IP Library Granted Patent US 12,118,067
Granted Patent B2
US 12,118,067 · App. 17/058,374 · Granted Oct 15, 2024

Authentication system, authentication terminal, user terminal, authentication method, and program

Inventor: Yeongnam Chae (Tokyo, JP)
Assignee: Rakuten Group, Inc.
G06F21/32
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,118,067
App. No.
17/058,374
Granted
Oct 15, 2024
Kind
B2
Abstract

Authentication means ( 102 ) of an authentication system (S) performs authentication based on authentication information acquired by using an authentication terminal ( 30 ) and authentication information registered in storage means ( 100 ) in association with identification information on a user in a vicinity of the authentication terminal ( 30 ). Possibility determination means ( 103 ) determines, when there are a plurality of users in the vicinity of the authentication terminal ( 30 ), whether there is a possibility of one user being authenticated as another user. Restriction means ( 104 ) restricts successful authentication when it is determined that there is the possibility.

Claims (44)

1. An authentication system, comprising at least one memory configured to store computer program code; and

at least one processor configured to operate as instructed by the computer program code, the computer program code including:

first authentication code configured to cause the at least one processor to perform authentication of a user in a vicinity of an authentication terminal based on first authentication information acquired by using the authentication terminal and second authentication information registered in a storage in association with identification information on the user, wherein performing authentication includes calculating a feature amount of the user's face, the feature amount indicates features including a relative position, size, or shape of a facial part, the first authentication information is the feature amount acquired by using the authentication terminal, and the second authentication information is the feature amount registered in the storage in association with the identification information on the user;

determining code configured to cause the at least one processor to determine, when there are the user and another user who is different from the user in the vicinity of the authentication terminal, a possibility of the user being authenticated as the another user, by comparing the second authentication information of the user and the second authentication information of the another user; and

second authentication code configured to cause the at least one processor to prevent the execution of the first authentication code, when the determining code determines that there is the possibility.

2. The authentication system according to claim 1 , wherein the second authentication code is further configured to cause the at least one processor to permit the successful authentication when, after the successful authentication has been prevented, the determining code does not determine that there is the possibility.

3. The authentication system according to claim 1 , wherein the program code further includes notification code configured to cause the at least one processor to issue a predetermined notification to at least one of the user and the another user when the determining code determines that that there is the possibility.

4. The authentication system according to claim 1 ,

wherein the program code further includes acquiring code configured to cause the at least one processor to acquire the identification information from a user terminal that has approached the authentication terminal, and

wherein the acquiring code is configured to cause the at least one processor to acquire the second authentication information to perform the authentication based on the identification information acquired from the user terminal.

5. The authentication system according to claim 4 , wherein the at least one does not perform the second authentication code when the user terminal that has approached the authentication terminal subsequently moves away from the authentication terminal.

6. The authentication system according to claim 1 ,

wherein the authentication system comprises the user terminal, and

wherein the user terminal is configured to:

acquire authentication terminal position information on a position of the authentication terminal;

acquire user terminal position information including a position of itself;

determine, based on the authentication terminal position information and the user terminal position information, whether the user terminal has approached the authentication terminal; and

transmit the identification information when the user terminal determines that the user terminal has approached the authentication terminal.

7. The authentication system according to claim 6 ,

wherein the user terminal is configured to:

determine, based on the authentication terminal position information and the user terminal position information, whether the user terminal has moved away from the authentication terminal; and

transmit a predetermined notification when the user terminal determines that the user terminal has moved away from the authentication terminal, and

wherein the at least one processor is configured to exclude, when the predetermined notification is received, the registered authentication information such that the registered authentication information is not used in the authentication.

8. The authentication system according to claim 1 ,

wherein the determining code is further configured to cause the at least one processor to determine, based on communication content of short-range wireless communication performed between the authentication terminal and a user terminal by using a wireless communication ID acquired from the user terminal, whether there is a user in the vicinity of the authentication terminal, and

determine the possibility when the determining code determines that there are the user and the another user in the vicinity of the authentication terminal based on the communication content of the short-range wireless communication.

9. The authentication system according to claim 8 ,

wherein in the short-range wireless communication, a distance between the authentication terminal and the user terminal is measurable, and

wherein the determination code is further configured to cause the at least one processor to determine whether there is a user in the vicinity of the authentication terminal based on the distance measured by the short-range wireless communication.

10. The authentication system according to claim 1 , wherein the second authentication code is further configured to cause the at least one processor to perform the authentication based on biometric authentication information acquired by using the authentication terminal and the registered biometric authentication information.

11. The authentication system according to claim 1 , wherein preventing successful authentication further includes restricting provision of a service that uses the authentication terminal.

12. An authentication method, comprising:

performing authentication of a user in a vicinity of an authentication terminal based on first authentication information acquired by using an authentication terminal and second authentication information registered in a storage in association with identification information on the user, wherein performing authentication includes calculating a feature amount of the user's face, the feature amount indicates features such as a relative position, size, or shape of a facial part, the first authentication information is the feature amount acquired by using the authentication terminal, and the second authentication information is the feature amount registered in the storage in association with the identification information on the user;

determining, when there are the user and another user who is different from the user in the vicinity of the authentication terminal, a possibility of the user being authenticated as the another user, by comparing the second authentication information of the user and the second authentication information of the another user; and

prevent the execution of the authentication when the authentication method determines that there is the possibility.

13. An authentication system, comprising at least one memory configured to store computer program code; and

at least one processor configured to operate as instructed by the computer program code, the computer program code including:

first authentication code configured to cause the at least one processor to perform authentication of a user in a vicinity of an authentication terminal based on first authentication information acquired by using the authentication terminal and second authentication information registered in a storage in association with identification information on the user, wherein performing authentication includes calculating a feature amount of the user's face, the feature amount indicates features including a relative position, size, or shape of a facial part, the first authentication information is the feature amount acquired by using the authentication terminal, and the second authentication information is the feature amount registered in the storage in association with the identification information on the user;

determining code configured to cause the at least one processor to determine, when there are the user and another user who is different from the user in the vicinity of the authentication terminal, a possibility of the user being authenticated as the another user, by comparing the first authentication information of the user and the first authentication information of the another user; and

second authentication code configured to cause the at least one processor to prevent the execution of the first authentication code, when the determining code determines that there is the possibility.

14. An authentication method, comprising:

performing authentication of a user in a vicinity of an authentication terminal based on first authentication information acquired by using an authentication terminal and second authentication information registered in a storage in association with identification information on the user, wherein performing authentication includes calculating a feature amount of the user's face, the feature amount indicates features including a relative position, size, or shape of a facial part, the first authentication information is the feature amount acquired by using the authentication terminal, and the second authentication information is the feature amount registered in the storage in association with the identification information on the user;

determining, when there are the user and another user who is different from the user in the vicinity of the authentication terminal, a possibility of the user being authenticated as the another user, by comparing the first authentication information of the user and the first authentication information of the another user; and

prevent the execution of the authentication when the authentication method determines that there is the possibility.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 28, 2021
From: CHAE, YEONGNAM
To: RAKUTEN GROUP INC
Reel/Frame 057949/0316 →
CHANGE OF NAME Recorded Jul 9, 2021
From: RAKUTEN INC
To: RAKUTEN GROUP INC
Reel/Frame 056816/0068 →
Continuity (1)
Related Publication 20220027443A1 · Jan 27, 2022