Management server, management method, and storage medium

Abstract

The present disclosure relates to a management server, a management method, and a storage medium, in which a management server according to one aspect of the present disclosure is provided with at least one processor that receives a first identifier, first unique information, second identifier, and second unique information in response to the occurrence of a utilization relationship between a first object and a second object, and stores the received first identifier, first unique information, second identifier, and second unique information. The authentication of the first object is requested by transmitting the received first identifier and first unique information to the first server, the authentication of the second object is requested by transmitting the received second identifier and second unique information to the second server, and the authentication of the first object and the authentication of the second object are both established. A correspondence relationship between the first identifier and the second identifier is set.

Description

Technical Field

[0001] The present disclosure relates to a management server, a management method, and a storage medium. Background Art

[0002] Japanese Patent Application Laid-Open No. 2022-140747 proposes a fee collection system for collecting fees for services from vehicle users using a medium such as a card. Specifically, the fee collection system proposed in Japanese Patent Application Laid-Open No. 2022-140747 is configured to allocate a request for the use fee of a highway involving a target rental car to a target user based on the correspondence between the ID of the ETC (Electronic Toll Collection System) card, the company that rents the car, the date and time of use of the rental car, and the user of the rental car (charging information, registration information, settlement information, and use information). Summary of the invention

[0003] The present disclosure provides a technology for tracking a usage relationship between a first object and a second object while ensuring security.

[0004] A management server according to one embodiment of the present disclosure includes at least one processor. The at least one processor is configured to perform the following processing: receiving a first identifier of the first object, first inherent information of the first object, a second identifier of the second object, and second inherent information of the second object from at least one of a first terminal of the first object and a second terminal of the second object according to a utilization relationship between the first object and the second object; entrusting the first server with authentication of the first object by sending the received first identifier and the received first inherent information to the first server; receiving a result of authentication of the first object from the first server; entrusting the second server with authentication of the second object by sending the received second identifier and the received second inherent information to the second server; receiving a result of authentication of the second object from the second server; and setting a correspondence between the first identifier and the second identifier when both authentication of the first object and the second object are established in the received authentication result.

[0005] In the management server according to one aspect of the present disclosure, the processor may be further configured to cancel the correspondence relationship in response to reception of a cancellation request from at least one of the first terminal and the second terminal or satisfaction of a predetermined cancellation condition.

[0006] In a management server involved in one embodiment of the present disclosure, receiving the first identifier, the first inherent information, the second identifier, and the second inherent information from at least one of the first terminal and the second terminal can be configured by receiving the second identifier and the second inherent information from the first terminal and receiving the first identifier and the first inherent information from the second terminal.

[0007] In a management server involved in one embodiment of the present disclosure, receiving the first identifier, the first inherent information, the second identifier, and the second inherent information from at least one of the first terminal and the second terminal can be configured by receiving the first identifier and the second inherent information from the first terminal and receiving the second identifier and the first inherent information from the second terminal.

[0008] In a management server involved in one embodiment of the present disclosure, receiving the first identifier, the first inherent information, the second identifier, and the second inherent information from at least one of the first terminal and the second terminal can be configured by receiving the second identifier and the first inherent information from the first terminal and receiving the first identifier and the second inherent information from the second terminal.

[0009] In a management server involved in one embodiment of the present disclosure, receiving the first identifier, the first inherent information, the second identifier, and the second inherent information from at least one of the first terminal and the second terminal can be configured by receiving the first identifier, the first inherent information, the second identifier, and the second inherent information from one of the first terminal and the second terminal.

[0010] In a management server according to one embodiment of the present disclosure,

[0011] One of the first object and the second object is a user,

[0012] One of the first terminal and the second terminal corresponding to the user is a user terminal associated with the user,

[0013] the other of the first object and the second object is an object used by the user,

[0014] One of the first terminal and the second terminal corresponding to the object to be used is a loading terminal loaded on the object to be used.

[0015] In the management server according to one aspect of the present disclosure, the object to be utilized may be a mobile object.

[0016] In the management server according to one aspect of the present disclosure, the user terminal associated with the user may be a proxy user terminal owned by a proxy user who acts as a proxy for the user.

[0017] In the management server involved in one embodiment of the present disclosure, the utilization relationship between the first object and the second object can be generated by data communication between the object user terminal owned by the user and the proxy user terminal, and data communication between the proxy user terminal and the loading terminal.

[0018] In the management server according to one embodiment of the present disclosure, the user terminal associated with the user may be a target user terminal owned by the user.

[0019] The utilization relationship between the first object and the second object may be generated by executing data communication between the object user terminal and the loading terminal through a proxy user terminal owned by a proxy user acting as a proxy for the user.

[0020] In the management server according to one embodiment of the present disclosure, the user terminal associated with the user may be a target user terminal owned by the user.

[0021] The proxy right of a user other than the user may be associated with one of the first identifier and the second identifier corresponding to the user.

[0022] The management method involved in the second mode of the present disclosure is performed by a management server as follows: based on the generation of a utilization relationship between a first object and a second object, a first identifier of the first object, a first inherent information of the first object, a second identifier of the second object, and a second inherent information of the second object are received from at least one of a first terminal of the first object and a second terminal of the second object; authentication of the first object is entrusted to the first server by sending the received first identifier and the first inherent information to the first server; a result of authentication of the first object is received from the first server; authentication of the second object is entrusted to the second server by sending the received second identifier and the second inherent information to the second server; a result of authentication of the second object is received from the second server; and when authentication of the first object and the second object are both established in the received authentication result, a correspondence between the first identifier and the second identifier is set.

[0023] In the management method according to one aspect of the present disclosure, the management server may further execute a process of canceling the correspondence relationship in response to reception of a cancellation request from at least one of the first terminal and the second terminal or satisfaction of a predetermined cancellation condition.

[0024] In a management method involved in one embodiment of the present invention, receiving the first identifier, the first inherent information, the second identifier, and the second inherent information from at least one of the first terminal and the second terminal can be configured by receiving the second identifier and the second inherent information from the first terminal and receiving the first identifier and the first inherent information from the second terminal.

[0025] In a management method involved in one embodiment of the present invention, receiving the first identifier, the first inherent information, the second identifier, and the second inherent information from at least one of the first terminal and the second terminal can be configured by receiving the first identifier and the second inherent information from the first terminal and receiving the second identifier and the first inherent information from the second terminal.

[0026] In a management method involved in one embodiment of the present invention, receiving the first identifier, the first inherent information, the second identifier, and the second inherent information from at least one of the first terminal and the second terminal can be configured by receiving the second identifier and the first inherent information from the first terminal and receiving the first identifier and the second inherent information from the second terminal.

[0027] In a management method according to one aspect of the present disclosure, one of the first object and the second object may be a user,

[0028] One of the first terminal and the second terminal corresponding to the user may be a user terminal associated with the user.

[0029] The other of the first object and the second object may be an object used by the user.

[0030] One of the first terminal and the second terminal corresponding to the object to be used may be a loading terminal loaded on the object to be used.

[0031] In the management method according to one aspect of the present disclosure, the object to be utilized may be a mobile object.

[0032] A storage medium involved in one embodiment of the present disclosure stores a command that can be executed by one or more processors and causes the one or more processors to perform the following functions, wherein the command causes the first terminal of the first object to perform the following processing when a utilization relationship is generated between the first object and the second object: by assigning the first inherent information of the first object to the second terminal during data exchange with the second terminal of the second object, the second terminal sends the first inherent information to a management server instead of the first terminal; obtains the second inherent information of the second object from the second object; and by sending the obtained second inherent information to the management server, the management server attempts to authenticate the first object based on the first inherent information and the second object based on the second inherent information, and when the authentication of the first object and the second object are both established, sets the correspondence between the first identifier of the first object and the second identifier of the second object.

[0033] According to the present disclosure, it is possible to provide a technology for tracking the usage relationship between a first object and a second object while ensuring security. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] Hereinafter, features, advantages, technical and industrial significance of exemplary embodiments of the present invention will be described with reference to the accompanying drawings, in which like reference numerals represent like components, wherein:

[0035] Figure 1 An example of a scenario in which the present disclosure is applied is schematically shown.

[0036] Figure 2 An embodiment of a scenario in which the present disclosure is applied is schematically shown.

[0037] Figure 3A An example of linkage information according to the present embodiment is schematically shown.

[0038] Figure 3B An example of user information according to the present embodiment is schematically shown.

[0039] Figure 3C An example of moving object information according to the present embodiment is schematically shown.

[0040] Figure 4A An example of the process of releasing the association according to the present embodiment is schematically shown.

[0041] Figure 4B An example of a simplified association setting procedure according to the present embodiment is schematically shown.

[0042] Figure 5 An example of a usage scenario of the association information according to the present embodiment is schematically shown.

[0043] Fig. 6A An example of the hardware configuration of the management server according to the present embodiment is schematically shown.

[0044] Figure 6B An example of the hardware configuration of the first server according to the present embodiment is schematically shown.

[0045] Figure 6C An example of the hardware configuration of the second server according to the present embodiment is schematically shown.

[0046] Fig.6D An example of the hardware configuration of the first terminal according to the present embodiment is schematically shown.

[0047] Fig. 6E An example of the hardware configuration of the second terminal according to the present embodiment is schematically shown.

[0048] Figure 7 An example of the software configuration of each device according to the present embodiment is schematically shown.

[0049] Fig. 8A An example of the processing procedure of association setting according to the present embodiment is shown.

[0050] Figure 8B An example of the processing procedure of releasing the association according to the present embodiment is shown.

[0051] Fig. 9 An example of the association setting process in the 1-1 proxy mode according to the present embodiment is schematically shown.

[0052] Fig.10 An example of a processing procedure for association setting in the 1-1 proxy mode according to the present embodiment is shown.

[0053] Fig.11 A variation of the association setting process in the 1-1 proxy mode according to the present embodiment is schematically shown.

[0054] Fig.12 An example of the association setting process in the 1-2 proxy mode according to the present embodiment is schematically shown.

[0055] Fig.13 An example of a processing procedure for association establishment setting in the 1-2 proxy mode according to the present embodiment is shown.

[0056] Fig.14 A modified example of the association setting process in the 1-2 proxy mode according to the present embodiment is schematically shown.

[0057] Fig.15 An example of the association setting process in the second proxy mode according to the present embodiment is schematically shown.

[0058] Fig.16 An example of the processing procedure of association establishment setting in the second proxy mode according to the present embodiment is shown.

[0059] Fig.17 An example of the association setting process in the third proxy mode according to the present embodiment is schematically shown.

[0060] Fig.18 An example of a processing procedure for granting the proxy authority in the third proxy mode according to the present embodiment is shown. DETAILED DESCRIPTION

[0061] According to the system proposed in Japanese Patent Application Laid-Open No. 2022-140747, users can pay highway tolls using ETC even if they do not have their own ETC cards. However, the inventors of the present application have found that the conventional system has the following problems.

[0062] That is, it can be considered that with the diversification of MaaS (Mobility as a Service), from the perspective of convenience such as efficiency of settlement, there is a demand for tracking the use of mobile bodies by users while ensuring safety. In contrast, in existing systems, the correspondence between the use date and time and the user can be maintained as use information based on the contract or reservation of the rental car, but since the use date and time depends on the contract or reservation, the use information does not necessarily match the actual use of the rental car by the user. In addition, in vehicles that are used without a contract or reservation (such as private cars), the generation of use information is not originally envisioned. Therefore, according to the existing system, it is difficult to track the use of mobile bodies by users while ensuring safety. In addition, the occurrence of this problem is not limited to the scenario of using vehicles. The same problem may also occur in the scenario of using mobile bodies other than vehicles (such as aircraft, ships, etc.) and the scenario of using multiple types of mobile bodies. In addition, the same problem may also occur in all use scenarios other than mobile bodies.

[0063] In contrast, a management server according to one embodiment of the present disclosure includes at least one processor. The processor is configured to perform the following processing: receiving a first identifier of the first object, first inherent information of the first object, a second identifier of the second object, and second inherent information of the second object from at least one of a first terminal of the first object and a second terminal of the second object according to a utilization relationship between the first object and the second object; entrusting the first server with authentication of the first object by sending the received first identifier and the received first inherent information to the first server; receiving a result of authentication of the first object from the first server; entrusting the second server with authentication of the second object by sending the received second identifier and the received second inherent information to the second server; receiving a result of authentication of the second object from the second server; and setting a correspondence between the first identifier and the second identifier when both authentication of the first object and the second object are established in the received authentication result.

[0064] In a management server involved in one embodiment of the present invention, authentication of the first object and the second object is performed on the first server and the second server, respectively, based on the generation of a utilization relationship between the first object and the second object. Through these two authentications, security can be expected to be ensured. In addition, when the authentication of the first object and the second object is established, a correspondence between the first identifier and the second identifier is set (association is established). Through the record of the association establishment setting, the utilization relationship between the first object and the second object can be tracked. Therefore, according to the management server involved in one embodiment of the present invention, the utilization relationship between the first object and the second object can be tracked while ensuring security.

[0065] In addition, the method of the present disclosure may not be limited to the above-mentioned examples. As other methods of the management server involved in the above-mentioned method, one aspect of the present disclosure may be an information processing method for realizing all or part of the above-mentioned constituent elements, or a program, or a mechanically readable storage medium such as a computer storing such a program. Here, the mechanically readable storage medium is a medium that stores information such as a program through electrical, magnetic, optical, mechanical, or chemical effects. In addition, one aspect of the present disclosure may be any one of the first server, the second server, the first terminal, and the second terminal related to the management server involved in the above-mentioned method. And, one aspect of the present disclosure may be an information processing method related to any one of the first server, the second server, the first terminal, and the second terminal, or a program, or a storage medium storing such a program.

[0066] For example, a management method involved in one embodiment of the present disclosure may be an information processing method in which a management server performs the following processing: receiving a first identifier of the first object, first inherent information of the first object, a second identifier of the second object, and second inherent information of the second object from at least one of a first terminal of the first object and a second terminal of the second object based on a utilization relationship generated between the first object and the second object; entrusting the first server with authentication of the first object by sending the received first identifier and the first inherent information to the first server; receiving a result of authentication of the first object from the first server; entrusting the second server with authentication of the second object by sending the received second identifier and the second inherent information to the second server; receiving a result of authentication of the second object from the second server; and when authentication of both the first object and the second object is established in the received authentication result, setting a correspondence between the first identifier and the second identifier.

[0067] In addition, for example, the storage medium involved in one embodiment of the present invention can enable the first terminal of the first object to perform the following processing when the utilization relationship between the above-mentioned first object and the second object is generated: by assigning the first inherent information of the above-mentioned first object to the second terminal during the data exchange with the second terminal of the above-mentioned second object, so that the second terminal sends the first inherent information to the management server instead of the above-mentioned first terminal; obtains the second inherent information of the above-mentioned second object from the above-mentioned second object; and by sending the obtained second inherent information to the above-mentioned management server, the above-mentioned management server attempts to authenticate the above-mentioned first object based on the above-mentioned first inherent information and authenticate the above-mentioned second object based on the above-mentioned second inherent information, and when the authentication of the above-mentioned first object and the above-mentioned second object are both established, sets the correspondence between the first identifier of the above-mentioned first object and the second identifier of the above-mentioned second object.

[0068] Hereinafter, an embodiment (hereinafter also referred to as "this embodiment") involved in one aspect of the present disclosure is described based on the accompanying drawings. However, the present embodiment described below is merely an illustration of the present disclosure in all points. Various improvements or modifications can be made without departing from the scope of the present disclosure. When implementing the present disclosure, a specific structure corresponding to the embodiment can be appropriately adopted. Among them, the data appearing in this embodiment is described by natural language, and more specifically, it is specified by pseudo-language, instructions, parameters, machine language, etc. that can be recognized by a computer.

[0069] [1 Application example]

[0070] Figure 1An example of a scenario in which the present disclosure is applied is schematically shown. The management system 100 involved in the present embodiment includes a management server 1, a first server 2, and a second server 3. The management server 1 is one or more computers configured to record the correspondence (association establishment) between a first object and a second object. The first server 2 is one or more computers configured to perform authentication of the first object. The second server 3 is one or more computers configured to perform authentication of the second object. The first server 2 and the second server 3 can be respectively referred to as an authentication server, an ID (identification) server, etc.

[0071] In this embodiment, when the utilization relationship between the first object and the second object is generated, data exchange is performed between the first terminal 4 of the first object and the second terminal 5 of the second object (step SA10, step SB10). Moreover, the first identifier I10 of the first object, the first inherent information C1 of the first object, the second identifier I20 of the second object, and the second inherent information C2 of the second object are sent to the management server 1 from at least one of the first terminal 4 and the second terminal 5. As a result, the management server 1 receives the first identifier I10, the first inherent information C1, the second identifier I20, and the second inherent information C2 from at least one of the first terminal 4 and the second terminal 5 in real time according to the generation of the utilization relationship between the first object and the second object (step SA20, step SB20). The transmission of the above data by at least one of the first terminal 4 and the second terminal 5 can be treated as the setting of the corresponding relationship (association establishment) entrusted by the first terminal 4 and the second terminal 5 to the management server 1.

[0072] The management server 1 sends the received first identifier I10 and the first inherent information C1 to the first server 2 to entrust the first server 2 with authentication of the first object in real time (step SA30). As an example, the first server 2 is configured to be able to access the first object information O10 including the first registered inherent information C10 of the first object (for example, the first object information O10 is stored in a storage unit) in order to authenticate the first object. The registered inherent information is the inherent information that is pre-registered for authentication. The first server 2 retrieves the first object information O10 using the first identifier I10 in the query to extract the first registered inherent information C10 of the first object from the first object information O10. The first server 2 compares the extracted first registered inherent information C10 with the received first inherent information C1. The comparison can be performed by any method. The first server 2 determines whether the authentication of the first object is successful or not based on the result of the comparison. The first server 2 returns the result of the authentication of the first object to the management server 1. In response, the management server 1 receives the result of authentication of the first target from the first server 2 (step SA40 ).

[0073] In addition, the management server 1 sends the received second identifier I20 and the second inherent information C2 to the second server 3, thereby entrusting the second server 3 with the authentication of the second object in real time (step SB30). As an example, the second server 3 is configured to be able to access the second object information O20 including the second registered inherent information C20 of the second object (for example, the second object information O20 is stored in the storage unit) in order to authenticate the second object. The second server 3 retrieves the second object information O20 using the second identifier I20 in the query to extract the second registered inherent information C20 of the second object from the second object information O20. The second server 3 compares the extracted second registered inherent information C20 with the received second inherent information C2. The comparison can be performed by any method. The second server 3 determines whether the authentication of the second object is successful or not based on the result of the comparison. The second server 3 returns the result of the authentication of the second object to the management server 1. Accordingly, the management server 1 receives the result of the authentication of the second object from the second server 3 (step SB40).

[0074] The management server 1 determines whether the authentication of the first object and the second object is established based on the reply content from each server (2, 3) (step SC10). When the authentication of the first object and the second object is established, the management server 1 sets the correspondence between the first identifier I10 and the second identifier I20 (establishes the association) (step SC20). In one example, the management server 1 generates association establishment information D10 indicating the setting of the correspondence between the first identifier I10 and the second identifier I20, and saves the generated association establishment information D10. On the other hand, when the authentication of at least one of the first object and the second object is not established, the management server 1 does not set the correspondence between the first identifier I10 and the second identifier I20, and omits the process of setting the correspondence. The management server 1 can return the result of the association establishment process to at least one of the first terminal 4 and the second terminal 5 (step SC30). Among them, a series of processes from data exchange to association establishment setting between the terminals (4, 5) can be executed in real time according to the generation of the utilization relationship. The set association (correspondence) can be appropriately terminated when the utilization relationship between the first object and the second object disappears. Setting the correspondence between the first identifier I10 and the second identifier I20 can be treated as setting the correspondence between the first object and the second object.

[0075] As described above, in the present embodiment, according to the generation of the utilization relationship between the first object and the second object, the first server 2 and the second server 3 respectively perform authentication of the first object and the second object (step SA30, step SA40, step SB30, step SB40). Through these two authentications, security can be expected to be ensured. In addition, when the authentication of the first object and the second object is established, the correspondence between the first identifier I10 and the second identifier I20 is set (step SC10, step SC20). Through the record of the association establishment setting (association establishment information D10), the utilization relationship between the first object and the second object can be tracked. Therefore, according to the present embodiment, the utilization relationship between the first object and the second object can be tracked while ensuring security.

[0076] (Target)

[0077] The first object and the second object may be objects with which a utilization relationship can be established, and are not particularly limited and may be appropriately selected according to the implementation method. The first object and the second object may be any object, a person, other organisms, etc. Any object may include a virtual object. The utilization relationship may be established, for example, by one party using the other party, one party holding the other party, one party combining with the other party, one party connecting with the other party, etc., to generate a real or virtual relationship between at least two things. The management system 100 of the present disclosure may be used in any scenario of tracking the correspondence between two or more things.

[0078] (terminal)

[0079] Each terminal (4, 5) is related to each object. The relationship between each terminal (4, 5) and each object may not be particularly limited and may be appropriately determined according to the implementation method. In one example, either the first terminal 4 or the second terminal 5 may be held by the corresponding object. Either the first terminal 4 or the second terminal 5 may also be loaded on the corresponding object. Loading may include being always placed on the object and at least temporarily placed on the object when the object is used. Loading may include being held by the user of the object. In addition, either the first terminal 4 or the second terminal 5 may be the object itself.

[0080] (Inherent information)

[0081] Each inherent information (C1, C2) is used in the authentication of each object. As long as each inherent information (C1, C2) can be used in the authentication of each object, its data form and structure are not particularly limited and can be appropriately selected according to the implementation method. Each inherent information (C1, C2) can be composed of any information, such as information from each object, information from each terminal, temporarily generated information, information generated by any other method, etc.

[0082] The information from each object may be, for example, biometric information, identification information that is assigned as inherent, etc. Biometric information may be, for example, a facial image, a fingerprint, a voiceprint, etc. The identification information that is assigned as inherent may be, for example, a car registration number, a vehicle identification number (VIN: Vehicle Identification Number), a personal number, etc. When an IC tag is assigned to an object, the identification information that is assigned as inherent may include information held by the IC tag.

[0083] The information from each terminal may be, for example, a MAC address (Media Access Control address), terminal identification information (IMEI: International Mobile Equipment Identifier, IMSI: International Mobile Subscriber Identity, MEID: Mobile Equipment Identifier, ICCID: Integrated Circuit Card ID, other serial numbers, etc.), etc.

[0084] Temporarily generated information may be, for example, a one-time password, a private address (dynamically generated address), etc. Temporarily generated information may be composed of a timestamp, a random number, a hash value, etc. Information generated by any other method may include, for example, a password, a verification code, and other information other than a symbol column. Among them, at least part of the information such as identification information and information from the terminal may not be inherent information, but may be used as an identifier.

[0085] Each inherent information (C1, C2) can be obtained appropriately. In one example, at least one of the first inherent information C1 and the second inherent information C2 can be stored in the corresponding terminal in advance. For example, the first inherent information C1 can be stored in the first terminal 4. In another example, at least one of the first inherent information C1 and the second inherent information C2 can be obtained through any device such as an input device, a sensor, etc. For example, when the first object is a person and the first inherent information C1 is a facial image, the facial image can be obtained through an image sensor (camera).

[0086] (Identifier)

[0087] Each identifier (I10, I20) is used to identify each object. As long as each identifier (I10, I20) can identify each object, its data format and structure are not particularly limited and can be appropriately selected according to the implementation method. In one example, each identifier (I10, I20) can be composed of a symbol column including numbers, characters, etc.

[0088] Each identifier (I10, I20) can be appropriately obtained in the same manner as each inherent information (C1, C2). In one example, at least one of the first identifier I10 and the second identifier I20 can be pre-stored in the corresponding terminal. In another example, at least one of the first identifier I10 and the second identifier I20 can be obtained by any device such as an input device, a sensor, etc. For example, the identifier can be obtained by input via an input device. In addition, for example, the identifier can be converted into a code, and the identifier can be obtained by reading (decoding) the code.

[0089] (1st server / 2nd server)

[0090] The first server 2 and the second server 3 may each be composed of one or more server devices. The first server 2 and the second server 3 may each be configured to manage object information (O10, O20) related to each object. Each object information (O10, O20) may be stored in one or more storage devices provided inside or outside each server (2, 3).

[0091] In this embodiment, each object information (O10, O20) includes each registered inherent information (C10, C20) used in the authentication of each object. Each registered inherent information (C10, C20) corresponds to each inherent information (C1, C2) obtained during the authentication. Each inherent information (C10, C20) can be pre-registered at any time before the association establishment commission, such as account creation, addition of a new object, etc.

[0092] The success or failure of the authentication of each object is determined based on the result of comparing the inherent information (C1, C2) received from at least one of the first terminal 4 and the second terminal 5 with the registered inherent information (C10, C20). The comparison method can be appropriately selected according to the implementation method. In a simple example, the success or failure of the authentication can be determined based on whether the received inherent information is consistent with the registered inherent information. In another example, the success or failure of the authentication can be determined based on the degree of consistency between the received inherent information and the registered inherent information. A trained model generated by machine learning can be used in the comparison. During the comparison, the received inherent information and the registered inherent information can be compared directly, or can be compared indirectly after being converted into feature quantities, etc.

[0093] The unit for managing each object information (O10, O20) may not be particularly limited and may be appropriately determined according to the implementation method. At least one of the first object information O10 and the second object information O20 may be centrally (unified) managed or decentralized (independently) managed for each arbitrary group. The server devices constituting each server (2, 3) may be equipped by more than one operating organization (entity). At least one of the first server 2 and the second server 3 may be equipped by multiple operating organizations. In the case of being equipped by multiple operating organizations, the object information may be shared (i.e., centrally managed) or decentralized for each operating organization.

[0094] In the case where the server devices for authentication are dispersedly provided, in the step of entrusting authentication (step SA30, step SB30), the management server 1 can determine the target server device to be entrusted with authentication by any method. In one example, the information received from at least one of the first terminal 4 and the second terminal 5 may include the entrustment target information (for example, the address of the server device), and the management server 1 can determine the target server device of authentication based on the entrustment target information included in the received information. In another example, the target server device can be determined based on at least one of the identifiers (I10, I20) and the inherent information (C1, C2) such as a telephone number and a credit card number. In this case, the management server 1 can determine the target server device based on at least one of the identifiers (I10, I20) and the inherent information (C1, C2) received from at least one of the first terminal 4 and the second terminal 5.

[0095] (Management Server)

[0096] The management server 1 may be composed of one or more server devices. The management server 1 of the present disclosure is configured to record information related to the generation and disappearance of the correspondence between the first object and the second object as association establishment information D10. The association establishment information D10 may be stored in one or more storage devices provided in at least one of the inside and outside of the management server 1.

[0097] The obtained association establishment information D10 can be used in various scenarios. In one example, the association establishment information D10 can be used to track the relationship between the first object and the second object. As a specific example, during the period when the corresponding relationship between the first object and the second object is set, the association establishment information D10 can be used to enable the authority to establish a corresponding relationship with either the first object or the second object (the first object information O10 and the second object information O20) to be exercised by the other party. That is, the association establishment information D10 can be used to validate the authority of either the first object or the second object to be exercised by the other party based on the association between the first object and the second object (described later). Figure 2 ).

[0098] In this embodiment, since the association establishment information D10 indicates a combination of the first object and the second object with which a corresponding relationship is set, it includes information of the first identifier I10 and the second identifier I20. The management server 1 can obtain the identifiers (I10, I20) of the objects as appropriate. In one example, the management server 1 may not store the information of the first identifier I10 and the second identifier I20 with which a corresponding relationship is set in advance, but may obtain the information from at least one of the servers (2, 3) and the terminals (4, 5) each time. In another example, the management server 1 may store the information of at least one of the first identifier I10 and the second identifier I20 with which a corresponding relationship is set in advance.

[0099] The relationship between the management server 1 and the operating organizations of the servers (2, 3) can be arbitrary. In one example, the operating organization of the management server 1 can overlap with the operating organization of at least one of the first server 2 and the second server 3. In another example, the operating organization of the management server 1 can be different from the operating organizations of the first server 2 and the second server 3. The management system 100 of the present disclosure can be produced by connecting the management server 1 to the servers (2, 3) and the terminals (4, 5) via a network and being equipped in a state where the above-mentioned information processing can be performed according to the intention of the operating organization of the management server 1.

[0100] (Application example)

[0101] In one example, one of the first object and the second object may be a user. One of the first terminal 4 and the second terminal 5 that corresponds to the user may be a user terminal associated with the user. The other of the first object and the second object may be an object used by the user. One of the first terminal 4 and the second terminal 5 that corresponds to the object may be a loading terminal loaded on the object. According to one example of the present embodiment, the utilization relationship between the user and the object can be tracked while ensuring safety.

[0102] As long as the object can be used by the user, its type is not particularly limited and can be appropriately selected according to the implementation method. In one example, the object can be a mobile body (mobility). According to an example of this embodiment, the utilization relationship between the user and the mobile body can be tracked. In addition, the type of mobile body can be appropriately selected. The mobile body can be, for example, a vehicle, a railway vehicle, an aircraft (aircraft, unmanned aircraft, etc.), a ship, etc. The mobile body can be at least any one of a manually controlled manned aircraft and an automatically controlled unmanned aircraft. In the case where the mobile body is a vehicle, the type of vehicle can be arbitrarily selected. The type of vehicle can be selected, for example, from two-wheeled vehicles, three-wheeled vehicles, four-wheeled vehicles, etc. The vehicle can include a private car, a rental car, a shared car, a taxi, a bus, etc. The vehicle can be at least any one of an autonomous driving vehicle and a manually driven vehicle. The loading terminal can be called a mobile terminal.

[0103] Figure 2 An embodiment of a scenario in which the management system 100 of the present disclosure is applied is schematically shown. Figure 2 In an example, the first object is a user and the second object is a mobile object. Figure 2 In the description of the example, for convenience, it is assumed that "1" is related to the user and "2" is related to the mobile body. However, the correspondence between "1" and "2" is not limited to Figure 2 "First" and "second" can be interchangeable. That is, the second object can be a user and the first object can be a mobile object.

[0104] When the first object is a user, an example of the first terminal 4 is a user terminal. The user terminal can be any computer such as a portable terminal (smartphone, etc.), a dedicated device (electronic key device, etc.), or other computer devices. Typically, the user terminal can be carried by the user who is the object of association establishment (first object). The user's account can be shared among multiple computers, and accordingly, each computer sharing the account can be used as the user terminal (first terminal 4) of the same user.

[0105] An example of the first identifier I10 is a user identifier (user ID, my ID). The user identifier may be, for example, an ID of a user account, a personal number, identification information of a user terminal (e.g., a MAC address, terminal identification information), etc. An example of the first inherent information C1 is user inherent information. The user inherent information may be, for example, biometric information of the user (e.g., facial image, fingerprint, voiceprint, etc.), identification information of the user terminal, temporarily generated information, information generated by any other method, etc.

[0106] An example of the first object information O10 is user information O10A. The user information O10A includes registered user-specific information. The registered user-specific information is an example of the first registered user-specific information C10, and corresponds to the user-specific information obtained during authentication. The user information O10A may include any information related to the user (described later) in addition to the registered user-specific information. Figure 3B ). In one example, user information O10A can be associated with various information E10 used to exercise the authority of the corresponding user by including information related to the authority. Various information E10 may include, for example, public personal authentication information, settlement information, information of other service systems, etc. Public personal authentication information may include, for example, personal number, etc. Settlement information may include, for example, credit card information, online banking information, electronic settlement information, etc. Information of other service systems may include, for example, information related to electronic prescriptions (insurer number, prescription information, etc.). Various information E10 may be managed in an external system or in the management system 100. Among them, the first server 2 may be equipped by a public institution, a neutral institution, various enterprises (vehicle manufacturers, service operating companies, etc.), etc. The first server 2 may also be called a user ID server, my ID server, etc.

[0107] On the other hand, when the second object is a mobile body, an example of the second terminal 5 is a mobile body terminal (on-board terminal). The mobile body terminal may be, for example, a terminal installed inside or outside the mobile body, a terminal held by a person involved in the operation of the mobile body (e.g., a driver, a crew member, etc.), or a device equipped in a facility of the mobile body (e.g., a ticket gate, etc.). When the mobile body is a vehicle, the mobile body terminal may also be referred to as a vehicle-mounted terminal.

[0108] An example of the second identifier I20 is a mobile body identifier (mobile body ID, car ID). The mobile body identifier may be, for example, an ID of a mobile body account, identification information inherent to the target mobile body (such as a car registration number, vehicle identification information, etc.), identification information of a mobile body terminal, etc. An example of the second inherent information C2 is mobile body inherent information. The mobile body inherent information may be, for example, identification information inherent to the target mobile body, identification information of a mobile body terminal, temporarily generated information, information generated by any other method, etc.

[0109] An example of the second object information O20 is the mobile body information O20A. The mobile body information O20A includes the registered mobile body inherent information. The registered mobile body inherent information is an example of the second registered inherent information C20, and corresponds to the mobile body inherent information obtained during authentication. The mobile body information O20A may include any information related to the mobile body (described later) in addition to the registered mobile body inherent information. Figure 3C ).exist Figure 2 In one example, at least a portion of the rights of the mobile body to exercise various information E10 associated with the user information O10A can be validated (activated) according to the setting established by the association between the user and the mobile body. The second server 3 can be equipped by a public institution, a neutral institution, or various companies (vehicle manufacturers, service operating companies, etc.). The second server 3 can also be called a mobile body ID server, a car ID server, etc.

[0110] A moving object is an example of a usable object. Figure 2 The method can be applied to any situation where the user (occupant) of the object changes dynamically. The object can be other than a mobile object, such as a leased object, an accommodation facility, etc. Leased objects can include leased offices, leased spaces, etc.

[0111] The management system 100 may be configured to set the association between the first identifier I10 and the second identifier I20 when the use of the object starts, and to cancel the association when the use ends. The start and end of use may be detected by any method at the time of boarding or alighting a vehicle, lending or returning the object, etc. In one example, at least one of the start and end of use may be detected by the execution of data exchange between the first terminal 4 and the second terminal 5.

[0112] Among them, the objects of use can be divided into at least two types: objects that can be used repeatedly for a long time, and objects that can be used temporarily. For the sake of convenience, the former is called "frequently used objects" and the latter is called "temporarily used objects". An example of a frequently used object is the property of a user such as a private car. An example of a temporarily used object is an object owned by a person other than a user, such as a rental car, a shared car, a mobile object of a public transportation system, a rental object, an accommodation facility, etc. Mobile objects of a public transportation system are, for example, taxis, buses, railway vehicles, airplanes, ships, etc.

[0113] In the management system 100, the type of the object to be used (whether it is a frequently used object or a temporarily used object) may or may not be distinguished. In the case of distinguishing the type of the object to be used, the management system 100 may determine the type of the object to be used by any method. In one example, the object information (mobile body information, etc.) may include information indicating the type of the object to be used, and the management system 100 may determine the type of the object to be used based on the information. In another example, the type of the object to be used may be determined based on at least one of an identifier and inherent information. In another example, information sent from at least one of the first terminal 4 and the second terminal 5 to the management server 1 may include information indicating the type of the object to be used, and the management system 100 may determine the type of the object to be used based on the information. In another example, when the server that processes the information of the object to be used is determined based on the type of the object to be used (in Figure 2 In the example of the second server 3), when the operating organization is used, the type of the object can be determined based on the operating organization of the server.

[0114] In addition, the management system 100 can switch, for example, the processing of association establishment setting, the conditions for association establishment release, the management method of association establishment information D10, and the authentication processing according to the type of the identified object. In one example, the management system 100 can be configured to perform association establishment setting for some types of objects through the authentication processing of the present disclosure, and perform association establishment setting for the remaining types of objects through the authentication processing different from the present disclosure.

[0115] In addition, the application scenario of the management system 100 of the present disclosure may not be limited to the scenario of tracking users and utilizing the relationship between objects. In another example, both the first object and the second object may be robotic devices configured to act autonomously through automatic control. Robotic devices may include mobile objects such as self-driving vehicles and unmanned aircraft. In a scenario where two or more robotic devices interact autonomously, the management system 100 of the present disclosure may be used to track the generation and disappearance of relationships between the robotic devices.

[0116] As a specific example, one of the first object and the second object may be a large autonomous driving vehicle, and the other may be a small autonomous driving vehicle. The large autonomous driving vehicle may be configured to accommodate multiple small autonomous driving vehicles. The large autonomous driving vehicle may appropriately recover, transport, and release each small autonomous driving vehicle. Each small autonomous driving vehicle may be appropriately used at the release destination. In this case, the management system 100 of the present disclosure may be configured to track whether it is being transported (recovery completed) by setting and releasing the correspondence between the large autonomous driving vehicle and the small autonomous driving vehicle.

[0117] (How each message is sent)

[0118] In this embodiment, at least one of the first terminal 4 and the second terminal 5 transmits the first identifier I10, the first unique information C1, the second identifier I20, and the second unique information C2 to the management server 1 (step SA20, step SB20). The sharing of data transmission can be appropriately determined according to the embodiment.

[0119] (A) Split delivery

[0120] (A-1) Split mode

[0121] In one example, the first identifier I10, the first inherent information C1, the second identifier I20, and a part of the second inherent information C2 may be sent by the first terminal 4, and the rest may be sent by the second terminal 5. Accordingly, by each terminal (4, 5) being responsible for the transmission of data in a divided manner, it is expected that the efficiency of data transmission will be improved. In addition, the transmission items of each terminal (4, 5) may be appropriately selected according to the implementation mode. In this implementation mode, as a typical example, at least one of the following four modes may be adopted.

[0122] (A-1-1) Mode 1

[0123] In the first mode, the first terminal 4 may transmit the second identifier I20 and the second inherent information C2, and the second terminal 5 may transmit the first identifier I10 and the first inherent information C1. That is, receiving the first identifier I10, the first inherent information C1, the second identifier I20, and the second inherent information C2 from at least one of the first terminal 4 and the second terminal 5 may be configured by receiving the second identifier I20 and the second inherent information C2 from the first terminal 4 and receiving the first identifier I10 and the first inherent information C1 from the second terminal 5.

[0124] In addition, Figure 1 as well as Figure 2 In the example of , it is assumed that the second terminal 5 acquires the first identifier I10 and the first inherent information C1 as the process of step SA10, and the second terminal 5 sends the first identifier I10 and the first inherent information C1 as the process of step SA20. In addition, it is assumed that the first terminal 4 acquires the second identifier I20 and the second inherent information C2 as the process of step SB10, and the first terminal 4 sends the second identifier I20 and the second inherent information C2 as the process of step SB20.

[0125] When the utilization relationship between the first object and the second object is generated, the first terminal 4 can give the first identifier I10 and the first inherent information C1 to the second terminal 5 during the data exchange with the second terminal 5 (step SA10). Thus, the first terminal 4 can cause the second terminal 5 to send the first identifier I10 and the first inherent information C1 to the management server 1 instead of the first terminal 4 (step SA20). In addition, the first terminal 4 can obtain the second identifier I20 and the second inherent information C2 from the second object during the data exchange (step SB10). Furthermore, the first terminal 4 can send the obtained second identifier I20 and the second inherent information C2 to the management server 1 (step SB20). Thus, the first terminal 4 can cause the management server 1 to attempt authentication of the first object based on the first inherent information C1 and authentication of the second object based on the second inherent information C2 (steps SA30 to SA40, steps SB30 to SB40), and when authentication of both the first object and the second object is established, set the correspondence (association establishment) between the first identifier I10 and the second identifier I20 (step SC20).

[0126] When the utilization relationship between the first object and the second object is generated, the second terminal 5 can give the second identifier I20 and the second inherent information C2 to the first terminal 4 during the data exchange with the first terminal 4. Thus, the second terminal 5 can cause the first terminal 4 to send the second identifier I20 and the second inherent information C2 to the management server 1 instead of the second terminal 5. In addition, the second terminal 5 can obtain the first identifier I10 and the first inherent information C1 from the first object during the data exchange. And, the second terminal 5 can send the obtained first identifier I10 and the first inherent information C1 to the management server 1. Thus, the second terminal 5 can cause the management server 1 to attempt the authentication of the first object based on the first inherent information C1 and the authentication of the second object based on the second inherent information C2, and when the authentication of the first object and the second object is established, the correspondence relationship between the first identifier I10 and the second identifier I20 is set.

[0127] In one example of this embodiment, the second terminal 5 is responsible for sending data related to the first object, and the first terminal 4 is responsible for sending data related to the second object. Thus, by enabling each terminal (4, 5) to obtain information about the other party of the utilization relationship, the certainty of the generation of the utilization relationship between the first object and the second object is increased, and as a result, the reliability of the association establishment information D10 can be expected to be improved.

[0128] (A-1-2) Mode 2

[0129] In the second mode, the first terminal 4 may transmit the first identifier I10 and the second inherent information C2, and the second terminal 5 may transmit the second identifier I20 and the first inherent information C1. That is, receiving the first identifier I10, the first inherent information C1, the second identifier I20, and the second inherent information C2 from at least one of the first terminal 4 and the second terminal 5 may be performed by receiving the first identifier I10 and the second inherent information C2 from the first terminal 4 and receiving the second identifier I20 and the first inherent information C1 from the second terminal 5.

[0130] When the utilization relationship between the first object and the second object is generated, the first terminal 4 can give the first inherent information C1 to the second terminal 5 during the data exchange with the second terminal 5. Thus, the first terminal 4 can cause the second terminal 5 to send the first inherent information C1 (and the second identifier I20) to the management server 1 instead of the first terminal 4. In addition, the first terminal 4 can obtain the second inherent information C2 from the second object during the data exchange. Moreover, the first terminal 4 can send the obtained second inherent information C2 (and the first identifier I10) to the management server 1. Thus, the first terminal 4 can cause the management server 1 to attempt the authentication of the first object based on the first inherent information C1 and the authentication of the second object based on the second inherent information C2, and when the authentication of the first object and the second object is established, the correspondence relationship between the first identifier I10 and the second identifier I20 is set.

[0131] When the utilization relationship between the first object and the second object is generated, the second terminal 5 can give the second inherent information C2 to the first terminal 4 during the data exchange with the first terminal 4. Thus, the second terminal 5 can make the first terminal 4 send the second inherent information C2 (and the first identifier I10) to the management server 1 instead of the second terminal 5. In addition, the second terminal 5 can obtain the first inherent information C1 from the first object during the data exchange. And, the second terminal 5 can send the obtained first inherent information C1 (and the second identifier I20) to the management server 1. Thus, the second terminal 5 can make the management server 1 try to authenticate the first object based on the first inherent information C1 and the second object based on the second inherent information C2, and when the authentication of the first object and the second object is established, the correspondence relationship between the first identifier I10 and the second identifier I20 is set.

[0132] In one example of this embodiment, similarly to the first mode described above, the second terminal 5 is responsible for sending a portion of the data related to the first object, and the first terminal 4 is responsible for sending a portion of the data related to the second object, so that the certainty of the use relationship between the first object and the second object can be improved. As a result, it can be expected that the reliability of the association establishment information D10 can be improved.

[0133] In addition, in one example of the present embodiment, the second identifier I20 may not be sent from the first terminal 4 to the management server 1, and the first identifier I10 may not be sent from the second terminal 5 to the management server 1. Thus, data transmission in the form of a combination of data used for authentication of each object ("first identifier I10 and first inherent information C1", "second identifier I20 and second inherent information C2") can be avoided. As a result, since the party that transmits data only from the first terminal 4 and the second terminal 5 cannot determine the combination of data used for authentication of each object, further improvement of security can be expected.

[0134] (A-1-3) Mode 3

[0135] In the third mode, the first terminal 4 may transmit the second identifier I20 and the first inherent information C1, and the second terminal 5 may transmit the first identifier I10 and the second inherent information C2. That is, receiving the first identifier I10, the first inherent information C1, the second identifier I20, and the second inherent information C2 from at least one of the first terminal 4 and the second terminal 5 may be performed by receiving the second identifier I20 and the first inherent information C1 from the first terminal 4 and receiving the first identifier I10 and the second inherent information C2 from the second terminal 5.

[0136] When the utilization relationship between the first object and the second object is generated, the first terminal 4 can assign the first identifier I10 to the second terminal 5 during the data exchange with the second terminal 5. Thus, the first terminal 4 can cause the second terminal 5 to send the first identifier I10 (and the second inherent information C2) to the management server 1 instead of the first terminal 4. In addition, the first terminal 4 can obtain the second identifier I20 from the second object during the data exchange. Moreover, the first terminal 4 can send the obtained second identifier I20 (and the first inherent information C1) to the management server 1. Thus, the first terminal 4 can cause the management server 1 to attempt the authentication of the first object based on the first inherent information C1 and the authentication of the second object based on the second inherent information C2, and when the authentication of the first object and the second object is established, the correspondence relationship between the first identifier I10 and the second identifier I20 is set.

[0137] When the utilization relationship between the first object and the second object is generated, the second terminal 5 can assign the second identifier I20 to the first terminal 4 during the data exchange with the first terminal 4. Thus, the second terminal 5 can cause the first terminal 4 to send the second identifier I20 (and the first inherent information C1) to the management server 1 instead of the second terminal 5. In addition, the second terminal 5 can obtain the first identifier I10 from the first object during the data exchange. Moreover, the second terminal 5 can send the obtained first identifier I10 (and the second inherent information C2) to the management server 1. Thus, the second terminal 5 can cause the management server 1 to attempt the authentication of the first object based on the first inherent information C1 and the authentication of the second object based on the second inherent information C2, and when the authentication of the first object and the second object is established, the correspondence relationship between the first identifier I10 and the second identifier I20 is set.

[0138] In one example of this embodiment, similarly to the first mode described above, the second terminal 5 is responsible for sending a portion of the data related to the first object, and the first terminal 4 is responsible for sending a portion of the data related to the second object, so that the certainty of the use relationship between the first object and the second object can be improved. As a result, it can be expected that the reliability of the association establishment information D10 can be improved.

[0139] In addition, in one example of the present embodiment, the first identifier I10 may not be sent from the first terminal 4 to the management server 1, and the second identifier I20 may not be sent from the second terminal 5 to the management server 1. Thus, as in the second mode described above, data transmission in the form of a combination of data used in the authentication of each object can be avoided. As a result, since the party that transmits data only from the first terminal 4 and the second terminal 5 cannot determine the combination of data used in the authentication of each object, further improvement in security can be expected.

[0140] (A-1-4) Mode 4

[0141] In the fourth mode, the first terminal 4 may transmit the first identifier I10 and the first inherent information C1, and the second terminal 5 may transmit the second identifier I20 and the second inherent information C2. That is, receiving the first identifier I10, the first inherent information C1, the second identifier I20, and the second inherent information C2 from at least one of the first terminal 4 and the second terminal 5 may be performed by receiving the first identifier I10 and the first inherent information C1 from the first terminal 4 and receiving the second identifier I20 and the second inherent information C2 from the second terminal 5.

[0142] When the utilization relationship between the first object and the second object is generated, the first terminal 4 can cause the second terminal 5 to send the second identifier I20 and the second inherent information C2 to the management server 1 based on the data exchange with the second terminal 5. In addition, the first terminal 4 can send the first identifier I10 and the first inherent information C1 to the management server 1. Thus, the first terminal 4 can cause the management server 1 to attempt authentication of the first object based on the first inherent information C1 and authentication of the second object based on the second inherent information C2, and when the authentication of the first object and the authentication of the second object are both established, the correspondence relationship between the first identifier I10 and the second identifier I20 is set.

[0143] When the utilization relationship between the first object and the second object is generated, the second terminal 5 can cause the first terminal 4 to send the first identifier I10 and the first inherent information C1 to the management server 1 based on the data exchange with the first terminal 4. In addition, the second terminal 5 can send the second identifier I20 and the second inherent information C2 to the management server 1. Thus, the second terminal 5 can cause the management server 1 to attempt authentication of the first object based on the first inherent information C1 and authentication of the second object based on the second inherent information C2, and when the authentication of the first object and the authentication of the second object are both established, the correspondence relationship between the first identifier I10 and the second identifier I20 is set.

[0144] According to an example of the present embodiment, the first terminal 4 is responsible for transmitting data related to the first object, and the second terminal 5 is responsible for transmitting data related to the second object, so that efficiency of data transmission can be expected.

[0145] (A-1-5) Others

[0146] In addition, the transmission items of each terminal (4, 5) may not be limited to the above four modes. In another example, one of the first terminal 4 and the second terminal 5 may transmit the first inherent information C1 and the second inherent information C2, and the other may transmit the first identifier I10 and the second identifier I20. In addition, the transmission unit of each terminal (4, 5) may not necessarily be consistent with the unit of the identifier (I10, I20) and the inherent information (C1, C2). For example, the first terminal 4 and the second terminal 5 may divide the data for at least one item and transmit it, such as one of the first terminal 4 and the second terminal 5 transmits a part of the first inherent information C1 and the other transmits the rest of the first inherent information C1.

[0147] (A-2) Correspondence establishment method

[0148] In the case of the split transmission method, a part of the data used in the authentication of the first object and the second object is transmitted from the first terminal 4, and the remaining data is transmitted from the second terminal 5. In order to determine the combination of the first object and the second object for which the setting of the corresponding relationship is actually required, the management server 1 determines that the data is corresponding (that is, determines the combination of corresponding data). In addition, when the authentication of the first object and the second object is established based on the corresponding data, the corresponding relationship is set between the first object and the second object for which the corresponding data is established.

[0149] The establishment of data correspondence can be determined by any method. In one example, the data sent from each terminal (4, 5) may include shared information for determining the establishment of data correspondence. The shared information may be composed of, for example, consistent information having a relationship such as the establishment of a correspondence. The management server 1 may determine the establishment of data correspondence based on the relationship between the shared information included in the data received from one of the first terminal 4 and the second terminal 5 and the shared information included in the data received from the other party.

[0150] The shared information may be composed arbitrarily. In one example, the shared information may be composed of a combination of a first identifier I10 and a second identifier I20. In this case, the management server 1 may determine the establishment of data correspondence based on the consistency between the combination of identifiers (I10, I20) included in the data received from the first terminal 4 and the combination of identifiers (I10, I20) included in the data received from the second terminal 5. In another example, the shared information may be composed of temporary information such as a random number, a timestamp, a hash value, etc. In this case, the management server 1 may determine the establishment of data correspondence based on the relationship between the temporary information included in the data received from the first terminal 4 and the temporary information included in the data received from the second terminal 5. In the above-mentioned second mode and third mode, by adopting the latter, further improvement in security can be expected.

[0151] In addition, the shared information can be shared between the first terminal 4 and the second terminal 5 at any time. In a typical example, the first terminal 4 and the second terminal 5 can share the shared information when exchanging data (step SA10, step SB10). In addition, when no data arrives from the other party within a specified period after receiving data from one of the first terminal 4 and the second terminal 5, the management server 1 can notify at least one of the first terminal 4 and the second terminal 5 of an inquiry for requesting the transmission of the remaining data by any method. Typically, the management server 1 can notify the inquiry to the terminal of the party that received the data. When the terminal of the other party that did not receive the data is determined, the management server 1 can notify the inquiry to the terminal of the other party.

[0152] (B) Collective Transmission

[0153] In one example, one of the first terminal 4 and the second terminal 5 may transmit the first identifier I10, the first inherent information C1, the second identifier I20, and the second inherent information C2. That is, receiving the first identifier I10, the first inherent information C1, the second identifier I20, and the second inherent information C2 from at least one of the first terminal 4 and the second terminal 5 may be constituted by receiving the first identifier I10, the first inherent information C1, the second identifier I20, and the second inherent information C2 from one of the first terminal 4 and the second terminal 5.

[0154] In the case of collective transmission from the second terminal 5, when the utilization relationship between the first object and the second object is generated, the first terminal 4 can give the first identifier I10 and the first inherent information C1 to the second terminal 5 during the data exchange with the second terminal 5. Thus, the first terminal 4 can cause the second terminal 5 to send the first identifier I10, the first inherent information C1, the second identifier I20, and the second inherent information C2 to the management server 1. In addition, based on the data transmission, the first terminal 4 can cause the management server 1 to attempt authentication of the first object based on the first inherent information C1 and authentication of the second object based on the second inherent information C2 via the second terminal 5, and set the correspondence relationship between the first identifier I10 and the second identifier I20 when both the authentication of the first object and the second object are established.

[0155] In the case of collective transmission from the first terminal 4, when the utilization relationship between the first object and the second object is generated, the second terminal 5 can give the second identifier I20 and the second inherent information C2 to the first terminal 4 during the data exchange with the first terminal 4. Thus, the second terminal 5 can cause the first terminal 4 to send the first identifier I10, the first inherent information C1, the second identifier I20, and the second inherent information C2 to the management server 1. In addition, based on the data transmission, the second terminal 5 can cause the management server 1 to attempt authentication of the first object based on the first inherent information C1 and authentication of the second object based on the second inherent information C2 via the first terminal 4, and set the correspondence relationship between the first identifier I10 and the second identifier I20 when both the authentication of the first object and the second object are established.

[0156] In one example of this embodiment, the second terminal 5 is responsible for sending data related to the first object, or the first terminal 4 is responsible for sending data related to the second object. This can improve the certainty of the use relationship between the first object and the second object. As a result, it is expected that the reliability of the association establishment information D10 will be improved.

[0157] (Data Exchange)

[0158] In this embodiment, a series of processes related to association setting may be started by triggering data exchange (step SA10, step SB10) between the first terminal 4 and the second terminal 5. The method of data exchange is not particularly limited and may be appropriately selected according to the embodiment.

[0159] In one example, data exchange between the first terminal 4 and the second terminal 5 can be performed through wireless or wired data communication. Wireless communication can be performed, for example, through NFC (Near Field Communication), Bluetooth (registered trademark), Wi-fi (registered trademark), etc. Wired communication can be performed, for example, through wired LAN (Local Area Network), USB (Universal Serial Bus), etc. Data communication can be performed directly between the first terminal 4 and the second terminal 5, or indirectly via other computers. In another example, data exchange can be performed by methods other than data communication such as reading a QR code. For example, data exchange can be performed by one of the first terminal 4 and the second terminal 5 displaying data on a display and the other using a sensor such as an image sensor to read the displayed data.

[0160] In the case where one of the first terminal 4 and the second terminal 5 is responsible for sending the data of the object of the other party in the data transmission to the management server 1 (for example, the first to third modes of the above-mentioned split transmission, collective transmission, etc.), the terminal of one party can obtain the data of the object of the other party responsible for transmission in the data exchange. That is, at least one of the first terminal 4 giving the data of the first object to the second terminal 5 and the second terminal 5 giving the data of the second object to the first terminal 4 can be performed in the data exchange. Alternatively, in the data exchange, the first terminal 4 can obtain the data of the second object by a spontaneous action, and the second terminal 5 can obtain the data of the first object by a spontaneous action.

[0161] As a specific example, in the case of adopting the first mode of the split transmission, the first terminal 4 can obtain the second identifier I20 and the second inherent information C2 from the second object in the data exchange. In one example, when the second terminal 5 holds at least one of the second identifier I20 and the second inherent information C2, the first terminal 4 can obtain at least one of the second identifier I20 and the second inherent information C2 from the second terminal 5 through data communication. In another example, the first terminal 4 can obtain at least one of the second identifier I20 and the second inherent information C2 from the second terminal 5 by a method other than data communication, such as reading data displayed in a two-dimensional code in the second terminal 5. In another example, the first terminal 4 can use an input device, a sensor, or the like to obtain at least one of the second identifier I20 and the second inherent information C2 from any one of the second object and the second terminal 5 in the data exchange. Acquisition from the second object may include acquisition by the first object acting as an operating device when the first object is a person and the second object is an object. The same applies to the acquisition of the first identifier I10 and the first unique information C1 by the second terminal 5 .

[0162] For example, in the above Figure 2 In the example of , the first terminal 4 can obtain the second identifier I20 (mobile body identifier) ​​through data communication or code reading. In the case where the second inherent information C2 (mobile body inherent information) is a car registration number, the first terminal 4 can obtain the second inherent information C2 by photographing the license plate number using an image sensor and analyzing the obtained image. In addition, the second terminal 5 can obtain the first identifier I10 (user identifier) ​​through data communication or code reading. In the case where the first inherent information C1 (user inherent information) is a facial image, the second terminal 5 can obtain the first inherent information C1 by photographing the user's face using an image sensor.

[0163] When an input device is used in acquiring data, the terminal of one party may acquire data from the object of the other party by operating the input device through the object of the other party, in addition to acquiring the data of the object of the other party by operating the input device through the object of the other party, and may also acquire the data of the object of the other party by operating the input device through the object of one party. Figure 2 In the example, when the second inherent information C2 (inherent information of the mobile body) is a car registration number and an input device is used to obtain the car registration number, the first terminal 4 can obtain the second inherent information C2 from the mobile body (the second object) by inputting the car registration number by the user (the first object) through the input device.

[0164] In addition, the acquisition of data of the object of the other party by the terminal of one party does not necessarily have to be performed during the data exchange. The terminal of one party can acquire the data of the object of the other party at any time different from the data exchange. The data acquisition method can adopt any of the above methods. When the acquisition of data of the object of the other party by the terminal of one party is not performed in the data exchange (including the fourth mode of the above-mentioned split transmission), the data exchange between the first terminal 4 and the second terminal 5 can function as a simple trigger for starting a series of processes related to the association establishment setting.

[0165] In addition, in the case where the first terminal 4 is responsible for sending at least a part of the data of the first object in the data transmission to the management server 1, the first terminal 4 can obtain the data of the first object at any time before executing the data transmission. Similarly, when the second terminal 5 is responsible for sending at least a part of the data of the second object, the second terminal 5 can obtain the data of the second object at any time before executing the data transmission. The method of obtaining data may not be particularly limited and may be appropriately selected according to the implementation method. In one example, when at least one of the first identifier I10 and the first inherent information C1 of the first object is pre-stored in the memory resource of the first terminal 4, the first terminal 4 can obtain at least one of the first identifier I10 and the first inherent information C1 of the first object from the memory resource. In another example, the first terminal 4 can use an input device, a sensor, etc. to obtain at least one of the first identifier I10 and the first inherent information C1 of the first object. The same is true for the second terminal 5 obtaining the data of the second object.

[0166] (Relationship establishment information)

[0167] Figure 3A An example of association information D10 according to this embodiment is schematically shown. Figure 3AIn one example, the association establishment information D10 includes a first identifier I10, a second identifier I20, a setting time, and a release time. The first identifier I10 and the second identifier I20 represent the first object and the second object for which the correspondence relationship (association establishment) is set. The setting time represents the time when the correspondence relationship is set. The setting time can be composed of a timestamp. The release time represents the time when the correspondence relationship is released. The value of the release time can be added when the process of releasing the correspondence relationship is executed. The expression method of release may not be limited to such an example. In another example, the release time can be replaced by at least one of the validity period and the flag. The validity period indicates the period during which the setting of the correspondence relationship is valid. In this case, whether the setting of the correspondence relationship is valid (that is, whether the correspondence relationship is set or released) is indicated by whether it is within the validity period. The flag indicates whether the correspondence relationship is released. The flag can be set when the process of releasing the correspondence relationship is executed. In another example, the association establishment information D10 may include a field for at least one of the validity period and the flag and the release time. In addition, as long as the corresponding relationship can be indicated, the structure of the association establishment information D10 is not limited to Figure 3A In another example, the association establishment information D10 may also include information indicating the type of the object (regularly used object or temporary used object). The type of the object does not necessarily need to be identified based on the individual information. For example, the type of the object can be identified based on information such as an identifier.

[0168] The data format of the association establishment information D10 may not be particularly limited and may be appropriately selected according to the implementation method. The association establishment information D10 may be maintained by any database platform. In one example, the association establishment information D10 may be maintained by a relational database in a table format or the like. In another example, the association establishment information D10 may be maintained by a blockchain platform. In this case, each transaction of association establishment setting and release may be stored by the blockchain as the association establishment information D10. For example, a transaction of association establishment setting may include a first identifier I10, a second identifier I20, and a setting time. A transaction of association release may include a first identifier I10, a second identifier I20, and a release time (or information indicating release).

[0169] (First target information)

[0170] The first object information O10 includes the first registered inherent information C10. The first object information O10 may include any information related to the first object other than the first registered inherent information C10. The first object information O10 may include, for example, the first identifier I10, attribute information of the first object, information related to authority, and the like. Figure 2In the example of , the user information O10A is an example of the first object information O10.

[0171] Figure 3B An example of user information O10A according to this embodiment is schematically shown. Figure 3B In an example, user information O10A includes a user ID (first identifier I10), registered user inherent information (first registered inherent information C10), attribute information, and permission information. Attribute information may include any information related to the attributes of the corresponding user. Attribute information may include, for example, personal information such as name, address, age, gender, and contact information. Permission information is related to the permissions of the corresponding user. Permission information may include, for example, information for cooperating with a server for information processing related to the permissions of the execution object, information indicating the establishment of associations with various information E10, etc. In addition, the composition of user information O10A may not be limited to Figure 3B The examples may be appropriately changed according to the implementation mode.

[0172] The data format of the first object information O10 (user information O10A) may not be particularly limited and may be appropriately selected according to the implementation method. The first object information O10 (user information O10A) may be maintained by any database platform. In one example, the first object information O10 (user information O10A) may be maintained by a relational database in a table format or the like. In another example, the first object information O10 (user information O10A) may be maintained by a blockchain platform.

[0173] (Second target information)

[0174] The second object information O20 includes the second registered inherent information C20. The second object information O20 may include any information related to the second object other than the second registered inherent information C20. The second object information O20 may include, for example, the second identifier I20, attribute information of the second object, information related to authority, and the like. Figure 2 In the example of , the moving body information O20A is an example of the second object information O20.

[0175] Figure 3C An example of the moving body information O20A according to this embodiment is schematically shown. Figure 3CIn an example, the mobile body information O20A includes the mobile body ID (the second identifier I20), the registered mobile body inherent information (the second registered inherent information C20), and the attribute information. The attribute information includes the license plate, type, and owner information. When the mobile body is a vehicle, the license plate is the car registration number, and the type is the vehicle model. When the car registration number is used as the mobile body inherent information, the license plate can be omitted from the attribute information. The owner information may include any information related to the owner of the mobile body. The owner information may include, for example, the owner's personal information such as name, address, age, gender, and contact information. The owner may also be a legal person. In addition, the composition of the mobile body information O20A may not be limited to Figure 3C The example may be changed appropriately according to the implementation mode. The configuration of the attribute information may also be changed appropriately. For example, the mobile information O20A may also include information related to the mobile terminal such as the contact information of the mobile terminal.

[0176] The data format of the second object information O20 (mobile body information O20A) may not be particularly limited and may be appropriately selected according to the implementation method. The second object information O20 (mobile body information O20A) may be maintained by any database platform. In one example, the second object information O20 (mobile body information O20A) may be maintained by a relational database such as a table. In another example, the second object information O20 (mobile body information O20A) may be maintained by a blockchain platform.

[0177] (Notification method of association establishment setting)

[0178] The management server 1 may send a notification indicating the result of the association establishment process to at least one of the first terminal 4 and the second terminal 5 (step SC30). The sending path of the notification may not be particularly limited and may be appropriately determined according to the implementation method. In one example, the management server 1 may directly notify at least one of the first terminal 4 and the second terminal 5 ( Figure 1 , Figure 2 In another example, the management server 1 may indirectly notify at least one of the first terminal 4 and the second terminal 5 via external computers such as the servers (2, 3).

[0179] (Confirmation of continued use)

[0180] As one of the optional configurations, after the correspondence relationship between the first object and the second object is set, the management server 1 may further execute a process for confirming whether the correspondence relationship continues (confirmation process). The method for confirming continued use may be appropriately selected according to the embodiment.

[0181] In one example, the continuation of the correspondence can be confirmed by authenticating at least one of the first object and the second object via at least one of the first terminal 4 and the second terminal 5. The authentication in the confirmation process can be performed in the same manner as the authentication based on the inherent information (C1, C2), or it can be different. In order to improve certainty, the object of the other party can be authenticated via one of the first terminal 4 and the second terminal 5 as in the first mode of split transmission mentioned above. Figure 2 In the example, for example, the user can be authenticated by using an image sensor equipped on the mobile body to perform facial authentication of the user, using a fingerprint reader installed on the handle to perform fingerprint authentication of the user, making the user speak and using a microphone equipped on the mobile body to perform voiceprint authentication, etc. The authentication process can be performed by the terminal (4, 5) or by the server (2, 3). When the authentication process is performed by the server (2, 3), the data used in the authentication can be sent directly from the terminal (4, 5) to the server (2, 3), or it can be sent indirectly via an external computer such as the management server 1. The data used for the authentication in the confirmation process can be the same as or different from the inherent information (C1, C2). The management server 1 can appropriately obtain the authentication result, and can determine that the corresponding relationship continues when the authentication of the object is established in the obtained authentication result, and can determine that the corresponding relationship does not continue when the authentication is not established.

[0182] In another example, when at least one of the first object and the second object is a user (for example Figure 2 In the case of a user who has not yet completed the confirmation notification, the management server 1 may directly or indirectly send a confirmation notification including an operator to at least one of the first terminal 4 and the second terminal 5. The operator may be composed of, for example, a confirmation button, a reply button, a link, etc. The destination of the confirmation notification may not necessarily correspond to the user. Figure 2 In the case of the above, the management server 1 may send a confirmation notification to at least one of the first terminal 4 and the second terminal 5. The sending destination of the confirmation notification may be the same as or different from the sending destination of the notification indicating the result of the association establishment process. The confirmation notification may be configured to return a response to the management server 1 directly or indirectly according to the operation of the operating element by the user. The management server 1 may determine that the correspondence relationship continues when a response based on the operation of the operating element is received within a prescribed period, and determine that the correspondence relationship does not continue when no response is received.

[0183] In another example, when tracking the correspondence between the first object and the second object in the real world, each terminal (4, 5) may be equipped with a positioning module such as a GPS (Global Positioning Satellite) module and a GNSS (Global Navigation Satellite System) module. The first terminal 4 may measure the current position of the first object (the first terminal 4) through the positioning module, and the second terminal 5 may measure the current position of the second object (the second terminal 5) through the positioning module. Each terminal (4, 5) may directly send the obtained current position of each object to the management server 1, or indirectly send it to the management server 1 via an external computer such as each server (2, 3). The management server 1 may determine whether the correspondence continues based on whether the received current position of each object is close to the extent that satisfies the prescribed condition of the utilization relationship (for example, the user sits on the moving body). That is, the management server 1 may determine that the correspondence continues when the current position of each object is close to the extent that satisfies the prescribed condition, and determine that the correspondence does not continue when it is not the case. In addition, when this method is adopted, the management server 1 may associate the obtained information of the current position of each object with the association establishment information D10 and store it. Thereby, the management server 1 can track the movement history of each object together with the correspondence relationship of each object. In addition, at least a part of the above-mentioned processing may be executed by a computer other than the management server 1.

[0184] If it is determined that the correspondence relationship continues, the management server 1 may maintain the setting of the correspondence relationship. On the other hand, if it is determined that the correspondence relationship does not continue, the management server 1 may cancel the correspondence relationship. The management server 1 may be configured to update the state of the correspondence relationship by repeatedly performing the confirmation process periodically or irregularly after the correspondence relationship is set until the correspondence relationship is canceled.

[0185] (Remove association)

[0186] In the present embodiment, the management server 1 may be configured to cancel the correspondence relationship in response to reception of a cancellation request from at least one of the first terminal 4 and the second terminal 5 or satisfaction of a predetermined cancellation condition.

[0187] (I) Cancellation of the entrustment

[0188] In one example, the release (request) of the association establishment includes at least one of the first identifier I10 and the second identifier I20. In short, the first terminal 4 may send the release including the first identifier I10 but not including the second identifier I20 to the management server 1. Similarly, the second terminal 5 may send the release including the second identifier I20 but not including the first identifier I10 to the management server 1. In the case where the setting of the correspondence is allowed to be repeated, the release may include both the first identifier I10 and the second identifier I20. In one example, the first terminal 4 or the second terminal 5 may send the release including the first identifier I10 and the second identifier I20 to the management server 1. In another example, the first terminal 4 may send the release including one of the first identifier I10 and the second identifier I20, and the second terminal 5 may send the release including the other. In another example, the management server 1 may assign an identifier to the set correspondence relationship, and notify the assigned identifier to at least one of the first terminal 4 and the second terminal 5 at any time, such as a notification indicating the result of the association establishment process. At least one of the first terminal 4 and the second terminal 5 may specify the correspondence relationship to be released by sending a release delegation including the identifier to the management server 1, so that the management server 1 releases the specified correspondence relationship. According to an example of this embodiment, the first identifier I10 and the second identifier I20 can be omitted from the information included in the release delegation. As a result, it is expected that the efficiency of data communication in the release delegation will be improved.

[0189] In the case where the first terminal 4 sends a release delegation including the second identifier I20, the first terminal 4 can obtain the second identifier I20 at any time. In one example, when the first terminal 4 obtains the second identifier I20 when the above-mentioned association establishment setting is delegated (for example, the first mode of split transmission, etc.), the first terminal 4 can save the second identifier I20 obtained when the association establishment setting is delegated as the current association establishment information to the memory resource. Alternatively, in the case where the management server 1 sends a notification indicating the result of the association establishment process to the first terminal 4, the notification can be configured to include the second identifier I20. The first terminal 4 can save the second identifier I20 included in the notification received from the management server 1 as the current association establishment information to the memory resource. When the association establishment release is delegated, the first terminal 4 can obtain the second identifier I20 from the memory resource. In addition, the first terminal 4 can obtain the first identifier I10 at any time. In one example, the first identifier I10 can be pre-stored in the memory resource. When creating the current association information, the first terminal 4 may store the second identifier I20 in association with the first identifier I10. When sending the release request, the first terminal 4 may obtain the first identifier I10 from the memory resource.

[0190] Similarly, when the second terminal 5 sends a release delegation including the first identifier I10, the second terminal 5 can obtain the first identifier I10 at any time. In one example, when the second terminal 5 obtains the first identifier I10 when the above-mentioned association establishment setting is delegated (for example, the first mode of split transmission, etc.), the second terminal 5 can save the first identifier I10 obtained when the association establishment setting is delegated as the current association establishment information to the memory resource. Alternatively, when the management server 1 sends a notification indicating the result of the association establishment process to the second terminal 5, the notification can be configured to include the first identifier I10. The second terminal 5 can save the first identifier I10 included in the notification received from the management server 1 as the current association establishment information to the memory resource. When the association establishment release is delegated, the second terminal 5 can obtain the first identifier I10 from the memory resource. Among them, the second terminal 5 can obtain the second identifier I20 at any time. In one example, the second identifier I20 can be pre-stored in the memory resource. When creating the current association information, the second terminal 5 may store the first identifier I10 in association with the second identifier I20. When sending the release request, the second terminal 5 may obtain the second identifier I20 from the memory resource.

[0191] Figure 4A An example of the process of establishing and canceling an association according to the present embodiment is schematically shown. Figure 4A In the example, as the first route, the first terminal 4 directly sends the release of delegation to the management server 1 (step SZ10). In addition, as the second route, the first terminal 4 gives an instruction to the second terminal 5 (step SZ10A), so that the second terminal 5 directly sends the release of delegation to the management server 1 (step SZ11A). However, the route for sending the release of delegation may not be limited to such an example. The first terminal 4 may also indirectly send the release of delegation to the management server 1 via an external computer such as the first server 2. In the second route, the second terminal 5 may indirectly send the release of delegation to the management server 1 via an external computer such as the second server 3. In addition, the starting point of the association establishment release may not be limited to the first terminal 4. In another example, the second terminal 5 may directly or indirectly send the release of delegation to the management server 1. In addition, the second terminal 5 may give an instruction to the first terminal 4, so that the first terminal 4 directly or indirectly sends the release of delegation to the management server 1. After receiving the release of delegation, the management server 1 refers to the association establishment information D10 to release the correspondence specified by the identifier included in the release of delegation. After the release process, the management server 1 may transmit a notification indicating the result of the release process to at least one of the first terminal 4 and the second terminal 5 , similarly to when the association is set.

[0192] In one example, the process of releasing the delegation may include an authentication process of at least one of the first object and the second object. The authentication process may be the same as the authentication process in the process of establishing the association or the authentication process in the confirmation process of the continuation. However, the authentication process does not necessarily have to be performed when releasing the delegation. In another example, the process of releasing the delegation can be simplified by omitting the authentication process.

[0193] The trigger for releasing the delegation can be appropriately set according to the implementation method. In one example, when at least one of the first object and the second object is a user, the release of delegation can be sent from at least one of the first terminal 4 and the second terminal 5 through the user's operation on at least one of the first terminal 4 and the second terminal 5. That is, the trigger for releasing the delegation can be an operation performed by the user. In another example, arbitrary information processing can be performed in at least one of the first terminal 4 and the second terminal 5 along with the disappearance of the utilization relationship. The release of delegation can be sent from at least one of the first terminal 4 and the second terminal 5 with the arbitrary information processing as a trigger. For example, the arbitrary information processing can be the data exchange between the first terminal 4 and the second terminal 5. The method of data exchange when releasing the delegation can be the same as the data exchange when the association is established (step SA10, step SB10). It is possible to appropriately distinguish whether it is the data exchange when the association is established or the data exchange when releasing the delegation. For example, in Figure 2In the example of , the second terminal 5 may be provided with respective sensor devices at the entrance and exit, such as at a bus boarding and alighting gate, a railway ticket gate, etc. In this case, it is possible to distinguish whether the association is established or the delegation is released based on the sensor device used in the data exchange. In addition, for example, when data exchange is performed by an application of the terminal, the application may be configured to be switchable between an association establishment setting mode and a delegation release mode. In this case, it is possible to distinguish whether the association is established or the delegation is released based on the mode of the application.

[0194] In addition, any internal processing can be performed in each terminal (4, 5) along with the decommissioning process. In one example, when the current association establishment information is created in the terminal of at least one of the first terminal 4 and the second terminal 5, the terminal of at least one of the terminals can update the current association establishment information to the past association establishment information along with the decommissioning process. The updating process can be appropriately set according to the implementation method. For example, the updating process can be a process of deleting the current association establishment information. In this case, the current association establishment information can be completely deleted or saved as a past association establishment history record. In addition, for example, the updating process can be a process of invalidating the current association establishment information by adding invalidation information such as the end time and the setting of the end flag to the current association establishment information. In the case of adopting a method in which the terminal of one of the first terminal 4 and the second terminal 5 sends the decommissioning, the terminal of one party can send a notification for knowing the decommissioning of the association establishment to the terminal of the other party along with the sending of the decommissioning or the establishment of the decommissioning. When the current association establishment information is created in the terminal of the other party, the terminal of the other party can perform the above-mentioned updating process through the notification.

[0195] (II) Conditions for rescission

[0196] The release condition indicates a condition for releasing the correspondence relationship of the object. The release condition can be defined appropriately according to the embodiment.

[0197] In one example, the release condition may be defined as releasing the correspondence at an arbitrarily set release time. The release time may be assigned, for example, by a user's designation or a designation from another application (scheduler, etc.). In this case, the management server 1 may release the correspondence of the object upon the arrival of the release time. The release time may be set as the validity period of the association establishment information D10. When the release time is set according to the validity period, the management server 1 may process the correspondence of the object as being released upon the arrival of the release time.

[0198] In another example, the release condition may be defined as releasing any of the repeated corresponding relationships when the settings of multiple corresponding relationships are repeated for the same object due to the interruption of the setting of the corresponding relationship involving at least one of the other first object and the other second object. The number of corresponding relationships (association establishment) that can be set for the same object may not be limited to one, but may be two or more. When the repetition of the setting of the corresponding relationship exceeds a threshold value (upper limit), the management server 1 may release any of the previously set and maintained corresponding relationships. The threshold value may be appropriately assigned. Which corresponding relationship to release may be appropriately determined based on priority, order, type of object, etc.

[0199] For example, it is assumed that one of the first object and the second object is a user and the other is a utilization object. In this case, the number of users who can be associated with the same utilization object may be infinite or limited. In the case where the number of users who can be associated is limited, the upper limit of the number of users who can be associated can be appropriately assigned according to a threshold value. The threshold value can be set according to the attributes of the utilization object. When the management server 1 newly accepts the setting of the correspondence relationship for the utilization object of the object, it can refer to the association establishment information D10 to extract the previous correspondence relationship set and maintained for the utilization object of the object. In the case where the duplication of the setting of the correspondence relationship for the utilization object of the object due to the newly accepted setting of the correspondence relationship exceeds the threshold value, the management server 1 can abandon the request for the setting of the newly accepted correspondence relationship, or cancel at least one of the extracted previous correspondence relationships. In the case of canceling the previous correspondence relationship, the management server 1 can decide the correspondence relationship to be canceled according to the priority and order of the user (for example, the earlier the correspondence relationship is set, the more it will be canceled).

[0200] As a specific example, Figure 2 In the example, it is assumed that the mobile object is a private car, and the first user and the second user are, for example, family members who share the private car of the object. The private car can be renamed as a frequently used object. For the sake of convenience, it is assumed that the number of users who can be associated with the private car of the object is 1. In this case, during the period when the correspondence between one of the first user and the second user and the private car of the object is set, the management server 1 can cancel the previous correspondence (the correspondence between one party and the private car of the object) according to the setting of the correspondence between the other party and the private car of the object.

[0201] Similarly, the number of objects that can be associated with the same user can be infinite or limited. In the case where the number of objects that can be associated is limited, the upper limit of the number of objects that can be associated can be appropriately assigned by a threshold. When the management server 1 newly accepts the setting of the correspondence relationship for the user of the object, it can refer to the association establishment information D10 to extract the previous correspondence relationship set and maintained for the user of the object. In the case where the duplication of the setting of the correspondence relationship for the user of the object due to the newly accepted setting of the correspondence relationship exceeds the threshold, the management server 1 can abandon the request for the setting of the newly accepted correspondence relationship, or cancel at least one of the extracted previous correspondence relationships. In the case of canceling the previous correspondence relationship, the management server 1 can decide the correspondence relationship to be canceled based on the priority and type of the object (for example, whether it is a frequently used object or a temporary object).

[0202] As a specific example, Figure 2 In the example, it is assumed that the first mobile body is a frequently used object (such as a private car, etc.) and the second mobile body is a temporarily used object (such as a rental car, a shared car, a mobile body of a public transportation system, etc.). In this case, during the period in which the correspondence between the target user and the first mobile body is set, the management server 1 can cancel the previous correspondence (the correspondence with the first mobile body) according to the setting of the correspondence between the target user and the second mobile body.

[0203] Furthermore, in this specific example, the management server 1 can reset the previously released correspondence between the first moving body (a frequently used object) and the target user, based on the release of the correspondence with the second moving body (a temporarily used object). Thus, the setting of the correspondence with the frequently used object can be quickly restored. In addition, in the case where both the first moving body and the second moving body are frequently used objects or temporarily used objects, the management server 1 can appropriately coordinate the setting of the duplicate correspondence. For example, as long as the previous correspondence is not released, the management server 1 can abandon the request for setting the newly accepted correspondence.

[0204] As described above, the management server 1 can terminate the correspondence relationship when receiving a termination request from at least one of the first terminal 4 and the second terminal 5 or when a predetermined termination condition is satisfied. According to an example of this embodiment, the disappearance of the utilization relationship between the first object and the second object can be tracked. In addition, the association establishment information D10 after the termination of the correspondence relationship can be saved as a history record.

[0205] (Simplified processing of association establishment settings)

[0206] In one example, when the creation and disappearance of a utilization relationship between the same combination of the first object and the second object occurs repeatedly, the management system 100 may perform authentication processing of the first object and the second object each time, and repeatedly set and cancel the corresponding relationship. However, if the frequency of the creation and disappearance of the utilization relationship is high, it may be troublesome if the same authentication processing of the first object and the second object is performed each time. In particular, if one of the first object and the second object is a user and the other is a frequently used object, it may be troublesome to perform authentication of both parties each time.

[0207] In view of this, in another example, the management system 100 may be configured to set the corresponding relationship by omitting the authentication process of at least one of the first object and the second object in the next subsequent association establishment setting process for the same combination of the first object and the second object. That is, the management system 100 may be configured to accept the request to set the corresponding relationship by omitting the authentication process of at least one of the first object and the second object for the combination of the first object and the second object for which the corresponding relationship has been set in the past. For the sake of convenience, the process of omitting the authentication process of at least one of the first object and the second object to set the corresponding relationship is also referred to as "simplified process of association establishment setting", and the process of the normal route without omitting the authentication process is also referred to as "normal process of association establishment setting". In one example, in the association establishment setting based on the simplified process, the authentication process of one of the first object and the second object can be performed. In another example, in the association establishment setting based on the simplified process, the authentication process of both the first object and the second object can be omitted.

[0208] Information on the combination of the first object and the second object for which a corresponding relationship was set in the past can be managed by at least one of the management server 1, each server (2, 3) and each terminal (4, 5). In one example, the association establishment information D10 can be maintained as a historical record even after the corresponding relationship is released. The management server 1 can determine whether the combination of the first object and the second object for which a corresponding relationship is requested to be set is a combination for which a corresponding relationship was set in the past based on the historical record of the association establishment information D10. In the case where it is determined that it is a combination for which a corresponding relationship was set in the past, the management server 1 can perform association establishment settings based on simplified processing. In addition, the first terminal 4 can obtain the second identifier I20 of the second object at any time such as when the association establishment setting is performed, and store the obtained second identifier I20 as an object target for simplified processing. The second terminal 5 can also obtain the first identifier I10 of the first object, and store the obtained first identifier I10 as an object target for simplified processing. Thus, at least one of the first terminal 4 and the second terminal 5 can retain information on the object for which a corresponding relationship has been set in the past, and use the retained information on the object to request the association setting based on the simplified processing. In addition, the first server 2 can obtain the second identifier I20 of the second object from at least one of the management server 1 and each terminal (4, 5), and store the obtained second identifier I20 as the object for simplified processing in association with the first object information O10 of the corresponding first object. The second server 3 can also obtain the first identifier I10 of the first object from at least one of the management server 1 and each terminal (4, 5), and store the obtained first identifier I10 as the object for simplified processing in association with the second object information O20 of the corresponding second object. Thus, at least one of the first server 2 and the second server 3 can retain information on the object for which a corresponding relationship has been set in the past, and use the retained information on the object to respond to the association setting based on the simplified processing.

[0209] In addition, the management system 100 can be configured to allow simplified processing for a part of the first object and the second object, such as allowing simplified processing for frequently used objects, not allowing simplified processing for temporarily used objects, and establishing association each time through normal processing. Whether simplified processing is allowed can be switched appropriately. In one example, whether simplified processing is allowed is switched according to the type of at least one of the first object and the second object. As a specific example, when one of the first object and the second object is a user and the other is a used object, as described above, whether simplified processing is allowed can be switched according to the type of the used object (whether it is a frequently used object or a temporarily used object).

[0210] Whether or not to allow simplified processing can be switched by any method. In one example, at least one of the management server 1, each server (2, 3) and each terminal (4, 5) can identify the type of the object being used, and switch whether or not to allow simplified processing based on the result of the identification. The type of the object being used can be identified by the individual information included in the object information, or by information such as an identifier. In another example, for example, only terminals ( Figure 2 The terminal of the object that allows simplified processing, such as the second terminal 5) is installed with a program including a mode that allows simplified processing, and whether simplified processing is allowed is switched by the action of the terminal. The action of the mode that allows simplified processing may be, for example, storing information of the object target, sending a request for establishing a setting based on the association of simplified processing, etc.

[0211] The request for association setting based on simplified processing may be sent from at least one of the first terminal 4 and the second terminal 5. At least one of the first terminal 4 and the second terminal 5 may directly send the request for association setting based on simplified processing to the management server 1, or may indirectly send it to the management server 1 via external computers such as the servers (2, 3). For example, the first terminal 4 may directly send the request for association setting based on simplified processing to the management server 1, or may indirectly send it to the management server 1 via external computers such as the first server 2. The first terminal 4 may give an instruction to the second terminal 5 so that the second terminal 5 directly sends the request for association setting based on simplified processing to the management server 1, or may indirectly send it to the management server 1 via external computers such as the second server 3. Similarly, the second terminal 5 may directly send the request for association setting based on simplified processing to the management server 1, or may indirectly send it to the management server 1 via external computers such as the second server 3. The second terminal 5 may instruct the first terminal 4 to directly send the request for association setting based on the simplified process to the management server 1 , or may indirectly send the request to the management server 1 via an external computer such as the first server 2 .

[0212] It is possible to appropriately determine whether the delegation is based on simplified processing or normal processing. In one example, the delegation for association establishment setting may include information indicating whether it is simplified processing. The management server 1 can determine whether it is simplified processing or normal processing based on the information. In another example, the management server 1 can determine whether it is simplified processing or normal processing based on the information of the object included in the delegation for association establishment setting (for example, a combination of the first identifier I10 and the second identifier I20).

[0213] The entrustment of association establishment setting based on simplified processing may basically include the first identifier I10 and the second identifier I20. The first identifier I10 and the second identifier I20 included in the entrustment may be obtained from any one of the terminals (4, 5) and the servers (2, 3) in the process of being sent from at least one of the first terminal 4 and the second terminal 5 to the management server 1. However, the entrustment of association establishment setting based on simplified processing may not be limited to such a structure. At least one of the first identifier I10 and the second identifier I20 may also be omitted from the information included in the entrustment. In another example, similar to the above-mentioned example of delegating the entrustment, the management server 1 may store (register) the combination that allows simplified processing by assigning an identifier to the correspondence between the first identifier I10 and the second identifier I20 in the past association establishment setting. The management server 1 may notify at least one of the first terminal 4 and the second terminal 5 of the assigned identifier at any time such as a notification indicating the result of the association establishment processing. At least one of the first terminal 4 and the second terminal 5 can cause the management server 1 to execute the association establishment setting based on the simplified processing by sending the association establishment setting delegation including the identifier to the management server 1. According to an example of this embodiment, the first identifier I10 and the second identifier I20 can be omitted from the information included in the delegation. As a result, it is expected that the efficiency of data communication in the association establishment setting delegation can be improved.

[0214] In one example, when a method of performing authentication processing of one of the first object and the second object is adopted in simplified processing, the authentication processing of one of the first object and the second object can be performed in the same sending method as the normal processing. For example, when the first mode of split transmission is adopted in the normal processing, the first mode of split transmission can also be adopted in the simplified processing. However, the method of authentication processing in simplified processing may not be limited to such an example. In another example, the sending method of authentication processing in simplified processing may adopt a sending method different from the sending method adopted in the normal processing in the above-mentioned sending method. In another example, at least one of the first terminal 4 and the second terminal 5 can directly send an authentication commission to each server (2, 3). The authentication result can be sent to the management server 1 from at least any one of each server (2, 3) and each terminal (4, 5).

[0215] In addition, in the case of adopting a method of executing the authentication process of one of the first object and the second object, the terminal that sends the request for association establishment setting based on the simplified process can store at least a part of the data (identifier, inherent information) used in the authentication of the one party. For example, in the case of adopting the first mode of split transmission described above, the second terminal 5 can save at least one of the first identifier I10 and the first inherent information C1 of the first object to the memory resource at any time such as the past association establishment setting. The second terminal 5 can obtain at least one of the first identifier I10 and the first inherent information C1 from the memory resource, and use the obtained information to send the data used for authentication to the management server 1. In this way, the trouble of association establishment setting can be further reduced.

[0216] Figure 4B An example of the procedure of association setting based on the simplified processing according to the present embodiment is schematically shown. Figure 4B Conceived in Figure 2 In the example of , the authentication process of the user (first object) is performed, the authentication process of the mobile body (second object) is omitted, and the authentication process is sent in the first mode of split sending. In step SA10, in data exchange, the first terminal 4 assigns the first identifier I10 and the first inherent information C1 to the second terminal 5. The second terminal 5 obtains the first identifier I10 and the first inherent information C1 from the user. In step SA20, the second terminal 5 sends a commission based on the simplified processing association establishment setting including the first identifier I10 and the first inherent information C1 to the management server 1. The commission may also include the second identifier I20. The management server 1 appropriately determines that the commission received from the second terminal 5 is a commission based on the simplified processing association establishment setting. In step SA30, the management server 1 entrusts the first server 2 with the authentication of the user by sending the first identifier I10 and the first inherent information C1 to the first server 2. In step SA40, the management server 1 receives the result of the user's authentication from the first server 2. When the user authentication is established in the received result, the management server 1 sets the corresponding relationship (association) between the first identifier I10 and the second identifier I20 (step SC20). Figure 4BExamples may be appropriately changed according to the implementation method. For example, as described above, in the case of adopting a method of performing authentication processing of one of the first object and the second object, a sending method other than the first mode of split sending may be adopted. The simplified processing may be configured to omit the authentication processing of the user (first object) and perform the authentication processing of the mobile body (second object). The delegation established based on the association of the simplified processing may not be sent from the second terminal 5 but from the first terminal 4. The sending route of the delegation based on the simplified processing may not be limited to Figure 4B At least one of the first identifier I10 and the second identifier I20 may be omitted from the request for association setting based on simplified processing.

[0217] Furthermore, as one of the optional configurations, the management server 1 may obtain identification information (MAC address, terminal identification information, etc.) of at least one of the first terminal 4 and the second terminal 5 that are allowed to be simplified, and store the obtained identification information as a registration process for the object allowed to be simplified. This registration process may be performed at any time, such as when the association establishment setting was performed in the past. The management server 1 may be configured to accept a request for association establishment setting based on simplified processing only from a terminal identified by the identification information.

[0218] The trigger of the delegation of association establishment setting based on simplified processing can be the same as the normal processing. That is, at least one of the first terminal 4 and the second terminal 5 can use the data exchange between the first terminal 4 and the second terminal 5 as a trigger to send the delegation of association establishment setting based on simplified processing to the management server 1. However, the trigger of simplified processing may not be limited to such an example. In another example, when at least one of the first object and the second object is a user, the delegation of association establishment setting based on simplified processing can be sent from at least one of the first terminal 4 and the second terminal 5 by the user's operation on at least one of the first terminal 4 and the second terminal 5. That is, the trigger of the delegation of association establishment setting based on simplified processing can be an operation performed by the user. In another example, the trigger of the delegation of association establishment setting based on simplified processing can be an instruction issued by other applications (schedulers, etc.). In another example, as with the above-mentioned release of delegation, any information processing can be performed on at least one of the first terminal 4 and the second terminal 5 along with the generation of the utilization relationship. The delegation of association establishment setting based on simplified processing can be sent from at least one of the first terminal 4 and the second terminal 5 using the arbitrary information processing as a trigger.

[0219] The release process of the correspondence relationship set by the simplified process (release process for the simplified process) can be basically the same as the process of releasing the association in the above-mentioned normal process (release process for the normal process). However, the release process for the simplified process does not necessarily have to be consistent with the release process for the normal process. The correspondence relationship set by the simplified process can be appropriately released. In another example, when the sending route of the setting delegation based on the correspondence relationship of the simplified process is different from the sending route of the release delegation for the normal process, the sending route of the release delegation for the simplified process can be consistent with the sending route of the setting delegation based on the correspondence relationship of the simplified process.

[0220] (Use scenarios of association establishment information)

[0221] As described above, the association establishment information D10 can be used in various scenarios. In one example, the association establishment information D10 can be used only to track the generation and disappearance of the relationship between the first object and the second object. In another example, the association establishment information D10 can be used to enable either the first object or the second object to exercise at least a part of the authority to establish an association with the other object during the period in which the corresponding relationship between the first object and the second object is set. Figure 2 In the example of , the association information D10 can be used to enable the mobile object to exercise at least a part of the authority to establish association with the user during the period in which the correspondence relationship between the user and the mobile object is set.

[0222] Figure 5 An example of a usage scenario of the association information D10 according to the present embodiment is schematically shown. Figure 5 Conceived in Figure 2 In the example of , a scenario in which a mobile body exercises authority to establish an association with a user. The external system SY1 is provided in a place where various services are exercised (for example, a parking lot, etc.), and is configured to perform information processing for providing the object service to a user who has authority over the object. The configuration and service of the external system SY1 are not particularly limited and can be appropriately selected according to the implementation method.

[0223] First, in step U10, the external system SY1 obtains the second identifier I20 (mobile body identifier) ​​from the moving body of the object. The method for obtaining the second identifier I20 can be appropriately selected according to the implementation method. In one example, the external system SY1 can obtain the second identifier I20 from the second terminal 5 by exchanging data with the second terminal 5. The method of data exchange can be the same as the data exchange between the first terminal 4 and the second terminal 5. In another example, when the second identifier I20 is a car registration number, the external system SY1 can capture the license plate number through an image sensor and obtain the second identifier I20 by analyzing the obtained image.

[0224] In step U20, the external system SY1 uses the obtained second identifier I20 as a query to inquire the management server 1 whether there is a valid correspondence at the object date and time for the object moving body. Valid means that the setting is maintained (not released) at the object date and time. In addition, the object date and time is basically the current (immediate), but it is not limited to this. For example, in the case of performing a settlement process for a past date and time, the object date and time may be a past date and time. When there is a valid correspondence, the first identifier I10 (user identifier) ​​of the user associated with the object moving body is extracted. On the other hand, when there is no valid correspondence and the user associated with the object moving body cannot be extracted, this processing can end.

[0225] In step U30, the external system SY1 uses the extracted first identifier I10 as a query to inquire about the exercisable authority of the user associated with the mobile body of the object from the first server 2. The first server 2 refers to the first object information O10 (user information O10A) to extract the exercisable authority associated with the user of the object. In the case where the exercisable authority cannot be extracted, the present process can be terminated. In addition, in the first object information O10 (user information O10A), whether the mobile body is allowed to exercise the authority can be set for each authority. The exercisable authority can be extracted based on the setting. In addition, when the authority of the object that the external system SY1 wants to exercise is not included in the exercisable authority, the present process can also be terminated. The authority to exercise the object can be appropriately specified at any time. In one example, the authority to exercise the object can be pre-specified in the external system SY1 or specified by the user.

[0226] In step U40, when the exercisable permissions include permissions for the object, the external system SY1 performs processing for exercising the permissions for the object. Thus, permissions associated with the user can be exercised from the mobile body, and the user can receive services via the mobile body. For example, in a case where the permission information includes information on public personal authentication and the permissions of the object are related to public personal authentication, the user can receive public services via the mobile body. In addition, for example, in a case where the permission information includes settlement information and the permissions of the object are related to settlement, the user can receive settlement services via the mobile body. Settlement services may be, for example, payment of parking fees, highway fees, drive through fees, public transportation fees, rental fees, and the like. In addition, for example, in a case where the permission information includes information related to electronic prescriptions and the permission of the object is to receive medicines prescribed in accordance with electronic prescriptions, the user can exercise the electronic prescriptions via the mobile body and receive the medicines.

[0227] In addition, the processing steps for exercising the above-mentioned authority are only an example, and each step can be changed as much as possible. For the above-mentioned processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. In addition, in the above-mentioned processing steps, the user can be replaced by the first object, and the mobile body can be replaced by the second object. Moreover, in the above-mentioned processing steps, "first" and "second" can be replaced.

[0228] (Data communication between devices)

[0229] The data communication between the devices (management server 1, first server 2, second server 3, first terminal 4 and second terminal 5) may not be particularly limited and may be appropriately selected according to the implementation method. The network between the devices may be appropriately selected from, for example, the Internet, a wireless communication network, a mobile communication network, a telephone network, a dedicated network, a local area network, etc. The data communication between the devices may be encrypted by methods such as SSL (Secure Socket Layer) and TLS (Transport Layer Security). In one example, each terminal (4, 5) may have a SIM (Subscriber Identity Module), and the data communication between the management server 1 and each terminal (4, 5) may be performed by encrypted communication using the SIM.

[0230] [2 Configuration example]

[0231] [Hardware Configuration Example]

[0232] (Management Server)

[0233] Fig. 6AAn example of the hardware configuration of the management server 1 according to the present embodiment is schematically shown. The management server 1 according to the present embodiment is a computer in which a control unit 11, a storage unit 12, a communication interface 13, an input device 14, an output device 15, and a drive 16 are electrically connected.

[0234] The control unit 11 includes a CPU (Central Processing Unit) as a hardware processor, RAM (Random Access Memory), ROM (Read Only Memory), etc., and is configured to execute arbitrary information processing based on programs and various data. The control unit 11 (CPU) is an example of a processor resource of the management server 1.

[0235] The storage unit 12 may be composed of, for example, a hard disk drive, a solid state drive, a semiconductor memory, etc. The storage unit 12 (as well as RAM and ROM) is an example of a memory resource. In the present embodiment, the storage unit 12 stores various information such as the management program 81 and the association establishment information D10. The management program 81 is used to cause the management server 1 to perform information processing related to setting and canceling the correspondence relationship between the first object and the second object (described later). Figure 8A to Figure 8B The management program 81 includes a series of commands for information processing.

[0236] The communication interface 13 is configured to perform wired or wireless communication via a network. The communication interface 13 may be configured, for example, by a wired LAN (Local Area Network) module, a wireless LAN module, etc. The management server 1 may perform data communication with other computers (the first server 2, the second server 3, the first terminal 4, and the second terminal 5) via the communication interface 13.

[0237] The input device 14 is, for example, a device for inputting, such as a mouse, a keyboard, or an operation button. The output device 15 is, for example, a device for outputting, such as a display or a speaker. The operator can operate the management server 1 by using the input device 14 and the output device 15. The input device 14 and the output device 15 can be integrally formed by, for example, a touch panel display or the like. The input device 14 and the output device 15 can be connected via an external interface. The external interface can be appropriately configured to be connected to an external device in a wired or wireless manner, for example, through a USB (Universal Serial Bus) port, a dedicated port, a wireless communication port, or the like.

[0238] The drive 16 is a device for reading various information such as programs stored in the storage medium 91. At least one of the management program 81 and the association establishment information D10 can be stored in the storage medium 91 instead of the storage unit 12 or on the basis of the storage unit 12. The storage medium 91 is configured to store various information (stored programs, etc.) through electrical, magnetic, optical, mechanical or chemical effects in a manner that a computer or other machine can read the information. The management server 1 can obtain at least one of the management program 81 and the association establishment information D10 from the storage medium 91. Among them, the storage medium 91 can be a disk-type storage medium such as a CD, DVD, etc., or a storage medium other than a disk-type such as a semiconductor memory (such as a flash memory). The type of the drive 16 can be appropriately selected according to the type of the storage medium 91. The drive 16 can be connected via an external interface.

[0239] In addition, regarding the specific hardware configuration of the management server 1, the components can be appropriately omitted, replaced, and added according to the implementation method. For example, the control unit 11 may include multiple hardware processors. The hardware processor may be composed of a microprocessor, an FPGA (field-programmable gate array), a DSP (digital signal processor), a GPU (Graphics Processing Unit), an ASIC (application specific integrated circuit), etc. At least one of the input device 14, the output device 15, and the driver 16 may be omitted. The association establishment information D10 may also be stored in an external computer accessible to the management server 1 (such as NAS: Network Attached Storage, etc.) instead of the storage unit 12. The management server 1 may be composed of a computer. In this case, the hardware configuration of each computer may be consistent or inconsistent. In addition to being an information processing device designed specifically for the service to be provided, the management server 1 may also be a general-purpose server device, a general-purpose computer, etc.

[0240] (Server 1)

[0241] Figure 6B An example of the hardware configuration of the first server 2 according to the present embodiment is schematically shown. The first server 2 according to the present embodiment is a computer in which a control unit 21, a storage unit 22, a communication interface 23, an input device 24, an output device 25, and a driver 26 are electrically connected. The control unit 21 to the driver 26 and the storage medium 92 of the first server 2 can be configured similarly to the control unit 11 to the driver 16 and the storage medium 91 of the management server 1 described above.

[0242] The control unit 21 (CPU) is an example of a processor resource of the first server 2, and the storage unit 22 (as well as RAM and ROM) is an example of a memory resource of the first server 2. In the present embodiment, the storage unit 22 stores various information such as the program 82 and the first object information O10. The program 82 is for causing the first server 2 to execute information processing related to authentication of the first object (described later). Fig. 8A The program 82 includes a series of commands for the information processing. At least one of the program 82 and the first object information O10 can be stored in the storage medium 92 instead of the storage unit 22 or in addition to the storage unit 22. The first server 2 can obtain at least one of the program 82 and the first object information O10 from the storage medium 92. The first server 2 can communicate data with other computers (such as the management server 1) via the communication interface 23. The first server 2 can be operated via the input device 24 and the output device 25.

[0243] In addition, regarding the specific hardware configuration of the first server 2, the components can be appropriately omitted, replaced, and added according to the implementation method. For example, the control unit 21 may include multiple hardware processors. The hardware processor may be composed of a microprocessor, an FPGA, a DSP, a GPU, an ASIC, etc. At least any one of the input device 24, the output device 25, and the driver 26 may be omitted. The first object information O10 may not be stored in the storage unit 22 but in an external computer (such as NAS, etc.) accessible to the first server 2. The first server 2 may be composed of multiple computers. In this case, the hardware configuration of each computer may be consistent or inconsistent. In addition to being an information processing device designed specifically for the service to be provided, the first server 2 may also be a general-purpose server device, a general-purpose computer, etc.

[0244] (Server 2)

[0245] Figure 6C An example of the hardware configuration of the second server 3 according to the present embodiment is schematically shown. The second server 3 according to the present embodiment is a computer in which a control unit 31, a storage unit 32, a communication interface 33, an input device 34, an output device 35, and a driver 36 are electrically connected. The control unit 31 to the driver 36 and the storage medium 93 of the second server 3 can be configured similarly to the control unit 11 to the driver 16 and the storage medium 91 of the management server 1 described above.

[0246] The control unit 31 (CPU) is an example of a processor resource of the second server 3, and the storage unit 32 (as well as RAM and ROM) is an example of a memory resource of the second server 3. In the present embodiment, the storage unit 32 stores various information such as the program 83 and the second object information O20. The program 83 is used to cause the second server 3 to perform information processing related to the authentication of the second object (described later). Fig. 8A The program 83 includes a series of commands for the information processing. At least one of the program 83 and the second object information O20 can be stored in the storage medium 93 instead of the storage unit 32 or in addition to the storage unit 32. The second server 3 can obtain at least one of the program 83 and the second object information O20 from the storage medium 93. The second server 3 can communicate data with other computers (such as the management server 1) via the communication interface 33. The second server 3 can be operated via the input device 34 and the output device 35.

[0247] In addition, regarding the specific hardware configuration of the second server 3, the components can be appropriately omitted, replaced, and added according to the implementation method. For example, the control unit 31 may include multiple hardware processors. The hardware processor may be composed of a microprocessor, an FPGA, a DSP, a GPU, an ASIC, etc. At least one of the input device 34, the output device 35, and the drive 36 may be omitted. The second object information O20 may not be stored in the storage unit 32 but in an external computer (such as NAS, etc.) accessible to the second server 3. The second server 3 may be composed of multiple computers. In this case, the hardware configuration of each computer may be consistent or inconsistent. In addition to being an information processing device designed specifically for the service to be provided, the second server 3 may also be a general-purpose server device, a general-purpose computer, etc.

[0248] (Terminal 1)

[0249] Fig.6D An example of the hardware configuration of the first terminal 4 according to the present embodiment is schematically shown. The first terminal 4 according to the present embodiment is a computer in which a control unit 41, a storage unit 42, a communication interface 43, an input device 44, an output device 45, and a driver 46 are electrically connected. The control unit 41 to the driver 46 and the storage medium 94 of the first terminal 4 can be configured similarly to the control unit 11 to the driver 16 and the storage medium 91 of the management server 1 described above.

[0250] The control unit 41 (CPU) is an example of a processor resource of the first terminal 4, and the storage unit 42 (as well as RAM and ROM) is an example of a memory resource of the first terminal 4. In the present embodiment, the storage unit 42 stores various information such as the program 84 and the first identifier I10. The program 84 is for causing the first terminal 4 to execute information processing related to association establishment (described later). Figure 8A to Figure 8B The program 84 includes a series of commands for the information processing. At least one of the program 84 and the first identifier I10 can be stored in the storage medium 94 instead of the storage unit 42 or in addition to the storage unit 42. The first terminal 4 can obtain at least one of the program 84 and the first identifier I10 from the storage medium 94. The first terminal 4 can communicate data with other computers (such as the management server 1 and the second terminal 5) via the communication interface 43. The first terminal 4 can be operated via the input device 44 and the output device 45.

[0251] In addition, regarding the specific hardware configuration of the first terminal 4, the components can be appropriately omitted, replaced, and added according to the implementation method. For example, the control unit 41 may include multiple hardware processors. The hardware processor may be composed of a microprocessor, an FPGA, a DSP, a GPU, an ASIC, an ECU (Electronic Control Unit), etc. At least one of the input device 44, the output device 45, and the driver 46 may be omitted. The first identifier I10 may not be stored in the storage unit 42. The first identifier I10 may be obtained every time. In order to obtain data such as identifiers and inherent information, the first terminal 4 may also have a data acquisition device such as a sensor and a reader. The communication interface 43 may be composed of multiple types of modules. For example, the communication interface 43 has a short-range wireless communication module and a wireless communication module, and the first terminal 4 can communicate data with the second terminal 5 via the short-range wireless communication module, and communicate data with the management server 1 via the wireless communication module. The first terminal 4 may be composed of multiple computers. In this case, the hardware configuration of each computer may be consistent or inconsistent. The first terminal 4 may be a general-purpose computer, terminal device (for example, a smartphone, tablet PC, etc.), or the like, in addition to an information processing device designed exclusively for the service to be provided.

[0252] (Terminal 2)

[0253] Fig. 6EAn example of the hardware configuration of the second terminal 5 according to the present embodiment is schematically shown. The second terminal 5 according to the present embodiment is a computer in which a control unit 51, a storage unit 52, a communication interface 53, an input device 54, an output device 55, and a driver 56 are electrically connected. The control unit 51 to the driver 56 and the storage medium 95 of the second terminal 5 can be configured similarly to the control unit 11 to the driver 16 and the storage medium 91 of the management server 1 described above.

[0254] The control unit 51 (CPU) is an example of a processor resource of the second terminal 5, and the storage unit 52 (as well as RAM and ROM) is an example of a memory resource of the second terminal 5. In the present embodiment, the storage unit 52 stores various information such as the program 85 and the second identifier I20. The program 85 is used to cause the second terminal 5 to execute information processing related to association establishment (described later). Figure 8A to Figure 8B The program 85 includes a series of commands for the information processing. At least one of the program 85 and the second identifier I20 can be stored in the storage medium 95 instead of the storage unit 52 or in addition to the storage unit 52. The second terminal 5 can obtain at least one of the program 85 and the second identifier I20 from the storage medium 95. The second terminal 5 can communicate data with other computers (such as the management server 1 and the first terminal 4) via the communication interface 53. The second terminal 5 can be operated via the input device 54 and the output device 55.

[0255] In addition, regarding the specific hardware configuration of the second terminal 5, the components can be appropriately omitted, replaced, and added according to the implementation method. For example, the control unit 51 may include multiple hardware processors. The hardware processor may be composed of a microprocessor, an FPGA, a DSP, a GPU, an ASIC, an ECU, etc. At least one of the input device 54, the output device 55, and the driver 56 may be omitted. The second identifier I20 may not be stored in the storage unit 52. The second identifier I20 may be obtained every time. In order to obtain data such as identifiers and inherent information, the second terminal 5 may also have data acquisition devices such as sensors and reading devices. The communication interface 53 may be composed of multiple types of modules, as in the above-mentioned first terminal 4. The second terminal 5 may be composed of multiple computers. In this case, the hardware configuration of each computer may be consistent or inconsistent. In addition to being an information processing device designed specifically for the service to be provided, the second terminal 5 may also be a general-purpose computer, terminal device, etc.

[0256] [Software Configuration Example]

[0257] Figure 7An example of the software configuration of each device (the management server 1 , the first server 2 , the second server 3 , the first terminal 4 , and the second terminal 5 ) according to the present embodiment is schematically shown.

[0258] (Management Server)

[0259] The control unit 11 of the management server 1 expands the management program 81 stored in the storage unit 12 into the RAM, and the CPU executes the commands included in the management program 81. Thus, the management server 1 operates as a computer including the authentication unit 111, the setting unit 112, the release unit 113, and the notification unit 114 as software modules.

[0260] The authentication unit 111 is configured to receive the first identifier I10, the first inherent information C1, the second identifier I20, and the second inherent information C2 from at least one of the first terminal 4 and the second terminal 5 according to the generation of the utilization relationship between the first object and the second object. The authentication unit 111 is configured to entrust the first server 2 with authentication of the first object by sending the received first identifier I10 and the first inherent information C1 to the first server 2. In addition, the authentication unit 111 is configured to entrust the second server 3 with authentication of the second object in real time by sending the received second identifier I20 and the second inherent information C2 to the second server 3. The authentication unit 111 can be called an authentication entrusting unit.

[0261] The setting unit 112 is configured to set the correspondence between the first identifier I10 and the second identifier I20 when both the authentication of the first object and the second object is established. The releasing unit 113 is configured to release the correspondence in response to the reception of the release request from at least one of the first terminal 4 and the second terminal 5 or the establishment of a predetermined release condition. The notification unit 114 is configured to send a notification indicating the result of the process of setting the correspondence to at least one of the first terminal 4 and the second terminal 5. The notification unit 114 is configured to send a notification indicating the result of the process of releasing the correspondence to at least one of the first terminal 4 and the second terminal 5.

[0262] (Server 1)

[0263] The control unit 21 of the first server 2 executes the command included in the program 82 through the CPU. As a result, the first server 2 operates as a computer having an authentication unit 211 and a notification unit 212 as software modules. The authentication unit 211 is configured to perform authentication processing of the first object according to the request for authentication of the first object. The notification unit 212 is configured to send a notification indicating the result of the authentication processing.

[0264] (Server 2)

[0265] The control unit 31 of the second server 3 executes the command included in the program 83 through the CPU. As a result, the second server 3 operates as a computer having an authentication unit 311 and a notification unit 312 as software modules. The authentication unit 311 is configured to perform authentication processing of the second object according to the request for authentication of the second object. The notification unit 312 is configured to send a notification indicating the result of the authentication processing.

[0266] (Terminal 1)

[0267] The control unit 41 of the first terminal 4 executes the command included in the program 84 through the CPU. Thus, the first terminal 4 operates as a computer having a data exchange unit 411, a setting entrusting unit 412, and a release entrusting unit 413 as software modules. The data exchange unit 411 is configured to perform data exchange with the second terminal 5. The setting entrusting unit 412 is configured to entrust the setting of the correspondence relationship between the first object and the second object by sending data used for authentication to the management server 1. The release entrusting unit 413 is configured to entrust the release of the correspondence relationship to the management server 1.

[0268] (Terminal 2)

[0269] The control unit 51 of the second terminal 5 executes the command included in the program 85 through the CPU. As a result, the second terminal 5 operates as a computer having a data exchange unit 511, a setting entrusting unit 512, and a release entrusting unit 513 as software modules. The data exchange unit 511 is configured to perform data exchange with the first terminal 4. The setting entrusting unit 512 is configured to entrust the setting of the correspondence relationship between the first object and the second object by sending data used for authentication to the management server. The release entrusting unit 513 is configured to entrust the release of the correspondence relationship to the management server 1.

[0270] (other)

[0271] In the present embodiment, an example is described in which each software module of each device is implemented by a general-purpose CPU. However, part or all of the above-mentioned software modules may also be implemented by one or more dedicated processors. Each of the above-mentioned modules may also be implemented as a hardware module. Regarding the software composition of each device, the modules may be appropriately omitted, replaced, and added according to the implementation method. For example, in the case where the above-mentioned collective sending method is adopted as the sending method of the data used in the authentication, the setting delegation unit (412, 512) may be omitted from one of the first terminal 4 and the second terminal 5 (the terminal not responsible for data sending). In addition, for example, in the case of adopting a method of sending the release of delegation only from one of the first terminal 4 and the second terminal 5, the release delegation unit (413, 513) may be omitted from the other terminal.

[0272] [3 Action Examples]

[0273] (Association establishment settings)

[0274] Fig. 8A An example of the process steps of establishing association settings performed by the management system 100 according to the present embodiment is shown. The following process steps are an example of a management method executed by a computer. Fig. 8A In the example, it is assumed that the first mode of the above-mentioned split transmission is adopted as the transmission method of data used in authentication, and each terminal (4, 5) adopts a method of obtaining data used in authentication during data exchange.

[0275] In step SAB100, the control unit 41 of the first terminal 4 operates as the data exchange unit 411 and performs data exchange with the second terminal 5. The control unit 51 of the second terminal 5 operates as the data exchange unit 511 and performs data exchange with the first terminal 4. Data exchange can be appropriately performed according to the generation of a utilization relationship between the first object and the second object. In step SA10, the control unit 51 of the second terminal 5 obtains the first identifier I10 and the first inherent information C1 from the first object. In step SB10, the control unit 41 of the first terminal 4 obtains the second identifier I20 and the second inherent information C2 from the second object. The processing of step SA10 and step SB10 can be performed within the processing of data exchange.

[0276] In step SA20, the control unit 51 of the second terminal 5 operates as the setting entrusting unit 512, and sends the entrustment of the association establishment setting including the first identifier I10 and the first inherent information C1 to the management server 1. In response, the control unit 11 of the management server 1 operates as the authentication unit 111, and receives the first identifier I10 and the first inherent information C1. Similarly, in step SB20, the control unit 41 of the first terminal 4 operates as the setting entrusting unit 412, and sends the entrustment of the association establishment setting including the second identifier I20 and the second inherent information C2 to the management server 1. In response, the control unit 11 of the management server 1 operates as the authentication unit 111, and receives the second identifier I20 and the second inherent information C2. The control unit 11 appropriately establishes correspondence between the data received from the first terminal 4 and the second terminal 5, respectively, and determines the combination of the first object and the second object for which the setting of the correspondence relationship is required.

[0277] In step SA30, the control unit 11 of the management server 1 operates as the authentication unit 111, and transmits the authentication request of the first object including the received first identifier I10 and the first inherent information C1 to the first server 2. Accordingly, the control unit 21 of the first server 2 receives the first identifier I10 and the first inherent information C1 from the management server 1. In step SA301, the control unit 21 of the first server 2 operates as the authentication unit 211, and performs the authentication process of the first object using the received first identifier I10 and the first inherent information C1. As an example, the control unit 21 retrieves the first object information O10 using the received first identifier I10 in the query, and extracts the first registered inherent information C10 of the first object of the request source. The control unit 21 compares the extracted first registered inherent information C10 with the received first inherent information C1. The control unit 21 determines whether the authentication of the first object is successful or not based on the comparison result. In step SA40 , the control unit 21 operates as the notification unit 212 and returns the result of the authentication of the first object to the management server 1 . In response, the control unit 11 of the management server 1 receives the result of the authentication of the first object from the first server 2 .

[0278] In step SB30, the control unit 11 of the management server 1 operates as the authentication unit 111, and transmits the authentication request of the second object including the received second identifier I20 and the second inherent information C2 to the second server 3. Accordingly, the control unit 31 of the second server 3 receives the second identifier I20 and the second inherent information C2 from the management server 1. In step SB301, the control unit 31 of the second server 3 operates as the authentication unit 311, and performs the authentication process of the second object using the received second identifier I20 and the second inherent information C2. As an example, the control unit 31 retrieves the second object information O20 using the received second identifier I20 in the query, and extracts the second registered inherent information C20 of the second object of the request source. The control unit 31 compares the extracted second registered inherent information C20 with the received second inherent information C2. The control unit 31 determines whether the authentication of the second object is successful or not based on the comparison result. In step SB40 , the control unit 31 operates as the notification unit 312 and returns the result of the authentication of the second object to the management server 1 . In response, the control unit 11 of the management server 1 receives the result of the authentication of the second object from the second server 3 .

[0279] In step SC10, the control unit 11 of the management server 1 operates as the authentication unit 111, and determines whether the authentication of the first object and the second object is established based on the reply content from each server (2, 3). When the authentication of the first object and the second object is established, the control unit 11 advances the processing to the next step SC20. On the other hand, when the authentication of at least one of the first object and the second object is not established, the control unit 11 omits the processing of step SC20 and advances the processing to step SC30.

[0280] In step SC20, the control unit 11 operates as the setting unit 112 to set the correspondence between the first identifier I10 and the second identifier I20. In one example, the control unit 11 generates association establishment information D10 indicating the correspondence between the first identifier I10 and the second identifier I20, and stores the generated association establishment information D10. In step SC30, the control unit 11 operates as the notification unit 114 to send a notification indicating the result of the process of setting the correspondence to at least one of the first terminal 4 and the second terminal 5. When the notification of the result is completed, the processing steps related to the association establishment setting involved in this operation example are completed.

[0281] In addition, the above processing steps are only an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, steps can be appropriately omitted, replaced, and added according to the embodiment.

[0282] For example, the order of acquiring the first inherent information C1 and the second inherent information C2 is not limited to Fig. 8A The processing of step SA10 may be performed after step SB10. The processing of step SA10 may be performed at least partially in parallel with the processing of step SB10. The processing of step SA20 may be performed at any time after step SA10. The processing of step SA20 may also be performed before step SB10. The processing of step SB20 may be performed at any time after step SB10. The processing of step SB20 may also be performed before step SA10.

[0283] In addition, the method of sending the data used in the authentication may not be limited to the first mode of split transmission, and may be appropriately selected according to the implementation method. In another example, the method of sending the data used in the authentication may adopt a method other than the first mode of split transmission in the above-mentioned transmission method (the second to fourth modes of split transmission, collective transmission other than split transmission). Accordingly, the processing of step SA10, step SA20, step SB10, and step SB20 may be appropriately changed.

[0284] In addition, the order of executing the authentication process of the first object and the second object is not limited to Fig. 8A Example. The processing of steps SA30 to SA40 may be performed at any time after step SA20. The processing of steps SA30 to SA40 may be performed before step SB10. When the method of transmitting the first identifier I10 from the first terminal 4 in step SB20 is adopted, the processing of steps SA30 to SA40 may be performed at any time after step SB20. The processing of steps SB30 to SB40 may be performed before step SA10. When the method of transmitting the second identifier I20 from the second terminal 5 in step SA20 is adopted, the processing of steps SB30 to SB40 may be performed at any time after step SA20. The processing of steps SB30 to SB40 may be performed at least partially in parallel with the processing of steps SA30 to SA40. The processing of steps SB30 to SB40 may also be performed before the processing of steps SA30 to SA40.

[0285] (Remove association)

[0286] Figure 8B An example of the process steps of disassociating the management system 100 according to the present embodiment is shown. The following process steps are an example of a management method executed by a computer. Figure 8B In the example of FIG. 1 , a scenario is assumed in which the authentication process is omitted and the release of delegation is directly sent from the first terminal 4 to the management server 1 .

[0287] In step SZ10, the control unit 41 of the first terminal 4 operates as the de-entrustment unit 413, and sends a de-entrustment (request) to release the corresponding relationship to the management server 1. In response, the control unit 11 of the management server 1 receives the de-entrustment. The corresponding relationship of the de-entrustment can be appropriately specified. The trigger for de-entrustment can be appropriately selected according to the implementation method.

[0288] In step SZ20, the control unit 11 acts as the release unit 113 to release the correspondence relationship specified by the received release request. The release can be performed by generating information indicating that the relationship has been released and recording the generated information. In one example, when the association establishment information D10 has Figure 3A In the case of a configuration of, the control unit 11 can cancel the correspondence of the object by adding a cancellation time to the corresponding association establishment information D10 or setting a cancellation flag. In the case where the association establishment information D10 is composed of a blockchain platform, the control unit 11 can cancel the correspondence of the object by generating a transaction indicating the cancellation of the association establishment and adding the generated transaction to the blockchain.

[0289] In step SZ30, the control unit 11 operates as the notification unit 114 to transmit the result of the de-association process to the first terminal 4. When the notification of the result is completed, the process steps related to the de-association according to this operation example are terminated.

[0290] In addition, the above processing steps are only an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, steps can be appropriately omitted, replaced, and added according to the embodiment.

[0291] For example, as described above, the route for sending the release request may not be limited to Figure 8B The example can be appropriately selected according to the implementation method. The de-entrustment can be sent from the second terminal 5 (de-entrustment unit 513). The de-entrustment process can include the authentication process of at least one of the first object and the second object. In addition, the control unit 11 of the management server 1 can replace the above-mentioned step SZ20 and act as the de-entrustment unit 113 to de-entrust the corresponding relationship with the establishment of the prescribed de-entrustment condition.

[0292] [feature]

[0293] In the present embodiment, based on the generation of a utilization relationship between the first object and the second object, authentication of the first object and the second object is performed through steps SA30 to SA40 and steps SB30 to SB40. Through these two authentications, security can be expected to be ensured. In addition, through the processing of steps SC10 to SC20, when the authentication of the first object and the second object is established, the correspondence between the first identifier I10 and the second identifier I20 is set. Through the record of the association establishment setting (association establishment information D10), the utilization relationship between the first object and the second object can be tracked. Therefore, according to the present embodiment, the utilization relationship between the first object and the second object can be tracked while ensuring security.

[0294] [4 Modifications]

[0295] The embodiments of the present disclosure have been described in detail above, but the descriptions so far are merely illustrations of the present disclosure in all respects. Various improvements or modifications can be made without departing from the scope of the present disclosure. For example, the following changes can be made. Among them, the same figure marks are used for the same components as the above-mentioned embodiments, and the descriptions of the same points as the above-mentioned embodiments are appropriately omitted. The following modifications can be appropriately combined.

[0296] <4.1>

[0297] In the above-mentioned embodiment, as one of the application examples, the association information D10 can be applied so that one of the first object and the second object can exercise the authority to associate with the other object. Figure 2 as well as Figure 5 In the example, as an example of this flexible application method, a scenario is envisioned in which an object (user) of one party exercises his or her authority via an object (utilized object / mobile body) of another party. However, the method of exercising authority may not be limited to such an example. In another example, the management system 100 may be configured so that the first object can exercise the authority of other first objects via the second object agent; and / or the management system 100 may be configured so that the second object can exercise the authority of other second objects via the first object agent. That is, the agent individual of one of the objects of the first object and the second object may be configured so as to be able to exercise the authority of the agent-delegated individual (object individual) of one party's object via the object of the other party (any individual). In Figure 2 as well as Figure 5 In the example of , the management system 100 may be configured so that the proxy user can exercise the authority of the target user (proxy client) from the utilization object (mobile object).

[0298] The authorization proxy method can be appropriately configured. As an example, the authorization proxy method can adopt any of the following three methods. In the following, for the sake of convenience, it is assumed that the first object and the second object are the user and the object (mobile object). Figure 2 as well as Figure 5 The proxy modes in the examples are described below. However, the application scope of each proxy mode may not be limited to the case where the first object and the second object are the user and the object being utilized. In addition, in each of the following proxy modes, the user (first object) may be renamed as one of the first object and the second object, and the object being utilized (second object) may be renamed as the other of the first object and the second object. Typically, the object being utilized may be the above-mentioned mobile object.

[0299] (1) Proxy Mode 1 (Proxy Authentication / Proxy Association Establishment)

[0300] As the first proxy mode, the management system 100 may be configured to set a correspondence between the target user (proxy client) and the object of use according to the establishment of authentication of the target user (first target) and the object of use (second target) through proxy authentication processing performed by the proxy user. Furthermore, the management system 100 may be configured to allow the proxy user to exercise the authority associated with the target user through the object of use during the period in which the correspondence is set. The proxy user is an example of a proxy individual, and the target user (proxy client) is an example of a proxy client individual (target individual).

[0301] That is, the user terminal associated with the user (in Figure 2 In the example of the first terminal 4), it can be a proxy user terminal owned by a proxy user who acts as a proxy for the user. In this case, when the utilization relationship between the first object and the second object is generated, data exchange can be appropriately performed between the object user terminal, the proxy user terminal, and the loading terminal. In one example, the utilization relationship between the first object and the second object can be generated through at least data communication between the object user terminal owned by the user and the proxy user terminal, and data communication between the proxy user terminal and the loading terminal.

[0302] The method of proxy authentication may not be particularly limited and may be appropriately set according to the implementation. The method of proxy authentication may be configured such that the proxy user terminal replaces the target user terminal to perform at least a part of the authentication process of the target user (first target) and the object (second target) in the above implementation. As an example, the method of proxy authentication may adopt any of the following two methods.

[0303] (1-1) 1-1 Agent Mode

[0304] Fig. 9 An example of the association setting process in the 1-1 proxy mode according to the present embodiment is schematically shown. Fig.10 An example of the processing procedure of association establishment setting in the 1-1 proxy mode according to the present embodiment is shown. Fig. 9 as well as Fig.10 In the example of FIG. 1 , the first terminal 4A is a proxy user terminal, which is different from the above-mentioned embodiment. Figure 2 as well as Figure 5 The first object is the object user (proxy client) of the proxy. The object user terminal 6A is a terminal owned by the object user. The hardware configuration of the first terminal 4A and the object user terminal 6A can be the same as the first terminal 4 in the above-mentioned embodiment. Fig. 9 as well as Fig.10 In the example, it is assumed that the first mode of split transmission is adopted as the transmission method of data used for authentication, and the first identifier I10 is transmitted through the first terminal 4A, and the first unique information C1 is not transmitted through the first terminal 4A.

[0305] First, in step SD10, the control unit of the target user terminal 6A acts as a proxy designation unit to accept the designation of a proxy user for the target user. The proxy user can be appropriately designated. In a typical example, the target user terminal 6A stores an address book and can select a proxy user from the users registered in the address book. In another example, the target user terminal 6A can access a list of users via an external computer such as the first server 2 and accept the selection of a proxy user from the users registered in the list. If a proxy user is designated, the control unit of the target user terminal 6A acts as a notification unit to exchange data with the first terminal 4A of the proxy user designated by the target user, and notify that the proxy right is granted. Accordingly, the control unit of the first terminal 4A of the proxy user receives the notification of the granting of the proxy right from the target user terminal 6A. In one example, the notification can include the first identifier I10 (user identifier) ​​of the target user and contact information. The contact information can be a telephone number, an email address, account information of an application of a contact system (such as an application of a social networking service, etc.), an identification number, etc. Similar to the data exchange between the first terminal 4 and the second terminal 5, the data exchange between the target user terminal 6A and the first terminal 4A can be performed by wireless or wired data communication, or by methods other than data communication such as reading a two-dimensional code. In addition, the target user terminal 6A can directly give the notification of the granting of the proxy right to the first terminal 4A, or can send it indirectly via an external computer such as the first server 2. In the case where data communication is used as the method of data exchange, the notification of the granting of the proxy right is an example of data communication between the target user terminal held by the user and the proxy user terminal. As a result, the target user terminal 6A grants the first terminal 4A the authority authenticated by proxy, so that it executes the process of setting the corresponding relationship between the object and the object of use.

[0306] In step SAB100A, the control unit of the first terminal 4A of the proxy user who is granted the proxy right operates as a data exchange unit and performs data exchange with the second terminal 5. The control unit 51 of the second terminal 5 operates as a data exchange unit 511 and performs data exchange with the first terminal 4A. Similar to the data exchange between the first terminal 4 and the second terminal 5, the data exchange between the first terminal 4A and the second terminal 5 can be performed by wireless or wired data communication, or by a method other than data communication such as reading a two-dimensional code. In the case where data communication is adopted as the method of data exchange, the data exchange between the first terminal 4A and the second terminal 5 is an example of data communication between the proxy user terminal and the loading terminal.

[0307] In step SD20, the control unit of the first terminal 4A gives the first identifier I10 and the contact information to the second terminal 5. Accordingly, the control unit 51 of the second terminal 5 obtains the first identifier I10 and the contact information from the proxy user. Thus, the first terminal 4A causes the second terminal 5 to notify the target user terminal 6A of the consent delegation of the proxy association establishment including the inquiry of the first inherent information C1 (user inherent information) of the target user, and sends the delegation of association establishment setting including the obtained first inherent information C1 and the first identifier I10 to the management server 1. In addition, the method for the second terminal 5 to obtain them is not limited to this example. In another example, at least one of the first identifier I10 and the contact information can be input to the second terminal 5 by the proxy user operating the second terminal 5.

[0308] In step SD30, the control unit 51 of the second terminal 5 operates as a data exchange unit 511, and notifies the target user terminal 6A of the consent delegation for proxy association establishment including the inquiry of the first inherent information C1. Accordingly, in step SA10A, the control unit of the target user terminal 6A accepts the operation of whether the target user agrees to the proxy association establishment. The control unit of the target user terminal 6A operates as a data exchange unit in response to the target user performing the operation for consent, and gives the result of consent for proxy association establishment and the first inherent information C1 (user inherent information) of the target user to the second terminal 5. As a result, the target user terminal 6A causes the second terminal 5 to cooperate with the first terminal 4A, and sends the delegation for association establishment setting to the management server 1. On the other hand, in the case where the target user does not agree, the processing step of association establishment setting based on proxy authentication can be appropriately ended.

[0309] The data exchange in step SD30 and step SA10A can basically be performed by direct or indirect data communication based on wireless or wired. In step SA10A, the control unit of the target user terminal 6A can appropriately obtain the first inherent information C1 from the target user, and directly or indirectly send the obtained first inherent information C1 to the second terminal 5. However, the method of data exchange between the second terminal 5 and the target user terminal 6A is not limited to this example, and methods other than data communication such as reading a two-dimensional code can be used according to the situation.

[0310] In step SB10, the control unit of the first terminal 4A appropriately obtains the second identifier I20 and the second inherent information C2 from the object of use, similarly to the first terminal 4. In one example, the second terminal 5 can assign the second identifier I20 and the second inherent information C2 to the first terminal 4A. Thus, the second terminal 5 can cause the first terminal 4A to send a request for association establishment settings including the second identifier I20 and the second inherent information C2 to the management server 1.

[0311] In step SB20, the control unit of the first terminal 4A operates as a setting entrusting unit, and sends a request for association establishment setting including the second identifier I20 and the second inherent information C2 to the management server 1. In step SA20, the control unit 51 of the second terminal 5 operates as a setting entrusting unit 512, and sends a request for association establishment setting including the first identifier I10 and the first inherent information C1 to the management server 1. Based on these, the management server 1 receives the first identifier I10, the first inherent information C1, the second identifier I20, and the second inherent information C2. Then, the management server 1, the first server 2, and the second server 3 can perform the processing after step SA30 and step SB30 in the same way as the above-mentioned embodiment. According to the result of the execution, the authentication of the target user and the object of use is established, and the corresponding relationship between the target user and the object of use is set. If the corresponding relationship is set, the processing step of the association establishment setting based on the proxy authentication ends. During the period when the corresponding relationship is set, the proxy user can exercise the authority of the target user (proxy entruster) from the object of use.

[0312] Furthermore, in the above-mentioned 1-1 proxy mode, the notification path of the first identifier I10 and the first inherent information C1 may not be limited to the above-mentioned example. The first identifier I10 may be directly or indirectly notified from the target user terminal 6A to the second terminal 5 without passing through the first terminal 4A at any time such as step SA10A. In this case, the first identifier I10 may be omitted from the notification of the granting of the proxy right. In addition, the first inherent information C1 may be assigned to the first terminal 4A at any time such as step SD10. Thus, the first inherent information C1 may be assigned from the first terminal 4A to the second terminal 5. In this case, the first inherent information C1 may be omitted from the data assigned to the second terminal 5 in step SA10A. However, in order not to assign the first inherent information C1 to the proxy user, it is preferable to adopt the above-mentioned method without passing through the first terminal 4A. Fig. 9 as well as Fig.10 In addition, the consent process for establishing the proxy association may be omitted. In the case where the consent process for establishing the proxy association is omitted and the first inherent information C1 is given from the first terminal 4A to the second terminal 5, the processes of step SD30 and step SA10A may be omitted. In this case, the information on the contact information of the target user may be omitted from the notification of granting the proxy right and the data given to the second terminal 5 in step SD20.

[0313] In addition, in the above-mentioned 1-1 proxy mode, the transmission method of the data used in the authentication may not be limited to the first mode of the divided transmission, and may be appropriately selected according to the implementation mode. In another example, the transmission method of the data used in the authentication may adopt a method other than the first mode of the divided transmission in the above-mentioned transmission method (the second to fourth modes of the divided transmission, collective transmission other than the divided transmission). Accordingly, the processing of steps SD10 to SD30, step SA10A, step SA20, step SB10, and step SB20 may be appropriately changed. In the case of adopting a method in which the second terminal 5 transmits at least a part of the data of the target user (the first identifier I10 and the first inherent information C1), the second terminal 5 may obtain the data of the target user via the first terminal 4A, or may obtain it from the target user (target user terminal 6A) without the first terminal 4A, as described above. In the case of adopting a method in which the first terminal 4A transmits at least a part of the data of the target user, the first terminal 4A may obtain the data of the target user via the second terminal 5, or may obtain it from the target user (target user terminal 6A) without the second terminal 5. For example, the first terminal 4A can obtain the data of the target user through the second terminal 5 via the path of step SA10A and step SB10. The first terminal 4A can obtain the data of the target user from the target user (target user terminal 6A) without passing through the second terminal 5 via the path of step SD10. In the case of a method in which the first terminal 4A transmits at least a part of the data of the object of use (the second identifier I20 and the second inherent information C2), the first terminal 4A can appropriately obtain the data of the object of use from the object, as described above. Similarly, the second terminal 5 can also appropriately obtain the data of the object of use. In either method, in the case of not adopting a method in which the consent to establish the proxy association is omitted and the target user terminal 6A gives data to the second terminal 5, the processing of step SD30 and step SA10A can be omitted.

[0314] In addition, in the above-mentioned 1-1 proxy mode, at least one of the validity period of proxy exercise and the authority (effective authority) allowed to be exercised by the proxy can be specified together with the designation of the proxy user in step SD10. Based on this, the designation information that is configured to indicate at least one of the specified validity period and effective authority can be generated. The designation information of at least one of the specified validity period and effective authority can be appropriately managed. In one example, the designation information can be sent from the target user terminal 6A to the first server 2, and is managed by being associated with the first target information O10 (user information O10A) in the first server 2. The first server 2 can appropriately notify the management server 1 of the designation information. In another example, the designation information can be notified from the target user terminal 6A to the management server 1 via at least one of the first terminal 4A and the second terminal 5 (that is, together with the transmission of the data used in the authentication), and is managed by being associated with the association establishment information D10 in the management server 1. In another example, the designation information can be sent directly or indirectly from the target user terminal 6A to the management server 1 and managed by the management server 1. In this case, the management server 1 can appropriately establish a correspondence between the data used in the authentication received from at least one of the first terminal 4A and the second terminal 5 and the designated information, as in the split transmission method. The method of establishing the correspondence can be the same as the method of establishing the correspondence in the split transmission method described above. In one example, the data and designated information received from at least one of the first terminal 4A and the second terminal 5 can include agent information as shared information, and the agent information can be used to establish a correspondence between the data used in the authentication and the designated information. The agent information can be any information related to the agent user. The agent information can include, for example, attribute information of the agent user (such as personal information such as name, address, age, gender, contact information, etc.), identification information (such as account name, identifier, etc.), etc. The agent information can also include the same type of information as the above-mentioned inherent information (C1, C2). In addition, the timing of specifying the effective authority and the validity period may not be limited to step SD10. At least one of the effective authority and the validity period can be specified at any time before the corresponding relationship is released.

[0315] In the above-mentioned 1-1 proxy mode, the first terminal 4A can send the proxy information directly to the management server 1, or can send it indirectly via an external computer such as the second terminal 5. For example, the first terminal 4A can send the proxy information to the management server 1 in step SB20. The first terminal 4A can assign the proxy information to the second terminal 5 during data exchange, so that the second terminal 5 sends the proxy information to the management server 1. As a result, the management server 1 can distinguish whether the set correspondence is a correspondence established based on proxy association by generating association establishment information D10 including the proxy information. By including the proxy information in the association establishment information D10, the proxy user who has set the correspondence can be tracked. The proxy information can be used to limit the users who can exercise the authority of the object user on behalf of the designated proxy users (users identified by the proxy information). In addition, the method of distinguishing whether the correspondence is a correspondence established based on the proxy association may not be limited to such an example. In another example, it can be appropriately distinguished whether the delegation is established based on the proxy association in the data from each terminal (4, 5). Based on this, the management server 1 can generate the association information D10 including information indicating whether the correspondence relationship is set by proxy association.

[0316] In addition, in the above-mentioned 1-1 proxy mode, the second terminal 5 can obtain the proxy information from the first terminal 4A. Moreover, when the consent to establish the proxy association in step SD30 is entrusted, the second terminal 5 can notify the target user terminal 6A of the acquired proxy information. Thereby, the target user can be notified of the proxy user who is executing the proxy association establishment. In addition, in step SD10, the target user terminal 6A can generate designated proxy information indicating the designated proxy. The proxy information notified from the second terminal 5 can correspond to the designated proxy information. The target user terminal 6A can determine whether the proxy user who is executing the proxy association establishment is consistent with the designated proxy user by comparing the designated proxy information with the proxy information notified from the second terminal 5. In the case where it is determined that the proxy user who is executing the proxy association establishment is consistent with the designated proxy user, the target user terminal 6A can automatically give the consent notification of the proxy association establishment including the first inherent information to the second terminal 5, and can also allow the operation of consent performed by the target user. In addition, the second terminal 5 does not necessarily have to obtain the proxy information from the first terminal 4A. For example, the second terminal 5 may obtain the proxy information from the proxy user without the aid of the first terminal 4A by photographing the proxy user using an image sensor or the like. In addition, the proxy user's comparison and the notification of consent including the first inherent information C1 may not necessarily be performed by the target user terminal 6A. At least one of the proxy user's comparison and the notification of consent may be performed by an external computer such as the first server 2.

[0317] In addition, the designated agent information may include authentication information, and the agent information may include agent authentication information corresponding to the authentication information. The authentication information may be the same as the first registered inherent information C10 or the second registered inherent information C20. In one example, the authentication information may be temporarily generated information composed of a timestamp, a random number, a hash value, etc. In this case, the authentication information may be appropriately generated by the object user terminal 6A or an external computer when the agent is designated in step SD10. The object user terminal 6A may assign the authentication information to the first terminal 4A at any time such as step SD10. The first terminal 4A may keep the authentication information as the agent authentication information, and assign the agent information including the agent authentication information to the second terminal 5. Moreover, by comparing the authentication information with the agent authentication information, it can be determined whether the agent user who is executing the establishment of the agent association is consistent with the designated agent user. The comparison method of the designated agent information and the agent information may be the same as the comparison method of the above-mentioned inherent information, etc.

[0318] In addition, in the above-mentioned 1-1 proxy mode, when there is no response from the target user terminal 6A within a certain period of time after the consent delegation is notified in step SD30, the second terminal 5 can notify the target user terminal 6A of a reminder to urge the response of step SA10A. In addition, the consent processing based on the above-mentioned designated agent information and the establishment of the proxy association of the agent information can be performed not on the target user terminal 6A, but on an external computer such as the first server 2. In this case, when the proxy user is designated in step SD10, the designated agent information can be given to the external computer. In the case of no response from the target user terminal 6A, the second terminal 5 can replace the consent processing by asking the external computer. In addition, the first inherent information C1 can also be given to the external computer, and the second terminal 5 can obtain the first inherent information C1 from the external computer based on the consent to the establishment of the proxy association.

[0319] In addition, in the above-mentioned 1-1 proxy mode, the correspondence relationship set according to the delegation established by the proxy association can be appropriately terminated. As in the above-mentioned embodiment, the management server 1 can be configured to terminate the correspondence relationship accompanied by the reception of the release of delegation from at least one of the first terminal 4A and the second terminal 5 or the establishment of the prescribed release condition. The release of delegation and the prescribed release condition involved in the above-mentioned embodiment can also be applied in this variant. In addition, in this variant, the prescribed release condition can be set according to the validity period of the above-mentioned proxy right and at least one of the effective authority. For example, the release condition can be defined as the release of the correspondence relationship according to the arrival of the specified validity period. In addition, the release condition can be defined as the release of the correspondence relationship (i.e., the authority disappears / expired) by the exercise of the specified effective authority. In addition, the release condition can be defined as the release of the previous correspondence relationship established based on the proxy association when the setting of the correspondence relationship for the object user is repeated because the object user attempts to set the correspondence relationship with the object in order to exercise the effective authority for himself.

[0320] In addition, the management server 1 may be configured to release the correspondence upon receipt of a release from the target user terminal 6A. The target user terminal 6A may directly send the release to the management server 1, or may indirectly send the release via an external computer such as the first server 2. As in the above-mentioned embodiment, the release from the target user terminal 6A may include at least one of the first identifier I10 and the second identifier I20 that specify the release, or may not include both the first identifier I10 and the second identifier I20. In addition, in the case of identifying whether the correspondence is established by proxy association, the release from the target user terminal 6A may include only the first identifier I10 without the second identifier I20, thereby specifying that the correspondence established by proxy association specified by the first identifier I10 is to be released.

[0321] In addition, in the above-mentioned 1-1 proxy mode, after the setting process of the correspondence relationship based on the proxy association establishment is completed, the control unit 11 of the management server 1 can act as the notification unit 114, and directly or indirectly send a notification indicating the execution result of the setting process based on the proxy association establishment to at least one of the first terminal 4A, the second terminal 5, and the target user terminal 6A. In the case of directly notifying the target user terminal 6A, the management server 1 can obtain the contact information of the target user terminal 6A at any time. In one example, when a method of exchanging data on the contact information of the target user terminal 6A between the above-mentioned first terminal 4A and the second terminal 5 is adopted, at least one of the first terminal 4A and the second terminal 5 can send the contact information of the target user terminal 6A to the management server 1 when the association establishment is entrusted. When a method of performing data communication between the target user terminal 6A and the management server 1 is adopted, the management server 1 can obtain the contact information of the target user terminal 6A in the data communication.

[0322] Above Fig.10 The processing steps are just an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. For example, the processing of step SB20 can be performed at any time after step SB10. Without waiting until the consent of the agent is completed, the processing of step SB10 and step SB20 can be performed at any time after the second inherent information C2 can be obtained from the object of use, or can be performed before step SD20. Relative to the processing of step SB10 being performed before step SD20, the processing of step SB20 can be performed after step SD20. In addition, for example, the processing of step SA20 can be performed at any time after step SA10A. The processing of step SA20 can be performed before step SB10. In the case of adopting a method of assigning the first identifier I10 and the first inherent information C1 from the first terminal 4A, the processing of step SA20 can be performed at any time after the first identifier I10 and the first inherent information C1 are obtained.

[0323] (Variation Example)

[0324] In the above-mentioned proxy mode 1-1, at least one of the first terminal 4A and the second terminal 5 obtains the first inherent information C1 (user inherent information) of the target user, and sends the obtained first inherent information C1 to the management server 1. However, the transmission path of the first inherent information C1 is not limited to this example. As a modified example, the authentication process can be performed in a state where the first inherent information C1 does not exist, and the first server 2 can inquire the target user terminal 6A.

[0325] Fig.11A variation of the association establishment setting process in the 1-1 proxy mode according to the present embodiment is schematically shown. Fig.11 In the example of , the first object information O10 (user information O10A) includes the contact information of the object user (first object) as attribute information. Fig.11 Imagine in the above Fig. 9 The example is a scenario in which the configuration of this variant example is applied.

[0326] First, in step SD10, the target user terminal 6A accepts the designation of the proxy user and notifies the first terminal 4A of the designated proxy user of the grant of the proxy right. In the notification of the grant of the proxy right, the contact information of the target user can be omitted. In step SD20B, the second terminal 5 obtains the first identifier I10. In step SB10, the first terminal 4A obtains the second identifier I20 and the second inherent information C2. The authentication process of the object after step SB20 can be performed in the same manner as in the above-mentioned embodiment. As a result of the execution, the management server 1 receives the authentication result of the object from the second server 3.

[0327] On the other hand, in step SA20B, the second terminal 5 sends a request for association establishment setting including the first identifier I10 but not including the first inherent information C1 to the management server 1. Accordingly, the management server 1 receives the first identifier I10. In step SA30B, the control unit 11 of the management server 1 operates as the authentication unit 111, and sends an authentication request for the first object including the received first identifier I10 to the first server 2. Accordingly, the first server 2 receives the first identifier I10 from the management server 1.

[0328] In step SA310B, the control unit 21 of the first server 2 acts as the authentication unit 211, and retrieves the first registered inherent information C10 and the contact information of the target user by using the received first identifier I10 in the query. The control unit 21 sends the consent request for proxy association establishment including the inquiry of the first inherent information C1 to the target user terminal 6A for the extracted contact information. In response to this, the control unit of the target user terminal 6A accepts the operation of the target user whether to agree to the proxy association establishment. In step SA311B, the control unit of the target user terminal 6A sends the result of the consent of the proxy association establishment and the first inherent information C1 (user inherent information) of the target user to the first server 2 according to the operation for consent performed by the target user. In response, the control unit 21 of the first server 2 receives the first inherent information C1. On the other hand, if the target user does not agree, the processing steps of the association establishment setting based on the proxy authentication of this modification can be appropriately ended. Furthermore, the control unit of the target user terminal 6A may appropriately acquire the first unique information C1 from the target user.

[0329] The control unit 21 of the first server 2 acts as an authentication unit 211, and compares the extracted first registered inherent information C10 with the received first inherent information C1. The control unit 21 determines whether the authentication of the object user is successful or not based on the result of the comparison. In step SA40, the control unit 21 acts as a notification unit 212, and sends the authentication result of the object user to the management server 1. Accordingly, the management server 1 receives the authentication result of the object user. Thereafter, the management server 1 can perform the processing after step SC10 in the same manner as in the above-mentioned embodiment. The result of the execution is that the correspondence between the object user and the object of use is set based on the establishment of the authentication of the object user and the object of use. If the correspondence is set, the processing step of establishing the setting based on the association of the proxy authentication ends.

[0330] In addition, in this modification, the configuration other than the above can be combined with the above Fig. 9 as well as Fig.10The above-mentioned structure involved in the example is the same. In addition, in this modified example, when or after the designation of the proxy user based on the process of step SD10, before step SA310B, the target user terminal 6A can pre-execute the process of step SA311B by accessing the first server 2. In this case, the process of step SA310B can be omitted. As in the split transmission method, the association establishment commission from at least one of the first terminal 4A and the second terminal 5 and the prior authentication based on the pre-execution of step SA311B can be appropriately established in correspondence. In one example, the association establishment commission from at least one of the first terminal 4A and the second terminal 5 and the prior authentication based on the pre-execution of step SA311B can include proxy information as shared information, and the proxy information can be used to perform the respective correspondence. In addition, when this method is adopted, the first server 2 can perform the corresponding establishment process based on the authentication commission from the management server 1 based on the process of step SA30B, and return the authentication result of the target user based on the pre-acquired first inherent information C1 to the management server 1 as the process of step SA40. Alternatively, the first server 2 may send the authentication result of the target user based on the first inherent information C1 obtained in advance to the management server 1. In this case, the process of step SA30B may be omitted, and the management server 1 may perform the corresponding establishment process to obtain the authentication result of the target user. In addition, when this method is adopted, at least part of the authentication process of the target user may be executed by the target user terminal 6A.

[0331] (1-2) 1-2 Agent Mode

[0332] Fig.12 An example of the association setting process in the 1-2 proxy mode according to the present embodiment is schematically shown. Fig.13 An example of the processing procedure of association establishment setting in the 1-2 proxy mode involved in this embodiment is shown. Fig.12 as well as Fig.13 In the example of FIG. 1 , the first terminal 4C is a proxy user terminal, which is different from the above embodiment. Figure 2 as well as Figure 5 The first object is the object user (agent client) who delegates the agent. The object user terminal 6C is a terminal held by the object user, and corresponds to the object user terminal 6A of the 1-1 proxy mode. The hardware configuration of the first terminal 4C and the object user terminal 6C can be the same as that of the first terminal 4 in the above-mentioned embodiment. Fig.12 as well as Fig.13In the example of FIG. 1 , it is assumed that the first mode of divided transmission is adopted as the transmission method of data used for authentication, and the first identifier I10 and the first unique information C1 are not transmitted via the first terminal 4C.

[0333] First, in step SE10, the control unit of the target user terminal 6C acts as a proxy designation unit to accept the designation of the proxy user from the target user. The control unit of the target user terminal 6C acts as a notification unit to exchange data with the first terminal 4C of the proxy user designated by the target user, and notifies that the proxy right has been granted. Based on this, the control unit of the first terminal 4C of the proxy user receives the notification of the grant of the proxy right from the target user terminal 6C. In one example, the notification may include authentication information. The authentication information may be the same as the above-mentioned 1-1 proxy mode. For example, the authentication information may be temporarily generated information. The first terminal 4C may retain the authentication information included in the received notification as the proxy authentication information. The other processing of step SE10 may be the same as the above-mentioned step SD10. In the case of adopting data communication as a method of data exchange, the notification of the grant of the proxy right is an example of data communication between the target user terminal held by the user and the proxy user terminal. As a result, the target user terminal 6C grants the first terminal 4C the authority authenticated by proxy, so that it performs the processing of setting the correspondence relationship between the object and the object.

[0334] In step SA10C, the control unit of the target user terminal 6C accepts the designation of the object of use for which the proxy association is allowed to be established by the proxy user. The object of use for which the proxy association is allowed to be established can be appropriately designated according to the implementation method. In one example, the target user terminal 6C and the second terminal 5 are directly exchanged with data by a method such as short-range wireless communication, so that the object of the second terminal 5 that becomes the target of the data exchange can be designated as the object of use for which the proxy association is allowed to be established. In another example, the target user terminal 6C accesses the list of objects of use via an external computer, and can designate the object of use for which the proxy association is allowed to be established from the objects of use registered in the list. The list can include information such as identification information of each object of use, contact information of the second terminal 5, etc. The list can be stored in the target user terminal 6C. The object of use can be manually designated by the target user, for example, by selecting an object of use that meets the conditions, etc., and can be designated by any information processing. After the object of use is designated, the control unit of the target user terminal 6C acts as a data exchange unit, and notifies the designated agent information including authentication information, the first identifier I10, and the first inherent information C1 to the second terminal 5 of the designated object of use. The designated agent information can be appropriately obtained according to the designation of the above-mentioned proxy user. The designated agent information can be the same as the above-mentioned 1-1 proxy mode. Accordingly, the second terminal 5 of the designated object receives the designated agent information including authentication information, the first identifier I10 and the first inherent information C1. In addition, in order for the proxy user to determine the designated object, the information of the designated object can be appropriately given to the first terminal 4C from the object user terminal 6C or the external computer. Through the processing of this step SA10C, the object user terminal 6C causes the second terminal 5 of the designated object to perform the verification processing of the authenticity of the proxy user corresponding to the application for use of the object, and cooperates with the first terminal 4C of the proxy user to send the delegation of the association establishment setting to the management server 1.

[0335] In step SAB100C, the control unit of the first terminal 4C of the proxy user who is granted the proxy right operates as a data exchange unit and performs data exchange with the second terminal 5 of the designated object. The control unit 51 of the second terminal 5 operates as a data exchange unit 511 and performs data exchange with the first terminal 4C. The method of data exchange in step SAB100C can be the same as that in the above-mentioned step SAB100A. In the case of adopting data communication as the method of data exchange, the data exchange between the first terminal 4C and the second terminal 5 is an example of data communication between the proxy user terminal and the load terminal.

[0336] In step SE20, the control unit of the first terminal 4C applies for the use of the object by giving agent information including agent authentication information to the second terminal 5. Thus, the first terminal 4C causes the second terminal 5 to verify the authenticity of the agent, and transmits a request for establishing the association between the first identifier I10 and the first inherent information C1 to the management server 1 based on the establishment of the agent's authentication.

[0337] In step SE201, the control unit 51 of the second terminal 5 verifies the authenticity of the proxy user by comparing the proxy information included in the utilization application with the designated proxy information received from the target user terminal 6C (i.e., performs authentication processing of the proxy user). Comparing the proxy information with the designated proxy information includes comparing the proxy authentication information with the authentication information. The control unit 51 of the second terminal 5 determines whether the authentication of the proxy user is successful or not based on the result of the comparison. If the authentication of the proxy user is successful, the control unit 51 of the second terminal 5 allows the proxy user to use the utilization object, and validates the subsequent processing related to the establishment of the proxy association. On the other hand, if the authentication of the proxy user is not successful, the processing step of the association establishment setting based on the proxy authentication can be appropriately ended.

[0338] In step SB10, the control unit of the first terminal 4C appropriately obtains the second identifier I20 and the second inherent information C2 from the object of use. In step SB20, the control unit of the first terminal 4C sends a request for association establishment setting including the second identifier I20 and the second inherent information C2 to the management server 1. In step SA20, the control unit 51 of the second terminal 5 sends a request for association establishment setting including the first identifier I10 and the first inherent information C1 to the management server 1. The processing of step SB10, step SB20 and step SA20 can be the same as the above-mentioned 1-1 proxy mode. Based on this, the management server 1 receives the first identifier I10, the first inherent information C1, the second identifier I20 and the second inherent information C2. Then, the management server 1, the first server 2 and the second server 3 can perform the processing after step SA30 and step SB30 in the same way as the above-mentioned 1-1 proxy mode. The result of the execution is that the correspondence between the target user and the object is set according to the authentication of the target user and the object. If the correspondence is set, the processing step of establishing the association based on the proxy authentication is completed. During the period of setting the correspondence, the proxy user can exercise the authority of the target user (proxy client) from the object.

[0339] In addition, in the above-mentioned 1-2 proxy mode, the notification path of the first identifier I10 and the first inherent information C1 may not be limited to the above-mentioned example. At least one of the first identifier I10 and the first inherent information C1 may be given to the second terminal 5 via the first terminal 4C. In this case, at least one of the first identifier I10 and the first inherent information C1 may be omitted from the data given to the second terminal 5 in step SA10C.

[0340] In addition, in the above-mentioned 1-2 proxy mode, the transmission method of the data used in the authentication may not be limited to the first mode of divided transmission, and may be appropriately selected according to the implementation method. In another example, the transmission method of the data used in the authentication may adopt a method other than the first mode of divided transmission in the above-mentioned transmission method (the second to fourth modes of divided transmission, collective transmission other than divided transmission). Accordingly, the processing of step SE10, step SE20, step SA10C, step SA20, step SB10, and step SB20 may be appropriately changed. In the case of adopting a method in which the second terminal 5 transmits at least a part of the data of the target user (the first identifier I10 and the first inherent information C1), the second terminal 5 may obtain the data of the target user via the first terminal 4C, or may obtain it from the target user (target user terminal 6C) without passing through the first terminal 4C, as described above. In the case of adopting a method in which the first terminal 4C transmits at least a part of the data of the target user, the first terminal 4C may obtain the data of the target user via the second terminal 5, or may obtain it from the target user (target user terminal 6C) without passing through the second terminal 5. For example, the first terminal 4C can obtain the data of the target user through the second terminal 5 through the path of step SA10C and step SB10. The first terminal 4C can obtain the data of the target user from the target user (target user terminal 6C) without passing through the second terminal 5 through the path of step SE10. In the case of a method in which the first terminal 4C transmits at least a part of the data of the object (the second identifier I20 and the second inherent information C2), the first terminal 4C can appropriately obtain the data of the object from the object as described above. Similarly, the second terminal 5 can appropriately obtain the data of the object.

[0341] In addition, in the above-mentioned 1-2 proxy mode, in the designation of the object of use in step SA10C, a specific individual can typically be designated. However, the method of designating the object of use may not be limited to such an example. In another example, the object of use may not be designated as a specific individual, for example, it may be designated in an arbitrary range belonging to a specific operating organization, etc. As an example in this case, the data transmitted in advance such as the designated agent information may be stored in an external computer such as the first server 2. As a pre-processing of step SE20, the second terminal 5 may download data from the target user terminal 6C from the external computer. The data to be downloaded may be appropriately selected. For example, the target user may be designated based on the operation performed by the proxy user, the data from the first terminal 4C, etc., and the second terminal 5 may download data corresponding to the designated target user. The target user may be appropriately designated based on the first identifier I10, etc. After downloading the data, the second terminal 5 may accept the use application based on the proxy user and perform the processing after step SE201. In addition, in the case where the object of use is designated as a specific individual, the second terminal 5 may also download the data from the target user terminal 6C when it is used by the proxy user. For example, when the period of use of the object by the proxy user is specified in advance, the second terminal 5 may download the data from the target user terminal 6C before the expiration of the period of use.

[0342] Above Fig.13 The processing steps are just an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. For example, the notification of the grant of agency in step SE10 can be performed after step SA10C. The processing of step SE10 and the processing of step SA10C can be performed at least partially in parallel. The processing of step SA10C can be performed before step SE10. The processing of step SA20 can be performed at any time after step SE201. The processing of step SA20 can be performed before step SB10. The processing of step SA20, step SB10, and the processing of step SB20 can be performed at least partially in parallel.

[0343] In addition, the configuration of the above-mentioned 1-1 proxy mode can be appropriately applied to the configuration other than the above-mentioned configuration of the 1-2 proxy mode. For example, in the 1-2 proxy mode, at least one of the validity period of the proxy exercise and the authority (effective authority) allowed to be exercised by the proxy can also be specified. The management server 1 can generate the association establishment information D10 including the agent information. The management server 1 can generate the association establishment information D10 including information indicating whether the correspondence relationship is set by the proxy association establishment. The correspondence relationship set according to the delegation established by the proxy association can be released by the same method as the above-mentioned 1-1 proxy mode. The control unit 11 of the management server 1 can send a notification indicating the execution result of the setting processing based on the proxy association establishment to at least one of the first terminal 4C, the second terminal 5 and the target user terminal 6C.

[0344] (Variation Example)

[0345] As in the variation of the above-mentioned 1-1 proxy mode, the transmission path of the first inherent information C1 is not limited to the example of the above-mentioned 1-2 proxy mode. As a variation, the authentication process may be performed without the presence of the first inherent information C1, and the first server 2 may inquire the target user terminal 6C.

[0346] Fig.14 A variation of the process of establishing association in the first and second proxy modes according to the present embodiment is schematically shown. Fig.14 In the example of , the first object information O10 (user information O10A) includes the contact information of the object user (first object) as attribute information. Fig.14 Imagine in the above Fig.12 The example is a scenario in which the configuration of this variant example is applied.

[0347] First, with the above Fig.12 as well as Fig.13 In the same way as in the example of , in step SA10, the target user terminal 6C accepts the designation of the proxy user. The target user terminal 6C notifies the first terminal 4C of the designated proxy user of the grant of the proxy right. In step SA10D, the target user terminal 6C accepts the designation of the object of use established based on the proxy user's permission for proxy association. The target user terminal 6C grants the designated proxy information including the authentication information and the first identifier I10 to the second terminal 5 of the designated object of use. Step SA10D may be the same as the above-mentioned step SA10C except that the first inherent information C1 is omitted.

[0348] Step SB10 and step SE20 are the same as above. Fig.12 as well as Fig.13The same is true for the example of . In step SE20, the first terminal 4C applies for use to the second terminal 5 of the designated object. The second terminal 5 verifies the authenticity of the agent. When the verification is successful, the second terminal 5 validates the subsequent processing related to the establishment of the agent association. In step SB10, the first terminal 4C appropriately obtains the second identifier I20 and the second inherent information C2 from the object.

[0349] The authentication process of the object to be used after step SB20 can be performed in the same manner as in the above-mentioned embodiment. As a result of the execution, the management server 1 receives the authentication result of the object to be used from the second server 3. In addition, the processing of step SA20D, step SA30D, step SA310D, step SA311D and step SA40 can be performed in the same manner as step SA20B, step SA30B, step SA310B, step SA311B and step SA40 in the above-mentioned modification of the 1-1 proxy mode. As a result of the execution, the management server 1 receives the authentication result of the target user from the first server 2. Then, as in the above-mentioned embodiment, the management server 1 can execute the processing after step SC10. As a result of the execution, the correspondence between the target user and the object to be used is set based on the establishment of the authentication of the target user and the object to be used. If the correspondence is set, the processing step of establishing the setting based on the association of the proxy authentication ends.

[0350] In addition, in this modification, the configuration other than the above can be combined with the above Fig.12 as well as Fig.13 The above-mentioned structure involved in the example is the same. In addition, in this modified example, as in the modified example of the above-mentioned 1-1 proxy mode, the processing of step SA311D can be performed in advance. As a result, the processing of step SA310D can be omitted. Moreover, by performing the processing of step SA40 in advance, the processing of step SA30D can also be omitted.

[0351] (2) Second Agent Model

[0352] As the second proxy mode, the management system 100 may be configured such that although the proxy user is given the proxy right, the authentication process is performed by the target user. Figure 2 In the example of the first terminal 4), the first terminal 4 may be a target user terminal owned by a user of the target. In one example, the utilization relationship between the first object and the second object may be generated by performing data communication between the target user terminal and the loading terminal through the mediation of a proxy user terminal owned by a proxy user who is a proxy user of the target user.

[0353] Fig.15 An example of the association setting process in the second proxy mode according to the present embodiment is schematically shown. Fig.16An example of the processing procedure of association establishment setting in the second proxy mode involved in this embodiment is shown. Fig.15 as well as Fig.16 In the embodiment, the first object is the object user (the agent client) of the agent. The first terminal 4E is the object user terminal, which is different from the above embodiment. Figure 2 as well as Figure 5 The proxy user terminal 6E corresponds to the first terminal 4 in the example. The proxy user terminal 6E is a terminal held by the proxy user. The proxy user is an example of a proxy individual, and the target user (proxy client) is an example of a proxy client individual (target individual). The hardware configuration of the first terminal 4E and the proxy user terminal 6E can be the same as that of the first terminal 4 in the above-mentioned embodiment. Fig.15 as well as Fig.16 In the example of FIG. 1 , it is assumed that the first mode of split transmission is adopted as the method of transmitting data used for authentication.

[0354] First, in step SF10, the control unit of the first terminal 4E operates as a proxy designation unit to accept the designation of a proxy user from the target user. The designation of the proxy user can be performed in the same manner as in the above-mentioned step SD10. If the proxy user is designated, the control unit of the first terminal 4E operates as a notification unit to exchange data with the proxy user terminal 6E of the designated proxy user and notify the granting of the proxy right. Accordingly, the proxy user terminal 6E receives the notification of the granting of the proxy right from the first terminal 4E. In one example, the notification may include the contact information of the target user. Similar to the data exchange between the first terminal 4 and the second terminal 5, the data exchange between the proxy user terminal 6E and the first terminal 4E may be performed by wireless or wired data communication, or by methods other than data communication such as reading a two-dimensional code. In addition, the first terminal 4E may directly grant the notification of the granting of the proxy right to the proxy user terminal 6E, or may indirectly send it via an external computer such as the first server 2. Thus, the first terminal 4E may cause the proxy user terminal 6E to perform an intermediary process of data exchange with the second terminal 5.

[0355] In step SF20, the control unit of the proxy user terminal 6E operates as a data exchange unit to perform data exchange with the second terminal 5. The control unit 51 of the second terminal 5 operates as a data exchange unit 511 to perform data exchange with the proxy user terminal 6E. Similar to the data exchange between the first terminal 4 and the second terminal 5, the data exchange between the proxy user terminal 6E and the second terminal 5 can be performed by wireless or wired data communication, or by a method other than data communication such as reading a two-dimensional code. The control unit of the proxy user terminal 6E gives the contact information of the target user to the second terminal 5. As a result, the proxy user terminal 6E causes the second terminal 5 to start data exchange with the first terminal 4E, and sends a request for association establishment setting to the management server 1 by cooperating with the first terminal 4E. The processing of steps SF10 and SF20 is an example of mediation by the proxy user terminal held by the proxy user.

[0356] In step SAB100E, the control unit 51 of the second terminal 5 acts as a data exchange unit 511, and performs data exchange with the first terminal 4E by accessing the contact information received from the proxy user terminal 6E. The control unit of the first terminal 4E acts as a data exchange unit, and performs data exchange with the second terminal 5 according to the access of the second terminal 5. The data exchange between the first terminal 4E and the second terminal 5 can basically be performed through wireless or wired data communication. However, the data exchange of step SAB100E does not necessarily have to be performed through data communication. In another example, the data exchange between the first terminal 4E and the second terminal 5 can be performed by a method other than data communication such as reading a two-dimensional code. In this case, the contact information of the target user can be omitted from the data of step SF10 and step SF20. The processing of step SF20 can be a simple trigger of the data exchange of step SAB100E.

[0357] The processing of step SA10E and step SB10E may be the same as step SA10 and step SB10 in the above-mentioned embodiment. The authentication processing of the user after step SA20 and the authentication processing of the object after step SB20 may be performed in the same manner as in the above-mentioned embodiment. As a result of performing these authentication processing, the management server 1 receives the authentication results of the user and the object. Thereafter, as in the above-mentioned embodiment, the management server 1 may perform the processing after step SC10. The result of the execution is that the correspondence between the object user and the object is set based on the authentication of the object user and the object. If the correspondence is set, the processing step of establishing the setting based on the association of the second proxy mode is terminated. During the period when the correspondence is set, the proxy user can exercise the authority of the object user (proxy entrustor) from the object.

[0358] In addition, the above Fig.16The processing steps are just an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. For example, in the case of adopting a method of exchanging data between the first terminal 4E and the second terminal 5 through data communication, the processing of step SA10E and step SA20 can be performed at any time after the access from the second terminal 5. The processing of step SA10E and step SA20 can be performed at least partially in parallel with the processing of step SB10E and step SB20. The processing of step SA20 can be performed before step SB20. When the first terminal 4E and the second terminal 5 are connected before the processing of step SB10E, the processing of step SA10E and step SA20 can be performed before step SB10E.

[0359] In addition, the configurations other than the above of the second proxy mode can appropriately apply the configurations of the above embodiment. For example, the transmission method of the data used for authentication can adopt a method other than the first mode of split transmission among the above transmission methods (the second to fourth modes of split transmission, collective transmission other than split transmission). Accordingly, the processing of step SA10E, step SA20, step SB10E, and step SB20 can be appropriately changed.

[0360] In addition, the configurations other than the above of the second proxy mode can appropriately apply the configurations of the above-mentioned 1-1 proxy mode and 1-2 proxy mode. For example, in the second proxy mode, at least one of the validity period of the proxy exercise and the authority (effective authority) allowed to be exercised by the proxy can also be specified. The management server 1 can generate the association establishment information D10 including the agent information. The management server 1 can generate the association establishment information D10 including information indicating whether the correspondence relationship is set by the proxy association establishment. The agent information can be provided to the first terminal 4E in step SB10E from the proxy user terminal 6E via the second terminal 5. As a result, in the first terminal 4E, it can be confirmed whether the access of the second terminal 5 is an access based on the mediation of the designated proxy user. The management server 1 can send a notification indicating the execution result of the association establishment setting to at least one of the first terminal 4E, the second terminal 5 and the proxy user terminal 6E. The set correspondence relationship can be canceled by the same method as the above-mentioned 1-1 proxy mode. In another example, the management server 1 can be configured not to accept the cancellation of the delegation from the proxy user terminal 6E. In still another example, the management server 1 may be configured to accept a cancellation of delegation from the proxy user terminal 6E via the first terminal 4E or the second terminal 5 .

[0361] (3) Third Agent Model

[0362] The first proxy mode and the second proxy mode enable the proxy user to exercise the rights of the object user during the period in which the correspondence between the object user and the object is set. In contrast, as the third proxy mode, the management system 100 may be configured to enable the object user to exercise the proxy rights granted by other users during the period in which the correspondence between the object user and the object is set. That is, the management system 100 may be configured to associate the proxy client with the object instead of associating the proxy user with the object. In the third proxy mode, the user terminal associated with the user (in Figure 2 In the example of the first terminal 4, the first terminal 4 may be a target user terminal held by the user. In the first identifier I10 and the second identifier I20, one of the identifiers corresponding to the user (in Figure 2 In the example, the first identifier I10) may be associated with the proxy rights of other users other than the user.

[0363] Fig.17 An example of the association setting process in the third proxy mode according to the present embodiment is schematically shown. Fig.18 An example of the processing steps for granting the proxy authority in the third proxy mode according to the present embodiment is shown. Fig.17 as well as Fig.18 In the embodiment, the first object is a user to whom the proxy right is granted. The first terminal 4F is a terminal of the object user, and is similar to the embodiment described above. Figure 2 as well as Figure 5 The other user terminal 6F corresponds to the first terminal 4 in the example. The other user terminal 6F is a terminal held by another user (agent entruster) who entrusts the agent to the object user. Typically, the other user is a user different from the object user who has an account in the same service (first server 2) as the object user. The object user who is granted the agency right is an example of an agent individual, and the other user (agent entruster) is an example of an agent entrusting individual (other individual). The hardware configuration of the first terminal 4F and the other user terminals 6F can be the same as that of the first terminal 4 in the above-mentioned embodiment.

[0364] First, in step SG10, the control unit of the other user terminal 6F operates as a proxy designation unit to accept the designation of a proxy user from the proxy requester (other user). The designation of a proxy user can be performed in the same manner as in step SD10 and the like.

[0365] In step SG101, the control unit of the other user terminal 6F accesses the first server 2. The control unit 21 of the first server 2 acts as an authentication unit 211 to perform user authentication of the other user terminal 6F that has received the access. The authentication of step SG101 can be the same as the authentication based on the identifier and inherent information in the above-mentioned steps SA301 and SB301. Typically, the authentication process of step SG101 is a login process. If the authentication is established, the control unit 21 of the first server 2 grants the proxy right to the object user designated as the proxy user according to the entrustment from the other user terminal 6F. The granting of the proxy right can be expressed in any data form. In one example, as a process of granting the proxy right, the control unit 21 can associate the information of the proxy entruster (for example, the identifier of the proxy entruster) with the user information O10A of the object user designated as the proxy user. Associating the information of the proxy entruster with the user information O10A of the object user is an example of associating the proxy right of other users other than the object user with the first identifier I10 of the object user. The management system 100 may be appropriately configured to enable the exercise of authority based on the proxy model by associating the information of the proxy client.

[0366] In step SG20, the control unit 21 of the first server 2 sends a notification for notifying that the proxy right of another user has been granted to the first terminal 4F of the target user designated as the proxy user. The control unit 21 may send the notification of the proxy right grant directly to the first terminal 4F, or may send it indirectly via an external computer such as another user terminal 6F. If the notification of the proxy right grant is completed, the processing step of the proxy right grant in the third proxy mode ends. In one example, regardless of Fig.18 Regardless of the processing of granting the proxy authority, the first terminal 4F can execute the association establishment processing for setting the correspondence with the object through the object user. In another example, the notification of the granting of the proxy authority becomes a trigger and the association establishment processing can be executed. The series of processing for setting the correspondence between the object user (first terminal 4F) and the object (second terminal 5) can be the same as the above-mentioned embodiment. The result of executing the association establishment processing is that the correspondence between the object user and the object is set based on the authentication of the object user and the object. If the correspondence is set, the processing steps of the association establishment setting based on the third proxy mode are terminated. During the period when the correspondence is set, the object user (proxy user) can exercise the authority of other users (proxy entrustors) from the object.

[0367] In addition, the above Fig.18The processing steps are merely an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. For example, in the case where the user list is maintained so as to be accessible from the first server 2 and the proxy user is designated on the first server 2, the processing of step SG10 can be executed by the first server 2 via other user terminals 6F after other user terminals 6F have accessed the first server 2. In this case, the processing of step SG101 can be executed before step SG10.

[0368] In addition, the configurations of the above-mentioned 1-1 proxy mode and the like can be appropriately applied to the configurations other than those described above of the third proxy mode. For example, in the third proxy mode, the management server 1 may generate association establishment information D10 including agent information. At least one of the validity period of the proxy exercise and the authority (effective authority) allowed to be exercised by the proxy may be specified. In this case, the proxy rights granted by other users may disappear upon the arrival of the specified validity period. The granted proxy rights may disappear due to the exercise of the specified effective authority. In addition, the first server 2 may be configured to delete the proxy rights granted by other users in response to a request from other users (proxy entrustors).

[0369] (feature)

[0370] According to this variation, each user can exercise the authority of the agent through the use of the object. In this way, the extensibility of the exercise of authority can be improved. For example, it is assumed that the authority information includes information related to the electronic prescription, and the authority of the object is to accept the medicine prescribed according to the electronic prescription. In this case, even if the user does not pick up the prescribed medicine himself, he can entrust the acceptance of the prescribed medicine to other users such as taxi drivers through the mobile object by granting the agent authority.

[0371] [5 Supplement]

[0372] The processes and means described in the present disclosure can be implemented in combination as long as no technical contradiction occurs.

[0373] Furthermore, a process described as being performed by one device may be shared and executed by a plurality of devices. Alternatively, a process described as being performed by different devices may be executed by one device. In a computer system, the hardware configuration that implements each function can be flexibly changed.

[0374] The present disclosure can also be implemented by supplying a computer program installed with the functions described in the above-mentioned embodiments to a computer, and having one or more processors of the computer read out the program and execute it. Such a computer program can be provided to the computer via a non-temporary computer-readable storage medium that can be connected to the system bus of the computer, or it can be provided to the computer via a network. Non-temporary computer-readable storage media include, for example, any type of disks such as magnetic disks (floppy (registered trademark) disks, hard disk drives (HDDs), etc.), optical disks (CD-ROMs, DVD disks, Blu-ray disks, etc.), read-only memories (ROMs), random access memories (RAMs), EPROMs, EEPROMs, magnetic cards, flash memories, optical cards, semiconductor drives (solid-state drives, etc.), and any type of medium suitable for storing electronic commands.

Claims

1. A management server, characterized in that: The invention comprises at least one processor, wherein the processor is configured to perform the following processing: Receiving, based on the generation of a utilization relationship between the first object and the second object, a first identifier of the first object, first inherent information of the first object, a second identifier of the second object, and second inherent information of the second object from at least one of a first terminal of the first object and a second terminal of the second object; requesting authentication of the first object to the first server by transmitting the received first identifier and the first unique information to the first server; receiving a result of authentication of the first object from the first server; requesting authentication of the second object to the second server by sending the received second identifier and the second unique information to the second server; receiving a result of authentication of the second object from the second server; and When the authentication of the first object and the second object is successful in the received authentication result, a correspondence relationship between the first identifier and the second identifier is set.

2. The management server according to claim 1, characterized in that: The processor is further configured to cancel the correspondence relationship in response to reception of a cancellation request from at least one of the first terminal and the second terminal or satisfaction of a predetermined cancellation condition.

3. The management server according to claim 1, characterized in that: Receiving the first identifier, the first inherent information, the second identifier, and the second inherent information from at least one of the first terminal and the second terminal is configured by receiving the second identifier and the second inherent information from the first terminal and receiving the first identifier and the first inherent information from the second terminal.

4. The management server according to claim 1, characterized in that: Receiving the first identifier, the first inherent information, the second identifier, and the second inherent information from at least one of the first terminal and the second terminal is configured by receiving the first identifier and the second inherent information from the first terminal and receiving the second identifier and the first inherent information from the second terminal.

5. The management server according to claim 1, characterized in that: Receiving the first identifier, the first inherent information, the second identifier, and the second inherent information from at least one of the first terminal and the second terminal is configured by receiving the second identifier and the first inherent information from the first terminal and receiving the first identifier and the second inherent information from the second terminal.

6. The management server according to claim 1, characterized in that: Receiving the first identifier, the first inherent information, the second identifier, and the second inherent information from at least one of the first terminal and the second terminal is performed by receiving the first identifier, the first inherent information, the second identifier, and the second inherent information from one of the first terminal and the second terminal.

7. The management server according to any one of claims 1 to 6, characterized in that: One of the first object and the second object is a user, One of the first terminal and the second terminal corresponding to the user is a user terminal associated with the user, The other of the first object and the second object is an object used by the user. One of the first terminal and the second terminal corresponding to the object to be used is a loading terminal loaded on the object to be used.

8. The management server according to claim 7, characterized in that: The object to be utilized is a moving object.

9. The management server according to claim 7, characterized in that: The user terminal associated with the user is a proxy user terminal held by a proxy user acting on behalf of the user.

10. The management server according to claim 9, characterized in that: The utilization relationship between the first object and the second object is generated by data communication between a target user terminal owned by the user and the proxy user terminal, and data communication between the proxy user terminal and the loading terminal.

11. The management server according to claim 7, characterized in that: The user terminal associated with the user is a target user terminal held by the user, The utilization relationship between the first object and the second object is generated by executing data communication between the object user terminal and the loading terminal through a proxy user terminal owned by a proxy user who acts as a proxy for the user.

12. The management server according to claim 7, characterized in that: The user terminal associated with the user is a target user terminal held by the user, The proxy right of a user other than the user is associated with one of the first identifier and the second identifier corresponding to the user.

13. A management method, characterized in that: The management server performs the following processing: Receiving, based on the generation of a utilization relationship between the first object and the second object, a first identifier of the first object, first inherent information of the first object, a second identifier of the second object, and second inherent information of the second object from at least one of a first terminal of the first object and a second terminal of the second object; requesting authentication of the first object to the first server by transmitting the received first identifier and the first unique information to the first server; receiving a result of authentication of the first object from the first server; requesting authentication of the second object to the second server by sending the received second identifier and the second unique information to the second server; receiving a result of authentication of the second object from the second server; as well as When the authentication of the first object and the second object is successful in the received authentication result, a correspondence relationship between the first identifier and the second identifier is set.

14. The management method according to claim 13, characterized in that: The management server further executes a process of canceling the correspondence relationship in response to reception of a cancellation request from at least one of the first terminal and the second terminal or satisfaction of a predetermined cancellation condition.

15. The management method according to claim 13, characterized in that: Receiving the first identifier, the first inherent information, the second identifier, and the second inherent information from at least one of the first terminal and the second terminal is configured by receiving the second identifier and the second inherent information from the first terminal and receiving the first identifier and the first inherent information from the second terminal.

16. The management method according to claim 13, characterized in that: Receiving the first identifier, the first inherent information, the second identifier, and the second inherent information from at least one of the first terminal and the second terminal is configured by receiving the first identifier and the second inherent information from the first terminal and receiving the second identifier and the first inherent information from the second terminal.

17. The management method according to claim 13, characterized in that: Receiving the first identifier, the first inherent information, the second identifier, and the second inherent information from at least one of the first terminal and the second terminal is configured by receiving the second identifier and the first inherent information from the first terminal and receiving the first identifier and the second inherent information from the second terminal.

18. The management method according to any one of claims 13 to 17, characterized in that: One of the first object and the second object is a user, One of the first terminal and the second terminal corresponding to the user is a user terminal associated with the user, The other of the first object and the second object is an object used by the user. One of the first terminal and the second terminal corresponding to the object to be used is a loading terminal loaded on the object to be used.

19. The management method according to claim 18, characterized in that: The object to be utilized is a moving object.

20. A non-transitory storage medium storing a command executable by one or more processors and causing the one or more processors to perform the following functions, characterized in that: The command causes the first terminal of the first object to execute the following processing when a utilization relationship is generated between the first object and the second object: During data exchange with a second terminal of the second object, the first inherent information of the first object is given to the second terminal so that the second terminal sends the first inherent information to the management server instead of the first terminal; acquiring second inherent information of the second object from the second object; as well as By sending the obtained second inherent information to the management server, the management server attempts to authenticate the first object based on the first inherent information and the second object based on the second inherent information, and when the authentication of the first object and the authentication of the second object are both established, the correspondence between the first identifier of the first object and the second identifier of the second object is set.

Images