The storage unit 11 deletes the stored provision image data every day, every predetermined number of days, or every predetermined time. For example, when business for the day ends at the facility, the storage unit 11 may delete all provision image data captured and generated on that day. Other configurations are as described above. In this manner, it is possible to reduce the risk that the private image data of the visitors leaks to the outside or is illegally used for other purposes. It should be noted that, the provision image data may be excluded from an object of the extraction process performed by the extraction unit 13 instead of deleting the provision image data. In this case, the image may not be browsed without separate authentication different from the face authentication described above.
The information processing system may include a living body detection (liveness detection) function. More specifically, the information processing system includes a unit which determines whether or not a person included in reference image data is actually positioned and imaged in front of the reference-image generation camera. This is for suppressing the act of causing the reference-image generation camera to image a photo including the face of another person to browse provision image data related to the other person.