Computer-readable recording medium, management apparatus, and method for identity verification

Patent metadata

Field	Value
Publication number	US-11799653-B2
Application number	US-202017020906-A
Country	US
Kind code	B2
Filing date	Sep 15, 2020
Priority date	Oct 9, 2019
Publication date	Oct 24, 2023
Grant date	Oct 24, 2023

Abstract

An identity verification is managed by generating a workflow used by a control apparatus that controls a system in which a plurality of business entities manages attribute information in user information that identifies a user. The workflow is generated, based on a first list of target business entities that perform identity verification of the user, a second list of business entities indicating whether cooperation is performed among the business entities for the identity verification, a number of electronic certificates that certify the user information for completing the identity verification, and a procedure time taken by each of the business entities for the identity verification, so that the workflow minimizes a procedure time taken for completion of the identity verification by the target business entities, and that describes a distribution procedure of the electronic certificates that are used in the identity verification at each of the business entities.

First claim

What is claimed is:

1. A non-transitory computer-readable recording medium having stored therein an identity verification program for causing a computer to execute a process, the computer being configured to generate a workflow used by a control apparatus that controls a system in which a plurality of business entities manage, in a distributed manner, attribute information in user information that identifies a user, the process comprising:
receiving, as inputs, a first list of target business entities that perform identity verification of the user, a second list of business entities indicating whether cooperation is performed among a plurality of business entities for the identity verification of the user, a number of electronic certificates that certify the user information and are used by each of the business entities to complete the identity verification, and a procedure time taken by each of the business entities for the identity verification; and
generating, based on the first list, the second list, the number of electronic certificates for each of the business entities, and the procedure time, a workflow that minimizes a procedure time taken for completion of the identity verification by the target business entities and that describes a distribution procedure of the electronic certificates that are used in the identity verification at each of the business entities,
wherein the cooperation includes an electronic-certificate-based identity verification in which the identity verification of the user is completed in response to verification of one or more electronic certificates transmitted from one or more other business entities, among those on the second list, as described in the generated workflow, and
wherein the generated workflow describes, as the distribution procedure, which business entity, among those on the second list, performs a user-based identity verification in which the user involves and which business entity, among those on the second list, performs the electronic-certificate-based identity verification, and from which business entity to which business entity, among those on the second list, the electronic certificate is to be issued.

2. The computer-readable recording medium according to claim 1 , the process further comprising:
presenting the generated workflow to a user terminal apparatus of the user.

3. The computer-readable recording medium according to claim 1 , wherein
in the generating of the workflow,
the workflow is generated that minimizes a procedure time taken for completion of the user-based identity verification in which the user involves and completion of the electronic-certificate-based identity verification using the electronic certificates, as the completion of the identity verification by the target business entities.

4. The computer-readable recording medium according to claim 3 , wherein
in the receiving, the first list is a list of target business entities that perform user-based identity verification of the user when attribute information of the user is updated.

5. The computer-readable recording medium according to claim 1 , wherein
the number of electronic certificates that are used in the identity verification by each of the business entities is a number of successfully verified subsets that are verified by another business entity and include part of attribute information contained in the electronic certificates that certify the user information of the user.

6. The computer-readable recording medium according to claim 1 , wherein
in the receiving,
a start condition on which a business entity serving as a start point of the distribution procedure in the workflow is caused to perform an identity verification procedure in which the user involved is received as an input, and
in the generating of the workflow,
the workflow is generated based on the first list, the second list, the number of electronic certificates for each of the business entities, the procedure time, and the start condition.

7. A management apparatus for generating a workflow used by a control apparatus that controls a system in which a plurality of business entities manage, in a distributed manner, attribute information in user information that identifies a user, the apparatus comprising:
a memory, and
a processor coupled to the memory and configured to:
receive, as inputs, a first list of target business entities that perform identity verification of the user, a second list of business entities indicating whether cooperation is performed among a plurality of business entities for the identity verification of the user, a number of electronic certificates that certify the user information and are used by each of the business entities to complete the identity verification, and a procedure time taken by each of the business entities for the identity verification; and
generate, based on the first list, the second list, the number of electronic certificates for each of the business entities, and the procedure time, a workflow that minimizes a procedure time taken for completion of the identity verification by the target business entities and that describes a distribution procedure of the electronic certificates that are used in the identity verification at each of the business entities,
wherein the cooperation includes an electronic-certificate-based identity verification in which the identity verification of the user is completed in response to verification of one or more electronic certificates transmitted from one or more other business entities, among those on the second list, as described in the generated workflow, and
wherein the generated workflow describes, as the distribution procedure, which business entity, among those on the second list, performs a user-based identity verification in which the user involves and which business entity, among those on the second list, performs the electronic-certificate-based identity verification, and from which business entity to which business entity, among those on the second list, the electronic certificate is to be issued.

8. A method for identity verification to be performed by a computer configured to generate a workflow used by a control apparatus that controls a system in which a plurality of business entities manages, in a distributed manner, attribute information in user information that identifies a user, the method comprising:
receiving, as inputs, a first list of target business entities that perform identity verification of the user, a second list of business entities indicating whether cooperation is performed among a plurality of business entities for the identity verification of the user, a number of electronic certificates that certify the user information and are used by each of the business entities to complete the identity verification, and a procedure time taken by each of the business entities for the identity verification; and
generating, based on the first list, the second list, the number of electronic certificates for each of the business entities, and the procedure time, a workflow that minimizes a procedure time taken for completion of the identity verification by the target business entities and that describes a distribution procedure of the electronic certificates that are used in the identity verification at each of the business entities,
wherein the cooperation includes an electronic-certificate-based identity verification in which the identity verification of the user is completed in response to verification of one or more electronic certificates transmitted from one or more other business entities, among those on the second list, as described in the generated workflow, and
wherein the generated workflow describes, as the distribution procedure, which busine

Assignees

• Fujitsu Ltd

Inventors

• Inoue Koki

Classifications

• H04L9/321 Primary

  involving a third party or a trusted authority · CPC title

• G06F21/6245

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06F21/6272

  by registering files or documents with a third party · CPC title

• H04L9/3263

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title

• G06F21/33 Primary

  using certificates · CPC title