is a digital identification card such as a driver's license, passport, health insurance card, student ID, or My Number card. The personal identification card 300 is a contactless IC (Integrated Circuit) card capable of short-range wireless communication using a predetermined method. Examples of short-range wireless communication include, but are not limited to, near-field communication (NFC) and Bluetooth Low Energy (BLE). The personal identification card 300 includes a storage medium 3. The storage medium 3 is, for example, an IC chip. The storage medium 3 stores personal information 30. Therefore, it can be said that the user U carries the storage medium 3 in which the personal information 30 is stored.

[0023] The identity information 30 includes a facial image 31 and attribute information 32. The identity information 30 may be called personal information. The facial image 31 is an example of biometric information of the user U. The identity information 30 may also include facial feature information extracted from the facial image 31, together with or instead of the facial image 31. The facial feature information is a feature vector indicating a set of feature amounts, such as the distance between feature points corresponding to the positions of the eyes, nose, mouth, etc. extracted from the facial image. The facial image 31 or the facial feature information extracted from the facial image 31 is an example of master biometric information of the user U.

[0024] The attribute information 32 is information relating to the attributes of the user U. The attribute information 32 includes age information 321, qualification information 322, etc. The attribute information 32 may also include the name, gender, address, telephone number, etc. of the user U. Note that the attribute information 32 in this embodiment is sufficient as long as it includes at least the age information 321.

[0025] The age information 321 is information relating to the age of the user U. The age information 321 is information indicating, for example, the date of birth, (current) age, and generation. The qualification information 322 is information relating to the qualifications held by the user U. The qualification information 322 may be used to prove qualifications for receiving a specified service. The qualification information 322 is, for example, certification information on disability or care level by a public institution, information equivalent to a student ID card, etc.

[0026] The user terminal 100 is an example of the terminal device 1. The user terminal 100 is a portable information processing terminal or information processing device capable of wireless communication. The user terminal 100 is capable of communication via a predetermined method of short-range wireless communication and another method of wireless communication. For example, the user terminal 100 is capable of communication with a personal identification card 300 via short-range wireless communication. The user terminal 100 is also capable of communication with other information systems, etc. via a communication network N via another method of wireless communication. The user terminal 100 is, for example, a smartphone, a tablet terminal, a notebook PC (Personal Computer), etc.

[0027] User terminal 100 has installed thereon identity verification AP (Application) 120, member AP 130, and payment AP 140. In user terminal 100, identity verification AP 120, member AP 130, and payment AP 140 each operate independently. Furthermore, each of member AP 130 and payment AP 140 can operate in conjunction with identity verification AP 120 by calling identity verification AP 120. Furthermore, for example, member AP 130 can also launch payment AP 140 by calling payment AP 140. Each of member AP 130 and payment AP 140 is an example of the above-mentioned service provision app.

[0028] The identity verification AP 120 provides identity verification services by communicating with the identity verification service system 210 via the communication network N. The member AP 130 provides services for members by communicating with the member service system 220 via the communication network N. The payment AP 140 provides payment services by communicating with the payment service system 230 via the communication network N. The identity verification AP 120 also has the functions of the registration unit 11 and determination control unit 12. That is, the member AP 130 and the payment AP 140 each send a determination request regarding identity information to the identity verification AP 120 and receive a determination result from the identity verification AP 120. The specific configuration of the user terminal 100 will be described later.

[0029] When the identity confirmation service system 210 receives a request to call the identity confirmation AP 120 from the member AP 130 or the payment AP 140 via the communication network N, it transfers the request to the identity confirmation AP 120 via the communication network N. Here, the request to call the identity confirmation AP 120 includes a request for determination regarding identity information. Furthermore, when the identity confirmation service system 210 receives a determination result from the identity confirmation AP 120 to the requester, it transfers the determination result to the requester via the communication network N. Note that the identity confirmation service system 210 may execute part of the identity confirmation processing executed by the identity confirmation AP 120 by communicating with the identity confirmation AP 120.

[0030] When the member service system 220 receives a request to call the member AP 130 from the identity verification AP 120 or the payment AP 140 via the communication network N, it forwards the request to the member AP 130 via the communication network N. Furthermore, when the member service system 220 receives a response from the member AP 130 to the requestor, it may forward the response to the requestor via the communication network N. The member service system 220 may execute part of the member-oriented service provision process executed by the member AP 130 by communicating with the member AP 130. The member service system 220 also manages a unique member ID for each user of the member service, in association with information about each member. The member service system 220 then provides member-oriented services to users using the requesting member AP 130 based on the information associated with the member ID received from the member AP 130.

[0031] When the payment service system 230 receives a request to call the payment AP 140 from the identity verification AP 120 or the member AP 130 via the communication network N, it forwards the request to the payment AP 140 via the communication network N. When the payment service system 230 receives a response from the payment AP 140 to the requester, it may forward the response to the requester via the communication network N. When the payment service system 230 receives a payment request from the payment AP 140 or the payment terminal 240 via the communication network N, it executes payment processing. The payment service system 230 may return the payment result to the requester. The payment service system 230 may execute part of the electronic payment service provision processing executed by the payment AP 140 or the payment terminal 240 by communicating with the payment AP 140 or the payment terminal 240. The payment service system 230 also manages a user ID unique to each payment service user, in association with information about each user. Here, information about the user includes, for example, charge balance, points, point expiration date, charge, payment, or point usage history, etc. However, information about the user using the payment service is not limited to these. Then, in response to a payment request received from the payment AP 140 or the payment terminal 240, the payment service system 230 provides a payment service based on the information associated with the user ID and the payment information included in the payment request.

[0032] Each of the identity verification service system 210, the member service system 220, and the payment service system 230 may manage terminal identification information (e.g., telephone number) of the terminal device on which each app is installed. For example, the identity verification service system 210, etc. may accept the request from each app via a deep link. In this case, the parameters of the request include the terminal identification information of the terminal device on which the requesting app is running. Then, if the terminal identification information included in the parameters matches the terminal identification information of the terminal device on which the called app is installed, the identity verification service system 210, etc. may forward the request to the terminal device of the requested app.

[0033] The payment terminal 240 is an information terminal that reads the payment code displayed on the user terminal 100 by the payment AP 140 and performs electronic payment processing. If the read payment code indicates that age verification has been completed, the payment terminal 240 performs electronic payment processing for the product requiring age verification. Alternatively, the payment terminal 240 may have the payment code read by a camera of the user terminal 100 and have the payment AP 140 perform electronic payment processing. When paying for a product requiring age verification, the payment terminal 240 may display a payment code requesting age verification and have the code read by the camera of the user terminal 100. Note that the payment terminal 240 is not essential for the payment services provided by the service providing system 1000.

[0034] 4 is a block diagram showing the configuration of the user terminal 100. The user terminal 100 includes a storage unit 110, a personal authentication AP 120, a member AP 130, a payment AP 140, a camera 150, a display unit 160, and a communication unit 170.

[0035] The memory unit 110 includes, for example, a non-volatile memory device such as a flash memory and a memory such as a RAM (Random Access Memory), i.e., a volatile memory device. The memory unit 110 stores a personal verification AP program 1111, a member AP program 1112, and a payment AP program 1113. The memory unit 110 also includes, as a component not shown, a program that implements processing for realizing known functions of the user terminal 100, such as an OS (Operating System). The memory unit 110 also includes a personal verification AP area 112, a member AP area 113, and a payment AP area 114.

[0036] Personal identification AP program 1111 is a computer program that implements the personal identification information registration process and judgment control process, which are terminal control processes according to this embodiment, i.e., the functions of personal identification AP 120. Member AP program 1112 is a computer program that implements processes that realize the functions of member AP 130. Payment AP program 1113 is a computer program that implements processes that realize the functions of payment AP 140. A control device (not shown) of user terminal 100 loads personal identification AP program 1111, member AP program 1112, and payment AP program 1113 into memory and executes them, thereby realizing the functions of personal identification AP 120, member AP 130, and payment AP 140.

[0037] The personal verification AP area 112 is a storage area allocated to the personal verification AP 120 and accessible by the personal verification AP 120. The personal verification AP area 112 stores personal information 30, a determination history 1121, and terminal information 1122. The personal information 30 is information read from the personal identification card 300 and registered. Therefore, the facial image 31, attribute information 32, age information 321, etc. included in the personal information 30 are the same as the respective pieces of information in the personal information 30 recorded in the storage medium 3 of the personal identification card 300.

[0038] The determination history 1121 is history information of the determination results of determination requests related to personal information. The determination history 1121 includes at least the most recent determination results determined by the personal verification AP 120 as history information. The history information of the determination results includes, for example, date and time information related to the determination result, the content of the determination result (yes / no, etc.), and the determination conditions of the determination target. The date and time information related to the determination result is, for example, the output time or date and time of the determination result, the execution time or date and time of the determination control process, or the reception time or date and time of the determination request. Furthermore, the history information of the determination results may include identification information of the requesting application, the request date and time, a history identification number, etc.

[0039] The terminal information 1122 is information (terminal identification information) for identifying the user terminal 100. The terminal information 1122 is, for example, a telephone number assigned to the user terminal 100, a terminal ID, and the like.

[0040] The member AP area 113 is a storage area that is assigned to the member AP 130 and is accessible by the member AP 130. The member AP area 113 stores a member ID 1131 and terminal information 1132. The member ID 1131 is identification information of the user U managed by the member service system 220. The terminal information 1132, like the terminal information 1122, is terminal identification information of the user terminal 100.

[0041] The payment AP area 114 is a storage area allocated to the payment AP 140 and accessible by the payment AP 140. The payment AP area 114 stores a user ID 1141 and terminal information 1142. The user ID 1141 is identification information of the user U managed by the payment service system 230. The terminal information 1142 is terminal identification information of the user terminal 100, similar to the terminal information 1122.

[0042] The personal verification AP 120 includes a registration unit 121 and a determination control unit 122. The registration unit 121 is an example of the registration unit 11. The registration unit 121 reads personal information 30 from the personal certification card 300 via short-range wireless communication and registers the personal information 30 in the personal verification AP area 112 of the storage unit 110. Specifically, in order to read the personal information 30 from the personal certification card 300, the registration unit 121 accepts input of a reference number from the user U and transmits the reference number to the personal certification card 300 via short-range wireless communication, thereby performing authentication using the reference number. If authentication using the reference number is successful, the registration unit 121 performs biometric authentication of the user U using the master biometric information of the user U stored in the storage medium 3 and the query biometric information acquired from the user U. If user U is successful in biometric authentication, the registration unit 121 registers personal information 30 including master biometric information (e.g., facial image 31) and attribute information 32 of user U stored in the storage medium 3 in the personal verification AP area 112 of the storage unit 110.

[0043] Here, "biometric authentication" refers to information processing that verifies the authenticity of an individual by comparing pre-registered master biometric information with query biometric information acquired or input from the individual during authentication and determining whether the degree of match is above a threshold. Here, "biometric information" refers to data representing a collection of features, such as multiple feature points extracted from an image capturing at least a portion of the user's body and the distances between the feature points. "Master biometric information" refers to biometric information that is to be compared with query biometric information in biometric authentication of the user. Furthermore, "query biometric information" refers to biometric information acquired from the user for biometric authentication and is data that is to be compared with master biometric information.

[0044] Therefore, when the master biometric information is the face image 31, the “query biometric information acquired from the user U” is the face image of the user U captured by the camera 150 based on an instruction from the personal verification AP 120. Alternatively, when the master biometric information is master facial feature information extracted from the face image 31, the query biometric information is the query facial feature information extracted from the face image of the user U captured by the camera 150.

[0045] The determination control unit 122 is an example of the determination control unit 12. The determination control unit 122 includes a reception unit 1221, an authentication unit 1222, a determination unit 1223, an output unit 1224, and a history update unit 1225.

[0046] The reception unit 1221 receives a request for determination regarding personal information from the member AP 130 or the payment AP 140. In the following, a case will be described in which the request for determination regarding personal information indicates a determination condition that the age of the user U is 20 years or older. However, the determination condition is not limited to this.

[0047] When the authentication unit 1222 receives the determination request, it performs identity authentication. The identity authentication may be performed using the biometric authentication described above. In this case, the authentication unit 1222 reads identity information 30 from the identity verification AP area 112 and extracts master facial feature information from a facial image 31 included in the identity information 30. The authentication unit 1222 also extracts query facial feature information from a facial image of the user U captured by the camera 150. The authentication unit 1222 then compares the master facial feature information with the query facial feature information to perform facial authentication as biometric authentication (identity authentication).

[0048] The determination unit 1223 determines whether or not the authentication unit 1222 has successfully authenticated the user U. If the user U has successfully authenticated the user U, the determination unit 1223 determines whether or not the determination condition based on the determination request is satisfied, based on the attribute information 32 included in the read-out user information 30. For example, the determination unit 1223 determines whether or not the user U is 20 years old or older, based on the age information 321.

[0049] The output unit 1224 outputs the determination result by the determination unit 1223 to the application that is the request source. Alternatively, the output unit 1224 may output the authentication result to the request source as the determination result. For example, if identity authentication fails, the output unit 1224 outputs the authentication result to the request source. Alternatively, the determination request regarding identity information may be an identity verification request from user U, that is, the determination condition may be successful identity authentication. In this case, the output unit 1224 outputs the authentication result to the request source as the determination result. Then, the output unit 1224 transmits the determination result to the identity verification service system 210 via the communication network N, with the destination of the determination result set as the request source. As a result, the identity verification service system 210 transmits the determination result to the request source application (e.g., member AP 130) via the communication network N.

[0050] Here, the "determination result" is information indicating whether the user U is 20 years old or older. For example, the determination result may be either "true" indicating that the user U is 20 years old or older, or "false" indicating that the user U is not 20 years old or older (under 20 years old). In other words, the determination result may be Boolean information. This makes it possible to suppress the communication data size of the determination result, reduce the communication load, and improve the response speed to the request source.

[0051] The history update unit 1225 associates the judgment result with the output time of the judgment result (and the judgment condition) and stores the result as history information in the judgment history 1121. If the judgment history 1121 stores the most recent history information or history information for a predetermined number of generations, and there is a limit to the amount of history information that can be stored, the history update unit 1225 may update the judgment history 1121 by overwriting and storing older history information.

[0052] Here, a case where a determination request is received multiple times will be described. First, when the determination control unit 122 receives a determination request from a requester, which is an arbitrary service providing application running in the user terminal 100, within a predetermined time from the output of the determination result, the determination control unit 122 may output a determination result indicating whether or not the determination condition based on the determination request is satisfied to the requester without performing personal authentication. This reduces the processing load on the determination control unit 122 and improves the response speed to the requester.

[0053] Here, the term "any service providing app" includes both a second service providing app that provides a different service from the first service providing app that sent the first determination request, and a first service providing app that sends the second determination request and is the same app that sent the first determination request. For example, assume that member AP 130 sends an initial determination request to identity verification AP 120 and receives the determination result (i.e., identity verification AP 120 outputs the determination result). Thereafter, within a predetermined time, a payment AP 140 different from member AP 130 sends a determination request to identity verification AP 120 (by user operation, etc.). Alternatively, assume that after member AP 130 receives the determination result, member AP 130 sends a second determination request to identity verification AP 120 (by user operation, etc.) within a predetermined time. In these cases, determination control unit 122 is deemed to have received a determination request from the requester, which is any service providing app, within the predetermined time from the output of the determination result.

[0054] Specifically, when the receiving unit 1221 receives a determination request, the determination unit 1223 preferably refers to the determination history 1121 and determines whether or not a predetermined time has passed since the output of the previous determination result. If it is determined that the predetermined time has passed since the output of the previous determination result, the authentication unit 1222 may omit personal authentication. In this case, the determination unit 1223 assumes that personal authentication has been successful and determines whether or not the determination conditions based on the determination request are met, based on the attribute information 32. Here, the determination process by the determination unit 1223 has a lower processing load than the authentication process by the authentication unit 1222, and therefore, even if the authentication process is simply omitted, the effect of shortening the response speed to the request source can be expected.

[0055] Furthermore, the judgment control unit 122 may receive a second judgment request regarding personal information from the requestor within a predetermined time after outputting a first judgment result to the service providing app in response to a first judgment request regarding personal information, and if the first judgment condition based on the first judgment request and the second judgment condition based on the second judgment request are the same conditions, output the first judgment result to the requestor as a judgment result as to whether or not the judgment condition based on the judgment request is met without performing personal authentication and judgment.

[0056] Specifically, the determination unit 1223 may determine whether the current received determination request is within a predetermined time from the output of the most recent determination result under the same determination condition as the currently received determination request, based on the history information included in the determination history 1121. For example, the determination unit 1223 may identify the time of the determination or output closest to the current time among the history information of the determination results under the determination condition that the user U is 20 years old or older, and determine whether the identified time is within a predetermined time from the current time. If it is determined that the current received determination result is within the predetermined time from the output of the previous determination result, the authentication unit 1222 may omit personal authentication, and the determination unit 1223 may omit the determination process. In this case, the output unit 1224 assumes that personal authentication has been successful and that a determination process has been performed to determine whether the determination condition based on the determination request is satisfied, reads the previous determination result from the determination history 1121, and outputs the read determination result to the request source. Therefore, the authentication process and determination process in the personal verification AP 120 are omitted, which further reduces the response speed to the request source.

[0057] Furthermore, when the determination control unit 122 receives a determination request from a second service providing app within a predetermined time from the output of the determination result to the first service providing app, the determination control unit 122 may output a determination result indicating whether or not the determination condition based on the determination request is satisfied to the second service providing app without performing identity authentication. In other words, when a determination request is received from a different app within a predetermined time, the identity verification AP 120 may omit the authentication process. Alternatively, in this case, the identity verification AP 120 may omit both the authentication process and the determination process. This can be expected to have the effect of shortening the response speed to the source of the second and subsequent requests when similar determination requests are received consecutively from multiple different apps within a short period of time.

[0058] Furthermore, when the determination control unit 122 receives a determination request from a requester that is an arbitrary service providing application operating in the user terminal 100 after a predetermined time has elapsed since the output of the determination result, the determination control unit 122 performs second identity authentication of the user U using the biometric information registered in the identity verification AP area 112, and if the user U succeeds in the second identity authentication, the determination control unit 122 determines whether or not the determination condition indicated by the determination request is satisfied based on the registered identity information 30, and outputs the second determination result in the determination to the requester. If a predetermined time has elapsed since the output of the previous determination result, security can be ensured by performing identity authentication and determination processing again.

[0059] The member AP 130 is an example of a first service providing application. The member AP 130 includes a member service providing unit 131 and a determination request unit 132. The member service providing unit 131 performs processing to provide member-oriented services in response to operations by the user U. The member service providing unit 131 may realize the member-oriented service providing processing by communicating with the member service system 220 via the communication network N. When a determination condition that must be satisfied by information related to personal information is imposed in providing the member-oriented service, the determination request unit 132 sends a determination request regarding the imposed determination condition to the identity verification service system 210 via the communication network N, addressed to the identity verification AP 120. At this time, the determination request unit 132 may include terminal information 1132 as a parameter in the determination request. The determination request unit 132 then receives the determination result from the identity verification AP 120 via the identity verification service system 210 and the communication network N. The member service provider 131 determines whether the user U satisfies the determination conditions based on the received determination result, and if the user U satisfies the determination conditions, executes a service provision process for the member. Here, when providing the member service, a determination condition for the user U's age, which must be satisfied by the information related to the user's personal information, may be imposed. For example, if the member's age is 20 years old or older, the member AP 130 may provide a specific service for the member. For example, if the determination result indicates that the user U's age satisfies the determination conditions, the member AP 130 may acquire privilege information with age as an acquisition condition. Alternatively, if the determination result indicates that the user U's age satisfies the determination conditions, the member AP 130 may make the privilege information with age as a usage condition available. Here, the privilege information is electronic data that confers the right to enjoy paid or free privileges. The privilege information may be, for example, value-added information such as electronic coupons or points. Therefore, for example, in the case of a discount coupon or a free coupon for alcoholic beverages or other products that have an age restriction of 20 years or older for purchase, the judgment request unit 132 sends a judgment request regarding personal information to the personal verification AP 120 in response to the user U's operation to obtain or use the coupon.If the received determination result indicates that the user U is 20 years of age or older, the member service providing unit 131 allows the user U to obtain or use discount coupons, free coupons, etc. for products such as alcoholic beverages.

[0060] The payment AP 140 is an example of a second service providing application. The payment AP 140 includes a payment service providing unit 141 and a determination request unit 142. The payment service providing unit 141 performs processing to provide a payment service in response to an operation by the user U. The payment service providing unit 141 may realize the payment service providing processing by communicating with the payment service system 230 via the communication network N. When a determination condition that information related to personal information must satisfy is imposed in providing the payment service, the determination request unit 142 sends a determination request regarding the imposed determination condition to the personal confirmation service system 210 via the communication network N, addressed to the personal confirmation AP 120. At this time, the determination request unit 142 may include terminal information 1142 as a parameter in the determination request. The determination request unit 142 then receives the determination result from the personal confirmation AP 120 via the personal confirmation service system 210 and the communication network N. The payment service providing unit 141 determines whether the user U satisfies the determination condition based on the received determination result, and if the user U satisfies the determination condition, executes a payment service providing process. Here, when providing the payment service, a determination condition for the user U's age, which must be satisfied by information related to the user's personal information, may be imposed. For example, if the determination result indicates that the user U's age satisfies the determination condition, the payment AP 140 may permit payment for a product for which age is a payment condition. For example, when paying for a product such as alcoholic beverages that requires a purchaser to be 20 years of age or older, the determination request unit 142 transmits a determination request for the user's personal information to the personal verification AP 120 in response to the user U's payment operation for the alcoholic beverages or the like. Then, if the received determination result indicates that the user U is 20 years of age or older, the payment service providing unit 141 may display an age-confirmed payment code on the screen. Alternatively, if the received determination result indicates that the user U is 20 years of age or older, the payment service providing unit 141 may transmit a payment request for the alcoholic beverages or the like to the payment service system 230.

[0061] The camera 150 is a photographing device that takes a photograph in response to an operation by the user U or an instruction from the identity verification AP 120, and outputs the captured image to the identity verification AP 120, etc. The display unit 160 has a screen and displays display information output from the identity verification AP 120, the member AP 130, or the payment AP 140. The communication unit 170 is a wireless communication interface with the communication network N. The communication unit 170 may be connected to the Internet via a wireless communication network or a mobile phone network. The communication unit 170 also establishes a connection and communicates with a wireless communication interface of another device of the same type within a predetermined range by short-range wireless communication of a predetermined type. The predetermined type may be compatible with standards or methods such as Bluetooth (registered trademark), BLE (Bluetooth Low Energy), or NFC, but is not limited to these.

[0062] FIG. 5 is a flowchart showing the flow of the personal identification information registration process. User U launches personal identification AP 120 on user terminal 100, selects the personal information registration function, and opens the personal information registration screen. User U then brings his / her personal identification card 300 close to user terminal 100 and inputs the reference number on personal identification card 300 into the personal information registration screen. In response, user terminal 100 authenticates the approached personal identification card 300 using the input reference number (S101). For example, user terminal 100 establishes a short-range wireless communication connection with personal identification card 300 located within a predetermined short-range wireless communication range, and compares the input reference number with the reference number recorded on personal identification card 300. In other words, user terminal 100 performs authentication using the reference number to read personal information 30 from personal identification card 300. For ease of explanation, it is assumed here that authentication is successful.

[0063] Next, in response to a successful authentication, the user terminal 100 reads the personal information 30 from the personal certification card 300 (S102). That is, the user terminal 100 acquires the personal information 30 from the personal certification card 300 by short-range wireless communication. Note that the user terminal 100 reads at least the facial image 31 and attribute information 32 of the personal information 30 from the personal certification card 300.

[0064] The user terminal 100 then captures an image of the user U's face (S103). The user terminal 100 then compares the captured face image 31 with the captured face image to perform face authentication (S104). For example, the user terminal 100 detects a face area from the face image 31 and extracts facial feature information A (master biometric information) from the face area. The user terminal 100 also detects a face area from the captured face image and extracts facial feature information B (query biometric information) from the face area. The user terminal 100 then compares the facial feature information A with the facial feature information B to calculate a degree of match.

[0065] The user terminal 100 then determines whether or not the facial authentication was successful (S105). Specifically, the user terminal 100 determines whether or not the calculated degree of match is equal to or greater than a threshold. If the facial authentication is successful, that is, if the degree of match is equal to or greater than the threshold, the user terminal 100 stores the personal information 30 read in step S102 in the personal verification AP area 112 of the storage unit 110 (S106). The user terminal 100 then displays on the screen a message that registration is complete (S107). On the other hand, if the facial authentication fails in step S105, the user terminal 100 displays on the screen a message that registration is not possible (S108).

[0066] FIG. 6 is a sequence chart showing the flow of the member service usage process. Here, the member service is assumed to be the provision of discount coupons for products such as alcoholic beverages that require an age restriction of 20 years or older for purchase. Note that age-restricted member services are not limited to this. First, the member AP 130 accepts from the user U an operation to acquire a coupon requiring age verification (20 years or older) (S111). In response, the member AP 130 sends a "20 years or older determination request" including terminal information 1132 to the identity verification service system 210 via the communication network N, addressed to the identity verification AP 120 (S112). For example, the member AP 130 may send the determination request via a deep link that invokes an API (Application Programming Interface) for the "20 years or older determination request." In this case, the deep link parameters may include, for example, the mobile phone number of the user terminal 100. Then, the identity verification service system 210 receives the "age 20 or over determination request" from the member AP 130 and transfers the "age 20 or over determination request" to the destination identity verification AP 120 via the communication network N (S113). The identity verification AP 120 then receives the "age 20 or over determination request" from the identity verification service system 210 via the communication network N. In other words, the identity verification AP 120 is called by the member AP 130 via a deep link. The identity verification AP 120 then executes a determination control process (S114).

[0067] 7 is a flowchart showing the flow of the determination control process. First, the reception unit 1221 of the personal verification AP 120 receives a determination request with an age of 20 years or older as a determination condition (S131). Next, the determination unit 1223 refers to the determination history 1121 and determines whether or not a predetermined time has passed since the output of the previous determination result under the same determination condition (S132).

[0068] If a predetermined time has passed since the output of the previous judgment result or if there is no history of judgment results under the same judgment conditions (NO in S132), the authentication unit 1222 reads out the personal information 30 including the facial image 31 and age information 321 from the personal verification AP area 112 (S133). Then, the judgment control unit 122 photographs the face of the user U with the camera 150 (S134). Specifically, the judgment control unit 122 acquires the facial image of the user U photographed by the camera 150. Then, the judgment control unit 122 compares the facial image 31 read out in step S133 with the facial image photographed in step S134 to perform facial authentication (S135).

[0069] Then, the determination unit 1223 determines whether or not the facial authentication was successful (S136). If the user U has succeeded in the facial authentication (YES in S136), the determination unit 1223 determines whether or not the user U is 20 years of age or older based on the age information 321 (S137). After step S137, the output unit 1224 outputs the determination result to the requestor (S138). On the other hand, if the user U has failed the facial authentication (NO in S136), the output unit 1224 outputs the authentication result as the determination result to the requestor (S138). Specifically, the output unit 1224 transmits the determination result to the identity verification service system 210 via the communication network N, with the member AP 130 as the destination.

[0070] On the other hand, if it is determined that the predetermined time has not elapsed since the output of the previous judgment result (YES in step S132), the identity verification AP 120 reads out the previous judgment result under the same judgment conditions from the judgment history 1121 (S141). Then, the output unit 1224 outputs the read out judgment result to the request source, as in step S138 (S142).

[0071] After step S138 or S142, the history update unit 1225 updates the judgment result (and output time) for the same judgment condition in the judgment history 1121 (S143).

[0072] The following describes the case where a predetermined time has passed since the output of the previous determination result (NO in S132) and the user U has succeeded in face authentication (YES in S136). In this case, the determination result output in step S138 includes "true." Returning to FIG. 6, the description will continue.

[0073] Therefore, the identity verification AP 120 transmits the determination result including "true" to the identity verification service system 210 via the communication network N, with the member AP 130 as the destination (S115). For example, the identity verification AP 120 may transmit the determination result via a deep link that calls the member AP 130, which is the caller (requester) of the identity verification AP 120 in the deep link of step S113. In this case, the parameter of the deep link includes, for example, "true". The identity verification service system 210 then receives the determination result from the identity verification AP 120 and transfers the determination result to the destination member AP 130 via the communication network N (S116). The member AP 130 then receives the determination result from the identity verification service system 210 via the communication network N. In other words, the member AP 130 is called from the identity verification AP 120 via the deep link.

[0074] Based on the received determination result, the member AP 130 determines that user U is 20 years of age or older and meets the conditions for obtaining a coupon that requires age verification (20 years of age or older). Therefore, the member AP 130 sends a coupon acquisition request to the member service system 220 via the communication network N (S117). Here, the coupon acquisition request is a request to obtain (issue to user U) a discount coupon for products such as alcoholic beverages. The coupon acquisition request also includes the member ID 1131 and information indicating that age verification has been completed. The information indicating that age verification has been completed may be, for example, a flag indicating that user U is 20 years of age or older.

[0075] The member service system 220 receives a coupon acquisition request from the member AP 130 via the communication network N. The member service system 220 then issues a discount coupon for products such as alcoholic beverages to the member ID included in the received coupon acquisition request (S118). For example, the member service system 220 may register the issued coupon in association with the member ID in a database that manages member information. The member service system 220 then sends a notification of the acquisition of the discount coupon to the member AP 130 via the communication network N (S119). In response, the member AP 130 displays the received discount coupon on its screen (S120). This allows the user U to use the discount coupon for products such as alcoholic beverages when making a payment.

[0076] FIG. 8 is a sequence chart showing the flow of the payment service usage process. Here, a case will be described in which user U uses a discount coupon for products such as alcoholic beverages acquired in FIG. 6 at the time of payment. User U is assumed to use the discount coupon within a predetermined time after acquiring it in FIG. 6. Here, the predetermined time is, for example, 30 minutes. However, the predetermined time is not limited to this.

[0077] First, the member AP 130 accepts from the user U an operation to use a discount coupon that requires age verification (age 20 or older) when making a payment (S151). In response, the member AP 130 sends a coupon use payment request to the payment service system 230 via the communication network N, addressed to the payment AP 140 (S152). For example, the member AP 130 may send the payment request via a deep link that calls an API for the coupon use payment request. In this case, the parameters of the deep link may include, for example, identification information for the payment AP 140, the mobile phone number of the user terminal 100, identification information for the discount coupon, etc.

[0078] The payment service system 230 then receives the coupon-use payment request from the member AP 130 and forwards it to the destination payment AP 140 via the communication network N (S153). The payment AP 140 then receives the coupon-use payment request from the payment service system 230 via the communication network N. That is, the payment AP 140 is called by the member AP 130 via a deep link. Based on the discount coupon identification information included in the received coupon-use payment request, the payment AP 140 determines that the payment is for a discount coupon that requires age verification (age 20 or older). The payment AP 140 then sends a "20 years or older determination request" including the terminal information 1142 to the identity verification service system 210 via the communication network N, addressed to the identity verification AP 120 (S154). The payment AP 140 may also execute step S154 upon receiving a payment operation for alcoholic beverages or an operation to use a discount coupon for alcoholic beverages by the user U.

[0079] The identity confirmation service system 210 receives the "age 20 or over determination request" from the payment AP 140. Then, similar to step S113 in FIG. 6 above, the identity confirmation service system 210 transfers the "age 20 or over determination request" to the destination identity confirmation AP 120 via the communication network N (S155). Then, the identity confirmation AP 120 receives the "age 20 or over determination request" from the identity confirmation service system 210 via the communication network N. In other words, the identity confirmation AP 120 is called by a deep link from the payment AP 140. Then, the identity confirmation AP 120 executes a determination control process (S156).

[0080] As described above, it is assumed here that the determination result in response to the "age 20 or older determination request" was output within 30 minutes. Therefore, in step S132 of FIG. 7, the personal verification AP 120 determines that the predetermined time has passed since the output of the previous determination result (YES in step S132). The personal verification AP 120 then reads, from the determination history 1121, the history information of the previous determination result (under the same determination conditions) output from the member AP 130 in response to the "age 20 or older determination request" (S141). The output unit 1224 then outputs the read determination result to the payment AP 140, which is the requestor (S142). The history update unit 1225 then updates the determination result (and output time) for the same determination conditions in the determination history 1121 (S143). Therefore, the determination result output in step S142 includes "true." Returning to FIG. 8, the explanation continues.

[0081] Therefore, the personal verification AP 120 transmits the determination result including "true" to the personal verification service system 210 via the communication network N, with the payment AP 140 as the destination (S157). The personal verification service system 210 then receives the determination result from the personal verification AP 120 and transfers the determination result to the destination, the payment AP 140, via the communication network N (S158). The payment AP 140 then receives the determination result from the personal verification service system 210 via the communication network N. In other words, the payment AP 140 is called from the personal verification AP 120 by a deep link.

[0082] Based on the received determination result, the payment AP 140 determines that user U is 20 years of age or older, permits the use of a discount coupon for alcoholic beverages that requires age verification (20 years of age or older), and determines that payment for alcoholic beverages is possible. Therefore, the payment AP 140, for example, generates and displays a payment code indicating the use of the discount coupon and age verification (S159). This allows user U to receive payment services using the discount coupon for alcoholic beverages or other products by, for example, holding the payment code displayed on the screen over the payment terminal 240. Alternatively, instead of step S159, the payment AP 140 may send a payment request using the discount coupon for alcoholic beverages or other products to the payment service system 230. This also allows user U to receive payment services using the discount coupon for alcoholic beverages or other products.

[0083] As described above, with the technology disclosed herein, user U only needs to register personal identification information in personal identification AP 120, and does not need to register personal identification information in other applications, such as member AP 130 or payment AP 140. This reduces the burden on user U of the registration procedure for personal identification information. Furthermore, member AP 130 and payment AP 140 do not register and manage personal information in member AP area 113 and payment AP area 114. This allows for centralized management of personal information in personal identification AP area 112 using personal identification AP 120.

[0084] Then, by operating the member AP 130, the user U can automatically perform identity authentication and age verification in the identity verification AP 120. In other words, the user U can smoothly perform age verification using a terminal device. Furthermore, by performing a payment-related operation (e.g., using benefit information) in the member AP 130, the user U can automatically use the functions of the payment AP 140 and the identity verification AP 120. In particular, the user U can also perform identity authentication and age verification required in the payment AP 140 by operating the member AP 130. Therefore, the user U does not need to perform operations requiring age verification for multiple apps.

[0085] Third Embodiment Next, a modified example of the judgment request for personal information or the judgment conditions included in the judgment request will be described. In the second embodiment, the judgment request for personal information was described using an API called a "20 years or older judgment request." However, this is not limited to this example. For example, the judgment request for personal information may include conditions for the attribute information 32 that the user U must satisfy. Specifically, the API for the judgment request for personal information may be a general-purpose "judgment request," and the judgment conditions may be included in the parameters. This facilitates the expansion of the types of judgment conditions for the judgment process for personal information, improving the versatility of the API. Therefore, the ease of adding types of applicable judgment processes improves the convenience of the personal verification AP 120. Furthermore, the judgment conditions based on the judgment request for personal information may include information on the age that the user U must satisfy from the attribute information 32. For example, this can be easily achieved by setting "20 years or older" as a parameter for the general-purpose "judgment request" instead of the above-mentioned "20 years or older judgment request." Alternatively, the judgment conditions based on the judgment request for personal information may include information on the qualifications that the user U must satisfy from the attribute information 43. In other words, the judgment condition is not limited to age. This makes the technology disclosed herein applicable to judgment processes related to various personal information. Alternatively, the judgment request related to personal information may include an age threshold that the user must meet in the judgment condition. For example, instead of the above-mentioned "20 years or older judgment request," it is possible to easily distinguish between the two by setting the parameters of a general-purpose "age above threshold judgment request" to "60 years old" for elderly people and "18 years old" for adults. Alternatively, it is possible to easily realize this by setting the parameters of a general-purpose "under-threshold age judgment request" to "18 years old" for minors.

[0086] The configuration of the service providing system according to the third embodiment is the same as that shown in Fig. 3, and therefore will not be illustrated or described again. In the following, descriptions of functions and processes equivalent to those of the above-described embodiments will be omitted as appropriate.

[0087] FIG. 9 is a sequence chart showing the flow of the member service usage process. Here, the member service is assumed to be the provision of a discount coupon with an age limit of 60 years or older. First, the member AP 130 accepts from the user U an operation to acquire a coupon requiring age verification (60 years or older) (S111a). In response, the member AP 130 sends a "determination request" including the terminal information 1132 and the determination condition "60 years or older" to the identity verification service system 210 via the communication network N, addressed to the identity verification AP 120 (S112a). For example, the member AP 130 may send the determination request via a deep link that invokes the API for the "determination request." In this case, the deep link parameters may include, for example, the mobile phone number of the user terminal 100 and the information "60 years or older." Then, the identity verification service system 210 receives the "determination request" from the member AP 130 and transfers the "determination request" including the terminal information 1132 and the determination condition "60 years old or older" to the destination identity verification AP 120 via the communication network N (S113a). Then, the identity verification AP 120 receives the "determination request" including the terminal information 1132 and the determination condition "60 years old or older" from the identity verification service system 210 via the communication network N.

[0088] Then, the personal verification AP 120 executes a determination control process (S114). Here, the personal verification AP 120 references the determination history 1121 and determines whether or not a predetermined time has passed since the output of the previous determination result under the same determination condition as the determination condition "60 years or older" included in the received "determination request" (S132). The subsequent process is the same as the determination control process in FIG. 7 above. Also, steps S115 to S120 in FIG. 9 are the same as those in FIG. 8 above. However, the coupon acquired and issued is a discount coupon with an age limit of 60 years or older.

[0089] In this way, various cases can be used for the determination request related to personal information or the determination conditions included in the determination request, which provides the same effects as those of the second embodiment, and also makes it easier to expand the types of determination conditions, improving the convenience of the personal verification AP 120.

[0090] (Fourth Embodiment) Next, a modified example for improving security of each of the above-described embodiments will be described. Specifically, when a seed value generated in a service providing app is included in the determination request, the determination control unit 122 may generate a password using the seed value and output the generated password to the service providing app together with the determination result. Note that the configuration of the service providing system according to the fourth embodiment is the same as that shown in FIG. 3 above, and therefore will not be illustrated or described again. However, the description will be given assuming that the user terminal 100 in FIG. 3 has been changed to a user terminal 100b. Note that, in the following, descriptions of functions and processes equivalent to those of the above-described embodiments will be omitted as appropriate.

[0091] 10 is a block diagram showing the configuration of user terminal 100b. Compared to the configuration shown in FIG. 4 above, user terminal 100b has added OTP (One Time Pass) 1123, 1133, and 1143 to personal verification AP area 112, member AP area 113, and payment AP area 114, respectively. Also, compared to the configuration shown in FIG. 4 above, user terminal 100b has added random number generation units 123, 133, and 143 to personal verification AP 120, member AP 130, and payment AP 140, respectively. Also, compared to the configuration shown in FIG. 4 above, user terminal 100b has changed output unit 1224 to output unit 1224b.

[0092] Each of the random number generation units 123, 133, and 143 generates a random number using the same random number generation algorithm for the input seed value and outputs the generated random number as a password. The seed value is a numeric string or the like with a predetermined number of digits generated by an arbitrary random number generation algorithm in each of the identity verification AP 120, member AP 130, and payment AP 140. The OTP 1123 or the like is a numeric string or the like with a predetermined number of digits. The output unit 1224b outputs the OTP 1123 generated by the random number generation unit 123 together with the determination result to the requester.

[0093] FIG. 11 is a sequence chart showing the flow of the member service usage process. Here, the member service is assumed to be the same as, but not limited to, that shown in FIG. 6 . First, the member AP 130 accepts from user U an operation to acquire a coupon requiring age verification (age 20 or older) (S111). In response, the member AP 130 generates a seed value of a predetermined number of digits using an arbitrary random number generation algorithm (S161). The random number generation unit 133 then generates an OTP 1133 from the seed value generated in step S161 (S162). The random number generation unit 133 then stores the OTP 1133 generated in step S162 in the member AP area 113 (S163). The member AP 130 then transmits a "20 years or older determination request" including the terminal information 1132 and the OTP 1133 to the identity verification service system 210 via the communication network N, addressed to the identity verification AP 120 (S112b). At this time, the deep link parameters include, for example, the mobile phone number of the user terminal 100 and the OTP 1133. Then, the identity verification service system 210 receives the "age 20 or older determination request" from the member AP 130 and transfers the "age 20 or older determination request" including the terminal information 1132 and the OTP 1133 to the destination identity verification AP 120 via the communication network N (S113b). Then, the identity verification AP 120 executes the determination control process (S114b).

[0094] 12 is a flowchart showing the flow of the determination control process. First, the reception unit 1221 of the personal verification AP 120 receives a determination request with an age of 20 years or older as a determination condition (S131b). At this time, the determination request includes a seed value. Then, the random number generation unit 123 generates an OTP 1123 from the seed value included in the received determination request (S171). Then, the random number generation unit 123 stores the generated OTP 1123 in the personal verification AP area 112 (S172).

[0095] Thereafter, the determination unit 1223 makes a determination in step S132, as in Fig. 7. If a predetermined time has passed since the output of the previous determination result (NO in S132), the identity verification AP 120 executes steps S133 to S137, as in Fig. 7. Then, the output unit 1224b outputs the determination result (or authentication result) and the OTP 1123 generated in step S171 to the request source (S138b).

[0096] On the other hand, if it is determined that the output of the previous judgment result is within a predetermined time (YES in step S132), the identity verification AP 120 reads out the previous judgment result under the same judgment condition from the judgment history 1121 (S141). Then, the output unit 1224b outputs the read judgment result and OTP 1123 to the requestor, as in step S138b (S142b). After step S138b or S142b, the history update unit 1225 updates the judgment result (and output time) under the same judgment condition in the judgment history 1121 (S143).

[0097] The following describes the case where a predetermined time has passed since the previous output of the determination result (NO in S132) and the user U has succeeded in face authentication (YES in S136). In this case, the determination result output in step S138b includes "true" and OTP1123. Returning to FIG. 10, the description will continue.

[0098] Therefore, the identity verification AP 120 transmits the determination result including "true" and OTP 1123 to the identity verification service system 210 via the communication network N, with the member AP 130 as the destination (S115b). The identity verification service system 210 then receives the determination result from the identity verification AP 120 and transfers the determination result including "true" and OTP 1123 to the destination member AP 130 via the communication network N (S116b). The member AP 130 then receives the determination result from the identity verification service system 210 via the communication network N.

[0099] Here, the member AP 130 reads the OTP 1133 (generated OTP) generated in step S162 from the member AP area 113. The member AP 130 also obtains the OTP 1123 (received OTP) from the received determination result. The member AP 130 then compares the generated OTP with the received OTP to determine whether they match. In FIG. 11 , it is assumed that the generated OTP and the received OTP match. In other words, in this case, the subsequent processing is performed in the same manner as steps S117 to S120 in FIG. 6 above.

[0100] In this way, by using an OTP as a parameter of a deep link, security can be improved.

[0101] (Embodiment 5) In the above-described embodiments 2 to 4, the case of "local authentication" in which the authentication process for personal authentication is executed within the user terminal has been described. In contrast, the present embodiment 5 describes the case of "server authentication" in which the authentication process is executed by a server external to the user terminal.

[0102] Fig. 13 is a block diagram showing the overall configuration of a service providing system 1000c. Compared to Fig. 3 above, the service providing system 1000c is configured by replacing the user terminal 100 and the identity verification service system 210 with a user terminal 100c and an identity verification service system 210c. Note that, in the following, descriptions of functions and processes equivalent to those in the above-described embodiment will be omitted as appropriate.

[0103] The personal identification AP 120c included in the user terminal 100c requests the personal identification service system 210c to perform authentication processing and receives the authentication result.

[0104] The identity verification service system 210c has the following functions in addition to the functions of the identity verification service system 210 described above. The identity verification service system 210c includes a face information DB 250, a registration unit 211, and an authentication unit 212. The face information DB (DataBase) 250 stores identity information 25 in which a user ID 251, facial feature information 252, and attribute information 253 are associated with each other. The user ID 251 is identification information of the user U. The facial feature information 252 is a feature vector indicating a set of feature amounts, such as the distance between feature points corresponding to the positions of the eyes, nose, mouth, etc., extracted from the face image of the user U. The facial feature information 252 is an example of master biometric information of the user U. The attribute information 253 is attribute information 32 read from the personal identification card 300.

[0105] When the registration unit 211 receives a face information registration request from the user terminal 100c via the communication network N, it issues a user ID 251. The registration unit 211 also detects a face area from a face image included in the face information registration request, extracts feature points from the face area, and generates face feature information 252. The registration unit 211 also acquires attribute information included in the face information registration request. The registration unit 211 then associates the issued user ID 251, the generated face feature information 252, and the acquired attribute information 253, and registers them in the face information DB 250 as personal information 25.

[0106] The authentication unit 212 receives a facial authentication request from the user terminal 100c via the communication network N. The facial authentication request includes a query facial image or query facial feature information to be matched. If the facial authentication request includes a query facial image, the authentication unit 212 generates query facial feature information from the query facial image, similar to the registration unit 211. Then, the authentication unit 212 matches the generated query facial feature information with the facial feature information 252 in the facial information DB 250 to calculate a degree of match. Then, the authentication unit 212 determines whether the degree of match is equal to or greater than a threshold. If the facial feature information matches, that is, if the degree of match of the facial feature information is equal to or greater than a threshold, the authentication unit 212 identifies the user ID 251 associated with the facial feature information 252. Then, the authentication unit 212 returns a facial authentication result indicating that facial authentication was successful, including the identified user ID 251, to the user terminal 100c via the communication network N. On the other hand, if the degree of match is less than the threshold, the authentication unit 212 returns the face authentication result, including a message to the effect that face authentication has failed, to the user terminal 100c via the communication network N.

[0107] 14 is a block diagram showing the configuration of a user terminal 100c. Compared to the user terminal 100c shown in FIG. 4, the personal information 30 in the personal verification AP area 112 has been replaced with a user ID 1124. Also, compared to the user terminal 100c shown in FIG. 4, the personal verification AP 120 has been changed to a personal verification AP 120c.

[0108] The user ID 1124 is information that uniquely corresponds to the user ID 251 of the user U issued by the identity verification service system 210c.

[0109] The registration unit 121c transmits a face information registration request including the read face image 31 and attribute information 32 to the identity verification service system 210c via the communication network N. The registration unit 121c then receives the user ID 1124 issued by the registration unit 211 from the identity verification service system 210c via the communication network N and stores it in the identity verification AP area 112. The registration unit 121c then transmits a face authentication request including the face image of the user U captured by the camera 150 to the identity verification service system 210c via the communication network N. The registration unit 121c then receives a face authentication result from the identity verification service system 210c via the communication network N. If the face authentication result indicates success, the registration unit 121c displays on the screen a message that registration is complete. On the other hand, if the face authentication result indicates failure, the registration unit 121c displays on the screen a message that registration is not possible.

[0110] If a predetermined time has elapsed since the output of the previous determination result, the authentication unit 1222c transmits a face authentication request including a face image of the user U captured by the camera 150 to the identity verification service system 210c via the communication network N. Then, the authentication unit 1222c receives the face authentication result from the identity verification service system 210c via the communication network N. Then, if the received face authentication result indicates success, the determination unit 1223 performs the above-mentioned determination process.

[0111] In this way, the technology according to the present disclosure can be realized even in the case of "server authentication," and the same effects as those of the second to fourth embodiments described above can be achieved.

[0112] (Other Embodiments) The determination request regarding the identity information may be a request to determine whether the user U is the identity of the user. In this case, if the identity authentication of the user U is successful, the determination control unit 122 or the like may output to the service providing app a determination result that the user U is the identity of the user, and if the identity authentication of the user U is unsuccessful, output to the service providing app a determination result that the identity of the user U could not be confirmed. In this way, the technology disclosed herein can also be applied to identity authentication.

[0113] Fig. 15 is a block diagram showing the hardware configuration of the terminal device 1. Note that each of the user terminals 100, 100b, and 100c is an example of the terminal device 1. Therefore, Fig. 15 also shows the hardware configuration of the terminal device 1 and each of the user terminals 100, 100b, and 100c. The terminal device 1 includes a memory 101, a processor 102, a network interface 103, a display 104, and a camera 105.

[0114] The memory 101 is composed of a combination of volatile memory and nonvolatile memory. The volatile memory is, for example, a volatile storage device such as RAM, and is a storage area for temporarily storing information while the processor 102 is operating. The nonvolatile memory is, for example, a nonvolatile storage device such as a hard disk or flash memory. The memory 101 stores at least a computer program that implements the processing of a terminal control method for the terminal device 1, etc., according to the present disclosure. The memory 101 may also include storage located away from the processor 102. In this case, the processor 102 may access the memory 101 via an I / O (Input / Output) interface (not shown). The memory 101 may store the above-mentioned identity verification AP program 1111, member AP program 1112, and payment AP program 1113. The memory 101 may also include the above-mentioned identity verification AP area 112, member AP area 113, and payment AP area 114.

[0115] The processor 102 is a control device that controls each component of the terminal device 1. The processor 102 reads and executes software (computer programs) from the memory 101. As a result, the processor 102 realizes the functions of the above-mentioned identity verification AP 120, member AP 130, and payment AP 140. That is, the processor 102 performs processing of the terminal control method for the terminal device 1, etc., according to the present disclosure. The processor 102 may be, for example, a microprocessor, an MPU (Multi Processing Unit), or a CPU (Central Processing Unit). The processor 102 may also include multiple processors.

[0116] The network interface 103 may be used to communicate with a network node. The network interface 103 may include, for example, a network interface card (NIC) conforming to the IEEE 802.3 series. IEEE stands for Institute of Electrical and Electronics Engineers. The network interface 103 may also include a wireless LAN (Local Area Network), a wired LAN, Wi-Fi (registered trademark), Bluetooth (registered trademark), NFC, etc.

[0117] The display 104 is a display device that displays information instructed by the processor 102. The display 104 is, for example, a screen such as a liquid crystal display or an organic electroluminescence (EL) display. The display 104 may include a touch panel. In other words, the display 104 is preferably an input / output device for the user.

[0118] The camera 105 takes an image in response to an instruction from the processor 102 and outputs the taken image to the processor 102. The camera 105 is, for example, a charge coupled device (CCD) image sensor or a complementary metal oxide semiconductor (CMOS) sensor. The camera 105 is one or more image capturing devices.

[0119] Although the above-described embodiment has been described as a hardware configuration, the present disclosure is not limited to this. Any processing in the present disclosure can also be realized by causing a CPU to execute a computer program.

[0120] In the above examples, the program includes instructions (or software code) that, when loaded into a computer, cause the computer to perform one or more functions described in the embodiments. The program may be stored on a non-transitory computer-readable medium or a tangible storage medium. By way of example and not limitation, computer-readable medium or tangible storage medium includes random-access memory (RAM), read-only memory (ROM), flash memory, solid-state drive (SSD) or other memory technology, CD-ROM, digital versatile disc (DVD), Blu-ray® disk or other optical disk storage, magnetic cassette, magnetic tape, magnetic disk storage or other magnetic storage device. The program may also be transmitted on a transitory computer-readable medium or communication medium. By way of example and not limitation, transitory computer-readable medium or communication medium includes electrical, optical, acoustic, or other forms of propagated signals.

[0121] Although the present disclosure has been described above with reference to the embodiments, the present disclosure is not limited to the above-described embodiments. Various modifications that can be understood by those skilled in the art can be made to the configuration and details of the present disclosure within the scope of the present disclosure. Furthermore, each embodiment can be combined with other embodiments as appropriate.

[0122] Each drawing is merely an example for describing one or more embodiments. Each drawing may not relate to only one particular embodiment, but may also relate to one or more other embodiments. As will be understood by those skilled in the art, various features or steps described with reference to any one drawing can be combined with features or steps shown in one or more other drawings to create, for example, an embodiment not explicitly shown or described. Not all features or steps shown in any one drawing are necessary to describe an exemplary embodiment, and some features or steps may be omitted. The order of steps described in any drawing may be changed as appropriate.

[0123] Some or all of the above embodiments may be described as, but are not limited to, the following supplementary notes. (Supplementary Note A1) A terminal device comprising: registration means for registering personal information including biometric information and attribute information of a user; and determination control means for, when a determination request regarding the personal information is received from a service providing app operating within the terminal device and providing at least one service to the user, performing personal authentication of the user using the registered biometric information, and, if the user is successful in the personal authentication, determining whether or not a determination condition based on the determination request is met using the registered personal information, and outputting a determination result of the determination to the service providing app. (Supplementary Note A2) The terminal device according to Supplementary Note A1, wherein, when the determination control means receives the determination request from a requester that is any of the service providing apps operating within the terminal device within a predetermined time from outputting the determination result, the determination control means outputs a determination result of whether or not the determination condition based on the determination request is met to the requester without performing the personal authentication. (Supplementary Note A3) The terminal device according to Supplementary Note A2, wherein the determination control means receives a second determination request regarding the personal information from the requestor within a predetermined time after outputting a first determination result to the service providing app in response to a first determination request regarding the personal information, and, if a first determination condition based on the first determination request and a second determination condition based on the second determination request are the same condition, outputs the first determination result to the requestor as a determination result as to whether the determination condition based on the determination request is satisfied, without performing the personal authentication and the determination. (Supplementary Note A4) The terminal device according to any one of Supplementary Note A1 to Supplementary Note A3, wherein the determination control means receives a determination request from a second service providing app that operates within the terminal device and provides a service different from that of the first service providing app within a predetermined time after outputting the determination result to the first service providing app, without performing the personal authentication. (Supplementary Note A5) The terminal device according to Supplementary Note A4, wherein the first service providing application acquires benefit information using age as an acquisition condition when the determination result indicates that the age of the user satisfies the determination condition.(Supplementary Note A6) The terminal device according to Supplementary Note A4 or A5, wherein the first service provision app allows the user to use benefit information that has age as a usage condition if the determination result indicates that the user's age satisfies the determination condition. (Supplementary Note A7) The terminal device according to any one of Supplementary Note A4 to Supplementary Note A6, wherein the second service provision app allows the user to pay for a product that has age as a payment condition if the determination result indicates that the user's age satisfies the determination condition. (Supplementary Note A8) The terminal device according to any one of Supplementary Note A1 to Supplementary Note A7, wherein the determination request regarding the user's personal information includes a condition of the attribute information that the user must satisfy. (Supplementary Note A9) The terminal device according to Supplementary Note A8, wherein the determination condition includes information of the age that the user must satisfy among the attribute information. (Supplementary Note A10) The terminal device according to Supplementary Note A8 or A9, wherein the determination condition includes information of the qualifications that the user must satisfy among the attribute information. (Appendix A11) The terminal device according to any one of Appendices A1 to A10, wherein the determination request regarding the identity information includes an age threshold that the user must satisfy in the determination conditions. (Appendix A12) The terminal device according to any one of Appendices A1 to A11, wherein the registration means and the determination control means are included in an identity verification app that runs within the terminal device. (Appendix A13) The terminal device according to any one of Appendices A1 to A12, wherein the determination request regarding the identity information is a request for determining whether the user is the identity of the user, and the determination control means, if the user succeeds in the identity authentication, outputs to the service providing app the determination result that the user is the identity of the user, and if the user fails the identity authentication, outputs to the service providing app the determination result that the user cannot be confirmed to be the identity of the user.(Supplementary Note A14) The terminal device according to any one of Supplementary Notes A1 to A13, wherein the determination control means, when receiving the determination request from a requester that is any one of the service providing apps operating in the terminal device after a predetermined time has elapsed since the output of the determination result, performs second identity authentication of the user using the registered biometric information, and if the user succeeds in the second identity authentication, determines whether or not a determination condition indicated by the determination request is satisfied based on the registered identity information, and outputs a second determination result in the determination to the requester. (Supplementary Note A15) The terminal device according to any one of Supplementary Notes A1 to A14, wherein the registration means performs biometric authentication of the user using master biometric information of the user stored in a storage medium and query biometric information acquired from the user, and, if the user succeeds in the biometric authentication, registers the identity information including the biometric information that is the master biometric information and the attribute information of the user stored in the storage medium in a storage means. (Supplementary Note A16) The terminal device according to any one of Supplementary Notes A1 to A15, wherein the determination control means, when a seed value generated in the service providing app is included in the determination request, generates a password using the seed value, and outputs the password together with the determination result to the service providing app. (Supplementary Note B1) A terminal control method, wherein a computer registers personal information including biometric information and attribute information of a user in a storage device, receives a determination request regarding the personal information from a service providing app that runs on the computer and provides at least one service to the user, performs personal authentication of the user using the registered biometric information when the determination request is received, and when the user is successfully authenticated, determines whether or not a determination condition based on the determination request is met using the registered personal information, and outputs the determination result to the service providing app.(Appendix C1) A terminal control program that causes a computer to execute the following processes: registering personal information including biometric information and attribute information of a user in a storage device; accepting a determination request regarding the personal information from a service providing app that operates within the computer and provides at least one service to the user; authenticating the user using the registered biometric information when the determination request is accepted; determining whether the user satisfies a determination condition based on the determination request using the registered personal information when the user is successfully authenticated; and outputting the determination result to the service providing app.

[0124] Some or all of the elements (e.g., configurations and functions) described in Appendix A2 to Appendix A15 that are dependent on Appendix A1 (e.g., device) may also be dependent on Appendix B1 (e.g., method) and Appendix C1 (e.g., program) in the same dependency relationship as Appendix A2 to Appendix A15. Some or all of the elements described in any appendix may be applied to various hardware, software, recording means for recording software, systems, and methods.

[0125] 1 Terminal device, 11 Registration unit, 12 Determination control unit, 1000 Service providing system, U User, N Communication network, 300 Personal identification card, 3 Storage medium, 30 Personal information, 31 Facial image, 32 Attribute information, 321 Age information, 322 Qualification information, 100 User terminal, 110 Storage unit, 1111 Personal identification AP program, 1112 Member AP program, 1113 Payment AP program, 112 Personal identification AP area, 1121 Determination history, 1122 Terminal information, 113 Member AP area, 1131 Member ID, 1132 Terminal information, 114 Payment AP area, 1141 User ID, 1142 Terminal information, 120 Personal identification AP, 121 Registration unit, 122 Determination control unit, 1221 Reception unit, 1222 Authentication unit, 1223 Determination unit, 1224 Output unit, 1225 History update unit, 130 Member AP, 131 Member service providing unit, 132 Determination request unit, 140 Payment AP, 141 Payment service providing unit, 142 Determination request unit, 150 Camera, 160 Display unit, 170 Communication unit, 210 Personal identification service system, 220 Member service system, 230 Payment service system, 240 Payment terminal, 100b User terminal, 1123 OTP, 1133 OTP, 1143 OTP, 1224b Output unit, 123 Random number generation unit, 133 Random number generation unit, 143 Random number generation unit, 1000c Service providing system, 100c User terminal, 1124 User ID, 120c Personal identification AP, 121c Registration unit, 122c Determination control unit, 1222c Authentication unit, 210c identity verification service system, 211 registration unit, 212 authentication unit, 250 face information DB, 25 identity information, 251 user ID, 252 face feature information, 253 attribute information, 10 terminal device, 101 memory, 102 processor, 103 network interface, 104 display, 105 camera

Claims

1. A terminal device comprising: a registration means for registering personal information including biometric information and attribute information of a user; and a determination control means that operates within the device and, when a determination request regarding the personal information is received from a service providing app that provides at least one service to the user, authenticates the user using the registered biometric information, and, if the user is successfully authenticated, determines whether the registered personal information satisfies the determination conditions based on the determination request, and outputs the determination result to the service providing app.

2. The terminal device of claim 1, wherein the judgment control means, when receiving the judgment request from a request source that is any of the service providing apps running within the terminal device within a predetermined time from the output of the judgment result, outputs the judgment result to the request source as to whether or not the judgment conditions based on the judgment request are met without performing the personal authentication.

3. The terminal device described in claim 2, wherein the judgment control means receives a second judgment request regarding the personal information from the requestor within a predetermined time after outputting a first judgment result to the service providing app in response to a first judgment request regarding the personal information, and if the first judgment condition based on the first judgment request and the second judgment condition based on the second judgment request are the same conditions, outputs the first judgment result to the requestor as a judgment result as to whether the judgment condition based on the judgment request is met without performing the personal authentication and the judgment.

4. A terminal device described in any one of claims 1 to 3, wherein the judgment control means operates within the terminal device within a predetermined time from output of the judgment result to the first service providing app, and when it receives the judgment request from a second service providing app that provides a service different from that of the first service providing app, outputs a judgment result to the second service providing app as to whether or not the judgment conditions based on the judgment request are met without performing the personal authentication.

5. The terminal device according to claim 4, wherein the first service providing application acquires bonus information with age as an acquisition condition when the judgment result indicates that the user's age satisfies the judgment condition.

6. A terminal device as described in claim 4 or 5, wherein the first service providing app makes available bonus information that has age as a usage condition when the judgment result indicates that the user's age satisfies the judgment condition.

7. A terminal device described in any one of claims 4 to 6, wherein the second service provision app permits payment for a product in which age is a payment condition if the judgment result indicates that the user's age satisfies the judgment condition.

8. A terminal device according to any one of claims 1 to 7, wherein the request for determination regarding the personal information includes a condition of the attribute information that the user must satisfy.

9. The terminal device according to claim 8, wherein the determination conditions include information on an age that the user must meet among the attribute information.

10. The terminal device according to claim 8 or 9, wherein the judgment conditions include information on qualifications that the user must satisfy from among the attribute information.

11. A terminal device according to any one of claims 1 to 10, wherein the request for judgment regarding the personal information includes an age threshold that the user must meet in the judgment conditions.

12. A terminal device according to any one of claims 1 to 11, wherein the registration means and the determination control means are included in an identity verification application that operates within the terminal device.

13. A terminal device as described in any one of claims 1 to 12, wherein the judgment request regarding the identity information is a request to judge whether the user is the identity of the user, and the judgment control means outputs to the service providing app, if the user succeeds in the identity authentication, the judgment result that the user is the identity of the user, and if the user fails the identity authentication, the judgment result that the user cannot be confirmed to be the identity of the user.

14. A terminal device described in any one of claims 1 to 13, wherein the judgment control means, when receiving the judgment request from a request source which is any of the service providing apps operating within the terminal device after a predetermined time has elapsed since the output of the judgment result, performs second identity authentication of the user using the registered biometric information, and if the user succeeds in the second identity authentication, judges whether or not the judgment condition indicated by the judgment request is met based on the registered identity information, and outputs the second judgment result of the judgment to the request source.

15. A terminal device as described in any one of claims 1 to 14, wherein the registration means performs biometric authentication of the user using the user's master biometric information stored in a storage medium and query biometric information acquired from the user, and if the user is successful in the biometric authentication, registers the personal information including the biometric information that is the master biometric information and the user's attribute information stored in the storage medium in the storage means.

16. A terminal device described in any one of claims 1 to 15, wherein the judgment control means, when a seed value generated in the service providing app is included in the judgment request, generates a password using the seed value, and outputs the password to the service providing app together with the judgment result.

17. A terminal control method in which a computer registers personal information including a user's biometric information and attribute information in a storage device, accepts a judgment request regarding the personal information from a service providing app that operates within the computer and provides at least one service to the user, performs identity authentication of the user using the registered biometric information when the judgment request is accepted, and if the user is successfully authenticated, judges whether the registered personal information satisfies the judgment conditions based on the judgment request, and outputs the judgment result to the service providing app.

18. A terminal control program that causes a computer to execute the following processes: registering personal information including a user's biometric information and attribute information in a storage device; accepting a judgment request regarding the personal information from a service providing app that operates within the computer and provides at least one service to the user; authenticating the user using the registered biometric information when the judgment request is accepted; determining whether the user satisfies the judgment conditions based on the judgment request using the registered personal information when the user is successfully authenticated; and outputting the judgment result to the service providing app.

Images