System, management server, and management method

Abstract

The present disclosure provides a system, a management server, and a management method for appropriately tracking a use relationship between a first object and a second object. A management server according to one aspect of the present disclosure accepts the setting of a correspondence relationship by receiving a correlation establishment request in accordance with the generation of a utilization relationship between a first object and a second object. When a setting of a second correspondence relationship between a first object and a second object different from the first object is received during a period in which a setting of a first correspondence relationship between the first object and the first second object is established, the setting of the second correspondence relationship between the first object and the second object is received. The management server, on the basis of a prescribed rule, either: (I) cancels the first correspondence relationship and establishes the setting of the second correspondence relationship; or (II) does not allow the setting of the second correspondence relationship and maintains the setting of the first correspondence relationship.

Description

Technical Field

[0001] The present disclosure relates to a system, a management server, and a management method. Background Art

[0002] Patent document 1 proposes a fee collection system for collecting fees for services from vehicle users using a medium such as a card. Specifically, the fee collection system proposed in Patent document 1 is configured to distribute requests for highway usage fees for a target rental car to a target user based on the corresponding relationship (charging information, registration information, settlement information, and usage information) of an ETC (Electronic Toll Collection System) card ID, a rental car company, a rental car usage date and time, and a rental car user.

[0003] Patent Document 1: Japanese Patent Application Publication No. 2022-140747 Summary of the invention

[0004] One of the objects of the present disclosure is to provide a technology for appropriately tracking the usage relationship between a first object and a second object.

[0005] The system according to the first aspect of the present disclosure includes a management server, a plurality of first terminals corresponding to each first object, and a plurality of second terminals corresponding to each second object. The plurality of first terminals and the plurality of second terminals are configured such that at least one of the first terminal corresponding to the first object and the second terminal corresponding to the second object sends a request for establishing an association to the management server according to the generation of a utilization relationship between the first object and the second object. The management server is configured to perform the following processing: accepting the setting of the correspondence relationship between the first object and the second object by receiving the request for establishing an association; and during the establishment of the setting of the first correspondence relationship between the first first object and the first second object, when accepting the setting of the second correspondence relationship between the first first object and the second second object different from the first second object, according to a predetermined rule, (I) canceling the setting of the first correspondence relationship and establishing the setting of the second correspondence relationship, or (II) not allowing the setting of the second correspondence relationship and maintaining the setting of the first correspondence relationship.

[0006] The management server involved in the second mode of the present disclosure has a control unit configured to perform the following processing: receiving an association establishment request from at least one of the first terminal of the first object and the second terminal of the second object based on the generation of a utilization relationship between the first object and the second object; accepting the setting of the correspondence relationship between the first object and the second object by receiving the above-mentioned association establishment request; and during the period of establishing the setting of the first correspondence relationship between the first first object and the first second object, when accepting the setting of the second correspondence relationship between the first first object and the second second object different from the first second object, according to a prescribed rule, (I) cancel the setting of the first correspondence relationship and establish the setting of the second correspondence relationship, or (II) do not allow the setting of the second correspondence relationship and maintain the setting of the first correspondence relationship.

[0007] The management method involved in the third mode of the present disclosure is an information processing method in which a management server performs the following processing: receiving an association establishment request from at least one of the first terminal of the first object and the second terminal of the second object based on the generation of a utilization relationship between the first object and the second object; accepting the setting of the correspondence between the first object and the second object by receiving the above-mentioned association establishment request; and during the period of establishing the setting of the first correspondence between the first first object and the first second object, when accepting the setting of the second correspondence between the first first object and the second second object different from the first second object, according to a prescribed rule, (I) cancel the setting of the first correspondence and establish the setting of the second correspondence, or (II) do not allow the setting of the second correspondence and maintain the setting of the first correspondence.

[0008] According to the present disclosure, it is possible to provide a technique for appropriately tracking the usage relationship between a first object and a second object. BRIEF DESCRIPTION OF THE DRAWINGS

[0009] Figure 1 An example of a scenario in which the present disclosure is applied is schematically shown.

[0010] Figure 2 An embodiment of a scenario in which the present disclosure is applied is schematically shown.

[0011] Figure 3A An example of linkage information according to the present embodiment is schematically shown.

[0012] Figure 3B An example of user information according to the present embodiment is schematically shown.

[0013] Figure 3C An example of moving object information according to the present embodiment is schematically shown.

[0014] Figure 4 This is a schematic diagram showing an example of mediation processing according to the present embodiment.

[0015] Figure 5 An example of mediation processing according to the present embodiment is schematically shown.

[0016] Fig. 6A An example of mediation processing based on whether a predetermined relationship is established or not according to the present embodiment is schematically shown.

[0017] Figure 6B An example of mediation processing based on whether a predetermined relationship is established or not according to the present embodiment is schematically shown.

[0018] Figure 7 An example of a scenario in which the association setting is locked according to the present embodiment is schematically shown.

[0019] Figure 8 An example of the process of releasing the association according to the present embodiment is schematically shown.

[0020] Fig. 9 An example of a usage scenario of the association information according to the present embodiment is schematically shown.

[0021] Fig. 10A An example of the hardware configuration of the management server according to the present embodiment is schematically shown.

[0022] Fig. 10B An example of the hardware configuration of the first terminal according to the present embodiment is schematically shown.

[0023] Fig. 10C An example of the hardware configuration of the second terminal according to the present embodiment is schematically shown.

[0024] Fig.11 An example of the software configuration of each device according to the present embodiment is schematically shown.

[0025] Fig.12 An example of the processing procedure of association setting according to the present embodiment is schematically shown.

[0026] Fig.13 An example of the processing procedure of releasing the association according to the present embodiment is shown.

[0027] Fig.14An example of the association setting processing procedure when the first authentication method is adopted is schematically shown.

[0028] Fig.15 An example of the association setting processing procedure when the second authentication method is adopted is schematically shown.

[0029] Fig.16 An example of the association setting processing procedure when the 3-1st authentication method is adopted is schematically shown.

[0030] Fig.17A An example of the association setting processing procedure when the 3-2 authentication method is adopted is schematically shown.

[0031] Fig. 17B Another example of the association setting process procedure when the 3-2 authentication method is adopted is schematically shown.

[0032] Fig.18A An example of the processing procedure of association establishment setting when the fourth authentication method is adopted is schematically shown.

[0033] Fig.18B Another example of the association setting processing procedure when the fourth authentication method is adopted is schematically shown. DETAILED DESCRIPTION

[0034] According to the system proposed in Patent Document 1, a user can pay highway tolls using ETC even if he or she does not have his or her own ETC card. However, the inventors of the present application have found that the conventional system has the following problems.

[0035] That is, it can be considered that with the diversification of MaaS (Mobility as a Service), from the perspective of convenience such as efficiency of settlement, there is a demand for properly tracking the use of mobile bodies by users. In contrast, in existing systems, the correspondence between the use date and time and the user can be maintained as use information based on the contract or reservation for renting a car, but since the use date and time depends on the contract or reservation, the use information does not necessarily match the actual use of the rented car by the user. In addition, in vehicles that are used without a contract or reservation (such as a private car), the generation of use information is not originally envisioned. Therefore, according to the existing system, it is difficult to properly track the use of mobile bodies by users. In addition, the occurrence of this problem is not limited to the scenario of using a vehicle. The same problem may also occur in the scenario of using mobile bodies other than vehicles (such as aircraft, ships, etc.) and the scenario of using multiple types of mobile bodies. In addition, the same problem may also occur in all use scenarios other than mobile bodies.

[0036] In contrast, the system according to the first aspect of the present disclosure includes a management server, a plurality of first terminals corresponding to each first object, and a plurality of second terminals corresponding to each second object. The plurality of first terminals and the plurality of second terminals are configured such that at least one of the first terminal corresponding to the first object and the second terminal corresponding to the second object sends an association establishment request to the management server according to the generation of a utilization relationship between the first object and the second object. The management server is configured to perform the following processing: accepting the setting of the correspondence between the first object and the second object by receiving the association establishment request; and during the establishment of the setting of the first correspondence between the first first object and the first second object, when accepting the setting of the second correspondence between the first first object and the second second object different from the first second object, according to a prescribed rule, (I) canceling the first correspondence and establishing the setting of the second correspondence, or (II) not allowing the setting of the second correspondence and maintaining the setting of the first correspondence.

[0037] In the first mode of the present disclosure, the utilization relationship between the first object and the second object can be tracked by setting the correspondence relationship between the first object and the second object (association establishment setting). In addition, in the first mode of the present disclosure, when multiple correspondence settings are generated (association establishment settings may conflict), the corresponding relationship settings to be maintained are selected by mediation according to a prescribed rule. Therefore, according to the first mode of the present disclosure, the utilization relationship between the first object and the second object can be appropriately tracked.

[0038] In addition, the method of the present disclosure may not be limited to the above-mentioned examples. As other methods of the system involved in the above-mentioned method, one aspect of the present disclosure may be an information processing device that implements all or part of the above-mentioned components, or an information processing method, or a program, or a mechanically readable storage medium such as a computer storing such a program. Here, the mechanically readable storage medium is a medium that stores information such as a program through electrical, magnetic, optical, mechanical or chemical effects. The information processing device may be at least any one of the management server, the first terminal and the second terminal involved in the above-mentioned method. In addition, the system involved in the above-mentioned method may also include at least one of the first server participating in the authentication of the first object and the second server participating in the authentication of the second object.

[0039] For example, the management server involved in the second embodiment of the present invention may have a control unit configured to perform the following processing: receiving an association establishment request from at least one of the first terminal of the first object and the second terminal of the second object based on the generation of a utilization relationship between the first object and the second object; accepting the setting of the correspondence between the first object and the second object by receiving the association establishment request; and during the period in which the setting of the first correspondence between the first first object and the first second object is established, when the setting of the second correspondence between the first first object and the second second object different from the first second object is accepted, according to a prescribed rule, (I) cancel the first correspondence and establish the setting of the second correspondence, or (II) do not allow the setting of the second correspondence and maintain the setting of the first correspondence.

[0040] In addition, for example, the management method involved in the third embodiment of the present invention may be an information processing method in which a management server performs the following processing: receiving an association establishment request from at least one of the first terminal of the first object and the second terminal of the second object based on the generation of a utilization relationship between the first object and the second object; accepting the setting of the correspondence between the first object and the second object by receiving the association establishment request; and during the period in which the setting of the first correspondence between the first first object and the first second object is established, when the setting of the second correspondence between the first first object and the second second object different from the first second object is accepted, according to the prescribed rules, (I) the first correspondence is canceled and the second correspondence is established, or (II) the setting of the second correspondence is not allowed and the setting of the first correspondence is maintained.

[0041] Hereinafter, an embodiment (hereinafter also referred to as "this embodiment") involved in one aspect of the present disclosure is described based on the accompanying drawings. However, the present embodiment described below is merely an illustration of the present disclosure in all points. Various improvements or modifications can be made without departing from the scope of the present disclosure. When implementing the present disclosure, a specific structure corresponding to the embodiment can be appropriately adopted. Among them, the data appearing in this embodiment is described by natural language, and more specifically, it is specified by pseudo-language, instructions, parameters, machine language, etc. that can be recognized by a computer.

[0042] [1 Application example]

[0043] Figure 1 An example of a scenario in which the present disclosure is applied is schematically shown. The system 100 involved in this embodiment is composed of a management server 1, a plurality of first terminals 4, and a plurality of second terminals 5. The management server 1 is one or more computers configured to record the correspondence (association establishment) between the first object VA and the second object WA. Each first terminal 4 corresponds to each first object VA, and each second terminal 5 corresponds to each second object WA.

[0044] In the present embodiment, a plurality of first terminals 4 and a plurality of second terminals 5 are configured such that at least one of the first terminal 4 corresponding to the first object VA and the second terminal 5 corresponding to the second object WA sends an association establishment request to the management server 1 based on the generation of a utilization relationship between the first object VA and the second object WA. As an example, a utilization relationship is generated between the first object VA and the second object WA on a one-to-one basis. That is, a utilization relationship is generated between one first object VA and one second object WA. One first object VA is an individual of the first object VA, and one second object WA is an individual of the second object WA. An individual with which a utilization relationship is generated can be referred to as a "corresponding individual" or an "object individual". Based on the generation of the utilization relationship, at least one of the first terminal 4 corresponding to the corresponding individual of the first object VA and the second terminal 5 corresponding to the corresponding individual of the second object WA sends an association establishment request to the management server 1 (step S10).

[0045] Accordingly, the management server 1 receives an association establishment request from at least one of the first terminal 4 of the first object VA and the second terminal 5 of the second object WA. The management server 1 accepts the setting of the correspondence between the first object VA and the second object WA in response to the reception of the association establishment request (step S20). The management server 1 sets the correspondence between the corresponding individual of the first object VA and the corresponding individual of the second object WA in response to the accepted association establishment request (step S30).

[0046] In this process, when there is no setting of a correspondence relationship with other second objects WA (other individuals of the second object WA) that are different from the second object WA paired with the association establishment request with respect to the corresponding individual of the first object VA that is the object of the association establishment request, there will be no conflict in the association establishment setting. The setting that there is no correspondence relationship with other second objects WA means that the same first object VA is not set up with a plurality of second objects WA. Therefore, in such a case, the management server 1 can directly set the correspondence relationship between the corresponding individual of the first object VA and the corresponding individual of the second object WA.

[0047] On the other hand, in the case where a corresponding relationship with another second object WA already exists for the corresponding individual of the first object VA, settings for corresponding relationships with multiple second objects WA are generated for the same first object VA, resulting in a conflict in the association establishment settings. The fact that a corresponding relationship with another second object WA already exists when the association establishment request is accepted is equivalent to accepting the setting of a second corresponding relationship between the first first object VA1 and the second second object WA2 different from the first second object WA1 during the period in which the setting of the first corresponding relationship between the first first object VA1 and the first second object WA1 is established. In such a case, the management server 1, according to the prescribed rules, (I) cancels the setting of the first corresponding relationship and establishes the setting of the second corresponding relationship, or (II) does not allow the setting of the second corresponding relationship and maintains the setting of the first corresponding relationship. Selecting (I) is equivalent to selecting a new corresponding relationship (second corresponding relationship) as the corresponding relationship to be maintained, and selecting (II) is equivalent to selecting the existing corresponding relationship (first corresponding relationship) as the corresponding relationship to be maintained. Not allowing the setting of the second correspondence relationship is equivalent to discarding the association request for setting the second correspondence relationship. Thus, the management server 1 mediates the conflict of association settings.

[0048] The first first object VA1 is an individual of the first object VA for which the setting of the corresponding relationship is accepted. The first first object VA1 can be referred to as the first individual of the first object VA. The first second object WA1 is an individual of the second object WA for which the setting of the corresponding relationship (first corresponding relationship) has been previously established with the first first object VA1. The first second object WA1 can be referred to as the first individual of the second object WA. The second second object WA2 is an individual of the second object WA for which the setting of the corresponding relationship with the first first object VA1 is newly requested during the establishment of the first corresponding relationship. The second second object WA2 can be referred to as the second individual of the second object WA. In the following description, for convenience, the first terminal 4 of the first first object VA1 is also referred to as the "first first terminal 4_1", the second terminal 5 of the first second object WA1 is also referred to as the "first second terminal 5_1", and the second terminal 5 of the second second object WA2 is also referred to as the "second second terminal 5_2".

[0049] In addition, when the utilization relationship between the first object VA and the second object WA is generated, data exchange can be performed between the first terminal 4 corresponding to the corresponding individual of the first object VA and the second terminal 5 corresponding to the corresponding individual of the second object WA. The association establishment request can be executed along with the data exchange. A series of processes from the association establishment request to the association establishment setting can be executed in real time according to the generation of the utilization relationship. After the setting, the corresponding relationship (association establishment) can be terminated at any time. In one example, the corresponding relationship can be terminated according to the disappearance of the utilization relationship.

[0050] In addition, as long as each individual for which a corresponding relationship is set can be determined, the form of expression of the information indicating the setting of the corresponding relationship may not be particularly limited and may be appropriately determined according to the implementation method. In one example, a first identifier I10 may be assigned to each first object VA, and each individual of the first object VA may be identified based on the first identifier I10. Similarly, a second identifier I20 may be assigned to each second object WA, and each individual of the second object WA may be identified based on the second identifier I20. Accordingly, setting the corresponding relationship between the corresponding individual of the first object VA and the corresponding individual of the second object WA may be constructed by setting the corresponding relationship between the first identifier I10 assigned to the corresponding individual of the first object VA and the second identifier I20 assigned to the corresponding individual of the second object WA. That is, the setting of the corresponding relationship can be expressed using the first identifier I10 and the second identifier I20.

[0051] As described above, in the present embodiment, by setting the correspondence between the first object VA and the second object WA, it is possible to track the usage relationship between the corresponding individuals of the first object VA and the corresponding individuals of the second object WA. In addition, in the present embodiment, when an association establishment setting is generated with respect to one individual of the first object VA and multiple individuals of the second object WA, the management server 1 eliminates the conflict of the association establishment setting by performing a mediation process of selecting the correspondence to be maintained according to a prescribed rule. Therefore, according to the present embodiment, it is possible to appropriately track the correspondence between the first object VA and the second object WA.

[0052] (Target)

[0053] The first object VA and the second object WA are not particularly limited as long as they are objects with which a utilization relationship can be established, and can be appropriately selected according to the implementation method. The first object VA and the second object WA can be any object, a person, other creatures, etc. Any object can include a virtual object. The utilization relationship can be established, for example, by one party using the other party, one party holding the other party, one party combining with the other party, one party connecting with the other party, etc., to generate a real or virtual relationship between at least two things. The system 100 of the present disclosure can be used in any scenario of tracking the correspondence between two or more things.

[0054] In addition, in the present embodiment, when establishing association establishment settings for the corresponding individual of the first object VA with each of the multiple individuals of the second object WA, the management server 1 performs a mediation process of selecting one association establishment setting from the multiple association establishment settings as the association establishment setting to be maintained. The conflict of the association establishment settings is eliminated by this mediation process. In contrast, the operation involved in the association establishment settings for each of the multiple individuals of the first object VA for the corresponding individual of the second object WA can be the same as or different from that for the first object VA. That is, when establishing association establishment settings for each of the multiple individuals of the first object VA for the corresponding individual of the second object WA, the management server 1 can perform a mediation process of selecting one association establishment setting from the multiple association establishment settings as the association establishment setting to be maintained, similar to the first object VA. Alternatively, the management server 1 may not perform the mediation process, but allow multiple association establishment settings for the same second object WA (the same individual of the second object WA). For example, assume a scenario in which the first object VA is a user and the second object WA is a mobile object. In the case where multiple users can utilize a mobile object (for example, the mobile object is a vehicle that can accommodate multiple people), association establishment settings for multiple users of the same mobile object can be appropriately established. In such a case, the establishment of multiple association establishment settings for the same individual of the second object WA can be allowed. Of the two objects that track the utilization relationship, the object that does not allow the establishment of multiple association establishment settings can be selected as the first object VA, and the object that allows the establishment of multiple association establishment settings can be selected as the second object WA.

[0055] (terminal)

[0056] Each terminal (4, 5) is related to each object (VA, WA). The relationship between each terminal (4, 5) and each object (VA, WA) may not be particularly limited and may be appropriately determined according to the implementation method. In one example, each first terminal 4 may follow the corresponding first object VA, and each second terminal 5 may follow the corresponding second object WA. Following may include being temporarily or permanently equipped inside or outside the object, being held by the object (person), and being held by a person participating in the object (object). Equipping may include loading. Loading may include being at least temporarily placed on the object when the object is used, in addition to always being placed on the object. Loading may include being held by the user of the object. In addition, either the first terminal 4 or the second terminal 5 may be the object itself. In addition, with respect to each terminal (4, 5), for example, multiple terminals may be used as the same individual terminal, such as when a user shares an account among multiple terminals. In this case, multiple terminals used by the same individual may be interpreted as one terminal of one individual.

[0057] (Object information)

[0058] In one example, in order to show the details of each individual of the first object VA, the first object information O10 related to the first object VA can be used. The first object information O10 can include a first identifier I10. Similarly, in order to show the details of each individual of the second object WA, the second object information O20 related to the second object WA can be used. The second object information O20 can include a second identifier I20. The first object information O10 and the second object information O20 can be stored in any storage area. At least a part of the first object information O10 and the second object information O20 can be stored so as to be accessible from at least any one of the management server 1, the external server, and each terminal (4, 5).

[0059] The first object information O10 and the second object information O20 can be appropriately managed. Figure 1 In the example, the first server 2 may be configured to manage the first object information O10, and the second server 3 may be configured to manage the second object information O20. The first server 2 and the second server 3 may each be configured by one or more server devices. The first object information O10 may be stored in a memory resource provided in at least one of the internal and external storage of the first server 2 in a manner accessible from the first server 2. The second object information O20 may be stored in a memory resource provided in at least one of the internal and external storage of the second server 3 in a manner accessible from the second server 3. The internal memory resources may include, for example, RAM (Random Access Memory), an auxiliary storage device, a storage medium, etc. The external memory resources may include, for example, an external storage device, an external computer (NAS: Network Attached Storage, etc.). In another example, each object information (O10, O20) may be stored in the memory resources of the management server 1.

[0060] The unit for managing each object information (O10, O20) may not be particularly limited and may be appropriately determined according to the implementation method. At least one of the first object information O10 and the second object information O20 may be centrally (unified) managed or decentralized (independently) managed according to each arbitrary group. The server devices constituting each server (2, 3) may be equipped by more than one operating organization (main body). At least one of the first server 2 and the second server 3 may be equipped by multiple operating organizations. In the case of being equipped by multiple operating organizations, the object information may be shared (i.e., centrally managed) or decentralized managed for each operating organization.

[0061] In addition, in one example, at least one party that sends an association establishment request and accepts the setting of a corresponding relationship may include at least one party that authenticates the corresponding individual of the first object VA and the corresponding individual of the second object WA. The authentication of the corresponding individuals can be performed by any method. The authentication process can be performed by at least one of each terminal (4, 5), an external server (for example, the first server 2, the second server 3) and the management server 1. In one example, each object information (O10, O20) may include information used in the authentication of each object (VA, WA) (registration completion inherent information, etc.). In another example, each server (2, 3) may issue information (time-limited certificate) used in the authentication of each object (VA, WA). In the case where at least a part of the authentication process is performed by an external server or the management server 1, the association establishment request may include data used in the authentication. The management server 1 may be configured to perform the process of association establishment setting (step S30) only when the authentication is established.

[0062] (Identifier)

[0063] In one example, in order to identify each individual of each object (VA, WA), each identifier (I10, I20) can be used. As long as each identifier (I10, I20) can identify each individual of each object (VA, WA), its data form and composition may not be particularly limited and may be appropriately selected according to the implementation method. In one example, each identifier (I10, I20) may be composed of a symbol column including numbers, characters, etc. In another example, each identifier (I10, I20) may use inherent information such as identification information inherent to each object (VA, WA) and information from each terminal (4, 5). The identification information inherently assigned may be, for example, a car registration number, a vehicle identification number (VIN: Vehicle Identification Number), a personal number, etc. In the case of assigning an IC tag to an object, the identification information inherently assigned may include information maintained by the IC tag. The information from each terminal (4, 5) may be, for example, a MAC address (Media Access Control address), terminal identification information (IMEI: International Mobile Equipment Identifier, IMSI: International Mobile Subscriber Identity, MEID: Mobile Equipment Identifier, ICCID: Integrated Circuit Card ID, other serial numbers, etc.), etc.

[0064] (Management Server)

[0065] The management server 1 is configured to set the correspondence between the first object VA and the second object WA according to the association establishment request from at least one of the first terminal 4 and the second terminal 5. The management server 1 may directly receive the association establishment request from at least one of the first terminal 4 and the second terminal 5, or may indirectly receive the association establishment request via an external computer (e.g., the first server 2, the second server 3, etc.). That is, sending the association establishment request to the management server 1 may include directly sending the association establishment request to the management server 1, and indirectly sending the association establishment request via the external computer. In one example, the indirect sending may be configured by simply relaying the association establishment request using the external computer. In another example, the indirect sending may be configured by, for example, sending a request for participating in the association establishment process to the external computer by entrusting the authentication of each object (VA, WA) to each server (2, 3), sending the authentication result to the management server 1, and causing the external computer to send certain information to the management server 1 according to the result of the execution. That is, the association establishment request may be sent from the external computer to the management server 1 as a result of data communication for other purposes to the external computer.

[0066] The management server 1 may receive an association establishment request (commission for association establishment setting) according to the generation of the utilization relationship, and set the correspondence between the corresponding individuals of the first object VA and the second object WA according to the received association establishment request. The management server 1 may receive a release request (commission for association establishment release) according to the disappearance of the utilization relationship, and appropriately release the correspondence according to the received release request. The association establishment request and the release request may be configured to specify the corresponding individual of the processing object by any method. In a typical example, the association establishment request and the release request may be configured to specify the corresponding individual of the processing object by including the first identifier I10 and the second identifier I20 respectively. However, the method of specifying the corresponding individual of the processing object may not be limited to such an example, and may be appropriately changed according to the implementation method. In another example, at least one of the first identifier I10 and the second identifier I20 may be omitted by using alternative information in at least one of the association establishment request and the release request. For example, an identifier may be assigned as alternative information to the combination of the corresponding individuals of the first object VA and the second object WA (association establishment setting). The assignment of the identifier may be performed at any time, such as when the association is set for the first time. At least one of the association request and the release request may include this identifier so as to specify the corresponding individual of each object (VA, WA) to be processed without including at least one of the first identifier I10 and the second identifier I20.

[0067] In one example, before executing the process (I) above, the management server 1 may directly or indirectly send a query to at least one of the first first terminal 4_1 and the second second terminal 5_2 to request permission to execute the process (I). At least one of the first first terminal 4_1 and the second second terminal 5_2 may appropriately generate a response to the query. The management server 1 may execute the process (I) above by obtaining a permission response from at least one of the first first terminal 4_1 and the second second terminal 5_2.

[0068] The management server 1 may be composed of one or more server devices. In the present embodiment, the management server 1 may be configured to record information related to the generation and disappearance of the correspondence between the first object VA and the second object WA as association establishment information D10. The association establishment information D10 may be stored in a memory resource provided in at least one of the internal and external memory resources of the management server 1. The internal memory resources may include, for example, RAM, an auxiliary storage device, a storage medium, etc. The external memory resources may include, for example, an external storage device, an external computer (NAS, etc.), etc.

[0069] The obtained association establishment information D10 can be used in various scenarios. In one example, the association establishment information D10 can be used to track the relationship between the first object VA and the second object WA. As a specific example, during the period when the corresponding relationship between the first object VA and the second object WA is set, the association establishment information D10 can be used to enable the authority to establish an association with either the first object VA and the second object WA (the first object information O10 and the second object information O20) to be exercised by the other party. That is, the association establishment information D10 can be used to validate the authority of either the first object VA and the second object WA to be exercised by the other party based on the establishment of the association between the first object VA and the second object WA (described later). Figure 2 ).

[0070] In one example of the present embodiment, since the association establishment information D10 indicates a combination of a first object VA and a second object WA with which a corresponding relationship is set, the association establishment information D10 may include information of the first identifier I10 and the second identifier I20 of the corresponding individuals. The management server 1 may appropriately obtain the identifiers (I10, I20) of the objects. In one example, the management server 1 may not retain the information of the first identifier I10 and the second identifier I20 with which a corresponding relationship is set in advance, but may obtain the information from at least one of the servers (2, 3) and the terminals (4, 5) each time. In another example, the management server 1 may retain the information of at least one of the first identifier I10 and the second identifier I20 with which a corresponding relationship is set in advance.

[0071] The relationship between the management server 1 and the operating organizations of the servers (2, 3) may be arbitrary. In one example, the operating organization of the management server 1 may overlap with the operating organization of at least one of the first server 2 and the second server 3. In another example, the operating organization of the management server 1 may also be different from the operating organizations of the first server 2 and the second server 3. The system 100 of the present disclosure may be produced by the management server 1 being connected to each terminal (4, 5) via a network and being equipped in a state where each of the terminals (4, 5) can perform the above-mentioned information processing according to the intention of the operating organization of the management server 1. In the case where each server (2, 3) participates in information processing related to the establishment of association (for example, authentication processing), each server (2, 3) may be interpreted as being included in the system 100. In this case, the system 100 of the present disclosure may be produced by the management server 1 being connected to each server (2, 3) via a network and being equipped in a state where each server (2, 3) can perform information processing related to the establishment of association.

[0072] (Application example)

[0073] In one example, one of the first object VA and the second object WA may be a user. One of the first terminal 4 and the second terminal 5 that corresponds to the user may be a user terminal associated with the user. The other of the first object VA and the second object WA may be an object used by the user. One of the first terminal 4 and the second terminal 5 that corresponds to the object may be a loading terminal loaded on the object. According to one example of the present embodiment, the utilization relationship between the user and the object can be tracked.

[0074] As long as the object can be used by the user, its type is not particularly limited and can be appropriately selected according to the implementation method. In one example, the object can be a mobile body (mobility). According to an example of this embodiment, the utilization relationship between the user and the mobile body can be tracked. In addition, the type of mobile body can be appropriately selected. The mobile body can be, for example, a vehicle, a railway vehicle, an aircraft (aircraft, unmanned aircraft, etc.), a ship, etc. The mobile body can be at least any one of a manually controlled manned aircraft and an automatically controlled unmanned aircraft. In the case where the mobile body is a vehicle, the type of vehicle can be arbitrarily selected. The type of vehicle can be selected, for example, from two-wheeled vehicles, three-wheeled vehicles, four-wheeled vehicles, etc. The vehicle can include a private car, a rental car, a shared car, a taxi, a bus, etc. The vehicle can be at least any one of an autonomous driving vehicle and a manually driven vehicle. The loading terminal can be called a mobile terminal.

[0075] Figure 2 An embodiment of a scenario in which the system 100 of the present disclosure is applied is schematically shown. Figure 2 In an example, the first object VA is a user and the second object WA is a mobile object. Figure 2 In the description of the example, for convenience, it is assumed that "1" is related to the user and "2" is related to the mobile body. However, the correspondence between "1" and "2" is not limited to Figure 2 "First" and "second" can be interchangeable. That is, the second object WA can be a user and the first object VA can be a mobile object.

[0076] When the first object VA is a user, an example of the first terminal 4 is a user terminal. The user terminal can be any computer such as a portable terminal (smartphone, etc.), a dedicated device (electronic key device, etc.), or other computer devices. Typically, the user terminal can be carried by the user who is the object of association establishment (each individual of the first object VA). The user's account can be shared among multiple computers, and accordingly, each computer sharing the account can be used as the user terminal (first terminal 4) of the same user.

[0077] An example of the first identifier I10 is a user identifier (user ID, my ID). The user identifier may be, for example, an ID of a user account, a personal number, identification information of a user terminal (e.g., a MAC address, terminal identification information), etc. An example of the first object information O10 is user information O10A. User information O10A may include any information related to the user. In one example, the user information O10A may be associated with various information E10 used to exercise the authority by including information related to the authority of the corresponding user (the corresponding individual of the user). Various information E10 may include, for example, public personal authentication information, settlement information, information of other service systems, etc. Public personal authentication information may include, for example, a personal number, etc. Settlement information may include, for example, credit card information, online banking information, electronic settlement information, etc. Information of other service systems may include, for example, information related to electronic prescriptions (insurer number, prescription information, etc.). Various information E10 may be managed in an external system or in the management system 100. Among them, the first server 2 may be equipped by a public institution, a neutral institution, or various enterprises (vehicle manufacturers, service operating companies, etc.). The first server 2 may also be called a user ID server, a my ID server, or the like.

[0078] On the other hand, when the second object WA is a mobile body, an example of the second terminal 5 is a mobile body terminal (on-board terminal). The mobile body terminal may be, for example, a terminal installed inside or outside the mobile body, a terminal held by a person involved in the operation of the mobile body (e.g., a driver, a crew member, etc.), or a device equipped in a facility of the mobile body (e.g., a ticket gate, etc.). When the mobile body is a vehicle, the mobile body terminal may also be referred to as a vehicle-mounted terminal.

[0079] An example of the second identifier I20 is a mobile body identifier (mobile body ID, car ID). The mobile body identifier may be, for example, the ID of a mobile body account, identification information inherent to the target mobile body (such as a car registration number, vehicle identification information, etc.), identification information of a mobile body terminal, etc. An example of the second object information O20 is mobile body information O20A. Mobile body information O20A may include any information related to the mobile body. Figure 2 In one example, at least a portion of the rights of the mobile body to exercise various information E10 associated with the user information O10A can be validated (activated) according to the association establishment setting between the user and the mobile body. The second server 3 can be provided by a public institution, a neutral institution, or various companies (vehicle manufacturers, service operating companies, etc.). The second server 3 can also be called a mobile body ID server, a car ID server, etc.

[0080] A moving object is an example of a usable object. Figure 2 The method can be applied to any situation where the user (occupant) of the object changes dynamically. The object can be other than a mobile object, such as a leased object, an accommodation facility, etc. Leased objects can include leased offices, leased spaces, etc.

[0081] The system 100 may be configured to set a correspondence (establish an association) between the user (first identifier I10) and the corresponding individual (second identifier I20) of the object of use according to the start of use of the object of use. In addition, the system 100 may be configured to cancel the correspondence (establish an association) between the corresponding individuals according to the end of use. The start and end of use may be detected by any method, for example, at the time of boarding or alighting a vehicle, lending or returning the object of use, etc. In one example, at least one of the start and end of use may be detected by the execution of data exchange between the first terminal 4 and the second terminal 5.

[0082] Among them, the objects of use can be divided into at least two types: objects that can be used repeatedly for a long time, and objects that can be used temporarily. For the sake of convenience, the former is called "frequently used objects" and the latter is called "temporarily used objects". An example of a frequently used object is the property of a user such as a private car. An example of a temporarily used object is an object owned by a person other than a user, such as a rental car, a shared car, a mobile object of a public transportation agency, a rental object, an accommodation facility, etc. The mobile object of a public transportation agency is, for example, a taxi, a bus, a railway vehicle, an airplane, a ship, etc.

[0083] In the system 100, the type of the object to be used (whether it is a frequently used object or a temporarily used object) may or may not be distinguished. When distinguishing the type of the object to be used, the management system 100 may determine the type of the object to be used by any method. In one example, the object information (mobile body information, etc.) may include information indicating the type of the object to be used, and the system 100 may determine the type of the object to be used based on the information. In another example, the type of the object to be used may be determined based on information such as an identifier. In another example, information sent from at least one of the first terminal 4 and the second terminal 5 to the management server 1 may include information indicating the type of the object to be used, and the system 100 may determine the type of the object to be used based on the information. In another example, when the server that processes the information of the object to be used is determined based on the type of the object to be used (in Figure 2 In the example of the second server 3), when the operating organization is used, the type of the object can be determined based on the operating organization of the server.

[0084] In addition, the system 100 can switch the method of, for example, the association setting process, the association release condition, the management method of the association information D10, the authentication process, etc., according to the type of the identified object.

[0085] In addition, the application scenarios of the system 100 of the present disclosure may not be limited to scenarios of tracking users and utilizing relationships between objects. In another example, the first object VA and the second object WA may both be robotic devices configured to act autonomously through automatic control. Robotic devices may include mobile objects such as self-driving vehicles and unmanned aircraft. In a scenario where two or more robotic devices interact autonomously, the system 100 of the present disclosure may be used to track the generation and disappearance of relationships between the robotic devices.

[0086] As a specific example, one of the first object VA and the second object WA may be a large autonomous driving vehicle, and the other may be a small autonomous driving vehicle. The large autonomous driving vehicle may be configured to accommodate multiple small autonomous driving vehicles. A small autonomous driving vehicle may not be able to ride in multiple large autonomous driving vehicles at the same time (i.e., at one moment, a small autonomous driving vehicle is only accommodated in one large autonomous driving vehicle). Accordingly, the first object VA may be a small autonomous driving vehicle, and the second object WA may be a large autonomous driving vehicle. The large autonomous driving vehicle may appropriately recover, transport, and release each small autonomous driving vehicle. Each small autonomous driving vehicle may be appropriately used at the release destination. In this case, the system 100 of the present disclosure may be configured to track the operating status (e.g., whether it is being transported) by setting the correspondence between the large autonomous driving vehicle and the small autonomous driving vehicle, switching the status, and releasing it.

[0087] (Data Exchange)

[0088] In this embodiment, a series of processes related to the association establishment setting can be started by triggering the data exchange between the first terminal 4 and the second terminal 5. That is, the generation of the utilization relationship (the start of utilization) can be detected by the data exchange. The method of data exchange is not particularly limited and can be appropriately selected according to the embodiment.

[0089] In one example, data exchange between the first terminal 4 and the second terminal 5 can be performed through wireless or wired data communication. Wireless communication can be performed, for example, through NFC (Near Field Communication), Bluetooth (registered trademark), Wi-fi (registered trademark), etc. Wired communication can be performed, for example, through wired LAN (Local Area Network), USB (Universal Serial Bus), etc. Data communication can be performed directly between the first terminal 4 and the second terminal 5, or indirectly through other computers. In another example, data exchange can be performed by methods other than data communication such as reading a QR code. For example, data exchange can be performed by one of the first terminal 4 and the second terminal 5 displaying data on a display and the other using a sensor such as an image sensor to read the displayed data.

[0090] The association establishment request may include at least one of the first identifier I10 and the second identifier I20. When the association establishment request includes the first identifier I10, the first identifier I10 may be sent from at least one of the first terminal 4 and the second terminal 5. When the first identifier I10 is sent from the first terminal 4, the first terminal 4 may obtain the first identifier I10 at any time. In one example, the first identifier I10 may be pre-stored in a memory resource of the first terminal 4. The first terminal 4 may obtain the first identifier I10 from the memory resource. In another example, the first terminal 4 may obtain the first identifier I10 using an input device, a sensor, etc. When the first identifier I10 is sent from the second terminal 5, the second terminal 5 may be assigned the first identifier I10 from the first terminal 4 during data exchange, or may obtain it through an active action. In one example, the second terminal 5 may obtain the first identifier I10 from the first terminal 4 through data communication. In another example, the second terminal 5 may obtain the first identifier I10 from the first terminal 4 by a method other than data communication, such as reading the first identifier I10 displayed as a QR code on the first terminal 4. In yet another example, the second terminal 5 may use an input device, a sensor, or the like to obtain the first identifier I10 from any one of the first object VA and the first terminal 4. Acquisition from the first object VA may include, when there is a person related to the second object WA (for example, the second object WA is a person, the second object WA is operated by a person, etc.) and the first object VA is an object, obtaining by a person related to the second object WA acting as an operator.

[0091] Similarly, when the association establishment request includes the second identifier I20, the second identifier I20 may be sent from at least one of the first terminal 4 and the second terminal 5. When the second identifier I20 is sent from the second terminal 5, the second terminal 5 may obtain the second identifier I20 at any time. In one example, the second identifier I20 may be pre-stored in a memory resource of the second terminal 5. The second terminal 5 may obtain the second identifier I20 from the memory resource. In another example, the second terminal 5 may obtain the second identifier I20 using an input device, a sensor, etc. When the second identifier I20 is sent from the first terminal 4, the first terminal 4 may be assigned the second identifier I20 from the second terminal 5 during data exchange, or may obtain it through an active action. In one example, the first terminal 4 may obtain the second identifier I20 from the second terminal 5 through data communication. In another example, the first terminal 4 may obtain the second identifier I20 from the second terminal 5 by a method other than data communication, such as reading the second identifier I20 displayed as a QR code on the second terminal 5. In yet another example, the first terminal 4 may use an input device, a sensor, or the like to obtain the second identifier I20 from any one of the second object WA and the second terminal 5. Acquisition from the second object WA may include, when there is a person related to the first object VA (for example, the first object VA is a person, the first object VA is operated by a person, etc.) and the second object WA is an object, obtaining the second identifier I20 by operating the device on behalf of the person related to the first object VA.

[0092] For example, in the above Figure 2 In the example of , the first terminal 4 can obtain the second identifier I20 (mobile body identifier) ​​from the second terminal 5 through data communication or code reading. When the second identifier I20 is a car registration number, the first terminal 4 can obtain the second identifier I20 by photographing the license plate number with an image sensor and analyzing the obtained image. The first terminal 4 can obtain the second identifier I20 via an input device. The second terminal 5 can obtain the second identifier I20 appropriately. In addition, the second terminal 5 can obtain the first identifier I10 (user identifier) ​​through data communication or code reading. When the first identifier I10 is a personal number recorded on a card, etc., the second terminal 5 can obtain the first identifier I10 by photographing the card with an image sensor and analyzing the obtained image. The second terminal 5 can obtain the first identifier I10 via an input device. The first terminal 4 can obtain the first identifier I10 appropriately.

[0093] When the input device is used to obtain the data of each identifier (I10, I20), the terminal of one party can obtain the data from the object of the other party by operating the input device of the object of the other party, in addition to obtaining the data of the object of the other party by operating the input device of the object of the other party, and also obtain the data of the object of the other party by operating the input device of the object of one party. Figure 2 In the example, when the second identifier I20 is a vehicle registration number and an input device is used to obtain the vehicle registration number, the first terminal 4 can obtain the second identifier I20 from the mobile body (the second object WA) by inputting the vehicle registration number by the user (the first object VA) via the input device.

[0094] In addition, the acquisition of the data of the object of the other party by the terminal of one party does not necessarily have to be performed at the time of data exchange. The terminal of one party can acquire the data of the object of the other party at any time different from the data exchange. The data acquisition method can adopt any of the above methods. In this case, the data exchange between the first terminal 4 and the second terminal 5 can function as a simple trigger for starting a series of processes related to the association establishment setting.

[0095] (Relationship establishment information)

[0096] Figure 3A An example of association information D10 according to this embodiment is schematically shown. Figure 3A In one example, it is assumed that a method of using the first identifier I10 and the second identifier I20 to express the setting of the correspondence relationship is adopted. The association establishment information D10 includes the first identifier I10, the second identifier I20, the setting time and the release time. The first identifier I10 and the second identifier I20 represent the corresponding individual of the first object VA and the corresponding individual of the second object WA for which the correspondence relationship (association establishment) is set. The setting time represents the time when the correspondence relationship is set. The setting time can be composed of a timestamp. The release time represents the time when the correspondence relationship is released. The value of the release time can be added when the process of releasing the correspondence relationship is executed. The expression method of release may not be limited to such an example. In another example, the release time can be replaced by at least one of the validity period and the flag. The validity period indicates the period during which the setting of the correspondence relationship is valid. In this case, whether the setting of the correspondence relationship is valid (that is, whether the correspondence relationship is set or released) is indicated by whether it is within the validity period. The flag indicates whether the correspondence relationship is released. The flag can be set when the process of releasing the correspondence relationship is executed. In another example, the association establishment information D10 may include a field for at least one of the validity period and the flag and the release time. In addition, as long as the setting of the corresponding relationship can be indicated, the composition of the association establishment information D10 may not be limited to Figure 3AIn another example, the association establishment information D10 may also include information indicating the type of the object (regularly used object or temporary used object). The type of the object does not necessarily need to be identified based on the individual information. For example, the type of the object can be identified based on information such as an identifier.

[0097] The data format of the association establishment information D10 may not be particularly limited and may be appropriately selected according to the implementation method. The association establishment information D10 may be maintained by any database platform. In one example, the association establishment information D10 may be maintained by a relational database in a table format or the like. In another example, the association establishment information D10 may be maintained by a blockchain platform. In this case, each transaction of association establishment setting and release may be stored by the blockchain as the association establishment information D10. For example, a transaction of association establishment setting may include a first identifier I10, a second identifier I20, and a setting time. A transaction of association release may include a first identifier I10, a second identifier I20, and a release time (or information indicating release).

[0098] (First target information)

[0099] The first object information O10 may include any information related to the first object VA. For example, the first object information O10 may include a first identifier I10, attribute information of the first object VA, information related to authority, and the like. Figure 2 In the example of , the user information O10A is an example of the first object information O10.

[0100] Figure 3B An example of user information O10A according to this embodiment is schematically shown. Figure 3B In one example, user information O10A includes a user ID (first identifier I10), attribute information, and permission information. Attribute information may include any information related to the attributes of the corresponding user. Attribute information may include, for example, personal information such as name, address, age, gender, and contact information. Permission information is related to the permissions of the corresponding user. Permission information may include, for example, information for cooperating with a server for information processing related to the permissions of the execution object, information indicating the establishment of associations with various information E10, etc. In addition, the composition of user information O10A may not be limited to Figure 3B For example, the user information O10A (first object information O10) may further include information (such as registered unique information) used in authentication of the user (first object VA).

[0101] The data format of the first object information O10 (user information O10A) may not be particularly limited and may be appropriately selected according to the implementation method. The first object information O10 (user information O10A) may be maintained by any database platform. In one example, the first object information O10 (user information O10A) may be maintained by a relational database in a table format or the like. In another example, the first object information O10 (user information O10A) may be maintained by a blockchain platform.

[0102] (Second target information)

[0103] The second object information O20 includes any information related to the second object WA. The second object information O20 may include, for example, the second identifier I20, attribute information of the second object WA, information related to authority, and the like. Figure 2 In the example of , the moving body information O20A is an example of the second object information O20.

[0104] Figure 3C An example of the moving body information O20A according to this embodiment is schematically shown. Figure 3C In one example, the mobile body information O20A includes a mobile body ID (second identifier I20) and attribute information. The attribute information includes a license plate, a type (type of object), a mobile body type, and owner information. In the case where the mobile body is a vehicle, the license plate may be a car registration number. The type may be specified arbitrarily. In one example, the type is specified to indicate, for example, a range that can distinguish between frequently used objects and temporarily used objects, such as a private car, a rental car, a shared car, and a mobile body of a public transportation agency. The mobile body type indicates, for example, a category such as a vehicle model. When the mobile body type and the type (type of object) are the same, the field for the mobile body type may be omitted. The owner information may include any information related to the owner of the mobile body. The owner information may include, for example, the owner's personal information such as name, address, age, gender, and contact information. The owner may also be a legal person. In addition, the composition of the mobile body information O20A may not be limited to Figure 3C The example may be appropriately changed according to the implementation. For example, the mobile body information O20A (second object information O20) may also include information used in the authentication of the mobile body (second object WA) (such as registration completion inherent information, etc.). In addition, the composition of the attribute information may also be appropriately changed. For example, the mobile body information O20A (attribute information) may also include information related to the mobile body terminal, such as the contact information of the mobile body terminal.

[0105] The data format of the second object information O20 (mobile body information O20A) may not be particularly limited and may be appropriately selected according to the implementation method. The second object information O20 (mobile body information O20A) may be maintained by any database platform. In one example, the second object information O20 (mobile body information O20A) may be maintained by a relational database such as a table. In another example, the second object information O20 (mobile body information O20A) may be maintained by a blockchain platform.

[0106] (Notification Processing)

[0107] When at least one of the processes of association establishment setting and release is executed, the management server 1 may send a notification indicating the execution result to at least one of the first terminal 4 and the second terminal 5. The sending path of the notification may not be particularly limited and may be appropriately determined according to the implementation method. In one example, the management server 1 may directly notify at least one of the first terminal 4 and the second terminal 5. In another example, the management server 1 may indirectly notify at least one of the first terminal 4 and the second terminal 5 via an external computer such as each server (2, 3).

[0108] In addition, in the case of direct notification, the management server 1 can appropriately obtain the contact information of each terminal (4, 5). The contact information can be a telephone number, an email address, account information of an application of a contact system (for example, an application of a social networking service, etc.), an identification number, etc. The management server 1 can obtain information indicating the contact information of each terminal (4, 5) at any time. In one example, the management server 1 can obtain information indicating the contact information at the time of accepting a request to establish an association, a request to release an association, etc. The information indicating the contact information can be sent from at least one of each terminal (4, 5) and each server (2, 3).

[0109] (Rules of regulations)

[0110] The prescribed rules are configured to stipulate that in the scenario of mediating the conflict of the association establishment settings, that is, establishing the settings of the above-mentioned first correspondence relationship and the second correspondence relationship, it is sufficient to select which of the first correspondence relationship and the second correspondence relationship. As long as the conflict of the association establishment settings can be mediated, the prescribed rules may not be particularly limited and may be appropriately stipulated according to the implementation method. In a simple example, the prescribed rules may include giving priority to the first association establishment request. In the case of using the prescribed rules of this mode, the management server 1 may select the setting of (I) canceling the first correspondence relationship and establishing the second correspondence relationship according to the association establishment request with the second second object WA2. In addition, the prescribed rules may include at least any one of the following three rules.

[0111] (1) Rule 1

[0112] Figure 4 An example of mediation processing based on the first rule involved in the present embodiment is schematically shown. In an example of the present embodiment, the first rule may be to comply with the selection of the first object VA. The prescribed rule may include the first rule. In this case, the management server 1 may also be configured to receive the selection result ST10 of the first first object VA1. Moreover, when the second correspondence (the second second object WA2) is selected in the received selection result ST10, the management server 1 may (I) cancel the first correspondence and establish the setting of the second correspondence. On the other hand, when the first correspondence (the first second object WA1) is selected in the received selection result ST10, the management server 1 may (II) not allow the setting of the second correspondence and maintain the setting of the first correspondence.

[0113] Among them, selecting a corresponding relationship may include directly selecting a corresponding relationship to be maintained, and indirectly selecting a corresponding relationship to be maintained by selecting a corresponding relationship to be released. Selecting a corresponding relationship may include selecting a corresponding second object WA. The selection may be performed by automatic processing of a computer (terminal) or by manual processing (user operation).

[0114] In addition, the selection result ST10 may be generated by at least one of the first first terminal 4_1 of the first first object VA1 and the second second terminal 5_2 of the second second object WA2. Depending on the situation, the selection result ST10 may also be generated by the first second terminal 5_1 of the first second object WA1. When the selection is made manually, at least any one of the first first terminal 4_1, the first second terminal 5_1, and the second second terminal 5_2 may accept the selection at any time.

[0115] In addition, the selection result ST10 may be directly or indirectly transmitted to the management server 1 from at least one of the first first terminal 4_1, the first second terminal 5_1, and the second second terminal 5_2. In one example, the selection result ST10 may be transmitted from one of the first terminal 4 and the second terminal 5 that receives the selection. In another example, the selection result ST10 may be transmitted from another terminal of the first terminal 4 and the second terminal 5 that is different from the one that receives the selection by exchanging data.

[0116] In addition, the selection result ST10 can be obtained at any time before the mediation process is performed. In one example, at least any one of the first first terminal 4_1, the first second terminal 5_1, and the second second terminal 5_2 can send the selection result ST10 to the management server 1 as an active information processing accompanied by an association establishment request. In another example, at least any one of the first first terminal 4_1, the first second terminal 5_1, and the second second terminal 5_2 can send the selection result ST10 to the management server 1 as a reply to the inquiry from the management server 1. The selection result ST10 sent can be appropriately constructed to represent the selection result of the first first object VA1. According to an example of the present embodiment, the corresponding relationship to be maintained can be selected by simple processing.

[0117] (2) Rule 2

[0118] Figure 5 An example of mediation processing based on the second rule involved in the present embodiment is schematically shown. In a specific scenario, by not allowing the setting of the second corresponding relationship when the specified relationship is established (selection (II)) and allowing the setting of the second corresponding relationship when the specified relationship is not established (selection (I)), it is possible to properly track the utilization relationship between the first object VA and the second object WA.

[0119] For example, in Figure 2 In the scenario, when the first second object WA1 is a rental car, during the rental period of the rental car as the first second object WA1, from the viewpoint of prohibiting overlapping rentals, the second second object WA2 may be able to appropriately track the usage relationship by prohibiting the establishment of a corresponding relationship with other rental cars. On the other hand, from a multimodal viewpoint, such as parking a rental car in a parking lot and using a train, even during the rental period of the rental car as the first second object WA1, the second second object WA2 may be able to appropriately track the usage relationship by allowing the establishment of a corresponding relationship with other types of mobile bodies.

[0120] In the above example, as a prescribed relationship, the relationship between the first second object WA1 and the second second object WA2 is considered. However, the relationship to be considered may not be limited to between the second objects WA. The relationship with the first object VA (the first first object VA1) may be considered as the prescribed relationship. For example, a scenario is assumed in which the first object VA and the second object WA exist in the real world and a utilization relationship is generated due to the proximity of the first object VA and the second object WA. In this scenario, when the second second object WA2 (the second second terminal 5_2) moves away from the first first object VA1 (the first first terminal 4_1) to the extent that the utilization relationship is not satisfied, the utilization relationship can sometimes be appropriately tracked by prohibiting the establishment of the setting of the corresponding relationship with the second second object WA2. On the other hand, when the second second object WA2 approaches the first first object VA1 to the extent that the utilization relationship is satisfied, the utilization relationship can sometimes be appropriately tracked by allowing the establishment of the setting of the corresponding relationship with the second second object WA2. Thus, from the perspective of appropriately tracking the usage relationship, it is sometimes desirable to control whether to prohibit or allow the updating of the corresponding relationship setting based on whether the relationship defined between at least one of the first object VA1, the first object WA1, and the second object WA2 holds.

[0121] In view of this, in an example of the present embodiment, the second rule may be to prohibit updating of the setting of the corresponding relationship based on the establishment of a relationship specified between at least any one of the first first object VA1, the first second object WA1, and the second second object WA2. The specified rule may include the second rule. Accordingly, when the relationship specified between at least any one of the first first object VA1, the first second object WA1, and the second second object WA2 is not established, the management server 1 may (I) cancel the first corresponding relationship and establish the setting of the second corresponding relationship. On the other hand, when the relationship specified between at least any one of the first first object VA1, the first second object WA1, and the second second object WA2 is established, the management server 1 may (II) not allow the setting of the second corresponding relationship and maintain the setting of the first corresponding relationship.

[0122] Whether the prescribed relationship is established can be appropriately determined according to the implementation method. Any information can be used in the determination. The management server 1 can use information such as each object information (O10, O20) and information obtained from each terminal (4, 5) to determine whether the prescribed relationship is established. In the case where each identifier (I10, I20) represents the type and other attributes of each object (VA, WA), the information used in the determination may include each identifier (I10, I20). The information used in the determination can be obtained at any time before the mediation process is performed. The management server 1 can obtain the information from at least one of the external server (such as the first server 2, the second server 3, the external system, etc.) and each terminal (4, 5). In one example, when the information used in the determination is obtained from at least one of the first terminal 4 and the second terminal 5, at least one of the first terminal 4 and the second terminal 5 can send the information to the management server 1 through an active action accompanied by a request for association establishment. In another example, at least one of the first terminal 4 and the second terminal 5 can send the information to the management server 1 as a reply to the inquiry from the management server 1. The prescribed relationship may be appropriately prescribed as a relationship that specifies prohibition of updating of the setting of the correspondence relationship according to the embodiment.

[0123] (2-1) Rule 2-1

[0124] In one example, focusing on the relationship between the above-mentioned second objects WA, the 2-1 rule may be to prohibit the updating of the setting of the corresponding relationship between the second objects WA where the specified relationship is established. The second rule may include the 2-1 rule. Accordingly, when the specified relationship between the first second object WA1 and the second second object WA2 is not established, the management server 1 may (I) cancel the first corresponding relationship and establish the setting of the second corresponding relationship. On the other hand, when the specified relationship between the first second object WA1 and the second second object WA2 is established, the management server 1 may (II) not allow the setting of the second corresponding relationship and maintain the setting of the first corresponding relationship. According to an example of the present embodiment, by using the relationship between the second objects WA, appropriate mediation of conflicts in the association establishment settings can be expected.

[0125] (2-1-1)

[0126] Fig. 6AAn example of mediation processing based on the establishment or not of a prescribed relationship involved in the present embodiment is schematically shown. In order to cope with the above-mentioned rental car example, the prescribed relationship between the second objects WA may include being of the same type. That is, the 2-1 rule may include prohibiting the updating of the setting of the corresponding relationship between the second objects WA of the same type and allowing the updating of the setting of the corresponding relationship between the second objects WA of different types. Accordingly, in a case where the type of the second second object WA2 is different from the type of the first second object WA1, the management server 1 may (I) cancel the first corresponding relationship and establish the setting of the second corresponding relationship. On the other hand, in a case where the type of the second second object WA2 is the same as the type of the first second object WA1, the management server 1 may (II) not allow the setting of the second corresponding relationship and maintain the setting of the first corresponding relationship.

[0127] The type of each second object (WA1, WA2) can be appropriately determined. In one example, the type of each second object (WA1, WA2) can be determined by information such as the second object information O20 (moving body information O20A) and the second identifier I20. Figure 2 In the example, the type of each second object (WA1, WA2) can be at least one of the above types and mobile types included in the mobile information O20A. According to an example of this embodiment, by using the relationship between the types of the second objects WA, appropriate mediation of conflicts in the association establishment settings can be expected.

[0128] In addition, the type of object to be mediated based on the rule can be appropriately selected according to the implementation method. In one example, the first object VA can be a user, and the second object WA can be an object used by the user. The 2-1 rule may include prohibiting the updating of the setting of the correspondence between leased objects. In this case, the leased objects are of the same type. That is, in a case where the type of the first second object WA1 is a leased object, when the type of the second second object WA2 is not a leased object, the management server 1 can (I) cancel the first correspondence and establish the setting of the second correspondence. On the other hand, when the type of the second second object WA2 is a leased object, the management server 1 can (II) not allow the setting of the second correspondence and maintain the setting of the first correspondence. According to an example of the present embodiment, by prohibiting overlapping leases, appropriate mediation of conflicts in the association establishment settings can be expected.

[0129] The type of the object to be used may not be particularly limited and may be appropriately selected according to the implementation. In one example, the object to be used may be a vehicle. The rental object may be a rental car. In one example of this implementation, appropriate mediation of conflicts in association establishment settings can be expected in a scenario where a rental car appears.

[0130] In addition, there is a scenario where the utilization period (for example, the contract period for renting a car, etc.) is specified according to the type of the second object WA such as the above-mentioned rental property. In this scenario, when the correspondence relationship (first correspondence relationship) with the corresponding individual of the second object WA is cancelled during the utilization period by the processing of (I) above, the management server 1 can retain the setting of the correspondence relationship (first correspondence relationship) with the corresponding individual of the second object WA until the utilization period expires. Moreover, during the reservation, after the other correspondence relationship (second correspondence relationship) is cancelled, the management server 1 can restore the setting of the correspondence relationship (first correspondence relationship) with the corresponding individual of the second object WA. In this way, the setting of the correspondence relationship with the second object WA during the utilization period can be restored as soon as possible.

[0131] (2-2) Rule 2-2

[0132] Figure 6B An example of mediation processing based on the establishment of a prescribed relationship involved in the present embodiment is schematically shown. In one example, focusing on the relationship between the positions of the above-mentioned objects (VA, WA), the 2-2 rule may be a setting that does not allow the corresponding relationship with the second object WA corresponding to the second terminal 5 when the relationship between the current positions of the first terminal 4 and the second terminal 5 does not satisfy the condition of the utilization relationship. The second rule may include the 2-2 rule. The range in which the second terminal 5 (second object WA) is not located in the utilization relationship with the first terminal 4 (first object VA) is an example of a prescribed relationship.

[0133] In this case, each first terminal 4 may include a positioning module 47. Each second terminal 5 may include a positioning module 57. The management server 1 may be configured to further perform the following processing when receiving the setting of the second correspondence: obtaining the current position RP10 of the first first terminal 4_1 measured by the positioning module 47 of the first first terminal 4_1 from the first first terminal 4_1 corresponding to the first first object VA1; and obtaining the current position RP20 of the second second terminal 5_2 measured by the positioning module 57 of the second second terminal 5_2 from the second second terminal 5_2 corresponding to the second second object WA2. When the relationship between the obtained current positions (RP10, RP20) between the first first terminal 4_1 and the second second terminal 5_2 satisfies the condition of the utilization relationship, the management server 1 may (I) cancel the first correspondence and establish the setting of the second correspondence. On the other hand, when the relationship between the current positions (RP10, RP20) obtained between the first first terminal 4_1 and the second second terminal 5_2 does not satisfy the condition of utilizing the relationship, the management server 1 may (II) not allow the setting of the second correspondence and maintain the setting of the first correspondence.

[0134] The conditions of the utilization relationship can be set appropriately. In one example, the conditions of the utilization relationship can be defined by a range DR based on the current position RP10 of the first terminal 4_1 or the current position RP20 of the second terminal 5_2. In this case, whether the conditions of the utilization relationship are satisfied can be determined based on whether the user exists within the range DR. Figure 6B A scenario is envisioned in which the current position RP10 of the first first terminal 4_1 is used as a reference. In this scenario, since the current position RP20 of the second second terminal 5_2 is within the range DR, it can be determined that the condition of the utilization relationship is satisfied. On the other hand, since the current position RP20 of the second second terminal 5_2 is outside the range DR, it can be determined that the condition of the utilization relationship is not satisfied.

[0135] In addition, the range DR can be appropriately set so that the second object WA having a utilization relationship can be determined. The shape of the range DR can be arbitrarily specified. The range DR can be specified so that the distances in each direction are the same, or can be specified so that the distances in at least some directions are different.

[0136] The type of each positioning module (47, 57) is not particularly limited and can be appropriately selected according to the implementation. Each positioning module (47, 57) can be, for example, a GPS (Global Positioning Satellite) module, a GNSS (Global Navigation Satellite System) module, or the like.

[0137] The current positions (RP10, RP20) can be sent from the first first terminal 4_1 and the second second terminal 5_2 to the management server 1 at any time before the mediation process is performed. In one example, each terminal (4, 5) can report the information of each current position to the management server 1 as an active information process such as periodic transmission. Each terminal (4, 5) can report the information of each current position to the management server 1 together with the association establishment request. In this case, the management server 1 can use the information of each current position (RP10, RP20) recently reported from each terminal (4_1, 5_2) to determine whether the condition of the utilization relationship is satisfied. In another example, at any time before the mediation process is performed, the management server 1 can directly or indirectly send a request to the first first terminal 4_1 and the second second terminal 5_2. Each terminal (4_1, 5_2) can report the information of each current position (RP10, RP20) recently to the management server 1 in real time according to the request. The management server 1 can determine whether the conditions of the utilization relationship are met based on the information of the most recent current positions (RP10, RP20) reported in real time. In any case, when the information of the most recent current position of at least one of the first terminal 4_1 and the second terminal 5_2 cannot be obtained due to power failure, the management server 1 can determine that the conditions of the utilization relationship are not met.

[0138] In addition, the reporting target of the information of each current location can be appropriately selected according to the implementation method. In one example, the reporting target of the information of each current location can be the management server 1. Accordingly, the information of each current location can be managed by the management server 1. In another example, the reporting target of the information of each current location can be an external server (the first server 2, the second server 3, etc.). Accordingly, the information of each current location can be managed by an external server. The management server 1 can obtain the information of each current location (RP10, RP20) from the external server. Reporting to the management server 1 can include reporting directly to the management server 1 and reporting indirectly to the management server 1 via an external server. The reported information of each current location can be abandoned after it is no longer used in the mediation process, or it can be saved as a historical record for at least a specified period. In the case of directly reporting to the management server 1, the information of each current location can be saved in the management server 1, or it can be saved in an external server (the first server 2, the second server 3, NAS, etc.). Similarly, in the case of indirectly reporting to the management server 1, the information of each current location can also be saved in the management server 1, or it can be saved in an external server. According to an example of the present embodiment, by using the relationship between the positions of the first object VA and the second object WA (the first terminal 4 and the second terminal 5 ), appropriate mediation of the conflict in the association setting can be expected.

[0139] (3) Rule 3

[0140] For example, in Figure 2 In the scenario, it is assumed that a correspondence (first correspondence) is set between the first user as the first first object VA1 and the first individual of the moving body of the public transportation agency as the first second object WA1. In this scenario, it is not desirable to cancel the first correspondence with the first individual of the moving body and establish a new correspondence with the other moving body because the first user uses other moving bodies even though the calculation of the moving body of the public transportation agency has not been completed. The other moving body is an example of the second second object WA2 (the second individual of the moving body). In this way, when the corresponding individual of the second object WA is of a specified type, it is sometimes desirable to reject the establishment of the setting of the correspondence with the other individuals of the second object WA until the specified conditions (calculation completion in the above example) are met.

[0141] In view of this, in an example of the present embodiment, the management server 1 may be further configured to prohibit the release of the corresponding relationship by locking the setting of the corresponding relationship when a corresponding relationship is set with a second object WA of a specified type until a specified condition is satisfied. The third rule may prohibit the updating of the setting of the corresponding relationship while the setting of the corresponding relationship is locked. The specified rules may include the third rule.

[0142] Figure 7 An example of a scenario in which the association establishment setting is locked according to the present embodiment is schematically shown. In the case where the first second object WA1 is of a specified type, during the period when the first correspondence is locked due to failure to meet the specified conditions, when the setting of the second correspondence is accepted, the management server 1 may (II) not allow the setting of the second correspondence and maintain the setting of the first correspondence. That is, the management server 1 may ignore the request to establish an association with the second second object WA2. At this time, the management server 1 may directly or indirectly send a notification indicating that the setting of other correspondences is prohibited to at least one of the first first terminal 4_1 of the first first object VA1 and the second second terminal 5_2 of the second second object WA2. On the other hand, after the lock of the first correspondence is released due to meeting the specified conditions, when the setting of the second correspondence is accepted, the management server 1 may (I) release the first correspondence and establish the setting of the second correspondence.

[0143] The prescribed conditions may be appropriately set according to the implementation mode. In addition, whether the prescribed conditions are satisfied may be appropriately detected. In a simple example, the satisfaction of the prescribed conditions may be detected by a notification from the second terminal 5 corresponding to the corresponding individual of the second object WA of the prescribed type. In the above example, when the calculation is completed, the second terminal 5 (the first second terminal 5_1) of the corresponding individual of the mobile body may send a notification indicating the completion of the calculation (satisfaction of the prescribed conditions) toward the management server 1. The management server 1 may detect the satisfaction of the prescribed conditions by receiving the notification. Moreover, the management server 1 may release the lock of the setting of the corresponding relationship with the second object WA according to the detection of the satisfaction of the prescribed conditions. Thus, the management server 1 may allow the establishment of the setting of a new corresponding relationship with other individuals of the second object WA. In addition, the management server 1 may also perform such a locking process for the second object WA of other types other than the prescribed type, and may also omit the execution of the locking process for the second object WA of other types. According to an example of the present embodiment, in the case where the setting of establishing other corresponding relationships is inappropriate, the establishment of such other corresponding relationship settings can be prohibited by locking the setting of the established corresponding relationship. This makes it possible to expect appropriate resolution of conflicts in association settings.

[0144] In addition, the prescribed type can be appropriately selected according to the implementation method. In one example, the first object VA can be a user. The second object WA of the prescribed type can be a moving body of a public transportation agency. The prescribed condition can be that the payment (actuation) of the fee for the use of the moving body of the public transportation agency is completed. According to an example of the present embodiment, if the fee for the moving body of the transportation agency is not paid, transfer to other moving bodies (establishment of a new corresponding relationship with other moving bodies) can be prohibited. As a result, appropriate mediation of conflicts in the association establishment settings can be expected.

[0145] (Confirmation of continued use)

[0146] As one of the optional configurations, after the correspondence relationship between the corresponding individual of the first object VA and the corresponding individual of the second object WA is set, the management server 1 may further execute a process for confirming whether the correspondence relationship continues (confirmation process). The method for confirming continued use may be appropriately selected according to the embodiment.

[0147] In one example, the continuation of the correspondence relationship can be confirmed by authenticating at least one of the first object VA and the second object WA via at least one of the first terminal 4 and the second terminal 5. The authentication method can be performed by any method, similar to the association establishment setting. Figure 2 In the example, for example, the user can be authenticated by using an image sensor equipped on the mobile body to perform facial authentication of the user, using a fingerprint reader installed on the handle to perform fingerprint authentication of the user, making the user speak and using a microphone equipped on the mobile body to perform voiceprint authentication, etc. The authentication process can be performed by at least one of the terminal (4, 5), the server (2, 3) and the management server 1. In the case where the authentication process is performed by the server (2, 3), the data used in the authentication can be sent directly from the terminal (4, 5) to the server (2, 3), or indirectly to the server (2, 3) via an external computer such as the management server 1. In the case where the authentication process is performed by the management server 1, the data used in the authentication can be sent directly from the terminal (4, 5) to the management server 1, or indirectly to the management server 1 via external computers such as each server (2, 3). The management server 1 can appropriately obtain the authentication result, and can determine that the corresponding relationship continues when the authentication of the object is established in the obtained authentication result, and can determine that the corresponding relationship does not continue when the authentication is not established.

[0148] In another example, when at least one of the first object VA and the second object WA is a user (for example Figure 2In the case of a confirmation notification, the management server 1 may directly or indirectly send a confirmation notification including an operating element to at least one of the first terminal 4 and the second terminal 5. The operating element may be composed of, for example, a confirmation button, a reply button, a link, etc. The destination of the confirmation notification does not necessarily have to correspond to the user. Figure 2 In the case of the above, the management server 1 may send a confirmation notification to at least one of the first terminal 4 and the second terminal 5. The sending destination of the confirmation notification may overlap with or be different from the sending destination of the notification indicating the result of the processing related to the association establishment. The confirmation notification may be configured to return a response to the management server 1 directly or indirectly according to the operation of the operating element by the user. The management server 1 may determine that the correspondence relationship continues when a response based on the operation of the operating element is received within a prescribed period, and determine that the correspondence relationship does not continue when no response is received.

[0149] In another example, when tracking the correspondence between the first object VA and the second object WA in the real world, each terminal (4, 5) can Figure 6B The first terminal 4 can measure the current position of the first object VA (first terminal 4) through the positioning module 47, and the second terminal 5 can measure the current position of the second object WA (second terminal 5) through the positioning module 57. Each terminal (4, 5) can send the obtained current position of each object (VA, WA) to the management server 1 directly or indirectly via an external computer such as each server (2, 3). The management server 1 can determine whether the corresponding relationship continues based on whether the received current position of each object (VA, WA) is close to the extent that satisfies the prescribed condition of the utilization relationship (for example, the user is riding on a moving body). That is, for the management server 1, it can be determined that the corresponding relationship continues when the current position of each object (VA, WA) is close to the extent that satisfies the prescribed condition, and it can be determined that the corresponding relationship does not continue when it is not the case. In addition, when this method is adopted, the management server 1 can associate the information of the current position of each object (VA, WA) obtained with the association establishment information D10 to store it. Thus, the management server 1 can track the movement history of each object (VA, WA) together with the correspondence relationship of each object (VA, WA). In addition, at least a part of the above-mentioned processing may be executed by a computer other than the management server 1.

[0150] If it is determined that the correspondence relationship continues, the management server 1 may maintain the setting of the correspondence relationship. On the other hand, if it is determined that the correspondence relationship does not continue, the management server 1 may cancel the correspondence relationship. The management server 1 may be configured to update the state of the correspondence relationship by repeatedly performing the confirmation process periodically or irregularly after the correspondence relationship is set until the correspondence relationship is canceled.

[0151] (Remove association)

[0152] In the present embodiment, the management server 1 may be configured to cancel the correspondence relationship in response to reception of a cancellation request from at least one of the first terminal 4 and the second terminal 5 or satisfaction of a predetermined cancellation condition.

[0153] (I) Release Request

[0154] In one example, the release request may be configured to include at least one of the first identifier I10 and the second identifier I20 to indicate the correspondence relationship of the release target. In another example, the release request may be configured to include replacement information to indicate the correspondence relationship of the release target.

[0155] When the first terminal 4 sends a release request including the second identifier I20, the first terminal 4 can obtain the second identifier I20 at any time. In one example, when the association establishment request is made, the first terminal 4 can obtain the second identifier I20 and store the obtained second identifier I20 in the memory resource. When the release request is made, the first terminal 4 can obtain the second identifier I20 from the memory resource. In addition, when the first terminal 4 sends a release request including the first identifier I10, the first terminal 4 can obtain the first identifier I10 at any time. In one example, the first identifier I10 can be pre-stored in the memory resource. The first terminal 4 can obtain the first identifier I10 from the memory resource.

[0156] Similarly, when the second terminal 5 sends a release request including the first identifier I10, the second terminal 5 can obtain the first identifier I10 at any time. In one example, when the association establishment request is made, the second terminal 5 can obtain the first identifier I10 and store the obtained first identifier I10 in the memory resource. When the release request is made, the second terminal 5 can obtain the first identifier I10 from the memory resource. In addition, when the second terminal 5 sends a release request including the second identifier I20, the second terminal 5 can obtain the second identifier I20 at any time. In one example, the second identifier I20 can be pre-stored in the memory resource. The second terminal 5 can obtain the second identifier I20 from the memory resource.

[0157] Figure 8 An example of the process of establishing and canceling an association according to the present embodiment is schematically shown. Figure 8 In the example, as the first route, the first terminal 4 directly sends a release request to the management server 1 (step SZ10). In addition, as the second route, the first terminal 4 gives an instruction to the second terminal 5 (step SZ10A), so that the second terminal 5 directly sends a release request to the management server 1 (step SZ11A). However, the route for sending the release request may not be limited to such an example. The first terminal 4 may also indirectly send a release request to the management server 1 via an external computer such as the first server 2. In the second route, the second terminal 5 may indirectly send a release request to the management server 1 via an external computer such as the second server 3. In addition, the starting point of the release request may not be limited to the first terminal 4. In another example, the second terminal 5 may directly or indirectly send a release request to the management server 1. In addition, the second terminal 5 may give an instruction to the first terminal 4, so that the first terminal 4 directly or indirectly sends a release request to the management server 1. After receiving the release request, the management server 1 refers to the association establishment information D10 to release the correspondence specified by the identifier included in the release request. After the release process, the management server 1 may transmit a notification indicating the result of the release process to at least one of the first terminal 4 and the second terminal 5 , similarly to when the association is set.

[0158] The trigger of the release request can be appropriately set according to the implementation method. In one example, when at least one of the first object VA and the second object WA is a user, the release request can be sent from at least one of the first terminal 4 and the second terminal 5 by the user's operation on at least one of the first terminal 4 and the second terminal 5. That is, the trigger of the release request can be an operation performed by the user. In another example, arbitrary information processing can be performed on at least one of the first terminal 4 and the second terminal 5 along with the disappearance of the utilization relationship. The release request can be sent from at least one of the first terminal 4 and the second terminal 5 with the execution of the information processing as a trigger. For example, the arbitrary information processing can be the data exchange between the first terminal 4 and the second terminal 5. The method of data exchange when the association is released can be the same as the data exchange when the association is set. It is possible to appropriately distinguish whether it is the data exchange when the association is set or the data exchange when the association is released. For example, in Figure 2In the example, the second terminal 5 may be provided with respective sensor devices at the entrance and exit, such as at a bus boarding and alighting gate, a railway ticket gate, etc. In this case, it is possible to distinguish whether the data exchange is when the association is established or when the association is released, based on the sensor device used in the data exchange. In addition, for example, when data exchange is performed by an application of the terminal, the application may be configured to be switchable between an association establishment setting mode and an association establishment release mode. In this case, it is possible to distinguish whether the association is established or when the association is released, based on the mode of the application.

[0159] In addition, in one example, during the period when the setting of the corresponding relationship is locked by the above-mentioned locking process, when a request for releasing the corresponding relationship is received, the management server 1 can discard the received release request. The management server 1 can directly or indirectly send a notification indicating that the release of the corresponding relationship is prohibited to at least one of the first terminal 4 and the second terminal 5. On the other hand, after the lock is released due to the satisfaction of the specified conditions, the management server 1 can accept the release request and release the corresponding relationship. For example, the management server 1 can detect the satisfaction of the specified conditions based on the disappearance of the above-mentioned utilization relationship. In one example, the release request can include information indicating the satisfaction of the specified conditions. In another example, information indicating the satisfaction of the specified conditions can be sent to the management server 1 before the release request. Thus, the management server 1 can accept the release request sent based on the disappearance of the above-mentioned utilization relationship and release the corresponding relationship specified by the release request.

[0160] (II) Conditions for rescission

[0161] The release condition indicates a condition for releasing the correspondence relationship of the object. The release condition can be defined appropriately according to the embodiment.

[0162] In one example, the release condition may be defined as releasing the correspondence at an arbitrarily set release time. The release time may be assigned, for example, by a user's designation or a designation from another application (scheduler, etc.). In this case, the management server 1 may release the correspondence of the object upon the arrival of the release time. The release time may be set as the validity period of the association establishment information D10. When the release time is set according to the validity period, the management server 1 may process the correspondence of the object as being released upon the arrival of the release time.

[0163] In addition, in another example, the number of correspondences that can be set for the same individual of the second object WA can be infinite or limited. In the case where the number of settable correspondences is limited, an upper limit (threshold) can be set for the number of correspondences that can be set for the same individual of the second object WA. The threshold can be appropriately assigned. In the case where the number of correspondences set for the corresponding individuals of the second object WA exceeds the upper limit, the management server 1 can cancel at least any one of the correspondences set for the corresponding individuals of the second object WA. Which correspondence to cancel can be appropriately determined based on priority, order, type of object, etc. The management server 1 can send a query related to the cancellation to at least one of the first terminal 4 and the second terminal 5, and decide the correspondence to be cancelled based on the answer obtained.

[0164] For example, Figure 2 As in the example of , it is assumed that the first object VA is a user and the second object WA is an object of use. In this case, the number of users who can establish correspondence with the same object of use may be infinite or limited. In the case where the number of users who can establish correspondence is limited, the upper limit of the number of users who can establish correspondence can be appropriately assigned according to the threshold value. The threshold value can be set according to the attributes of the object of use (for example, the number of passengers that can be carried). When the management server 1 newly accepts the setting of the corresponding individual correspondence relationship for the object of use, it can refer to the association establishment information D10 to extract the previous correspondence relationship that was set and maintained for the corresponding individual of the object of use. In the case where the duplication of the setting of the corresponding relationship for the corresponding individual of the object of use due to the newly accepted setting of the corresponding relationship exceeds the threshold, the management server 1 can abandon the request for the setting of the newly accepted correspondence relationship, or cancel at least any one of the extracted previous correspondence relationships. In the case of canceling the previous correspondence relationship, the management server 1 can decide the correspondence relationship to be canceled according to the priority and order of the users (for example, the earlier the correspondence relationship is set, the more it will be canceled).

[0165] As a specific example, Figure 2 In the example, it is assumed that the mobile object is a private car, and the first user and the second user are, for example, family members who share the private car of the object. The private car can be renamed as a frequently used object. For the sake of convenience, it is assumed that the number of users who can establish a correspondence with the private car of the object is 1. In this case, during the period when the correspondence between one of the first user and the second user and the private car of the object is set, the management server 1 can cancel the previous correspondence (the correspondence between one party and the private car of the object) according to the setting of the correspondence between the other party and the private car of the object.

[0166] As described above, the management server 1 can terminate the correspondence relationship when receiving a termination request from at least one of the first terminal 4 and the second terminal 5 or when a predetermined termination condition is satisfied. According to an example of this embodiment, the disappearance of the utilization relationship between the first object VA and the second object WA can be tracked. In addition, the association establishment information D10 after the termination of the correspondence relationship can be saved as a history record.

[0167] (Use scenarios of association establishment information)

[0168] As described above, the association information D10 can be used in various situations. In one example, the association information D10 can be used only to track the generation and disappearance of the relationship between the first object VA and the second object WA.

[0169] In another example, the association establishment information D10 can be used to enable the exercise of at least a part of the authority to establish a correspondence with the other party from either the first object VA or the second object WA during the period in which the correspondence is set between the first object VA and the second object WA. For example, the management server 1 can be configured to further perform the following processing: based on the establishment of the correspondence between the first object VA and the second object WA, the exercise of the authority associated with the corresponding first object VA via the second object WA with which the correspondence is set is validated. In addition, the management server 1 can be configured to further perform the following processing: based on the termination of the correspondence, the exercise of the authority is invalidated. Figure 2 In the example of, the association establishment information D10 can be used to enable the mobile body to exercise at least a part of the authority to establish a correspondence with the user during the period when the correspondence is set between the user and the mobile body. According to an example of this embodiment, the permission and prohibition of the exercise of the authority of the first object VA can be controlled by the second object WA according to the setting and release of the correspondence.

[0170] Fig. 9 An example of a usage scenario of the association information D10 according to the present embodiment is schematically shown. Fig. 9 Conceived in Figure 2In the example, a scenario is described in which the authority corresponding to the user is exercised from the mobile body. In addition, it is assumed that the association establishment information D10 is constituted by including a first identifier I10 and a second identifier I20 to represent the first object VA (user) and the second object WA (mobile body) with which the corresponding relationship is set. Furthermore, a scenario is envisioned in which the user's information is managed by the first server 2 and the mobile body's information is managed by the second server 3. The external system SY1 is equipped in a place where various services are exercised (such as a parking lot, etc.), and is configured to perform information processing for providing the service of the object to the user who has the authority to the object. The composition and service of the external system SY1 are not particularly limited and can be appropriately selected according to the implementation method.

[0171] First, in step U10, the external system SY1 can obtain the second identifier I20 (mobile body identifier) ​​from the moving body of the object. The method for obtaining the second identifier I20 can be appropriately selected according to the implementation method. In one example, the external system SY1 can obtain the second identifier I20 from the second terminal 5 by exchanging data with the second terminal 5. The method of data exchange can be the same as the data exchange between the first terminal 4 and the second terminal 5. In another example, when the second identifier I20 is a car registration number, the external system SY1 can capture the license plate number through an image sensor and obtain the second identifier I20 by analyzing the obtained image.

[0172] In step U20, the external system SY1 can use the obtained second identifier I20 as a query to inquire the management server 1 whether there is a valid correspondence relationship at the object date and time for the moving body of the object. Valid means that the setting of the correspondence relationship is maintained at the object date and time. In addition, the object date and time is basically the current (instant), but it is not limited to this. For example, in the case of performing a settlement process for a past date and time, the object date and time may be a past date and time. When there is a valid correspondence relationship, the first identifier I10 (user identifier) ​​of the user who establishes a correspondence with the moving body of the object is extracted. On the other hand, when there is no valid correspondence relationship and the user who establishes a correspondence with the moving body of the object cannot be extracted, this processing can be ended.

[0173] In step U30, the external system SY1 can use the extracted first identifier I10 as a query to inquire about the exercisable authority from the first server 2 for the user corresponding to the mobile body of the object. The first server 2 can refer to the first object information O10 (user information O10A) to extract the exercisable authority associated with the user of the object. In the case where the exercisable authority cannot be extracted, the present process can be terminated. In addition, in the first object information O10 (user information O10A), whether the mobile body is allowed to exercise the authority can be set for each authority. The exercisable authority can be extracted based on the setting. In addition, when the authority of the object that the external system SY1 wants to exercise is not included in the exercisable authority, the present process can also be terminated. The authority to exercise the object can be appropriately specified at any time. In one example, the authority to exercise the object can be pre-specified in the external system SY1 or specified by the user.

[0174] In step U40, when the exercisable permissions include permissions for the object, the external system SY1 can perform processing for exercising the permissions for the object. Thus, the permissions established corresponding to the user can be exercised from the mobile body, and the user can receive services via the mobile body. For example, when the permission information includes information of public personal authentication and the permissions of the object are related to public personal authentication, the user can receive public services via the mobile body. In addition, for example, when the permission information includes settlement information and the permissions of the object are related to settlement, the user can receive settlement services via the mobile body. Settlement services can be, for example, payment of parking lot usage fees, highway fees, drive through fees, public transportation fees, rental fees, and the like. In addition, for example, when the permission information includes information related to electronic prescriptions and the object's permission is to accept medicines prescribed according to electronic prescriptions, the user can exercise the electronic prescriptions via the mobile body and receive the medicines.

[0175] In addition, for example, in the case where multiple users use an individual of a mobile body such as riding in the same vehicle, the user with driving authority can be appropriately selected. In one example, the user who exercises authority can be selected by establishing a setting of a correspondence relationship between one user among multiple users of the same individual of the mobile body. In another example, a setting of a correspondence relationship between two or more users among multiple users of the same individual of the mobile body can be established. In this case, the method of exercising authority can be appropriately adjusted within the two or more users for which the correspondence relationship is set. For example, the authority of one or more selected users (representatives) can be exercised. The selection of the user can be performed by at least one of the external system SY1, the first terminal 4, and the second terminal 5. In addition, for example, in the case where the exercise of authority is the payment of fees, the authority of each user can be exercised according to the prescribed rules. As a specific example, the payment of fees can be equally distributed to each user, and the authority of each user can be exercised for the payment of the distributed fees. The fees allocated to each user can be appropriately specified.

[0176] In addition, in another example, a group can be pre-set among multiple users, and priorities can be set for members (users) in the group. For example, in the case of a family using their own car, a group can be set for one family, and priorities can be set according to the relationship within the family. As an example, it can be set that the priority of parents is high and the priority of children is low. The information of groups and priorities can be appropriately managed, for example, by the first object information O10 (user information O10A), etc. Accordingly, a setting of a correspondence between two or more users in the same group among multiple users of the same individual using a mobile body can be established. In this case, the authority of each user can be exercised according to the priority. For example, when parents and children use their own car and the priority of parents is set high, the authority of parents can be exercised. Exercising authority according to priority can include selecting users who exercise authority according to priority (the higher the priority of the user, the more likely they are to be selected as the object of authority exercise), and determining the proportion of exercising authority according to priority (for example, the higher the priority of the user, the higher the payment fee is assigned, etc.).

[0177] In addition, the processing steps for exercising the above authority are only an example, and each step can be changed as much as possible. Regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. In addition, in the above processing steps, the user can be replaced by the first object VA, and the mobile body can be replaced by the second object WA. Moreover, in the above processing steps, "first" and "second" can be replaced.

[0178] (Data communication between devices)

[0179] The data communication between the devices (management server 1, first server 2, second server 3, first terminal 4 and second terminal 5) may not be particularly limited and may be appropriately selected according to the implementation method. The network between the devices may be appropriately selected from, for example, the Internet, a wireless communication network, a mobile communication network, a telephone network, a dedicated network, a local area network, etc. The data communication between the devices may be encrypted by methods such as SSL (Secure Socket Layer) and TLS (Transport Layer Security). In one example, each terminal (4, 5) may have a SIM (Subscriber Identity Module), and the data communication between each terminal (4, 5) and the server (management server 1, first server 2, second server 3) may be performed by encrypted communication using the SIM.

[0180] [2 Configuration example]

[0181] [Hardware Configuration Example]

[0182] (Management Server)

[0183] Fig. 10A An example of the hardware configuration of the management server 1 according to the present embodiment is schematically shown. The management server 1 according to the present embodiment is a computer in which a control unit 11, a storage unit 12, a communication interface 13, an input device 14, an output device 15, and a drive 16 are electrically connected.

[0184] The control unit 11 includes a CPU (Central Processing Unit) as a hardware processor, RAM (Random Access Memory), ROM (Read Only Memory), etc., and is configured to execute arbitrary information processing based on programs and various data. The control unit 11 (CPU) is an example of a processor resource of the management server 1.

[0185] The storage unit 12 may be composed of, for example, a hard disk drive, a solid state drive, a semiconductor memory, etc. The storage unit 12 (as well as RAM and ROM) is an example of a memory resource. In the present embodiment, the storage unit 12 stores various information such as the management program 81 and the association establishment information D10. The management program 81 is used to cause the management server 1 to execute information processing related to setting and canceling the corresponding relationship with the first object VA and the second object WA (described later). Fig.12 as well as Fig.13 The management program 81 includes a series of commands for information processing.

[0186] The communication interface 13 is configured to perform wired or wireless communication via a network. The communication interface 13 may be configured, for example, by a wired LAN (Local Area Network) module, a wireless LAN module, etc. The management server 1 may perform data communication with other computers (the first server 2, the second server 3, the first terminal 4, and the second terminal 5) via the communication interface 13.

[0187] The input device 14 is, for example, a device for inputting, such as a mouse, a keyboard, or an operation button. The output device 15 is, for example, a device for outputting, such as a display or a speaker. The operator can operate the management server 1 by using the input device 14 and the output device 15. The input device 14 and the output device 15 can be integrally formed by, for example, a touch panel display or the like. The input device 14 and the output device 15 can be connected via an external interface. The external interface can be appropriately configured to be connected to an external device in a wired or wireless manner, for example, through a USB (Universal Serial Bus) port, a dedicated port, a wireless communication port, or the like.

[0188] The drive 16 is a device for reading various information such as programs stored in the storage medium 91. At least one of the management program 81 and the association establishment information D10 can be stored in the storage medium 91 instead of the storage unit 12 or on the basis of the storage unit 12. The storage medium 91 is configured to store various information (stored programs, etc.) through electrical, magnetic, optical, mechanical or chemical effects in a manner that a computer or other machine can read the information. The management server 1 can obtain at least one of the management program 81 and the association establishment information D10 from the storage medium 91. Among them, the storage medium 91 can be a disk-type storage medium such as a CD, DVD, etc., or a storage medium other than a disk-type such as a semiconductor memory (such as a flash memory). The type of the drive 16 can be appropriately selected according to the type of the storage medium 91. The drive 16 can be connected via an external interface.

[0189] In addition, regarding the specific hardware configuration of the management server 1, the components can be appropriately omitted, replaced, and added according to the implementation method. For example, the control unit 11 may include multiple hardware processors. The hardware processor may be composed of a microprocessor, an FPGA (field-programmable gate array), a DSP (digital signal processor), a GPU (Graphics Processing Unit), an ASIC (application specific integrated circuit), etc. At least one of the input device 14, the output device 15, and the driver 16 may be omitted. The association establishment information D10 may also be stored in an external computer (such as NAS, etc.) accessible to the management server 1 instead of the storage unit 12. The management server 1 may be composed of multiple computers. In this case, the hardware configuration of each computer may be consistent or inconsistent. In addition to being an information processing device designed specifically for the service to be provided, the management server 1 may also be a general-purpose server device, a general-purpose computer, etc.

[0190] (Server 1, Server 2)

[0191] The hardware configuration of each server (2, 3) may be the same as that of the management server 1. In one example, each server (2, 3) may be a computer in which a control unit, a storage unit, a communication interface, an input device, an output device, and a drive are electrically connected. Each server (2, 3) may be composed of one or more computer devices. The processor resources of each server (2, 3) may be composed of one or more processors. The type of processor may be appropriately selected. The first object information O10 may be stored in at least one of the memory resources of the first server 2 and the external computer (NAS, etc.) accessible to the first server 2. The second object information O20 may be stored in at least one of the memory resources of the second server 3 and the external computer (NAS, etc.) accessible to the second server 3. Regarding the hardware configuration of each server (2, 3), the constituent elements may be appropriately omitted, replaced, and added according to the implementation method. In addition to being an information processing device designed specifically for the service to be provided, each server (2, 3) may also be a general-purpose server device, a general-purpose computer, etc.

[0192] (Terminal 1)

[0193] Fig. 10BAn example of the hardware configuration of the first terminal 4 according to the present embodiment is schematically shown. The first terminal 4 according to the present embodiment is a computer in which a control unit 41, a storage unit 42, a communication interface 43, an input device 44, an output device 45, a driver 46, and a positioning module 47 are electrically connected. The control unit 41 to the driver 46 and the storage medium 94 of the first terminal 4 can be configured similarly to the control unit 11 to the driver 16 and the storage medium 91 of the management server 1 described above.

[0194] The control unit 41 (CPU) is an example of a processor resource of the first terminal 4, and the storage unit 42 (as well as RAM and ROM) is an example of a memory resource of the first terminal 4. In the present embodiment, the storage unit 42 stores various information such as the program 84 and the first identifier I10. The program 84 is for causing the first terminal 4 to execute information processing related to association establishment (described later). Fig.12 as well as Fig.13 ) program. The program 84 includes a series of commands for the information processing. At least one of the program 84 and the first identifier I10 can be stored in the storage medium 94 instead of the storage unit 42 or on the basis of the storage unit 42. The first terminal 4 can obtain at least one of the program 84 and the first identifier I10 from the storage medium 94. The first terminal 4 can communicate data with other computers (management server 1, first server 2, second server 3, second terminal 5, etc.) via the communication interface 43. The first terminal 4 can be operated via the input device 44 and the output device 45.

[0195] In addition, regarding the specific hardware configuration of the first terminal 4, the components can be appropriately omitted, replaced, and added according to the implementation method. For example, the control unit 41 may include a plurality of hardware processors. The hardware processor may be composed of a microprocessor, an FPGA, a DSP, a GPU, an ASIC, an ECU (Electronic Control Unit), etc. At least one of the input device 44, the output device 45, the driver 46, and the positioning module 47 may be omitted. The first identifier I10 may not be stored in the storage unit 42. The first identifier I10 may be obtained every time. In order to obtain data such as identifiers and information used in authentication, the first terminal 4 may also have data acquisition devices such as sensors and reading devices. The communication interface 43 may be composed of multiple types of modules. For example, the communication interface 43 may have a short-range wireless communication module and a wireless communication module, and the first terminal 4 communicates data with the second terminal 5 via the short-range wireless communication module, and communicates data with the server (management server 1, first server 2, second server 3) via the wireless communication module. The first terminal 4 may be composed of multiple computers. In this case, the hardware configurations of the computers may or may not be the same. The first terminal 4 may be a general-purpose computer, terminal device (eg, smartphone, tablet PC, etc.), or the like, in addition to an information processing device designed specifically for the service to be provided.

[0196] (Terminal 2)

[0197] Fig. 10C An example of the hardware configuration of the second terminal 5 according to the present embodiment is schematically shown. The second terminal 5 according to the present embodiment is a computer in which a control unit 51, a storage unit 52, a communication interface 53, an input device 54, an output device 55, a driver 56, and a positioning module 57 are electrically connected. The control unit 51 to the driver 56 and the storage medium 95 of the second terminal 5 can be configured similarly to the control unit 11 to the driver 16 and the storage medium 91 of the management server 1 described above.

[0198] The control unit 51 (CPU) is an example of a processor resource of the second terminal 5, and the storage unit 52 (as well as RAM and ROM) is an example of a memory resource of the second terminal 5. In the present embodiment, the storage unit 52 stores various information such as the program 85 and the second identifier I20. The program 85 is for causing the second terminal 5 to execute information processing related to association establishment (described later). Fig.12 as well as Fig.13) program. The program 85 includes a series of commands for the information processing. At least one of the program 85 and the second identifier I20 can be stored in the storage medium 95 instead of the storage unit 52 or in addition to the storage unit 52. The second terminal 5 can obtain at least one of the program 85 and the second identifier I20 from the storage medium 95. The second terminal 5 can communicate data with other computers (management server 1, first server 2, second server 3, first terminal 4, etc.) via the communication interface 53. The second terminal 5 can be operated via the input device 54 and the output device 55.

[0199] In addition, regarding the specific hardware configuration of the second terminal 5, the components can be appropriately omitted, replaced, and added according to the implementation method. For example, the control unit 51 may include multiple hardware processors. The hardware processor may be composed of a microprocessor, an FPGA, a DSP, a GPU, an ASIC, an ECU, etc. At least one of the input device 54, the output device 55, the driver 56, and the positioning module 57 may be omitted. The second identifier I20 may not be stored in the storage unit 52. The second identifier I20 may be obtained every time. In order to obtain data such as identifiers and information used in authentication, the second terminal 5 may also have data acquisition devices such as sensors and reading devices. The communication interface 53 may be composed of multiple types of modules, as in the above-mentioned first terminal 4. The second terminal 5 may be composed of multiple computers. In this case, the hardware configuration of each computer may be consistent or inconsistent. In addition to being an information processing device designed specifically for the service to be provided, the second terminal 5 may also be a general-purpose computer, terminal device, etc.

[0200] [Software Configuration Example]

[0201] Fig.11 An example of the software configuration of each device (the management server 1 , the first terminal 4 , and the second terminal 5 ) according to the present embodiment is schematically shown.

[0202] (Management Server)

[0203] The control unit 11 of the management server 1 expands the management program 81 stored in the storage unit 12 into the RAM, and the CPU executes the commands included in the management program 81. Thus, the management server 1 operates as a computer including the receiving unit 111, setting unit 112, canceling unit 113, and notifying unit 114 as software modules.

[0204] The receiving unit 111 is configured to directly or indirectly receive an association establishment request from at least one of the first terminal 4 of the corresponding individual of the first object VA and the second terminal 5 of the corresponding individual of the second object WA, based on the generation of the utilization relationship between the corresponding individual of the first object VA and the corresponding individual of the second object WA. The receiving unit 111 is configured to accept the setting of the corresponding relationship between the corresponding individual of the first object VA and the corresponding individual of the second object WA by receiving the association establishment request.

[0205] The setting unit 112 is configured to perform setting processing of the accepted correspondence. The setting processing is performed by setting a correspondence between the corresponding individual of the first object VA specified by the association establishment request and the corresponding individual of the second object WA. During the establishment of the setting of the first correspondence between the first first object VA1 and the first second object WA1, when the setting of the second correspondence between the first first object VA1 and the second second object WA2 different from the first second object WA1 is accepted, a conflict in the association establishment setting will occur. In this case, the setting unit 112 is configured to (I) cancel the first correspondence and establish the setting of the second correspondence according to the prescribed rules, or (II) do not allow the setting of the second correspondence and maintain the setting of the first correspondence. The release unit 113 is configured to perform the release processing of the correspondence accompanied by the reception of a release request from at least one of the first terminal 4 and the second terminal 5 or the establishment of a prescribed release condition.

[0206] The notification unit 114 is configured to send a notification indicating the result of executing the processing of setting the correspondence relationship to at least one of the first terminal 4 and the second terminal 5. The notification unit 114 is configured to send a notification indicating the result of executing the processing of releasing the correspondence relationship to at least one of the first terminal 4 and the second terminal 5.

[0207] (Terminal 1)

[0208] The control unit 41 of the first terminal 4 executes the command included in the program 84 through the CPU. As a result, the first terminal 4 operates as a computer having a data exchange unit 411, a setting entrusting unit 412, and a release entrusting unit 413 as software modules. The data exchange unit 411 is configured to perform data exchange with the second terminal 5. The setting entrusting unit 412 is configured to send an association establishment request (an association establishment setting entrustment) to the management server 1. The release entrusting unit 413 is configured to send a release request (an association establishment release entrustment) to the management server 1.

[0209] (Terminal 2)

[0210] The control unit 51 of the second terminal 5 executes the command included in the program 85 through the CPU. As a result, the second terminal 5 operates as a computer having a data exchange unit 511, a setting entrusting unit 512, and a release entrusting unit 513 as software modules. The data exchange unit 511 is configured to perform data exchange with the first terminal 4. The setting entrusting unit 512 is configured to send an association establishment request (an association establishment setting entrustment) to the management server 1. The release entrusting unit 513 is configured to send a release request (an association establishment release entrustment) to the management server 1.

[0211] (other)

[0212] In the present embodiment, an example is described in which each software module of each device is implemented by a general-purpose CPU. However, part or all of the above-mentioned software modules may also be implemented by one or more dedicated processors. Each of the above-mentioned modules may be implemented as a hardware module. Regarding the software composition of each device, the modules may be appropriately omitted, replaced, and added according to the implementation method. For example, in the case of adopting a method of sending an association establishment request only from the terminal of one of the first terminal 4 and the second terminal 5, the setting delegation unit may be omitted from the terminal of the other party. Similarly, in the case of adopting a method of sending a release request only from the terminal of one of the first terminal 4 and the second terminal 5, the release delegation unit may be omitted from the terminal of the other party.

[0213] [3 Action Examples]

[0214] (Association establishment settings)

[0215] Fig.12 An example of the process steps of association establishment setting performed by the system 100 according to the present embodiment is shown. The following process steps are an example of an information processing method executed by a computer. The process steps of the management server 1 in the following process steps can be an example of a management method executed by a computer.

[0216] In step S10, based on the generation of the utilization relationship between the corresponding individuals of the first object VA and the second object WA, at least one of the control unit 41 of the corresponding first terminal 4 and the control unit 51 of the second terminal 5 sends an association establishment request to the management server 1. In one example, based on the generation of the utilization relationship, the control unit 41 of the corresponding first terminal 4 can operate as a data exchange unit 411 to perform data exchange with the corresponding second terminal 5. The control unit 51 of the second terminal 5 can operate as a data exchange unit 511 to perform data exchange with the first terminal 4. The control unit 41 of the first terminal 4 can operate as a setting request unit 412 with the data exchange as a trigger to send an association establishment request to the management server 1. The control unit 51 of the second terminal 5 can operate as a setting request unit 512 to send an association establishment request to the management server 1. The association establishment request can be sent directly to the management server 1, or can be sent indirectly to the management server 1 via an external computer (the first server 2, the second server 3, etc.).

[0217] In step S20, the control unit 11 of the management server 1 operates as the receiving unit 111, and directly or indirectly receives an association establishment request from at least one of the first terminal 4 of the corresponding individual of the first object VA and the second terminal 5 of the corresponding individual of the second object WA. The control unit 11 receives the setting of the correspondence relationship between the corresponding individual of the first object VA and the corresponding individual of the second object WA by receiving the association establishment request.

[0218] Furthermore, in step S10, when the association establishment request is sent from both the first terminal 4 and the second terminal 5, one association establishment request may be sent separately from the first terminal 4 and the second terminal 5, or the same association establishment request may be sent. In the case of sending separately, part of the association establishment request data may be sent from the first terminal 4, and the remaining data may be sent from the second terminal 5. In step S20, in order to determine the combination of corresponding individuals of the first object VA and the second object WA for which the setting of the corresponding relationship is actually requested, the management server 1 may appropriately determine the corresponding establishment of the data (that is, determine the combination of corresponding data).

[0219] The establishment of data correspondence can be determined by any method. In one example, the data sent from each terminal (4, 5) may include shared information for determining the establishment of data correspondence. The shared information may be composed of, for example, consistent information having a relationship such as the establishment of a correspondence. The management server 1 may determine the establishment of data correspondence based on the establishment of a relationship between the shared information included in the data received from one of the first terminal 4 and the second terminal 5 and the shared information included in the data received from the other party.

[0220] The shared information can be composed arbitrarily. In one example, the shared information can be composed of a combination of a first identifier I10 and a second identifier I20. The management server 1 can determine the establishment of data correspondence based on the consistency of the combination of identifiers (I10, I20) included in the data received from the first terminal 4 and the combination of identifiers (I10, I20) included in the data received from the second terminal 5. In another example, the shared information can be composed of temporary information such as random numbers, timestamps, hash values, etc. In this case, the management server 1 can determine the establishment of data correspondence based on the relationship between the temporary information included in the data received from the first terminal 4 and the temporary information included in the data received from the second terminal 5. In addition, the shared information can be shared between the first terminal 4 and the second terminal 5 at any time. In a typical example, the first terminal 4 and the second terminal 5 can share the shared information when exchanging data.

[0221] In step S25, the control unit 11 of the management server 1 acts as the setting unit 112 to determine whether the result of the processing of step S20 is a setting of establishing two or more correspondences between the same individual of the first object VA and two or more individuals that are different from each other of the second object WA (whether there is a conflict). That is, the control unit 11 determines whether the processing of step S20 is equivalent to accepting the setting of the second correspondence between the first first object VA1 and the second second object WA2 that is different from the first second object WA1 during the period of establishing the setting of the first correspondence between the first first object VA1 and the first second object WA1. In one example, the control unit 11 determines whether there is a setting of a correspondence between the corresponding individual of the first object VA specified by the accepted association establishment request and other individuals of the second object WA by referring to the association establishment information D10. The other individual is equivalent to the first second object WA1, and the correspondence with the other individual is equivalent to the first correspondence. In the case where there is no correspondence with other individuals of the second object WA, the control unit 11 causes the processing to enter step S301. On the other hand, when there is a correspondence relationship with another individual of the second object WA, the control unit 11 advances the process to step S302 .

[0222] In step S301, the control unit 11 acts as the setting unit 112 to update the association establishment information D10 in a manner that establishes the setting of the correspondence relationship between the first object VA and the second object WA specified by the association establishment request. In one example, the updating of the association establishment information D10 along with the setting of the correspondence relationship can be constituted by generating new association establishment information D10 indicating the specified correspondence relationship. If the association establishment information D10 is updated, the control unit 11 advances the processing to the next step S40.

[0223] On the other hand, in step S302, the control unit 11 acts as the setting unit 112, and according to the prescribed rules, (I) updates the association establishment information D10 in a manner that cancels the first correspondence and establishes the setting of the second correspondence, or (II) abandons the association establishment request in a manner that does not allow the setting of the second correspondence and maintains the setting of the first correspondence. In an example of the present embodiment, the prescribed rule can adopt at least any one of the above three rules. The update processing of the association establishment information D10 accompanied by the cancellation will be described later. If the association establishment information D10 is updated, the control unit 11 causes the processing to proceed to the next step S40. Among them, the processing of steps S301 and S302 is an example of the setting processing of the correspondence corresponding to the accepted association establishment request (the above-mentioned step S30).

[0224] In step S40, the control unit 11 operates as the notification unit 114 to directly or indirectly send a notification indicating the result of the corresponding relationship setting process to at least one of the first terminal 4 and the second terminal 5. When the notification of the result is completed, the processing steps related to the association setting involved in this operation example are completed.

[0225] In addition, the above processing steps are only an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. For example, the process of establishing the association setting can include the authentication process of at least one of the first object VA and the second object WA.

[0226] (Remove association)

[0227] Fig.13 The following is an example of a process of disassociating a connection performed by the system 100 according to the present embodiment. The following process is an example of an information processing method executed by a computer. The process of the management server 1 in the following process is an example of a management method executed by a computer. Fig.13 In the example of FIG. 1 , a scenario is assumed in which a cancellation request is directly sent from the first terminal 4 to the management server 1 .

[0228] In step SZ10, the control unit 41 of the first terminal 4 operates as the release entrusting unit 413 and sends a request for release of the correspondence relationship to the management server 1. In response, the control unit 11 of the management server 1 receives the release request. The correspondence relationship for entrusting release can be appropriately specified. The trigger of the release request can be appropriately selected according to the implementation mode.

[0229] In step SZ20, the control unit 11 acts as the release unit 113 to update the association establishment information D10 in a manner that releases the setting of the corresponding relationship specified by the received release request. In one example, updating the association establishment information D10 along with the release of the corresponding relationship can be constituted by recording information indicating that the relationship has been released. For example, in the association establishment information D10 having Figure 3A In the case of a configuration of, the control unit 11 can cancel the correspondence of the object by adding a cancellation time to the corresponding association establishment information D10 or setting a cancellation flag. In the case where the association establishment information D10 is composed of a blockchain platform, the control unit 11 can cancel the correspondence of the object by generating a transaction indicating the cancellation of the association establishment and adding the generated transaction to the blockchain.

[0230] In step SZ30, the control unit 11 operates as the notification unit 114 to transmit the execution result of the de-association process to the first terminal 4. When the notification of the result is completed, the process steps related to the de-association according to this operation example are terminated.

[0231] In addition, the above processing steps are only an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, steps can be appropriately omitted, replaced, and added according to the implementation method. For example, as mentioned above, the sending route of the release request may not be limited to Fig.13 The example can be appropriately selected according to the implementation method. The release request can be sent from the second terminal 5 (release entrustment unit 513). The processing of the release request can include authentication processing of at least one of the first object VA and the second object WA. In addition, the control unit 11 of the management server 1 can replace the above-mentioned step SZ20 and act as the release unit 113 to release the corresponding relationship along with the establishment of the specified release condition.

[0232] [feature]

[0233] In the present embodiment, information indicating the setting of the correspondence between the corresponding individuals of the first object VA and the second object WA is recorded by the processing of step S30 (step S301, step S302). Through this recording, the utilization relationship between the corresponding individuals of the first object VA and the second object WA can be tracked. In addition, in the present embodiment, in the event that a conflict occurs in the setting of establishing the association between one individual of the first object VA and multiple individuals of the second object WA, the conflict is mediated by the processing of step S25 and step S302. Therefore, according to the present embodiment, the correspondence between the first object VA and the second object WA can be properly tracked.

[0234] [4 Modifications]

[0235] The embodiments of the present disclosure have been described in detail above, but the descriptions so far are merely illustrations of the present disclosure in all respects. Various improvements or modifications can be made without departing from the scope of the present disclosure. For example, the following changes can be made. Among them, the same figure marks are used for the same components as the above-mentioned embodiments, and the descriptions of the same points as the above-mentioned embodiments are appropriately omitted. The following modifications can be appropriately combined.

[0236] <4.1>

[0237] In the above embodiment, at least one of the association establishment setting and the association establishment release, the authentication process of the first object VA and the second object WA can be performed. The authentication process can be performed on at least one of the management server 1, the external server (the first server 2, the second server 3, etc.) and each terminal (4, 5). As an example, at least one of the following four authentication methods can be used.

[0238] (A) First authentication method

[0239] Fig.14 An example of the processing procedure of association establishment setting when the first authentication method is adopted is schematically shown. In the first authentication method, the second server 3 performs authentication of the second object WA according to the request of the first terminal 4 of the first object VA, and the first server 2 performs authentication of the first object VA according to the request of the second terminal 5 of the second object WA. Each terminal (4, 5) requests each server (2, 3) to authenticate each other as an association establishment request and reports the authentication result to the management server 1. Thus, each terminal (4, 5) sends an association establishment request to the management server 1.

[0240] The first server 2 is configured to have access to a first storage device storing first registered inherent information CA10 for authentication of a first object VA. The first storage device may be composed of at least one of the memory resources of the first server 2 and an external storage device (NAS, etc.). The first registered inherent information CA10 may be included in the first object information O10. The second server 3 may be configured to have access to a second storage device storing second registered inherent information CA20 for authentication of a second object WA. The second storage device may be composed of at least one of the memory resources of the second server 3 and an external storage device (NAS, etc.). The second registered inherent information CA20 may be included in the second object information O20.

[0241] Each registered inherent information (CA10, CA20) is the inherent information pre-registered for the authentication of each object (VA, WA). As long as the inherent information can be used in the authentication, its data form and composition are not particularly limited and can be appropriately selected according to the implementation method. The inherent information can be composed of any information, such as information from the object, information from the terminal, temporarily generated information, information generated by any other method, etc.

[0242] Information from an object may be, for example, biological information, identification information assigned as inherent, etc. Biological information may be, for example, facial images, fingerprints, voiceprints, etc. Identification information assigned as inherent may be, for example, a car registration number, a vehicle identification number, a personal number, etc. In the case of assigning an IC tag to an object, the identification information assigned as inherent may include information maintained by the IC tag. Information from a terminal may be, for example, a MAC address, terminal identification information, etc. Temporarily generated information may be, for example, a one-time password, a private address (dynamically generated address), etc. Temporarily generated information may be composed of a timestamp, a random number, a hash value, etc. Information generated by any other method may include, for example, a password, a verification code, information other than other symbol columns, etc.

[0243] First, when a utilization relationship is generated between corresponding individuals of the first object VA and the second object WA, data exchange is performed between the corresponding first terminal 4 and the second terminal 5 (step SA110, step SB110).

[0244] In step SA110, the second terminal 5 obtains the first identifier I10 and the first inherent information CA1 from the corresponding individual of the first object VA. The first inherent information CA1 corresponds to the first registered inherent information CA10. The second terminal 5 can appropriately obtain the first identifier I10 and the first inherent information CA1 from the first object VA during data exchange. Acquisition from the first object VA may include acquisition from the first terminal 4. For example, the second terminal 5 can obtain at least one of the first identifier I10 and the first inherent information CA1 from the first object VA via an input device, a sensor, etc. The second terminal 5 can obtain at least one of the first identifier I10 and the first inherent information CA1 from the first terminal 4 during data exchange.

[0245] In addition, in step SB110, the first terminal 4 obtains the second identifier I20 and the second inherent information CA2 from the corresponding individual of the second object WA. The second inherent information CA2 corresponds to the second registered inherent information CA20. The first terminal 4 can appropriately obtain the second identifier I20 and the second inherent information CA2 from the second object WA during data exchange. Acquisition from the second object WA may include acquisition from the second terminal 5. For example, the first terminal 4 can obtain at least one of the second identifier I20 and the second inherent information CA2 from the second object WA via an input device, a sensor, etc. The first terminal 4 can obtain at least one of the second identifier I20 and the second inherent information CA2 from the second terminal 5 during data exchange.

[0246] In step SA120, the second terminal 5 sends the first authentication request including the first identifier I10 and the first inherent information CA1 to the first server 2. Accordingly, the first server 2 receives the first authentication request of the corresponding individual of the first object VA. The first server 2 appropriately performs the authentication process of the first object VA according to the reception of the first authentication request. In one example, the first server 2 can retrieve the first object information O10 by using the first identifier I10 included in the first authentication request in the query, and extract the first registered inherent information CA10 of the corresponding individual of the first object VA from the first object information O10. The first server 2 can compare the extracted first registered inherent information CA10 with the first inherent information CA1 included in the first authentication request. The comparison can be appropriately performed according to the inherent information used. The first server 2 can determine whether the authentication of the corresponding individual of the first object VA is established or not according to the result of the comparison. In step SA130, the first server 2 reports the authentication result of the corresponding individual of the first object VA to the management server 1. In one example, the first server 2 may attach the first identifier I10 of the first object VA and send the authentication result of the first object VA to the management server 1. The first server 2 may send the authentication result to the management server 1 regardless of whether the authentication is established or not, or may send the authentication result to the management server 1 only when the authentication is established.

[0247] On the other hand, in step SB120, the first terminal 4 sends the second authentication request including the second identifier I20 and the second inherent information CA2 to the second server 3. Accordingly, the second server 3 receives the second authentication request of the corresponding individual of the second object WA. The second server 3 appropriately performs the authentication process of the second object WA according to the reception of the second authentication request. In one example, the second server 3 can retrieve the second object information O20 by using the second identifier I20 included in the second authentication request in the query to extract the second registered inherent information CA20 of the corresponding individual of the second object WA from the second object information O20. The second server 3 can compare the extracted second registered inherent information CA20 with the second inherent information CA2 included in the second authentication request. The comparison can be appropriately performed according to the inherent information used. The second server 3 can determine whether the authentication of the corresponding individual of the second object WA is established or not according to the result of the comparison. In step SB130, the second server 3 reports the authentication result of the corresponding individual of the second object WA to the management server 1. In one example, the second server 3 may attach the second identifier I20 of the second object WA and send the authentication result of the second object WA to the management server 1. The second server 3 may send the authentication result to the management server 1 regardless of whether the authentication is established or not, or may send the authentication result to the management server 1 only when the authentication is established.

[0248] The second terminal 5 gives the first authentication request to the first server 2 and causes the first server 2 to send the authentication result to the management server 1, which is an example of the second terminal 5 sending the association establishment request to the management server 1. In addition, the first terminal 4 gives the second authentication request to the second server 3 and causes the second server 3 to send the authentication result to the management server 1, which is an example of the first terminal 4 sending the association establishment request to the management server 1. That is, when the first authentication method is adopted when setting the association establishment, the processing of step SA120, step SA130, step SB120, and step SB130 is an example of the processing of the above-mentioned step S10.

[0249] The management server 1 receives the authentication results of the corresponding individuals of each object (VA, WA) from each server (2, 3). In order to determine the combination of the corresponding individuals of the first object VA and the second object WA for which the setting of the corresponding relationship is actually required, the management server 1 can determine the corresponding establishment of the data of the authentication result by using the above-mentioned shared information and other methods. When the authentication results of the first object VA and the second object WA received are both established, the management server 1 sets the corresponding relationship between the corresponding individuals of the first object VA and the second object WA. The setting process of the corresponding relationship can be the same as the above-mentioned embodiment. In addition, a series of processes from data exchange between terminals (4, 5) to association establishment setting can be performed in real time according to the generation of the utilization relationship.

[0250] In the first authentication method, authentication of the first object VA and the second object WA is performed on the first server 2 and the second server 3, respectively, based on the use relationship between the corresponding individuals of the first object VA and the second object WA. At this time, the authentication of the first object VA is entrusted from the second terminal 5 of the second object WA. The authentication of the second object WA is entrusted from the first terminal 4 of the first object VA. That is, a cross authentication is performed in which each party does not promote its own authentication but promotes the authentication of the other party. As a result, security can be expected to be ensured.

[0251] also, Fig.14 The processing steps are just an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. For example, the processing steps of steps SA110 to SA130 and steps SB110 to SB130 are not particularly limited and can be appropriately determined according to the implementation method. At least one of the authentication processing of the first object VA (steps SA110 to SA130) and the authentication processing of the second object WA (steps SB110 to SB130) can be omitted.

[0252] (B) Second authentication method

[0253] Fig.15 An example of the process of association establishment setting in the case of adopting the second authentication method is schematically shown. In the second authentication method, the management server 1 entrusts each server (2, 3) with authentication in response to a request from at least one of the first terminal 4 and the second terminal 5. That is, at least one of the first terminal 4 and the second terminal 5 sends an association establishment request including an authentication request for each object (VA, WA). The data (unique information) used in the authentication is the same as that in the first authentication method.

[0254] First, when the utilization relationship between the corresponding individuals of the first object VA and the second object WA is generated, data exchange is performed between the corresponding first terminal 4 and the second terminal 5 (step SC110, step SD110). At least one of the first terminal 4 and the second terminal 5 sends an authentication request including the first identifier I10, the first inherent information CA1, the second identifier I20 and the second inherent information CA2 as an association establishment request to the management server 1 (step SC120, step SD120). Accordingly, the management server 1 receives the authentication request including the first identifier I10, the first inherent information CA1, the second identifier I20 and the second inherent information CA2. The processing of step SC120 and step SD120 is an example of the processing of the above-mentioned step S10.

[0255] The sharing of data transmission can be appropriately determined according to the implementation method. In one example, the second terminal 5 may be responsible for sending the first identifier I10 and the first inherent information CA1, and the first terminal 4 may be responsible for sending the second identifier I20 and the second inherent information CA2. That is, in step SC110, the second terminal 5 may obtain the first identifier I10 and the first inherent information CA1 from the first object VA. Acquisition from the first object VA may include acquisition from the first terminal 4. In step SC120, the second terminal 5 may send an association establishment request including the acquired first identifier I10 and the first inherent information CA1 to the management server 1. In step SD110, the first terminal 4 may obtain the second identifier I20 and the second inherent information CA2 from the second object WA. Acquisition from the second object WA may include acquisition from the second terminal 5. In step SD120, the first terminal 4 may send an association establishment request including the acquired second identifier I20 and the second inherent information CA2 to the management server 1.

[0256] In addition, the sharing of data transmission may not be limited to such an example. In another example, at least one of the first identifier I10 and the first inherent information CA1 may be transmitted from the first terminal 4. At least one of the second identifier I20 and the second inherent information CA2 may be transmitted from the second terminal 5. In the case of adopting a split transmission method, the management server 1 may determine the establishment of the correspondence of the data required for authentication by using the above-mentioned shared information and other methods in order to determine the combination of the corresponding individuals of the first object VA and the second object WA for which the setting of the corresponding relationship is actually required. In another example, the first identifier I10, the first inherent information CA1, the second identifier I20, and the second inherent information CA2 may be transmitted only from one of the first terminal 4 and the second terminal 5.

[0257] In step SC130, the management server 1 sends the first identifier I10 and the first inherent information CA1 in the received data to the first server 2, thereby entrusting the first server 2 with the authentication of the corresponding individual of the first object VA. Accordingly, the first server 2 can compare the first inherent information CA1 and the first registered inherent information CA10, and determine whether the authentication of the corresponding individual of the first object VA is established or not according to the result of the comparison. In step SC140, the first server 2 returns the authentication result of the corresponding individual of the first object VA to the management server 1.

[0258] Similarly, in step SD130, the management server 1 sends the second identifier I20 and the second inherent information CA2 to the second server 3 to entrust the second server 3 with the authentication of the corresponding individual of the second object WA. Based on this, the second server 3 can compare the second inherent information CA2 and the second registered inherent information CA20, and determine whether the authentication of the corresponding individual of the second object WA is established or not based on the comparison result. In step SD140, the second server 3 sends the authentication result of the corresponding individual of the second object WA to the management server 1.

[0259] The management server 1 receives the authentication results of the corresponding individuals of each object (VA, WA) from each server (2, 3). When the authentication results of the first object VA and the second object WA received are both established, the management server 1 sets a corresponding relationship between the corresponding individuals of the first object VA and the second object WA. The setting process of the corresponding relationship can be the same as the above-mentioned embodiment. In addition, a series of processes from data exchange between terminals (4, 5) to association establishment setting can be performed in real time according to the generation of the utilization relationship. Other structures can be the same as the first authentication method.

[0260] In the second authentication method, based on the use relationship between the first object VA and the second object WA, the first server 2 and the second server 3 respectively authenticate the first object VA and the second object WA. Security can be ensured by these two authentications.

[0261] also, Fig.15The processing steps are just an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. For example, the processing steps of steps SC110 to SC140 and steps SD110 to SD140 may not be particularly limited and may be appropriately determined according to the implementation method. At least one of the authentication processing of the first object VA (steps SC110 to SC140) and the authentication processing of the second object WA (steps SD110 to SD140) can be omitted.

[0262] (C-1) 3-1 Authentication Method

[0263] Fig.16 An example of the association setting process when the third-first authentication method is adopted is schematically shown. The third-first authentication method uses a time-limited certificate instead of unique information in authentication. The authentication process can be executed by the management server 1.

[0264] The first server 2 is configured to issue a first time-limited certificate CB10 to each individual of the first object VA. The second server 3 is configured to issue a second time-limited certificate CB20 to each individual of the second object WA.

[0265] Each time-limited certificate (CB10, CB20) is configured to become invalid if the validity period has passed. As long as the invalidation caused by the passage of the validity period can be controlled, the configuration of each time-limited certificate (CB10, CB20) is not particularly limited and can be appropriately selected according to the implementation method. Each time-limited certificate (CB10, CB20) may include arbitrary information. In one example, each time-limited certificate (CB10, CB20) may be composed of a random number, a timestamp, a hash value, etc. Each time-limited certificate (CB10, CB20) may be composed of temporary information such as a one-time password.

[0266] The validity period of each time-limited certificate (CB10, CB20) can be appropriately managed. Expiration due to the passage of the validity period can be appropriately determined. For example, it can be determined whether the object's time-limited certificate has expired based on the passage of the period set for the time-limited certificate, the time-limited certificate being added to the expiration list, the time-limited certificate being deleted from the validity list, being updated to a new time-limited certificate, being given information indicating expiration (such as a timestamp), etc. When reference information such as a revocation list and a validity list is used in the management of the validity period, the reference information can be stored in any storage device that can be accessed from the system 100. Typically, the reference information of each time-limited certificate (CB10, CB20) can be stored in each server (2, 3).

[0267] First, in step SE110, the first terminal 4 of the first object VA sends a commission for the issuance of the first time-limited certificate CB10 to the first server 2 in a manner associated with the first identifier I10 of the first object VA. Based on the reception of the commission, the first server 2 issues the first time-limited certificate CB10 in a manner associated with the first identifier I10. In step SE120, the first server 2 returns the issued first time-limited certificate CB10 to the first terminal 4. Accordingly, the first terminal 4 receives the issued first time-limited certificate CB10 from the first server 2. The first terminal 4 saves the received first time-limited certificate CB10 in a manner that can be used as the first certificate CB1. In addition, in step SE130, the first server 2 also notifies the management server 1 of the issued first time-limited certificate CB10. The first server 2 can attach the first identifier I10 to notify the first time-limited certificate CB10.

[0268] In step SF110, the second terminal 5 of the second object WA sends a request for issuance of a second time-limited certificate CB20 to the second server 3 in a manner associated with the second identifier I20 of the second object WA. Based on the reception of the request, the second server 3 issues the second time-limited certificate CB20 in a manner associated with the second identifier I20. In step SF120, the second server 3 returns the issued second time-limited certificate CB20 to the second terminal 5. Accordingly, the second terminal 5 receives the issued second time-limited certificate CB20 from the second server 3. The second terminal 5 saves the received second time-limited certificate CB20 in a manner that can be used as the second certificate CB2. In addition, in step SF130, the second server 3 also notifies the management server 1 of the issued second time-limited certificate CB20. The second server 3 can attach the second identifier I20 to notify the second time-limited certificate CB20.

[0269] When the utilization relationship between the corresponding individuals of the first object VA and the second object WA is generated, data exchange is performed between the corresponding first terminal 4 and the second terminal 5 (step SE140, step SF140). At least one of the first terminal 4 and the second terminal 5 sends an authentication request including the first certificate CB1 and the second certificate CB2 as an association establishment request to the management server 1 (step SE150, step SF150). Accordingly, the management server 1 receives the first certificate CB1 corresponding to the first time-limited certificate CB10 and the second certificate CB2 corresponding to the second time-limited certificate CB20. The processing of step SE150 and step SF150 is an example of the processing of the above-mentioned step S10.

[0270] The sharing of data transmission can be appropriately determined according to the implementation method. In one example, the second terminal 5 may be responsible for sending the first certificate CB1, and the first terminal 4 may be responsible for sending the second certificate CB2. That is, in step SE140, the second terminal 5 may obtain the first certificate CB1 from the first terminal 4. In step SE150, the second terminal 5 may send an association establishment request including the first certificate CB1 to the management server 1. In step SF140, the first terminal 4 may obtain the second certificate CB2 from the second terminal 5. In step SF150, the first terminal 4 may send an association establishment request including the second certificate CB2 to the management server 1.

[0271] In addition, the sharing of data transmission may not be limited to such an example. In another example, the first certificate CB1 may be sent from the first terminal 4. The second certificate CB2 may be sent from the second terminal 5. In addition, each identifier (I10, I20) may be sent to the management server 1 together with each certificate (CB1, CB2). Each identifier (I10, I20) may be sent from at least one of the first terminal 4 and the second terminal 5. In the case of adopting a split transmission method, the management server 1 may determine the corresponding establishment of the data required for authentication by using the above-mentioned shared information and other methods in order to determine the combination of the corresponding individuals of the first object VA and the second object WA that actually require the corresponding relationship. In another example, the first certificate CB1 and the second certificate CB2 may be sent only from one of the first terminal 4 and the second terminal 5.

[0272] The management server 1 compares the received first certificate CB1 with the first time-limited certificate CB10 notified from the first server 2. The management server 1 compares the received second certificate CB2 with the second time-limited certificate CB20 notified from the second server 3. The management server 1 can appropriately determine the corresponding establishment of the data to be compared. Determining the corresponding establishment of the data to be compared means determining the combination of the first time-limited certificate CB10 and the first certificate CB1 to be compared, and the combination of the second time-limited certificate CB20 and the second certificate CB2. Similar to the corresponding establishment of the data required for authentication, the management server 1 can determine the corresponding establishment of the data to be compared by using the above-mentioned shared information and other methods. The shared information can be each identifier (I10, I20).

[0273] In addition, the comparison method of the certificate and the time-limited certificate can be appropriately selected according to the relationship between the two. In one example, the time-limited certificate (CB10, CB20) can be directly used as the certificate (CB1, CB2). In this case, whether the comparison in the authentication is established can be determined based on whether the time-limited certificate (CB10, CB20) is consistent with the certificate (CB1, CB2). In another example, the time-limited certificate (CB10, CB20) can be arbitrarily transformed, and the transformed time-limited certificate (CB10, CB20) can be used as the certificate (CB1, CB2). In this case, whether the comparison in the authentication is established can be determined based on whether the prescribed relationship is established between the time-limited certificate (CB10, CB20) and the certificate (CB1, CB2). For example, the first time-limited certificate CB10 can be transformed into a hash value, and the obtained hash value can be used as the first certificate CB1. Accordingly, whether the relationship is established can be determined based on whether the hash value of the first time-limited certificate CB10 is consistent with the first certificate CB1. The transformation may include data operations such as deletion and addition. At least one of the first time-limited certificate CB10 and the second time-limited certificate CB20 may be used as a certificate directly, and the other may be used as a certificate after transformation. In addition, the transformation process may be executed by each terminal (4, 5) or by each server (2, 3). In the case where the transformation process is executed by each server (2, 3), each terminal (4, 5) may receive the transformed time-limited certificate (CB10, CB20) from each server (2, 3).

[0274] The management server 1 can determine whether the authentication of the corresponding individuals of each object (VA, WA) is established based on the results of each comparison. If the comparison is not established, the authentication is not established. In the case where the first time-limited certificate CB10 / the second time-limited certificate CB20 is invalid due to expiration of the validity period, the comparison of the first object VA / the second object WA is not established. On the other hand, if the first time-limited certificate CB10 and the second time-limited certificate CB20 are valid and each comparison is established, the authentication of the first object VA and the second object WA are both established. In the case where the authentication of the first object VA and the second object WA is both established, the management server 1 sets a corresponding relationship between the corresponding individuals of the first object VA and the second object WA. The setting process of the corresponding relationship can be the same as the above-mentioned embodiment. In addition, a series of processes from data exchange between terminals (4, 5) to association establishment setting can be performed in real time based on the generation of the utilization relationship. Other structures can be the same as the first authentication method, etc.

[0275] In the 3-1 method, the first object VA and the second object WA are authenticated using time-limited certificates (CB10, CB20) based on the creation of a utilization relationship between the corresponding individuals of the first object VA and the second object WA. Each time-limited certificate (CB10, CB20) is configured to become invalid when the validity period has expired. Therefore, it is possible to prevent the same certificate from being used continuously, thereby ensuring security.

[0276] also, Fig.16 The processing steps are just an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. For example, the processing steps of steps SE110 to SE150 and steps SF110 to SF150 are not particularly limited and can be appropriately determined according to the implementation method. At least one of the authentication processing of the first object VA (step SE110 to step SE150) and the authentication processing of the second object WA (step SF110 to step SF150) can be omitted.

[0277] In addition, the issuance of each time-limited certificate (CB10, CB20) does not necessarily need to be based on a request from each terminal (4, 5). Each server (2, 3) can actively generate each time-limited certificate (CB10, CB20). In this case, the processing of step SE110 and step SF110 can be omitted.

[0278] In addition, the issuance of each time-limited certificate (CB10, CB20) (steps SE110 to SE130, steps SF110 to SF130) can be performed at any time before the commission of the association establishment setting (step SE150, step SF150). In one example, the issuance of each time-limited certificate (CB10, CB20) can be performed in advance before the data exchange between the first terminal 4 and the second terminal 5 (step SE140, step SF140) is performed. In another example, it can also be performed after the data exchange between the first terminal 4 and the second terminal 5 is started and before the association establishment request is sent. From the perspective of reducing the process when the association is established, it is preferred that the issuance of each time-limited certificate (CB10, CB20) is performed at the former time.

[0279] In addition, in the above-mentioned authentication method 3-1, the comparison process of each certificate (CB1, CB2) and each time-limited certificate (CB10, CB20), that is, the authentication process of each object (VA, WA) is performed by the management server 1. However, the subject that performs the comparison process is not limited to the management server 1. In another example, the management server 1 can entrust the comparison process to each server (2, 3) by sending each certificate (CB1, CB2) to each server (2, 3). Thus, the comparison process can be performed by each server (2, 3).

[0280] (C-2) 3-2 Authentication Method

[0281] In the above-mentioned authentication method 3-1, authentication processing of each object (VA, WA) is performed based on the association establishment request based on at least one of the first terminal 4 and the second terminal 5. However, the timing of performing the authentication processing is not limited to such an example. In the authentication method 3-2, before the association establishment request is sent to the management server 1, authentication processing of at least one of the first object VA and the second object WA can be pre-performed between at least one of the first server 2 and the second server 3 through at least one of the first terminal 4 and the second terminal 5.

[0282] Fig.17A An example of the association establishment process when the 3-2 authentication method is used is schematically shown. Fig.17A In the example of , a scenario is assumed in which the authentication process of the first object VA is executed and the authentication process of the second object WA is omitted.

[0283] First, similar to the above-mentioned authentication method 3-1, the processing of step SE110 and step SE120 can be performed between the first terminal 4 and the first server 2. The result of the execution is that the first time-limited certificate CB10 is issued and the issued first time-limited certificate CB10 is notified to the first terminal 4. At this time, the first server 2 can associate the issued first time-limited certificate CB10 with the first identifier I10 for storage. The first time-limited certificate CB10 can be saved as the first object information O10. The notification to the management server 1 (step SE130) can be omitted. In step SE140, the first terminal 4 assigns the issued first time-limited certificate CB10 to the second terminal 5 as the first certificate CB1. In addition, the first terminal 4 assigns the first identifier I10 to the second terminal 5. Accordingly, the second terminal 5 obtains the first identifier I10 and the first certificate CB1 from the first object VA.

[0284] In step SG110, the second terminal 5 sends an authentication entrustment including the first identifier I10 and the first certificate CB1 to the first server 2. Based on the reception of the authentication entrustment, the first server 2 compares the received first certificate CB1 with the corresponding first time-limited certificate CB10. The corresponding first time-limited certificate CB10 can be obtained appropriately. In one example, the issued first time-limited certificate CB10 can be saved as the first object information O10, and the first server 2 can retrieve the first object information O10 by using the first identifier I10 in the query to extract the corresponding first time-limited certificate CB10. In step SG120, the first server 2 returns the comparison result to the second terminal 5. Accordingly, the control unit 51 of the second terminal 5 receives the comparison result.

[0285] In the received comparison result, when the comparison between the first certificate CB1 and the first time-limited certificate CB10 is not established, the second terminal 5 can appropriately end the processing steps of the association establishment setting. The second terminal 5 can request the first terminal 4 to send the first certificate CB1 again. On the other hand, when the comparison is established, the second terminal 5 sends the association establishment request including the first identifier I10 and the second identifier I20 to the management server 1 (step SG130). The processing of step SG130 is an example of the processing of the above-mentioned step S10.

[0286] Accordingly, the management server 1 receives the association establishment request from the second terminal 5. The management server 1 sets the correspondence between the first object VA and the corresponding individuals of the second object WA according to the association establishment request. The setting process of the correspondence relationship can be the same as the above-mentioned embodiment. In addition, a series of processes from the data exchange between the terminals (4, 5) (step SE140) to the association establishment setting can be executed in real time according to the generation of the utilization relationship. The other structures can be the same as the first authentication method, etc.

[0287] also, Fig.17A The processing steps are just an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method.

[0288] For example, the management server 1 can appropriately verify that the comparison is successful in the first server 2. In one example, the first server 2 can also send the result of the comparison to the management server 1. For example, the above-mentioned authentication delegation can also include the second identifier I20. When the comparison is successful, the first server 2 can send the result of the comparison including the first identifier I10 and the second identifier I20 to the management server 1. Thereby, the first server 2 can make the management server 1 validate the association establishment request for the combination of the first identifier I10 and the second identifier I20 specified by the comparison result. That is, in one example, the verification of the successful comparison can be constituted by receiving the comparison result. The management server 1 can be configured to maintain the comparison result from the first server 2, accept the delegation of the association establishment setting for the combination of the first identifier I10 and the second identifier I20 specified by the comparison result, and discard the delegation of the association establishment setting other than this.

[0289] In the 3-2 authentication method, the object to be authenticated is not limited to the first object VA. In another example, the authentication process of the second object WA may be performed instead of the authentication process of the first object VA. In another example, the authentication process of the second object WA may be performed together with the authentication process of the first object VA.

[0290] Fig. 17B Another example of the association establishment process when the 3-2 authentication method is used is schematically shown. Fig. 17B In the example of , a scenario is assumed in which the authentication process of the second object WA is executed instead of the authentication process of the first object VA. In addition to the point that the first object VA and the second object WA are exchanged, Fig. 17B The processing steps can be Fig.17AThe processing steps are the same. That is, the second time-limited certificate CB20 is issued by executing the processing of step SF110 and step SF120 between the second terminal 5 and the second server 3, and the issued second time-limited certificate CB20 is notified to the second terminal 5. In step SF140, the second terminal 5 assigns the issued second time-limited certificate CB20 to the first terminal 4 as the second certificate CB2. In addition, the second terminal 5 assigns the second identifier I20 to the first terminal 4. In step SH110, the first terminal 4 sends the authentication entrustment including the second identifier I20 and the second certificate CB2 to the second server 3. Accordingly, the second server 3 performs a comparison process of the second certificate CB2 and the second time-limited certificate CB20. In step SH120, the second server 3 returns the comparison result to the first terminal 4. When the comparison between the second certificate CB2 and the second time-limited certificate CB20 is successful, the first terminal 4 sends a request for establishing an association including the first identifier I10 and the second identifier I20 to the management server 1 (step SH130). Accordingly, the management server 1 receives the request for establishing an association from the first terminal 4. The management server 1 sets a corresponding relationship between the first object VA and the corresponding individuals of the second object WA according to the request for establishing an association. In another example, by executing Fig.17A as well as Fig. 17B The authentication process of the first object VA and the second object WA is performed through a series of processes.

[0291] In the 3-2 authentication method, the authentication process is executed before the association request. This can reduce the processing load of the management server 1. In addition, the processing time from the association request to the setting process can be shortened.

[0292] (D) 4th authentication method

[0293] Fig.18A An example of the process of establishing an association when the fourth authentication method is used is schematically shown. The fourth authentication method uses a key-based electronic signature and an electronic certificate. The authentication process is performed by a terminal of the other party to the object to be authenticated. The terminal of the other party to the object to be authenticated is the second terminal 5 when authenticating the first object VA, and is the first terminal 4 when authenticating the second object WA. Fig.18A In the example of , a scenario is assumed in which the authentication process of the second object WA is omitted and the authentication process of the first object VA is executed.

[0294] As a preparation stage (pre-processing), a combination of a first key CC10 and a first public key used in the authentication of the first object VA is generated. The method of generating the first key CC10 and the first public key is not particularly limited and can be appropriately selected according to the implementation method. The first key CC10 and the first public key can be generated by at least one of the first terminal 4 and the external computer (the first server 2, the certification authority, etc.).

[0295] Next, the certification authority generates the first electronic certificate CC1 for the first public key. In one example, the certification authority may generate the first electronic certificate CC1 based on a commission from the first terminal 4. The certification authority may be the first server 2 or an external server other than the first server 2. As long as the authenticity of the first public key can be verified, the composition of the first electronic certificate CC1 may not be particularly limited and may be appropriately selected according to the implementation method. In one example, the first electronic certificate CC1 may be composed of the electronic signature of the certification authority, the ownership information and the first public key. The certification authority maintains a combination of the public key and the secret key. The electronic signature of the certification authority may be generated by encrypting the ownership information and the first public key using the secret key of the certification authority. In a specific example, the electronic signature of the certification authority may be generated by transforming the ownership information and the first public key into a hash value using a hash function and encrypting the resulting hash value using the secret key of the certification authority.

[0296] The first electronic certificate CC1 is provided from the certification authority to the first terminal 4. In addition, the first electronic certificate CC1 can be stored in any storage area. The validity period of the first electronic certificate CC1 can be managed by the revocation list. The revocation list can also be stored in any storage area. The first electronic certificate CC1 and the revocation list can be stored in the first server 2, and can also be stored in an external server that can be accessed from the first server 2. The first terminal 4 is in a state where the first key CC10 and the first electronic certificate CC1 are maintained, thereby completing the preparation for the authentication process of the first object VA.

[0297] In the utilization phase, when the utilization relationship between the corresponding individuals of the first object VA and the second object WA is generated, data exchange is performed between the corresponding first terminal 4 and the second terminal 5 (steps SI110 and SI120). In this data exchange, electronic information is shared between the first terminal 4 and the second terminal 5. The electronic information can be composed of arbitrary information such as a random number and a timestamp. The electronic information can include information from the first object VA such as the owner information of the first terminal 4.

[0298] The electronic information may be generated by at least one of the first terminal 4 and the second terminal 5. In the case where the second terminal 5 participates in the generation of at least a part of the electronic information, as a process of step SI110, data related to the electronic information may be provided from the second terminal 5 to the first terminal 4. The first terminal 4 generates the electronic signature CD1 by encrypting the first identifier I10 and the electronic information using the first key CC10. In a specific example, the first terminal 4 may generate the electronic signature CD1 by transforming the first identifier I10 and the electronic information into a hash value using a hash function and encrypting the obtained hash value using the first key CC10.

[0299] In step SI120, the first terminal 4 gives the first identifier I10, the generated electronic signature CD1, and the first electronic certificate CC1 to the second terminal 5. Thus, the second terminal 5 obtains the first identifier I10, the electronic signature CD1, and the first electronic certificate CC1 from the first terminal 4. In the case where the first terminal 4 participates in the generation of at least a part of the electronic information such as the information from the first object VA, as the processing of step SI120, the data related to the electronic information can be provided from the first terminal 4 to the second terminal 5.

[0300] Next, the second terminal 5 verifies the validity of the first electronic certificate CC1 (step SI130, step SI135). Fig.18AIn the example, it is assumed that the first server 2 maintains a revocation list. In step SI130, the second terminal 5 inquires the first server 2 whether the first electronic certificate CC1 is valid. In the case where the first electronic certificate CC1 is not registered in the revocation list, it is determined that the first electronic certificate CC1 is valid (that is, the validity period has not expired). In the case where the first electronic certificate CC1 is registered in the revocation list, it is determined that the first electronic certificate CC1 is invalid. The first server 2 refers to the revocation list to determine whether the first electronic certificate CC1 is valid. In step SI135, the first server 2 returns the determination result to the second terminal 5. The second terminal 5 can simultaneously inquire the first server 2 whether the first identifier I10 is valid. In addition, in the case where the revocation list is maintained in an external server, the second terminal 5 can directly or indirectly (for example, via the first server 2) inquire the external server whether the first electronic certificate CC1 is valid. In addition, in another example, the second terminal 5 can obtain the revocation list and refer to the obtained revocation list to determine whether the first electronic certificate CC1 is valid. When the first electronic certificate CC1 is invalid (i.e., expired), the second terminal 5 determines that the verification of the validity of the first electronic certificate CC1 is not established, and the processing steps of the association establishment setting can be appropriately terminated. The second terminal 5 can request the first terminal 4 to send a series of information again. On the other hand, when the first electronic certificate CC1 is valid, the second terminal 5 appropriately obtains the public key of the certification authority. The second terminal 5 uses the obtained public key to decode the electronic signature of the certification authority included in the first electronic certificate CC1. In addition, the second terminal 5 compares the obtained decoded data with the remaining information (possession information and the first public key) included in the first electronic certificate CC1. When encrypted after conversion to a hash value, the second terminal 5 converts the possession information and the first public key into a hash value using a hash function, and compares the obtained hash value with the decoded data. For the second terminal 5, when the two are consistent in the comparison, it is determined that the verification of the validity of the first electronic certificate CC1 is established, and when the two are inconsistent, it is determined that the verification of the validity of the first electronic certificate CC1 is not established.

[0301] In addition, the second terminal 5 verifies the validity of the electronic signature CD1 (step SI140). The second terminal 5 uses the first public key included in the first electronic certificate CC1 to decode the electronic signature CD1. The second terminal 5 compares the obtained decoded data with the shared information (the first identifier I10 and the electronic information). In the case of encryption after conversion to a hash value, the second terminal 5 converts the shared information (the first identifier I10 and the electronic information) into a hash value using a hash function, and compares the obtained hash value with the decoded data. For the second terminal 5, when the two are consistent in the comparison, it is determined that the verification of the validity of the electronic signature CD1 is established, and when the two are inconsistent, it is determined that the verification of the validity of the electronic signature CD1 is not established.

[0302] When the verification of the validity of the first electronic certificate CC1 and the electronic signature CD1 is established, the second terminal 5 sends a request for establishing an association including the first identifier I10 and the second identifier I20 to the management server 1 (step SI150). Accordingly, the management server 1 receives the request for establishing an association from the second terminal 5. The management server 1 sets a correspondence between the corresponding individuals of the first object VA and the second object WA according to the request for establishing an association. The setting process of the correspondence relationship can be the same as the above-mentioned embodiment. In addition, a series of processes from data exchange between the terminals (4, 5) to the establishment of an association can be performed in real time according to the generation of the utilization relationship. The process of step SI150 is an example of the process of the above-mentioned step S10. On the other hand, when the verification of the validity of at least one of the first electronic certificate CC1 and the electronic signature CD1 is not established, the second terminal 5 can appropriately end the processing steps of the association establishment setting. The second terminal 5 can also request the first terminal 4 to send a series of information again.

[0303] also, Fig.18A The processing steps are just an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. For example, the processing steps of verifying the validity of the first electronic certificate CC1 (step SI130, step SI135) and verifying the validity of the electronic signature CD1 (step SI140) can be appropriately changed. In another example, the verification of the validity of the electronic signature CD1 can be performed before the verification of the validity of the first electronic certificate CC1. The verification process of the validity of the first electronic certificate CC1 and the verification process of the validity of the electronic signature CD1 can be at least partially performed in parallel.

[0304] In addition, in the fourth authentication method, the object to be authenticated may not be limited to the first object VA. In another example, the authentication process of the second object WA may be performed instead of the authentication process of the first object VA. In another example, the authentication process of the second object WA may be performed together with the authentication process of the first object VA.

[0305] Fig.18B Another example of the process of association establishment setting when the fourth authentication method is adopted is schematically shown. Fig.18B In the example of , a scenario is assumed in which the authentication process of the second object WA is executed instead of the authentication process of the first object VA. In addition to the point that the first object VA and the second object WA are exchanged, Fig.18B The processing steps and data can be Fig.18AThe processing steps and each data are the same. That is, in the preparation stage, a combination of the second key CC20 and the second public key is generated. Next, the certification body generates a second electronic certificate CC2 for the second public key. In one example, the second electronic certificate CC2 can be composed of the electronic signature of the certification body, the possession information and the second public key. The second electronic certificate CC2 is provided from the certification body to the second terminal 5. In the utilization stage, when the utilization relationship between the corresponding individuals of the first object VA and the second object WA is generated, data exchange (step SJ110, step SJ120) is performed between the corresponding first terminal 4 and the second terminal 5. In this data exchange, electronic information is shared between the first terminal 4 and the second terminal 5. The second terminal 5 generates an electronic signature CD2 by encrypting the second identifier I20 and the electronic information using the second key CC20. The second terminal 5 assigns the second identifier I20, the generated electronic signature CD2 and the second electronic certificate CC2 to the first terminal 4. Thus, the first terminal 4 obtains the second identifier I20, the electronic signature CD2 and the second electronic certificate CC2. The first terminal 4 verifies the validity of the second electronic certificate CC2 (step SJ130, step SJ135). In addition, the first terminal 4 verifies the validity of the electronic signature CD2 (step SJ140). When the verification of the validity of the second electronic certificate CC2 and the electronic signature CD2 is established, the first terminal 4 sends the association establishment request including the first identifier I10 and the second identifier I20 to the management server 1 (step SJ150). Accordingly, the management server 1 receives the association establishment request from the first terminal 4. The management server 1 sets the corresponding relationship between the corresponding individuals of the first object VA and the second object WA according to the association establishment request. The setting process of the corresponding relationship can be the same as the above-mentioned embodiment. On the other hand, when the verification of the validity of at least one of the second electronic certificate CC2 and the electronic signature CD2 is not established, the first terminal 4 can appropriately end the processing step of the association establishment setting. The first terminal 4 can request the second terminal 5 to send a series of information again. In another example, you can execute Fig.18A as well as Fig.18B A series of processing can be performed to execute the authentication processing of the first object VA and the second object WA.

[0306] In the fourth authentication method, a key and an electronic certificate are used to authenticate at least one of the first object VA and the second object WA. As a result, security can be expected to be ensured. In addition, by performing authentication processing on the terminal side before the association establishment request, it can be expected to reduce the processing burden of the management server 1. In addition, the processing time from the association establishment request to the setting process can be shortened.

[0307] [5 Supplement]

[0308] The processes and means described in the present disclosure can be implemented in combination as long as no technical contradiction occurs.

[0309] Furthermore, a process described as being performed by one device may be shared and executed by a plurality of devices. Alternatively, a process described as being performed by different devices may be executed by one device. In a computer system, the hardware configuration that implements each function can be flexibly changed.

[0310] The present disclosure can also be implemented by supplying a computer program installed with the functions described in the above-mentioned embodiments to a computer, and having one or more processors of the computer read out the program and execute it. Such a computer program can be provided to the computer via a non-temporary computer-readable storage medium that can be connected to the system bus of the computer, or it can be provided to the computer via a network. Non-temporary computer-readable storage media include, for example, any type of disks such as magnetic disks (floppy (registered trademark) disks, hard disk drives (HDDs), etc.), optical disks (CD-ROMs, DVD disks, Blu-ray disks, etc.), read-only memories (ROMs), random access memories (RAMs), EPROMs, EEPROMs, magnetic cards, flash memories, optical cards, semiconductor drives (solid-state drives, etc.), and any type of medium suitable for storing electronic commands.

[0311] Description of reference numerals:

[0312] 1…management server; 11…control unit; 2…first server; 3…second server; 4…first terminal; 41…control unit; 47…positioning module; 5…second terminal; 51…control unit; 57…positioning module; VA…first object; VA1…first first object; WA…second object; WA1…first second object; WA2…second second object; I10…first identifier; I20…second identifier; O10…first object information; O10A…user information; O20…second object information; O20A…moving body information; D10…association establishment information; E10…various information.

Claims

1. A system, wherein: A management server, a plurality of first terminals corresponding to the first objects, and a plurality of second terminals corresponding to the second objects, are provided. The plurality of first terminals and the plurality of second terminals are configured such that at least one of the first terminal corresponding to the first object and the second terminal corresponding to the second object sends an association establishment request to the management server according to the generation of a utilization relationship between the first object and the second object. The management server is configured to perform the following processing: accepting setting of a correspondence relationship between the first object and the second object by receiving the association establishment request; and During the period in which the setting of the first correspondence between the first first object and the first second object is established, when the setting of the second correspondence between the first first object and the second second object different from the first second object is accepted, according to the prescribed rules, (I) the first correspondence is released and the setting of the second correspondence is established, or (II) the setting of the second correspondence is not allowed and the setting of the first correspondence is maintained.

2. The system according to claim 1, wherein: The management server is further configured to receive a selection result based on the first first object, The management server is composed of: When the second correspondence is selected in the received selection result, (I) the first correspondence is cancelled and the second correspondence is established, When the first correspondence relationship is selected in the selection result, (II) setting of the second correspondence relationship is not permitted and setting of the first correspondence relationship is maintained.

3. The system according to claim 1, wherein: The management server is composed of: When the relationship between the first second object and the second second object does not hold, (I) canceling the first correspondence relationship and establishing the second correspondence relationship, When the predetermined relationship is established between the first second object and the second second object, (II) setting of the second correspondence relationship is not permitted and setting of the first correspondence relationship is maintained.

4. The system according to claim 1, wherein: The management server is composed of: When the type of the second second object is different from the type of the first second object, (I) the first correspondence relationship is canceled and the second correspondence relationship is established, When the type of the second second object is the same as the type of the first second object, (II) setting of the second correspondence relationship is not permitted and setting of the first correspondence relationship is maintained.

5. The system according to claim 1, wherein: The first object is a user, The second object is an object used by the user. When the types of the first and second objects are rental items, the management server is configured as follows: When the type of the second second object is not the rental property, (I) canceling the first correspondence relationship and establishing the second correspondence relationship, When the type of the second second object is the rental property, (II) setting of the second correspondence relationship is not permitted and setting of the first correspondence relationship is maintained.

6. The system according to claim 5, wherein: The object of utilization is a vehicle, The leased item is a leased car.

7. The system according to claim 1, wherein: Each of the first terminals is provided with a positioning module. Each of the second terminals is provided with a positioning module. The management server is configured to further perform the following processing when receiving the setting of the second correspondence relationship: acquiring, from a first first terminal corresponding to the first first object, a current position of the first first terminal measured by a positioning module of the first first terminal; and acquiring, from a second second terminal corresponding to the second second object, a current position of the second second terminal measured by a positioning module of the second second terminal, The management server is composed of: When the relationship of the current positions obtained between the first first terminal and the second second terminal satisfies the condition of the utilization relationship, (I) canceling the first correspondence relationship and establishing the second correspondence relationship, When the acquired relationship of the current positions between the first first terminal and the second second terminal does not satisfy the condition of the utilization relationship, (II) setting of the second correspondence relationship is not permitted and setting of the first correspondence relationship is maintained.

8. The system according to claim 1, wherein: The management server is further configured to prohibit the cancellation of the correspondence relationship by locking the setting of the correspondence relationship until a predetermined condition is satisfied when a correspondence relationship is set with a second object of a predetermined type. The management server is configured, when the first and second objects are of the predetermined type, to: When the setting of the second correspondence is accepted while the first correspondence is locked, (II) the setting of the second correspondence is not permitted and the setting of the first correspondence is maintained, After the lock of the first correspondence relationship is released, when the setting of the second correspondence relationship is accepted, (I) the first correspondence relationship is released and the setting of the second correspondence relationship is established.

9. The system according to claim 8, wherein: The first object is a user, The second object of the predetermined type is a moving object of a public transportation system, The predetermined condition is completion of payment of fees for use of the moving body of the public transportation system.

10. The system according to claim 1, wherein: The management server is configured to further execute a process of validating, based on the establishment of a correspondence relationship between the first object and the second object, the exercise of authority associated with the corresponding first object via the second object to which the correspondence relationship is set.

11. A management server, wherein: A control unit configured to execute the following processing: receiving an association establishment request from at least one of a first terminal of the first object and a second terminal of the second object in response to generation of a utilization relationship between the first object and the second object; accepting setting of a correspondence relationship between the first object and the second object by receiving the association establishment request; as well as During the period in which the setting of the first correspondence between the first first object and the first second object is established, when the setting of the second correspondence between the first first object and the second second object different from the first second object is accepted, according to the prescribed rules, (I) the first correspondence is released and the setting of the second correspondence is established, or (II) the setting of the second correspondence is not allowed and the setting of the first correspondence is maintained.

12. The management server according to claim 11, wherein: The control unit is composed of: When the relationship between the first second object and the second second object does not hold, (I) canceling the first correspondence relationship and establishing the second correspondence relationship, When the predetermined relationship is established between the first second object and the second second object, (II) setting of the second correspondence relationship is not permitted and setting of the first correspondence relationship is maintained.

13. The management server according to claim 11, wherein: The control unit is composed of: When the type of the second second object is different from the type of the first second object, (I) the first correspondence relationship is canceled and the second correspondence relationship is established, When the type of the second second object is the same as the type of the first second object, (II) setting of the second correspondence relationship is not permitted and setting of the first correspondence relationship is maintained.

14. The management server according to claim 11, wherein: The first object is a user, The second object is an object used by the user. The first and second objects are of a leased property. The control unit is composed of: When the type of the second second object is not the rental property, (I) canceling the first correspondence relationship and establishing the second correspondence relationship, When the type of the second second object is the rental property, (II) the setting of the second correspondence relationship is not permitted and the setting of the first correspondence relationship is maintained.

15. The management server according to claim 11, wherein: The control unit is configured to further execute the following processing when receiving the setting of the second correspondence relationship: acquiring, from a first first terminal corresponding to the first first object, a current position of the first first terminal measured by a positioning module of the first first terminal; and acquiring, from a second second terminal corresponding to the second second object, a current position of the second second terminal measured by a positioning module of the second second terminal, The control unit is composed of: When the relationship of the current positions obtained between the first first terminal and the second second terminal satisfies the condition of the utilization relationship, (I) canceling the first correspondence relationship and establishing the second correspondence relationship, When the acquired relationship of the current positions between the first first terminal and the second second terminal does not satisfy the condition of the utilization relationship, (II) setting of the second correspondence relationship is not permitted and setting of the first correspondence relationship is maintained.

16. The management server according to claim 11, wherein: The control unit is further configured to prohibit the cancellation of the correspondence relationship by locking the setting of the correspondence relationship until a predetermined condition is satisfied when the correspondence relationship is set with the second object of the predetermined type. The control unit is configured to, when the first and second objects are of the predetermined type: When the setting of the second correspondence is accepted while the first correspondence is locked, (II) the setting of the second correspondence is not permitted and the setting of the first correspondence is maintained, After the lock of the first correspondence relationship is released, when the setting of the second correspondence relationship is accepted, (I) the first correspondence relationship is released and the setting of the second correspondence relationship is established.

17. A management method, wherein: The management server performs the following processing: receiving an association establishment request from at least one of a first terminal of the first object and a second terminal of the second object in response to generation of a utilization relationship between the first object and the second object; accepting setting of a correspondence relationship between the first object and the second object by receiving the association establishment request; as well as During the period in which the setting of the first correspondence between the first first object and the first second object is established, when the setting of the second correspondence between the first first object and the second second object different from the first second object is accepted, according to the prescribed rules, (I) the first correspondence is released and the setting of the second correspondence is established, or (II) the setting of the second correspondence is not allowed and the setting of the first correspondence is maintained.

18. The management method according to claim 17, wherein: The first object is a user, The second object is an object used by the user. The first and second objects are of a leased property. The management server is composed of: When the type of the second second object is not the rental property, (I) canceling the first correspondence relationship and establishing the second correspondence relationship, When the type of the second second object is the rental property, (II) the setting of the second correspondence relationship is not permitted and the setting of the first correspondence relationship is maintained.

19. The management method according to claim 17, wherein: When receiving the setting of the second correspondence relationship, the management server further performs the following processing: acquiring, from a first first terminal corresponding to the first first object, a current position of the first first terminal measured by a positioning module of the first first terminal; and acquiring, from a second second terminal corresponding to the second second object, a current position of the second second terminal measured by a positioning module of the second second terminal, The management server is composed of: When the relationship of the current positions obtained between the first first terminal and the second second terminal satisfies the condition of the utilization relationship, (I) canceling the first correspondence relationship and establishing the second correspondence relationship, When the acquired relationship of the current positions between the first first terminal and the second second terminal does not satisfy the condition of the utilization relationship, (II) setting of the second correspondence relationship is not permitted and setting of the first correspondence relationship is maintained.

20. The management method according to claim 17, wherein: When a correspondence relationship is set with a second object of a predetermined type, the management server further performs the following processing: locking the setting of the correspondence relationship until a predetermined condition is satisfied, thereby prohibiting the cancellation of the correspondence relationship; The management server is configured, when the first and second objects are of the predetermined type, to: When the setting of the second correspondence is accepted while the first correspondence is locked, (II) the setting of the second correspondence is not permitted and the setting of the first correspondence is maintained, After the lock of the first correspondence relationship is released, when the setting of the second correspondence relationship is accepted, (I) the first correspondence relationship is released and the setting of the second correspondence relationship is established.

Images