WO2016190355A1

WO2016190355A1 - Authentication system

Info

Publication number: WO2016190355A1
Application number: PCT/JP2016/065458
Authority: WO
Inventors: 藤原　健吾
Original assignee: 藤原　健吾
Priority date: 2015-05-27
Filing date: 2016-05-25
Publication date: 2016-12-01
Also published as: JPWO2016190355A1

Abstract

Provided is an authentication system that enables an object to be authenticated to be specified from within a real space at a terminal device, and a concerned party's intention about the object to be authenticated to be reflected on the terminal device. An object to be authenticated is specified from within a real space using object specification information that is acquired by executing an application at a terminal device 1, and the terminal device 1 requests an authentication server 2 to perform a query of authentication registration information pertaining to the specified object to be authenticated. Upon receipt of this query request, the authentication server 2 confirms whether or not an application ID for the application executed by the terminal device 1 is pre-stored, and whether or not pre-stored authentication registration information pertaining to the specified object to be authenticated should be transmitted to the terminal device 1. Next, when the application ID for the application executed by the terminal device 1 is pre-stored, and an instruction indicating the transmission of the authentication registration information is pre-stored, the authentication server transmits the authentication registration information pertaining to the specified object to be authenticated to the terminal device 1.

Description

Authentication system

The present invention relates to an authentication system including a terminal device and an authentication server capable of communicating with the terminal device.

A technology called AR (Augmented Reality) is known as a technology for projecting a virtual image or character information created by a computer to a real space. For example, when a still image or moving image representing a real space is displayed on the display screen of a smartphone, additional information is projected onto the real space if a virtual image or character information is displayed in a part of the real space. Thus, an extended real space can be provided to the user. In recent years, application of AR technology to smart glasses (head-mounted display devices) or the like has also attracted attention (see, for example, Patent Document 1 below).

JP 2014-186434 A

The projection of additional information to the real space using AR technology is currently performed without any particular limitation. Therefore, there are frequent cases in which additional information is arbitrarily projected in association with an object without obtaining the consent of the owner of the object in the real space. Etc.) suffered disadvantages. For example, when an image of a competitor's signboard is projected as additional information on a signboard owned by a specific company in real space, not only will the profit of the company owning the signboard be impaired, but the signboard may be misidentified. It can also be a disadvantage for the general public who saw.

Further, the projection of additional information onto the real space using the AR technology may be applied not only to the projection on the object but also to the projection on the person. For example, it is assumed that the privacy of a face recognition target person is infringed by face recognition technology implemented in a smart glass or a communication robot (a robot that provides added value and happiness through dialogue with humans). In addition, it is also assumed that criminals who attempt wire fraud use the AR technology to impersonate police officers or bank employees, and so on.

The present invention has been made in view of the above circumstances, and an authentication system capable of specifying an authentication target from a real space in a terminal device and reflecting the intentions of the parties related to the authentication target to the terminal device. The purpose is to provide.

(1) An authentication system according to the present invention is an authentication system including a terminal device and an authentication server capable of communicating with the terminal device. The terminal device executes an application including a target specifying information acquisition unit and an inquiry request unit. The target specifying information acquisition unit acquires target specifying information for specifying an authentication target. The inquiry request unit requests the authentication server to inquire about authentication registration information related to an authentication target specified based on the acquired target specifying information. The authentication server includes an authentication registration information storage unit, an application identification information storage unit, a transmission necessity storage unit, and an authentication registration information transmission unit. The authentication registration information storage unit stores authentication registration information related to an authentication target in advance. The application identification information storage unit stores in advance identification information assigned to each application executed by the terminal device. The transmission necessity storage unit stores in advance whether authentication registration information is transmitted for each authentication target. When the authentication registration information transmitting unit receives a request for an authentication registration information query from the query request unit of the terminal device, the identification information of the application executed by the terminal device is stored in the application identification information storage unit. And when the authentication registration information is transmitted and stored in the transmission necessity storage unit for the authentication object for which the request for inquiring the authentication registration information is received, the authentication registration information related to the authentication object is stored in the terminal device. Send to.

According to such a configuration, by executing the application in the terminal device and acquiring the target specifying information, the authentication target is specified from the real space, and the authentication registration information related to the specified authentication target is inquired. Requested by the authentication server. In the authentication server that has received the request for the inquiry, whether or not the identification information of the application executed by the terminal device is stored in advance, and the authentication registration information stored in advance for the specified authentication target is stored in the terminal device It is confirmed whether or not to transmit to. If the identification information of the application executed by the terminal device is stored in advance and is stored in advance when the authentication registration information is transmitted, the authentication registration information related to the authentication target is transmitted to the terminal device. Therefore, if the parties related to the authentication target store in the authentication server in advance whether or not to transmit the identification information of the application and the authentication registration information related to the authentication target, the authentication registration information can be stored using the application. Only when an inquiry request is made, the authentication registration information can be transmitted according to the intention of the concerned party. As a result, it is possible to prevent the authentication registration information from being transmitted to a terminal device that executes an application that is not intended by a party related to the authentication target, and to reflect the intention of the party concerned on the terminal device.

(2) The terminal device may include a display unit and a display control unit that reflects the authentication registration information transmitted from the authentication registration information transmission unit on the display of the display unit.

According to such a configuration, the authentication registration information related to the authentication target specified from the real space is transmitted from the authentication server to the terminal device and reflected on the display of the display unit of the terminal device. Thereby, the intention of the person concerned about authentication object can be reflected in the display of the display part of a terminal device. In this way, when the authentication registration information is transmitted, only the authentication registration information related to the authentication target stored in advance is transmitted to the terminal device, and the authentication registration information is reflected on the display of the display unit, thereby allowing the parties in the real space to Can be prevented from suffering disadvantages. The display control unit can also display authentication registration information transmitted to a smartphone or PC connected to the terminal device via a network.

(3) The display control unit may cause the display unit to display an image corresponding to an authentication target based on the authentication registration information transmitted from the authentication registration information transmission unit.

According to such a configuration, the image corresponding to the authentication target can be displayed on the display unit in accordance with the intention of the person concerned with the authentication target. This makes it possible to project additional information on the real space and prevent impersonation and the like, thereby preventing the parties in the real space from suffering disadvantages. The image may be a still image or a moving image.

(4) The display control unit may display another image in a portion corresponding to the authentication target in the display of the display unit based on the authentication registration information transmitted from the authentication registration information transmission unit.

According to such a configuration, it is possible to display another image in a portion corresponding to the authentication target in the display unit in accordance with the intention of the person concerned with the authentication target. Thereby, the part corresponding to authentication object is displayed on a display part, and it can prevent that the person concerned in real space suffers a disadvantage. The another image may be a still image or a moving image.

(5) The authentication registration information may be stored in the authentication registration information storage unit based on an examination performed in advance.

According to such a configuration, it is possible to store authentication registration information with high reliability in the authentication server by performing an examination in advance and transmit the authentication registration information in response to a request from the terminal device. Etc. can be effectively prevented.

(6) The authentication server may further include an arbitrary registration information storage unit that stores arbitrary registration information that can be arbitrarily changed for each authentication target. In this case, the authentication registration information transmission unit may transmit the arbitrary registration information to the terminal device together with the authentication registration information.

According to such a configuration, in addition to the authentication registration information stored in the authentication server based on the examination performed in advance, the authentication server stores arbitrary registration information that can be arbitrarily changed by the parties related to the authentication target. The arbitrary registration information can be transmitted to the terminal device together with the authentication registration information. Accordingly, it is possible to more effectively reflect the intentions of the parties related to the authentication target to the terminal device. It is also possible to transmit only the arbitrary registration information to the terminal device without transmitting the authentication registration information.

(7) The terminal device may further include a camera that captures an image. In this case, the target identification information acquisition unit may acquire the target identification information from a captured image captured by the camera.

According to such a configuration, the target specifying information is acquired from the captured image captured by the camera of the terminal device, and the authentication target is specified from the real space based on the target specifying information. If the authentication registration information is transmitted from the authentication server to the terminal device, the intention of the person concerned with the authentication target can be reflected on the captured image captured by the camera.

(8) The target specifying information may be a marker included in a captured image captured by the camera.

According to such a configuration, a marker included in a captured image captured by a camera can be acquired as target specifying information, and an authentication target can be reliably specified from the real space based on the target specifying information.

According to the present invention, by acquiring target specifying information in a terminal device, it is possible to specify an authentication target from the real space, and a person related to the authentication target relates to the application identification information and the authentication target. If the authentication server stores in advance whether or not to transmit the authentication registration information, the intention of the concerned person can be reflected on the terminal device.

It is the block diagram which showed the example of a structure of the authentication system which concerns on one Embodiment of this invention. It is the block diagram which showed the specific structure of the control part of a terminal device. It is the block diagram which showed the specific structure of the control part of an authentication server. It is the flowchart which showed an example of the process by the control part of the authentication server at the time of transmitting authentication registration information. It is the schematic which showed the example of a display of the image with respect to the display part of a terminal device when authentication object is a person. It is the schematic which showed another example of a display of the image with respect to the display part of a terminal device in case an authentication object is a person. It is the schematic which showed the example of a display of the image with respect to the display part of a terminal device when an authentication target is an object.

1. Overall Configuration of Authentication System FIG. 1 is a block diagram showing a configuration example of an authentication system according to an embodiment of the present invention. The authentication system according to the present embodiment includes a plurality of terminal devices 1 and an authentication server 2 that can communicate with these terminal devices 1. The terminal device 1 and the authentication server 2 can communicate with each other by wire or wireless via a network N such as the Internet.

The terminal device 1 includes a control unit 11, a communication unit 12, an operation unit 13, a display unit 14, a camera 15, and a microphone 16. The terminal device 1 is configured by a personal computer, a smartphone, a tablet computer, a robot, a smart glass, or the like, and is used by a user of the authentication system. The control unit 11 can be connected to the network N via the communication unit 12, and can transmit and receive data to and from the authentication server 2 via the network N.

The operation unit 13 is configured by, for example, a touch key or a pointing device. The display unit 14 is configured by a liquid crystal display, for example. However, the operation unit 13 and the display unit 14 may be integrally configured as a touch panel. The camera 15 is a device for capturing an image, and can capture a still image or a moving image as a captured image. The microphone 16 is a device for acquiring sound. In the present embodiment, the configuration in which the microphone 16 is provided in the terminal device 1 is shown. However, the present invention is not limited to this. For example, a microphone as an external device that is not incorporated in the terminal device 1 can be used for voice communication by wired communication or wireless communication. The configuration may be such that can be acquired.

The authentication server 2 includes a control unit 21, a communication unit 22, and a storage unit 23. The control unit 21 can be connected to the network N via the communication unit 22 and can transmit and receive data to and from each terminal device 1 via the network N. The storage unit 23 includes, for example, a hard disk and a RAM (Random Access Memory). The control unit 21 inputs / outputs data to / from the storage unit 23.

In this embodiment, information related to an authentication target is registered in the authentication server 2 in advance with an object, person, or space in the real space as the authentication target. Examples of the information related to the authentication target include temporary status or stamp in addition to authentication registration information including personal information such as name, address, blood type, workplace, home school or qualification / license. The temporary status is a temporary state of the user such as “I am in a hurry”, “I have paid”, “I want to know product information”, or the like.

The authentication registration information is registered in the storage unit 23 of the authentication server 2 based on, for example, a notification from a related party (individual, corporation, organization, or the like) regarding an authentication target in the real space. When registering the authentication registration information in the authentication server 2, an examination is performed in advance, and only the authentication registration information evaluated as having high reliability by the examination is registered in the authentication server 2.

The authentication registration information registered in the authentication server 2 can be inquired from the terminal device 1 to the authentication server 2. For example, by requesting the authentication server 2 to inquire about the authentication registration information regarding the authentication target for the authentication target included in the captured image captured by the camera 15 of the terminal device 1, the authentication registration information is transferred from the authentication server 2 to the terminal. Sent to the device 1. In the authentication server 2, the identification information (application ID) of the application executed by the terminal device 1 that transmits the authentication registration information from the authentication server 2 is registered in advance based on the notification from the parties about the authentication target. Authentication registration information is transmitted to each terminal device 1 according to the application ID.

2. Specific Configuration of Control Unit of Terminal Device FIG. 2 is a block diagram illustrating a specific configuration of the control unit 11 of the terminal device 1. The control unit 11 includes, for example, a CPU (Central Processing Unit), and functions as the target specifying information acquisition unit 111, the inquiry request unit 112, the display control unit 113, and the like when the CPU executes an application. The application can be installed in the terminal device 1 based on the operation of the operation unit 13 by the user of the terminal device 1.

The target specifying information acquisition unit 111 acquires target specifying information for specifying an authentication target. The target specifying information may be information obtained from what the authentication target itself has, or information obtained from what the authentication target is generated. For example, when the authentication target is an object, information obtained from a code such as a two-dimensional code provided on the object, a wireless signal transmitted from the object, or infrared light constitutes the target specifying information. May be. When the authentication target is a person, biometric authentication information obtained from the person's face, fingerprint, ear hole shape, voiceprint, or the like may constitute the target specifying information.

In the present embodiment, the target identification information acquisition unit 111 acquires target identification information from a captured image captured by the camera 15 or a voiceprint acquired by the microphone 16. When the captured image captured by the camera 15 is an object, the target identification information acquisition unit 111 receives, for example, a code reading unit that reads a code provided on the object, or a wireless signal or infrared ray transmitted from the object A radio signal receiving unit or an infrared receiving unit. When the captured image captured by the camera 15 is a person, the target specifying information acquisition unit 111, for example, a face authentication processing unit, fingerprint authentication processing unit, or voice print authentication for authenticating the face, fingerprint, or voice print of the person. Consists of a processing unit. However, the target identification information acquisition unit 111 is not limited to the above-described configuration, and may be configured by another mechanism such as a GPS reception unit that receives a GPS signal.

Thus, by acquiring the target specifying information by the target specifying information acquisition unit 111, the authentication target can be specified. That is, even if a captured image captured by the camera 15 includes a plurality of objects, persons, or spaces, the object, person, or space from which the target specifying information has been acquired can be specified as an authentication target. It is also possible to recognize the boundary line of the object, person or space specified as the authentication target.

The inquiry request unit 112 requests the authentication server 2 to inquire about authentication registration information related to the authentication target specified based on the acquired target specifying information. Specifically, authentication target identification information obtained from the acquired target identification information is transmitted from the inquiry request unit 112 to the authentication server 2 via the communication unit 12, thereby making a request for the authentication target query. Is called.

The display control unit 113 controls display on the display unit 14. When an inquiry for authentication registration information is requested from the inquiry request unit 112 to the authentication server 2 and the authentication registration information is transmitted from the authentication server 2 to the terminal device 1, the authentication registration information is reflected on the display of the display unit 14. Processing is performed by the display control unit 113. Therefore, for example, if the additional information based on the authentication registration information is projected onto the captured image of the real space photographed by the camera 15 using the AR technology, the expanded real space can be provided.

3. Specific Configuration of Control Unit of Authentication Server FIG. 3 is a block diagram showing a specific configuration of the control unit 21 of the authentication server 2. The control unit 21 includes, for example, a CPU, and functions as an inquiry request reception unit 211, an authentication registration information transmission unit 212, and the like when the CPU executes a program.

The inquiry request reception unit 211 receives an inquiry for authentication registration information from the terminal device 1. Specifically, by receiving identification information of the authentication target obtained from the target specifying information from the terminal device 1 via the communication unit 22, an inquiry for authentication registration information related to the authentication target is received by the query request receiving unit 211. Accepted.

The authentication registration information transmitting unit 212 transmits authentication registration information related to the authentication target to the terminal device 1 for the authentication target for which the request for authentication registration information has been received by the query request receiving unit 211. Specifically, the authentication registration information stored in the storage unit 23 is transmitted from the authentication registration information transmission unit 212 to the terminal device 1 via the communication unit 22.

In the storage unit 23, in addition to the authentication registration information, information such as arbitrary registration information, application ID, and transmission necessity is stored in association with each authentication target. The optional registration information is information related to an authentication target that can be arbitrarily changed by the user without prior examination, and includes information that is updated more frequently than the authentication registration information, such as the temporary status described above. . The application ID is identification information assigned to each application executed by the terminal device 1. The information on necessity of transmission is information on whether or not to transmit preset authentication registration information.

As described above, the storage unit 23 stores the authentication registration information related to the authentication target in advance, and the authentication registration information storage unit stores in advance whether the authentication registration information is transmitted for each authentication target. And an application identification information storage unit that stores application IDs in advance. However, the authentication registration information storage unit, the transmission necessity storage unit, and the application information storage unit are not limited to the configuration assigned to the storage area of one storage unit 23, and for example, at least one is configured by another storage unit. Also good.

4). Operation When Transmitting Authentication Registration Information FIG. 4 is a flowchart illustrating an example of processing by the control unit 21 of the authentication server 2 when transmitting authentication registration information.

When the inquiry request reception unit 211 of the authentication server 2 receives a request for inquiry of authentication registration information from the inquiry request unit 112 of the terminal device 1 (Yes in step S101), the application of the application executed by the terminal device 1 It is confirmed whether or not the ID is stored in the storage unit 23 (step S102). Specifically, when authentication target inquiry request is made, the authentication target identification information and the application ID transmitted from the inquiry request unit 112 of the terminal device 1 are associated with the authentication registration information related to the authentication target. Whether or not the application ID is stored in the storage unit 23 is confirmed.

And when application ID of the application which the terminal device 1 performs is registered into the memory | storage part 23 (it is Yes at step S102), if authentication registration information is transmitted about the certification | authentication object from which the inquiry is requested | required, the memory | storage part 23 Is stored (step S103). Specifically, based on the identification information of the authentication target transmitted from the inquiry request unit 112 of the terminal device 1 when the request for the query of the authentication target is performed, the storage unit is associated with the authentication registration information related to the authentication target. The transmission necessity information stored in 23 is confirmed.

As a result, when the authentication registration information is transmitted and stored in the storage unit 23 (Yes in step S103), the authentication registration information is transmitted from the authentication registration information transmission unit 212 of the authentication server 2 to the terminal device 1 ( Step S104). Specifically, the authentication registration information related to the authentication target is read from the storage unit 23 based on the authentication target identification information transmitted from the inquiry request unit 112 of the terminal device 1 when a request for the authentication target inquiry is made. And transmitted to the terminal device 1. When transmitting the authentication registration information, if the arbitrary registration information is stored in the storage unit 23 in association with the authentication registration information, the arbitrary registration information is transmitted to the terminal device 1 together with the authentication registration information.

On the other hand, when the application ID of the application executed by the terminal device 1 is not registered in the storage unit 23 (No in step S102), or when the authentication registration information is transmitted and is not stored in the storage unit 23 (step S103). No), the authentication registration information is not transmitted to the terminal device 1 that has received the inquiry request. In addition, the structure which can set individually whether to transmit to the terminal device 1 for every various information contained in authentication registration information may be sufficient.

5. Example of Display when Authentication Target is Person FIG. 5A is a schematic diagram showing an example of image display on the display unit 14 of the terminal device 1 when the authentication target is a person. In this example, a person 31 as an authentication target is included in the photographed image 3 in the real space photographed by the camera 15 of the terminal device 1.

The target specifying information acquisition unit 111 of the terminal device 1 specifies the person 31 included in the captured image 3 in the real space as an authentication target based on, for example, a function as a face authentication processing unit. At this time, the face of the person 31 is target specifying information for specifying the authentication target, and constitutes the marker 32 included in the captured image 3 captured by the camera 15. The inquiry request unit 112 of the terminal device 1 requests the authentication server 2 to inquire about the authentication registration information regarding the person 31 specified based on the marker 32, and the authentication registration information transmission unit 212 of the authentication server 2 performs the predetermined registration described above. If the condition is satisfied, authentication registration information related to the person 31 is transmitted to the terminal device 1. As the marker 32 other than the face authentication, for example, the authentication target may be a contact lens mounted on the cornea, or the authentication target such as tattooing on the body surface, saliification, branding, or freezing thumbprint. It may be fixed to the surface.

In this example, the image 33 corresponding to the authentication target is displayed on the display unit 14 based on the authentication registration information transmitted from the authentication server 2 to the terminal device 1. Examples of the image 33 include information registered on the basis of a preliminarily conducted examination such as the name, address, blood type, workplace, home school, or qualification / license of the person 31. Further, information that can be arbitrarily changed by the user, such as a temporary status, based on the arbitrary registration information transmitted from the authentication server 2 to the terminal device 1 together with the authentication registration information may be displayed on the display unit 14 as the image 33. . In this way, by displaying the image 33 in association with the person 31 included in the captured image 3, it is possible to project additional information on the real space using the AR technology.

FIG. 5B is a schematic diagram illustrating another display example of an image on the display unit 14 of the terminal device 1 when the authentication target is a person. In this example, as in the example of FIG. 5A, the photographed image 3 in the real space photographed by the camera 15 of the terminal device 1 includes a person 31 as an authentication target.

In this example, based on the authentication registration information transmitted from the authentication server 2 to the terminal device 1, another image 34 is displayed at a portion corresponding to the authentication target in the display of the display unit 14. This image 34 is an image for hiding the face of the person 31 included in the captured image 3, for example. In this way, it is possible to protect the person 31 in the real space by displaying the image 34 on the real space using the AR technology.

On the other hand, based on the authentication registration information transmitted from the authentication server 2 to the terminal device 1, the change of the image of the person 31 in the captured image 3 displayed on the display unit 14 may be prohibited. Specifically, when the terminal device 1 tries to change the image of the captured image 3, the change of the image of the person 31 is not accepted and the person 31 in the real space is protected. Good.

6). Display Example when Authentication Target is an Object FIG. 6 is a schematic diagram illustrating a display example of an image on the display unit 14 of the terminal device 1 when the authentication target is an object. In this example, an object 41 as an authentication target is included in the captured image 4 in the real space captured by the camera 15 of the terminal device 1. The object 41 may be a building as shown in FIG. 6 or various objects other than a building.

The target specifying information acquisition unit 111 of the terminal device 1 specifies the object 41 included in the captured image 4 in the real space as an authentication target based on, for example, a function as an image processing unit. At this time, the marker 42 provided in advance on the object 41 in the real space constitutes the target specifying information for specifying the authentication target, and the image of the marker 42 included in the captured image 4 captured by the camera 15. Is identified as an authentication target. The inquiry request unit 112 of the terminal device 1 requests the authentication server 2 to inquire about authentication registration information regarding the object 41 specified based on the marker 42, and the authentication registration information transmission unit 212 of the authentication server 2 performs the predetermined registration described above. If the condition is satisfied, authentication registration information regarding the object 41 is transmitted to the terminal device 1.

In this example, the image 43 corresponding to the authentication target is displayed on the display unit 14 based on the authentication registration information transmitted from the authentication server 2 to the terminal device 1. As this image 43, an advertisement, a notice, a decoration image, etc. can be illustrated, for example. In this way, by displaying the image 43 in association with the object 41 included in the captured image 4, it is possible to project additional information on the real space using the AR technique.

On the other hand, based on the authentication registration information transmitted from the authentication server 2 to the terminal device 1, the change of the image of the object 41 in the captured image 4 displayed on the display unit 14 may be prohibited. Specifically, when the terminal device 1 tries to change the image with respect to the captured image 4, the change to the image of the object 41 is not accepted and the object 41 in the real space is protected. Good.

7). Effect (1) In the present embodiment, by executing an application in the terminal device 1 and acquiring the target specifying information, the authentication target is specified from the real space, and the authentication registration information related to the specified authentication target is inquired. The authentication server 2 is requested from the terminal device 1. In the authentication server 2 that has received the request for inquiry, whether or not the application ID of the application executed by the terminal device 1 is stored in advance, and the authentication registration information stored in advance for the specified authentication target is stored. Whether or not to transmit to the terminal device 1 is confirmed. When the application ID of the application executed by the terminal device 1 is stored in advance and is stored in advance when the authentication registration information is transmitted, the authentication registration information related to the authentication target is transmitted to the terminal device 1. . Therefore, if the parties related to the authentication object store in advance in the authentication server 2 whether or not the application ID and authentication registration information related to the authentication object are to be transmitted, the authentication registration information is inquired using the application. Only when the request is made, the authentication registration information can be transmitted according to the intention of the concerned party. As a result, it is possible to prevent the authentication registration information from being transmitted to the terminal device 1 that executes an application that is not intended by the parties related to the authentication target, and to reflect the intentions of the parties concerned on the terminal device 1.

(2) In the present embodiment, authentication registration information related to the authentication target specified from the real space is transmitted from the authentication server 2 to the terminal device 1 and reflected on the display of the display unit 14 of the terminal device 1. Thereby, the intention of the person concerned about authentication object can be reflected in the display of the display part 14 of the terminal device 1. FIG. As described above, when the authentication registration information is transmitted, only the authentication registration information related to the authentication target stored in advance is transmitted to the terminal device 1 and the authentication registration information is reflected on the display of the display unit 14, so that It is possible to prevent the parties concerned from suffering disadvantages.

(3) In this embodiment, as illustrated in FIGS. 5A, 5B, and 6,

images

33 and 43 corresponding to the authentication target are displayed on the display unit 14 in accordance with the intentions of the parties related to the authentication target. Can be displayed. This makes it possible to project additional information on the real space and prevent impersonation and the like, thereby preventing the parties in the real space from suffering disadvantages.

(4) On the other hand, in the case where another image 34 is displayed on the part corresponding to the authentication target in the display of the display unit 14 in accordance with the intention of the person concerned with the authentication target, the part corresponding to the authentication target is By being displayed on the display unit 14, it is possible to prevent a person concerned in the real space from suffering a disadvantage.

(5) In this embodiment, since the authentication registration information with high reliability can be stored in the authentication server 2 by performing the examination in advance, the authentication registration information can be transmitted in response to a request from the terminal device 1. And spoofing can be effectively prevented.

(6) In this embodiment, apart from the authentication registration information stored in the authentication server 2 based on a preliminarily conducted examination, optional registration information that can be arbitrarily changed by the parties related to the authentication target is stored in the authentication server 2. The arbitrary registration information can be stored and transmitted to the terminal device 1 together with the authentication registration information. Therefore, it is possible to more effectively reflect the intentions of the parties related to the authentication target to the terminal device 1.

(7) In the present embodiment, as illustrated in FIGS. 5A, 5B, and 6, target specifying information is acquired from the captured

images

3 and 4 captured by the camera 15 of the terminal device 1, and the target specifying information is acquired. The authentication object is specified from the real space based on the above. If the authentication registration information is transmitted from the authentication server 2 to the terminal device 1, the intentions of the parties related to the authentication target can be reflected in the captured

images

3 and 4 captured by the camera 15.

(8) In the present embodiment, the

markers

32 and 42 included in the captured

images

3 and 4 captured by the camera 15 are acquired as target specifying information, and the authentication target is reliably specified from the real space based on the target specifying information. can do.

8). In the above-described embodiment, the terminal device 1 includes the operation unit 13 and the display, such as a personal computer, a smartphone, a tablet computer, or a communication robot (a robot that provides added value and happiness through dialogue with humans). The case where it is the structure provided with the part 14 was demonstrated. However, the configuration is not limited to such a configuration, and the terminal device 1 may have a configuration including only the display unit 14 such as a smart glass. In this case, the operation instruction to the terminal device 1 may be performed by inputting a signal other than the operation signal, such as an audio signal, to the terminal device 1.

DESCRIPTION OF SYMBOLS 1 Terminal device 2

Authentication server

3,4 Image | photographed image 11 Control part 12 Communication part 13 Operation part 14 Display part 15 Camera 21 Control part 22 Communication part 23 Memory | storage part 31

Person

32, 42

Marker

33, 34, 43 Image 41 Object 111 Object Specific information acquisition unit 112 Inquiry request unit 113 Display control unit 211 Inquiry request reception unit 212 Authentication registration information transmission unit

Claims

An authentication system including an authentication server capable of communicating with a terminal device and the terminal device,
The terminal device
A target identification information acquisition unit for acquiring target identification information for identifying an authentication target;
Executing an application including an inquiry requesting unit that requests the authentication server to make an inquiry about authentication registration information related to an authentication object specified based on the acquired object specifying information;
The authentication server is
An authentication registration information storage unit that stores authentication registration information related to an authentication target in advance;
An application identification information storage unit that stores in advance identification information assigned to each application executed by the terminal device;
A transmission necessity storage unit that stores in advance whether or not to transmit authentication registration information for each authentication target;
When an inquiry request for authentication registration information is received from the inquiry request unit of the terminal device, identification information of an application executed by the terminal device is stored in the application identification information storage unit, and authentication registration information An authentication registration information transmitting unit that transmits authentication registration information related to the authentication target to the terminal device when authentication registration information is transmitted and stored in the transmission necessity storage unit when the authentication target is received An authentication system comprising:
The terminal device
A display unit;
The authentication system according to claim 1, further comprising: a display control unit that reflects the authentication registration information transmitted from the authentication registration information transmission unit on the display of the display unit.
3. The authentication system according to claim 2, wherein the display control unit causes the display unit to display an image corresponding to an authentication target based on the authentication registration information transmitted from the authentication registration information transmission unit.
The display control unit displays another image on a portion corresponding to an authentication target in the display of the display unit based on the authentication registration information transmitted from the authentication registration information transmission unit. The authentication system described in.
The authentication system according to any one of claims 1 to 4, wherein the authentication registration information is stored in the authentication registration information storage unit based on an examination performed in advance.
The authentication server further includes an optional registration information storage unit that stores optional registration information that can be arbitrarily changed for each authentication target,
The authentication system according to claim 5, wherein the authentication registration information transmission unit transmits the arbitrary registration information to the terminal device together with the authentication registration information.
The terminal device further includes a camera for taking an image,
The authentication system according to any one of claims 1 to 6, wherein the target specifying information acquisition unit acquires the target specifying information from a captured image captured by the camera.
The authentication system according to claim 7, wherein the target identification information is a marker included in a captured image captured by the camera.
The authentication system according to claim 8, wherein the marker is a contact lens to be authenticated on a cornea.
The authentication system according to claim 8, wherein the marker is fixed to a surface to be authenticated and includes a tattoo on the body surface, a calibration, a branding mark, or a freezing thumbprint.
A microphone that captures audio,
9. The authentication system according to claim 1, wherein the target specifying information acquisition unit acquires the target specifying information from a voice print acquired by the microphone.