System, management server, and management method

Abstract

The invention relates to a system, a management server, and a management method. The system is provided with: a management server; a plurality of first terminals respectively corresponding to the first objects; and a plurality of second terminals respectively corresponding to the second objects. The management server is configured to accept setting of a correspondence relationship between a first object and a second object by receiving a correlation establishment request corresponding to generation of a utilization relationship between the first object and the second object. The management server is configured to establish two or more correspondence settings with two or more different second objects for the same first object in response to accepting the settings of the correspondence based on the two or more association establishment requests related to the same first object, and to establish two or more correspondence settings with two or more different second objects for the same first object in response to accepting the settings of the correspondence based on the two or more association establishment requests related to the same first object. On the basis of the status information, the setting of one of the two or more correspondence relationships is activated, and the setting of the other correspondence relationships is not activated.

Description

Technical Field

[0001] The present disclosure relates to a system, a management server, and a management method. Background Art

[0002] Japanese Patent Application Laid-Open No. 2022-140747 proposes a fee collection system for collecting fees for services from vehicle users using a medium such as a card. Specifically, the fee collection system proposed in Japanese Patent Application Laid-Open No. 2022-140747 is configured to allocate a request for the use fee of a highway involving a target rental car to a target user based on the correspondence between the ID of the ETC (Electronic Toll Collection System) card, the company that rents the car, the date and time of use of the rental car, and the user of the rental car (charging information, registration information, settlement information, and use information). Summary of the invention

[0003] The present disclosure provides a system, a management server, and a management method for easily tracking the usage relationship between a first object and a second object.

[0004] The system involved in the first aspect of the present disclosure includes: a management server; a plurality of first terminals, each corresponding to each first object; and a plurality of second terminals, each corresponding to each second object. The plurality of first terminals and the plurality of second terminals are configured such that at least one of the first terminal corresponding to the first object and the second terminal corresponding to the second object sends an association establishment request to the management server based on the generation of a utilization relationship between the first object and the second object. The management server is configured to perform the following processing: accepting the setting of the correspondence relationship between the first object and the second object by receiving the association establishment request. The above-mentioned management server is configured to perform the following processing: in a case where two or more corresponding relationships are established with two or more different second objects for the same first object based on the above-mentioned setting of the corresponding relationship accepted based on the above-mentioned association establishment requests involving more than two first objects, the above-mentioned setting of one of the above-mentioned two or more corresponding relationships is activated and the above-mentioned settings of other corresponding relationships are inactivated based on status information obtained from the above-mentioned first object for which the above-mentioned two or more corresponding relationships are established and at least any one of the above-mentioned two or more second objects.

[0005] In the system according to the first aspect of the present disclosure, the management server may be configured to execute the following processing: according to the setting that establishes the activated correspondence, the exercise of the authority associated with the corresponding first object via the second object to which the activated correspondence is set is validated. According to the setting that establishes the inactivated correspondence, the management server may be configured to execute the following processing: according to the setting that establishes the inactivated correspondence, the exercise of the authority associated with the corresponding first object via the second object to which the inactivated correspondence is set is invalidated.

[0006] In the system according to the first aspect of the present disclosure, the situation information may include a selection based on the first object. Activating the setting of the one correspondence relationship may be configured by activating the setting of the correspondence relationship selected by the first object.

[0007] In the system according to the first aspect of the present disclosure, the status information may include a report of an execution result of the authentication process for the first object by the second terminal. Activating the setting of the one correspondence relationship may be configured by activating a setting of a correspondence relationship with a second object corresponding to the second terminal that has recently reported the execution result of the authentication process for the first object.

[0008] In the system involved in the first embodiment of the present disclosure, each of the first terminals may be equipped with a first positioning module. Each of the second terminals may be equipped with a second positioning module. The status information may include a first current position measured by the first positioning module of the first terminal corresponding to the first object, and a second current position measured by the second positioning module of the second terminal corresponding to the two or more second objects. Activating the setting of the one corresponding relationship may be constituted by activating the setting of the corresponding relationship of the second object that satisfies the condition of the utilization relationship between the second current position of the corresponding second terminal and the first current position of the first terminal.

[0009] In the system involved in the first embodiment of the present disclosure, the management server may be configured to further perform the following processing: after an activation correspondence setting is established with a second object of a first specified type, the establishment of other activation correspondence settings between the first object for which the activation correspondence is set and other second objects is prohibited by locking the activation correspondence setting until specified conditions are met.

[0010] In the system according to the first aspect of the present disclosure, the first object may be a user. The second object of the first predetermined type may be a moving object of a public transportation organization. The predetermined condition may be that payment for use of the moving object of the public transportation organization has been completed.

[0011] In the system involved in the first aspect of the present disclosure, the management server may be configured to, when a prescribed relationship between the first object and the second object for which the correspondence is set is established, maintain the correspondence in an activated or inactivated state without canceling the correspondence until the prescribed relationship is eliminated. The management server may be configured to, when a prescribed relationship between the first object and the second object for which the correspondence is set is established, cancel the correspondence after the prescribed relationship is eliminated.

[0012] In the system according to the first aspect of the present disclosure, the predetermined relationship may be an ownership relationship.

[0013] In the system according to the first aspect of the present disclosure, the first object may be a user, and the second object may be a mobile object owned by the user.

[0014] In the system according to the first aspect of the present disclosure, the first object may be a user. The second object may be a mobile object rented by the user. The predetermined relationship may be that the user rents the mobile object.

[0015] In the system according to the first aspect of the present disclosure, the management server may be further configured to cancel the correspondence relationship upon detecting termination of use of the second object after the correspondence relationship is established with the second object of the second predetermined type.

[0016] In the system according to the first aspect of the present disclosure, the first object may be a user. The second object may be a moving object. The second object of the second predetermined type may be a moving object of a public transportation system.

[0017] The management server involved in the second mode of the present disclosure includes a control unit. The control unit is configured to perform the following processing: receiving an association establishment request from at least one of the first terminal of the first object and the second terminal of the second object according to the generation of the utilization relationship between the first object and the second object. The control unit is configured to perform the following processing: accepting the setting of the correspondence between the first object and the second object by receiving the above-mentioned association establishment request. The control unit is configured to perform the following processing: in the case where the setting of the above-mentioned correspondence based on the above-mentioned two or more association establishment requests involving the same first object is accepted, and the setting of two or more correspondences with different two or more second objects is established for the same first object, respectively, based on the status information obtained from at least one of the above-mentioned first object and the above-mentioned two or more second objects for which the above-mentioned two or more correspondences are set, the above-mentioned setting of one of the above-mentioned two or more correspondences is activated, and the above-mentioned setting of the other correspondences is inactivated.

[0018] In the system involved in the second aspect of the present disclosure, the control unit may be configured to execute the following processing: according to the setting that establishes the activated correspondence, the exercise of the authority associated with the corresponding first object via the second object set with the activated correspondence is validated. The control unit may be configured to execute the following processing: according to the setting that establishes the inactivated correspondence, the exercise of the authority associated with the corresponding first object via the second object set with the inactivated correspondence is invalidated.

[0019] In the system according to the second aspect of the present disclosure, the status information may include a report of an execution result of the authentication process for the first object by the second terminal. Activating the setting of the one correspondence relationship may be configured by activating a setting of a correspondence relationship with the second object corresponding to the second terminal that has recently reported the execution result of the authentication process for the first object.

[0020] In the system involved in the second aspect of the present disclosure, the status information may include a first current position measured by a first positioning module of the first terminal corresponding to the first object, and a second current position measured by a second positioning module of the second terminal corresponding to the two or more second objects. Activating the setting of the one corresponding relationship may be constituted by activating the setting of the corresponding relationship of the second object that satisfies the condition of the utilization relationship between the second current position of the corresponding second terminal and the first current position of the first terminal.

[0021] In the system involved in the second embodiment of the present disclosure, the control unit may be configured to further perform the following processing: after an activation correspondence relationship is set up with a second object of the first specified type, the establishment of other activation correspondence relationships between the first object for which the activation correspondence relationship is set and other second objects is prohibited by locking the activation correspondence relationship setting until specified conditions are met.

[0022] In the system involved in the second aspect of the present disclosure, the control unit may be configured to, when a prescribed relationship is established between the first object and the second object for which the correspondence is set, maintain the correspondence in an activated or inactivated state without canceling the correspondence until the prescribed relationship is canceled. The control unit may be configured to, when a prescribed relationship is established between the first object and the second object for which the correspondence is set, cancel the correspondence after the prescribed relationship is eliminated.

[0023] The management method involved in the third embodiment of the present disclosure is executed by a management server. The above-mentioned management method includes receiving an association establishment request from at least one of the first terminal of the above-mentioned first object and the second terminal of the above-mentioned second object according to the generation of the utilization relationship between the first object and the second object. The above-mentioned management method includes accepting the setting of the correspondence between the above-mentioned first object and the above-mentioned second object by receiving the above-mentioned association establishment request. The above-mentioned management method includes, in the case of establishing two or more correspondences with two or more different second objects for the same first object according to the above-mentioned setting of the correspondence based on the acceptance of the above-mentioned setting of the correspondence involving two or more association establishment requests, activating the above-mentioned setting of one of the above-mentioned two or more correspondences and inactivating the above-mentioned settings of the other correspondences according to the status information obtained from at least one of the above-mentioned first object and the above-mentioned two or more second objects to which the above-mentioned two or more correspondences are set.

[0024] According to the present disclosure, it is possible to provide a technology for easily tracking the usage relationship between a first object and a second object. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] Hereinafter, features, advantages, technical and industrial significance of exemplary embodiments of the present invention will be described with reference to the accompanying drawings, in which like reference numerals represent like components, wherein:

[0026] Figure 1 An example of a scenario in which the present disclosure is applied is schematically shown.

[0027] Figure 2An embodiment of a scenario in which the present disclosure is applied is schematically shown.

[0028] Figure 3A An example of linkage information according to the present embodiment is schematically shown.

[0029] Figure 3B An example of user information according to the present embodiment is schematically shown.

[0030] Figure 3C An example of moving object information according to the present embodiment is schematically shown.

[0031] Figure 4A An example of a selection process of an association setting to be activated according to the present embodiment is schematically shown.

[0032] Figure 4B An example of a selection process of an association setting to be activated according to the present embodiment is schematically shown.

[0033] Figure 4C An example of a selection process of an association setting to be activated according to the present embodiment is schematically shown.

[0034] Figure 5 An example of a scenario in which an active association setting is locked according to the present embodiment is schematically shown.

[0035] Figure 6 An example of the process of releasing the association according to the present embodiment is schematically shown.

[0036] Figure 7 An example of a scenario in which the association setting according to the present embodiment is maintained in an activated or inactivated state is schematically shown.

[0037] Figure 8 An example of an execution scenario of the de-association according to the present embodiment is schematically shown.

[0038] Fig. 9 An example of a usage scenario of the association information according to the present embodiment is schematically shown.

[0039] Fig. 10A An example of the hardware configuration of the management server according to the present embodiment is schematically shown.

[0040] Fig. 10B An example of the hardware configuration of the first terminal according to the present embodiment is schematically shown.

[0041] Fig. 10C An example of the hardware configuration of the second terminal according to the present embodiment is schematically shown.

[0042] Fig.11 An example of the software configuration of each device according to the present embodiment is schematically shown.

[0043] Fig.12 An example of the processing procedure of association setting according to the present embodiment is shown.

[0044] Fig.13 An example of the processing procedure of releasing the association according to the present embodiment is shown.

[0045] Fig.14 An example of the association setting processing procedure when the first authentication method is adopted is schematically shown.

[0046] Fig.15 An example of the association establishment process when the second authentication method is adopted is schematically shown.

[0047] Fig.16 An example of the association setting processing procedure when the 3-1st authentication method is adopted is schematically shown.

[0048] Fig.17A An example of the association setting processing procedure when the 3-2 authentication method is adopted is schematically shown.

[0049] Fig. 17B Another example of the association setting process procedure when the 3-2 authentication method is adopted is schematically shown.

[0050] Fig.18A An example of the processing procedure of association establishment setting when the fourth authentication method is adopted is schematically shown.

[0051] Fig.18B Another example of the association setting processing procedure when the fourth authentication method is adopted is schematically shown. DETAILED DESCRIPTION

[0052] According to the system proposed in Japanese Patent Application Laid-Open No. 2022-140747, users can pay highway tolls using ETC even if they do not have their own ETC cards. However, the inventors of the present application have found that the system proposed in Japanese Patent Application Laid-Open No. 2022-140747 has the following problems.

[0053] That is, it can be considered that with the diversification of MaaS (Mobility as a Service), from the perspective of convenience such as efficiency of settlement, there is a demand for easily tracking the use of mobile bodies by users. In order to easily track the use of mobile bodies by users, in existing systems, the correspondence between the use date and time and the user can be maintained as use information based on the contract or reservation of the rental car. However, since the above-mentioned use date and time depends on the contract or reservation, the use information does not necessarily match the actual use of the rental car by the user. In addition, in vehicles that are used without a contract or reservation (such as private cars), the generation of use information is not originally envisioned. Therefore, according to the existing system, it is difficult to easily track the use of mobile bodies by users. In addition, the occurrence of this problem is not limited to the scenario of using vehicles. The same problem may also occur in the scenario of using mobile bodies other than vehicles (such as aircraft, ships, etc.) and the scenario of using multiple types of mobile bodies. In addition, the same problem may also occur in all use scenarios other than mobile bodies.

[0054] In order to solve the above problem, a system according to a first aspect of the present disclosure includes: a management server; a plurality of first terminals corresponding to each first object; and a plurality of second terminals corresponding to each second object. The plurality of first terminals and the plurality of second terminals are configured such that at least one of the first terminal corresponding to the first object and the second terminal corresponding to the second object sends a request for establishing an association to the management server according to the generation of a utilization relationship between the first object and the second object. The management server is configured to perform the following processing: accepting the setting of a correspondence relationship between the first object and the second object by receiving the request for establishing an association; and in the case of establishing two or more correspondence relationships with two or more different second objects for the same first object according to the setting of the correspondence relationship based on the acceptance of the two or more requests for establishing an association involving the same first object, activating the setting of one of the two or more correspondence relationships and inactivating the setting of the other correspondence relationships according to the status information obtained from at least one of the first object and the two or more second objects for which the two or more correspondence relationships are set.

[0055] In the first mode of the present disclosure, the utilization relationship between the first object and the second object can be tracked by setting the corresponding relationship between the first object and the second object (association establishment setting) and activating the association establishment setting. In addition, in the first mode of the present disclosure, multiple association establishment settings are allowed for one first object (an individual of the first object). Moreover, the utilization relationship can be tracked by switching the states (activated / inactivated) of multiple association establishment settings. In the case where multiple association establishment settings are not allowed for one first object, the setting and cancellation of association establishment are repeated every time the utilization relationship is generated and disappeared, which may lead to an increase in trouble. In particular, in the case of repeated generation and disappearance of the same utilization relationship, repeated association establishment setting and cancellation of the same content may lead to an increase in useless processing costs. In contrast, in the first mode of the present disclosure, in at least some scenarios, even if the setting and cancellation of association establishment are not repeated, the generation and disappearance of the utilization relationship can be handled by switching the state. As a result, the management of association establishment can be simplified. Therefore, according to the first mode of the present disclosure, the utilization relationship between the first object and the second object can be easily tracked.

[0056] In addition, the method of the present disclosure may not be limited to the above-mentioned examples. As other methods of the system involved in the above-mentioned method, one aspect of the present disclosure may be an information processing device that implements all or part of the above-mentioned components, or an information processing method, or a program, that is, a mechanically readable storage medium such as a computer storing such a program. Here, the mechanically readable storage medium is a medium that stores information such as programs through electrical, magnetic, optical, mechanical or chemical effects. The information processing device may be at least any one of the management server, the first terminal and the second terminal involved in the above-mentioned method. In addition, the system involved in the above-mentioned method may also include at least one of the first server participating in the authentication of the first object and the second server participating in the authentication of the second object.

[0057] For example, the management server involved in the second embodiment of the present invention may have a control unit, which is configured to perform the following processing: receiving an association establishment request from at least one of the first terminal of the first object and the second terminal of the second object based on the generation of a utilization relationship between the first object and the second object; accepting the setting of the correspondence between the first object and the second object by receiving the association establishment request; and in the case of establishing two or more correspondences with two or more different second objects for the same first object based on the acceptance of the setting of the correspondence based on two or more association establishment requests involving the same first object, activating the setting of one of the two or more correspondences and inactivating the settings of the other correspondences based on status information obtained from the first object for which the two or more correspondences are established and at least any one of the two or more second objects.

[0058] In addition, for example, the management method involved in the third embodiment of the present invention may be an information processing method in which a management server performs the following processing: receiving an association establishment request from at least one of the first terminal of the first object and the second terminal of the second object based on the generation of a utilization relationship between the first object and the second object; accepting the setting of the correspondence between the first object and the second object by receiving the association establishment request; and in the case of establishing two or more correspondences with two or more different second objects for the same first object based on the acceptance of the setting of the correspondence based on two or more association establishment requests involving the same first object, activating the setting of one of the two or more correspondences and inactivating the settings of the other correspondences based on status information obtained from the first object for which the two or more correspondences are established and at least any one of the two or more second objects.

[0059] Hereinafter, an embodiment (hereinafter also referred to as "this embodiment") involved in one aspect of the present disclosure is described based on the accompanying drawings. Among them, the present embodiment described below is only an illustration of the present disclosure in all points. Various improvements or deformations can be made without departing from the scope of the present disclosure. When implementing the present disclosure, a specific structure corresponding to the embodiment can be appropriately adopted. Among them, the data appearing in this embodiment is described by natural language, and more specifically, it is specified by pseudo-language, instructions, parameters, machine language, etc. that can be recognized by a computer.

[0060] [1 Application example]

[0061] Figure 1An example of a scenario in which the present disclosure is applied is schematically shown. The system 100 involved in this embodiment is composed of a management server 1, a plurality of first terminals 4, and a plurality of second terminals 5. The management server 1 is one or more computers configured to record the correspondence (association establishment) between the first object VA and the second object WA. Each first terminal 4 corresponds to each first object VA, and each second terminal 5 corresponds to each second object WA.

[0062] In the present embodiment, a plurality of first terminals 4 and a plurality of second terminals 5 are configured such that at least one of the first terminal 4 corresponding to the first object VA and the second terminal 5 corresponding to the second object WA sends an association establishment request to the management server 1 based on the generation of a utilization relationship between the first object VA and the second object WA. As an example, a utilization relationship is generated between the first object VA and the second object WA on a one-to-one basis. That is, a utilization relationship is generated between one first object VA and one second object WA. One first object VA is an individual of the first object VA, and one second object WA is an individual of the second object WA. An individual with which a utilization relationship is generated can be referred to as a "corresponding individual" or an "object individual". At least one of the first terminal 4 corresponding to the corresponding individual of the first object VA and the second terminal 5 corresponding to the corresponding individual of the second object WA sends an association establishment request to the management server 1 based on the generation of the utilization relationship (step S10).

[0063] Accordingly, the management server 1 receives an association establishment request from at least one of the first terminal 4 of the first object VA and the second terminal 5 of the second object WA. The management server 1 accepts the setting of the correspondence between the first object VA and the second object WA in response to the reception of the association establishment request (step S20). The management server 1 sets the correspondence between the corresponding individual of the first object VA and the corresponding individual of the second object WA in response to the accepted association establishment request (step S30).

[0064] In this process, when the corresponding individual of the first object VA that becomes the target has not been set up with a corresponding relationship with other second objects WA (that is, the same first object VA has not been set up with two or more corresponding relationships with two or more different second objects WA), no conflict in the association establishment setting occurs. Therefore, the management server 1 can directly set an activated corresponding relationship between the corresponding individual of the first object VA and the corresponding individual of the second object WA. The setting that no corresponding relationship is established with other second objects WA may include, in addition to the setting that no corresponding relationship exists with other second objects WA regardless of the state (activated / inactivated), an inactivated corresponding relationship exists with other second objects WA but no activated corresponding relationship exists.

[0065] On the other hand, in the case where a corresponding relationship with other second objects WA has already been established for the corresponding individual of the first object VA, a conflict in the association establishment setting will occur. Already established a corresponding relationship with other second objects WA means that two or more corresponding relationships with different two or more second objects WA are respectively established for the same first object VA according to the setting of the corresponding relationship involved in the acceptance of two or more association establishment requests related to the same first object VA. Already established a corresponding relationship with other second objects WA can be constituted by the existence of an activated corresponding relationship with other second objects WA. In this case, the management server 1 obtains status information ST10 from the first object VA with the setting of establishing two or more corresponding relationships and at least one of the two or more second objects WA. Then, the management server 1 activates the setting of one of the two or more corresponding relationships and inactivates the setting of the other corresponding relationships based on the obtained status information ST10. Thus, the management server 1 coordinates the conflict in the association establishment setting.

[0066] In addition, when a utilization relationship is generated between the first object VA and the second object WA, data exchange can be performed between the first terminal 4 corresponding to the corresponding individual of the first object VA and the second terminal 5 corresponding to the corresponding individual of the second object WA. Along with this data exchange, an association establishment request can be executed. A series of processes from the association establishment request to the association establishment setting can be performed in real time according to the generation of the utilization relationship. The corresponding relationship (association establishment) maintained in an activated or inactivated state can be canceled at any time. According to the disappearance of the utilization relationship, the activated corresponding relationship can be changed to inactivated or canceled.

[0067] In addition, as long as each individual for which a corresponding relationship is set can be determined, the form of expression of the information indicating the setting of the corresponding relationship may not be particularly limited and may be appropriately determined according to the implementation method. In one example, a first identifier I10 may be assigned to each first object VA, and each individual of the first object VA may be identified by the first identifier I10. Similarly, a second identifier I20 may be assigned to each second object WA, and each individual of the second object WA may be identified by the second identifier I20. Accordingly, setting the corresponding relationship between the corresponding individuals of the first object VA and the corresponding individuals of the second object WA may be constituted by setting the corresponding relationship between the first identifier I10 assigned to the corresponding individual of the first object VA and the second identifier I20 assigned to the corresponding individual of the second object WA. That is, the setting of the corresponding relationship may also be expressed using the first identifier I10 and the second identifier I20.

[0068] As described above, in the present embodiment, by setting the corresponding relationship between the first object VA and the second object WA (association establishment setting) and activating the process, it is possible to track the utilization relationship between the corresponding individual of the first object VA and the corresponding individual of the second object WA. In addition, in the present embodiment, for one individual of the first object VA, an association establishment setting is allowed with each of multiple individuals of the second object WA. In the case where the association establishment setting for the corresponding individual of the first object VA conflicts due to the establishment of multiple association establishment settings, the conflict is coordinated by switching the state (activated / inactivated). By coordinating the conflict of the association establishment setting, the utilization relationship related to the corresponding individual of the first object VA can be appropriately tracked. In the case where multiple association establishment settings are not allowed for each individual of the first object VA, the association establishment setting and cancellation are repeated every time the utilization relationship is generated and disappeared, which may lead to an increase in trouble. In particular, in the case of repeated generation and disappearance of the same utilization relationship, the association establishment setting and cancellation of the same content are repeated, which may lead to an increase in useless processing costs. In contrast, in the present embodiment, in the case of tracking at least a part of the utilization relationship, even if the association establishment setting and cancellation are not repeated, the generation and disappearance of the utilization relationship can be handled by switching the state. Thus, the management of the association establishment can be simplified. Therefore, according to the present embodiment, the utilization relationship between the first object VA and the second object WA can be easily tracked.

[0069] (Target)

[0070] The first object VA and the second object WA are not particularly limited as long as they are objects with which a utilization relationship can be established, and can be appropriately selected according to the implementation method. The first object VA and the second object WA can be any object, a person, other creatures, etc. Any object can include a virtual object. The utilization relationship can be established, for example, by one party using the other party, one party holding the other party, one party combining with the other party, one party connecting with the other party, etc., to generate a real or virtual relationship between at least two things. The system 100 of the present disclosure can be used in any scenario of tracking the correspondence between two or more things.

[0071] Among them, in this embodiment, when establishing the association establishment setting for the corresponding individual of the first object VA with each of the multiple individuals of the second object WA, the management server 1 performs a coordination process of selecting one association establishment setting from the multiple association establishment settings as the active association establishment setting. In contrast, the processing involved in the association establishment setting for the corresponding individual of the second object WA with each of the multiple individuals of the first object VA can be the same as that of the first object VA, or it can be different. That is, when establishing the association establishment setting for the corresponding individual of the second object WA with each of the multiple individuals of the first object VA, the management server 1 can perform a coordination process of selecting one association establishment setting from the multiple association establishment settings as the active association establishment setting in the same way as the first object VA. Alternatively, the management server 1 may not perform the coordination process, but allow multiple active association establishment settings for the same second object WA. For example, it is assumed that the first object VA is a user and the second object WA is a mobile object. In the case where multiple users can use the mobile object (for example, the mobile object is a vehicle that multiple people can ride), the active association establishment setting for each of the multiple users of the same mobile object can be appropriately established. In such a case, multiple activated association establishment settings for the same second object WA may be allowed. Of the two objects tracking the utilization relationship, the object that does not allow multiple activated association establishment settings may be selected as the first object VA, and the object that allows multiple activated association establishment settings may be selected as the second object WA.

[0072] (terminal)

[0073] Each terminal (4, 5) is related to each object (VA, WA). The relationship between each terminal (4, 5) and each object (VA, WA) may not be particularly limited and may be appropriately determined according to the implementation method. In one example, each first terminal 4 may be carried by the corresponding first object VA, and each second terminal 5 may be carried by the corresponding second object WA. Carrying may include being temporarily or permanently equipped inside or outside the object, being held by the object (person), and being held by a person related to the object (object). Equipping may include loading. Loading includes being placed on the object at least temporarily when the object is used, in addition to always being placed on the object. Loading may include being held by the user of the object. In addition, either the first terminal 4 or the second terminal 5 may be the object itself. In addition, with respect to each terminal (4, 5), multiple terminals may be used as terminals of the same individual, such as when a user shares an account among multiple terminals. In this case, multiple terminals used by the same individual may be interpreted as one terminal of one individual.

[0074] (Object Information)

[0075] In one example, in order to show the details of each individual of the first object VA, the first object information O10 related to the first object VA can be used. The first object information O10 can include a first identifier I10. Similarly, in order to show the details of each individual of the second object WA, the second object information O20 related to the second object WA can be used. The second object information O20 can include a second identifier I20. The first object information O10 and the second object information O20 can be stored in any storage area. At least a part of the first object information O10 and the second object information O20 can be stored so as to be accessible from at least any one of the management server 1, the external server, and each terminal (4, 5).

[0076] The first object information O10 and the second object information O20 can be appropriately managed. Figure 1 In the example, the first server 2 may be configured to manage the first object information O10, and the second server 3 may be configured to manage the second object information O20. The first server 2 and the second server 3 may each be configured by one or more server devices. The first object information O10 may be stored in a memory resource provided at least one of the inside and the outside of the first server 2 in a manner accessible from the first server 2. The second object information O20 may be stored in a memory resource provided at least one of the inside and the outside of the second server 3 in a manner accessible from the second server 3. The internal memory resources may include, for example, RAM (Random Access Memory), an auxiliary storage device, a storage medium, etc. The external memory resources may include, for example, an external storage device, an external computer (NAS: Network Attached Storage, etc.), etc. In another example, each object information (O10, O20) may be stored in the memory resource of the management server 1.

[0077] The unit for managing each object information (O10, O20) may not be particularly limited and may be appropriately determined according to the implementation method. At least one of the first object information O10 and the second object information O20 may be centrally (unified) managed or decentralized (independently) managed for each arbitrary group. The server devices constituting each server (2, 3) may be equipped by more than one operating organization (entity). At least one of the first server 2 and the second server 3 may be equipped by multiple operating organizations. In the case of being equipped by multiple operating organizations, the object information may be shared (i.e., centrally managed) or decentralized managed for each operating organization.

[0078] In addition, in one example, at least one party that sends an association establishment request and accepts the setting of a corresponding relationship may include at least one party that authenticates the corresponding individual of the first object VA and the corresponding individual of the second object WA. The authentication of the corresponding individuals can be performed by any method. The authentication process can be performed by at least one of each terminal (4, 5), an external server (for example, the first server 2, the second server 3) and the management server 1. In one example, each object information (O10, O20) may include information used in the authentication of each object (VA, WA) (registration completion inherent information, etc.). In another example, each server (2, 3) may issue information (time-limited certificate) used in the authentication of each object (VA, WA). When at least a part of the authentication process is performed by an external server or the management server 1, the association establishment request may include data used in the authentication. The management server 1 may be configured to perform the process of setting the association establishment (step S30) only when the authentication is established.

[0079] (Identifier)

[0080] In one example, in order to identify each individual of each object (VA, WA), each identifier (I10, I20) can be used. As long as each identifier (I10, I20) can identify each individual of each object (VA, WA), its data form and composition may not be particularly limited and may be appropriately selected according to the implementation method. In one example, each identifier (I10, I20) may be composed of a symbol column including numbers, characters, etc. In another example, each identifier (I10, I20) may use inherent information such as identification information inherent to each object (VA, WA) and information from each terminal (4, 5). The identification information inherently assigned may be, for example, a car registration number, a vehicle identification number (VIN: Vehicle Identification Number), a personal number, etc. In the case of assigning an IC tag to an object, the identification information inherently assigned may include information maintained by the IC tag. The information from each terminal (4, 5) may be, for example, a MAC address (Media Access Control address), terminal identification information (IMEI: International Mobile Equipment Identifier, IMSI: International Mobile Subscriber Identity, MEID: Mobile Equipment Identifier, ICCID: Integrated Circuit Card ID, other serial numbers, etc.), etc.

[0081] (Management Server)

[0082] The management server 1 is configured to set the correspondence between the first object VA and the second object WA according to the association establishment request from at least one of the first terminal 4 and the second terminal 5. The management server 1 may directly receive the association establishment request from at least one of the first terminal 4 and the second terminal 5, or may indirectly receive it via an external computer (e.g., the first server 2, the second server 3, etc.). That is, sending the association establishment request to the management server 1 may include directly sending the association establishment request to the management server 1 and indirectly sending it via the external computer. In one example, the indirect sending may be configured by using the external computer to relay only the association establishment request. In another example, the indirect sending may be configured by sending the entrustment of the processing involved in the association establishment to the external computer, such as entrusting the authentication of each object (VA, WA) to each server (2, 3) and sending the authentication result to the management server 1, and causing the external computer to send certain information to the management server 1 according to the result of its execution. That is, the association establishment request may be sent from the external computer to the management server 1 as a result of data communication for other purposes to the external computer.

[0083] The management server 1 may be configured to set an activated correspondence between the first object VA and the second object WA according to the generation of the utilization relationship, or to update the state of the correspondence from inactive to active. The association establishment request (the delegation of the association establishment setting) may include a request to establish a new association establishment setting and a request to change the state of an existing association establishment setting from inactive to active. When there is no association establishment setting between the corresponding individuals, the association establishment request may consist of a request to establish a new association establishment setting. When there is an association establishment setting between the corresponding individuals, the association establishment request may consist of a request to change the state of the corresponding existing association establishment setting.

[0084] Information indicating whether there is an association establishment setting between each corresponding individual can be appropriately managed. In one example, at least one of the first terminal 4 and the second terminal 5 can determine whether there is an association establishment setting between each corresponding individual by referring to the association establishment information D10 before sending the association establishment request. In another example, it can be configured so that at least one of the first terminal 4 and the second terminal 5 records the history of past association establishment requests. By referring to the history, at least one of the first terminal 4 and the second terminal 5 can determine whether there is an association establishment setting between each corresponding individual. The past history records can be generated by individual processing of the terminal. The past history records can also be generated by sharing the association establishment information D10 of the corresponding individual by the management server 1. At least one of the first terminal 4 and the second terminal 5 can send a request to establish a new association establishment setting or a request to change the state of the corresponding existing association establishment setting to an activated request as the association establishment request based on the result of the determination.

[0085] In another example, the first terminal 4 and the second terminal 5 may send an association establishment request without distinguishing whether there is an association establishment setting between each corresponding individual. In this case, it can be determined whether there is already an association establishment setting between each corresponding individual when processing the association establishment request. For example, the management server 1 can determine whether there is an existing association establishment setting between the corresponding individual of the first object VA and the corresponding individual of the second object WA specified by the association establishment request by referring to the association establishment information D10. In addition, for example, whether there is already an association establishment setting between each corresponding individual can also be determined by an external computer such as the first server 2 and the second server 3. In one example, the external computer can determine whether there is an association establishment setting for the object by referring to the association establishment information D10. In another example, the external computer can be configured to record the history of association establishment independently from the association establishment information D10, and determine whether there is an association establishment setting for the object by referring to the history. The history of association establishment can be generated by individual processing of the external computer, or it can be generated by at least partially sharing the association establishment information D10 with the management server 1. The management server 1 may execute either a process of establishing a new association setting or a process of changing the state of the corresponding existing association setting to active, according to the result of the determination.

[0086] In an example of the present embodiment, when there is no existing activated association establishment setting with other individuals of the second object WA, the management server 1 can establish a new corresponding relationship setting or change the state of the designated existing corresponding relationship to activated according to the association establishment request. Thus, the management server 1 can set an activated corresponding relationship between each corresponding individual. The situation where there is no existing activated association establishment setting with other individuals of the second object WA may include: a situation where there is no existing association establishment setting with other individuals of the second object WA for the corresponding individual of the first object VA, and a situation where although there is an existing association establishment setting with other individuals of the second object WA for the corresponding individual of the first object VA, all existing association establishment settings with other individuals of the second object WA are not activated.

[0087] On the other hand, in the case where there are existing activated association establishment settings with other individuals of the second object WA, if an activated association establishment setting is directly established according to the association establishment request (i.e., a new activated association establishment setting is established or the status of the corresponding existing association establishment setting is changed to activated), multiple activated association establishment settings are established for the same individual of the first object VA, and a conflict of association establishment settings will occur. In view of this, the management server 1 makes the setting of one corresponding relationship active and the setting of other corresponding relationships inactive according to the status information ST10 through the above-mentioned coordination processing. Thus, the management server 1 eliminates the conflict of association establishment settings. The coordination rules based on the status information ST10 (i.e., the method of selecting the activated corresponding relationship) can be appropriately determined according to the implementation method. In a simple example, the management server 1 can set the status of the corresponding relationship specified by the earliest association establishment request to active and the status of other corresponding relationships to inactive. In this case, the status information ST10 can be composed of arbitrary information that can be judged as the earliest. In one example, the status information ST10 may include information such as a timestamp, a sending time of the association establishment request, a receiving time of the association establishment request, and a receiving time of the association establishment request. Another example of the coordination rule will be described later ( Figure 4A to Figure 4C ).

[0088] In an example of the present embodiment, authentication processing of at least one of the first object VA and the second object WA can be performed in association with the association establishment request. For example, when establishing a new association establishment setting request, authentication processing of at least one of the first object VA and the second object WA can be performed. When changing the state of the existing association establishment setting request, the same authentication processing as the request to establish a new association establishment setting can be performed. However, if this method is adopted, repeating the same processing may lead to an increase in processing costs. In view of this, when changing the state of the existing association establishment setting request, at least a part of the authentication processing can be omitted. Therefore, it is preferred that the processing when changing the state of the existing association establishment setting request is simpler than the processing when establishing a new association establishment setting request. For example, at least one of the first terminal 4 and the second terminal 5 can appropriately obtain data used in authentication when establishing a new association establishment setting request. By storing the data used in authentication obtained when establishing the new association establishment setting request, the processing of obtaining the data used in authentication can be omitted when changing the state of the existing association establishment setting request. In addition, for example, the authentication processing itself can also be omitted. In one example, when a new association establishment setting is requested, authentication processing of both the first object VA and the second object WA is performed, whereas when a request is made to change the state of an existing association establishment setting, authentication processing of at least one of the first object VA and the second object WA can be omitted. In another example, when a new association establishment setting is requested, authentication processing of at least one of the first object VA and the second object WA is performed, whereas when a request is made to change the state of an existing association establishment setting, authentication processing of both the first object VA and the second object WA can be omitted. According to one example of the present embodiment, a reduction in processing cost can be expected.

[0089] In addition, the management server 1 may be configured to cancel the correspondence between the first object VA and the second object WA according to the disappearance of the utilization relationship, or update the state of the correspondence from active to inactive. When the utilization relationship disappears, at least one of the first terminal 4 and the second terminal 5 may send a request for association cancellation (cancellation request) to the management server 1. The cancellation request, like the association request, may be sent directly or indirectly to the management server 1. The cancellation request may include a request for invalidation of the corresponding association setting (cancellation in a narrow sense) and a request for changing the state of the existing association setting from active to inactive. The invalidation of the association setting may include deleting the association setting, providing information indicating cancellation, and indicating the establishment of a cancellation condition. The information provided indicating cancellation may include, for example, adding a cancellation time, setting a flag indicating cancellation, accumulating transactions indicating cancellation, etc. The establishment of the cancellation condition may include, for example, the expiration of a set validity period, etc. It is possible to appropriately select whether to invalidate the association setting or change the state of the association setting in at least one of the terminals (4, 5), the management server 1, and the external computer (for example, the first server 2, the second server 3, etc.). In one example, after the correspondence is invalidated, the invalidated correspondence can be treated as non-existent. Accordingly, after being invalidated, when an association establishment request is issued again regarding the same individual combination of the first object VA and the second object WA, the management server 1 can execute the process of establishing a new association establishment setting. While maintaining the setting of the correspondence (association establishment), the status of the correspondence can be updated at any time other than the above. Among them, the broad sense of release (invalidation or inactivation) can be renamed as "elimination", and the narrow sense of release (invalidation) can be called "release".

[0090] In one example of the present embodiment, similar to the above-mentioned association establishment request, authentication processing of at least one of the first object VA and the second object WA can be performed in association with the release request. When requesting to change the state of the existing association establishment setting, the same authentication processing as when requesting to invalidate the association establishment setting can also be performed. When requesting to change the state of the existing association establishment setting, at least a part of the authentication processing can be omitted. Thus, the processing when requesting to change the existing association establishment setting can be configured to be simpler than the processing when requesting to invalidate the association establishment setting. In another example, authentication processing of at least one of the first object VA and the second object WA is performed when the above-mentioned association establishment request is made, whereas at least a part of the authentication processing can be omitted when the release request is made. Thus, the processing when the release request is made can be configured to be simpler than the processing when the association establishment request is made.

[0091] Among them, the association establishment request and the release request can be configured to specify the corresponding individual of the processing object by any method. In a typical example, the association establishment request and the release request can be configured to specify the corresponding individual of the processing object by including the first identifier I10 and the second identifier I20 respectively. However, the method of specifying the corresponding individual of the processing object may not be limited to such an example, and may be appropriately changed according to the implementation method. In another example, at least one of the first identifier I10 and the second identifier I20 can be omitted by using alternative information in at least one of the association establishment request and the release request. For example, an identifier can be assigned as alternative information to the combination (association establishment setting) of the corresponding individuals of the first object VA and the second object WA. The assignment of the identifier can be performed at any time, such as the first association establishment setting. By including the identifier in at least one of the association establishment request and the release request, it can be configured to specify the corresponding individuals of each object (VA, WA) that becomes the processing object without including at least one of the first identifier I10 and the second identifier I20.

[0092] Regarding the association establishment request, the method of specifying each corresponding individual during the period of requesting to establish a new association establishment setting and requesting to change the state of the existing association establishment setting can be the same or different. In one example, the request to change the state of the existing association establishment setting can be constructed to specify each corresponding individual more conveniently than the request to establish a new association establishment setting. For example, the request to establish a new association establishment setting is constructed to include the first identifier I10 and the second identifier I20, and in contrast, the request to change the state of the existing association establishment setting can be constructed to include the above-mentioned replacement information. Similarly, regarding the cancellation request, the method of specifying each corresponding individual during the period of requesting to invalidate the association establishment setting and requesting to change the state of the existing association establishment setting can be the same or different. In one example, the request to change the state of the existing association establishment setting can be constructed to specify each corresponding individual more conveniently than the request to invalidate the association establishment setting. For example, the request to invalidate the association establishment setting is constructed to include the first identifier I10 and the second identifier I20, and in contrast, the request to change the state of the existing association establishment setting can be constructed to include the above-mentioned replacement information.

[0093] The management server 1 may be composed of one or more server devices. In the present embodiment, the management server 1 may be configured to record information related to the generation and disappearance of the correspondence between the first object VA and the second object WA as association establishment information D10. The association establishment information D10 may be stored in a memory resource provided at least one of the internal and external memory resources of the management server 1. The internal memory resources may include, for example, RAM, auxiliary storage devices, storage media, etc. The external memory resources may include, for example, external storage devices, external computers (NAS, etc.), etc.

[0094] The obtained association establishment information D10 can be used in various scenarios. In one example, the association establishment information D10 can be used to track the relationship between the first object VA and the second object WA. As a specific example, during the period when the corresponding relationship between the first object VA and the second object WA is set, the association establishment information D10 can be used to enable the authority to establish an association with either the first object VA and the second object WA (the first object information O10 and the second object information O20) to be exercised by the other party. That is, the association establishment information D10 can be used to validate the authority of either the first object VA and the second object WA to be exercised by the other party based on the establishment of the association between the first object VA and the second object WA (described later). Figure 2 ).

[0095] In one example of the present embodiment, since the association establishment information D10 indicates a combination of a first object VA and a second object WA with which a corresponding relationship is set, the association establishment information D10 may include information of the first identifier I10 and the second identifier I20 of the corresponding individuals. The management server 1 may appropriately obtain the identifiers (I10, I20) of the objects. In one example, the management server 1 may not retain the information of the first identifier I10 and the second identifier I20 with which a corresponding relationship is set in advance, but may obtain the information from at least one of the servers (2, 3) and the terminals (4, 5) each time. In another example, the management server 1 may retain the information of at least one of the first identifier I10 and the second identifier I20 with which a corresponding relationship is set in advance.

[0096] Among them, the relationship between the management server 1 and the operating organizations of each server (2, 3) can be arbitrary. In one example, the operating organization of the management server 1 can overlap with the operating organization of at least one of the first server 2 and the second server 3. In another example, the operating organization of the management server 1 can be different from the operating organizations of the first server 2 and the second server 3. The system 100 of the present disclosure can be produced by the management server 1 and each terminal (4, 5) being connected via a network and being equipped in a state where the above-mentioned information processing can be performed according to the intention of the operating organization of the management server 1. In the case where each server (2, 3) participates in the information processing related to the establishment of the association (for example, the authentication processing), it can be interpreted that each server (2, 3) is included in the system 100. In this case, the system 100 of the present disclosure can be produced by the management server 1 being connected to each server (2, 3) via a network and being equipped in a state where each server (2, 3) can perform the information processing related to the establishment of the association.

[0097] (Application example)

[0098] In one example, one of the first object VA and the second object WA may be a user. One of the first terminal 4 and the second terminal 5 that corresponds to the user may be a user terminal associated with the user. The other of the first object VA and the second object WA may be an object used by the user. One of the first terminal 4 and the second terminal 5 that corresponds to the object may be a loading terminal loaded on the object. According to one example of the present embodiment, the utilization relationship between the user and the object can be easily tracked.

[0099] As long as the object can be used by the user, its type is not particularly limited and can be appropriately selected according to the implementation method. In one example, the object can be a mobile body (mobility). According to an example of this embodiment, the utilization relationship between the user and the mobile body can be tracked. Among them, the type of mobile body can be appropriately selected. The mobile body can be, for example, a vehicle, a railway vehicle, an aircraft (aircraft, unmanned aircraft, etc.), a ship, etc. The mobile body can be at least any one of a manually controlled manned aircraft and an automatically controlled unmanned aircraft. In the case where the mobile body is a vehicle, the type of vehicle can be arbitrarily selected. The type of vehicle can be selected, for example, from two-wheeled vehicles, three-wheeled vehicles, four-wheeled vehicles, etc. The vehicle can include a private car, a rental car, a shared car, a taxi, a bus, etc. The vehicle can be at least any one of an autonomous driving vehicle and a manually driven vehicle. The loading terminal can be called a mobile terminal.

[0100] Figure 2 An embodiment of a scenario in which the system 100 of the present disclosure is applied is schematically shown. Figure 2In an example, the first object VA is a user and the second object WA is a mobile object. Figure 2 In the description of the example, for convenience, it is assumed that "1" is related to the user and "2" is related to the mobile body. However, the correspondence between "1" and "2" is not limited to Figure 2 "First" and "second" can be replaced. That is, the second object WA can be a user and the first object VA can be a mobile body.

[0101] When the first object VA is a user, an example of the first terminal 4 is a user terminal. The user terminal can be any computer such as a portable terminal (smartphone, etc.), a dedicated device (electronic key device, etc.), or other computer devices. In a typical case, the user terminal can be carried by the user who is the object of association establishment (each individual of the first object VA). The user's account can be shared among multiple computers, and accordingly, each computer sharing the account can be used as the user terminal (first terminal 4) of the same user.

[0102] An example of the first identifier I10 is a user identifier (user ID, my ID). The user identifier may be, for example, an ID of a user account, a personal number, identification information of a user terminal (e.g., a MAC address, terminal identification information), etc. An example of the first object information O10 is user information O10A. User information O10A may include any information related to the user. In one example, the user information O10A may be associated with various information E10 used to exercise the authority by including information related to the authority of the corresponding user (the corresponding individual of the user). Various information E10 may include, for example, public personal authentication information, settlement information, information of other service systems, etc. Public personal authentication information may include, for example, a personal number, etc. Settlement information may include, for example, credit card information, online banking information, electronic settlement information, etc. Information of other service systems may include, for example, information related to electronic prescriptions (insurer number, prescription information, etc.). Various information E10 may be managed in an external system or in the system 100. Among them, the first server 2 may be equipped by a public institution, a neutral institution, various enterprises (vehicle manufacturers, service operating companies, etc.), etc. The first server 2 may also be called a user ID server, a my ID server, or the like.

[0103] On the other hand, when the second object WA is a mobile body, an example of the second terminal 5 is a mobile body terminal (on-board terminal). The mobile body terminal may be, for example, a terminal installed inside or outside the mobile body, a terminal held by a person involved in the operation of the mobile body (e.g., a driver, a crew member, etc.), or a device equipped in a facility of the mobile body (e.g., a ticket gate, etc.). When the mobile body is a vehicle, the mobile body terminal may also be referred to as a vehicle-mounted terminal.

[0104] An example of the second identifier I20 is a mobile body identifier (mobile body ID, car ID). The mobile body identifier may be, for example, the ID of a mobile body account, identification information inherent to the target mobile body (such as a car registration number, vehicle identification information, etc.), identification information of a mobile body terminal, etc. An example of the second object information O20 is mobile body information O20A. Mobile body information O20A may include any information related to the mobile body. Figure 2 In one example, at least a portion of the rights of the mobile body to exercise various information E10 associated with the user information O10A can be validated (activated) according to the setting established by the association between the user and the mobile body. The second server 3 can be equipped by a public institution, a neutral institution, or various companies (vehicle manufacturers, service operating companies, etc.). The second server 3 can also be called a mobile body ID server, a car ID server, etc.

[0105] A moving object is an example of a usable object. Figure 2 The method can be applied to any situation where the user (occupant) of the object changes dynamically. The object can be other than a mobile object, such as a leased object, an accommodation facility, etc. Leased objects can include leased offices, leased spaces, etc.

[0106] The system 100 may be configured to set an activated association between the corresponding user (first identifier I10) and the corresponding individual (second identifier I20) of the object to be used, or to update the state of the association from inactive to active, according to the start of use of the object. In addition, the system 100 may be configured to update the state of the association between the corresponding individuals from active to inactive, or to cancel the association, according to the end of use. The start and end of use may be detected by any method, for example, at the time of boarding and alighting a vehicle, lending and returning the object to be used, etc. In one example, at least one of the start and end of use may be detected based on the execution of data exchange between the first terminal 4 and the second terminal 5.

[0107] Among them, the objects of use can be divided into at least two types: objects that can be used repeatedly for a long time, and objects that can be used temporarily. For the sake of convenience, the former is called "frequently used objects" and the latter is called "temporarily used objects". An example of a frequently used object is the property of a user such as a private car. An example of a temporarily used object is an object owned by a person other than a user, such as a rental car, a shared car, a mobile object of a public transportation agency, a rental object, an accommodation facility, etc. The mobile object of a public transportation agency is, for example, a taxi, a bus, a railway vehicle, an airplane, a ship, etc.

[0108] In the system 100, the type of the object to be used (whether it is a frequently used object or a temporarily used object) may or may not be distinguished. When distinguishing the type of the object to be used, the system 100 may determine the type of the object to be used by any method. In one example, the object information (mobile body information, etc.) may include information indicating the type of the object to be used, and the system 100 may determine the type of the object to be used based on the information. In another example, the type of the object to be used may be determined based on information such as an identifier. In another example, information sent from at least one of the first terminal 4 and the second terminal 5 to the management server 1 may include information indicating the type of the object to be used, and the system 100 may determine the type of the object to be used based on the information. In another example, when the server that processes the information of the object to be used is determined based on the type of the object to be used (in Figure 2 In the example of the second server 3), when the operating organization is used, the type of the object can be determined based on the operating organization of the server.

[0109] In addition, the system 100 can switch the processing of association establishment settings, conditions for switching states (activated / inactivated), conditions for canceling associations, management methods of association establishment information D10, authentication processing, etc. according to the type of object being used.

[0110] In addition, the application scenarios of the system 100 of the present disclosure may not be limited to scenarios of tracking users and utilizing relationships between objects. In another example, the first object VA and the second object WA may both be robotic devices configured to act autonomously through automatic control. Robotic devices may include mobile objects such as self-driving vehicles and unmanned aircraft. In a scenario where two or more robotic devices interact autonomously, the system 100 of the present disclosure may be used to track the generation and disappearance of relationships between the robotic devices.

[0111] As a specific example, one of the first object VA and the second object WA may be a large autonomous driving vehicle, and the other may be a small autonomous driving vehicle. The large autonomous driving vehicle may be configured to accommodate multiple small autonomous driving vehicles. A small autonomous driving vehicle may not be able to ride on multiple large autonomous driving vehicles at the same time (i.e., a small autonomous driving vehicle is only accommodated in one large autonomous driving vehicle at a time). Accordingly, the first object VA may be a small autonomous driving vehicle, and the second object WA may be a large autonomous driving vehicle. The large autonomous driving vehicle may appropriately recover, transport, and release each small autonomous driving vehicle. Each small autonomous driving vehicle may be appropriately used at the release destination. In this case, the system 100 of the present disclosure may be configured to track the operating status (e.g., whether it is being transported) by setting the correspondence between the large autonomous driving vehicle and the small autonomous driving vehicle, switching the status, and releasing it.

[0112] (Data Exchange)

[0113] In this embodiment, a series of processes related to the association establishment setting can be started by triggering the data exchange between the first terminal 4 and the second terminal 5. That is, the generation of the utilization relationship (the start of utilization) can be detected by data exchange. The method of data exchange is not particularly limited and can be appropriately selected according to the embodiment.

[0114] In one example, data exchange between the first terminal 4 and the second terminal 5 can be performed through wireless or wired data communication. Wireless communication can be performed, for example, through NFC (Near Field Communication), Bluetooth (registered trademark), Wi-fi (registered trademark), etc. Wired communication can be performed, for example, through wired LAN (Local Area Network), USB (Universal Serial Bus), etc. Data communication can be performed directly between the first terminal 4 and the second terminal 5, or indirectly via other computers. In another example, data exchange can be performed by methods other than data communication such as reading a QR code. For example, data exchange can be performed by one of the first terminal 4 and the second terminal 5 displaying data on a display and the other using a sensor such as an image sensor to read the displayed data.

[0115] The association establishment request may include at least one of the first identifier I10 and the second identifier I20. When the association establishment request includes the first identifier I10, the first identifier I10 may be sent from at least one of the first terminal 4 and the second terminal 5. When the first identifier I10 is sent from the first terminal 4, the first terminal 4 may obtain the first identifier I10 at any time. In one example, the first identifier I10 may be pre-stored in a memory resource of the first terminal 4. The first terminal 4 may obtain the first identifier I10 from the memory resource. In another example, the first terminal 4 may obtain the first identifier I10 using an input device, a sensor, etc. When the first identifier I10 is sent from the second terminal 5, the second terminal 5 may be assigned the first identifier I10 from the first terminal 4 during data exchange, or may obtain it through an autonomous action. In one example, the second terminal 5 may obtain the first identifier I10 from the first terminal 4 through data communication. In another example, the second terminal 5 may obtain the first identifier I10 from the first terminal 4 by a method other than data communication, such as reading the first identifier I10 displayed as a QR code on the first terminal 4. In yet another example, the second terminal 5 may use an input device, a sensor, or the like to obtain the first identifier I10 from any one of the first object VA and the first terminal 4. Acquisition from the first object VA may include obtaining by a person associated with the second object WA operating the device when there is a person associated with the second object WA (for example, the second object WA is a person, the second object WA is operated by a person, etc.) and the first object VA is an object.

[0116] Similarly, when the association establishment request includes the second identifier I20, the second identifier I20 may be sent from at least one of the first terminal 4 and the second terminal 5. When the second identifier I20 is sent from the second terminal 5, the second terminal 5 may obtain the second identifier I20 at any time. In one example, the second identifier I20 may be pre-stored in a memory resource of the second terminal 5. The second terminal 5 may obtain the second identifier I20 from the memory resource. In another example, the second terminal 5 may obtain the second identifier I20 using an input device, a sensor, etc. When the second identifier I20 is sent from the first terminal 4, the first terminal 4 may be assigned the second identifier I20 from the second terminal 5 during data exchange, or may obtain it through autonomous action. In one example, the first terminal 4 may obtain the second identifier I20 from the second terminal 5 through data communication. In another example, the first terminal 4 may obtain the second identifier I20 from the second terminal 5 by a method other than data communication, such as reading the second identifier I20 displayed as a QR code on the second terminal 5. In yet another example, the first terminal 4 may use an input device, a sensor, or the like to obtain the second identifier I20 from any one of the second object WA and the second terminal 5. Acquisition from the second object WA may include, when there is a person related to the first object VA (for example, the first object VA is a person, the first object VA is operated by a person, etc.) and the second object WA is an object, obtaining the second identifier I20 by operating the device on behalf of the person related to the first object VA.

[0117] For example, in the above Figure 2 In the example of , the first terminal 4 can obtain the second identifier I20 (mobile body identifier) ​​from the second terminal 5 through data communication or code reading. When the second identifier I20 is a car registration number, the first terminal 4 can obtain the second identifier I20 by photographing the license plate number with an image sensor and analyzing the obtained image. The first terminal 4 can obtain the second identifier I20 via an input device. The second terminal 5 can obtain the second identifier I20 appropriately. In addition, the second terminal 5 can obtain the first identifier I10 (user identifier) ​​through data communication or code reading. When the first identifier I10 is a personal number recorded on a card, etc., the second terminal 5 can obtain the first identifier I10 by photographing the card with an image sensor and analyzing the obtained image. The second terminal 5 can obtain the first identifier I10 via an input device. The first terminal 4 can obtain the first identifier I10 appropriately.

[0118] When an input device is used to obtain data such as the identifiers (I10, I20), the terminal of one party may obtain data from the object of the other party by operating the input device through the object of the other party, in addition to obtaining the data of the object of the other party by operating the input device through the object of the other party. For example, in the above Figure 2 In the example, when the second identifier I20 is a vehicle registration number and an input device is used to obtain the vehicle registration number, the first terminal 4 can obtain the second identifier I20 from the mobile body (the second object WA) by inputting the vehicle registration number by the user (the first object VA) via the input device.

[0119] In addition, the acquisition of the data of the object of the other party by the terminal of one party does not necessarily have to be performed at the time of data exchange. The terminal of one party can acquire the data of the object of the other party at any time different from the data exchange. The data acquisition method can adopt any of the above methods. In this case, the data exchange between the first terminal 4 and the second terminal 5 can function as a simple trigger for starting a series of processes related to the association establishment setting.

[0120] (Relationship establishment information)

[0121] Figure 3A An example of association information D10 according to this embodiment is schematically shown. Figure 3A In one example, it is assumed that a method of using the first identifier I10 and the second identifier I20 to express the setting of the corresponding relationship is adopted. The association establishment information D10 includes the first identifier I10, the second identifier I20, the setting time, the release time and the status. The first identifier I10 and the second identifier I20 represent the corresponding individual of the first object VA and the corresponding individual of the second object WA for which the corresponding relationship (association establishment) is set. The setting time represents the time when the corresponding relationship is set. The setting time can be composed of a timestamp. The release time represents the time when the corresponding relationship is released. The value of the release time can be added when the process of releasing the corresponding relationship is executed. The expression method of release may not be limited to such an example. In another example, the release time can be replaced by at least one of the validity period and the flag. The validity period indicates the period during which the setting of the corresponding relationship is valid. In this case, whether the setting of the corresponding relationship is valid (that is, whether the corresponding relationship is set or released) is indicated by whether it is within the validity period. The flag indicates whether the corresponding relationship is released. The flag can be set when the process of releasing the corresponding relationship is executed. In another example, the association establishment information D10 may include at least one of an expiration date and a flag and a field for a release time. The status indicates whether the setting of the corresponding relationship is activated or inactivated. In addition, the configuration of the association establishment information D10 is not limited to the following as long as the setting and status of the corresponding relationship can be indicated. Figure 3A In another example, the association establishment information D10 may also include information indicating the type of the object being used (regularly used object or temporarily used object). The type of the object being used does not necessarily have to be identified based on individual information. For example, the type of the object being used can be identified based on information such as an identifier. In another example, the association establishment information D10 may also include information indicating the moment of the change of state (from activated to inactivated, or from inactivated to activated).

[0122] The data form of the association establishment information D10 may not be particularly limited and may be appropriately selected according to the implementation method. The association establishment information D10 may be maintained by any database platform. In one example, the association establishment information D10 may be maintained by a relational database such as a table form. In another example, the association establishment information D10 may be maintained by a blockchain platform. In this case, each transaction of association establishment setting, state change, and release may be stored by the blockchain as association establishment information D10. For example, the transaction of association establishment setting may include the first identifier I10, the second identifier I20, the setting time, and information indicating the category of the state (whether it is activated or inactivated). The transaction of state change may include the first identifier I10, the second identifier I20, and information indicating the change category (a change from activated to inactivated or a change from inactivated to activated). The information indicating the change category may be replaced with information indicating the category of the changed state (whether it is activated or inactivated). The transaction of association release may include the first identifier I10, the second identifier I20, and the release time (or information indicating release).

[0123] (First target information)

[0124] The first object information O10 may include any information related to the first object VA. For example, the first object information O10 may include a first identifier I10, attribute information of the first object VA, information related to authority, and the like. Figure 2 In the example of , the user information O10A is an example of the first object information O10.

[0125] Figure 3B An example of user information O10A according to this embodiment is schematically shown. Figure 3BIn one example, user information O10A includes a user ID (first identifier I10), attribute information, and permission information. Attribute information may include any information related to the attributes of the corresponding user. Attribute information may include, for example, personal information such as name, address, age, gender, and contact information. Permission information is related to the permissions of the corresponding user. Permission information may include, for example, information for cooperating with a server for information processing related to the permissions of the execution object, information indicating the establishment of associations with various information E10, etc. In addition, the composition of user information O10A may not be limited to Figure 3B For example, the user information O10A (first object information O10) may further include information (such as registered unique information) used in authentication of the user (first object VA).

[0126] The data format of the first object information O10 (user information O10A) may not be particularly limited and may be appropriately selected according to the implementation method. The first object information O10 (user information O10A) may be maintained by any database platform. In one example, the first object information O10 (user information O10A) may be maintained by a relational database in a table format or the like. In another example, the first object information O10 (user information O10A) may be maintained by a blockchain platform.

[0127] (Second target information)

[0128] The second object information O20 may include any information related to the second object WA. For example, the second object information O20 may include the second identifier I20, attribute information of the second object WA, information related to authority, etc. Figure 2 In the example of , the moving body information O20A is an example of the second object information O20.

[0129] Figure 3C An example of the moving body information O20A according to this embodiment is schematically shown. Figure 3CIn one example, the mobile body information O20A includes a mobile body ID (second identifier I20) and attribute information. The attribute information includes a license plate, a type (type of object), a mobile body type, and owner information. In the case where the mobile body is a vehicle, the license plate may be a car registration number. The type may be arbitrarily specified. In one example, the type may be specified as, for example, a private car, a rental car, a shared car, a mobile body of a public transportation agency, etc., indicating a category that can distinguish between frequently used objects and temporarily used objects. The mobile body type, for example, indicates a category such as a vehicle model. In the case where the mobile body type and the type (type of object) are the same, the field for the mobile body type may be omitted. The owner information may include any information related to the owner of the mobile body. The owner information may include, for example, the owner's personal information such as name, address, age, gender, and contact information. The owner may also be a legal person. In addition, the composition of the mobile body information O20A may not be limited to Figure 3C The example may be appropriately changed according to the implementation. For example, the mobile body information O20A (second object information O20) may also include information used in the authentication of the mobile body (second object WA) (such as registration-completed inherent information, etc.). In addition, the composition of the attribute information may also be appropriately changed. For example, the mobile body information O20A (attribute information) may also include information related to the mobile body terminal, such as the contact information of the mobile body terminal.

[0130] The data format of the second object information O20 (mobile body information O20A) may not be particularly limited and may be appropriately selected according to the implementation method. The second object information O20 (mobile body information O20A) may be maintained by any database platform. In one example, the second object information O20 (mobile body information O20A) may be maintained by a relational database such as a table. In another example, the second object information O20 (mobile body information O20A) may be maintained by a blockchain platform.

[0131] (Notification Processing)

[0132] When at least one of the processes of association establishment setting, state change and release is executed, the management server 1 may send a notification indicating the execution result to at least one of the first terminal 4 and the second terminal 5. The sending path of the notification may not be particularly limited and may be appropriately determined according to the implementation method. In one example, the management server 1 may directly notify at least one of the first terminal 4 and the second terminal 5. In another example, the management server 1 may indirectly notify at least one of the first terminal 4 and the second terminal 5 via an external computer such as each server (2, 3).

[0133] In the case of direct notification, the management server 1 can appropriately obtain the contact information of each terminal (4, 5). The contact information can be a telephone number, an email address, account information of a contact system application (such as a Social Networking Service application, etc.), an identification number, etc. The management server 1 can obtain information indicating the contact information of each terminal (4, 5) at any time. In one example, the management server 1 can obtain information indicating the contact information at the time of accepting a request to establish an association, a request to release an association, etc. The information indicating the contact information can be sent from at least one of each terminal (4, 5) and each server (2, 3).

[0134] (Status Information)

[0135] The status information ST10 is used to select the corresponding relationship to be activated. As long as the corresponding relationship to be activated can be selected, the status information ST10 may not be particularly limited. The composition of the status information ST10 may be appropriately determined based on the selection conditions, etc. In addition, the management server 1 may obtain the status information ST10 in real time from at least one of the corresponding individuals of the first object VA (for example, the corresponding first terminal 4) with which two or more corresponding relationships are established and the corresponding individuals of the two or more second objects WA (for example, the corresponding second terminals 5) with which the corresponding relationships are set with the corresponding individuals of the first object VA at any time before performing the coordination process. As a result, the association establishment setting between the corresponding individuals of the first object VA and the second object WA with which the utilization relationship actually occurs can be activated. In the present embodiment, the method for selecting the activated corresponding relationship may adopt at least one of the following three methods.

[0136] (1) Method 1

[0137] Figure 4A An example of a selection process of an association establishment setting to be activated based on the first method according to the present embodiment is schematically shown. Figure 4AIn the example, the first object VA1 is an example of an individual of the first object VA for which two or more correspondences are established with two or more second objects WA (two or more individuals of the second object WA). An individual of the first object VA for which two or more correspondences are established is also referred to as "the first individual of the first object". The second object WA2 and the second object WA3 are examples of other second objects WA (other individuals of the second object WA) for which a correspondence has been established with the first object VA1 (the first individual of the first object VA). It is assumed that a scenario is that a request for establishing an association with the second object WA1 (a request for establishing a new association establishment setting) is accepted when the setting of the correspondence with the second object WA2 is activated and the setting of the correspondence with the second object WA3 is inactivated. In addition, it is assumed that the second object WA1 among the second objects WA1 to WA3 actually has a utilization relationship with the first object VA1.

[0138] In the first method, the association establishment setting to be activated can be selected based on the selection related to the first object VA (first object VA1) in which two or more corresponding relationships are established. That is, the status information ST10 can include the selection related to the first object VA (first object VA1). Accordingly, activating the setting of one corresponding relationship can be configured by activating the setting of the corresponding relationship selected by the first object VA (first object VA1).

[0139] exist Figure 4A In one example, the first object VA1 selects the second object WA1 among the second objects WA1 to WA3. Accordingly, the association setting of the first object VA1 can be updated to establish an active association setting with the second object WA1, and the association setting with the second object WA2 can be changed from active to inactive.

[0140] In addition, selecting the association establishment setting to be activated may include directly selecting the association establishment setting to be activated, and indirectly selecting the association establishment setting to be activated by selecting the association establishment setting to be inactivated. Selecting the association establishment setting may include selecting the second object WA. The selection may be performed by automatic processing performed by a computer (terminal) or manually.

[0141] In addition, the selection of the association establishment setting to be activated can be accepted by at least one of the first terminal 4 of the first object VA (first object VA1) and the second terminal 5 of the second object WA. The second terminal 5 of the second object WA can be the second object WA (in the case of the first object VA1) with which the utilization relationship actually occurs. Figure 4AThe second terminal 5 (in which the second object WA1 is located) can be a second terminal 5. The status information ST10 can be sent from at least one of the first terminal 4 and the second terminal 5 to the management server 1. In one example, the status information ST10 can be sent from one of the first terminal 4 and the second terminal 5 that has accepted the selection. In another example, the status information ST10 can also be sent from another terminal different from the one of the first terminal 4 and the second terminal 5 that has accepted the selection by exchanging data on the selection result.

[0142] In addition, the trigger for sending can be arbitrary. In one example, at least one of the first terminal 4 and the second terminal 5 can send the status information ST10 to the management server 1 as an autonomous information processing accompanied by the association establishment request. In another example, at least one of the first terminal 4 and the second terminal 5 can send the status information ST10 to the management server 1 as a reply to the inquiry from the management server 1. The status information ST10 sent can be appropriately constructed to represent the selection result of the first object VA. According to an example of the present embodiment, the activated association establishment setting can be selected by a simple process.

[0143] (2) Method 2

[0144] Figure 4B An example of a selection process of the association setting to be activated by the second method according to the present embodiment is schematically shown. Figure 4B The prerequisites and Figure 4A Likewise, in Figure 4B The example also envisions Figure 4A Same scenario.

[0145] In the second method, the association establishment setting with the second object WA that participated in the most recent authentication of the first object VA (first object VA1) can be selected as the association establishment setting to be activated. That is, the status information ST10 may include a report of the execution result of the authentication process for the first object VA (first object VA1) by the second terminal 5. Accordingly, activating a setting of a corresponding relationship can be configured by activating the setting of a corresponding relationship with the second object WA corresponding to the second terminal 5 that recently reported the execution result of the authentication process for the first object VA (first object VA1).

[0146] exist Figure 4BIn an example, the second terminal 5 of the second object WA1 among the second objects WA1 to WA3 participates in the most recent authentication process of the first object VA1, and the status information ST10 includes information indicating that the authentication is established. Accordingly, the association establishment setting of the first object VA1 can be updated to establish an active association establishment setting with the second object WA1, and the state of the association establishment setting with the second object WA2 is changed from active to inactive.

[0147] Alternatively, the authentication process of the first object VA (first object VA1) may be executed with at least one of the first terminal 4 and the second terminal 5 as a starting point. Figure 2 In one example, the second terminal 5 of the mobile body (the second object WA) can authenticate the user (the first object VA) by using an image sensor equipped on the mobile body for facial authentication, using a fingerprint reader installed on a handle for fingerprint authentication, making the user speak and using a microphone equipped on the mobile body for voiceprint authentication. However, the authentication method is not limited to these examples and can be appropriately selected according to the implementation method. The authentication method can adopt a known method.

[0148] If the second terminal 5 participates in the authentication process, the authentication process may be executed by at least one of the first terminal 4 and the second terminal 5. In addition, at least a part of the authentication process may be executed by at least one of the management server 1 and the external server (e.g., the first server 2). The second terminal 5 participating in the authentication process may include the second terminal 5 executing at least a part of the authentication process, and the second terminal 5 executing information processing related to the authentication process (e.g., data exchange with the first terminal 4) although the authentication process is executed by other computers (e.g., the first terminal 4, the management server 1, the first server 2). The authentication process may also be induced by the second terminal 5.

[0149] The status information ST10 may be transmitted from at least one of the first terminal 4 and the second terminal 5 to the management server 1. In one example, when at least one of the first terminal 4 and the second terminal 5 performs authentication processing, the status information ST10 may be transmitted from one of the first terminal 4 and the second terminal 5 that has completed the authentication processing, or may be transmitted from another terminal different from the one terminal. When the status information ST10 is transmitted from the other terminal, the completion of the authentication processing may be notified from one terminal to the other terminal by any method. In another example, after the status information ST10 is transmitted from at least one of the first terminal 4 and the second terminal 5, at least one of the management server 1 and the external server may perform at least a part of the authentication processing. In this case, the status information ST10 may be in an uncompleted state at the stage of being transmitted from at least one of the first terminal 4 and the second terminal 5. The status information ST10 may be configured to indicate the authentication result of the first object VA after the authentication processing is completed by at least one of the management server 1 and the external server performing at least a part of the authentication processing.

[0150] In addition, as with the first method, the trigger for sending can be arbitrary. In one example, at least one of the first terminal 4 and the second terminal 5 can perform information processing related to the authentication process and send the status information ST10 toward the management server 1 as an autonomous information processing accompanied by the association establishment request. Executing the information processing related to the authentication process can include at least one of the first terminal 4 and the second terminal 5 performing the authentication process itself, and entrusting the authentication process to an external computer (such as the management server 1, the first server 2). In another example, at least one of the first terminal 4 and the second terminal 5 can perform information processing related to the authentication process based on an inquiry from the management server 1, and send the status information ST10 toward the management server 1 as a reply to the inquiry. According to an example of the present embodiment, by accompanying the authentication process of the first object VA, the individual of the second object WA that actually has a utilization relationship with the corresponding individual of the first object VA can be appropriately determined. As a result, it can be expected that the appropriate association establishment setting is activated.

[0151] (3) Method 3

[0152] Figure 4C An example of a selection process of the association setting to be activated based on the third method according to the present embodiment is schematically shown. Figure 4C The prerequisite is also Figure 4A Likewise, in Figure 4C The example also envisions Figure 4A Same scenario.

[0153] In the third method, the association establishment setting to be activated can be selected based on the positional relationship between the first individual (first terminal 4) of the first object VA and each individual (each second terminal 5) of the second object WA. That is, each first terminal 4 can be equipped with a positioning module 47. Each second terminal 5 can be equipped with a positioning module 57. The positioning module 47 is an example of a first positioning module. The positioning module 57 is an example of a second positioning module. The status information ST10 may include a first current position measured by the positioning module 47 of the first terminal 4 corresponding to the first object VA (first object VA1 / first individual of the first object VA), and a second current position measured by the positioning module 57 of the second terminal 5 corresponding to two or more second objects WA (each individual of the second object WA). Accordingly, activating the setting of a corresponding relationship can be constituted by activating the setting of the corresponding relationship of the second object WA that satisfies the condition of the utilization relationship between the second current position of the corresponding second terminal 5 and the first current position of the first terminal 4.

[0154] The conditions of the utilization relationship can be set appropriately. In one example, the conditions of the utilization relationship can be defined by a range DR of distance based on the first current position. In this case, whether the conditions of the utilization relationship are satisfied can be determined based on whether the user is within the range DR. Figure 4C In one example, the second terminal 5 of the second object WA1 among the second objects WA1 to WA3 exists within a range DR based on the first terminal 4 (first current position) of the first object VA1. The status information ST10 may include at least the first current position of the first terminal 4 of the first object VA1 and the second current position of the second terminal 5 of the second object WA1, and it may be appropriately determined that the second terminal 5 of the second object WA1 exists within the range DR. Accordingly, the association establishment setting of the first object VA1 may be updated to establish an activated association establishment setting with the second object WA1, and the state of the association establishment setting with the second object WA2 may be changed from activated to inactivated.

[0155] The range DR can be appropriately set so as to be able to determine the second object WA with which the utilization relationship has occurred. The shape of the range DR can be arbitrarily specified. The range DR can be specified so that the distances in each direction are the same, or can be specified so that the distances in at least some directions are different.

[0156] The type of each positioning module (47, 57) is not particularly limited and can be appropriately selected according to the implementation. Each positioning module (47, 57) can be, for example, a GPS (Global Positioning Satellite) module, a GNSS (Global Navigation Satellite System) module, or the like.

[0157] The information of each current position (status information ST10) can be sent from each first terminal 4 and each second terminal 5 to the management server 1 at any time. In one example, each terminal (4, 5) of each object (VA, WA) for which an association establishment setting is established can report the information of each current position to the management server 1 as an autonomous information processing such as periodic transmission. In this case, the management server 1 can determine the second object WA that meets the condition of the utilization relationship based on the information of each current position reported most recently. In another example, the management server 1 can directly or indirectly send a request to each terminal (4, 5) at any time before performing the coordination process. Each terminal (4, 5) can report the information of each current position in real time to the management server 1 based on the request. The management server 1 can determine the second object WA that meets the condition of the utilization relationship based on the information of each current position reported in real time. In any method, there is sometimes a second terminal 5 that does not report (respond) the second current position due to the influence of the power off of the second terminal 5, etc. In this case, the second object WA corresponding to the second terminal 5 that has not reported the most recent second current location may be determined to not satisfy the condition of the utilization relationship, and accordingly, the correspondence relationship with the second object WA may be set to be inactive.

[0158] In addition, the reporting target of the information of each current location can be appropriately selected according to the implementation method. In one example, the reporting target of the information of each current location can be the management server 1. Accordingly, the information of each current location can be managed by the management server 1. In another example, the reporting target of the information of each current location can be an external server (the first server 2, the second server 3, etc.). Accordingly, the information of each current location can be managed by the external server. The management server 1 can obtain the information of each current location (status information ST10) from the external server. Reporting to the management server 1 can include reporting directly to the management server 1 and reporting indirectly to the management server 1 via an external server. The reported information of each current location can be abandoned after it is no longer used in the coordination process, or it can be saved as a historical record for at least a specified period. In the case of directly reporting to the management server 1, the information of each current location can be saved in the management server 1, or it can be saved in an external server (the first server 2, the second server 3, the NAS, etc.). Similarly, in the case of indirectly reporting to the management server 1, the information of each current location can also be saved in the management server 1, or it can be saved in an external server. According to an example of this embodiment, the individual of the second object WA that actually has a utilization relationship with the corresponding individual of the first object VA can be appropriately specified by using the position information. Thus, it can be expected that an appropriate association setting will be activated.

[0159] (Activate the lock of settings)

[0160] For example, in Figure 2 In the scenario, it is assumed that an activated correspondence relationship is set between the corresponding individual (corresponding user) of the first object VA and an individual of the second object WA which is a moving body of a public transportation agency. In this scenario, it is not desirable to eliminate (deactivate or cancel) the activated correspondence relationship with the corresponding individual of the moving body (an individual of the second object WA) and establish a new activated correspondence relationship with the other moving body based on the fact that the corresponding user (corresponding individual of the first object VA) uses other moving bodies (other individuals of the second object WA) even though the calculation of the moving body of the public transportation agency is not completed. In this way, when the corresponding individual of the second object WA is of a specified type, it is sometimes desirable to refuse to establish the setting of the activated correspondence relationship with the other individuals of the second object WA until the specified condition (in the above example, the calculation is completed) is satisfied.

[0161] In view of this, in an example of the present embodiment, the management server 1 can be configured to also perform the following processing: after an activation correspondence setting is established with a second object WA of the first specified type (an individual of the second object WA), the establishment of other activation correspondence settings between the first object VA (the corresponding individual of the first object VA) for which the activation correspondence is set and other second objects WA (other individuals of the second object WA) is prohibited by locking the activation correspondence setting until specified conditions are met.

[0162] The setting for establishing an activated correspondence relationship with the second object WA of the first specified type may include establishing a new association establishment setting with the corresponding individual of the second object WA in an activated state, and changing the state of the association establishment setting with the corresponding individual of the second object WA from inactive to active. The setting for prohibiting other activated correspondence relationships may include establishing a new association establishment setting with other individuals of the second object WA in a prohibited activation state, and changing the state of the association establishment setting with other individuals of the second object WA from inactive to active. Establishing a new association establishment setting with other individuals of the second object WA in an inactive state may be permitted or not permitted.

[0163] The prescribed conditions can be appropriately set according to the implementation method. In addition, it is possible to appropriately detect whether the prescribed conditions are met. In a simple example, the satisfaction of the prescribed conditions can be detected by a notification from the second terminal 5 corresponding to the corresponding individual of the second object WA of the first prescribed type. In the above example, when the actuation is completed, the second terminal 5 of the corresponding individual of the mobile body will send a notification indicating the completion of the actuation (satisfaction of the prescribed conditions) to the management server 1. The management server 1 can recognize the satisfaction of the prescribed conditions by receiving the notification. In addition, the management server 1 can also perform such locking processing on second objects WA of other types other than the first prescribed type, and can also omit the execution of the locking processing for second objects WA of other types.

[0164] Figure 5 An example of a scenario in which an activated association establishment setting is locked according to the present embodiment is schematically shown. Figure 5 In one example, the second object WA4 is an example of the second object WA of the first specified type. The first object VA1 is an example of the first object VA with which an activation correspondence relationship is established with an individual of the second object WA of the first specified type. The second object WA5 is an example of another second object WA (another individual of the second object WA) with which an activation correspondence relationship is established for the first object VA1.

[0165] exist Figure 5 In the example, the management server 1 may lock the setting of the correspondence between the first object VA1 and the second object WA4 during a period before a specified condition is satisfied. When an association establishment request is received from at least one of the first terminal 4 of the first object VA1 and the second terminal 5 of the second object WA5 during the locking period, the management server 1 may not allow the establishment of the setting of the activated correspondence of the second object WA5 corresponding to the association establishment request, and ignore the association establishment request. In this case, the management server 1 may directly or indirectly send a notification indicating that the setting of other activated correspondences is prohibited to at least one of the first terminal 4 of the first object VA1 and the second terminal 5 of the second object WA5.

[0166] The management server 1 can unlock the setting of the corresponding relationship with the second object WA based on detecting that the prescribed condition is satisfied. Thus, the management server 1 can allow the establishment of the setting of the activated corresponding relationship with other individuals of the second object WA. After the lock is unlocked, when receiving an association establishment request from at least one of the first terminal 4 of the first object VA1 and the second terminal 5 of the second object WA5, the management server 1 can establish the setting of the activated corresponding relationship with the second object WA5 based on the association establishment request. According to an example of the present embodiment, in a scenario where it is inappropriate to establish other settings of the activated corresponding relationship, by locking the established setting of the activated corresponding relationship, the establishment of such other settings of the activated corresponding relationship can be prohibited.

[0167] In addition, the first prescribed type may be appropriately selected according to the implementation. In one example, the first object VA may be a user. The second object WA of the first prescribed type may be a moving body of a public transportation agency. The prescribed condition may be that the payment (actuation) of the fee for the use of the moving body of the public transportation agency is completed. According to an example of the present embodiment, in the case where the fee for the moving body of the transportation agency is not paid, transfer to other moving bodies (establishment of the setting of the activated correspondence relationship with other moving bodies) can be prohibited.

[0168] (Confirmation of continued use)

[0169] As one of the optional configurations, after the correspondence relationship between the corresponding individual of the first object VA and the corresponding individual of the second object WA is set, the management server 1 may further execute a process for confirming whether the correspondence relationship continues (confirmation process). The method for confirming continued use may be appropriately selected according to the embodiment.

[0170] In one example, the continuation of the correspondence relationship can be confirmed by authenticating at least one of the first object VA and the second object WA via at least one of the first terminal 4 and the second terminal 5. The authentication method can be performed by any method similar to the association establishment setting. Figure 2In the example, for example, the user can be authenticated by using an image sensor equipped on the mobile body to perform facial authentication of the user, using a fingerprint reader installed on the handle to perform fingerprint authentication of the user, making the user speak and using a microphone equipped on the mobile body to perform voiceprint authentication, etc. The authentication process can be performed by at least one of the terminal (4, 5), the server (2, 3) and the management server 1. In the case where the authentication process is performed by the server (2, 3), the data used in the authentication can be sent directly from the terminal (4, 5) to the server (2, 3), or indirectly via an external computer such as the management server 1. In the case where the authentication process is performed by the management server 1, the data used in the authentication can be sent directly from the terminal (4, 5) to the management server 1, or indirectly via an external computer such as each server (2, 3). The management server 1 can appropriately obtain the authentication result. For the management server 1, when the authentication of the object is established in the obtained authentication result, it can be determined that the corresponding relationship continues, and when the authentication is not established, it can be determined that the corresponding relationship does not continue.

[0171] In another example, when at least one of the first object VA and the second object WA is a user (for example Figure 2 In the case of a user who has not yet completed the confirmation notification, the management server 1 may directly or indirectly send a confirmation notification including an operator to at least one of the first terminal 4 and the second terminal 5. The operator may be composed of, for example, a confirmation button, a reply button, a link, etc. The destination of the confirmation notification does not necessarily have to correspond to the user. Figure 2 In the case of the above, the management server 1 may send a confirmation notification to at least one of the first terminal 4 and the second terminal 5. The sending destination of the confirmation notification may overlap with or be different from the sending destination of the notification indicating the result of the processing related to the association establishment. The confirmation notification may be configured to return a response to the management server 1 directly or indirectly according to the operation of the operating element by the user. The management server 1 may determine that the correspondence relationship continues when a response based on the operation of the operating element is received within a prescribed period, and determine that the correspondence relationship does not continue when no response is received.

[0172] In another example, when tracking the correspondence between the first object VA and the second object WA in the real world, each terminal (4, 5) can Figure 4CAs an example of , the first terminal 4 can measure the current position of the first object VA (first terminal 4) through the positioning module 47, and the second terminal 5 can measure the current position of the second object WA (second terminal 5) through the positioning module 57. Each terminal (4, 5) can directly send the obtained current position of each object (VA, WA) to the management server 1, or indirectly send it to the management server 1 via an external computer such as each server (2, 3). The management server 1 can determine whether the corresponding relationship continues based on whether the received current position of each object (VA, WA) is close to the extent that satisfies the prescribed condition of the utilization relationship (for example, the user is riding on a moving body). That is, the management server 1 can determine that the corresponding relationship continues when the current position of each object (VA, WA) is close to the extent that satisfies the prescribed condition. In addition, the management server 1 can determine that the corresponding relationship does not continue when the current position of each object (VA, WA) is not close to the extent that satisfies the prescribed condition. In addition, when this method is adopted, the management server 1 can associate the obtained information of the current position of each object (VA, WA) with the association establishment information D10 and store it. In this way, the management server 1 can track the movement history of each object (VA, WA) together with the correspondence relationship between each object (VA, WA). In addition, at least part of the above-mentioned processing can also be executed by a computer other than the management server 1.

[0173] If it is determined that the correspondence relationship continues, the management server 1 may maintain the set state of the correspondence relationship (for example, it may be maintained in an activated state). On the other hand, if it is determined that the correspondence relationship does not continue, the management server 1 may cancel the correspondence relationship or change the state of the correspondence relationship from activated to inactivated. The management server 1 may be configured to update the state of the correspondence relationship by repeatedly performing the confirmation process periodically or irregularly after the correspondence relationship is set until the correspondence relationship is canceled.

[0174] (Remove association)

[0175] In the present embodiment, the management server 1 may be configured to cancel (invalidate or change to inactive) the correspondence relationship in response to reception of a cancellation request from at least one of the first terminal 4 and the second terminal 5 or satisfaction of a predetermined cancellation condition.

[0176] (I) Release Request

[0177] In one example, the release request may be configured to include at least one of the first identifier I10 and the second identifier I20 to indicate the correspondence relationship to be released. In another example, the release request may be configured to include replacement information to indicate the correspondence relationship to be released.

[0178] When the first terminal 4 sends a release request including the second identifier I20, the first terminal 4 can obtain the second identifier I20 at any time. In one example, the first terminal 4 can obtain the second identifier I20 when the association establishment request is made, and the obtained second identifier I20 can be stored in the memory resource. When the release request is made, the first terminal 4 can obtain the second identifier I20 from the memory resource. In addition, when the first terminal 4 sends a release request including the first identifier I10, the first terminal 4 can obtain the first identifier I10 at any time. In one example, the first identifier I10 can be pre-stored in the memory resource. The first terminal 4 can obtain the first identifier I10 from the memory resource.

[0179] Similarly, when the second terminal 5 sends a release request including the first identifier I10, the second terminal 5 can obtain the first identifier I10 at any time. In one example, the second terminal 5 can obtain the first identifier I10 when the association establishment request is made, and the obtained first identifier I10 can be stored in the memory resource. When the release request is made, the second terminal 5 can obtain the first identifier I10 from the memory resource. In addition, when the second terminal 5 sends a release request including the second identifier I20, the second terminal 5 can obtain the second identifier I20 at any time. In one example, the second identifier I20 can be pre-stored in the memory resource. The second terminal 5 can obtain the second identifier I20 from the memory resource.

[0180] Figure 6 An example of the process of establishing and canceling an association according to the present embodiment is schematically shown. Figure 6In the example, as the first route, the first terminal 4 directly sends a release request to the management server 1 (step SZ10). In addition, as the second route, the first terminal 4 gives an instruction to the second terminal 5 (step SZ10A), so that the second terminal 5 directly sends a release request to the management server 1 (step SZ11A). However, the route for sending the release request may not be limited to such an example. The first terminal 4 may also indirectly send a release request to the management server 1 via an external computer such as the first server 2. In the second route, the second terminal 5 may indirectly send a release request to the management server 1 via an external computer such as the second server 3. In addition, the starting point of the release request may not be limited to the first terminal 4. In another example, the second terminal 5 may directly or indirectly send a release request to the management server 1. In addition, the second terminal 5 may give an instruction to the first terminal 4, so that the first terminal 4 directly or indirectly sends a release request to the management server 1. After receiving the release request, the management server 1 refers to the association establishment information D10 to cancel (invalidate or inactivate) the correspondence specified by the identifier included in the release request. After the release process, the management server 1 may transmit a notification indicating the result of the release process to at least one of the first terminal 4 and the second terminal 5 , similarly to when the association is set.

[0181] The trigger of the release request can be appropriately set according to the implementation method. In one example, when at least one of the first object VA and the second object WA is a user, the release request can be sent from at least one of the first terminal 4 and the second terminal 5 by the user's operation on at least one of the first terminal 4 and the second terminal 5. That is, the trigger of the release request can be an operation performed by the user. In another example, arbitrary information processing can be performed on at least one of the first terminal 4 and the second terminal 5 along with the disappearance of the utilization relationship. The release request can be sent from at least one of the first terminal 4 and the second terminal 5 with the execution of the information processing as a trigger. For example, the arbitrary information processing can be the data exchange between the first terminal 4 and the second terminal 5. The method of data exchange when the association is released can be the same as the data exchange when the association is set. It is possible to appropriately distinguish whether it is the data exchange when the association is set or the data exchange when the association is released. For example, in Figure 2 In the example, the second terminal 5 may be provided with respective sensor devices at the entrance and exit, such as at a bus boarding and alighting gate, a railway ticket gate, etc. In this case, it is possible to distinguish whether the data exchange is when the association is established or when the association is released, based on the sensor device used in the data exchange. In addition, for example, when data exchange is performed by an application of the terminal, the application may be configured to be switchable between an association establishment setting mode and an association establishment release mode. In this case, it is possible to distinguish whether the association is established or when the association is released, based on the mode of the application.

[0182] In addition, in one example, during the period when the setting of the corresponding relationship is locked by the above-mentioned locking process, when a request for releasing the corresponding relationship is received, the management server 1 can discard the received release request. The management server 1 can directly or indirectly send a notification indicating that the release of the corresponding relationship is prohibited to at least one of the first terminal 4 and the second terminal 5. On the other hand, after the lock is released due to the satisfaction of the specified conditions, the management server 1 can accept the release request and release the corresponding relationship. For example, the management server 1 can detect the satisfaction of the specified conditions based on the disappearance of the above-mentioned utilization relationship. In one example, the release request can include information indicating the satisfaction of the specified conditions. In another example, the information indicating the satisfaction of the specified conditions can be sent to the management server 1 before the release request. Thus, the management server 1 can accept the release request sent based on the disappearance of the above-mentioned utilization relationship and release (invalidate or inactivate) the corresponding relationship specified by the release request.

[0183] In addition, there is a case where an inactivated correspondence relationship is maintained for the corresponding individual of the first object VA with one or more other individuals of the second object WA. In this case, based on invalidating or inactivating the correspondence relationship specified by the release request, the management server 1 may activate one correspondence relationship from among the inactivated correspondence relationships maintained for the same individual of the first object VA with one or more other individuals of the second object WA. The correspondence relationship to be activated may be determined based on the priority and type (for example, whether it is a frequently used object or a temporarily used object) of each individual of the second object WA. As a specific example, in Figure 2 In the example, it is assumed that the first moving body is a frequently used object (such as a private car, etc.), and the second moving body is a temporarily used object (such as a rental car, a shared car, a moving body of a public transportation agency, etc.). In this case, the management server 1 can change the state of the previous correspondence (the correspondence with the first moving body) to inactive according to the setting of the correspondence between the user of the object and the second moving body during the period in which the correspondence between the user of the object and the first moving body is set. Moreover, according to the invalidation or inactivation of the correspondence with the second moving body (temporarily used object), the management server 1 can activate the correspondence between the first moving body (frequently used object) and the user of the object. Thereby, the setting of the activated correspondence with the frequently used object can be quickly restored.

[0184] (I-1) Maintaining the association establishment settings

[0185] When the request is released, it is possible to appropriately choose whether to release (invalidate) the corresponding association establishment setting or change the state of the association establishment setting to inactive. In certain scenarios, it is sometimes more efficient to maintain the association establishment setting in an active or inactive state instead of releasing (invalidating) the association establishment setting. For example, in Figure 2 In the scenario, when the corresponding individual of the second object WA is a private car, the corresponding individual of the second object WA is repeatedly used by the first object VA (user). Therefore, it is possible to achieve more efficient processing by switching between activation and inactivation instead of repeatedly generating and eliminating the corresponding relationship each time it is used.

[0186] In view of this, in an example of the present embodiment, the management server 1 may be further configured to maintain the activated or inactivated state until the prescribed relationship is eliminated without canceling (invalidating) the corresponding relationship when the prescribed relationship is established between the first object VA and the second object WA in which the corresponding relationship is set, and cancel the corresponding relationship after the prescribed relationship is eliminated. Cancelling (invalidating) the corresponding relationship may include canceling the corresponding relationship in accordance with the elimination of the prescribed relationship, and canceling the corresponding relationship in accordance with the acceptance of a cancellation request after the prescribed relationship is eliminated.

[0187] Figure 7 An example of a scenario in which the association establishment setting according to the present embodiment is maintained in an active or inactive state is schematically shown. The first object VA1 and the second object WA6 are examples of the first object VA and the second object WA in which a predetermined relationship is established. Figure 7 In one example, the management server 1 can maintain the setting of the correspondence relationship between the first object VA1 and the second object WA6 in an activated or inactivated state during the period when the prescribed relationship is established. On the other hand, after the prescribed relationship is eliminated, the management server 1 can cancel (invalidate) the correspondence relationship between the first object VA1 and the second object WA6.

[0188] According to an example of the present embodiment, it is possible to expect efficiency of processing related to setting of a corresponding relationship in a scenario where a prescribed relationship is established. The prescribed relationship of the objects that maintain the corresponding relationship can be appropriately set according to the embodiment. From the perspective of achieving efficiency of processing related to setting of association establishment, it is preferred that the prescribed relationship is a relationship that lasts for a certain period of time and that repeatedly utilizes the occurrence and disappearance of the relationship during the period of duration.

[0189] In one example, the prescribed relationship may be an ownership relationship. That is, during the period when the ownership relationship between the first object VA and the second object WA is established, the setting of the correspondence relationship between the first object VA and the second object WA may be maintained, and after the ownership relationship ends, the correspondence relationship is released (invalidated). According to one example of the present embodiment, in a scenario where the ownership relationship between the first object VA and the second object WA is established, it is expected that the processing related to the setting of the correspondence relationship will be more efficient.

[0190] The objects (VA, WA) for which the ownership relationship is established may not be particularly limited and may be appropriately selected according to the implementation. In one example, the first object VA may be a user, and the second object WA may be a mobile object owned by the user (e.g., a private car). According to an example of this implementation, in a scene where a mobile object owned by a user appears, it is expected that the processing related to the setting of the corresponding relationship will be more efficient.

[0191] In another example, the first object VA may be a user, and the second object WA may be a mobile object rented (becomes an object) by the user. The prescribed relationship may be that the user rents the mobile object. That is, during the period when the corresponding individual of the mobile object is rented by the corresponding user, the setting of the corresponding relationship between the corresponding user and the corresponding individual of the mobile object can be maintained, and after the rental period ends, the corresponding relationship is released (invalidated). According to an example of the present embodiment, in a scene where a rented mobile object (such as a rental car) appears, it can be expected that the processing related to the setting of the corresponding relationship will be more efficient.

[0192] Among them, whether the prescribed relationship is established can be appropriately judged according to the implementation method. For example, there is a situation where whether the object for which the prescribed relationship is established can be judged based on attribute information, such as whether the mobile body (the second object WA) is a private car or a rental car. In view of this, in one example, whether the prescribed relationship is established can be determined based on the attribute information of at least one of the first object VA and the second object WA. The attribute information may be included in each object information (O10, O20). In another example, whether the prescribed relationship is established can be determined based on information provided from an external system (ownership information, rental information, etc.). The external system can be, for example, a system that participates in the prescribed relationship, such as a terminal of a sales store or a terminal of a rental company. In another example, whether the prescribed relationship is established can be determined based on a notification from at least one of the first terminal 4 of the first object VA and the second terminal 5 of the second object WA.

[0193] In addition, the elimination of the prescribed relationship can be appropriately detected according to the implementation method. In one example, the elimination of the prescribed relationship can be detected based on information provided from an external system (change information of the ownership relationship, information on the end of the lease, etc.). In another example, at least one of the first terminal 4 and the second terminal 5 of the first object VA and the second object WA in which the prescribed relationship is established can send a notification for notifying the situation to the management server 1 or an external server (first server 2, second server 3, etc.) when the prescribed relationship ends. The management server 1 can detect the elimination of the prescribed relationship by receiving the notification or referring to the information of the external server.

[0194] (I-2) Cancellation of association establishment settings

[0195] For example, in Figure 2 In the scenario, there is a case where the corresponding individual of the second object WA is a moving body of a public transportation agency, and the generation and disappearance of repeated use relationships are less due to the types of the first object VA and the second object WA. In such a case, by selecting the cancellation (invalidation) of the association establishment setting instead of the maintenance of the association establishment setting, it is possible to achieve efficiency of the memory resources used in the maintenance of the association establishment setting.

[0196] In view of this, in an example of the present embodiment, the management server 1 may be further configured to cancel (invalidate) the corresponding relationship based on detecting the end of the use of the second object WA after the setting of the corresponding relationship is established between the second object WA of the second specified type. The end of use is an example of the disappearance of the use relationship. The end of use can be appropriately detected according to the embodiment. In one example, along with the end of use, at least one of the first terminal 4 and the second terminal 5 can perform arbitrary information processing, and the execution of the information processing can be used as a trigger to send a release request from at least one of the first terminal 4 and the second terminal 5. The end of use can be detected based on the release request.

[0197] Figure 8 An example of an execution scenario of the association cancellation (invalidation) involved in this embodiment is schematically shown. Figure 8 In one example, the second object WA7 is an example of a second object WA of a second predetermined type. The first object VA1 is an example of a first object VA that is set to establish a correspondence relationship with the second object WA of the second predetermined type. Figure 8 In the example of , the first terminal 4 of the first object VA1 and the second terminal 5 of the second object WA7 can perform data exchange with the start of use. At least one of the first terminal 4 and the second terminal 5 can send an association establishment request to the management server 1 based on the data exchange. Figure 8In an example, it is assumed that the management server 1 establishes an activated association establishment setting between the first object VA1 and the second object WA7 according to the association establishment request. Then, the first terminal 4 of the first object VA1 and the second terminal 5 of the second object WA7 can perform data exchange with the end of use. At least one of the first terminal 4 and the second terminal 5 can send a release request to the management server 1 based on the data exchange. The management server 1 can release (invalidate) the correspondence between the first object VA1 and the second object WA7 according to the release request.

[0198] According to an example of the present embodiment, in a scenario where the second object WA is of the second specified type, it is possible to expect efficiency in the memory resources used in maintaining the association establishment setting. The second specified type can be appropriately selected according to the embodiment. From the perspective of achieving efficiency in memory resources, it is preferred that the second specified type is a type with a low frequency of setting an activated correspondence relationship (i.e., generating a utilization relationship) between the same individual of the second object WA and the same individual of the first object VA.

[0199] In one example, the first object VA may be a user, and the second object WA may be a moving body. The second object WA of the second specified type may be a moving body of a public transportation agency. That is, when the corresponding user uses the corresponding individual of the moving body of the public transportation agency, an activated correspondence setting may be established between the corresponding individual of the moving body and the corresponding user. The correspondence may be released (invalidated) based on the fact that the use of the corresponding individual of the moving body of the public transportation agency has ended. According to an example of the present embodiment, in a scenario where a moving body of a public transportation agency (such as a taxi, etc.) appears, it is possible to expect efficiency in the memory resources used in maintaining the association establishment setting.

[0200] (II) Conditions for rescission

[0201] The release condition indicates a condition for releasing (invalidating or inactivating) the correspondence relationship of the object. The release condition can be defined appropriately according to the embodiment.

[0202] In one example, the release condition may be defined as releasing the correspondence at an arbitrarily set release time. For example, the release time may be assigned by a user's designation, a designation from another application (scheduler, etc.), etc. In this case, the management server 1 may release the correspondence of the object upon the arrival of the release time. The release time may be set as the validity period of the above-mentioned association establishment information D10. In the case where the release time is set according to the validity period, the management server 1 may process the correspondence of the object as being released upon the arrival of the release time.

[0203] In another example, the release condition may be defined as releasing any of the repeated corresponding relationships when the setting of multiple corresponding relationships is repeated for the same individual of the first object VA or the second object WA due to the interruption of the setting of the corresponding relationship involving other individuals of at least one of the first object VA and the second object WA. The number of activated corresponding relationships (association establishment) that can be set for the same individual of the second object WA may not be limited to one, but may be more than two. In addition, the number of corresponding relationships (association establishment) that can be maintained in an inactive state for the same individual of the first object VA may be infinite or limited. When the repetition of the setting of the corresponding relationship exceeds a threshold (upper limit), the management server 1 may release any of the corresponding relationships that were previously set and maintained. The threshold may be appropriately assigned. Which corresponding relationship to release may be appropriately determined based on priority, order, type of object, etc. The management server 1 may send a query related to the release to at least one of the first terminal 4 and the second terminal 5, and may determine the corresponding relationship to be released based on the answer obtained.

[0204] For example, Figure 2 As in the example of , it is assumed that the first object VA is a user and the second object WA is an object of use. In this case, the number of users who can establish correspondence with the same object of use may be infinite or limited. In the case where the number of users who can establish correspondence is limited, the upper limit of the number of users who can establish correspondence can be appropriately assigned by a threshold. The threshold can be set according to the attributes of the object of use (for example, the number of possible passengers). When the management server 1 newly accepts the setting of the correspondence relationship for the corresponding individual of the object of use, it can refer to the association establishment information D10 to extract the previous correspondence relationship set and maintained for the corresponding individual of the object of use. In the case where the duplication of the setting of the correspondence relationship for the corresponding individual of the object of use due to the newly accepted setting of the correspondence relationship exceeds the threshold, the management server 1 can abandon the request for the setting of the newly accepted correspondence relationship, or cancel (invalidate or inactivate) at least one of the extracted previous correspondence relationships. In the case of canceling the previous correspondence relationship, the management server 1 can decide the correspondence relationship to be canceled according to the priority and order of the users (for example, the earlier the correspondence relationship is set, the more it will be canceled).

[0205] As a specific example, Figure 2In the example, it is assumed that the mobile object is a private car, and the first user and the second user are, for example, family members who share the private car of the object. The private car can be renamed as a frequently used object. For the sake of convenience, it is assumed that the number of users who can establish a correspondence with the private car of the object is 1. In this case, during the period when the activated correspondence between one of the first user and the second user and the private car of the object is set, the management server 1 can change the status of the previous correspondence (the correspondence between one party and the private car of the object) from activated to inactivated according to the setting of the correspondence between the other party and the private car of the object.

[0206] In addition, the number of objects that can be associated and maintained in an inactive state for the same user may be infinite or limited. In the case where the number of objects that can maintain an association is limited, the upper limit of the number of objects can be appropriately assigned by a threshold. When the management server 1 newly accepts the setting of a correspondence relationship for the user of the object, it can refer to the association establishment information D10 to extract the previous correspondence relationship set and maintained for the user of the object. In the case where the duplication of the setting of the correspondence relationship for the user of the object due to the newly accepted setting of the correspondence relationship exceeds the threshold, the management server 1 can abandon the request for the setting of the newly accepted correspondence relationship, or cancel (invalidate) at least one of the extracted previous correspondence relationships. In the case of canceling the previous correspondence relationship, the management server 1 can decide the correspondence relationship to be canceled based on the priority and type of the object (for example, whether it is a frequently used object or a temporary object).

[0207] Furthermore, in the case where the correspondence of the object is cancelled with the establishment of the prescribed cancellation condition, the above-mentioned method may be adopted in which the correspondence is not cancelled (invalidated) but maintained in an activated or inactivated state until the prescribed relationship is eliminated. That is, in the case where the prescribed relationship is established, the management server 1 may select a process of changing the state of the designated correspondence to inactivated until the prescribed relationship is eliminated as the cancellation process with the establishment of the prescribed cancellation condition. After the prescribed relationship is eliminated, the management server 1 may cancel the correspondence.

[0208] (Use scenarios of association establishment information)

[0209] As described above, the association information D10 can be used in various situations. In one example, the association information D10 can be used only to track the generation and disappearance of the relationship between the first object VA and the second object WA.

[0210] In another example, during a period in which an activated correspondence is set between the first object VA and the second object WA, the association establishment information D10 may be used to enable at least a portion of the authority associated with either the first object VA or the second object WA to be exercised by the other party. For example, the management server 1 may be configured to further perform the following processing: validating the exercise of the authority associated with the corresponding first object VA (the corresponding individual of the first object VA) by the second object WA (the corresponding individual of the second object WA) to which an activated correspondence is set according to the setting in which an activated correspondence is established. In addition, the management server 1 may be configured to further perform the following processing: invalidating the exercise of the authority associated with the corresponding first object VA by the second object WA (the corresponding individual of the second object WA) to which an inactivated correspondence is set according to the setting in which an inactivated correspondence is established. Figure 2 In the example of the present embodiment, when an activated correspondence relationship is set between the user and the mobile body, the association establishment information D10 can be used to enable at least a part of the authority associated with the user to be exercised by the mobile body. According to an example of the present embodiment, by switching the state of the setting of the correspondence relationship between activation and inactivation, it is possible to control the permission and prohibition of the exercise of the authority associated with the first object VA.

[0211] Fig. 9 An example of a usage scenario of the association information D10 according to the present embodiment is schematically shown. Fig. 9 Conceived in Figure 2 In the example, a scenario is envisioned in which the authority to establish an association with a user is exercised from a mobile body. In addition, it is envisioned that the association establishment information D10 is configured to include a first identifier I10 and a second identifier I20 to represent a first object VA (user) and a second object WA (mobile body) with which a corresponding relationship is set. Furthermore, it is envisioned that the user's information is managed by the first server 2 and the mobile body's information is managed by the second server 3. The external system SY1 is equipped in a place where various services are exercised (for example, a parking lot, etc.), and is configured to perform information processing for providing the service of the object to a user who has authority over the object. The configuration and services of the external system SY1 are not particularly limited and can be appropriately selected according to the implementation method.

[0212] First, in step U10, the external system SY1 can obtain the second identifier I20 (mobile body identifier) ​​from the moving body of the object. The method for obtaining the second identifier I20 can be appropriately selected according to the implementation method. In one example, the external system SY1 can obtain the second identifier I20 from the second terminal 5 by exchanging data with the second terminal 5. The method of data exchange can be the same as the data exchange between the first terminal 4 and the second terminal 5. In another example, when the second identifier I20 is a car registration number, the external system SY1 can capture the license plate number through an image sensor and obtain the second identifier I20 by analyzing the obtained image.

[0213] In step U20, the external system SY1 can use the obtained second identifier I20 as a query to inquire the management server 1 whether there is a valid correspondence relationship at the object date and time for the object moving body. Valid means that the setting of the activated correspondence relationship is maintained at the object date and time. In addition, the object date and time is basically the current (instant), but it is not limited to this. For example, in the case of performing a settlement process for a past date and time, the object date and time may be a past date and time. When there is a valid correspondence relationship, the first identifier I10 (user identifier) ​​of the user associated with the object moving body is extracted. On the other hand, when there is no valid correspondence relationship and the user associated with the object moving body cannot be extracted, this processing can end.

[0214] In step U30, the external system SY1 can use the extracted first identifier I10 as a query to inquire about the exercisable authority of the user associated with the mobile body of the object from the first server 2. The first server 2 can refer to the first object information O10 (user information O10A) to extract the exercisable authority associated with the user of the object. In the case where the exercisable authority cannot be extracted, the present process can be terminated. In addition, in the first object information O10 (user information O10A), whether the mobile body is allowed to exercise the authority can be set for each authority. The exercisable authority can be extracted based on the setting. In addition, when the authority of the object that the external system SY1 wants to exercise is not included in the exercisable authority, the present process can also be terminated. The authority to exercise the object can be appropriately specified at any time. In one example, the authority to exercise the object can be pre-specified in the external system SY1 or specified by the user.

[0215] In step U40, when the exercisable permissions include permissions for the object, the external system SY1 can perform processing for exercising the permissions for the object. Thus, the permissions associated with the user can be exercised from the mobile body, and the user can receive services via the mobile body. For example, in a case where the permission information includes information of public personal authentication and the permissions of the object are related to public personal authentication, the user can receive public services via the mobile body. In addition, for example, in a case where the permission information includes settlement information and the permissions of the object are related to settlement, the user can receive settlement services via the mobile body. Settlement services can be, for example, payment of parking fees, highway fees, drive through fees, public transportation fees, rental fees, and the like. In addition, for example, in a case where the permission information includes information related to electronic prescriptions and the object's permission is to receive medicines prescribed in accordance with electronic prescriptions, the user can exercise the electronic prescription via the mobile body and receive the medicines.

[0216] In addition, for example, in the case where multiple users use an individual of a mobile body, such as multiple users riding in the same vehicle, the user who exercises the authority can be appropriately selected. In one example, the user who exercises the authority can be selected by activating the correspondence of one of the multiple users who use the same individual of the mobile body. In another example, the correspondence of two or more users among the multiple users who use the same individual of the mobile body can be set to be activated. In this case, the method of exercising the authority can be appropriately adjusted within the two or more users whose activated correspondence is set. For example, the authority of one or more selected users (representatives) can be exercised. The selection of the user can be performed by at least one of the external system SY1, the first terminal 4, and the second terminal 5. In addition, for example, in the case where the exercise of authority is the payment of fees, the authority of each user can be exercised according to the prescribed rules. As a specific example, the payment fee can be equally distributed to each user, and the authority of each user can be exercised for the payment of the distributed fees. The fees allocated to each user can also be appropriately specified.

[0217] In addition, in another example, a group can be pre-set among multiple users, and priorities can be set for members (users) in the group. For example, in the case of a family using their own car, a group can be set for one family, and priorities can be set according to the relationship within the family. As an example, it can be set that the priority of parents is high and the priority of children is low. The information of the group and priority can be appropriately managed, for example, by the first object information O10 (user information O10A), etc. Accordingly, the correspondence between more than two users in the same group among multiple users of the same individual using the mobile body can be set to be activated. In this case, the authority of each user can be exercised according to the priority. For example, when parents and children use their own car and the priority of the parents is set high, the authority of the parents can be exercised. Exercising authority according to priority includes selecting users who exercise authority according to priority (the higher the priority of the user, the more they are selected as the object of authority exercise), and determining the proportion of exercising authority according to priority (for example, the higher the priority of the user, the higher the payment fee is assigned).

[0218] In addition, the processing steps for exercising the above authority are only an example, and each step can be changed as much as possible. For the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. In addition, in the above processing steps, the user can be replaced by the first object VA, and the mobile body can be replaced by the second object WA. Moreover, in the above processing steps, "first" and "second" can be replaced.

[0219] (Data communication between devices)

[0220] The data communication between the devices (management server 1, first server 2, second server 3, first terminal 4 and second terminal 5) may not be particularly limited and may be appropriately selected according to the implementation method. The network between the devices may be appropriately selected from, for example, the Internet, a wireless communication network, a mobile communication network, a telephone network, a dedicated network, a local area network, etc. The data communication between the devices may be encrypted by methods such as SSL (Secure Socket Layer) and TLS (Transport Layer Security). In one example, each terminal (4, 5) may have a SIM (Subscriber Identity Module), and the data communication between each terminal (4, 5) and the server (management server 1, first server 2, second server 3) may be performed by encrypted communication using the SIM.

[0221] [2 Configuration example]

[0222] [Hardware Configuration Example]

[0223] (Management Server)

[0224] Fig. 10A An example of the hardware configuration of the management server 1 according to the present embodiment is schematically shown. The management server 1 according to the present embodiment is a computer in which a control unit 11, a storage unit 12, a communication interface 13, an input device 14, an output device 15, and a drive 16 are electrically connected.

[0225] The control unit 11 includes a CPU (Central Processing Unit) as a hardware processor, RAM, ROM (Read Only Memory), etc., and is configured to execute arbitrary information processing based on programs and various data. The control unit 11 (CPU) is an example of a processor resource of the management server 1.

[0226] The storage unit 12 may be composed of, for example, a hard disk drive, a solid state drive, a semiconductor memory, etc. The storage unit 12 (as well as RAM and ROM) is an example of a memory resource. In the present embodiment, the storage unit 12 stores various information such as the management program 81 and the association establishment information D10. The management program 81 is used to cause the management server 1 to execute information processing related to setting and canceling the corresponding relationship with the first object VA and the second object WA (described later). Fig.12 as well as Fig.13 The management program 81 includes a series of commands for information processing.

[0227] The communication interface 13 is configured to perform wired or wireless communication via a network. The communication interface 13 may be configured, for example, by a wired LAN (Local Area Network) module, a wireless LAN module, etc. The management server 1 may perform data communication with other computers (the first server 2, the second server 3, the first terminal 4, and the second terminal 5) via the communication interface 13.

[0228] The input device 14 is, for example, a device for inputting, such as a mouse, a keyboard, or an operation button. The output device 15 is, for example, a device for outputting, such as a display or a speaker. The operator can operate the management server 1 by using the input device 14 and the output device 15. The input device 14 and the output device 15 can be integrally formed by, for example, a touch panel display or the like. The input device 14 and the output device 15 can be connected via an external interface. The external interface can be appropriately configured to be connected to an external device in a wired or wireless manner, for example, through a USB (Universal Serial Bus) port, a dedicated port, a wireless communication port, or the like.

[0229] The drive 16 is a device for reading various information such as programs stored in the storage medium 91. At least one of the management program 81 and the association establishment information D10 can be stored in the storage medium 91 instead of the storage unit 12 or on the basis of the storage unit 12. The storage medium 91 is configured to store various information (stored programs, etc.) through electrical, magnetic, optical, mechanical or chemical effects in a manner that a computer or other machine can read the information. The management server 1 can obtain at least one of the management program 81 and the association establishment information D10 from the storage medium 91. Among them, the storage medium 91 can be a disk-type storage medium such as a CD, DVD, etc., or a storage medium other than a disk-type such as a semiconductor memory (such as a flash memory). The type of the drive 16 can be appropriately selected according to the type of the storage medium 91. The drive 16 can be connected via an external interface.

[0230] In addition, regarding the specific hardware configuration of the management server 1, the components can be appropriately omitted, replaced, and added according to the implementation method. For example, the control unit 11 may include multiple hardware processors. The hardware processor may be composed of a microprocessor, an FPGA (field-programmable gate array), a DSP (digital signal processor), a GPU (Graphics Processing Unit), an ASIC (application specific integrated circuit), etc. At least one of the input device 14, the output device 15, and the driver 16 may be omitted. The association establishment information D10 may also be stored in an external computer (such as NAS, etc.) accessible to the management server 1 instead of the storage unit 12. The management server 1 may be composed of multiple computers. In this case, the hardware configuration of each computer may be consistent or inconsistent. In addition to being an information processing device designed specifically for the service to be provided, the management server 1 may also be a general-purpose server device, a general-purpose computer, etc.

[0231] (Server 1, Server 2)

[0232] The hardware configuration of each server (2, 3) may be the same as that of the management server 1. In one example, each server (2, 3) may be a computer in which a control unit, a storage unit, a communication interface, an input device, an output device, and a drive are electrically connected. Each server (2, 3) may be composed of one or more computer devices. The processor resources of each server (2, 3) may be composed of one or more processors. The type of processor may be appropriately selected. The first object information O10 may be stored in at least one of the memory resources of the first server 2 and the external computer (NAS, etc.) accessible to the first server 2. The second object information O20 may be stored in at least one of the memory resources of the second server 3 and the external computer (NAS, etc.) accessible to the second server 3. Regarding the hardware configuration of each server (2, 3), the constituent elements may be appropriately omitted, replaced, and added according to the implementation method. In addition to being an information processing device designed specifically for the service to be provided, each server (2, 3) may also be a general-purpose server device, a general-purpose computer, etc.

[0233] (Terminal 1)

[0234] Fig. 10B An example of the hardware configuration of the first terminal 4 according to the present embodiment is schematically shown. The first terminal 4 according to the present embodiment is a computer in which a control unit 41, a storage unit 42, a communication interface 43, an input device 44, an output device 45, a driver 46, and a positioning module 47 are electrically connected. The control unit 41 to the driver 46 and the storage medium 94 of the first terminal 4 can be configured similarly to the control unit 11 to the driver 16 and the storage medium 91 of the management server 1 described above.

[0235] The control unit 41 (CPU) is an example of a processor resource of the first terminal 4, and the storage unit 42 (as well as RAM and ROM) is an example of a memory resource of the first terminal 4. In the present embodiment, the storage unit 42 stores various information such as the program 84 and the first identifier I10. The program 84 is for causing the first terminal 4 to execute information processing related to association establishment (described later). Fig.12 by Fig.13 ) program. The program 84 includes a series of commands for the information processing. At least one of the program 84 and the first identifier I10 can be stored in the storage medium 94 instead of the storage unit 42 or on the basis of the storage unit 42. The first terminal 4 can obtain at least one of the program 84 and the first identifier I10 from the storage medium 94. The first terminal 4 can communicate data with other computers (management server, first server 2, second server 3, second terminal 5, etc.) via the communication interface 43. The first terminal 4 can be operated via the input device 44 and the output device 45.

[0236] In addition, regarding the specific hardware configuration of the first terminal 4, the components can be appropriately omitted, replaced, and added according to the implementation method. For example, the control unit 41 may include multiple hardware processors. The hardware processor may be composed of a microprocessor, an FPGA, a DSP, a GPU, an ASIC, an ECU (Electronic Control Unit), etc. At least one of the input device 44, the output device 45, the driver 46, and the positioning module 47 may be omitted. The first identifier I10 may not be stored in the storage unit 42. The first identifier I10 may be obtained every time. In order to obtain data such as identifiers and information used in authentication, the first terminal 4 may also have data acquisition devices such as sensors and reading devices. The communication interface 43 may be composed of multiple types of modules. For example, the communication interface 43 has a short-range wireless communication module and a wireless communication module, and the first terminal 4 can communicate data with the second terminal 5 via the short-range wireless communication module, and communicate data with the server (management server 1, first server 2, second server 3) via the wireless communication module. The first terminal 4 may be composed of multiple computers. In this case, the hardware configurations of the computers may or may not be the same. The first terminal 4 may be a general-purpose computer, terminal device (eg, smartphone, tablet PC, etc.), or the like, in addition to an information processing device designed specifically for the service to be provided.

[0237] (Terminal 2)

[0238] Fig. 10C An example of the hardware configuration of the second terminal 5 according to the present embodiment is schematically shown. The second terminal 5 according to the present embodiment is a computer in which a control unit 51, a storage unit 52, a communication interface 53, an input device 54, an output device 55, a driver 56, and a positioning module 57 are electrically connected. The control unit 51 to the driver 56 and the storage medium 95 of the second terminal 5 can be configured similarly to the control unit 11 to the driver 16 and the storage medium 91 of the management server 1 described above.

[0239] The control unit 51 (CPU) is an example of a processor resource of the second terminal 5, and the storage unit 52 (as well as RAM and ROM) is an example of a memory resource of the second terminal 5. In the present embodiment, the storage unit 52 stores various information such as the program 85 and the second identifier I20. The program 85 is for causing the second terminal 5 to execute information processing related to association establishment (described later). Fig.12 as well as Fig.13) program. The program 85 includes a series of commands for the information processing. At least one of the program 85 and the second identifier I20 can be stored in the storage medium 95 instead of the storage unit 52 or on the basis of the storage unit 52. The second terminal 5 can obtain at least one of the program 85 and the second identifier I20 from the storage medium 95. The second terminal 5 can communicate data with other computers (management server 1, first server 2, second server 3, first terminal 4, etc.) via the communication interface 53. The second terminal 5 can be operated via the input device 54 and the output device 55.

[0240] In addition, regarding the specific hardware configuration of the second terminal 5, the components can be appropriately omitted, replaced, and added according to the implementation method. For example, the control unit 51 may include multiple hardware processors. The hardware processor may be composed of a microprocessor, an FPGA, a DSP, a GPU, an ASIC, an ECU, etc. At least one of the input device 54, the output device 55, the driver 56, and the positioning module 57 may be omitted. The second identifier I20 may not be stored in the storage unit 52. The second identifier I20 may be obtained every time. In order to obtain data such as identifiers and information used in authentication, the second terminal 5 may also have data acquisition devices such as sensors and reading devices. The communication interface 53 may be composed of multiple types of modules like the above-mentioned first terminal 4. The second terminal 5 may be composed of multiple computers. In this case, the hardware configuration of each computer may be consistent or inconsistent. In addition to being an information processing device designed specifically for the service to be provided, the second terminal 5 may also be a general-purpose computer, terminal device, etc.

[0241] [Software Configuration Example]

[0242] Fig.11 An example of the software configuration of each device (the management server 1 , the first terminal 4 , and the second terminal 5 ) according to the present embodiment is schematically shown.

[0243] (Management Server)

[0244] The control unit 11 of the management server 1 expands the management program 81 stored in the storage unit 12 into the RAM, and uses the CPU to execute the commands included in the management program 81. Thus, the management server 1 operates as a computer including the receiving unit 111, setting unit 112, canceling unit 113, and notifying unit 114 as software modules.

[0245] The receiving unit 111 is configured to directly or indirectly receive an association establishment request from at least one of the first terminal 4 of the corresponding individual of the first object VA and the second terminal 5 of the corresponding individual of the second object WA, based on the generation of the utilization relationship between the corresponding individual of the first object VA and the corresponding individual of the second object WA. The receiving unit 111 is configured to accept the setting of the corresponding relationship between the corresponding individual of the first object VA and the corresponding individual of the second object WA by receiving the association establishment request.

[0246] The setting unit 112 is configured to perform setting processing of the accepted correspondence. The setting processing may include setting a new activated correspondence between the corresponding individual of the first object VA and the corresponding individual of the second object WA specified by the association establishment request, and changing the state of the correspondence from inactive to active. Sometimes, based on the setting of the correspondence involving two or more association establishment requests related to the same individual of the first object VA, two or more correspondences are established for the same corresponding individual of the first object VA with two or more different individuals of the second object WA. In this case, the setting unit 112 is configured to activate the setting of one of the two or more correspondences and inactivate the settings of the other correspondences based on the status information ST10 obtained from the corresponding individual of the first object VA and at least one of the two or more individuals of the second object WA.

[0247] The release unit 113 is configured to execute a release process of the correspondence relationship in response to reception of a release request from at least one of the first terminal 4 and the second terminal 5 or satisfaction of a predetermined release condition. The release process may include releasing (invalidating) the setting of the correspondence relationship and changing the state of the correspondence relationship to inactive.

[0248] The notification unit 114 is configured to send a notification indicating the result of executing the processing of setting the correspondence relationship to at least one of the first terminal 4 and the second terminal 5. The notification unit 114 is configured to send a notification indicating the result of executing the processing of releasing the correspondence relationship to at least one of the first terminal 4 and the second terminal 5.

[0249] (Terminal 1)

[0250] The control unit 41 of the first terminal 4 executes the command included in the program 84 through the CPU. As a result, the first terminal 4 operates as a computer having a data exchange unit 411, a setting entrusting unit 412, and a release entrusting unit 413 as software modules. The data exchange unit 411 is configured to perform data exchange with the second terminal 5. The setting entrusting unit 412 is configured to send an association establishment request (an association establishment setting entrustment) to the management server 1. The release entrusting unit 413 is configured to send a release request (an association establishment release entrustment) to the management server 1.

[0251] (Terminal 2)

[0252] The control unit 51 of the second terminal 5 executes the command included in the program 85 through the CPU. As a result, the second terminal 5 operates as a computer having a data exchange unit 511, a setting entrusting unit 512, and a release entrusting unit 513 as software modules. The data exchange unit 511 is configured to perform data exchange with the first terminal 4. The setting entrusting unit 512 is configured to send an association establishment request (an association establishment setting entrustment) to the management server 1. The release entrusting unit 513 is configured to send a release request (an association establishment release entrustment) to the management server 1.

[0253] (other)

[0254] In the present embodiment, an example is described in which each software module of each device is implemented by a general-purpose CPU. However, part or all of the above-mentioned software modules may also be implemented by one or more dedicated processors. Each of the above-mentioned modules may be implemented as a hardware module. Regarding the software composition of each device, the modules may be appropriately omitted, replaced, and added according to the implementation method. For example, in the case of adopting a method of sending an association establishment request only from the terminal of one of the first terminal 4 and the second terminal 5, the setting delegation unit may be omitted from the terminal of the other party. Similarly, in the case of adopting a method of sending a release request only from the terminal of one of the first terminal 4 and the second terminal 5, the release delegation unit may be omitted from the terminal of the other party.

[0255] [3 Action Examples]

[0256] (Association establishment settings)

[0257] Fig.12 An example of the process steps of association establishment setting based on the system 100 involved in this embodiment is shown. The following process steps are an example of an information processing method executed by a computer. The process steps of the management server 1 in the following process steps are an example of a management method executed by a computer.

[0258] In step S10, at least one of the control unit 41 of the corresponding first terminal 4 and the control unit 51 of the second terminal 5 transmits an association establishment request to the management server 1 according to the generation of the utilization relationship between the corresponding individuals of the first object VA and the second object WA. In one example, the control unit 41 of the corresponding first terminal 4 may operate as a data exchange unit 411 according to the generation of the utilization relationship and perform data exchange with the corresponding second terminal 5. The control unit 51 of the second terminal 5 may operate as a data exchange unit 511 and perform data exchange with the first terminal 4. The control unit 41 of the first terminal 4 may operate as a setting entrusting unit 412 with the data exchange as a trigger and transmit an association establishment request to the management server 1. The control unit 51 of the second terminal 5 may operate as a setting entrusting unit 512 and transmit an association establishment request to the management server 1. The association establishment request may be directly transmitted to the management server 1 or may be indirectly transmitted via an external computer (the first server 2, the second server 3, etc.).

[0259] In step S20, the control unit 11 of the management server 1 operates as the receiving unit 111, and directly or indirectly receives an association establishment request from at least one of the first terminal 4 of the corresponding individual of the first object VA and the second terminal 5 of the corresponding individual of the second object WA. The control unit 11 receives the setting of the correspondence relationship between the corresponding individual of the first object VA and the corresponding individual of the second object WA by receiving the association establishment request.

[0260] In step S10, when the association establishment request is sent from both the first terminal 4 and the second terminal 5, one association establishment request may be sent separately from the first terminal 4 and the second terminal 5, or the same association establishment request may be sent. In the case of sending separately, part of the association establishment request data may be sent from the first terminal 4, and the remaining data may be sent from the second terminal 5. In step S20, in order to determine the combination of corresponding individuals of the first object VA and the second object WA for which the setting of the corresponding relationship is actually required, the management server 1 may appropriately determine the corresponding establishment of the data (that is, determine the combination of corresponding data).

[0261] The establishment of data correspondence can be determined by any method. In one example, the data sent from each terminal (4, 5) may include shared information for determining the establishment of data correspondence. The shared information may be composed of, for example, consistent information having a relationship such as a corresponding relationship being established. The management server 1 may determine the establishment of data correspondence based on the relationship between the shared information included in the data received from one of the first terminal 4 and the second terminal 5 and the shared information included in the data received from the other party.

[0262] The shared information can be composed arbitrarily. In one example, the shared information can be composed of a combination of a first identifier I10 and a second identifier I20. The management server 1 can determine the establishment of data correspondence based on the consistency of the combination of identifiers (I10, I20) included in the data received from the first terminal 4 and the combination of identifiers (I10, I20) included in the data received from the second terminal 5. In another example, the shared information can be composed of temporary information such as random numbers, timestamps, hash values, etc. In this case, the management server 1 can determine the establishment of data correspondence based on the relationship between the temporary information included in the data received from the first terminal 4 and the temporary information included in the data received from the second terminal 5. In addition, the shared information can be shared between the first terminal 4 and the second terminal 5 at any time. In a typical example, the first terminal 4 and the second terminal 5 can share the shared information when exchanging data.

[0263] In step S25, the control unit 11 of the management server 1 acts as the setting unit 112, and determines whether to establish two or more corresponding relationships with two or more different individuals of the second object WA for the same corresponding individual of the first object VA based on the setting of the corresponding relationship involved in the received two or more association establishment requests related to the same individual of the first object VA. In one example, the control unit 11 determines whether there is an activated existing association establishment setting with other individuals of the second object WA for the corresponding individual of the first object VA specified by the received association establishment request by referring to the association establishment information D10. When there is no activated existing association establishment setting with other individuals of the second object WA, the control unit 11 causes the processing to proceed to step S301. On the other hand, when there is an activated existing association establishment setting, the control unit 11 causes the processing to proceed to step S302.

[0264] In step S301, the control unit 11 acts as the setting unit 112 to update the association establishment information D10 by setting a new activated correspondence relationship between the first object VA and the second object WA specified by the association establishment request or by changing the state of the existing correspondence relationship to activated. The update of the association establishment information D10 for the setting of establishing a new correspondence relationship can be constituted by generating a corresponding new association establishment information D10. The update of the association establishment information D10 for changing the state of the correspondence relationship to activated can be constituted by recording information indicating the change to activated. In one example, the association establishment information D10 has Figure 3AIn the case of a configuration of, the control unit 11 can change the state of the corresponding relationship to active by storing a value indicating active in the state field of the corresponding association establishment information D10. In the case where the association establishment information D10 is composed of a blockchain platform, the control unit 11 can change the state of the corresponding relationship to active by generating a transaction indicating a change to active in the corresponding relationship and appending the generated transaction to the blockchain. If the association establishment information D10 is updated, the control unit 11 advances the processing to the next step S40.

[0265] On the other hand, in step S302, the control unit 11 acts as the setting unit 112 and obtains the status information ST10. The control unit 11 updates the association establishment information D10 in a manner that activates the setting of one correspondence and inactivates the setting of other correspondences based on the status information ST10. In an example of the present embodiment, the method for selecting the activated correspondence may adopt at least any one of the above three methods. The update of the association establishment information D10 for the setting of establishing a new correspondence and changing the status of an existing correspondence to activated may be the same as described above. The update of the association establishment information D10 for changing the status of a correspondence to inactivated may be constituted by recording information indicating the change to inactivated. In one example, the association establishment information D10 has Figure 3A In the case of a configuration of, the control unit 11 can change the state of the corresponding relationship to inactive by storing a value indicating inactive in the state field of the corresponding association establishment information D10. In the case where the association establishment information D10 is composed of a blockchain platform, the control unit 11 can change the state of the corresponding relationship to inactive by generating a transaction indicating the change of the corresponding relationship to inactive and appending the generated transaction to the blockchain. If the association establishment information D10 is updated, the control unit 11 advances the processing to the next step S40. Among them, the processing of steps S301 and S302 is an example of the setting processing of the corresponding relationship corresponding to the accepted association establishment request (the above-mentioned step S30).

[0266] In step S40, the control unit 11 operates as the notification unit 114 to directly or indirectly send a notification indicating the result of the corresponding relationship setting process to at least one of the first terminal 4 and the second terminal 5. When the notification of the result is completed, the processing steps related to the association setting involved in this operation example are completed.

[0267] In addition, the above processing steps are only an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. For example, the process of establishing the association setting can include the authentication process of at least one of the first object VA and the second object WA.

[0268] (Remove association)

[0269] Fig.13 An example of the processing steps of disassociating the system 100 according to the present embodiment is shown. The following processing steps are an example of an information processing method executed by a computer. The processing steps of the management server 1 in the following processing steps are an example of a management method executed by a computer. Fig.13 In the example of FIG. 1 , a scenario is assumed in which a cancellation request is directly sent from the first terminal 4 to the management server 1 .

[0270] In step SZ10, the control unit 41 of the first terminal 4 operates as the release entrusting unit 413 and sends a request for release of the correspondence relationship to the management server 1. In response, the control unit 11 of the management server 1 receives the release request. The correspondence relationship for entrusting release can be appropriately specified. The trigger of the release request can be appropriately selected according to the implementation mode.

[0271] In step SZ20, the control unit 11 acts as the release unit 113 to release (invalidate) the setting of the corresponding relationship specified by the received release request or change the state of the corresponding relationship from active to inactive. The update of the association establishment information D10 for the change to inactive can be the same as described above. The update of the association establishment information D10 for releasing (invalidating) the corresponding relationship can be constituted by recording information indicating that it is released. In one example, when the association establishment information D10 has Figure 3A In the case of a configuration of, the control unit 11 can cancel the correspondence of the object by adding a cancellation time to the corresponding association establishment information D10 or setting a cancellation flag. In the case where the association establishment information D10 is composed of a blockchain platform, the control unit 11 can cancel the correspondence of the object by generating a transaction indicating the cancellation of the association establishment and adding the generated transaction to the blockchain.

[0272] In step SZ30, the control unit 11 operates as the notification unit 114 to transmit the execution result of the de-association process to the first terminal 4. When the notification of the result is completed, the process steps related to the de-association according to this operation example are terminated.

[0273] In addition, the above processing steps are only an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, steps can be appropriately omitted, replaced, and added according to the implementation method. For example, as mentioned above, the sending route of the release request may not be limited to Fig.13The example can be appropriately selected according to the implementation method. The release request can be sent from the second terminal 5 (release entrustment unit 513). The processing of the release request can include authentication processing of at least one of the first object VA and the second object WA. In addition, the control unit 11 of the management server 1 can replace the above-mentioned step SZ20 and act as the release unit 113 to release the corresponding relationship along with the establishment of the specified release condition.

[0274] [feature]

[0275] In the present embodiment, information indicating the setting of the correspondence between the corresponding individuals of the first object VA and the second object WA is recorded by the processing of step S30 (step S301, step S302). Through this record, the utilization relationship between the corresponding individuals of the first object VA and the second object WA can be tracked. In addition, in the present embodiment, for one individual of the first object VA, an association establishment setting is allowed to be established with each of multiple individuals of the second object WA. In the event that the association establishment setting for the corresponding individual of the first object VA conflicts due to the establishment of multiple association establishment settings, the state of the association establishment setting is switched by the processing of step S25 and step S302. The conflict is coordinated by switching the state of the association establishment setting. Thus, the utilization relationship related to the corresponding individual of the first object VA can be appropriately tracked. Therefore, in the present embodiment, at least in some scenarios, even if the setting and release of the association establishment are not repeated, the generation and disappearance of the utilization relationship can be dealt with by switching the state. Therefore, the utilization relationship between the first object VA and the second object WA can be easily tracked.

[0276] [4 Modifications]

[0277] The embodiments of the present disclosure have been described in detail above, but the descriptions so far are merely illustrations of the present disclosure in all respects. Various improvements or modifications can be made without departing from the scope of the present disclosure. For example, the following changes can be made. Among them, the same figure marks are used for the same components as the above-mentioned embodiments, and the descriptions of the same points as the above-mentioned embodiments are appropriately omitted. The following modifications can be appropriately combined.

[0278] <4.1>

[0279] In the above embodiment, the authentication process of the first object VA and the second object WA can be performed at least at any one of the association establishment setting and the association establishment release. The authentication process can be performed in at least one of the management server 1, the external server (the first server 2, the second server 3, etc.) and each terminal (4, 5). As an example, at least one of the following four authentication methods can be used.

[0280] (A) First authentication method

[0281] Fig.14 An example of the processing procedure of association establishment setting when the first authentication method is adopted is schematically shown. In the first authentication method, the second server 3 performs authentication of the second object WA according to the request of the first terminal 4 of the first object VA, and the first server 2 performs authentication of the first object VA according to the request of the second terminal 5 of the second object WA. As an association establishment request, each terminal (4, 5) requests each server (2, 3) to authenticate each other and reports the authentication result to the management server 1. Thus, each terminal (4, 5) sends the association establishment request to the management server 1.

[0282] The first server 2 is configured to have access to a first storage device that stores first registered inherent information CA10 for authentication of the first object VA. The first storage device may be composed of at least one of the memory resources of the first server 2 and an external storage device (NAS, etc.). The first registered inherent information CA10 may be included in the first object information O10. The second server 3 may be configured to have access to a second storage device that stores second registered inherent information CA20 for authentication of the second object WA. The second storage device may be composed of at least one of the memory resources of the second server 3 and an external storage device (NAS, etc.). The second registered inherent information CA20 may be included in the second object information O20.

[0283] Each registered inherent information (CA10, CA20) is inherent information pre-registered for the authentication of each object (VA, WA). As long as the inherent information can be used in authentication, its data format and composition are not particularly limited and can be appropriately selected according to the implementation method. The inherent information can be composed of any information, such as information from the object, information from the terminal, temporarily generated information, information generated by any other method, etc.

[0284] Information from an object may be, for example, biometric information, identification information assigned as inherent, etc. Biometric information may be, for example, facial images, fingerprints, voiceprints, etc. Identification information assigned as inherent may be, for example, a car registration number, a vehicle identification number, a personal number, etc. In the case of assigning an IC tag to an object, the identification information assigned as inherent may include information held by the IC tag. Information from a terminal may be, for example, a MAC address, terminal identification information, etc. Temporarily generated information may be, for example, a one-time password, a private address (dynamically generated address), etc. Temporarily generated information may be composed of a timestamp, a random number, a hash value, etc. Information generated by any other method may include, for example, a password, a verification code, information other than other symbol columns, etc.

[0285] First, when a utilization relationship is generated between corresponding individuals of the first object VA and the second object WA, data exchange is performed between the corresponding first terminal 4 and the second terminal 5 (step SA110, step SB110).

[0286] In step SA110, the second terminal 5 obtains the first identifier I10 and the first inherent information CA1 from the corresponding individual of the first object VA. The first inherent information CA1 corresponds to the first registered inherent information CA10. The second terminal 5 can appropriately obtain the first identifier I10 and the first inherent information CA1 from the first object VA during data exchange. Acquisition from the first object VA may include acquisition from the first terminal 4. For example, the second terminal 5 can obtain at least one of the first identifier I10 and the first inherent information CA1 from the first object VA via an input device, a sensor, etc. The second terminal 5 can obtain at least one of the first identifier I10 and the first inherent information CA1 from the first terminal 4 during data exchange.

[0287] In addition, in step SB110, the first terminal 4 obtains the second identifier I20 and the second inherent information CA2 from the corresponding individual of the second object WA. The second inherent information CA2 corresponds to the second registered inherent information CA20. The first terminal 4 can appropriately obtain the second identifier I20 and the second inherent information CA2 from the second object WA during data exchange. Acquisition from the second object WA may include acquisition from the second terminal 5. For example, the first terminal 4 can obtain at least one of the second identifier I20 and the second inherent information CA2 from the second object WA via an input device, a sensor, etc. The first terminal 4 can obtain at least one of the second identifier I20 and the second inherent information CA2 from the second terminal 5 during data exchange.

[0288] In step SA120, the second terminal 5 sends the first authentication request including the first identifier I10 and the first inherent information CA1 to the first server 2. Accordingly, the first server 2 receives the first authentication request of the corresponding individual of the first object VA. The first server 2 appropriately performs the authentication process of the first object VA according to the reception of the first authentication request. In one example, the first server 2 can retrieve the first object information O10 by using the first identifier I10 included in the first authentication request in the query, thereby extracting the first registered inherent information CA10 of the corresponding individual of the first object VA from the first object information O10. The first server 2 can compare the extracted first registered inherent information CA10 with the first inherent information CA1 included in the first authentication request. The comparison can be appropriately performed according to the inherent information used. The first server 2 can determine whether the authentication of the corresponding individual of the first object VA is established or not according to the result of the comparison. In step SA130, the first server 2 reports the authentication result of the corresponding individual of the first object VA to the management server 1. In one example, the first server 2 may attach the first identifier I10 of the first object VA to send the authentication result of the first object VA to the management server 1. The first server 2 may send the authentication result to the management server 1 regardless of whether the authentication is established or not, or may send the authentication result to the management server 1 only when the authentication is established.

[0289] On the other hand, in step SB120, the first terminal 4 sends the second authentication request including the second identifier I20 and the second inherent information CA2 to the second server 3. Accordingly, the second server 3 receives the second authentication request of the corresponding individual of the second object WA. The second server 3 appropriately performs the authentication process of the second object WA according to the reception of the second authentication request. In one example, the second server 3 can retrieve the second object information O20 by using the second identifier I20 included in the second authentication request in the query, thereby extracting the second registered inherent information CA20 of the corresponding individual of the second object WA from the second object information O20. The second server 3 can compare the extracted second registered inherent information CA20 with the second inherent information CA2 included in the second authentication request. The comparison can be appropriately performed according to the inherent information used. The second server 3 can determine whether the authentication of the corresponding individual of the second object WA is established or not according to the result of the comparison. In step SB130, the second server 3 reports the authentication result of the corresponding individual of the second object WA to the management server 1. In one example, the second server 3 may attach the second identifier I20 of the second object WA to send the authentication result of the second object WA to the management server 1. The second server 3 may send the authentication result to the management server 1 regardless of whether the authentication is established or not, or may send the authentication result to the management server 1 only when the authentication is established.

[0290] The second terminal 5 giving the first authentication request to the first server 2 and causing the first server 2 to send the authentication result to the management server 1 is an example of the second terminal 5 sending the association establishment request to the management server 1. In addition, the first terminal 4 giving the second authentication request to the second server 3 and causing the second server 3 to send the authentication result to the management server 1 is an example of the first terminal 4 sending the association establishment request to the management server 1. That is, when the first authentication method is adopted when setting the association establishment, the processing of step SA120, step SA130, step SB120, and step SB130 is an example of the processing of the above-mentioned step S10.

[0291] The management server 1 receives the authentication results of the corresponding individuals of each object (VA, WA) from each server (2, 3). In order to determine the combination of the corresponding individuals of the first object VA and the second object WA for which the setting of the corresponding relationship is actually required, the management server 1 can determine the corresponding establishment of the data of the authentication result by using the above-mentioned shared information and other methods. When the authentication results of the first object VA and the second object WA received are both established, the management server 1 sets the corresponding relationship between the corresponding individuals of the first object VA and the second object WA. The setting process of the corresponding relationship can be the same as the above-mentioned embodiment. In addition, a series of processes from data exchange between terminals (4, 5) to association establishment setting can be performed in real time according to the generation of the utilization relationship.

[0292] In the first authentication method, the authentication of the first object VA and the second object WA is performed on the first server 2 and the second server 3, respectively, based on the use relationship between the corresponding individuals of the first object VA and the second object WA. At this time, the authentication of the first object VA is entrusted from the second terminal 5 of the second object WA. The authentication of the second object WA is entrusted from the first terminal 4 of the first object VA. That is, instead of advancing the authentication of each of the self, a cross authentication is performed to advance the authentication of the other party. As a result, security can be expected to be ensured.

[0293] also, Fig.14 The processing steps are just an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. For example, the processing steps of steps SA110 to SA130 and steps SB110 to SB130 are not particularly limited and can be appropriately determined according to the implementation method. At least one of the authentication processing of the first object VA (steps SA110 to SA130) and the authentication processing of the second object WA (steps SB110 to SB130) can be omitted.

[0294] (B) Second authentication method

[0295] Fig.15 An example of the process of association establishment setting in the case of adopting the second authentication method is schematically shown. In the second authentication method, the management server 1 entrusts each server (2, 3) with authentication in response to a request from at least one of the first terminal 4 and the second terminal 5. That is, at least one of the first terminal 4 and the second terminal 5 sends an association establishment request including an authentication request for each object (VA, WA). The data (unique information) used in the authentication is the same as that in the first authentication method.

[0296] First, when the utilization relationship between the corresponding individuals of the first object VA and the second object WA is generated, data exchange is performed between the corresponding first terminal 4 and the second terminal 5 (step SC110, step SD110). At least one of the first terminal 4 and the second terminal 5 sends an authentication request including the first identifier I10, the first inherent information CA1, the second identifier I20 and the second inherent information CA2 as an association establishment request to the management server 1 (step SC120, step SD120). Accordingly, the management server 1 receives the authentication request including the first identifier I10, the first inherent information CA1, the second identifier I20 and the second inherent information CA2. The processing of step SC120 and step SD120 is an example of the processing of the above-mentioned step S10.

[0297] The sharing of data transmission can be appropriately determined according to the implementation method. In one example, the second terminal 5 may be responsible for sending the first identifier I10 and the first inherent information CA1, and the first terminal 4 may be responsible for sending the second identifier I20 and the second inherent information CA2. That is, in step SC110, the second terminal 5 may obtain the first identifier I10 and the first inherent information CA1 from the first object VA. Acquisition from the first object VA may include acquisition from the first terminal 4. In step SC120, the second terminal 5 may send an association establishment request including the acquired first identifier I10 and the first inherent information CA1 to the management server 1. In step SD110, the first terminal 4 may obtain the second identifier I20 and the second inherent information CA2 from the second object WA. Acquisition from the second object WA may include acquisition from the second terminal 5. In step SD120, the first terminal 4 may send an association establishment request including the acquired second identifier I20 and the second inherent information CA2 to the management server 1.

[0298] In addition, the sharing of data transmission may not be limited to such an example. In another example, at least one of the first identifier I10 and the first inherent information CA1 may be sent from the first terminal 4. At least one of the second identifier I20 and the second inherent information CA2 may be sent from the second terminal 5. In the case of adopting a method of sending in a divided manner, the management server 1 may determine the corresponding establishment of the data required for authentication by using the above-mentioned shared information and other methods in order to determine the combination of the corresponding individuals of the first object VA and the second object WA for which the setting of the corresponding relationship is actually required. In another example, the first identifier I10, the first inherent information CA1, the second identifier I20, and the second inherent information CA2 may be sent only from one of the first terminal 4 and the second terminal 5.

[0299] In step SC130, the management server 1 sends the first identifier I10 and the first inherent information CA1 in the received data to the first server 2, thereby entrusting the first server 2 with the authentication of the corresponding individual of the first object VA. Accordingly, the first server 2 can compare the first inherent information CA1 and the first registered inherent information CA10, and determine whether the authentication of the corresponding individual of the first object VA is established or not according to the result of the comparison. In step SC140, the first server 2 returns the authentication result of the corresponding individual of the first object VA to the management server 1.

[0300] Similarly, in step SD130, the management server 1 sends the second identifier I20 and the second inherent information CA2 to the second server 3 to entrust the second server 3 with the authentication of the corresponding individual of the second object WA. Based on this, the second server 3 can compare the second inherent information CA2 and the second registered inherent information CA20, and determine whether the authentication of the corresponding individual of the second object WA is established or not based on the comparison result. In step SD140, the second server 3 sends the authentication result of the corresponding individual of the second object WA to the management server 1.

[0301] The management server 1 receives the authentication results of the corresponding individuals of each object (VA, WA) from each server (2, 3). When the authentication results of the first object VA and the second object WA received are both established, the management server 1 sets a correspondence between the corresponding individuals of the first object VA and the second object WA. The setting process of the correspondence can be the same as the above-mentioned embodiment. Among them, a series of processes from data exchange between terminals (4, 5) to association establishment setting can be executed in real time according to the generation of the utilization relationship. Other structures can be the same as the first authentication method.

[0302] In the second authentication method, based on the use relationship between the first object VA and the second object WA, the first server 2 and the second server 3 respectively authenticate the first object VA and the second object WA. Security can be ensured by these two authentications.

[0303] also, Fig.15The processing steps are just an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. For example, the processing steps of steps SC110 to SC140 and steps SD110 to SD140 may not be particularly limited and may be appropriately determined according to the implementation method. At least one of the authentication processing of the first object VA (steps SC110 to SC140) and the authentication processing of the second object WA (steps SD110 to SD140) can be omitted.

[0304] (C-1) 3-1 Authentication Method

[0305] Fig.16 An example of the association setting process when the third-first authentication method is adopted is schematically shown. The third-first authentication method uses a time-limited certificate instead of unique information in authentication. The authentication process can be executed by the management server 1.

[0306] The first server 2 is configured to issue a first time-limited certificate CB10 to each individual of the first object VA. The second server 3 is configured to issue a second time-limited certificate CB20 to each individual of the second object WA.

[0307] Each time-limited certificate (CB10, CB20) is configured to become invalid after the validity period has passed. As long as the invalidation caused by the passage of the validity period can be controlled, the configuration of each time-limited certificate (CB10, CB20) may not be particularly limited and may be appropriately selected according to the implementation method. Each time-limited certificate (CB10, CB20) may include arbitrary information. In one example, each time-limited certificate (CB10, CB20) may be composed of a random number, a timestamp, a hash value, etc. Each time-limited certificate (CB10, CB20) may also be composed of temporary information such as a one-time password.

[0308] The validity period of each time-limited certificate (CB10, CB20) can be appropriately managed. Expiration due to the passage of the validity period can be appropriately determined. For example, whether the object's time-limited certificate is expired can be determined by adding a time-limited certificate that has passed the period set for the time-limited certificate to a revocation list, deleting the time-limited certificate from a valid list, updating it to a new time-limited certificate, assigning information indicating expiration (such as a timestamp), etc. When reference information such as a revocation list and a valid list is used in the management of the validity period, the reference information can be stored in any storage device that can be accessed from the system 100. Typically, the reference information of each time-limited certificate (CB10, CB20) can be stored in each server (2, 3).

[0309] First, in step SE110, the first terminal 4 of the first object VA sends a commission for the issuance of the first time-limited certificate CB10 to the first server 2 in association with the first identifier I10 of the first object VA. Based on the reception of the commission, the first server 2 issues the first time-limited certificate CB10 in association with the first identifier I10. In step SE120, the first server 2 returns the issued first time-limited certificate CB10 to the first terminal 4. Accordingly, the first terminal 4 receives the issued first time-limited certificate CB10 from the first server 2. The first terminal 4 saves the received first time-limited certificate CB10 so that it can be used as the first certificate CB1. In addition, in step SE130, the first server 2 also notifies the management server 1 of the issued first time-limited certificate CB10. The first server 2 can attach the first identifier I10 to notify the first time-limited certificate CB10.

[0310] In step SF110, the second terminal 5 of the second object WA sends a commission for the issuance of the second time-limited certificate CB20 to the second server 3 in association with the second identifier I20 of the second object WA. Based on the reception of the commission, the second server 3 issues the second time-limited certificate CB20 in association with the second identifier I20. In step SF120, the second server 3 returns the issued second time-limited certificate CB20 to the second terminal 5. Accordingly, the second terminal 5 receives the issued second time-limited certificate CB20 from the second server 3. The second terminal 5 saves the received second time-limited certificate CB20 so that it can be used as the second certificate CB2. In addition, in step SF130, the second server 3 also notifies the management server 1 of the issued second time-limited certificate CB20. The second server 3 can attach the second identifier I20 to notify the second time-limited certificate CB20.

[0311] When the utilization relationship between the corresponding individuals of the first object VA and the second object WA is generated, data exchange is performed between the corresponding first terminal 4 and the second terminal 5 (step SE140, step SF140). At least one of the first terminal 4 and the second terminal 5 sends an authentication request including the first certificate CB1 and the second certificate CB2 as an association establishment request to the management server 1 (step SE150, step SF150). Accordingly, the management server 1 receives the first certificate CB1 corresponding to the first time-limited certificate CB10 and the second certificate CB2 corresponding to the second time-limited certificate CB20. The processing of step SE150 and step SF150 is an example of the processing of the above-mentioned step S10.

[0312] The sharing of data transmission can be appropriately determined according to the implementation method. In one example, the second terminal 5 may be responsible for sending the first certificate CB1, and the first terminal 4 may be responsible for sending the second certificate CB2. That is, in step SE140, the second terminal 5 may obtain the first certificate CB1 from the first terminal 4. In step SE150, the second terminal 5 may send an association establishment request including the first certificate CB1 to the management server 1. In step SF140, the first terminal 4 may obtain the second certificate CB2 from the second terminal 5. In step SF150, the first terminal 4 may send an association establishment request including the second certificate CB2 to the management server 1.

[0313] In addition, the sharing of data transmission may not be limited to such an example. In another example, the first certificate CB1 may be sent from the first terminal 4. The second certificate CB2 may be sent from the second terminal 5. In addition, each identifier (I10, I20) may be sent to the management server 1 together with each certificate (CB1, CB2). Each identifier (I10, I20) may be sent from at least one of the first terminal 4 and the second terminal 5. In the case of adopting a method of sending in a divided manner, the management server 1 may determine the corresponding establishment of the data required for authentication by using the above-mentioned shared information and other methods in order to determine the combination of the corresponding individuals of the first object VA and the second object WA for which the setting of the corresponding relationship is actually required. In another example, the first certificate CB1 and the second certificate CB2 may be sent only from one of the first terminal 4 and the second terminal 5.

[0314] The management server 1 compares the received first certificate CB1 with the first time-limited certificate CB10 notified from the first server 2. The management server 1 compares the received second certificate CB2 with the second time-limited certificate CB20 notified from the second server 3. The management server 1 can appropriately determine the corresponding establishment of the data to be compared. Determining the corresponding establishment of the data to be compared is to distinguish the combination of the first time-limited certificate CB10 and the first certificate CB1 to be compared, and the combination of the second time-limited certificate CB20 and the second certificate CB2. Similar to the corresponding establishment of the data required for authentication, the management server 1 can determine the corresponding establishment of the data to be compared by using the above-mentioned shared information and other methods. The shared information can be each identifier (I10, I20).

[0315] In addition, the comparison method of the certificate and the time-limited certificate can be appropriately selected according to the relationship between the two. In one example, the time-limited certificate (CB10, CB20) can be directly used as the certificate (CB1, CB2). In this case, whether the comparison in the authentication is established can be determined based on whether the time-limited certificate (CB10, CB20) is consistent with the certificate (CB1, CB2). In another example, the time-limited certificate (CB10, CB20) can be arbitrarily transformed, and the transformed time-limited certificate (CB10, CB20) can be used as the certificate (CB1, CB2). In this case, whether the comparison in the authentication is established can be determined based on whether the relationship specified between the time-limited certificate (CB10, CB20) and the certificate (CB1, CB2) is established. For example, the first time-limited certificate CB10 can be transformed into a hash value, and the obtained hash value can be used as the first certificate CB1. Based on this, whether the relationship is established can be determined based on whether the hash value of the first time-limited certificate CB10 is consistent with the first certificate CB1. The transformation may include data operations such as deletion and appending. At least one of the first time-limited certificate CB10 and the second time-limited certificate CB20 may be used directly as a certificate, and the other may be used as a certificate after transformation. The transformation process may be executed by each terminal (4, 5) or by each server (2, 3). When the transformation process is executed by each server (2, 3), each terminal (4, 5) may receive the transformed time-limited certificate (CB10, CB20) from each server (2, 3).

[0316] The management server 1 can determine whether the authentication of the corresponding individuals of each object (VA, WA) is established based on the results of each comparison. If the comparison is not established, the authentication is not established. In the case where the first time-limited certificate CB10 / the second time-limited certificate CB20 is invalid due to the expiration of the validity period, the comparison of the first object VA / the second object WA is not established. On the other hand, if the first time-limited certificate CB10 and the second time-limited certificate CB20 are valid and each comparison is established, the authentication of the first object VA and the second object WA are both established. When the authentication of the first object VA and the second object WA is established, the management server 1 sets a corresponding relationship between the corresponding individuals of the first object VA and the second object WA. The setting process of the corresponding relationship can be the same as the above-mentioned embodiment. Among them, a series of processes from data exchange between terminals (4, 5) to association establishment setting can be executed in real time according to the generation of the utilization relationship. Other structures can be the same as the first authentication method, etc.

[0317] In the 3-1 method, the first object VA and the second object WA are authenticated using time-limited certificates (CB10, CB20) based on the creation of a utilization relationship between the corresponding individuals of the first object VA and the second object WA. Each time-limited certificate (CB10, CB20) is configured to become invalid after the validity period has expired. Therefore, it is possible to prevent the same certificate from being used continuously, and security can be expected to be ensured.

[0318] also, Fig.16 The processing steps are just an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. For example, the processing order of steps SE110 to SE150 and steps SF110 to SF150 may not be particularly limited and can be appropriately determined according to the implementation method. At least one of the authentication processing of the first object VA (steps SE110 to SE150) and the authentication processing of the second object WA (steps SF110 to SF150) can be omitted.

[0319] In addition, the issuance of each time-limited certificate (CB10, CB20) does not necessarily need to be based on a request from each terminal (4, 5). Each server (2, 3) can generate each time-limited certificate (CB10, CB20) autonomously. In this case, the processing of step SE110 and step SF110 can be omitted.

[0320] In addition, the issuance of each time-limited certificate (CB10, CB20) (steps SE110 to SE130, steps SF110 to SF130) can be performed at any time before the commission of the association establishment setting (step SE150, step SF150). In one example, the issuance of each time-limited certificate (CB10, CB20) can be performed in advance before the data exchange between the first terminal 4 and the second terminal 5 (step SE140, step SF140) is performed. In another example, it can also be performed after the data exchange between the first terminal 4 and the second terminal 5 is started and before the association establishment request is sent. From the perspective of reducing the process when the association establishment setting is performed, it is preferred that the issuance of each time-limited certificate (CB10, CB20) is performed at the former time.

[0321] In addition, in the above-mentioned authentication method 3-1, the comparison process of each certificate (CB1, CB2) and each time-limited certificate (CB10, CB20), that is, the authentication process of each object (VA, WA) is performed by the management server 1. However, the subject that performs the comparison process is not limited to the management server 1. In another example, the management server 1 can entrust the comparison process to each server (2, 3) by sending each certificate (CB1, CB2) to each server (2, 3). Thus, the comparison process can be performed by each server (2, 3).

[0322] (C-2) 3-2 Authentication Method

[0323] In the above-mentioned authentication method 3-1, authentication processing of each object (VA, WA) is performed according to the association establishment request involving at least one of the first terminal 4 and the second terminal 5. However, the timing of performing the authentication processing is not limited to such an example. In the authentication method 3-2, before the association establishment request is sent to the management server 1, the authentication processing of at least one of the first object VA and the second object WA can be pre-performed between at least one of the first terminal 4 and the second terminal 5 and at least one of the first server 2 and the second server 3.

[0324] Fig.17A An example of the association establishment process when the 3-2 authentication method is used is schematically shown. Fig.17A In the example of , a scenario is assumed in which the authentication process of the first object VA is executed and the authentication process of the second object WA is omitted.

[0325] First, between the first terminal 4 and the first server 2, the processing of step SE110 and step SE120 can be performed in the same manner as in the above-mentioned authentication method 3-1. The result of the execution is that the first time-limited certificate CB10 is issued and the issued first time-limited certificate CB10 is notified to the first terminal 4. At this time, the first server 2 can store the issued first time-limited certificate CB10 in association with the first identifier I10. The first time-limited certificate CB10 can be saved as the first object information O10. The notification to the management server 1 (step SE130) can be omitted. In step SE140, the first terminal 4 assigns the issued first time-limited certificate CB10 to the second terminal 5 as the first certificate CB1. In addition, the first terminal 4 assigns the first identifier I10 to the second terminal 5. Accordingly, the second terminal 5 obtains the first identifier I10 and the first certificate CB1 from the first object VA.

[0326] In step SG110, the second terminal 5 sends an authentication entrustment including the first identifier I10 and the first certificate CB1 to the first server 2. Based on the reception of the authentication entrustment, the first server 2 compares the received first certificate CB1 with the corresponding first time-limited certificate CB10. The corresponding first time-limited certificate CB10 can be obtained appropriately. In one example, the issued first time-limited certificate CB10 can be saved as the first object information O10, and the first server 2 can retrieve the first object information O10 by using the first identifier I10 in the query, thereby extracting the corresponding first time-limited certificate CB10. In step SG120, the first server 2 returns the comparison result to the second terminal 5. Accordingly, the control unit 51 of the second terminal 5 receives the comparison result.

[0327] When the comparison between the first certificate CB1 and the first time-limited certificate CB10 is not successful in the received comparison result, the second terminal 5 can appropriately end the processing steps of the association establishment setting. The second terminal 5 can request the first terminal 4 to send the first certificate CB1 again. On the other hand, when the comparison is successful, the second terminal 5 sends the association establishment request including the first identifier I10 and the second identifier I20 to the management server 1 (step SG130). The processing of step SG130 is an example of the processing of the above-mentioned step S10.

[0328] Accordingly, the management server 1 receives the association establishment request from the second terminal 5. The management server 1 sets the correspondence between the first object VA and the corresponding individuals of the second object WA according to the association establishment request. The setting process of the correspondence relationship can be the same as the above-mentioned embodiment. Among them, a series of processes from the data exchange between the terminals (4, 5) (step SE140) to the association establishment setting can be executed in real time according to the generation of the utilization relationship. Other structures can be the same as the first authentication method, etc.

[0329] also, Fig.17A The processing steps are just an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method.

[0330] For example, the management server 1 can appropriately verify that the comparison is established on the first server 2. In one example, the first server 2 can send the result of the comparison to the management server 1. For example, the above-mentioned authentication delegation can also include the second identifier I20. When the comparison is established, the first server 2 can send the result of the comparison including the first identifier I10 and the second identifier I20 to the management server 1. Thereby, the first server 2 can enable the management server 1 to validate the association establishment request for the combination of the first identifier I10 and the second identifier I20 specified by the comparison result. That is, in one example, the verification of the establishment of the comparison can be constituted by receiving the comparison result. The management server 1 can be configured to maintain the comparison result from the first server 2, accept the delegation of the association establishment setting for the combination of the first identifier I10 and the second identifier I20 specified by the comparison result, and discard the delegation of the association establishment setting other than this.

[0331] In the 3-2 authentication method, the object to be authenticated is not limited to the first object VA. In another example, the authentication process of the second object WA may be performed instead of the authentication process of the first object VA. In another example, the authentication process of the first object VA and the authentication process of the second object WA may be performed.

[0332] Fig. 17B Another example of the association establishment process when the 3-2 authentication method is used is schematically shown. Fig. 17B In the example of , it is assumed that the authentication process of the second object WA is executed instead of the authentication process of the first object VA. In addition to replacing the first object VA and the second object WA, Fig. 17B The processing steps can be Fig.17AThe processing steps are the same. That is, by executing the processing of step SF110 and step SF120 between the second terminal 5 and the second server 3, the second time-limited certificate CB20 is issued, and the issued second time-limited certificate CB20 is notified to the second terminal 5. In step SF140, the second terminal 5 assigns the issued second time-limited certificate CB20 to the first terminal 4 as the second certificate CB2. In addition, the second terminal 5 assigns the second identifier I20 to the first terminal 4. In step SH110, the first terminal 4 sends the authentication entrustment including the second identifier I20 and the second certificate CB2 to the second server 3. Accordingly, the second server 3 performs the comparison processing of the second certificate CB2 and the second time-limited certificate CB20. In step SH120, the second server 3 returns the comparison result to the first terminal 4. When the comparison between the second certificate CB2 and the second time-limited certificate CB20 is successful, the first terminal 4 sends a request for establishing an association including the first identifier I10 and the second identifier I20 to the management server 1 (step SH130). Accordingly, the management server 1 receives the request for establishing an association from the first terminal 4. The management server 1 sets a corresponding relationship between the first object VA and the corresponding individuals of the second object WA according to the request for establishing an association. In another example, by executing Fig.17A as well as Fig. 17B The authentication process of the first object VA and the second object WA is performed through a series of processes.

[0333] In the 3-2 authentication method, the authentication process is executed before the association request. This can reduce the processing load of the management server 1. In addition, the processing time from the association request to the setting process can be shortened.

[0334] (D) 4th authentication method

[0335] Fig.18A An example of the process of establishing an association when the fourth authentication method is used is schematically shown. The fourth authentication method uses a key-based electronic signature and an electronic certificate. The authentication process is performed by a terminal of the other party to the object to be authenticated. The terminal of the other party to the object to be authenticated is the second terminal 5 when authenticating the first object VA, and is the first terminal 4 when authenticating the second object WA. Fig.18A In the example of , a scenario is assumed in which the authentication process of the second object WA is omitted and the authentication process of the first object VA is executed.

[0336] As a preparation stage (preprocessing), a combination of a first key CC10 and a first public key used in the authentication of the first object VA is generated. The method of generating the first key CC10 and the first public key is not particularly limited and can be appropriately selected according to the implementation method. The first key CC10 and the first public key can be generated by at least one of the first terminal 4 and the external computer (the first server 2, the certification authority, etc.).

[0337] Next, the certification authority generates the first electronic certificate CC1 for the first public key. In one example, the certification authority can generate the first electronic certificate CC1 based on the commission from the first terminal 4. The certification authority can be the first server 2 or an external server other than the first server 2. As long as the authenticity of the first public key can be verified, the composition of the first electronic certificate CC1 is not particularly limited and can be appropriately selected according to the implementation method. In one example, the first electronic certificate CC1 can be composed of an electronic signature based on the certification authority, possession information and the first public key. The certification authority maintains a combination of a public key and a secret key. The electronic signature based on the certification authority can be generated by encrypting the possession information and the first public key using the key of the certification authority. In a specific example, the electronic signature based on the certification authority can be generated by transforming the possession information and the first public key into a hash value through a hash function and encrypting the resulting hash value using the key of the certification authority.

[0338] The first electronic certificate CC1 is provided by the certification authority to the first terminal 4. In addition, the first electronic certificate CC1 can be stored in any storage area. The validity period of the first electronic certificate CC1 can be managed by the revocation list. The revocation list can also be stored in any storage area. The first electronic certificate CC1 and the revocation list can be stored in the first server 2, and can also be stored in an external server that can be accessed from the first server 2. The first terminal 4 is in a state where the first key CC10 and the first electronic certificate CC1 are maintained, thereby completing the preparation for the authentication process of the first object VA.

[0339] In the utilization phase, when the utilization relationship between the corresponding individuals of the first object VA and the second object WA is generated, data exchange is performed between the corresponding first terminal 4 and the second terminal 5 (steps SI110 and SI120). In this data exchange, electronic information is shared between the first terminal 4 and the second terminal 5. The electronic information may be composed of any information such as a random number and a timestamp. The electronic information may include information from the first object VA such as the owner information of the first terminal 4.

[0340] The electronic information may be generated by at least one of the first terminal 4 and the second terminal 5. When the second terminal 5 participates in the generation of at least a part of the electronic information, as a process of step SI110, data related to the electronic information may be provided from the second terminal 5 to the first terminal 4. The first terminal 4 generates an electronic signature CD1 by encrypting the first identifier I10 and the electronic information using the first key CC10. In a specific example, the first terminal 4 may generate the electronic signature CD1 by converting the first identifier I10 and the electronic information into a hash value using a hash function and encrypting the resulting hash value using the first key CC10.

[0341] In step SI120, the first terminal 4 gives the first identifier I10, the generated electronic signature CD1, and the first electronic certificate CC1 to the second terminal 5. Thus, the second terminal 5 obtains the first identifier I10, the electronic signature CD1, and the first electronic certificate CC1 from the first terminal 4. In the case where the first terminal 4 participates in the generation of at least a part of the electronic information such as the information from the first object VA, as the processing of step SI120, the data related to the electronic information can be provided from the first terminal 4 to the second terminal 5.

[0342] Next, the second terminal 5 verifies the validity of the first electronic certificate CC1 (step SI130, step SI135). Fig.18AIn the example of , it is assumed that the first server 2 maintains a revocation list. In step SI130, the second terminal 5 inquires the first server 2 whether the first electronic certificate CC1 is valid. In the case where the first electronic certificate CC1 is not registered in the revocation list, it is determined that the first electronic certificate CC1 is valid (that is, the validity period has not expired). In the case where the first electronic certificate CC1 is registered in the revocation list, it is determined that the first electronic certificate CC1 is invalid. The first server 2 refers to the revocation list to determine whether the first electronic certificate CC1 is valid. In step SI135, the first server 2 returns the determination result to the second terminal 5. The second terminal 5 can also inquire the first server 2 whether the first identifier I10 is valid together with it. Among them, when the revocation list is maintained in an external server, the second terminal 5 can directly or indirectly (for example, via the first server 2) inquire the external server whether the first electronic certificate CC1 is valid. In addition, in another example, the second terminal 5 can obtain the revocation list and refer to the obtained revocation list to determine whether the first electronic certificate CC1 is valid. When the first electronic certificate CC1 is invalid (i.e., expired), the second terminal 5 determines that the verification of the validity of the first electronic certificate CC1 is not established, and the processing steps of the association establishment setting can be appropriately terminated. The second terminal 5 can request the first terminal 4 to send a series of information again. On the other hand, when the first electronic certificate CC1 is valid, the second terminal 5 appropriately obtains the public key of the certification authority. The second terminal 5 uses the obtained public key to decode the electronic signature of the certification authority included in the first electronic certificate CC1. In addition, the second terminal 5 compares the obtained decoded data with the remaining information (possession information and the first public key) included in the first electronic certificate CC1. When encryption is performed after conversion to a hash value, the second terminal 5 converts the possession information and the first public key into a hash value through a hash function, and compares the obtained hash value with the decoded data. When the two are consistent in the comparison, the second terminal 5 determines that the verification of the validity of the first electronic certificate CC1 is established, and when the two are inconsistent, the second terminal 5 determines that the verification of the validity of the first electronic certificate CC1 is not established.

[0343] In addition, the second terminal 5 verifies the validity of the electronic signature CD1 (step SI140). The second terminal 5 uses the first public key included in the first electronic certificate CC1 to decode the electronic signature CD1. The second terminal 5 compares the obtained decoded data with the shared information (the first identifier I10 and the electronic information). When encryption is performed after conversion to a hash value, the second terminal 5 converts the shared information (the first identifier I10 and the electronic information) into a hash value through a hash function, and compares the obtained hash value with the decoded data. When the two are consistent in the comparison, the second terminal 5 determines that the verification of the validity of the electronic signature CD1 is established. When the two are inconsistent, the second terminal 5 determines that the verification of the validity of the electronic signature CD1 is not established.

[0344] When the verification of the validity of the first electronic certificate CC1 and the electronic signature CD1 is established, the second terminal 5 sends a request for establishing an association including the first identifier I10 and the second identifier I20 to the management server 1 (step SI150). Accordingly, the management server 1 receives the request for establishing an association from the second terminal 5. The management server 1 sets a correspondence between the corresponding individuals of the first object VA and the second object WA according to the request for establishing an association. The setting process of the correspondence can be the same as the above-mentioned embodiment. Among them, a series of processes from data exchange between the terminals (4, 5) to the establishment of the association can be performed in real time according to the generation of the utilization relationship. The process of step SI150 is an example of the process of the above-mentioned step S10. On the other hand, when the verification of the validity of at least one of the first electronic certificate CC1 and the electronic signature CD1 is not established, the second terminal 5 can appropriately end the processing steps of the association establishment setting. The second terminal 5 can request the first terminal 4 to send a series of information again.

[0345] also, Fig.18A The processing steps are just an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. For example, the processing order of the verification of the validity of the first electronic certificate CC1 (step SI130, step SI135) and the verification of the validity of the electronic signature CD1 (step SI140) can be appropriately changed. In another example, the verification of the validity of the electronic signature CD1 can be performed before the verification of the validity of the first electronic certificate CC1. The verification process of the validity of the first electronic certificate CC1 and the verification process of the validity of the electronic signature CD1 can be at least partially performed in parallel.

[0346] In addition, in the fourth authentication method, the object to be authenticated may not be limited to the first object VA. In another example, the authentication process of the second object WA may be performed instead of the authentication process of the first object VA. In another example, the authentication process of the first object VA and the authentication process of the second object WA may be performed.

[0347] Fig.18B Another example of the process of association establishment setting when the fourth authentication method is adopted is schematically shown. Fig.18B In the example of , it is assumed that the authentication process of the second object WA is executed instead of the authentication process of the first object VA. In addition to replacing the first object VA and the second object WA, Fig.18B The processing steps and data can be Fig.18AThe processing steps and each data are the same. That is, in the preparation stage, a combination of the second key CC20 and the second public key is generated. Next, the certification body generates a second electronic certificate CC2 for the second public key. In one example, the second electronic certificate CC2 can be composed of the electronic signature of the certification body, the possession information and the second public key. The second electronic certificate CC2 is provided by the certification body to the second terminal 5. In the utilization stage, when the utilization relationship between the corresponding individuals of the first object VA and the second object WA is generated, data exchange (step SJ110, step SJ120) is performed between the corresponding first terminal 4 and the second terminal 5. In this data exchange, electronic information is shared between the first terminal 4 and the second terminal 5. The second terminal 5 generates an electronic signature CD2 by encrypting the second identifier I20 and the electronic information using the second key CC20. The second terminal 5 assigns the second identifier I20, the generated electronic signature CD2 and the second electronic certificate CC2 to the first terminal 4. Thus, the first terminal 4 obtains the second identifier I20, the electronic signature CD2 and the second electronic certificate CC2. The first terminal 4 verifies the validity of the second electronic certificate CC2 (step SJ130, step SJ135). In addition, the first terminal 4 verifies the validity of the electronic signature CD2 (step SJ140). When the verification of the validity of the second electronic certificate CC2 and the electronic signature CD2 is established, the first terminal 4 sends the association establishment request including the first identifier I10 and the second identifier I20 to the management server 1 (step SJ150). Accordingly, the management server 1 receives the association establishment request from the first terminal 4. The management server 1 sets the corresponding relationship between the corresponding individuals of the first object VA and the second object WA according to the association establishment request. The setting process of the corresponding relationship can be the same as the above-mentioned embodiment. On the other hand, when the verification of the validity of at least one of the second electronic certificate CC2 and the electronic signature CD2 is not established, the first terminal 4 can appropriately end the processing step of the association establishment setting. The first terminal 4 can request the second terminal 5 to send a series of information again. In another example, you can execute Fig.18A as well as Fig.18B The authentication process of the first object VA and the second object WA is performed through a series of processes.

[0348] In the fourth authentication method, a key and an electronic certificate are used to authenticate at least one of the first object VA and the second object WA. As a result, security can be expected to be ensured. In addition, by performing authentication processing on the terminal side before the association establishment request, it can be expected to reduce the processing burden of the management server 1. In addition, the processing time from the association establishment request to the setting process can be shortened.

[0349] [5 Supplement]

[0350] The processes and means described in the present disclosure can be implemented in combination as long as no technical contradiction occurs.

[0351] Furthermore, a process described as being performed by one device may be shared and executed by a plurality of devices. Alternatively, a process described as being performed by different devices may be executed by one device. In a computer system, the hardware configuration by which each function is implemented can be flexibly changed.

[0352] The present disclosure can also be implemented by supplying a computer program installed with the functions described in the above-mentioned embodiments to a computer, and having one or more processors of the computer read out the program and execute it. Such a computer program can be provided to the computer via a non-temporary computer-readable storage medium that can be connected to the system bus of the computer, or it can be provided to the computer via a network. Non-temporary computer-readable storage media include, for example, any type of disks such as magnetic disks (floppy (registered trademark) disks, hard disk drives (HDDs), etc.), optical disks (CD-ROMs, DVD disks, Blu-ray disks, etc.), read-only memories (ROMs), random access memories (RAMs), EPROMs, EEPROMs, magnetic cards, flash memories, optical cards, semiconductor drives (solid-state drives, etc.), and any type of medium suitable for storing electronic commands.

Claims

1. A system, characterized in that: include: Manage servers; A plurality of first terminals corresponding to the first objects respectively; as well as A plurality of second terminals, each corresponding to each second object, in, The plurality of first terminals and the plurality of second terminals are configured such that at least one of the first terminal corresponding to the first object and the second terminal corresponding to the second object sends an association establishment request to the management server according to the generation of a utilization relationship between the first object and the second object. The management server is configured to perform the following processing: accepting setting of a correspondence relationship between the first object and the second object by receiving the association establishment request; and In the case where two or more correspondences are established with two or more different second objects for the same first object based on the setting of the correspondence in response to the acceptance of the setting of the correspondence for two or more association establishment requests involving the same first object, the setting of one of the two or more correspondences is activated and the settings of the other correspondences are inactivated based on status information obtained from the first object for which the two or more correspondences are established and at least any one of the two or more second objects.

2. The system according to claim 1, characterized in that The management server is configured to perform the following processing: validating, based on the setting of the activated correspondence, the exercise of the authority associated with the corresponding first object via the second object for which the activated correspondence is set; and According to the setting of the inactivated correspondence relationship, exercise of the authority associated with the corresponding first object via the second object for which the inactivated correspondence relationship is set is invalidated.

3. The system according to claim 1, characterized in that The status information includes a selection based on the first object, Activating the setting of the one correspondence relationship is configured by activating the setting of the correspondence relationship selected by the first object.

4. The system according to claim 1, characterized in that The status information includes a report of the result of the authentication process performed on the first object by the second terminal, The activation of the setting of the one correspondence relationship is configured by activating the setting of the correspondence relationship with the second object corresponding to the second terminal that has most recently reported the execution result of the authentication process on the first object.

5. The system according to claim 1, characterized in that Each of the first terminals has a first positioning module, each of the second terminals has a second positioning module, the status information includes a first current position measured by the first positioning module of the first terminal corresponding to the first object, and a second current position measured by the second positioning module of the second terminal corresponding to the two or more second objects, respectively. Activating the setting of the one correspondence relationship is constituted by activating the setting of the correspondence relationship with the second object satisfying the condition of the utilization relationship between the second current position of the corresponding second terminal and the first current position of the first terminal.

6. The system according to claim 1, characterized in that The management server is configured to also perform the following processing: after an activation correspondence setting is established between a second object of a first specified type, the establishment of other activation correspondence settings between the first object for which the activation correspondence is set and other second objects is prohibited by locking the activation correspondence setting until specified conditions are met.

7. The system according to claim 6, characterized in that The first object is a user, the second object of the first predetermined type is a moving object of a public transportation system, The predetermined condition is completion of payment of fees for use of the moving body of the public transportation system.

8. The system according to claim 1, characterized in that When a predetermined relationship is established between the first object and the second object for which the correspondence relationship is set, the management server is configured as follows: until the prescribed relationship is eliminated, the corresponding relationship is not cancelled but maintained in an activated or inactivated state; and The correspondence relationship is released after the prescribed relationship is eliminated.

9. The system according to claim 8, characterized in that The prescribed relationship is an ownership relationship.

10. The system according to claim 9, characterized in that The first object is a user, and the second object is a mobile object owned by the user.

11. The system according to claim 8, characterized in that The first object is a user, the second object is a mobile object rented by the user, and the predetermined relationship is that the user rents the mobile object.

12. The system according to claim 1, characterized in that The management server is further configured to cancel the correspondence relationship in response to detecting the end of use of the second object after the correspondence relationship is established with the second object of the second predetermined type.

13. The system according to claim 12, characterized in that The first object is a user, the second object is a moving object, and the second object of the second predetermined type is a moving object of a public transportation system.

14. A management server, characterized in that: The device includes a control unit configured to perform the following processing: receiving an association establishment request from at least one of a first terminal of the first object and a second terminal of the second object in response to generation of a utilization relationship between the first object and the second object; accepting setting of a correspondence relationship between the first object and the second object by receiving the association establishment request; as well as In the case where two or more correspondences are established with two or more different second objects for the same first object based on the setting of the correspondence in response to the acceptance of the setting of the correspondence for two or more association establishment requests involving the same first object, the setting of one of the two or more correspondences is activated and the settings of the other correspondences are inactivated based on status information obtained from the first object for which the two or more correspondences are established and at least any one of the two or more second objects.

15. The management server according to claim 14, characterized in that: The control unit is configured to execute the following processing: validating, based on the setting of the activated correspondence, the exercise of the authority associated with the corresponding first object via the second object for which the activated correspondence is set; and According to the setting of the inactivated correspondence relationship, exercise of the authority associated with the corresponding first object via the second object for which the inactivated correspondence relationship is set is invalidated.

16. The management server according to claim 14, characterized in that: The status information includes a report of the result of the authentication process performed on the first object by the second terminal, The activation of the setting of the one correspondence relationship is configured by activating the setting of the correspondence relationship with the second object corresponding to the second terminal that has most recently reported the execution result of the authentication process on the first object.

17. The management server according to claim 14, characterized in that: The status information includes a first current position measured by a first positioning module of the first terminal corresponding to the first object, and a second current position measured by a second positioning module of the second terminal corresponding to the two or more second objects, respectively. Activating the setting of the one correspondence relationship is constituted by activating the setting of the correspondence relationship with the second object satisfying the condition of the utilization relationship between the second current position of the corresponding second terminal and the first current position of the first terminal.

18. The management server according to claim 14, characterized in that: The control unit is configured to also perform the following processing: after an activation correspondence setting is established between a second object of a first specified type, the establishment of other activation correspondence settings between the first object for which the activation correspondence is set and other second objects is prohibited by locking the activation correspondence setting until a specified condition is satisfied.

19. The management server according to claim 14, characterized in that: When a predetermined relationship is established between the first object and the second object for which the correspondence relationship is set, the control unit is configured as follows: until the prescribed relationship is released, the correspondence relationship is not released but maintained in an activated or inactivated state; and The correspondence relationship is released after the prescribed relationship is eliminated.

20. A management method, executed by a management server, characterized in that: include: receiving an association establishment request from at least one of a first terminal of the first object and a second terminal of the second object in response to generation of a utilization relationship between the first object and the second object; accepting setting of a correspondence relationship between the first object and the second object by receiving the association establishment request; as well as In the case where two or more correspondences are established with two or more different second objects for the same first object based on the setting of the correspondence in response to the acceptance of the setting of the correspondence for two or more association establishment requests involving the same first object, the setting of one of the two or more correspondences is activated and the settings of the other correspondences are inactivated based on status information obtained from the first object for which the two or more correspondences are established and at least any one of the two or more second objects.

Images