It is an object of the present invention to protect authentication data while ensuring high response performance. An authentication candidate extraction apparatus comprises a biometric information input part that receives biometric information of a to-be-authenticated subject, moving from a first spot to a second spot, acquired at the first spot; a feature information storage part that stores feature information used for authentication of the to-be-authenticated subject; a candidate selection part that selects a feature information candidate to be used for the authentication processing by means of a predetermined secure computation scheme using features extracted from the biometric information acquired at the first spot; and a feature information transmission part that transmits the extracted feature information candidate to an authentication apparatus that performs authentication processing using biometric information of the to-be-authenticated subject acquired at the second spot.
展开▼