Abstract: Connected computing enables the use of highly diverse environments that support operating frameworks for contemporary civilization. But computing productivity and trustworthiness are undermined by such environments' largely inchoate organization. These environments and their identity infrastructures are fragmented, and unnecessarily unreliable, insecure, and insufficiently informative due to current computing entity (e.g., resource) identification infrastructure design, which lacks root identification reliability. Such reliability is enabled herein by a fundamentally accurate and authenticity ensuring, near-existential or existential quality, biometrically and liveness based, portable identification and provenance infrastructure. Such an infrastructure provides ubiquitously available identification information that can be used universally for identification processes.

Abstract: An authorization system includes a controller of an external computing device communicatively connected to an unmanned aerial vehicle (UAV). The controller obtains a mission kit that includes software for controlling a piece of equipment configured to be assembled on the UAV. The controller receives a license that is associated with a user and determines, based on the license, whether the piece of equipment is authorized for operation on the UAV as controlled by the user. Responsive to determining that the piece of equipment is authorized, the controller initiates transmission of at least some of the software of the mission kit to the UAV for installation by the UAV to allow the user to operate the piece of equipment.

Abstract: A system for noninvasively measuring blood alcohol concentration using light includes one or more emitters each configured to emit light in the near infrared or infrared light spectrum at one or more wavelengths that respond to varied chromophore concentrations of ethanol and water in blood of a human subject. One or more detectors is configured to detect light emitted at the one or more wavelengths and output a representation of a photoplethysmography (PPG) waveform for one or more of the one or more wavelengths. A processing subsystem is coupled to the one or more emitters and the one or more detectors.

Abstract: The server device includes an acquisition unit, a user database, an attendee management database, and a processing unit. The acquisition unit acquires biological information for each of a plurality of users using an entry/exit management system. The user database associates the biological information with user IDs respectively identifying the users and stores the same. The attendee management database associates the user ID corresponding to an attendee in a restricted area, into which entry and exit is restricted, with position information for the attendee, and stores the same. The processing unit transmits the position information of a meeting candidate, who a visitor wants to meet, to an authentication terminal. The authentication terminal is a terminal which, if an authentication using the biological information recorded in the user database is successful, permits a successfully authenticated user to enter the restricted area.

Abstract: A vehicle entry system which identifies authorized users via facial recognition has an image sensor configured to capture real-time images according to a predetermined field of view from a vehicle. A lockout device is configured to selectably provide access to the vehicle. The entry system has a controller configured to (A) analyze a first one of the captured images for matching to a stored facial pattern corresponding to an authorized user of the vehicle, (B) detect a request for a secondary authentication after the captured image being analyzed fails to match the stored facial pattern, (C) analyze a second one of the captured images for a nonbiometric secondary code entrusted to a secondary user; and (D) issue a command for the lockout device to grant the access to the vehicle when the secondary code is detected.

Abstract: Techniques for user authentication via in-ear acoustic measurements are disclosed. An in-ear device emits an acoustic signal and detects an otic response to the acoustic signal. A user signature is generated based at least on the otic response to the acoustic signal. The user signature is compared with a reference signature, to determine whether the in-ear device has changed users.

Abstract: Provided are a method and an apparatus for user authentication based on face recognition and handwritten signature verification, by which authentication accuracy in user authentication using a handwritten signature is further increased. The method including: receiving a handwritten signature of a user; acquiring a face image of the user who inputs the handwritten signature, simultaneously with the receiving of the handwritten signature; determining whether the user is a legitimate user, on the basis of characteristics information of the face image; adjusting a reference value for verification based on characteristics information of the handwritten signature, according to a result of determination based on the characteristics information of the face image; determining whether the user is the legitimate user, on the basis of the characteristics information of the received handwritten signature and the adjusted reference value.

Abstract: A computer-implemented method of verifying a user's identity comprising the steps of receiving biometric user data, personalized user data, and unique phone data of a verifying user from the verifying user's electronic computing device 102, compiling the biometric user data, personalized user data, and unique phone data of a verifying user into a single user identity data file, encrypting the single user identity data file and generating a data decryption key, and segregating the single user identity data file into a plurality of encrypted segregated user identity data files each independently stored on a first administrator server and a second administrator server, wherein the plurality of encrypted segregated user identity data files may only be aggregated and decrypted upon providing secondary biometric user data, personalized user data, and unique phone data which matches the original biometric user data, personalized user data, and unique phone data of the verifying user.

Abstract: A first computer and a second computer are each connected to a communication network. User data is generated for a user by the first computer based on receiving, from the second computer, initial enrollment biometric data for the user. The user is authorized by the first computer based on a confidence score for challenge biometric data exceeding a first confidence threshold. Then the user data is updated with updated enrollment biometric data by the first computer based on a confidence score for the updated enrollment biometric data exceeding a second confidence threshold. The second confidence threshold is greater than the first confidence threshold. The initial enrollment biometric data is deleted by the second computer after a predetermined time of receiving the initial enrollment biometric data.

Abstract: Multifactor authentication techniques described herein may allow a user to submit a recent proof of purchase as a part of a multifactor authentication process to access an account associated with a financial institution. As part of the login process, the user may submit a proof of purchase associated with a transaction. The financial institution may determine information associated with the transaction, such as a merchant associated with the proof of purchase, a time of the transaction, the last four numbers of the transaction card used, a dollar amount, or any combination thereof. If the information matches one or more records in the transaction history of the user's account, the financial institution may authenticate the user and provide access to the account. In this way, the financial institution may leverage transaction history known to the financial institution and the user to authenticate the user.

Abstract: A generation apparatus converts a received key to an encoded key by using an encoding function of an error correcting code, and generates a sketch by applying a first composite transformation on received fuzzy data and the encoded key. A reconstruction apparatus receives a first sketch and a second sketch, generates a composite sketch by applying second composite transformation on the first and second sketches, and reconstruction calculates difference between the two keys used to generate the first and second sketches based on the composite sketch.

Abstract: Disclosed herein are systems, methods, and non-transitory computer-readable storage media for performing speaker verification. A system configured to practice the method receives a request to verify a speaker, generates a text challenge that is unique to the request, and, in response to the request, prompts the speaker to utter the text challenge. Then the system records a dynamic image feature of the speaker as the speaker utters the text challenge, and performs speaker verification based on the dynamic image feature and the text challenge. Recording the dynamic image feature of the speaker can include recording video of the speaker while speaking the text challenge. The dynamic feature can include a movement pattern of head, lips, mouth, eyes, and/or eyebrows of the speaker. The dynamic image feature can relate to phonetic content of the speaker speaking the challenge, speech prosody, and the speaker's facial expression responding to content of the challenge.

Abstract: A system receives a request to authorize an interaction between a first avatar associated with a first user and a second avatar associated with a second user within a virtual environment. The system receives a request to verify the identity of the first user. The system receives an image of the first user and extracts facial features from the image. The system identifies a serial number and a user credential associated with the first user. The system generates a token based on the facial features, the serial number, and the user credential. The system verifies the identity of the first user based on the token. If the identity of the first user is verified, the system authorizes the interaction between the first avatar and the second avatar.

Abstract: An authentication method and terminal device obtain a device identifier associated with an electronic device and receive an Integrated Circuit Card Identifier (ICC ID) of a Subscriber Identity Module (SIM) of the electronic device. A group of IDs is cryptographically signed with a device key of the terminal device or a key derived from the device key. The group of IDs may comprise the device identifier and the ICC ID.

Abstract: Systems and methods which provide the ability for users to track the lifecycle and conditional rules associated with credentials, which can include digitally verified third-party assertions of identity, education, licensing, work history, provenance, authenticity, outcomes, ingredients, etc. through a network of certified primary source or primary source equivalent issuers of credentials. Verifiable data registry technology can be used to provide access to information associated with the credentials, such as validity and schemas. Credential presentation and subscription processes are also utilized. Ecosystem communication and management functions can be executed through various agent instances associated with the actors, including administrators. Rating systems and fee transactions are also managed.

Abstract: The Present invention provides for a biometric authentication system, the method implemented in the system, and its use, based on venous networks, to provide a highly available system for resilient biometric authentication that does not require the possession or the memorization of confidential information of users while ensuring security, while allowing to discard the template and the images of the vascular network while having a tamper-proof system.

Abstract: Provided is a system for face authentication which can operate separately for individual providers of face authentication service in a stable and efficient manner. The system includes: face authentication machines; an administrator terminal; a face management server for storing face image data of registered users; and face matching servers, each configured to generate face feature amount data of a person to be verified from image data acquired from the camera of a face authentication machine and to perform a matching operation by comparing the face feature amount data of the person with that of registered users. Prior to face authentication, data of associations between face authentication machines and face matching servers entered by an administrator is transmitted from the administrator terminal to the face management server.

Abstract: The present disclosure includes apparatuses, methods, and systems for securing sensor communication. An embodiment includes a memory having instructions executable by the processing resource, and a sensor coupled to the processing resource and the memory. Wherein, the sensor is configured to collect sensor data and generate and provide a sensor public key, a sensor public identification, and a sensor identification certificate to a sensor fusion unit.

Abstract: A system, method, and media for providing web-based security to a workflow process is presented. Data may be processed in a web-based workflow management system. The system may detect the transfer of high-level security data through the workflow. Upon detection of the data transfers the system may request review and approval in the form of a biometric input from an approved user to allow the data to be transferred.

Abstract: A vehicle includes: an iris sensor configured to recognize an iris of a driver and obtain iris data; an infrared camera configured to recognize a face of the driver, obtain face data, and detect an obstructive element covering at least a portion of the iris from the face of the driver; and a controller configured to perform iris authentication based on the iris data and control a lighting apparatus to change brightness of lighting in the vehicle in response to the obstructive element being detected.

Abstract: A system for verifying a user identity. The system comprises one or more memory devices storing instructions and one or more processors configured to execute the instructions. The processors are configured to receive information associated with an account of a user. The processors are further configured to generate a first profile, where the first profile being related to the user. The processors also receive an indication that the account is accessed by an accessor through an accessor device; and receive, from the accessor device, identity data comprising a plurality of data subsets associated with the accessor. The processors are configured to store the data subsets in respective clusters. The processors are further configured generate cluster analyses by analyzing the data subsets in respective clusters; and output the cluster analyses to node instances that weighs the cluster analyses outputs.

Abstract: An information processing apparatus includes a processor configured to not authorize use of a communication service when stored first biometric information on a contractee for the communication service fails to match second biometric information acquired from a user who is to use the communication service after signing a contract for the communication service.

Abstract: A key generation apparatus for accomplishing high precision authentication in biometric encryption and biometric signing based on feature vectors in a high-dimensional Euclidean space, the apparatus: holds a first feature vector indicating a feature of first biometric information, and a parameter for identifying one arrangement out of a sphere packing arrangement with a density less than 1 and more than a predetermined value, or a sphere covering arrangement with a density equal to or more than 1 and less than a predetermined value, identifies one arrangement out of the sphere packing arrangement or the sphere covering arrangement based on the parameter; selects a first point included in the identified one arrangement; generates a first key by predetermined first conversion on the first point; and generates, based on the first feature vector and the first point, a template associated with the first biometric information.

Abstract: An example operation includes one or more of creating, by a transport, a digital key when the transport is powered on, wherein the digital key relates to an identity of an occupant of the transport, creating, by the transport, a digital sub-key that is related to the digital key, using, by the transport, the digital key during processing of a first set of functions, and using, by the transport, the digital sub-key during processing of a second set of functions that are more critical than the first set of functions.

Abstract: Techniques are provided for centralized processing of sensitive user data. One method comprises obtaining, by a service provider, values of predefined features based at least in part on personal information of a user, wherein the values of the predefined features are computed by the user; and processing, by the service provider, the values of the predefined features based on the personal information to detect one or more predefined anomalies associated with the user and/or a device of the user. The predefined anomalies comprise, for example, a risk anomaly, a security level anomaly, a fraud likelihood anomaly, an identity assurance anomaly, and/or a behavior anomaly. The predefined features relate to, for example, a location of the user and/or device-specific information for a device of the user.

Abstract: A method includes obtaining a plurality of representative vectors associated with face-related data. The method includes determining an encryption key based on a parameter stored in a record, generating an encrypted vector set by, for each respective vector of the plurality of representative vectors, encrypting the respective vector with a homomorphic encryption operation based on the encryption key, where the encrypted vector set includes a first encrypted vector that is linked to a subset of the face-related data associated with the first plurality of face vectors. The method further includes obtaining an encrypted face search vector using the encryption key to perform homomorphic encryption. The method further includes selecting a first encrypted vector based on the encrypted face search vector and retrieving the subset of the face-related data based on the first encrypted vector.

Abstract: A magnified observation apparatus includes an FOV changer, an in-focus degree evaluator, and a focus sequence executor. The in-focus degree evaluator calculates in-focus degree feature quantities, which represent in-focus degrees of image data corresponding to images to be displayed by a display controller on a display. The focus sequence executor executes an FOV-moving focus sequence in which a focusing device adjusts a relative distance between a focus position of the objective lens and an observation object in accordance with in-focus degree feature quantities of image data that are successively calculated by the in-focus degree evaluator corresponding to images of the observation object that are captured during movement of an observation FOV by the FOV changer so that a live image of the observation object is displayed on the display based on image data that is obtained during the movement of an observation FOV by the display controller.

Abstract: A system and method for facilitating device and application authentication between an external device and an implanted medical device (IMD), wherein a therapy application executing on the external device is operative to communicate with the IMD via wireless telemetry communications. A device authentication parameter may be decomposed into two key components, wherein one component may be stored in a cloud key vault and the other component may be distributed to the external device as an obfuscated portion embedded in the therapy application. Upon receiving the therapy application, the external device is operative to separately retrieve both key components and reconstitute the original authentication parameter therefrom, which may be presented to the IMD for authentication.

Abstract: A system and method for verifying proper possession of a medication is disclosed. A reader device scans a code printed on the medication to extract an embedded serial number and captures an image of the face of the person in possession of the medication. A first server queries a prescription database, which retrieves facial characteristic data associated with the embedded serial number. A determination is made if the retrieved facial characteristic data matches facial characteristic data extracted from the captured image. The match information is displayed on the reader device.

Abstract: A method and a user apparatus for the protection of confidential data, wherein the apparatus includes an image sensor and a processor configured for: capturing a plurality of images by way of the image sensor, generating a sensor fingerprint on the basis of the plurality of images, encoding at least a portion of the sensor fingerprint using an algorithm of random projections in such a way as to generate a compressed fingerprint, encrypting and/or decrypting the confidential data using the compressed fingerprint as a key.

Abstract: To prevent unauthorized access to a network feature, multiple levels of authentication are required by utilizing a biometric authentication application that can verify access based on an authentication configuration that, for example, includes biometric data associated with a user. Requiring additional authentication to one or more network features or settings while allowing one or more other network features or settings to have less authentication provides a quality of experience for every user with access to the application while maintaining enhanced security to those network features that may be key/sensitive or require additional security. Additionally, using biometric data to perform the additional level of authentication ensures that a particular user seeking access to key or sensitive network features or settings of a network is the authorized user and not another user that has gained access to a network device associated with the authorized user.

Abstract: The present disclosure generally relates to managing access to credentials. In some examples, an electronic device authorizes release of credentials for use in an operation for which authorization is required. In some examples, an electronic device causes display of one or more steps to be taken to enable an input device for user input. In some examples, an electronic device disambiguates between commands to change the account that is actively logged-in on the device and commands to cause credentials to be released from the secure element.

Abstract: A biometric device comprising: biometric sensing circuitry; cryptographic circuitry; a device key area in the biometric device for storing a cryptographic device key unique to the biometric device; and a test key area in the biometric device, for storing a cryptographic test key. The biometric device is controllable between: a test state in which the test key area is connected to the cryptographic circuitry to provide the test key to the cryptographic circuitry, and the cryptographic circuitry is prevented from performing cryptographic operations on data provided by the biometric sensing circuitry; and a functional state in which the device key area is connected to the cryptographic circuitry to provide the device key to the cryptographic circuitry, and the cryptographic circuitry is connected to the biometric sensing circuitry to receive and perform cryptographic operations on data from the biometric sensing circuitry using the device key.

Abstract: In general, embodiments of the present disclosure provide methods, apparatus, systems, computer program products, computing devices, computing entities, and/or the like for setting up biometric access for a legitimate user to a design. In accordance with various embodiments, a biometric template is received originating from the user and is inputted to a first secure sketch generator configured to use first transformation parameters comprising a hash function to generate a protected biometric template by hashing the biometric template. The protected biometric template is inputted to a second secure sketch generator configured to use second transformation parameters comprising a physical unclonable function serving as a fingerprint of the design to generate an original obfuscation key from the protected biometric template.

Abstract: Techniques are described for enabling a user to access a secure system based on vital signs of the user that are collected by a wearable device worn by the user. The vital signs of the user may be used as an extra level of security when accessing the secure system. For example, a computing device may automatically validate that a user requesting access to a secure system is a person and not a robot based on receipt of vital signs of the user. As another example, a computing device may operate as a secure access badge that first analyzes vital signs of a user to confirm that the user is not in distress before sending an access signal to gain access to a secure system. In either example, the computing device may be a wearable device, or be paired to a wearable device to receive the vital signs.

Abstract: Disclosed is a software PUF based on an RISC-V processor for IoT security. A 32-bit RISC-V processor is used to generate abnormal information results in an abnormal operating state under a low voltage, and the abnormal information results are used to represent the features of the 32-bit RISC-V processor; 5-bit binary data obtained by comparing the abnormal information results with normal information results has high randomness and uniqueness and it is extremely difficult to directly extract internal abnormal information result from a hardware circuit of the 32-bit RISC-V processor, so modeling attacks based on the 5-bit binary data calculated according to the abnormal information results of the 32-bit RISC-V processor are almost impossible; in addition, when the 32-bit RISC-V processor is in an abnormal operating state, the operating frequency of the 32-bit RISC-V processor is dynamically adjusted through a frequency compensation method.

Abstract: A voiceprint authentication apparatus is provided, comprising: a voice receiving module configured to receive a user's voices in different speaking modes; a feature extraction module configured to extract respective sets of voice features from the user's voices in different speaking modes; a synthesis module configured to generate a first voiceprint template by synthesizing the respective sets of voice features; and a first communication module configured to send the first voiceprint template to a server to authenticate the user, wherein the user's voices and the respective sets of voice features are not sent to the server. A corresponding voice authentication method, as well as a computer readable medium, are also provided.

Abstract: Various implementations described herein may refer to a digital rights management (DRM) platform. In one implementation, a method may include receiving first biometric data associated with a user. The method may also include generating first biometric templates based on the first biometric data using a DRM platform. The method may further include receiving access control data from the user, where the access control data includes data indicating time periods during which requestors are permitted to authenticate the user using the first biometric templates. The method may additionally include transmitting the first biometric templates and the access control data to the requestors using the DRM platform, where the first biometric templates are configured to be compared to second biometric templates based on the access control data, and where the second biometric templates are configured to be generated using the DRM platform based on second biometric data associated with the user.

Abstract: A method for issuing and returning an item for loan, particularly a manually movable transport cart. A blocking element allows removal and use of the item by way of a release and, after a return, once more prevents the removal. A mobile communication device identifies itself to the blocking element wirelessly, the mobile communication device is associated with the item for loan when the item is released, and the association is cancelled when the item is returned. An issuing and return system has the blocking element attached to the item for loan, in particular is integrated in the item. The blocking element has a communication module for wireless communication with the mobile communication device of a customer. The mobile communication device has an identification feature, particularly a feature that personalizes the customer and which enables the association between the mobile communication device and the item for loan.

Abstract: Systems, devices, methods, and computer readable media are provided in various embodiments having regard to authentication using secure tokens, in accordance with various embodiments. An individual's personal information is encapsulated into transformed digitally signed tokens, which can then be stored in a secure data storage (e.g., a “personal information bank”). The digitally signed tokens can include blended characteristics of the individual (e.g., 2D/3D facial representation, speech patterns) that are combined with digital signatures obtained from cryptographic keys (e.g., private keys) associated with corroborating trusted entities (e.g., a government, a bank) or organizations of which the individual purports to be a member of (e.g., a dog-walking service).

Abstract: Multiple participants of a video conference may be detected in the same physical space. A first participant of the multiple participants may be assigned to a virtual breakout room that is associated with the video conference. An availability of a physical resource for the first participant to use in connection with the virtual breakout room may be determined. The physical resource may be allocated to the first participant for use in connection with the virtual breakout room based on the availability. For example, a group of participants may be detected in the same physical space, individually assigned to virtual breakout rooms, and/or individually allocated a physical resource for use in connection with the virtual breakout rooms.

Abstract: The cloud server holds the main database for storing all the registration data that is handled in the present system, and the edge server that is arranged close to the sensor holds a sub-database for storing part of the registration data. The sub-database in the edge server stores only the registration data having a high probability of being verified in the edge server. In the case where the edge server verifies the detection data that has been acquired by the sensor with the registration data within the sub-database and determines that the registration data that matches the detection data does not exist within the sub-database, the configuration allows the detection data to be transmitted to the cloud server and requests the detection data to be verified with the registration data within the main database.

Abstract: A method including decrypting, by a user device based at least in part on utilizing a first trusted key generated by a trusted device, an assigned private key associated with the user device; decrypting, by the user device based at least in part on utilizing a second trusted key generated by the trusted device, a double-encrypted symmetric key to determine a single-encrypted symmetric key; decrypting, by the user device based at least in part on utilizing the assigned private key, the single-encrypted symmetric key to determine a symmetric key; and decrypting, by the user device based at least in part on utilizing the symmetric key, an encrypted folder stored on the user device to provide access to data included in the encrypted folder. Various other aspects and techniques are contemplated.

Abstract: Described herein are a system and techniques for enabling biometric authentication without exposing the authorizing entity to sensitive information. In some embodiments, the system receives a biometric template from a user device which is encrypted using a public key associated with the system. The encrypted biometric template is then provided to a second entity along with a biometric identifier. Upon receiving a request to complete a transaction that includes the biometric identifier and a second biometric template, the second entity may encrypt the second biometric template using the same public key associated with the system and perform a comparison between the two encrypted biometric templates. The resulting match result data file is already encrypted and can be provided to the system to determine an extent to which the two biometric templates match.

Abstract: An image processing apparatus including a job executer that executes a job pertaining to image processing, a storage capable of storing history information pertaining to the execution of the job by associating the history information with an executing user of the job, a display capable of displaying the history information, a recognizer that recognizes the executing user, and a controller, in which when the recognizer recognizes the executing user before the executing user is authenticated, the controller preferentially displays the history information associated with the recognized executing user on the display.

Abstract: A process for granting or denying a user access to a system using biometrics is disclosed. The process includes receiving a unique identifier for the system, receiving a unique identifier associated with the user, and verifying that the user is authorized to access the system. A passcode is transmitted to the device in the possession of the user, and a speech sample of the user speaking the passcode is returned. One or more attributes of the speech sample is compared with one or more attributes that are expected to be in a speech sample. Access is granted or denied based upon a correlation between the file's actual attributes and the predicted attributes.

Abstract: The present disclosure relates to the exchange of information between a message sending device and a message receiving device with message authentication and proposes to reduce the time required for message authentication by pre-computing a message tag, such as a MAC, and subsequently replacing the computation of the MAC when the tag is to be validated (or indeed also on sending) by a table look-up. The approach requires a set of messages and works particularly well for small sets of messages, for example as small as two or three messages, or less than five or ten messages. The approach finds particular application in control networks where control decisions have to be taken quickly and securely, for example in the control of a vehicle, for example an autonomous vehicle, or the control of a smart electricity grid.

Abstract: A system and method that provides the ability for users to select, create, and upload a collection of graphical images whereby a web site login process presents the user with an array of graphical images including the graphical images designated for an authentication pattern, the graphical image authentication system then determines that the graphical images chosen by the user are correct or incorrect without notifying the user until the process is complete.

Abstract: Systems, methods, and non-transitory computer readable media relate to smartcard biometric enrollment. In an embodiment that does not require a user to visit a central location to provide fingerprint images, an activation code corresponding to a unique ID that uniquely identifies a user of a service is generated and sent to the user. In response, at least one finger image is received from a user device. The image is processed to isolate a fingerprint image, which is used to generate a biometric template that is sent to a smartcard manufacturer and used to configure a smartcard for biometric authentication of the user. In another embodiment, a kiosk/ATM provides smartcard biometric enrollment by detecting a smartcard in the smartcard reader, verifying an ID of a user associated with the smartcard, capturing a biometric image from the user, processing the biometric image to generate a biometric template, and storing the biometric template on the smartcard.

Abstract: Provided is an authentication system capable of preventing determination that authentication of a person to be authenticated succeeds even though determination as to whether matching information matches registration information is not performed when authentication using two factors is performed. A determination unit 43 determines whether or not the matching information matches the registration information. A signature generation unit 21 of a client 10 generates a signature based on the message by using a signature key. A signature determination unit 34 determines whether or not the signature is a correct signature by using a first verification key, a message, and the signature. When it is determined that the matching information matches the registration information and it is determined that the signature is the correct signature, the authentication determination unit 37 determines that the authentication succeeds.