Digital asset management device, digital asset management system, digital asset management method, and program

Abstract

The purpose of the present invention is to provide a digital asset management device capable of properly managing digital assets. A digital asset management device (10) according to the present disclosure comprises: a registration unit (11) that registers proxy information for a proxy in relation to member information of a member having an account; a first transmission unit (12) that transmits a confirmation message to the member when there has been no access for at least a set period that has been set by the member; a second transmission unit (13) that transmits a proxy message to the proxy when there is no response from the member; an authentication control unit (14) that controls authentication of the proxy when there is a response from the proxy; and an authorization unit (15) that grants authorization to the proxy in relation to a digital asset if authentication is successful.

Description

[Technical field]

[0001] The present disclosure relates to a digital asset management device, a digital asset management system, a digital asset management method, and a non-transitory computer-readable medium. [Background technology]

[0002] In recent years, digital assets, whose economic value is expressed digitally, have been used in transactions. Digital assets include, for example, electronic money, internet bank accounts, crypto assets, and SNS (Social Networking Service) accounts.

[0003] Such digital assets are stored in a digital format on a designated management server, etc. Therefore, if the owner of the digital assets dies or if the owner is unable to manage the assets, the digital assets will no longer be managed. In the case of paid membership services, fees will continue to be charged until the cancellation procedure is completed. Furthermore, even if the owner's family members are aware of the existence of the digital assets, they may not be able to take over management of the assets promptly because they do not know the ID or password.

[0004] In response to such a problem, Patent Document 1 discloses an information processing device having a receiving means for transmitting confirmation information to a user terminal to confirm whether the user is alive and receiving response information to the confirmation information from the user terminal. When the information processing device determines that the response information has not been received within a certain time, the information processing device has a control means for reading asset information and identification information of an heir from a storage unit based on the user's identification information, and storing the asset information and the identification information of the heir in association with each other in the storage unit. With this configuration, the information processing device disclosed in Patent Document 1 can read the location information of the heir and inquire whether to approve or renounce the inheritance. Furthermore, when approval information indicating approval is received in response to the inquiry, the information processing device executes a process related to the inheritance of assets for the heir. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] JP 2012-248021 A Summary of the Invention [Problem to be solved by the invention]

[0006] In the technology disclosed in Patent Document 1, if the set period for sending confirmation information to the user is long, there is a risk that by the time an inquiry is made to the heirs without a response from the user, time has already passed since the user was unable to respond. In such cases, the digital assets are left unmanaged for a long period of time. On the other hand, if the set period is short, a lot of confirmation information is sent to the user, and the user has to take the trouble of sending the response information.

[0007] In view of such problems, an object of the present disclosure is to provide a digital asset management device, a digital asset management system, a digital asset management method, and a non-transitory computer-readable medium that are capable of properly managing digital assets. [Means for solving the problem]

[0008] The digital asset management device according to the present disclosure comprises: a registration means for registering agent information of an agent to member information of a member having an account; a first transmission means for transmitting a confirmation message to the member when there has been no access to the account for a period of time set by the member; a second transmission means for transmitting a proxy message to the proxy when there is no member response from the member to the confirmation message; an authentication control means for controlling authentication of the agent when a proxy response is received from the agent in response to the proxy contact; and an authorization means for granting authority over the member's digital assets to the agent if the authentication is successful.

[0009] The digital asset management system according to the present disclosure comprises: An authentication device; A digital asset management device, The digital asset management device includes: a registration means for registering agent information of an agent to member information of a member having an account; a first transmission means for transmitting a confirmation message to the member when there has been no access to the account for a period of time set by the member; a second transmission means for transmitting a proxy message to the proxy when there is no member response from the member to the confirmation message; an authentication control means for controlling authentication of the agent by the authentication device when a proxy response is received from the agent in response to the proxy contact; and an authorization means for granting authority over the member's digital assets to the agent if the authentication is successful.

[0010] The digital asset management method according to the present disclosure includes: Register the agent's agent information to the member information of the member who has an account, If there has been no access to the account for a period of time set by the member, a confirmation message is sent to the member; If there is no member response from the member to the confirmation contact, a proxy contact is sent to the proxy; When there is a proxy response from the proxy to the proxy contact, control authentication of the proxy; If the authentication is successful, authority over the member's digital assets is granted to the agent.

[0011] A non-transitory computer-readable medium having a program according to the present disclosure stored thereon includes: a registration process for registering agent information of an agent to the membership information of a member who has an account; a first transmission process for transmitting a confirmation message to the member when there has been no access to the account for a period of time set by the member; a second transmission process for transmitting a proxy message to the proxy when there is no member response from the member to the confirmation message; an authentication control process for controlling authentication of the agent when a proxy response is received from the agent in response to the proxy contact; an authorization process for granting authority over the member's digital assets to the agent if the authentication is successful; Have the computer run it. Effect of the Invention

[0012] The present disclosure makes it possible to provide a digital asset management device, a digital asset management system, a digital asset management method, and a non-transitory computer-readable medium capable of appropriately managing digital assets. [Brief description of the drawings]

[0013] [Figure 1] 1 is a block diagram showing a configuration of a digital asset management device according to a first embodiment. [Diagram 2] 1 is a flowchart showing the flow of a digital asset management process according to the first embodiment. [Diagram 3] FIG. 11 is a block diagram showing a configuration of a digital asset management system according to a second embodiment. [Figure 4] FIG. 11 is a block diagram showing a configuration of an authentication device according to a second embodiment. [Diagram 5] 11 is a flowchart showing the flow of face information registration processing according to the second embodiment. [Figure 6] 11 is a flowchart showing the flow of face recognition processing according to the second embodiment. [Figure 7] FIG. 11 is a block diagram showing a configuration of a digital asset management device according to a second embodiment. [Figure 8] FIG. 11 is a diagram showing an example of member information according to the second embodiment. [Figure 9] FIG. 11 is a diagram showing an example of agent information according to the second embodiment. [Figure 10] FIG. 11 is a diagram illustrating an example of asset management information according to the second embodiment. [Figure 11] FIG. 11 is a diagram showing an example of a registration screen for asset management information according to the second embodiment. [Figure 12] FIG. 11 is a diagram showing another example of the asset management information registration screen according to the second embodiment. [Figure 13] 13 is a flowchart showing a registration process of asset management information according to the second embodiment. [Figure 14] 13 is a flowchart showing a confirmation contact sending process according to the second embodiment. [Figure 15] 13 is a flowchart showing a proxy contact transmission process according to the second embodiment. [Figure 16] 11 is a flowchart showing an authentication control process and an authorization process according to the second embodiment. [Figure 17] 13 is a flowchart showing an agent confirmation process according to the second embodiment. [Figure 18] FIG. 2 is a diagram illustrating an example of a hardware configuration. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0014] Hereinafter, embodiments of the present disclosure will be described in detail with reference to the drawings. In each drawing, the same or corresponding elements are denoted by the same reference numerals, and duplicated descriptions will be omitted as necessary for clarity of explanation.

[0015] <Embodiment 1> Hereinafter, embodiments of the present disclosure will be described with reference to the drawings. 1 is a block diagram showing the configuration of a digital asset management device 10 according to this embodiment. The digital asset management device 10 includes a registration unit 11, a first transmission unit 12, a second transmission unit 13, an authentication control unit 14, and an authorization unit 15.

[0016] The registration unit 11 registers the agent information of the agent with respect to the member information of the member who has an account. The first transmission unit 12 transmits a confirmation message to the member if there has been no access to the account for a period of time set by the member. The second transmission unit 13 transmits a proxy message to the proxy when there is no member response from the member to the confirmation message. The authentication control unit 14 controls authentication of the agent when there is a response from the agent to the agent contact. If the authentication is successful, the authorization unit 15 grants the agent authorization regarding the member's digital assets.

[0017] FIG. 2 is a flowchart showing the flow of the digital asset management process performed by the digital asset management device 10 according to this embodiment. The registration unit 11 registers the agent information of the agent in the member information of the member who has an account (S11). The first transmission unit 12 determines whether or not the account has been accessed within a set period set by the member (S12). If there has been access (YES in S12), the process ends. If there has been no access (NO in S12), the first transmission unit 12 sends a confirmation message to the member (S13).

[0018] The second transmission unit 13 judges whether or not there has been a member response from the member in response to the confirmation contact (S14). If there has been a member response (YES in S14), the process ends. If there has been no member response (NO in S14), the second transmission unit 13 transmits a proxy contact to the proxy (S15).

[0019] The authentication control unit 14 judges whether or not there is a proxy response from the proxy in response to the proxy contact (S16). If there is no proxy response from the proxy (NO in S16), the process ends. If there is a proxy response (YES in S16), the authentication control unit 14 controls authentication of the proxy (S17). For example, the authentication control unit 14 requests authentication using biometric authentication or a password from an external authentication device, and receives the authentication result.

[0020] The authority granting unit 15 determines whether authentication of the agent has been successful (S18). If authentication has failed (NO in S18), the processing ends. If authentication has been successful (YES in S18), the authority granting unit 15 grants authority regarding the member's digital assets to the agent (S19).

[0021] As described above, in the digital asset management device 10 according to this embodiment, if an account is not accessed within a period set by a member, a confirmation message is sent to the member. If there is no response from the member, the digital asset management device 10 sends an agent message to the agent. If there is a response from the agent, the digital asset management device 10 authenticates the agent, and if the agent is successfully authenticated, grants the agent authority over the member's digital assets.

[0022] In this way, even if a member has not accessed their account for a set period of time, they can still give authority to their agent to properly manage their digital assets.

[0023] <Embodiment 2> Next, a configuration example of a digital asset management system 1000 according to a second embodiment will be described. This embodiment is a specific example of the first embodiment described above.

[0024] (Digital Asset Management System 1000) 3 is a block diagram showing the configuration of a digital asset management system 1000 according to this embodiment. The digital asset management system 1000 includes an authentication device 100, a digital asset management device 200, a communication terminal 300, a communication terminal 301, and a communication terminal 302.

[0025] The authentication device 100, the digital asset management device 200, the communication terminal 300, the communication terminal 301, and the communication terminal 302 are each connected via a network N. The network N may be wired or wireless, and may use any type of communication protocol.

[0026] The digital asset management system 1000 registers the agent information of an agent to the member information of a member who has an account, and when there is no access by the member for a set period of time or more, performs a predetermined judgment process and gives the agent authority over the digital assets. Digital assets may include, for example, electronic money, deposits in an Internet bank account, securities in an online brokerage, or digital data such as text, images, videos, and music posted on SNS. Digital assets may also include management information for managing these assets. Management information is, for example, an ID and password for logging in to a service for using the digital assets. Therefore, for example, an ID and password for accessing an account of an EC (Electronic Commerce) site or the like used by the member may be included in the digital assets.

[0027] For example, suppose a member is making regular purchases of products (such as supplements or cosmetics) on an EC site. If the member has not accessed the EC site for a set period of time or longer, authority is given to an agent in accordance with a prescribed judgment process. If the agent is authorized to obtain an ID and password for logging into the EC site, the agent can use these to access the member's account. The agent can stop regular product purchases as necessary. In this way, the use of the service can be quickly stopped even in cases where fees are automatically paid by bank account deduction, etc. Note that the contents of digital assets are not limited to these.

[0028] In this embodiment, an explanation will be given of a case where proxy information for proxies B1 and B2 is registered with the member information of member A1, who is a member of a service that uses digital assets. Here, an example is used in which proxies B1 and B2 are the spouse and child of member A1, respectively, but the relationship between the member and the proxy is not limited. For example, the proxy may be someone who is not related by blood. In the following, proxies B1 and B2 may be collectively referred to simply as "proxies" in the explanation. Also, member A1 may be simply referred to as "member" in the explanation.

[0029] (Communication terminals 300 to 302) The communication terminal 300 is a communication terminal owned by the member A1. The communication terminal 300 is, for example, an information processing device such as a personal computer, a smartphone, or a tablet terminal. Not limited to these, various information processing devices capable of communicating via the network N may be used for the communication terminal 300. The communication terminal 300 includes a display unit 310. The display unit 310 is at least a display device. The display unit 310 may also be an input / output unit including a display device and an input device, for example, a touch panel. The member A1 registers member information and agent information in the digital asset management device 200 using the communication terminal 300 according to the registration screen 310a displayed on the display unit 310. The communication terminal 300 receives a confirmation message or the like transmitted from the digital asset management device 200. The communication terminal 300 also transmits a member response to the confirmation message or the like to the digital asset management device 200.

[0030] Communication terminals 301 and 302 are communication terminals owned by agents B1 and B2, respectively. Communication terminals 301 and 302 are equipped with display units 311 and 312, respectively. The configuration of communication terminals 301 and 302 is similar to that of communication terminal 300, so a description thereof will be omitted. Communication terminals 301 and 302 receive agent contacts and the like transmitted from digital asset management device 200. Furthermore, communication terminals 301 and 302 transmit agent responses to agent contacts to digital asset management device 200. Furthermore, communication terminals 301 and 302 receive agent confirmation contacts transmitted from digital asset management device 200, and transmit responses thereto.

[0031] (Authentication device 100) The authentication device 100 is an information processing device that performs identity authentication of a user in response to an authentication request from the digital asset management device 200. Here, the user indicates the member A1, the agent B1, or the agent B2. The authentication device 100 may perform authentication using an ID or a password, or may perform biometric authentication using biometric information such as a face or an iris. The authentication device 100 returns the authentication result to the digital asset management device 200. Also, biometric authentication may be performed for some users. For example, password authentication may be performed for the member A1, and biometric authentication may be performed for the agents B1 or B2.

[0032] The configuration of the authentication device 100 will be specifically described below by taking as an example a case where the authentication device 100 performs biometric authentication. The authentication device 100 is an information processing device that, in response to a biometric authentication request received from the outside, compares the biometric information included in the request with pre-stored biometric information of each user and returns the comparison result (authentication result) to the request source. The biometric information is feature information of the biometric information used for biometric authentication. Examples of the biometric information include face, voiceprint, fingerprint, iris, or vein. Data (feature amount) calculated from physical features unique to an individual, such as face or voiceprint, may be used as the feature information of the biometric information.

[0033] In this embodiment, the authentication device 100 performs face authentication of the user using facial feature information of the user as biometric information. The authentication device 100 receives a face authentication request together with a face image of the user from the digital asset management device 200, and performs face authentication of the user. The authentication device 100 returns the authentication result to the digital asset management device 200 that originated the request.

[0034] 4 is a block diagram showing the configuration of the authentication device 100 according to this embodiment. The authentication device 100 includes a biometric information DB (DataBase) 110, a detection unit 120, a feature point extraction unit 130, a registration unit 140, and an authentication unit 150.

[0035] The biometric information DB 110 stores a user ID 111, biometric feature information 112 of the user ID, and a biometric authentication method 113 in association with each other. The user ID 111 is identification information for identifying a user. The biometric feature information 112 is a feature amount calculated from physical features unique to an individual user. In this embodiment, the biometric feature information 112 is a collection of feature points extracted from a face image of the user. In the following description, the biometric feature information 112 may be referred to as face feature information.

[0036] The biometric authentication method 113 is an authentication method such as face authentication, voiceprint authentication, and fingerprint authentication. In this embodiment, the biometric authentication method 113 is face authentication. When the authentication device 100 performs biometric authentication for multiple authentication methods, the biometric authentication method 113 may include multiple different authentication methods. The authentication device 100 may perform biometric authentication using biometric feature information 112 corresponding to a requested authentication method. Furthermore, the authentication device 100 may perform authentication using multiple authentication methods in response to a request.

[0037] The detection unit 120 detects a face area included in a registration image for registering facial feature information, and outputs the detected face area to the feature point extraction unit 130 . The feature point extraction unit 130 extracts feature points from the face region detected by the detection unit 120 , and outputs facial feature information to the registration unit 140 . In addition, the feature point extraction unit 130 extracts feature points contained in the face image etc. received from the digital asset management device 200 , and outputs face feature information to the authentication unit 150 .

[0038] When registering biometric feature information, the registration unit 140 issues a new user ID 111. The registration unit 140 registers the issued user ID 111 and biometric feature information 112 extracted from the registration image in the biometric information DB 110 in association with each other.

[0039] The authentication unit 150 performs biometric authentication using the biometric feature information 112. Specifically, the authentication unit 150 compares the facial feature information extracted from the face image with the biometric feature information 112 in the biometric information DB 110. If the comparison is successful, the authentication unit 150 identifies the user ID 111 associated with the compared biometric feature information 112.

[0040] The authentication unit 150 returns the presence or absence of a match in the biometric feature information to the digital asset management device 200 as the result of the biometric authentication. The presence or absence of a match in the biometric feature information corresponds to the success or failure of the authentication. Note that the biometric feature information matches (matches) when the degree of match is equal to or greater than a predetermined value. Furthermore, when the biometric authentication is successful, the biometric authentication result includes the identified user ID 111.

[0041] (Facial information registration process) Next, the face information registration process according to this embodiment will be described. 5 is a flowchart showing the flow of the face information registration process according to the present embodiment. First, the authentication device 100 acquires a registration image included in a face information registration request (S21). For example, the authentication device 100 accepts the face information registration request from the digital asset management device 200, a registration website, or the like via the network N.

[0042] Next, the detection unit 120 detects a face region included in the registration image (S22). Next, the feature point extraction unit 130 extracts feature points from the face region detected in step S22, and outputs biometric feature information (facial feature information) 112 to the registration unit 140 (S23). Finally, the registration unit 140 issues a user ID 111, associates the user ID 111 with the biometric feature information 112, and registers the user ID 111 and the biometric feature information 112 in the biometric information DB 110 (S24). The authentication device 100 may receive the biometric feature information 112 from a communication terminal or the like owned by the user, and associates the biometric feature information 112 with the user ID 111 and registers the biometric feature information 112 in the biometric information DB 110.

[0043] (Facial recognition processing) Next, the flow of the face authentication process will be described. FIG. 6 is a flowchart showing the flow of face authentication processing by the authentication device 100 according to this embodiment.

[0044] First, the feature point extraction unit 130 acquires facial feature information included in the biometric authentication request (S31). For example, the authentication device 100 receives a facial authentication request from the digital asset management device 200 via the network N, and extracts facial feature information from the facial image included in the facial authentication request in steps S21 to S23.

[0045] Next, the authentication unit 150 compares the acquired facial feature information with the biometric feature information 112 in the biometric information DB 110 (S32). If the facial feature information matches, that is, if the degree of match of the facial feature information is equal to or greater than a predetermined value (YES in S33), the authentication unit 150 identifies the user ID 111 of the user whose facial feature information matches (S34). Then, the authentication unit 150 returns a message to the digital asset management device 200 indicating that the facial authentication was successful and the identified user ID 111 (S35). If there is no matching facial feature information (NO in S33), the authentication unit 150 returns a message to the digital asset management device 200 indicating that the biometric authentication failed (S36).

[0046] (Digital asset management device 200) Next, a description will be given of the digital asset management device 200. The digital asset management device 200 is an information processing device that performs information processing for managing a user's digital assets. 7 is a block diagram showing the configuration of the digital asset management device 200. The digital asset management device 200 includes a storage unit 210, a memory 220, a communication unit 230, and a control unit 240.

[0047] The storage unit 210 is a storage device such as a hard disk, a flash memory, etc. The storage unit 210 stores a program 211 and asset management information 212. The program 211 is a computer program in which the processing of the digital asset management method according to this embodiment is implemented.

[0048] The asset management information 212 is information for managing the digital assets of a member. The asset management information 212 is information that associates member information 2121, agent information 2122, asset information 2123, set period 2124, and authority scope 2125. The asset management information 212 is registered, for example, by accepting input from the member via a registration screen 310a described later.

[0049] The asset management information 212 will be described below with reference to FIGS. 8 to 10 in addition to FIG. Fig. 8 is a diagram showing an example of the member information 2121. Fig. 9 is a diagram showing an example of the agent information 2122. Fig. 10 is a diagram showing an example of the asset management information 212.

[0050] Member information 2121 is information relating to members. The member information 2121 will be described with reference to Fig. 8. The member information 2121 is, for example, information in which a member ID 2121a for identifying a member is associated with the member's personal information. The member ID 2121a is information corresponding to the user ID 111. The member's personal information includes information for sending a confirmation message from the digital asset management device 200 to the communication terminal 300. The member's personal information is, for example, the member's name 2121b, address 2121c, telephone number 2121d, email address 2121e, and face image 2121f. Details of each piece of information will be described later.

[0051] Furthermore, the member information 2121 may include biometric authentication information used for biometric authentication of the member. The biometric authentication information may include a biometric authentication method and biometric feature information. In this embodiment, the biometric authentication information includes the member's facial feature information as the biometric feature information. In this embodiment, the facial feature information is stored in the biometric information DB 110 as the biometric feature information 112. The digital asset management device 200 can refer to and manage the member's facial feature information stored in the biometric information DB 110 via the member ID 2121a corresponding to the user ID 111 of the authentication device 100. Therefore, it can be said that the member information 2121 substantially includes the member's facial feature information.

[0052] The agent information 2122 is information relating to the agent. The agent information 2122 is registered in association with the member information 2121. For the member information 2121 of one member, agent information 2122 of a plurality of agents may be registered.

[0053] The agent information 2122 will be described with reference to FIG. 9. The agent information 2122 is, for example, information in which an agent ID 2122a for identifying an agent is associated with personal information of the agent. The agent ID 2122a is information corresponding to the user ID 111. The personal information of the agent includes information for sending an agent contact from the digital asset management device 200 to the communication terminal 301 or 302. The personal information of the agent is, for example, the agent's name 2122b, address 2122c, telephone number 2122d, email address 2122e, and face image 2122f. The agent information 2122 may include a relationship with a member 2122g. The relationship with a member 2122g is, for example, information indicating a spouse, child, parent, brother, sister, friend, or the like.

[0054] Similarly to the member information 2121, the agent information 2122 may include biometric authentication information used for biometric authentication of the agent. In this embodiment, the biometric authentication information includes facial feature information of the agent as biometric feature information. The digital asset management device 200 can refer to and manage the facial feature information of the agent stored in the biometric information DB 110 via the agent ID 2122a corresponding to the user ID 111 of the authentication device 100. Therefore, it can be said that the agent information 2122 substantially includes facial feature information of the agent.

[0055] Returning to FIG. The asset information 2123, the set period 2124, and the authority scope 2125 are information associated with the above-mentioned member information 2121 and agent information 2122 for asset management. The asset management information 212 will be specifically described with reference to Fig. 10. Fig. 10 is a diagram showing an example of the asset management information 212 including asset information 2123, a set period 2124, and an authority range 2125.

[0056] Asset information 2123 is information relating to the member's digital assets. The asset information 2123 is, for example, information in which an asset ID 2123a for identifying an asset is associated with an asset name 2123b indicating the contents of the digital asset.

[0057] The set period 2124 is information indicating the period until a confirmation message is sent to the member. The set period 2124 is associated with the member ID 2121a and the asset ID 2123a. The set period 2124 is set to an arbitrary period by accepting an input from the member. The set period 2124 may indicate the number of days (e.g., 30 days) or the number of months (e.g., 2 months) from the date and time when the digital asset account was last accessed. The set period 2124 may also indicate a specific date and time (e.g., XXXX year, X month, X day, XX time).

[0058] The set period 2124 may be set to a different period for each digital asset. For example, the member sets the set period 2124 according to the importance of the digital asset. By setting the set period 2124 shorter as the importance of the asset increases, the period until the digital asset management device 200 sends a confirmation message becomes shorter. Therefore, if the member has difficulty responding to the confirmation message, the agent can quickly grasp the situation. The member may also set the set period 2124 according to the frequency of access to the account. A similar effect can be obtained by setting the set period 2124 shorter for assets that are accessed frequently.

[0059] The authority range 2125 is information indicating the range of authority given to the agent. The authority range indicates, for example, all or part of the authority regarding the digital asset. The authority range 2125 is associated with a member ID 2121a, an asset ID 2123a, and an agent ID 2122a. The authority range 2125 is set to an arbitrary range by receiving an input from a member. The authority range 2125 may be set for each agent. For example, even for the same asset, a different authority range 2125 may be set depending on the agent. The authority range 2125 may also be set for each asset. For example, even for the same agent, a different authority range 2125 may be set depending on the asset.

[0060] A specific explanation will be given using the example shown in FIG. 10. A member with a member ID 2121a of "A1" is member A1, and agents with agent IDs 2122a of "B1" and "B2" are agents B1 and B2, respectively. For the digital assets of member A1, agents for "Internet banking" with asset ID 2123a of "101" are set as agents B1 and B2. An authority range 2125 of "all" is set for agent B1, and an authority range 2125 of "notification only" is set for agent B2. If member A1 does not access "Internet banking" for a set period of time or more and does not respond to the confirmation contact, an agent confirmation is sent to agents B1 and B2. If agents B1 and B2 respond and are successfully authenticated, the agent B1 is given the authority of "all" and B2 is given the authority of "notification only."

[0061] When the authority scope 2125 is "all," as in the case of agent B1, the digital asset management device 200 grants all of the authority that member A1 has to agent B1. For example, the digital asset management device 200 grants all of the authority to agent B1, including the authority to use IDs and passwords to access bank accounts and the authority to manage the account balance. When the authority scope 2125 is "notification only," as in the case of agent B2, the digital asset management device 200 notifies agent B2 that a digital asset exists. In this case, the digital asset management device 200 notifies agent B2 that member A1 has an online bank account, but does not grant agent B2 the authority to use IDs, passwords, etc.

[0062] In the above, "all" or "notification only" is used as an example of the authority range 2125, but the settings of the authority range 2125 are not limited to these. For example, the authority range may be set for each more detailed item, such as "login only" for "SNS."

[0063] Returning to FIG. The memory 220 is a volatile storage device such as a RAM (Random Access Memory), and is a storage area for temporarily holding information when the control unit 240 is operating. The communication unit 230 is a communication interface with the network N.

[0064] The control unit 240 is a processor, that is, a control device, that controls each component of the digital asset management device 200. The control unit 240 loads the program 211 from the storage unit 210 into the memory 220 and executes the program 211. In this way, the control unit 240 realizes the functions of a registration unit 241, a first transmission unit 242, a second transmission unit 243, an authentication control unit 244, and an authorization unit 245.

[0065] The registration unit 241 corresponds to the registration unit 11 in the first embodiment. The registration unit 241 associates member information 2121 of member A1 who has an account with agent information 2122 of agents B1 and B2, and registers them in the asset management information 212. The registration unit 241 also associates these pieces of information with asset information 2123, set period 2124, and authority scope 2125, and registers them in the asset management information 212. In other words, the registration unit 241 registers the asset management information 212 by associating multiple pieces of information used to manage the digital assets of member A1.

[0066] The registration unit 241 can register the asset management information 212 by accepting input from the communication terminal 300 via a registration website or the like. For example, member A1 enters the necessary information according to a registration screen 310a displayed on the display unit 310. The registration unit 241 accepts the input contents from member A1 and registers the asset management information 212.

[0067] 11 is a diagram showing an example of a registration screen 310a for registering asset management information 212. For example, the registration screen 310a includes a "member information" field for registering member information 2121, and a "registered asset" field for registering agent information 2122, asset information 2123, set period 2124, and authority scope 2125.

[0068] The "member information" field includes a member ID 2121a, a name 2121b, an address 2121c, a phone number 2121d, an email address 2121e, and a facial image 2121f. The member A1 inputs necessary information into each field using the communication terminal 300. The member ID 2121a may be automatically assigned.

[0069] The email address 2121e is, for example, an email address at which the communication terminal 300 can receive a confirmation message transmitted from the digital asset management device 200. In addition, multiple email addresses 2121e may be registered. Without being limited to this, for example, when the confirmation message is sent by a notification from a specific application or when the confirmation message is sent by an automated voice to the telephone number 2121d, the email address 2121e may not be essential.

[0070] The facial image 2121f may be captured using a camera connected to the communication terminal 300 or a camera built into the communication terminal 300, or a captured image file may be registered in advance. When the member A1 uses face authentication, the authentication device 100 may extract facial feature information from the facial image 2121f and register the facial feature information in the biometric information DB 110.

[0071] " Registration The “Asset” field includes an asset ID 2123a, an asset name 2123b, a set period 2124, an agent's name 2122b, a relationship 2122g, and an authority scope 2125. Similarly to the “Member Information” field, the member A1 can enter the “ RegistrationThe necessary information is entered in the "Asset" field. The asset ID 2123a may be automatically assigned. As described above, the member A1 can set different proxy information 2122, set period 2124, and authority scope 2125 for each asset.

[0072] Note that the proxy information 2122 can be input using a display screen similar to the "member information" field on the registration screen 310a, and therefore illustrations and detailed explanations are omitted. Member A1 may input the proxy's name 2122b, address 2122c, phone number 2122d, email address 2122e, face image 2122f, and relationship 2122g in the same manner as for member information 2121. Note that proxy B1 or B2 may input proxy information 2122.

[0073] In addition, when registering a proxy, approval confirmation may be performed to confirm with the proxy whether or not the proxy is approved for registration. For example, the registration unit 241 sends approval confirmation emails to the email addresses 2122e of the proxy B1 and B2, and registers the proxy information 2122 of the proxy B1 and B2 when a reply indicating approval is received.

[0074] The contents of the registration screen 310a are not limited to those shown in Fig. 11. For example, the "member information" field and the "registered assets" field do not have to be displayed on the same screen. Also, only a part of the display contents shown in Fig. 11 may be displayed, or other elements may be displayed in addition.

[0075] 12 is a diagram showing an example of another registration screen 310b for registering the asset management information 212. For example, the registration screen 310b includes input fields for an asset name 2123b, a set period 2124, an agent name 2122b, a relationship 2122g, and an authority scope 2125.

[0076] Each input field may be configured to allow input using a pull-down menu or radio button format in addition to direct input. Members can easily input by selecting the desired input content from multiple input candidates. As an example, the same figure shows a set period selection area 2124a for inputting the set period 2124 in radio button format. The set period selection area 2124a displays options of "30 days," "2 months," and "6 months," and accepts one of the options from the member. The set period selection area 2124a may accept input of the set period 2124 using a calendar display.

[0077] The set period selection area 2124a may display different input candidates depending on the digital asset, the member, or the agent. For example, the set period selection area 2124a displays shorter periods as candidates as the value of the digital asset increases. This makes it easier to set a shorter set period 2124 as the asset value increases. The value of the digital asset may be determined based on the amount of money, or may be determined based on the importance of the digital asset set by the member.

[0078] Furthermore, on the registration screen 310b, when inputting the agent's name 2122b, the agent's biometric information and a certificate that the agent is the agent may be registered. Furthermore, when the principal sets the agent, the agent may be notified of the biometric information of the agent, and the biometric information may be registered on the agent's communication terminal. At this time, the agent may be asked to consent to becoming the agent.

[0079] (Asset management information registration process) The registration process of the asset management information 212 performed by the digital asset management device 200 will be described with reference to a flowchart. The registration process of the asset management information 212 is a process of registering in association with each other member information 2121, agent information 2122, asset information 2123, set period 2124, and authority scope 2125. The digital asset management device 200 accepts input by member A1 on the communication terminal 300 and registers the asset management information 212.

[0080] FIG. 13 is a flowchart showing the registration process of the asset management information 212. First, the registration unit 241 registers the member information 2121 (S41). The member information 2121 may include a face image 2121f used for biometric authentication of the member A1. Next, the registration unit 241 registers the asset information 2123 in association with the member information 2121 (S42). Next, the registration unit 241 registers a set period 2124 until the confirmation contact is sent for each asset (S43). The set period 2124 may be set to a different period depending on the digital asset. Then, the registration unit 241 registers the agent information 2122 for each asset (S44). The agent information 2122 may include a face image 2122f used for biometric authentication of the agent. Furthermore, agent information 2122 of multiple agents may be registered for the member information 2121 of one member. Finally, the registration unit 241 registers the scope of authority to be given to the agent for each agent (S45). The scope of authority given to each agent may differ. Also, the scope of authority given to the same agent may differ depending on the assets.

[0081] The order of the processes is not limited to the above order. The processes may be performed in a different order as appropriate. In addition, when there are multiple agents or assets, the processes of steps S42 to S45 are repeated as appropriate.

[0082] Returning to FIG. 7, the description of the control unit 240 will be continued. The first transmission unit 242 corresponds to the first transmission unit 12 in the first embodiment. The first transmission unit 242 transmits a confirmation message to the member if there has been no access to the account for a period of time set by the member.

[0083] For example, in the example shown in Fig. 10, member A1 sets the set period 2124 to "30 days" for "Internet bank" with asset ID "101". Therefore, if member A1 has not accessed this online bank account for 30 days or more, the first sending unit 242 sends a confirmation message to member A1.

[0084] The first transmission unit 242 determines whether or not the member A1 has accessed the account based on, for example, whether or not there has been a login to the web service of the online bank. For example, the first transmission unit 242 obtains the date and time of the last login to the web service and measures the elapsed period. If 30 days or more have passed without a login, the first transmission unit 242 determines that the member A1 has not accessed the account for the set period or more. If there is another login within 30 days, the first transmission unit 242 resets the elapsed period and measures the elapsed period from the date and time of the last login again. Without being limited to this, the first transmission unit 242 may determine that the member A1 has accessed the account by an application such as a smartphone corresponding to the web service, or by using or inquiring about the balance of the online bank account at an ATM or the like. The determination of whether or not there has been an access to the account is not limited to the above. The first transmission unit 242 may determine whether or not there has been an access to the account based on the digital assets.

[0085] When the first transmission unit 242 determines that there has been no access for a set period or longer, it refers to the member information 2121 and acquires the email address 2121e of the member A1 (see FIG. 8). The first transmission unit 242 sends a confirmation email to the acquired email address. The confirmation email is a message for confirming the status of the member A1. The confirmation email may be, for example, an email including a message such as "Member A1, your account at XX Bank has not been accessed for 30 days or more. Please reply to this email to confirm." The confirmation email may simply request a reply, or may include an item for selecting the status of the member A1. The status of the member A1 may indicate, for example, "busy" or "not feeling well." The confirmation email may also include a response deadline.

[0086] The confirmation contact is not limited to email, and may be in any form. For example, the first transmission unit 242 may obtain the telephone number 2121d and notify the confirmation contact using SMS (Short Message Service), or may send the confirmation contact by an automated voice or the like. The first transmission unit 242 may also send the confirmation contact by push notification or the like via a predetermined application installed in the communication terminal 300.

[0087] In this embodiment, the digital asset management device 200 uses email to make confirmation contact and proxy contact. In the following explanation, sending a confirmation contact email to the email address 2121e of member A1 may be simply referred to as "sending a confirmation contact to member A1." Similarly, sending a proxy contact email to the email addresses 2122e of proxies B1 and B2 may be simply referred to as "sending a confirmation contact to member A1." To It may be indicated as "send proxy contact to proxy B1 and B2". The same applies to confirmation contact and contact or notification by non-principals.

[0088] The first sending unit 242 may notify the proxies B1 and B2 that a confirmation message has been sent to the member A1. This allows the proxies B1 and B2 to know that the member A1 has not accessed the account for the set period or longer. The first sending unit 242 refers to the proxy information 2122 to obtain the email addresses 2122e of the proxies B1 and B2, and sends an email to the effect that the confirmation message has been sent. The email may include, for example, a message such as "Member A1 has not accessed his / her account at XX Bank for 30 days or longer. A confirmation email has been sent to member A1."

[0089] The second transmission unit 243 corresponds to the second transmission unit 13 in the first embodiment. The second sending unit 243 sends an agent notification to agents B1 and B2 if there is no member response from member A1 to the confirmation notification sent from the first sending unit 242 to the email address of member A1. The member response indicates the response from member A1 to the confirmation notification. For example, the second sending unit 243 determines that there has been a member response when it receives a reply email from member A1 to the confirmation notification. The agent notification informs the agent that there has been no response from member A1. The agent notification may be an email including a message such as, for example, "There has been no response from member A1. Please reply to this email."

[0090] The second sending unit 243 sends the above-mentioned proxy notification if there is no member response within a predetermined period (e.g., one day) after the confirmation email is sent. The predetermined period may be set for each asset or proxy by accepting an input from the member A1, similar to the set period 2124, or an arbitrary period may be set automatically. The second sending unit 243 refers to the proxy information 2122 to obtain the email addresses 2122e of the proxies B1 and B2, and sends the proxy notification to the proxies B1 and B2.

[0091] The second transmission unit 243 may notify member A1 that a proxy notification will be sent before sending the proxy notification. For example, the second transmission unit 243 sends a message such as "We will contact proxies B1 and B2 to inform them that there has been no response from member A1" to the email address of member A1. This makes it possible to avoid sending proxy notifications to proxies B1 and B2 in cases where member A1 has simply forgotten to make a member response.

[0092] The second sending unit 243 may also notify member A1 that there has been a proxy response from proxy B1 or B2 to the proxy contact. The proxy response indicates the response from proxy B1 or B2 to the proxy contact. For example, when the second sending unit 243 receives a reply email from proxy B1 or B2 to the proxy contact, it determines that there has been a proxy response. The second sending unit 243 sends an email including a message such as "There has been a response from proxy B1" to the email address of member A1. This allows member A1 to know that there has been a response from proxy B1 or B2 even if he or she does not notice the notification that the confirmation contact and proxy contact are being sent.

[0093] In addition, when there is a member response from member A1 in response to the confirmation contact to member A1, the second transmission unit 243 may notify the agents B1 and B2 that there has been a member response from member A1. For example, the second transmission unit 243 sends a message such as "There has been a response from member A1" to the email addresses of the agents B1 and B2. This allows the agents B1 and B2 to confirm that member A1 is in a state where he can respond. In addition, since the agents B1 and B2 can know the timing of the confirmation contact and the timing of the confirmation response, they can know the time from when member A1 received the confirmation contact to when he sent the confirmation response. This allows them to know whether member A1 is responding promptly or taking a long time to respond.

[0094] The first transmission unit 242 and the second transmission unit 243 can check the status of the proxies by sending a proxy confirmation contact to the proxies B1 and B2, similar to the status check for member A1 described above. The proxy confirmation contact is a contact for checking the status of proxies B1 and B2. The proxy confirmation contact may be sent at any timing. By sending the proxy confirmation contact periodically (for example, every three months), the status of the proxies can be checked.

[0095] Specifically, first, the first transmission unit 242 transmits a proxy confirmation contact to the proxy. The proxy confirmation contact may be, for example, an e-mail including a message such as "Proxy B1, please reply to this e-mail to check the status." If there is no response to the proxy confirmation contact from the proxy B1 or B2, the second transmission unit 243 notifies the member A1 that there is no response to the proxy confirmation contact. The notification to the member A1 may be, for example, an e-mail including a message such as "Proxy confirmation contact has been sent to proxy B1, but there has been no response." This allows the member A1 to grasp the status of the proxies B1 and B2, and therefore allows him to consider adding or changing a proxy depending on the situation.

[0096] The authentication control unit 244 corresponds to the authentication control unit 14 of the first embodiment. The authentication control unit 244 controls authentication of the agent when there is an agent response to the agent contact. The authentication control unit 244 controls authentication so as to perform identity authentication of the agent using biometric authentication, two-step authentication, or the like. In this embodiment, the authentication control unit 244 controls facial authentication of the agent. As already described, the agent information 2122 includes facial feature information of the agent used for facial authentication of the agent. In addition, the digital asset management device 200 can refer to and manage the facial feature information of the agent stored in the biometric information DB 110 via the agent ID 2122a corresponding to the user ID 111.

[0097] The authentication control unit 244 receives a face authentication request including a face image of the agent B1 or B2 via the communication terminal 301 or 302. The authentication control unit 244 transmits the face authentication request including the face image of the agent B1 or B2 to the authentication device 100. The authentication control unit 244 receives a result of face authentication from the authentication device 100.

[0098] The authorization unit 245 corresponds to the authorization unit 15 in the first embodiment. If the authentication of the agent B1 or B2 is successful, the authorization unit 245 refers to the asset management information 212 and grants the agent B1 or B2 authority regarding the digital asset of the member A1.

[0099] In the example of FIG. 10, the member A1 sets the authority range of "all" for the agent B1 who is his / her spouse, and the authority range of "notification only" for the agent B2 who is his / her child. Therefore, if the agent B1 is successfully authenticated, the authority granting unit 245 grants the agent B1 all authority regarding the digital asset "Internet Bank". For example, the authority granting unit 245 notifies the agent B1 of the existence of the account, discloses the ID and password, discloses the contents of the digital asset, and guides the agent B1 on the transfer procedure or continued use of the account. For example, the authority granting unit 245 sends information regarding these to the email address of the agent B1. This allows the agent B1 to access the digital asset "Internet Bank" of the member A1 using the disclosed ID and password. The agent B1 can manage the digital asset of the member A1 on behalf of the member A1.

[0100] Furthermore, if the proxy B2 is successfully authenticated, the authority granting unit 245 grants the proxy B2 the authority to receive notification of the existence of the account. For example, the authority granting unit 245 sends information to notify the proxy B2 of the existence of the account to the proxy B2's email address. This allows the proxy B2 to know the existence of the member A1's digital asset "Internet Bank."

[0101] (Digital Asset Management Processing) Next, the processing performed by the digital asset management device 200 will be described with reference to the flowcharts shown in FIGS. FIG. 14 is a flow chart showing the confirmation message sending process for sending a confirmation message to member A1. FIG. 15 is a flow chart showing the proxy message sending process for sending proxy messages to the proxies B1 and B2. FIG. 16 is a flowchart showing the authentication control process and the authorization process for the agents B1 and B2. In the following, the description will be given with reference to FIGS.

[0102] First, the confirmation message sending process will be described with reference to FIG. The first transmission unit 242 refers to the asset management information 212 and acquires the set period 2124 set by the member A1, which is associated with the digital asset. The first transmission unit 242 judges whether the member A1 has accessed the account for the set period or longer (S51). If there has been access (YES in S51), the process of step S51 is repeated. If there has been no access (NO in S51), the first transmission unit 242 refers to the asset management information 212 and acquires the email address 2121e of the member A1. The first transmission unit 242 transmits a confirmation message to the acquired email address of the member A1 (S52). The first transmission unit 242 acquires the email addresses 2122e of the agents B1 and B2, and transmits a message indicating that the confirmation message has been sent to each email address (S53). Note that in the following processes, each functional unit of the digital asset management device 200 similarly acquires the email addresses of the member A1, etc., by referring to the asset management information 212. Hereinafter, a duplicated description will be omitted.

[0103] Next, the proxy message transmission process will be described with reference to FIG. The second transmission unit 243 judges whether or not a member response has been received from the member A1 within a predetermined period of time (S61). If a member response has been received from the member A1 (YES in S61), the second transmission unit 243 notifies the proxies B1 and B2 that a member response has been received from the member A1 (S64), and ends the process.

[0104] If there is no member response from member A1 (NO in S61), the second transmission unit 243 notifies member A1 that a proxy message will be sent (S62). The second transmission unit 243 sends the proxy message to proxy B1 or B2 (S63). Note that if there is a response from member A1 before the proxy message is sent, the process ends without sending the proxy message.

[0105] Next, the authentication control process and the authorization process will be described with reference to FIG. The second transmission unit 243 judges whether or not there has been a proxy response from the proxy B1 or B2 (S71). If there has been no proxy response from either the proxy B1 or B2 (NO in S71), the second transmission unit 243 notifies the member A1 accordingly (S77) and ends the process.

[0106] If there is a proxy response from the proxy B1 or B2 (YES in S71), the second transmission unit 243 notifies the member A1 of that fact (S72). Here, it is assumed that there is a proxy response from both the proxy B1 and the proxy B2. The authentication control unit 244 receives an authentication request from the proxy B1 or B2 via the communication terminal 301 or 302, and controls authentication for the proxy B1 or B2 (S73). Here, the authentication control unit 244 receives a face authentication request including a face image of the proxy B1 or B2, and transmits the face authentication request to the authentication device 100. The authentication control unit 244 receives the result of face authentication from the authentication device 100.

[0107] The authority granting unit 245 judges whether the authentication of the proxy B1 or B2 has been successful (S74). If the authentication has failed (NO in S74), the authority granting unit 245 does not grant authority to the proxy B1 or B2, notifies the proxy B1 or B2 of the authentication failure (S78), and ends the process. If the authentication has succeeded (YES in S74), the authority granting unit 245 grants authority regarding the digital assets of the member A1 to the proxy B1 or B2 (S75). Here, it is assumed that the proxy B1 and B2 have succeeded in face authentication. The authority granting unit 245 refers to the asset management information 212 and grants authority to the proxy B1 and B2 according to the set authority range 2125. For example, the authority granting unit 245 grants all authority to the proxy B1 and grants part of the authority to the proxy B2. The authority granting unit 245 notifies the member A1 and the proxy B1 and B2 that the authority of the digital assets has been granted to the proxy B1 and B2 (S76), and ends the process.

[0108] The digital asset management device 200 may store a proxy server for checking the status of the proxy at any time. confirmation Processing may be carried out. FIG. 17 is a flowchart showing the proxy confirmation process. The first transmission unit 242 transmits an agent confirmation contact to the agents B1 and B2 (S81). The second transmission unit 243 determines whether or not there has been a response from the agent B1 or B2 to the agent confirmation contact (S82). If there has been a response (YES in S82), the process ends. If there has been no response (NO in S82), the second transmission unit 243 notifies member A1 that there has been no response to the agent confirmation contact (S83). Note that if there has been a response from agent B1 or B2 in step S82 (YES in S82), the second transmission unit 243 may notify member A1 of that effect.

[0109] As described above, in the digital asset management system 1000 according to this embodiment, in the digital asset management device 200, the registration unit 241 registers the agent information of the agent to the member information of the member who has an account. The first transmission unit 242 transmits a confirmation message to the member if there is no access to the account for a period of time set by the member. The second transmission unit 243 transmits an agent message to the agent if there is no member response from the member to the confirmation message. The authentication control unit 244 controls authentication of the agent if there is an agent response from the agent to the agent message. The authority granting unit 245 grants authority regarding the member's digital assets to the agent if authentication of the agent is successful.

[0110] In this way, even if it becomes difficult for a member to manage the digital assets, it is possible to prevent the digital assets from being left unattended without a manager. Furthermore, in the digital asset management device 200, the period until a confirmation message is sent can be set to a different period depending on the digital asset. This makes it possible to send a confirmation message to the member at an appropriate period depending on the frequency of access and the importance of the asset.

[0111] In addition, since the digital asset management device 200 allows multiple agents to be set for one member, different authorities can be set depending on the agent. This allows assets to be transferred according to the relationship between the member and the agent. For example, it is possible to set the scope of authority to be gradually narrower for spouse, child, and friend, in that order.

[0112] Furthermore, the digital asset management device 200 notifies the agent that a confirmation message has been sent to the member and that there has been a member response from the member, so that the agent can be contacted as appropriate even if the member is in a situation where he or she is able to respond. In this way, the agent does not have to find out the member's situation until the member is unable to respond, but can grasp the situation in advance. Therefore, it is possible to quickly grasp any changes, such as a delay in the member's response. This makes it easier to transfer assets between the member and the agent that reflects the member's intentions.

[0113] Furthermore, the digital asset management device 200 can contact the agent to confirm whether the agent is available to respond, allowing the member to know whether the agent is available to respond. This allows the member to respond quickly even if it becomes difficult to transfer assets to the agent. Furthermore, the digital asset management system 1000 can also perform biometric authentication in the authentication device 100, making it possible to rigorously authenticate the agent before granting authority to the agent.

[0114] 3 is merely an example. Each of the authentication device 100, the digital asset management device 200, the communication terminal 300, the communication terminal 301, and the communication terminal 302 may be configured using a device in which multiple components are integrated, or each functional unit may be processed in a distributed manner using multiple devices. For example, the functions of the authentication device 100 and the digital asset management device 200 may be integrated into the same device.

[0115] <Hardware configuration example> Each functional component of the authentication device 100, the digital asset management device 200, the communication terminal 300, the communication terminal 301, and the communication terminal 302 may be realized by hardware that realizes each functional component (e.g., a hardwired electronic circuit, etc.), or may be realized by a combination of hardware and software (e.g., a combination of an electronic circuit and a program that controls it, etc.). Below, a further explanation will be given of the case where each functional component of the authentication device 100, etc. is realized by a combination of hardware and software.

[0116] 18 is a block diagram illustrating a hardware configuration of a computer 900 that realizes the authentication device 100, etc. The computer 900 may be a dedicated computer designed to realize the authentication device 100, etc., or may be a general-purpose computer. The computer 900 may be a portable computer such as a smartphone or a tablet terminal.

[0117] For example, by installing a specific application on the computer 900, the computer 900 realizes each function of the authentication device 100, etc. The application is constituted by a program for realizing the functional components of the authentication device 100, etc.

[0118] The computer 900 includes a bus 902, a processor 904, a memory 906, a storage device 908, an input / output interface 910, and a network interface 912. The bus 902 is a data transmission path for the processor 904, the memory 906, the storage device 908, the input / output interface 910, and the network interface 912 to transmit and receive data to and from each other. However, the method of connecting the processor 904 and other components to each other is not limited to a bus connection.

[0119] The processor 904 is one of various processors such as a central processing unit (CPU), a graphics processing unit (GPU), or a field-programmable gate array (FPGA). The memory 906 is a main storage device realized using a random access memory (RAM) or the like. The storage device 908 is an auxiliary storage device realized using a hard disk, a solid state drive (SSD), a memory card, or a read only memory (ROM) or the like.

[0120] The input / output interface 910 is an interface for connecting the computer 900 to an input / output device. For example, the input / output interface 910 is connected to an input device such as a keyboard and an output device such as a display device.

[0121] The network interface 912 is an interface for connecting the computer 900 to a network. This network may be a LAN (Local Area Network) or a WAN (Wide Area Network).

[0122] The storage device 908 stores a program (a program that realizes the above-mentioned application) that realizes each functional component of the authentication device 100, etc. The processor 904 reads this program into the memory 906 and executes it to realize each functional component of the authentication device 100, etc.

[0123] Each of the processors executes one or more programs including instructions for making the computer perform the algorithms described with the aid of the figures. The programs include instructions (or software code) for making the computer perform one or more functions described in the embodiments when loaded into the computer. The programs may be stored in a non-transitory computer-readable medium or a tangible storage medium. By way of example and not limitation, computer-readable media or tangible storage media include random-access memory (RAM), read-only memory (ROM), flash memory, solid-state drive (SSD) or other memory technology, CD-ROM, digital versatile disc (DVD), Blu-ray® disk or other optical disk storage, magnetic cassette, magnetic tape, magnetic disk storage or other magnetic storage device. The programs may be transmitted on a transitory computer-readable medium or communication medium. By way of example and not limitation, a transitory computer-readable medium or communication medium includes electrical, optical, acoustic, or other forms of propagated signals.

[0124] The present disclosure is not limited to the above-described embodiments, and may be modified as appropriate without departing from the spirit and scope of the present disclosure.

[0125] A part or all of the above-described embodiments can be described as, but is not limited to, the following supplementary notes.

[0126] (Appendix 1) a registration means for registering agent information of an agent to member information of a member having an account; a first transmission means for transmitting a confirmation message to the member when there has been no access to the account for a period of time set by the member; a second transmission means for transmitting a proxy message to the proxy when there is no member response from the member to the confirmation message; an authentication control means for controlling authentication of the agent when a proxy response is received from the agent in response to the proxy contact; and an authorization means for granting authority to the agent regarding the member's digital assets if the authentication is successful. Digital asset management device. (Appendix 2) The set period varies depending on the digital asset. 2. A digital asset management device as described in appendix 1. (Appendix 3) The agent information of a plurality of agents is registered for the member information of one of the members. 3. A digital asset management device according to claim 1 or 2. (Appendix 4) The authority differs depending on the agent. 4. A digital asset management device as described in appended claim 3. (Appendix 5) Notify the agent that the confirmation has been sent. A digital asset management device according to any one of appendixes 1 to 4. (Appendix 6) Notify the agent of the member's response. A digital asset management device according to any one of appendix 1 to 5. (Appendix 7) Notify the member of the receipt of the proxy response. A digital asset management device according to any one of appendixes 1 to 6. (Appendix 8) Sending an agent confirmation message to the agent, and if there is no response to the agent confirmation message, notifying the member that there is no response to the agent confirmation message A digital asset management device according to any one of appendixes 1 to 7. (Appendix 9) The proxy information includes biometric authentication information used for biometric authentication. A digital asset management device according to any one of appendixes 1 to 8. (Appendix 10) After sending the confirmation message, but before sending the proxy message, notify the member that the proxy message will be sent. A digital asset management device according to any one of appendixes 1 to 9. (Appendix 11) An authentication device; A digital asset management device, The digital asset management device includes: a registration means for registering agent information of an agent to member information of a member having an account; a first transmission means for transmitting a confirmation message to the member when there has been no access to the account for a period of time set by the member; a second transmission means for transmitting a proxy message to the proxy when there is no member response from the member to the confirmation message; an authentication control means for controlling authentication of the agent by the authentication device when a proxy response is received from the agent in response to the proxy contact; and an authorization means for granting authority over the member's digital assets to the agent if the authentication is successful. Digital asset management system. (Appendix 12) The set period varies depending on the digital asset. 12. A digital asset management system as described in claim 11. (Appendix 13) Register the agent's agent information to the member information of the member who has an account, If there has been no access to the account for a period of time set by the member, a confirmation message is sent to the member; If there is no member response from the member to the confirmation contact, a proxy contact is sent to the proxy; When there is a proxy response from the proxy to the proxy contact, control authentication of the proxy; If the authentication is successful, the agent is given authority over the member's digital assets. How to manage your digital assets. (Appendix 14) a registration process for registering agent information of an agent to the membership information of a member who has an account; a first transmission process for transmitting a confirmation message to the member when there has been no access to the account for a period of time set by the member; a second transmission process for transmitting a proxy message to the proxy when there is no member response from the member to the confirmation message; an authentication control process for controlling authentication of the agent when a proxy response is received from the agent in response to the proxy contact; an authorization process for granting authority over the member's digital assets to the agent if the authentication is successful; A non-transitory computer-readable medium that stores a program for execution by a computer. [Explanation of symbols]

[0127] 10 Digital Asset Management Device 11 Registration Department 12 First transmission unit 13 Second Transmission Unit 14 Authentication control section 15 Authorization Division 100 Authentication Device 110 Biometric information database 111 User ID 112 Biometric information (facial information) 120 Detection unit 130 Feature point extraction unit 140 Registration Department 150 Authentication Department 200 Digital Asset Management Device 210 Storage section 211 Program 212 Asset Management Information 2121 Membership Information 2121a Member ID 2121b Name 2121c Address 2121d Phone number 2121e Email address 2121f face image 2122 Agent information 2122a Agent ID 2122b Name 2122c Address 2122d Phone number 2122e Email address 2122f Face image 2122g Relationship 2123 Asset Information 2123a Asset ID 2123b Asset Name 2124 Setting period 2124a Setting period selection area 2125 Scope of Authority 220 Memory 230 Communications Department 240 Control Unit 241 Registration Department 242 First Transmission Unit 243 Second Transmission Unit 244 Authentication control section 245 Authorization Division 300, 301, 302 Communication terminal 310, 311, 312 Display section 310a, 310b Registration screen 900 Computers 902 Bus 904 Processor 906 Memory 908 Storage Devices 910 Input / Output Interface 912 Network Interface 1000 Digital Asset Management System A1 Member B1, B2 agent N Network

Claims

1. a registration means for registering agent information of an agent to member information of a member having an account; a first transmission means for transmitting a confirmation message to the member when there has been no access to the account for a period of time set by the member; a second transmission means for transmitting a proxy message to the proxy when there is no member response from the member to the confirmation message; an authentication control means for controlling authentication of the agent when a proxy response is received from the agent in response to the proxy contact; and an authorization means for granting authority to the agent regarding the member's digital assets if the authentication is successful. Digital asset management device.

2. The set period varies depending on the digital asset. The digital asset management device according to claim 1 .

3. The agent information of a plurality of agents is registered for the member information of one of the members.

3. The digital asset management device according to claim 1 or 2.

4. The authority differs depending on the agent. The digital asset management device according to claim 3 .

5. Notify the agent that the confirmation has been sent. The digital asset management device according to any one of claims 1 to 4.

6. Notify the agent of the member's response. The digital asset management device according to any one of claims 1 to 5.

7. Notify the member of the receipt of the proxy response. The digital asset management device according to any one of claims 1 to 6.

8. An authentication device; A digital asset management device, The digital asset management device includes: a registration means for registering agent information of an agent to member information of a member having an account; a first transmission means for transmitting a confirmation message to the member when there has been no access to the account for a period of time set by the member; a second transmission means for transmitting a proxy message to the proxy when there is no member response from the member to the confirmation message; an authentication control means for controlling authentication of the agent by the authentication device when a proxy response is received from the agent in response to the proxy contact; and an authorization means for granting authority over the member's digital assets to the agent if the authentication is successful. Digital asset management system.

9. A digital asset management method executed by a computer, comprising: Register the agent's agent information to the member information of the member who has an account, If there has been no access to the account for a period of time set by the member, a confirmation message is sent to the member; If there is no member response from the member to the confirmation contact, a proxy contact is sent to the proxy; When there is a proxy response from the proxy to the proxy contact, control authentication of the proxy; If the authentication is successful, the agent is given authority over the member's digital assets. How to manage your digital assets.

10. a registration process for registering agent information of an agent to the membership information of a member who has an account; a first transmission process for transmitting a confirmation message to the member when there has been no access to the account for a period of time set by the member; a second transmission process for transmitting a proxy message to the proxy when there is no member response from the member to the confirmation message; an authentication control process for controlling authentication of the agent when a proxy response is received from the agent in response to the proxy contact; an authorization process for granting authority over the member's digital assets to the agent if the authentication is successful; A program that a computer runs.

Images