A first processor is configured to acquire a first facial image of the user; extract first facial feature information from the first facial image; generate an authentication code representing the first facial feature information; and cause a printer to print the authentication code and a display facial image of the user on a card medium to create the ID card, and a second processor is configured to acquire the authentication code printed on the ID card possessed by the user and a second facial image of the user; decode the first facial feature information from the authentication code; extract second facial feature information from the second facial image using the same algorithm as used in a case of extracting the first facial feature information from the first facial image; collate the first facial feature information with the second facial feature information; and perform the determination based on a collation result.

An authentication device including a processor is configured to: acquire an authentication code printed on an ID card possessed by a user, the authentication code representing first facial feature information extracted from a first facial image of the user, and acquire a second facial image of the user; decode the first facial feature information from the authentication code; extract second facial feature information from the second facial image using the same algorithm as used in a case of extracting the first facial feature information from the first facial image; collate the first facial feature information with the second facial feature information; and perform a determination, based on a collation result, as to whether or not to authenticate the user as a legitimate user.