System and program

Abstract

The present invention provides a system and a program for securing security, tracking the use relationship between a first object and a second object, and imparting proxy authority to a proxy individual during a period in which the use relationship is established. In a system according to one aspect of the present disclosure, a first terminal of a proxy individual of a first subject receives permission assignment information from a terminal of a proxy request individual of the first subject. The second terminal of the subject individual of the second subject delegates verification of the proxy right in accordance with the delegation from the first terminal. On the basis of the establishment of the verification, at least one of the first terminal and the second terminal transmits an association request to the management server. The management server sets a correspondence relationship between the proxy-requested individual and the subject individual in response to the authentication of the proxy-requested individual being established, thereby enabling the proxy of the proxy-requested individual via the authority of the proxy-requested individual of the subject individual.

Description

Technical Field

[0001] The present disclosure relates to systems and programs. Background Art

[0002] Patent Document 1 proposes a fee collection system for collecting service fees from vehicle users using a medium such as a card. Specifically, the fee collection system proposed in Patent Document 1 is configured to allocate a request for the highway usage fee of the target rental car to the target user based on the corresponding relationship (charging information, registration information, settlement information, and usage information) of the ETC (Electronic Toll Collection System) card ID, the rental car company, the rental car usage time, and the rental car user.

[0003] Patent Document 1: Japanese Patent Application Publication No. 2022-140747 Summary of the invention

[0004] One of the purposes of the present disclosure is to provide a technology for ensuring security, tracking the utilization relationship between a first object and a second object, and granting agency authority to an agency individual during the period of the utilization relationship.

[0005] The system according to the first aspect of the present disclosure includes a management server, a first terminal of a proxy individual of a first object, and a second terminal of a target individual of a second object. The first terminal is configured to receive authority granting information notifying the granting of proxy authority from a terminal of a proxy entrusting individual of the first object, and when a utilization relationship is established between the proxy individual and the target individual, perform data exchange with the second terminal, and in the data exchange, entrust the verification of the proxy authority by sending authority verification information to the second terminal. The second terminal is configured to verify the proxy authority using the authority verification information in accordance with the entrustment from the first terminal. At least one of the first terminal and the second terminal is configured to send an association request including the authentication entrustment of the proxy entrusting individual to the management server in accordance with the establishment of the authentication performed by the second terminal. The management server is configured to set a correspondence relationship between the proxy entrusting individual and the target individual in accordance with the establishment of the authentication of the proxy entrusting individual corresponding to the authentication entrustment, thereby validating the proxy individual's proxy exercise of the authority of the proxy entrusting individual via the target individual.

[0006] The program involved in the second mode of the present disclosure is a program for causing the first terminal of the proxy individual of the first object to perform the following processing, namely: receiving authority granting information notifying the granting of proxy rights from the terminal of the proxy entrusting individual of the above-mentioned first object; when a utilization relationship is generated between the above-mentioned proxy individual and the object individual of the second object, exchanging data with the second terminal of the above-mentioned object individual; in the above-mentioned data exchange, entrusting the verification of the above-mentioned proxy rights by sending authority verification information to the above-mentioned second terminal; and based on the establishment of the above-mentioned verification performed by the above-mentioned second terminal, sending an association request including the authentication entrustment of the above-mentioned proxy entrusting individual to the management server, sending the above-mentioned association request together with the above-mentioned second terminal, or causing the above-mentioned second terminal to send the above-mentioned association request, thereby enabling the above-mentioned management server to set the corresponding relationship between the above-mentioned proxy entrusting individual and the above-mentioned object individual based on the fact that the authentication of the above-mentioned proxy entrusting individual corresponding to the above-mentioned authentication entrustment is established, thereby enabling the above-mentioned proxy individual to validate the proxy exercise of the authority of the above-mentioned object individual via the above-mentioned proxy entrusting individual.

[0007] The program involved in the third mode of the present disclosure is a program for causing the second terminal of the object individual of the second object to execute the following processing, namely: when a utilization relationship is generated between the proxy individual of the first object and the above-mentioned object individual, data is exchanged between the first terminal and the above-mentioned proxy individual; in the above-mentioned data exchange, a commission for verification of the proxy right accompanied by authority verification information is accepted from the above-mentioned first terminal; based on the above-mentioned commission from the above-mentioned first terminal, the above-mentioned proxy right is verified using the above-mentioned authority verification information; and based on the establishment of the above-mentioned verification, an association request including the authentication delegation of the above-mentioned proxy entrusting individual is sent to the management server, the above-mentioned association request is sent together with the above-mentioned first terminal, or the above-mentioned first terminal is caused to send the above-mentioned association request, thereby, based on the fact that the authentication of the above-mentioned proxy entrusting individual corresponding to the above-mentioned authentication delegation is established, the above-mentioned management server sets the corresponding relationship between the above-mentioned proxy entrusting individual and the above-mentioned object individual, thereby validating the proxy exercise of the authority of the above-mentioned proxy entrusting individual via the above-mentioned object individual by the above-mentioned proxy individual.

[0008] According to the present disclosure, it is possible to provide a technology for ensuring security, tracking the utilization relationship between the first object and the second object, and granting agency authority to an agency individual during the period in which the utilization relationship is established. BRIEF DESCRIPTION OF THE DRAWINGS

[0009] Figure 1 An example of a scenario to which the present disclosure is applied is schematically shown.

[0010] Figure 2 The embodiments of the scenarios in which the present disclosure is applied are schematically shown.

[0011] Figure 3A An example of related information according to the present embodiment is schematically shown.

[0012] Figure 3B An example of user information according to this embodiment is schematically shown.

[0013] Figure 3C An example of moving object information according to this embodiment is schematically shown.

[0014] Figure 4 An example of data exchange according to the present embodiment is schematically shown.

[0015] Figure 5A An example of a verification process of the proxy according to the present embodiment is schematically shown.

[0016] Figure 5B An example of a verification process of the proxy according to the present embodiment is schematically shown.

[0017] Figure 6 An example of the de-linking process according to the present embodiment is schematically shown.

[0018] Fig. 7A An example of a process of disassociation performed by a proxy entrusting individual according to the present embodiment is schematically shown.

[0019] Figure 7B An example of a process of disassociation performed by a proxy entrusting individual according to the present embodiment is schematically shown.

[0020] Figure 8 An example of the use continuation confirmation process according to the present embodiment is schematically shown.

[0021] Fig. 9 An example of a usage scenario of the related information according to the present embodiment is schematically shown.

[0022] Fig. 10A An example of the hardware configuration of the management server according to the present embodiment is schematically shown.

[0023] Fig. 10B An example of the hardware configuration of the first server according to the present embodiment is schematically shown.

[0024] Fig. 10C An example of the hardware configuration of the second server according to the present embodiment is schematically shown.

[0025] Fig. 10D An example of the hardware configuration of the first terminal according to the present embodiment is schematically shown.

[0026] Fig. 10E An example of the hardware configuration of the second terminal according to the present embodiment is schematically shown.

[0027] Fig.10F An example of the hardware configuration of the terminal according to the present embodiment is schematically shown.

[0028] Fig.11 An example of the software configuration of each device according to the present embodiment is schematically shown.

[0029] Fig. 12A An example of the processing procedure of the association setting according to the present embodiment is shown.

[0030] Fig. 12B An example of the processing procedure of releasing the association according to the present embodiment is shown.

[0031] Fig.13A An example of the authentication processing procedure when the first authentication method is adopted is schematically shown.

[0032] Fig. 13B An example of the authentication processing procedure when the first authentication method is adopted is schematically shown.

[0033] Fig.14A An example of the authentication processing procedure when the second authentication method is adopted is schematically shown.

[0034] Fig. 14B An example of the authentication processing procedure when the second authentication method is adopted is schematically shown.

[0035] Fig.15A An example of the authentication processing procedure when the authentication method 3-1 is adopted is schematically shown.

[0036] Fig. 15B An example of the authentication processing procedure when the authentication method 3-1 is adopted is schematically shown.

[0037] Fig.16A An example of the authentication processing procedure when the authentication method 3-2 is adopted is schematically shown.

[0038] Fig. 16B An example of the authentication processing procedure when the authentication method 3-2 is adopted is schematically shown.

[0039] Description of Reference Numerals

[0040] 1… management server; 11… control unit; 2… first server; 21… control unit; 3… second server; 31… control unit; 4… first terminal; 41… control unit; 47… positioning module; 5… second terminal; 51… control unit; 57… positioning module; 6… terminal; 61… control unit; PI… proxy individual (of the first object); PR… proxy entrusting individual (of the first object); TA… object individual (of the second object); I10… first identifier; I20… second identifier; O10… first object information; O10A… user information; O20… second object information; O20A… mobile body information; D10… associated information; E10… various information. DETAILED DESCRIPTION

[0041] According to the system proposed in Patent Document 1, a user can pay highway tolls by ETC even if he or she does not have his or her own ETC card. However, the inventors of this case have found the following problems in the conventional system.

[0042] That is, it can be considered that with the diversification of MaaS (Mobility as a Service), from the perspective of efficiency of settlement, convenience of prescription use, etc., there is a demand for ensuring safety, tracking the use of a mobile body by others corresponding to the user's entrustment, and granting proxy authority to the other person during the use of the mobile body. For example, the following situation is assumed, that is, when a prescription is issued to a certain person (the entruster / agent entrusting individual), the authority to exercise the issued prescription in a proxy manner is granted to another person (the entrustee / agent individual) who uses the mobile body. In this case, it is assumed that during the use of the mobile body, the prescription is used by another person and the medicine is obtained in a proxy manner. In contrast, in the previous system, the correspondence between the use time and the user can be maintained as use information based on the contract or reservation of the rental car, but the use time depends on the contract or reservation, so the use information does not necessarily match the actual use of the rental car by the user. In addition, in a vehicle used without a contract or reservation (for example, a private car), the generation of use information is not originally assumed. Furthermore, since the utilization information is generated based on the user's entrustment, the utilization information only indicates the utilization by the user, and it is difficult to track the utilization by others. Therefore, in previous systems, it is difficult to track the utilization of the mobile body by others corresponding to the user's entrustment while ensuring safety, and it is difficult to grant agent authority to others during the period of the utilization relationship. In addition, the situation in which this problem occurs is not limited to the scenario of utilizing vehicles. The same problem may also occur in the scenario of utilizing mobile bodies other than vehicles (for example, aircraft, ships, etc.) and in the scenario of utilizing multiple types of mobile bodies. Moreover, the same problem may also occur in all utilization scenarios other than mobile bodies.

[0043] In contrast, the system according to the first aspect of the present disclosure includes a management server, a first terminal of a proxy individual of a first object, and a second terminal of a target individual of a second object. The first terminal is configured to receive authority granting information notifying the granting of proxy authority from a terminal of a proxy entrusting individual of the first object, and when a utilization relationship is established between the proxy individual and the target individual, the first terminal exchanges data with the second terminal, and during the data exchange, sends authority verification information to the second terminal, thereby entrusting the verification of the proxy authority. The second terminal is configured to verify the proxy authority using the authority verification information in accordance with the entrustment from the first terminal. At least one of the first terminal and the second terminal is configured to send an association request including an authentication entrustment of the proxy entrusting individual to the management server in accordance with the establishment of the authentication based on the second terminal. The management server is configured to set a corresponding relationship between the proxy entrusting individual and the target individual in accordance with the establishment of the authentication of the proxy entrusting individual corresponding to the authentication entrustment, thereby validating the proxy exercise of the authority of the proxy entrusting individual by the proxy individual via the target individual.

[0044] In the first mode of the present disclosure, by setting the correspondence (association) between the proxy entrusting individual of the first object and the object individual of the second object, the utilization relationship between the proxy individual and the object individual corresponding to the entrustment of the proxy entrusting individual can be tracked. In addition, security can be ensured by the verification process of the proxy right and the authentication process of the proxy entrusting individual of the first object. Moreover, according to the setting of the correspondence between the proxy entrusting individual and the object individual, the proxy individual's proxy exercise of the authority of the proxy entrusting individual via the object individual is validated. As a result, the proxy individual can exercise at least a part of the authority of the proxy entrusting individual in a proxy manner. Therefore, according to the first mode of the present disclosure, security can be ensured, and the utilization relationship between the first object and the second object can be tracked, and during the period when the utilization relationship is established, the proxy individual can be granted the proxy authority for exercising at least a part of the authority of the proxy entrusting individual on behalf of the proxy entrusting individual.

[0045] In addition, the form of the present disclosure may not be limited to the above-mentioned examples. As other forms of the system involved in the above-mentioned method, one aspect of the present disclosure may be an information processing device that implements all or part of the above-mentioned structural elements, an information processing method, a program, or a mechanically readable storage medium such as a computer storing such a program. Here, the mechanically readable storage medium is a medium that accumulates information such as programs through electrical, magnetic, optical, mechanical or chemical effects. The information processing device may be at least any one of the management server, the first terminal and the second terminal involved in the above-mentioned method. In addition, the system involved in the above-mentioned method may also include at least one of the first server participating in the authentication of the first object and the second server participating in the authentication of the second object.

[0046] For example, the program involved in the second mode of the present disclosure may be a program for causing the first terminal of the proxy individual of the first object to perform the following processing, namely: receiving authority granting information notifying the granting of proxy rights from the terminal of the proxy entrusting individual of the first object; when a utilization relationship is generated between the proxy individual and the object individual of the second object, exchanging data with the second terminal of the object individual; in the data exchange, sending authority verification information to the second terminal, thereby entrusting the verification of the proxy rights; and, corresponding to the establishment of the verification performed by the second terminal, sending an association request including the authentication entrustment of the proxy entrusting individual to the management server, sending the association request together with the second terminal, or causing the second terminal to send the association request, thereby, corresponding to the fact that the authentication of the proxy entrusting individual corresponding to the authentication entrustment is established, causing the management server to set the corresponding relationship between the proxy entrusting individual and the object individual, thereby validating the proxy individual's proxy exercise of the authority of the proxy entrusting individual via the object individual.

[0047] In addition, for example, the program involved in the third method of the present disclosure is a program for causing the second terminal of the object individual of the second object to perform the following actions: when a utilization relationship is generated between the proxy individual of the first object and the object individual, data is exchanged between the first terminal and the proxy individual; in the data exchange, a commission for verification of the proxy right accompanied by authority verification information is accepted from the first terminal; based on the commission from the first terminal, the authority verification information is used to verify the proxy right; and corresponding to the establishment of the verification, an association request including an authentication delegation of the proxy entrusting individual is sent toward the management server, the association request is sent jointly with the first terminal, or the first terminal is caused to send the association request, thereby corresponding to the fact that the authentication of the proxy entrusting individual corresponding to the authentication delegation is established, the management server sets the corresponding relationship between the proxy entrusting individual and the object individual, thereby validating the proxy individual's proxy exercise of the authority of the proxy entrusting individual via the object individual.

[0048] Hereinafter, an embodiment (hereinafter also referred to as "this embodiment") involved in one aspect of the present disclosure is described based on the accompanying drawings. However, the present embodiment described below is merely an illustration of the present disclosure in various aspects. Various improvements or modifications can be made without departing from the scope of the present disclosure. When implementing the present disclosure, a specific structure corresponding to the embodiment can also be appropriately adopted. In addition, the data appearing in this embodiment is described in natural language, and more specifically, it is specified using pseudo-language, instructions, parameters, device language, etc. that can be recognized by a computer.

[0049] [1 Application example]

[0050] Figure 1An example of a scenario in which the present disclosure is applied is schematically shown. The system 100 involved in this embodiment is composed of a management server 1, a first terminal 4, and a second terminal 5. The management server 1 is one or more computers configured to record the correspondence (association) between a first object and a second object. The first terminal 4 corresponds to the proxy individual PI of the first object, and the second terminal 5 corresponds to the object individual TA of the second object. The terminal can be given to each individual of the first object. The terminal can also be given to each individual of the second object. The first terminal 4 is an example of a terminal of the first object, and the second terminal 5 is an example of a terminal of the second object.

[0051] In the present embodiment, the terminal 6 of the proxy entrusting individual PR of the first object receives settings related to the granting of proxy rights including the designation of the proxy individual PI. The proxy individual PI can be appropriately designated from other individuals of the first object. If settings related to the granting of proxy rights are made, the terminal 6 directly or indirectly sends the authority granting information AG notifying the granting of proxy rights to the first terminal 4. Correspondingly, the first terminal 4 receives the authority granting information AG from the terminal 6 (step S10). In addition, indirect transmission may include transmission via an external computer. The terminal 6 is an example of a terminal of the first object. The system 100 may also include the terminal 6.

[0052] When a utilization relationship is generated between the proxy individual PI and the object individual TA, the first terminal 4 exchanges data with the second terminal 5 (step S20). In this data exchange, the first terminal 4 entrusts the verification of the proxy right by sending the authority verification information AU to the second terminal 5. The second terminal 5 verifies the proxy right using the authority verification information AU based on the entrustment from the first terminal 4 (step S30). Based on the establishment of the verification by the second terminal 5, at least one of the first terminal 4 and the second terminal 5 sends an association request including the authentication entrustment of the proxy entrusting individual PR to the management server 1 (step S40). The authentication of the proxy entrusting individual PR can be appropriately performed at the time of the association request.

[0053] In response to the receipt of the association request and the establishment of the authentication of the proxy entrusting individual PR in the authentication process corresponding to the authentication delegation, the management server 1 sets the corresponding relationship (association) between the proxy entrusting individual PR and the object individual TA (step S50, step S60). In one example, the management server 1 can generate association information D10 indicating the setting of the corresponding relationship between the first object (proxy entrusting individual PR) and the second object (object individual TA), and can also save the generated association information D10. Thus, the management server 1 enables the proxy individual PI to exercise the authority of the proxy entrusting individual PR via the object individual TA.

[0054] In addition, when the above-mentioned corresponding relationship is set, the authentication process of at least one of the proxy individual PI of the first object and the object individual TA of the second object can also be performed together with the authentication process of the proxy entrusting individual PR. A series of processes from data exchange to association setting can be performed in real time corresponding to the generation of the utilization relationship. The set corresponding relationship (association) can be cancelled at any time. In one example, the corresponding relationship can be cancelled according to the elimination of the utilization relationship.

[0055] In addition, if each individual with a corresponding relationship set can be determined, the expression form of the information (related information D10) indicating the setting of the corresponding relationship may not be particularly limited, and may be appropriately determined corresponding to the implementation method. In one example, a first identifier I10 may be given to each individual of the first object, and each individual of the first object may be identified by the first identifier I10. Similarly, a second identifier I20 may be given to each individual of the second object, and each individual of the second object may be identified by the second identifier I20. Setting the corresponding relationship between the proxy entrusting individual PR and the object individual TA may be constituted by setting the corresponding relationship between the first identifier I10 sent to the proxy entrusting individual PR and the second identifier I20 sent to the object individual TA. That is, the setting of the corresponding relationship may be expressed using the first identifier I10 and the second identifier I20.

[0056] As described above, in the present embodiment, by setting the correspondence (association) between the proxy entrusting individual PR of the first object and the object individual TA of the second object, it is possible to track the utilization relationship between the proxy individual PI corresponding to the entrustment of the proxy entrusting individual PR and the object individual TA. In addition, security can be ensured by the verification process of the proxy right based on the authority verification information AU and the authentication process of the proxy entrusting individual PR. And, corresponding to the setting of the correspondence between the proxy entrusting individual PR and the object individual TA, the proxy exercise of the authority of the proxy entrusting individual PR via the object individual TA by the proxy individual PI is validated. Thus, the proxy individual PI can exercise at least a part of the authority of the proxy entrusting individual PR in a proxy manner. Therefore, according to the present embodiment, security can be ensured, and the utilization relationship between the first object and the second object can be tracked, and during the period when the utilization relationship is established, the proxy individual PI can be granted the proxy authority for exercising at least a part of the authority of the proxy entrusting individual PR on behalf of the proxy.

[0057] (Target)

[0058] If the utilization relationship can be established, the first object and the second object may not be particularly limited, and may be appropriately selected according to the implementation method. The first object and the second object may be any object such as an object, a person, or other organisms. Any object may include an imaginary object. The utilization relationship may be established, for example, by one party using the other party, one party holding the other party, one party combining with the other party, one party connecting with the other party, etc., to generate a real or imaginary relationship between at least two objects. The system 100 of the present disclosure can be used in any scenario for tracking the correspondence between two or more objects.

[0059] In addition, in this embodiment, the setting of the corresponding relationship of the proxy based on the proxy individual PI corresponding to the entrustment from the proxy entrusting individual PR is allowed for the first object. In contrast, the setting of the corresponding relationship based on such a proxy may be allowed or not allowed for the second object. In the case where the second object is not allowed to be proxied, the object of the first object and the second object that allows the setting of the association based on the proxy can be selected as the first object, and the object of the other object that does not allow the setting of the association based on the proxy can be selected as the second object.

[0060] (1st server / 2nd server)

[0061] In one example, in order to show the details of each individual of the first object (including the proxy entrusting individual PR and the proxy individual PI), the first object information O10 related to the first object can be used. The first object information O10 can include a first identifier I10. The first object information O10 can also include information used for authentication of the first object (registered inherent information, etc.). Similarly, in order to show the details of each individual of the second object (including the object individual TA), the second object information O20 related to the second object can be used. The second object information O20 can include a second identifier I20. The second object information O20 can also include information used for authentication of the second object. The first object information O10 and the second object information O20 can be stored in any storage area. At least a part of the first object information O10 and the second object information O20 can be stored so as to be accessible from at least any one of the management server 1, the external server, and each terminal (4, 5).

[0062] The first object information O10 and the second object information O20 can be appropriately managed. Figure 1In the example, the first server 2 may be configured to manage the first object information O10, and the second server 3 may be configured to manage the second object information O20. The first server 2 and the second server 3 may each be configured by one or more server devices. The first object information O10 may be stored in a memory resource provided at least one of the inside and the outside of the first server 2 in a manner accessible from the first server 2. The second object information O20 may be stored in a memory resource provided at least one of the inside and the outside of the second server 3 in a manner accessible from the second server 3. The internal memory resource may include, for example, a RAM (Random Access Memory), an auxiliary storage device, a storage medium, etc. The external memory resource may include, for example, an external storage device, an external computer (NAS: Network Attached Storage, etc.). In another example, each object information (O10, O20) may also be stored in the memory resource of the management server 1.

[0063] The unit for managing each object information (O10, O20) may not be particularly limited and may be appropriately determined according to the implementation method. At least one of the first object information O10 and the second object information O20 may be centrally (together) managed, or decentralized (separately) managed according to any group. The server devices constituting each server (2, 3) may be equipped by more than one operating organization (main body). At least one of the first server 2 and the second server 3 may also be equipped by multiple operating organizations. In the case of being equipped by multiple operating organizations, the object information may be shared (i.e., centrally managed) or decentralized managed according to each operating organization.

[0064] In addition, the first server 2 can participate in the authentication of the first object (proxy entrusting individual PR and proxy individual PI). Participation in authentication can include determining the success or failure of authentication (direct participation) and indirect participation (for example, providing information for determining the success or failure of authentication). In the case of determining the success or failure of authentication of the first object, the first server 2 is an example of an external server (external authentication server) that determines the success or failure of authentication of the first object. Similarly, the second server 3 can participate in the authentication of the second object (object individual TA). In the case of determining the success or failure of authentication of the second object, the second server 3 is an example of an external server (external authentication server) that determines the success or failure of authentication of the second object.

[0065] (Identifier)

[0066] In one example, in order to identify each individual of each object (including the proxy entrusting individual PR of the first object, the proxy individual PI of the first object, and the object individual TA of the second object), each identifier (I10, I20) can be used. For each identifier (I10, I20), as long as it can identify each individual of each object, its data form and structure can be not particularly limited, and can be appropriately selected according to the implementation method. In one example, each identifier (I10, I20) can be composed of a symbol column containing numbers, characters, etc. In another example, each identifier (I10, I20) can use inherent information such as identification information inherently assigned to each individual, information based on each terminal (4, 5, 6), etc. The inherently assigned identification information can be, for example, a car registration number, a vehicle identification number (VIN: Vehicle Identification Number (Vehicle Identification Code)), a personal number, etc. In the case of assigning an IC tag to each individual, the inherently assigned identification information can include information retained by the IC tag. The information based on each terminal (4, 5, 6) may be, for example, a MAC address (Media Access Control address), terminal identification information (IMEI: International Mobile Equipment Identifier, IMSI: International Mobile Subscriber Identity, MEID: Mobile Equipment Identifier, ICCID: Integrated Circuit Card ID, other serial numbers, etc.), etc.

[0067] (Management Server)

[0068] The management server 1 may be configured to set a correspondence between the first object and the second object's corresponding individuals according to an association request from at least one of the terminals of the first object and the second object. In this embodiment, the terminals of the first object may include the first terminal 4 of the proxy individual PI, and the terminals of the second object may include the second terminal 5 of the object individual TA. Setting the correspondence between the first object and the second object may include setting the correspondence between the proxy entrusting individual PR and the object individual TA according to an association request from at least one of the first terminal 4 of the proxy individual PI of the first object and the second terminal 5 of the object individual TA of the second object. In addition, except for the case of the proxy based on the proxy individual PI, setting the correspondence between the first object and the second object may include setting the correspondence between the first object and the second object's corresponding individuals according to an association request from at least one of the terminals of the corresponding individuals of the first object and the second object. The processing of the association setting of the usual route not based on the proxy may be the same as the association setting of the proxy route, except for the processing related to the proxy such as the setting and verification of the proxy right. In the following description regarding the proxy route, the first terminal 4 and the second terminal 5 can be replaced with the terminals of the corresponding individuals of the first object and the second object, respectively, thereby configuring the processing of the normal route.

[0069] The association request can be transmitted along any path. In one example, the management server 1 can directly receive the association request from at least one of the first terminal 4 and the second terminal 5, or can receive it indirectly via an external server. That is, sending the association request to the management server 1 can be composed of directly sending the association request to the management server 1, or indirectly sending the association request to the management server 1 via an external server. The external server includes, for example, the first server 2, the second server 3, etc. In addition, in one example, the indirect sending can be composed of only forwarding the association request through an external computer. In another example, the indirect sending can also be composed of, for example, sending a commission to participate in the association process to an external computer, such as entrusting the authentication of each object to each server (2, 3) and sending the authentication result to the management server 1, and causing the management server 1 to send some information to the external computer based on the result of its execution. That is, the association request can also be sent from the external computer to the management server 1 as a result of data communication for other purposes relative to the external computer. At least one of the first terminal 4 and the second terminal 5 sending the association request may include the first terminal 4 sending the association request, the first terminal 4 and the second terminal 5 sending the association request together, and the second terminal 5 sending the association request.

[0070] The management server 1 may receive an association request (a delegation for association setting) based on the generation of a utilization relationship, and may set a corresponding relationship between the corresponding individuals of the first object and the second object based on the received association request. The management server 1 may receive a release request (a delegation for association release) based on the elimination of the utilization relationship, and may appropriately release the corresponding relationship based on the received release request. The association request and the release request may be configured to specify the corresponding individual of the processing object in any manner. In a typical example, the association request and the release request may be configured to specify the corresponding individual of the processing object by including a first identifier I10 and a second identifier I20, respectively. In the above-mentioned embodiment, the association request sent from at least one of the first terminal 4 of the proxy individual PI and the second terminal 5 of the object individual TA may be configured to specify the individuals of the association object (the proxy entrusting individual PR and the object individual TA) by including a first identifier I10 of the proxy entrusting individual PR and a second identifier I20 of the object individual TA. However, the method of specifying the corresponding individual of the processing object may not be limited to such an example, and may be appropriately changed according to the embodiment. In another example, in at least one of the association request and the release request, at least one of the first identifier I10 and the second identifier I20 can be omitted by using alternative information. For example, an identifier can be assigned to a combination of corresponding individuals of the first object and the second object (association setting) as alternative information. The assignment of the identifier can be performed at any time, such as when the association is set for the first time. At least one of the association request and the release request can be configured to specify the corresponding individuals of each object to be processed without including at least one of the first identifier I10 and the second identifier I20 by including the identifier.

[0071] The management server 1 may be composed of one or more server devices. In the present embodiment, the management server 1 may be configured to record information related to the generation and elimination of the correspondence between the first object and the second object as the associated information D10. The associated information D10 may be stored in a memory resource provided at least one of the inside and the outside of the management server 1. The internal memory resource may include, for example, a RAM, an auxiliary storage device, a storage medium, etc. The external memory resource may include, for example, an external storage device, an external computer (NAS, etc.), etc.

[0072] The obtained association information D10 can be used in various scenarios. In one example, the association information D10 can be used to track the relationship between the first object and the second object. As a specific example, during the period of setting the corresponding relationship between the first object and the second object, for the authority associated with either the first object or the second object (the first object information O10 and the second object information O20), in order to be able to exercise the authority from the other party, the association information D10 can be used. That is, the association information D10 can be used to validate the authority of either the first object or the second object exercised by the other party of the first object and the second object based on the association between the first object and the second object (described later). Figure 2 In this embodiment, the association information D10 can be used to enable the proxy individual PI to exercise at least part of the authority of the proxy entrusting individual PR in a proxy manner through the object individual TA based on the association between the proxy entrusting individual PR of the first object and the object individual TA of the second object.

[0073] In one example of the present embodiment, the association information D10 indicates a combination of a first object and a second object with a corresponding relationship set, and thus may include information of a first identifier I10 and a second identifier I20 of a corresponding individual. The management server 1 may appropriately obtain each identifier (I10, I20) of each object. In one example, the management server 1 may not store information of the first identifier I10 and the second identifier I20 with a corresponding relationship set in advance, but may obtain information from at least one of each server (2, 3) and each terminal (4, 5) each time. In another example, the management server 1 may also store information of at least one of the first identifier I10 and the second identifier I20 with a corresponding relationship set in advance.

[0074] In addition, in one example of the present embodiment, when a correspondence relationship is set by an agent of the agent individual PI, the associated information D10 may also include information related to the agent. The information related to the agent may include, for example, identification information of the agent individual PI, information related to the agent right (validity period, valid authority, etc.), etc. In one example, in order to identify the designated agent individual PI, the information related to the agent may also include the first identifier I10 of the agent individual PI. The information related to the agent may be appropriately transmitted to the management server 1. The information related to the agent may be sent directly or indirectly to the management server 1 from at least one of the first terminal 4 and the terminal 6. The information related to the agent may also be sent from the terminal 6 to the management server 1 via at least one of the first terminal 4 and the second terminal 5. When the terminal 6 specifies the agent individual PI in an external server such as the first server 2, the information related to the agent may also be sent directly or indirectly from the external server to the management server 1. In another example, the associated information D10 may not include the information related to the agent. The information related to the agent may also be retained outside the associated information D10 such as the first object information O10. The information related to the agent may be managed by an external server such as the first server 2 .

[0075] In addition, the relationship between the management server 1 and the operating organizations of each server (2, 3) may be arbitrary. In one example, the operating organization of the management server 1 may overlap with the operating organization of at least one of the first server 2 and the second server 3. In another example, the operating organization of the management server 1 may be different from the operating organizations of the first server 2 and the second server 3. The system 100 of the present disclosure can be produced by connecting the management server 1 to each terminal (4, 5) via a network and arranging them in a state capable of executing the above-mentioned information processing according to the intention of the operating organization of the management server 1. In the case where each server (2, 3) participates in information processing related to association (for example, authentication processing), it can be interpreted that each server (2, 3) is included in the system 100. In this case, the system 100 of the present disclosure can be produced by connecting the management server 1 to each server (2, 3) via a network and arranging each server (2, 3) in a state capable of executing information processing related to association. In addition, it can also be interpreted that the terminal 6 of the proxy entrusting individual PR of the first object is also included in the system 100.

[0076] (terminal)

[0077] The first terminal 4 is related to the proxy individual PI of the first object. The second terminal 5 is related to the object individual TA of the second object. The terminal 6 is related to the proxy entrusting individual PR of the first object. In one example, each terminal (4, 5, 6) can be accompanied by the corresponding individual (PI, TA, PR). Accompanying can include temporarily or frequently being equipped inside or outside the object, being held by the object (person), and being held by a person related to the object (object). Equipping can include carrying. In addition to being permanently placed on the object, carrying can also include at least temporarily placing the object when the object is used. Carrying can include being held by the user of the object. At least any one of the first terminal 4, the second terminal 5 and the terminal 6 can also be the corresponding individual (PI, TA, PR) itself. Each terminal (4, 5, 6) can be composed of more than one computer. In addition, with respect to each terminal (4, 5, 6), for example, multiple terminals can be used as terminals of the same individual, such as a user sharing an account among multiple terminals. In this case, multiple terminals used for the same individual can be interpreted as a single terminal.

[0078] In the above-mentioned embodiment, the first terminal 4 of the proxy individual PI of the first object receives the authority granting information AG notifying the granting of the proxy right from the terminal 6 of the proxy entrusting individual PR of the first object. When the utilization relationship is established between the proxy individual PI and the object individual TA of the second object, the first terminal 4 exchanges data with the second terminal 5 of the object individual TA. The first terminal 4 sends the authority verification information AU to the second terminal 5 during the data exchange, thereby entrusting the verification of the proxy right. Moreover, the first terminal 4 sends an association request including the authentication entrustment of the proxy entrusting individual PR to the management server 1, sends the association request together with the second terminal 5, or causes the second terminal 5 to send the association request, based on the establishment of the authentication performed by the second terminal 5. As a result, the first terminal 4 causes the management server 1 to set the corresponding relationship between the proxy entrusting individual PR and the object individual TA based on the establishment of the authentication of the proxy entrusting individual PR corresponding to the authentication entrustment, thereby validating the proxy exercise of the authority of the proxy entrusting individual PR via the object individual TA by the proxy individual PI.

[0079] In the above-mentioned embodiment, when a utilization relationship is generated between the proxy individual PI of the first object and the object individual TA, the second terminal 5 of the object individual TA of the second object exchanges data with the first terminal 4 of the proxy individual PI. The second terminal 5 receives a commission for verification of the proxy right accompanied by the authority verification information AU from the first terminal 4 during the data exchange. The second terminal 5 verifies the proxy right using the authority verification information AU in accordance with the commission from the first terminal 4. Moreover, in accordance with the establishment of the verification, the second terminal 5 sends an association request including the authentication delegation of the proxy entrusting individual PR to the management server 1, sends the association request together with the first terminal 4, or causes the first terminal 4 to send the association request. Thus, the second terminal 5 causes the management server 1 to set the corresponding relationship between the proxy entrusting individual PR and the object individual TA in accordance with the establishment of the authentication of the proxy entrusting individual PR corresponding to the authentication delegation, thereby validating the proxy exercise of the authority of the proxy entrusting individual PR via the object individual TA by the proxy individual PI.

[0080] In the above-mentioned embodiment, the terminal 6 of the proxy entrusting individual PR of the first object accepts settings related to the granting of proxy rights including the designation of the proxy individual PI. Information processing related to the settings of the agency can be performed on the terminal 6, or it can be performed on an external computer such as the first server 2 via the terminal 6. In addition, the proxy individual PI can be appropriately designated. In a typical example, the terminal 6 can store an address book, and can also accept the selection of the proxy individual PI from an individual (for example, a user) registered in the address book. In another example, the terminal 6 can also access the list of the first object via an external computer such as the first server 2, and accept the selection of the proxy individual PI from an individual registered in the list. The designation of the proxy individual PI can be performed automatically by computer processing, or it can be performed manually by at least partially including user operations.

[0081] If the proxy individual PI is designated, the terminal 6 exchanges data with the terminal (first terminal 4) of the designated proxy individual PI, and sends the authority granting information AG for notifying the granting of the proxy right to the first terminal 4. Thus, the first terminal 4 receives the authority granting information AG from the terminal 6. As long as the authority granting information AG can notify the granting of the proxy right, its structure is not particularly limited and can be appropriately selected according to the implementation method. In one example, the authority granting information AG can include the authority verification information AU. In another example, the authority granting information AG can also be composed of information that only notifies the granting of the proxy right. In addition, the data exchange between the terminal 6 and the first terminal 4 can be carried out through wireless or wired data communication, or through methods other than data communication such as reading a two-dimensional code. In one example, when data communication is adopted, the data exchange between the terminal 6 and the first terminal 4 can also be carried out through mobile phone text messages, e-mails, notifications in the application of the contact system (for example, the application of the Social Networking Service, etc.). In addition, the terminal 6 can send the authority granting information AG directly to the first terminal 4, or it can be sent indirectly via an external computer such as the first server 2. Thus, the terminal 6 of the proxy client PR can grant the authentication authority to the first terminal 4 of the proxy individual PI in a proxy manner and execute the process of setting the correspondence relationship with the second object.

[0082] In addition, the settings related to the granting of proxy rights may include various settings related to the proxy rights other than the designation of the above-mentioned proxy individual PI. In one example, the settings related to the granting of proxy rights may include the setting of at least one of the validity period and the effective authority. Thus, at least one of the validity period and the effective authority can be set in the proxy rights. In the case where the validity period is set in the proxy rights, the management server 1 can be configured to release the correspondence between the proxy entrusting individual PR and the object individual TA according to the arrival of the validity period. In the case where the effective authority is set in the proxy rights, the management server 1 can be configured to release the correspondence between the proxy entrusting individual PR and the object individual TA according to the exercise or elimination of the effective authority of the proxy individual PI. By setting at least one of the validity period and the effective authority, it is possible to set restrictions on the proxy rights granted to the proxy individual PI. In addition, the setting of at least one of the validity period and the effective authority can be performed automatically by computer processing, or it can be performed manually by at least partially including user operations.

[0083] The information (proxy information) related to the proxy, such as the information of the proxy individual PI, the validity period, the effective authority, etc., can be appropriately managed. The proxy information can be managed by at least any one of the management server 1, the external computer (for example, the first server 2), the first terminal 4, the second terminal 5, and the terminal 6. In one example, the setting process related to the proxy can be executed on the first server 2, and the proxy information can be generated by the first server 2 according to the execution of the setting process. The first server 2 can also manage the proxy information in association with the first object information O10. The first server 2 can appropriately notify the management server 1 of the proxy information. In another example, the information of the proxy individual PI (for example, the first identifier I10) can also be sent from the first terminal 4. In addition, in another example, the proxy information can be generated according to the setting process on the terminal 6. The proxy information can be sent from the terminal 6 to the first server 2, and the proxy information can be managed in association with the first object information O10 on the first server 2. In another example, the proxy information may be notified from the first server 2 or the terminal 6 to the management server 1 via at least one of the first terminal 4 and the second terminal 5, and the proxy information may be managed in association with the association information D10 at the management server 1. For example, the proxy information may be sent together with the association request. In another example, the proxy information may be sent directly or indirectly from the terminal 6 to the management server 1 without passing through at least one of the first terminal 4 and the second terminal 5. In this case, the management server 1 may appropriately establish a correspondence between the association request received from at least one of the first terminal 4 and the second terminal 5 and the proxy information. The establishment of the correspondence of data may be determined by any method. In one example, the data of the association request and the data of the proxy information may both include shared information for determining the establishment of the correspondence. The shared information may be composed of information having a relationship such as consistency and establishment of a correspondence. In one example, the shared information may be composed of the first identifier I10 of at least one of the proxy entrusting individual PR and the proxy individual PI. In another example, the shared information may also be composed of temporary information such as a random number, a time stamp, and a hash value. Furthermore, the timing of setting the effective authority and the effective period is not limited to the timing of designating the proxy individual PI. At least one of the effective authority and the effective period may be set at any timing until the correspondence relationship is terminated.

[0084] (Application example)

[0085] The first object and the second object may be appropriately selected. In one example, one of the first object and the second object may be a user. One of the first terminal 4 and the second terminal 5 that corresponds to the user may be a user terminal associated with the user. The other of the first object and the second object may also be an object used by the user. One of the first terminal 4 and the second terminal 5 that corresponds to the object may be a terminal mounted on the object. According to one example of the present embodiment, the utilization relationship between the user and the object can be tracked. In one example, the first object may be a user, and the second object may be an object. The proxy individual PI of the first object may be a proxy user, and the proxy entrusting individual PR of the first object may be a proxy entrusting user.

[0086] As long as the object can be used by the user, its type is not particularly limited and can be appropriately selected according to the implementation method. In one example, the object can be a mobile body (mobility). According to an example of this embodiment, the utilization relationship between the user and the mobile body can be tracked. In addition, the type of the mobile body can be appropriately selected. The mobile body can be, for example, a vehicle, a railway vehicle, an aircraft (aircraft, drone, etc.), a ship, etc. The mobile body can be at least any one of a manually controlled manned aircraft and an automatically controlled drone. In the case where the mobile body is a vehicle, the type of vehicle can be arbitrarily selected. The type of vehicle can be selected, for example, from a two-wheeled vehicle, a three-wheeled vehicle, a four-wheeled vehicle, etc. The vehicle can include a private car, a rental car, a shared car, a taxi, a bus, etc. The vehicle can be at least any one of an autonomous driving vehicle and a manually driven vehicle. The onboard terminal can be called a mobile terminal.

[0087] Figure 2 An embodiment of a scenario in which the system 100 of the present disclosure is applied is schematically shown. Figure 2 In the example of , the first object is a user and the second object is a mobile object. Figure 2 In the description of the example related to the example, for the sake of convenience, the method of "1" involving the user and "2" involving the mobile body is adopted. However, the correspondence between "1" and "2" may not be limited to Figure 2 "1st" and "2nd" can be interchangeable. That is, the second object can be a user and the first object can be a mobile object.

[0088] When the first object is a user, an example of the first terminal 4 is a user terminal held by the proxy user, and an example of the terminal 6 is a user terminal held by the proxy-entrusted user. Each user terminal can be, for example, any computer such as a mobile terminal (smartphone, etc.), a dedicated device (electronic key device, etc.), or other computer devices. The user's account can be shared among multiple computers, so that each computer sharing the account can be used as the user terminal (first terminal 4, terminal 6) of the same user.

[0089] An example of the first identifier I10 is a user identifier (user ID, self-ID). The user identifier may be, for example, an ID of a user account, a personal number, identification information of a user terminal (for example, a MAC address, terminal identification information), etc. An example of the first object information O10 is user information O10A. User information O10A may include any information related to the user. In one example, the user information O10A may establish a connection with various information E10 used to exercise the authority by including information related to the authority of the corresponding user (the corresponding individual of the user). Various information E10 may include, for example, public personal authentication information, settlement information, information of other service systems, etc. Public personal authentication information may include, for example, a personal number, etc. Settlement information may include, for example, credit card information, online banking information, electronic settlement information, etc. Information of other service systems may include, for example, information related to electronic prescriptions (insurer number, prescription information, etc.). Various information E10 may be managed by an external system or may be managed within the system 100. In addition, the first server 2 may be equipped by a public institution, a neutral institution, or various enterprises (vehicle manufacturers, service operating companies, etc.). The first server 2 may also be called a user ID server, a self ID server, or the like.

[0090] On the other hand, when the second object is a mobile body, an example of the second terminal 5 is a mobile body terminal (onboard terminal). The mobile body terminal may be, for example, a terminal installed inside or outside the mobile body, a terminal held by a person involved in the operation of the mobile body (e.g., a driver, a crew member, etc.), or a device equipped in a facility of the mobile body (e.g., a ticket gate, etc.). When the mobile body is a vehicle, the mobile body terminal may be referred to as a vehicle-mounted terminal.

[0091] An example of the second identifier I20 is a mobile body identifier (mobile body ID, vehicle ID). The mobile body identifier may be, for example, the ID of a mobile body account, identification information inherently assigned to the target mobile body (for example, a car registration number, vehicle identification information, etc.), identification information of a mobile body terminal, etc. An example of the second object information O20 is mobile body information O20A. The mobile body information O20A may include any information related to the mobile body. Figure 2 In one example, according to the association setting between the proxy entrusting user and the target mobile body, at least part of the rights of the proxy entrusting user to exercise various information E10 associated with the user information O10A of the proxy entrusting user through the target mobile body can be validated (activated). In addition, the second server 3 can be equipped by a public institution, a neutral institution, or various companies (vehicle manufacturers, service operating companies, etc.). The second server 3 can be called a mobile body ID server, a vehicle ID server, etc.

[0092] A moving object is an example of a utilization object. Figure 2 The form can be applied to any situation where the user (occupant) of the object changes dynamically. The object can be, for example, a rental object, an accommodation facility, etc., in addition to a mobile object. The rental object can include a rental office, a rental space, etc.

[0093] The system 100 may be configured to set a correspondence (association) between the user (first identifier I10) and the corresponding individual (second identifier I20) of the object in correspondence with the start of use of the object. In addition, the system 100 may be configured to cancel the correspondence (association) between the corresponding individuals in correspondence with the end of use. The start and end of use may be detected by any method, for example, at the time of boarding or alighting a vehicle, lending or returning the object, etc. In one example, at least one of the start and end of use may be detected by executing data exchange between the user and the terminal of the object (in the case of an agent, the first terminal 4 and the second terminal 5).

[0094] In addition, objects for use can be divided into at least two types: objects that can be used repeatedly for a long time, and objects that can be used temporarily. For the sake of convenience, the former is referred to as "permanent objects for use" and the latter is referred to as "temporary objects for use". An example of a permanent object for use is an object owned by a user such as a private car. It is preferred to select an object that is used repeatedly for a long time as a permanent object for use. An example of a temporary object for use is an object owned by a person other than the user, such as a rental car, a shared car, a mobile object of a public transportation agency, a rental object, an accommodation facility, etc. Mobile objects of a public transportation agency are, for example, taxis, buses, railway vehicles, airplanes, ships, etc.

[0095] In the system 100, the type of the object to be used (whether it is a permanent object or a temporary object) may or may not be distinguished. When distinguishing the type of the object to be used, the system 100 may use any method to distinguish the type of the object to be used. In one example, the object information (mobile body information, etc.) may include information indicating the type of the object to be used, and the system 100 may distinguish the type of the object to be used based on the information. In another example, the type of the object to be used may be distinguished based on information such as an identifier and attribute information. In another example, information sent from at least one of the first terminal 4 and the second terminal 5 to the management server 1 may include information indicating the type of the object to be used, and the system 100 may distinguish the type of the object to be used based on the information. In another example, in the server (in the Figure 2 In the example of the second server 3), when the operating organization is the second server 3), the type of the object to be used can be identified based on the affiliation of the operating organization of the server. The system 100 can also switch the processing of association setting, the conditions for association release, the management method of the association information D10, the authentication processing, etc. according to the type of the identified object to be used.

[0096] In addition, the application scenario of the system 100 of the present invention may not be limited to the scenario of tracking the relationship between the user and the object of use. In another example, the first object and the second object may both be robotic devices configured to act autonomously through automatic control. The robotic device may include mobile objects such as self-driving vehicles and drones. In a scenario where two or more robotic devices interact autonomously, the system 100 of the present invention can be used to track the generation and elimination of relationships between the robotic devices. In this case, in order to enable a robotic device (proxy individual PI) to exercise the authority of another robotic device (proxy entrusting individual PR), the system 100 may perform processing based on the association settings of the above-mentioned agent.

[0097] (Related information)

[0098] Figure 3A An example of the related information D10 according to the present embodiment is schematically shown. Figure 3A In one example, it is assumed that the setting of the corresponding relationship is expressed using the first identifier I10 and the second identifier I20. The associated information D10 includes the first identifier I10, the second identifier I20, the setting time, and the release time. The first identifier I10 and the second identifier I20 represent the corresponding individual of the first object and the corresponding individual of the second object for which the corresponding relationship (association) is set. When the corresponding relationship is set in the above-mentioned proxy case, the associated information D10 includes the first identifier I10 of the proxy entrusting individual PR. The setting time indicates the time when the corresponding relationship is set. The setting time can be composed of a time stamp. The release time indicates the time when the corresponding relationship is released. The value of the release time can be added when executing the process of releasing the corresponding relationship. The expression method of release may not be limited to such an example. In another example, the release time can be replaced by at least one of the validity period and the flag. The validity period indicates the period during which the setting of the corresponding relationship is valid. In this case, whether the setting of the corresponding relationship is valid (that is, whether the corresponding relationship is set or released) is indicated based on whether it is within the validity period. When a corresponding relationship is set in the case of the above-mentioned agency, the validity period can be set by the agent entrusting individual PR. The flag indicates whether the corresponding relationship is terminated. The flag can be displayed when the process of terminating the corresponding relationship is executed. In another example, the associated information D10 can include at least one of the validity period and the flag together with the field of the termination time. In addition, when a corresponding relationship is set in the case of the above-mentioned agency and the effective authority is also set, the associated information D10 may also include information indicating the set effective authority. In order to identify the designated agent individual PI, the associated information D10 may also include the first identifier I10 of the designated agent individual PI. The information of the validity period, the effective authority and the first identifier I10 of the agent individual PI is an example of information related to the set agency (agency information).

[0099] In addition, as long as the corresponding relationship can be expressed, the structure of the related information D10 may not be limited to Figure 3A In another example, the associated information D10 may further include information indicating the type of the object being used (whether it is a permanent object or a temporary object). The type of the object being used may not necessarily be identified by separate information. For example, the type of the object being used may also be identified by information such as an identifier. In addition, the agency information may be omitted from the associated information D10.

[0100] The data format of the association information D10 may not be particularly limited and may be appropriately selected according to the implementation method. The association information D10 may be maintained in any database infrastructure. In one example, the association information D10 may be maintained in a relational database such as a table form. In another example, the association information D10 may be maintained by a blockchain infrastructure. In this case, the respective matters of association setting and release may be accumulated in the blockchain as association information D10. For example, the matters of association setting may include the first identifier I10, the second identifier I20, and the setting time. The matters of association release may include the first identifier I10, the second identifier I20, and the release time (or information indicating the release).

[0101] (First target information)

[0102] The first object information O10 may include any information related to the first object. For example, the first object information O10 may include the first identifier I10, attribute information of the first object, information related to authority (authority information), information related to the set proxy (proxy authority information), etc. Figure 2 In the example of , the user information O10A is an example of the first object information O10.

[0103] Figure 3B An example of user information O10A according to this embodiment is schematically shown. Figure 3B In one example, user information O10A includes a user ID (first identifier I10) of the corresponding user, attribute information, and authority information. Attribute information may include any information related to the attributes of the corresponding user. Attribute information may include, for example, personal information such as name, address, age, gender, and contact information. Authority information is related to the authority of the corresponding user. Authority information may include, for example, information for cooperating with a server that performs information processing related to the authority of the object, information indicating that a connection is established with various information E10, and the like.

[0104] In the case where the corresponding user sets the proxy rights as a proxy entrusting user, the user information O10A may also include the proxy rights information related to the set proxy rights. In one example, the proxy rights information may include the user ID of the proxy user (the first identifier I10 of the proxy individual PI), the validity period, and the valid authority. The proxy rights information may also be linked to the authority information.

[0105] In addition, the structure of the user information O10A may not be limited to Figure 3B The example may be changed appropriately according to the implementation. For example, the user information O10A (first object information O10) may also include information for authentication of the user (first object) (for example, registered inherent information, etc.). In addition, the proxy information may be omitted from the user information O10A (first object information O10). Figure 3A and Figure 3B As illustrated, the proxy information may be stored in association with at least one of the related information D10 and the first target information O10, or may be stored separately from the related information D10 and the first target information O10.

[0106] The data format of the first object information O10 (user information O10A) may not be particularly limited and may be appropriately selected according to the implementation method. The first object information O10 (user information O10A) may be maintained in any database infrastructure. In one example, the first object information O10 (user information O10A) may be maintained in a relational database such as a table format. In another example, the first object information O10 (user information O10A) may be maintained by a blockchain infrastructure.

[0107] (Second target information)

[0108] The second object information O20 may include any information related to the second object. The second object information O20 includes, for example, the second identifier I20, attribute information of the second object, information related to authority, and the like. Figure 2 In the example of , the moving body information O20A is an example of the second object information O20.

[0109] Figure 3C An example of the mobile body information O20A according to this embodiment is schematically shown. Figure 3CIn one example, the mobile body information O20A includes a mobile body ID (a second identifier I20) and attribute information. The attribute information includes a number, a model, and owner information. When the mobile body is a vehicle, the number may be a vehicle registration number. The model may be specified arbitrarily. In one example, for example, the model may be specified in a manner that indicates a type that can distinguish between permanent and temporary objects such as a private car, a rental car, a shared car, and a mobile body of a public transportation agency. In addition, the model may also include the type of mobile body, such as a vehicle model. The owner information may include any information related to the owner of the mobile body. The owner information may include, for example, the owner's personal information such as name, address, age, gender, and contact information. The owner may also be a legal person.

[0110] In addition, the configuration of the mobile body information O20A may not be limited to Figure 3C Examples may be appropriately changed according to the implementation. For example, the mobile body information O20A (second object information O20) may also include information for authentication of the mobile body (second object) (for example, registered inherent information, etc.). In addition, the structure of the attribute information may also be appropriately changed. For example, the mobile body information O20A (attribute information) may also include information related to the mobile body terminal, such as the contact information of the mobile body terminal. In the case where a form of allowing agency is adopted for the second object, the second object information O20 may also include agency information.

[0111] The data format of the second object information O20 (mobile body information O20A) may not be particularly limited and may be appropriately selected according to the implementation method. The second object information O20 (mobile body information O20A) may be maintained in any database infrastructure. In one example, the second object information O20 (mobile body information O20A) may be maintained in a relational database such as a table format. In another example, the second object information O20 (mobile body information O20A) may be maintained by a blockchain infrastructure.

[0112] (Authentication Process)

[0113] The authentication of the proxy entrusting individual PR of the first object can be implemented by any method (a specific example will be described later). Executing the authentication process includes determining whether the authentication is successful or not. The authentication process can be executed on any computer. In one example, the success or failure of the authentication corresponding to the authentication entrustment can be determined by the management server 1 or an external server (for example, the first server 2, etc.). By executing the authentication process on the server side, security can be expected to be ensured.

[0114] The authentication process can be performed at any time before the corresponding relationship is set. In one example, the authentication process of the proxy delegate individual PR can be performed as an opportunity to send an association request before the association request is issued. The association request can be sent separately from the authentication delegation based on the establishment of the authentication of the proxy delegate individual PR corresponding to the authentication delegation. The association request includes the authentication delegation, which can include the execution of the authentication delegation as a pre-processing for issuing the association request (the case of the authentication method 3-2 described later). In another example, the authentication process of the proxy delegate individual PR can be delegated together with the association request and executed together with the processing related to the association setting (the case of the first authentication method described later, etc.). In another example, the authentication process of the proxy delegate individual PR can also be started according to a request from the management server 1 or an external server after the association request is sent.

[0115] According to these processes, in the management server 1, the authentication result can be obtained together with the association request or after the association request. In the case where the authentication is successful, obtaining the authentication result in the management server 1 may include obtaining the authentication result indicating that the authentication is successful, and obtaining indirect information such as the association request corresponding to the authentication success (that is, indirectly obtaining the authentication result). On the other hand, in the case where the authentication is not successful, obtaining the authentication result in the management server 1 may include obtaining the authentication result indicating that the authentication is not successful, and the authentication result does not reach the management server 1 (no authentication result is obtained).

[0116] In addition, the computer that performs the authentication process can also be appropriately changed according to the implementation method. In addition, the authentication of at least one of the proxy individual PI of the first object and the object individual TA of the second object can be performed together with the authentication of the proxy entrusting individual PR of the first object. The authentication process of the proxy individual PI can be performed in the same way as the proxy entrusting individual PR. In the case of performing the authentication process of the proxy individual PI, the corresponding relationship can be set based on the authentication of the proxy entrusting individual PR and the proxy individual PI. In addition, the authentication process of the second object can be performed by any computer in the same way as the first object. In one example, the success or failure of the authentication of the second object (object individual TA) can be determined by the management server 1 or an external server (for example, the second server 3, etc.). In the case of performing the authentication process of the object individual TA of the second object, the corresponding relationship can be set based on the authentication of the proxy entrusting individual PR and the object individual TA.

[0117] The order of the authentication process of the first object and the second object may not be particularly limited and may be appropriately determined according to the implementation method. The authentication process of the first object may also be executed at least partially in parallel with the authentication process of the second object. The authentication entrustment of each object may include data (e.g., identifier, inherent information, certificate, etc.) used for the authentication of each object. In the case where the authentication process of each object is executed by the management server 1 or an external server, obtaining the authentication result on the management server 1 may include obtaining the authentication result by executing the authentication process on the management server 1, or obtaining the authentication result from the external server. For example, the management server 1 may execute the authentication process according to the accepted authentication entrustment, or may entrust the execution of the authentication process to the external server by sending the authentication entrustment to the external server. In addition, for example, the terminal of at least one of the first object and the second object may send the authentication entrustment to the external server. The external server may execute the authentication process according to the accepted authentication entrustment, or may entrust the execution of the authentication process to the management server 1 by sending the authentication entrustment to the management server 1. When the authentication process is executed, the external server may send the authentication result directly to the management server 1, or may send the authentication result to the management server 1 via an external computer (e.g., the terminal of at least one party).

[0118] (Data Exchange)

[0119] In this embodiment, a series of processes related to association settings in the proxy path can be started by using the data exchange between the first terminal 4 and the second terminal 5 as an opportunity. That is, when a utilization relationship between the proxy individual PI and the target individual TA corresponding to the entrustment of the proxy entrusting individual PR is generated, the first terminal 4 and the second terminal 5 can appropriately perform data exchange. The generation of the utilization relationship (the start of utilization) can be detected by the data exchange. According to an example of this embodiment, it is expected that the generation of the utilization relationship can be easily detected by data exchange.

[0120] The method of data exchange may not be particularly limited and may be appropriately selected according to the implementation method. In one example, data exchange between the first terminal 4 and the second terminal 5 may be performed through wireless or wired data communication. Wireless communication may be performed, for example, through NFC (Near Field Communication), Bluetooth (registered trademark), Wi-fi (registered trademark), etc. Wired communication may be performed, for example, through a wired LAN (Local Area Network), USB (Universal Serial Bus), etc. Data communication may be performed directly between the first terminal 4 and the second terminal 5, or indirectly through other computers. In another example, data exchange may also be performed by methods other than data communication such as reading a QR code. For example, it may also be configured such that one of the first terminal 4 and the second terminal 5 displays data on a display, and the other uses a sensor such as an image sensor to read the displayed data, thereby performing data exchange.

[0121] Figure 4 An example of data exchange involved in this embodiment is schematically shown. In one example of this embodiment, the first terminal 4 of the proxy individual PI can be equipped with a short-distance wireless communication module 431. The second terminal 5 of the target individual TA can be equipped with a short-distance wireless communication module 531. Correspondingly, data exchange between the terminals can be performed through short-distance wireless communication. In addition, the type of each short-distance wireless communication module (431, 531) is not particularly limited and can be appropriately selected according to the embodiment. Short-distance wireless communication includes, for example, NFC, Bluetooth (registered trademark), Wi-fi (registered trademark), RFID (Radio-Frequency Identification), ZigBee (registered trademark), infrared communication (infrared transmission), etc. In one example of this embodiment, the generation of a utilization relationship can be detected by using the data exchange based on the short-distance wireless communication as an opportunity. In addition, it can be guaranteed that the first terminal 4 and the second terminal 5 exist in the range where the short-distance wireless communication can be performed, so it can be expected that the generation of a utilization relationship between the proxy individual PI and the target individual TA can be appropriately detected.

[0122] In addition, the association request may include at least one of the first identifier I10 of the proxy requesting individual PR and the second identifier I20 of the target individual TA. When the association request includes the first identifier I10 of the proxy requesting individual PR, the first identifier I10 may be sent from at least one of the first terminal 4 and the second terminal 5. When the first identifier I10 is sent from the first terminal 4, the first terminal 4 may obtain the first identifier I10 at any time. In one example, the first terminal 4 may receive the first identifier I10 of the proxy requesting individual PR from the terminal 6 or an external server (the first server 2, etc.) at the time of the proxy request, or the first identifier I10 of the proxy requesting individual PR may be stored in advance in an address book or the like. Thus, the first terminal 4 may store the first identifier I10 of the proxy requesting individual PR in advance in a memory or resource of the first terminal 4. The first terminal 4 may also obtain the first identifier I10 of the proxy requesting individual PR from a memory or resource. In another example, the first terminal 4 may obtain the first identifier I10 of the proxy requesting individual PR using an input device, a sensor, or the like. When the first identifier I10 of the proxy client PR is transmitted from the second terminal 5, the second terminal 5 may be given the first identifier I10 of the proxy client PR from the first terminal 4 during data exchange, or may obtain the first identifier I10 of the proxy client PR by a spontaneous action. In one example, the second terminal 5 may obtain the first identifier I10 from the first terminal 4 by data communication. In another example, the second terminal 5 may obtain the first identifier I10 of the proxy client PR from the first terminal 4 by a method other than data communication, such as reading the first identifier I10 displayed as a two-dimensional code on the first terminal 4. In another example, the second terminal 5 may obtain the first identifier I10 of the proxy client PR from any one of the first object (proxy client PI, proxy client PR) and the first terminal 4 using a device such as an input device or a sensor. Acquiring from the first object may include: when there is a person related to the second object (for example, the second object is a person, the second object is operated by a person, etc.) and the first object is an object, the person related to the second object obtains it through a proxy operation device. In still another example, the second terminal 5 may obtain the first identifier I10 of the proxy requesting individual PR from the terminal 6 or an external server (such as the first server 2 ).

[0123] When the association request includes the second identifier I20, the second identifier I20 may be sent from at least one of the first terminal 4 and the second terminal 5. When the second identifier I20 is sent from the second terminal 5, the second terminal 5 may obtain the second identifier I20 at any time. In one example, the second identifier I20 may be pre-stored in the memory·resource of the second terminal 5. The second terminal 5 may obtain the second identifier I20 from the memory·resource. In another example, the second terminal 5 may obtain the second identifier I20 using an input device, a sensor, etc. When the second identifier I20 is sent from the first terminal 4, the first terminal 4 may give the second identifier I20 from the second terminal 5 during data exchange, or may obtain the second identifier I20 by a spontaneous action. In one example, the first terminal 4 may obtain the second identifier I20 from the second terminal 5 through data communication. In another example, the first terminal 4 may also obtain the second identifier I20 from the second terminal 5 by a method other than data communication, such as reading the second identifier I20 displayed as a two-dimensional code on the second terminal 5. In yet another example, the first terminal 4 may also use an input device, a sensor, or the like to obtain the second identifier I20 from any one of the second object and the second terminal 5. Acquisition from the second object may include: when there is a person related to the first object (for example, the first object is a person, the first object is operated by a person, etc.) and the second object is an object, the person related to the first object obtains the second identifier I20 through a proxy operation device.

[0124] In addition, the association request may also include the first identifier I10 of the proxy individual PI. When the association request includes the first identifier I10 of the proxy individual PI, the first identifier I10 of the proxy individual PI may be sent from at least one of the first terminal 4 and the second terminal 5. When the first identifier I10 of the proxy individual PI is sent from the first terminal 4, the first terminal 4 may obtain the first identifier I10 at any time. In one example, the first identifier I10 of the proxy individual PI may be pre-stored in the memory·resource of the first terminal 4. The first terminal 4 may obtain the first identifier I10 of the proxy individual PI from the memory·resource. In another example, the first terminal 4 may also obtain the first identifier I10 of the proxy individual PI using an input device, a sensor, etc. When the first identifier I10 of the proxy individual PI is sent from the second terminal 5, the second terminal 5 may be given the first identifier I10 of the proxy individual PI from the first terminal 4 during data exchange, or may obtain it through a spontaneous action. In one example, the second terminal 5 may obtain the first identifier I10 of the proxy individual PI from the first terminal 4 through data communication. In another example, the second terminal 5 may also obtain the first identifier I10 of the proxy individual PI by a method other than data communication, such as reading the first identifier I10 displayed as a QR code on the first terminal 4. In another example, the second terminal 5 may also obtain the first identifier I10 of the proxy individual PI from either the first object (proxy individual PI) or the first terminal 4 using a device such as an input device or a sensor.

[0125] For example, in the above Figure 2 In the example of , the first terminal 4 may also obtain the second identifier I20 (mobile body identifier) ​​from the second terminal 5 by reading data communication or code. When the second identifier I20 is a car registration number, the first terminal 4 may also capture the license plate number through an image sensor and analyze the obtained image to obtain the second identifier I20. The first terminal 4 may also obtain the second identifier I20 via an input device. The second terminal 5 may also obtain the second identifier I20 appropriately. In addition, the second terminal 5 may obtain the first identifier I10 (user identifier) ​​by reading data communication or code. When the first identifier I10 is a personal number recorded on a card, etc., the second terminal 5 may also capture the card through an image sensor and analyze the obtained image to obtain the first identifier I10. The second terminal 5 may also obtain the first identifier I10 via an input device. The first terminal 4 may obtain the first identifier I10 appropriately.

[0126] When the input device is used to obtain data such as identifiers (I10, I20), a terminal may obtain data from another object by operating the input device through another object, or may obtain data from another object by operating the input device through one object. Figure 2 In the example, when the second identifier I20 is a car registration number and an input device is used to obtain the car registration number, the first terminal 4 can obtain the second identifier I20 from the mobile body (the second object) by having the user (the first object) input the car registration number via the input device.

[0127] In addition, the acquisition of data of another object by one terminal does not necessarily need to be performed at the time of data exchange. One terminal can acquire data of another object at any time different from data exchange. The data acquisition method can adopt any of the above methods. In this case, the data exchange between the first terminal 4 and the second terminal 5 can function as a simple opportunity for starting a series of processes related to the association setting.

[0128] (Verification Process)

[0129] The verification method of the proxy authority can be appropriately selected according to the implementation. The structure of the authority verification information AU can be appropriately determined according to the verification method. In this implementation, the verification of the proxy authority can be performed by at least one of the following two methods.

[0130] (1) Method 1

[0131] Figure 5A An example of the verification process of the proxy based on the first method is schematically shown. In the first method, the authority verification information AU may include the contact information AU1 for executing the consent process. Correspondingly, the verification of the proxy may be constituted by the following steps, namely: inquiring the contact information AU1 included in the authority verification information AU (step S301), and receiving a reply of consent as the result of the execution of the consent process (step S302).

[0132] The consent process of the proxy may be performed automatically by computer processing, or may be performed manually by at least partially including user operations. The content of the consent process may be appropriately designed according to the implementation method. In a simple example, the inquiry may include an consent button, and the consent process is to operate the consent button included in the inquiry. In addition, as long as the inquiry can be notified to the computer that executes the consent process, the contact information AU1 may not be particularly limited and may be appropriately selected according to the implementation method.

[0133] In addition, Figure 5AIn the example, the contact information AU1 is the contact information of the terminal 6. In one example, the consent processing can be performed at the terminal 6. In this case, the contact information AU1 (the contact information of the terminal 6) can be, for example, a telephone number, an email address, account information of a contact system application (for example, a Social Networking Service application, etc.), an identification number, etc. However, the computer that performs the consent processing may not be limited to the terminal 6. In another example, the consent processing may also be performed by an external computer such as the first server 2. In this case, the contact information AU1 can be, for example, an address of an external computer such as a URL (Uniform Resource Locator). The address can also be a one-time address. The contact information AU1 can be appropriately transmitted to the second terminal 5. In one example, the permission granting information AG can include the permission verification information AU (contact information AU1). In the data exchange, the first terminal 4 can send the contact information AU1 contained in the permission granting information AG to the second terminal 5.

[0134] In the case where the consent process is automatically performed by the terminal 6 or an external computer, the authenticity of the proxy right can be verified by any method during the consent process. In one example, the authenticity of the proxy right can be verified by the authentication of the proxy individual PI. For example, according to the designation of the proxy individual PI by the terminal 6, the terminal 6 or the external computer can also keep the information of the proxy individual PI (the first identifier I10, data for authentication, etc.) in advance. The second terminal 5 can obtain the information of the proxy individual PI from the proxy individual PI or the first terminal 4, and notify the terminal 6 or the external computer of the inquiry including the obtained information. The information of the proxy individual PI can include authentication information for authenticating the proxy individual PI. The authentication information can be appropriately selected according to the implementation method. In one example, the authentication information can include inherent information. The inherent information can include, for example, information based on the object (individual), information based on the terminal, temporarily generated information, information generated by any other method, etc. The information based on the object can also be, for example, biometric information, inherently given identification information, etc. The biometric information can be, for example, a face image, a fingerprint, a voiceprint, etc. The temporarily generated information is composed of, for example, a time stamp, a random number, a hash value, etc. The terminal 6 or the external computer can verify the authenticity of the proxy right by comparing the designated information of the proxy individual PI stored in advance with the acquisition information of the proxy individual PI notified from the second terminal 5. If the information comparison is successful, the terminal 6 or the external computer can return a reply indicating approval to the second terminal 5. On the other hand, if the information comparison is unsuccessful, the terminal 6 or the external computer can also return a reply indicating disapproval to the second terminal 5 and urge the re-acquisition of the proxy individual PI information.

[0135] In addition, Figure 5A In the example of , after the inquiry (consent to the entrustment) of step S301 is notified to the terminal 6, if there is no response from the terminal 6 within a certain period of time, the second terminal 5 may also notify the terminal 6 of a reminder and urge the response of step S302. If there is no response within a certain period of time, the second terminal 5 may also inquire the external computer instead of the reminder to make the external computer perform the alternative consent processing. If there is no response after the reminder, the second terminal 5 may also make the external computer perform the alternative consent.

[0136] In addition, when the first method is adopted, at least one of the first terminal 4 and the second terminal 5 can obtain data for authentication of the proxy client individual PR (for example, the first identifier I10, inherent information, certificate, etc.) at any time. In one example, in step S302, the terminal 6 or the external computer can also send the data for authentication of the proxy client individual PR together with a reply indicating consent to the second terminal 5. However, the transmission path of the data for authentication of the proxy client individual PR is not limited to such an example, and can be appropriately selected according to the implementation method. In another example, the terminal 6 or the external computer can send the data for authentication of the proxy client individual PR to the first terminal 4.

[0137] In addition, basically, the data exchange between step S301 and step S302 can be performed by direct or indirect data communication based on wireless or wired. However, the data exchange between the second terminal 5 and the computer (terminal 6, external computer) of the contact information AU1 is not limited to such an example, and can be appropriately selected according to the implementation method. Depending on the situation, methods other than data communication such as reading a two-dimensional code can also be used in the data exchange between the second terminal 5 and the computer of the contact information AU1.

[0138] In addition, the second terminal 5 may also obtain information for confirming the proxy individual PI from the first terminal 4 or the proxy individual PI, and notify the terminal 6 of the obtained information when the inquiry is agreed. The terminal 6 may also urge the confirmation of the proxy individual PI by outputting the information of the proxy individual PI together with the inquiry of agreement (for example, displaying it on a display). In one example, the information for confirming the proxy individual PI may also be the first identifier I10 of the proxy individual PI, etc. In addition, in the case where the first object is a user, the information for confirming the proxy individual PI may also include information for authentication such as a facial image of the proxy individual PI (proxy user). In the first terminal 4 and the second terminal 5, the information may be obtained in order to authenticate the proxy individual PI when an association request is made. That is, the data obtained for the authentication of the proxy individual PI may also be used for the confirmation of the proxy individual PI in the consent process. As a result, it is expected that the acquisition of data will be more efficient.

[0139] (2) Method 2

[0140] Figure 5B An example of the process of the verification processing of the proxy authority based on the second method is schematically shown. In the second method, the second terminal 5 can also be configured to receive the notification of the authentication information PC1 from the terminal 6 of the proxy entrusting individual PR (step S100). The authority verification information AU can include the proxy authentication information AU2 corresponding to the authentication information PC1. The proxy authority can be verified by comparing the proxy authentication information AU2 included in the authority verification information AU with the authentication information PC1 notified from the terminal 6 of the proxy entrusting individual PR (step S305).

[0141] The authentication information PC1 may be the same as the authentication information of the proxy individual PI in the first method described above. In one example, the authentication information PC1 may be composed of temporarily generated information. The authentication information PC1 may also include inherent information of the proxy individual PI. The proxy authentication information AU2 corresponds to the authentication information PC1. In one example, the authentication information PC1 maintained in the terminal 6 or the external computer (the first server 2, etc.) may be transmitted to the first terminal 4 together with the authority granting information AG, and the authentication information PC1 transmitted to the first terminal 4 may be used as the proxy authentication information AU2. That is, the authority granting information AG may include the authentication information PC1 as the authority verification information AU (proxy authentication information AU2), and in the data exchange, the first terminal 4 may send the proxy authentication information AU2 included in the authority granting information AG to the second terminal 5. In another example, the authentication information PC1 may be pre-registered, and when verifying the proxy right, the proxy authentication information AU2 may be obtained corresponding to the authentication information PC1. The authentication information PC1 may be maintained in the first object information O10. For example, when the first object is a user, the authentication information PC1 may be a registered face image, and the proxy authentication information AU2 may be a face image obtained when verifying the proxy authority. That is, the authority authentication information AU (proxy authentication information AU2) may also be obtained when verifying the proxy authority.

[0142] The second terminal 5 can directly or indirectly receive the authentication information PC1. The second terminal 5 can obtain the authentication information PC1 at any time before executing the verification process of the proxy. The second target individual TA can be designated by the proxy requesting individual PR or selected by the proxy individual PI.

[0143] In one example, the terminal 6 may include a short-range wireless communication module, and may also perform data exchange based on the short-range wireless communication with the second terminal 5. The individual of the second terminal 5 to be the object of the data exchange may be designated as the object individual TA. The second terminal 5 may receive the authentication information PC1 during the data exchange. The data exchange may be performed by wireless or wired data communication other than the short-range wireless communication, or by methods other than data communication such as reading a two-dimensional code.

[0144] In another example, the terminal 6 can access the list of the second object when setting up related to the agent, and specify the individual (the object individual TA) associated with the authorized agent from the individuals registered in the list. The list can include information such as identification information of each individual of the second object, contact information of the terminal (the second terminal 5), etc. The list can be maintained in the terminal 6 or an external computer (for example, the second server 3). The designation of the object individual TA can be performed automatically by computer processing, or it can be performed manually by at least partially including user operations. After specifying the object individual TA, the terminal 6 can notify the terminal (the second terminal 5) of the specified object individual TA of the authentication information PC1. Correspondingly, the second terminal 5 can receive the authentication information PC1.

[0145] In another example, the target individual TA may be designated by the proxy individual PI instead of the proxy client individual PR. For example, the proxy client individual PR may designate the second target within an arbitrary range belonging to a specific operating organization, etc., and the proxy individual PI may select the target individual TA from the range. As an example in this case, data such as the authentication information PC1 may be retained in an external computer such as the first server 2. When the second terminal 5 starts data exchange with the first terminal 4, as a process of step S100, it may also access the external computer and download data such as the authentication information PC1. The downloaded data may be appropriately selected. For example, in the external computer, data such as the authentication information PC1 may be associated with at least one of the proxy client individual PR and the proxy individual PI and maintained. The second terminal 5 may accept the designation of at least one of the proxy client individual PR and the proxy individual PI based on an operation performed by the proxy individual PI, data (such as the first identifier I10) from the first terminal 4, etc., and may also download data corresponding to the designated individual. After downloading the data, the second terminal 5 may accept a use application based on the proxy individual PI and perform a verification process based on step S305. In addition, when the proxy client PR specifies the target individual TA, the second terminal 5 may also download the authentication information PC1 and other data when the proxy individual PI is used. For example, when the proxy client PR specifies the effective start time of the proxy right in advance, the second terminal 5 may also download the authentication information PC1 and other data according to the arrival of the effective start time.

[0146] The method of comparing the authentication information PC1 and the proxy authentication information AU2 can be appropriately determined according to the information used as each information (PC1, AU2). In one example, the second terminal 5 can determine whether the comparison is successful or not according to the consistency between the authentication information PC1 and the proxy authentication information AU2. In another example, the second terminal 5 can determine whether the comparison is successful or not according to whether the correspondence relationship between the authentication information PC1 and the proxy authentication information AU2 is established. As a specific example, in the computer of the transmission path, a predetermined operation process (hashing, etc.) can be used for at least one of the authentication information PC1 and the proxy authentication information AU2. For example, the proxy authentication information AU2 can be generated by hashing the authentication information PC1. The predetermined operation process can be executed in at least any one of the terminal 6, the first terminal 4, the second terminal 5, and the external computer (for example, the first server 2, etc.). Correspondingly, the second terminal 5 can also determine whether the comparison is successful or not according to whether the correspondence relationship defined by the predetermined operation process is established between the authentication information PC1 and the proxy authentication information AU2. For example, the second terminal 5 may also hash the authentication information PC1, and determine whether the comparison is successful or not based on whether the obtained hash value is consistent with the proxy authentication information AU2. The comparison process may be performed by an external computer such as the first server 2, and the second terminal 5 may also obtain the comparison result from the external computer. Indirectly receiving the authentication information PC1 may also include receiving the result of the comparison performed by the external computer. When the comparison is successful (i.e., the verification of the proxy authority is successful), the first terminal 4 and the second terminal 5 may enter into the processing related to the association request. On the other hand, when the comparison is not successful, the second terminal 5 may not permit the processing of the proxy association and urge the first terminal 4 to send the proxy authentication information AU2 again.

[0147] In addition, at least one of the first terminal 4 and the second terminal 5 can obtain data for authentication of the proxy-entrusted individual PR (for example, the first identifier I10, inherent information, a certificate, etc.) at any time. In one example, in step S100, the second terminal 5 obtains data for authentication of the proxy-entrusted individual PR from the terminal 6 or an external computer together with the authentication information PC1. However, the transmission path of the data for authentication of the proxy-entrusted individual PR may not be limited to such an example, and may be appropriately selected according to the implementation method. In another example, the first terminal 4 may also obtain data for authentication of the proxy-entrusted individual PR together with the authority granting information AG. The method for obtaining the data for authentication is not particularly limited, and may be appropriately selected according to the implementation method. In one example, the data for authentication may be obtained by any device such as an input device, a sensor, etc. The data for authentication may also be received from an already maintained device.

[0148] According to at least one of the first method and the second method, appropriate verification of the proxy authority can be expected. In addition, when the first method or the second method is adopted, the authority verification information AU may include contact information AU1 for executing consent processing or proxy authentication information AU2 for verification.

[0149] (Notification Processing)

[0150] In one example, when executing at least one of the processes of association setting and release, the management server 1 may also send a notification indicating the execution result to at least one of the first terminal 4 and the second terminal 5. The sending path of the notification may not be particularly limited and may be appropriately determined according to the implementation method. The management server 1 may directly notify at least one of the first terminal 4 and the second terminal 5. Alternatively, the management server 1 may indirectly notify at least one of the first terminal 4 and the second terminal 5 via an external computer such as each server (2, 3).

[0151] In addition, in the case of direct notification, the management server 1 can appropriately obtain the contact information of each terminal (4, 5). The contact information can be a telephone number, an email address, account information of a contact system application (for example, an application of a social networking service, etc.), an identification number, etc. The management server 1 can obtain information indicating the contact information of each terminal (4, 5) at any time. In one example, the management server 1 can obtain information indicating the contact information when receiving a request such as an association request or a release request. The information indicating the contact information can be sent from at least one of each terminal (4, 5) and each server (2, 3).

[0152] In one example, when the proxy individual PI sets the correspondence between the proxy client individual PR and the target individual TA, the management server 1 may send a notification to the terminal 6 of the proxy client individual PR to notify the setting of the correspondence. The management server 1 may send the notification to the terminal 6 directly or indirectly. In the case of sending directly, the management server 1 may obtain the contact information of the terminal 6 at any time. In one example, when the contact information of the terminal 6 is used as the contact information AU1 in the first method described above, at least one of the first terminal 4 and the second terminal 5 may send the contact information AU1 to the management server 1 together with the association request. In another example, the management server 1 may appropriately obtain the contact information of the terminal 6 from an external computer such as the first server 2. In another example, when the management server 1 and the terminal 6 perform data communication, the management server 1 may obtain the contact information of the terminal 6 in the data communication. Similarly, when the correspondence is cancelled, the management server 1 may send a notification to the terminal 6 of the proxy client individual PR to notify the cancellation of the correspondence.

[0153] (Remove association)

[0154] In this embodiment, the management server 1 may terminate the correspondence upon acceptance of a termination request from at least one of the first terminal 4 and the second terminal 5 or upon satisfaction of a predetermined termination condition. Alternatively, the management server 1 may terminate the correspondence based on an important factor related to the proxy requesting individual PR.

[0155] (I) Request for release

[0156] In one example, the release request may be configured to include at least one of the first identifier I10 of the proxy client PR and the second identifier I20 of the target individual TA to indicate the correspondence relationship of the release object. In the case where the associated information D10 includes the first identifier I10 of the proxy individual PI as the proxy information, the release request may also be configured to include the first identifier I10 of the proxy individual PI to indicate the correspondence relationship of the release object. In another example, the release request may also be configured to include replacement information to indicate the correspondence relationship of the release object.

[0157] When the first terminal 4 sends a release request including the second identifier I20, the first terminal 4 can obtain the second identifier I20 at any time. In one example, when the association request is made, the first terminal 4 can obtain the second identifier I20, and can store the obtained second identifier I20 in the memory·resource. When the release request is made, the first terminal 4 can obtain the second identifier I20 from the memory·resource. In addition, when the first terminal 4 sends a release request including the first identifier I10 of the proxy entrusting individual PR, the first terminal 4 can obtain the first identifier I10 of the proxy entrusting individual PR at any time. In one example, the first terminal 4 can obtain the first identifier I10 of the proxy entrusting individual PR together with the authority granting information AG, and can store the obtained first identifier I10 in the memory·resource. When the release request is made, the first terminal 4 can obtain the first identifier I10 of the proxy entrusting individual PR from the memory·resource. When a relationship is pre-established between the proxy entrusting individual PI and the proxy entrusting individual PR, the first identifier I10 of the proxy entrusting individual PR can also be pre-stored in the memory·resource. In addition, when the first terminal 4 sends a release request including the first identifier I10 of the proxy individual PI, the first terminal 4 can obtain the first identifier I10 of the proxy individual PI at any time. In one example, the first identifier I10 of the proxy individual PI can be pre-stored in a memory·resource. The first terminal 4 can obtain the first identifier I10 of the proxy individual PI from the memory·resource.

[0158] Similarly, when the second terminal 5 sends a release request including the first identifier I10 of the proxy client PR, the second terminal 5 can obtain the first identifier I10 of the proxy client PR at any time. In one example, when verifying or associating the proxy right, the second terminal 5 can obtain the first identifier I10 of the proxy client PR and store the obtained first identifier I10 in the memory·resource. When requesting a release, the second terminal 5 can obtain the first identifier I10 of the proxy client PR from the memory·resource. When the second terminal 5 sends an authentication request including the first identifier I10 of the proxy client PI, the second terminal 5 can obtain the first identifier I10 of the proxy client PI in the same way as the first identifier I10 of the proxy client PR. In addition, when the second terminal 5 sends a release request including the second identifier I20, the second terminal 5 can obtain the second identifier I20 at any time. In one example, the second identifier I20 can be stored in the memory·resource in advance. The second terminal 5 can obtain the second identifier I20 from the memory·resource.

[0159] Figure 6 An example of the process of disassociating according to the present embodiment is schematically shown. Figure 6 In the example, as the first path, the first terminal 4 directly sends a release request to the management server 1 (step SZ10). In addition, as the second path, the first terminal 4 gives an instruction to the second terminal 5 (step SZ10A), so that the second terminal 5 directly sends a release request to the management server 1 (step SZ11A). However, the sending path of the release request may not be limited to such an example. The first terminal 4 may indirectly send a release request to the management server 1 via an external computer such as the first server 2. In the second path, the second terminal 5 may indirectly send a release request to the management server 1 via an external computer such as the second server 3. In addition, the starting point of the release request may not be limited to the first terminal 4. In another example, the second terminal 5 may also send a release request to the management server 1 directly or indirectly. In addition, the second terminal 5 may also give an instruction to the first terminal 4, so that the first terminal 4 directly or indirectly sends a release request to the management server 1. After receiving the release request, the management server 1 refers to the association information D10 and cancels the correspondence specified by the identifier contained in the release request. After the release process, the management server 1 may send a notification indicating the result of the release process to at least one of the first terminal 4 and the second terminal 5, as in the case of association setting. In addition, the management server 1 may send a notification to the terminal 6 of the proxy requesting individual PR to inform that the association relationship has been released.

[0160] In one example, the processing of the release request may include authentication processing of at least one of the first object and the second object. The authentication processing during the release may also be the same as the authentication processing during the association setting. However, the authentication processing may not be performed during the release request. In another example, the processing of the release request may be simplified by omitting the authentication processing.

[0161] The trigger for the release request can be appropriately set according to the implementation method. In one example, when at least one of the first object and the second object is a user, the release request can be sent from at least one of the first terminal 4 and the second terminal 5 through the operation of the user (including the proxy user) on at least one of the first terminal 4 and the second terminal 5. That is, the trigger for the release request can be an operation performed by the user. In another example, arbitrary information processing can be performed by at least one of the first terminal 4 and the second terminal 5 along with the elimination of the utilization relationship. The release request can be sent from at least one of the first terminal 4 and the second terminal 5 using the execution of the information processing as a trigger. For example, the arbitrary information processing can be data exchange between the first terminal 4 and the second terminal 5. The method of data exchange during the association release can be the same as the data exchange during the association setting. It can be appropriately distinguished whether it is data exchange during the association setting or data exchange during the association release. For example, in Figure 2 In the example, the second terminal 5 may be provided with respective sensor devices at the entrance and exit, such as at a bus boarding and alighting gate, a railway ticket gate, etc. In this case, it is possible to distinguish whether the data exchange is at the time of association setting or at the time of association removal based on the sensor device used for data exchange. In addition, for example, when the application of the terminal executes data exchange, the application may be configured to be switchable between an association setting mode and an association removal mode. In this case, it is possible to distinguish whether the association is set or at the time of association removal based on the mode of the application.

[0162] (II) Conditions for rescission

[0163] The release condition indicates a condition for releasing the correspondence relationship of the object. The release condition can be defined appropriately according to the embodiment.

[0164] In one example, the release condition may be defined as releasing the correspondence at an arbitrarily set release time. For example, the release time may be given by a user's designation, a designation from another application (scheduler, etc.), etc. In this case, the management server 1 may release the correspondence of the object upon the arrival of the release time. The release time may be set as the validity period of the above-mentioned association information D10. When the release time is set with the validity period, the management server 1 may deem the correspondence of the object to be released in correspondence with the arrival of the release time.

[0165] In addition, in another example, the number of correspondences that can be set for the same individual of each object can be infinite or limited. In the case where the number of correspondences that can be set is limited, an upper limit (threshold) can also be set for the number of correspondences that can be set for the same individual. The threshold can be given appropriately. In the case where the number of correspondences set for the corresponding individuals of at least one of the first object and the second object exceeds the upper limit, the management server 1 can cancel at least any one of the correspondences set for the corresponding individuals. Which correspondence to cancel can be appropriately determined based on priority, order, type of object, etc. The management server 1 can also send an inquiry related to the cancellation to at least one of the first terminal 4 and the second terminal 5, and decide the correspondence to be cancelled based on the response obtained.

[0166] For example, Figure 2 As shown in the example, it is assumed that the first object is a user and the second object is a scene of a utilization object. In this case, the number of users who can be associated with the same utilization object can be infinite or limited. In the case where the number of users who can be associated is limited, the upper limit of the number of users who can be associated can be appropriately given according to the threshold. The threshold can be set according to the attribute of the utilization object (for example, the number of possible passengers). When the management server 1 newly accepts the setting of the correspondence relationship between the utilization object and the corresponding individual, it can refer to the association information D10 to extract the previous correspondence relationship set and maintained by the utilization object relative to the corresponding individual. In the case where the duplication of the setting of the correspondence relationship between the utilization object and the corresponding individual exceeds the threshold due to the setting of the newly accepted correspondence relationship, the management server 1 can cancel the request for the setting of the newly accepted correspondence relationship, or cancel at least any one of the extracted previous correspondence relationships. In the case of canceling the previous correspondence relationship, the management server 1 can decide the correspondence relationship to be canceled according to the priority and order of the user (for example, the earlier the correspondence relationship is set, the more it is to be canceled).

[0167] As a specific example, Figure 2 In the example, it is assumed that the mobile object is a private car, and the first user and the second user are, for example, family members, and therefore share the private car of the object. The private car can be replaced by a permanent object. For the sake of convenience, it is assumed that the number of users who can be associated with the private car of the object is 1. In this case, the management server 1 can also be configured to: during the period in which the correspondence between one of the first user and the second user and the private car of the object is set, in response to the acceptance of the setting of the correspondence between the other party and the private car of the object, the previous correspondence (the correspondence between one party and the private car of the object) is canceled.

[0168] For users, it can also be the same. That is, the number of objects that can be associated with the same user can be infinite or limited. When the number of objects that can be associated is limited and the number of correspondences set for the user exceeds the upper limit, the management server 1 can cancel the request for setting a newly accepted correspondence, or cancel at least any one of the extracted previous correspondences. In the case of canceling the previous correspondence, the management server 1 can decide the correspondence to be canceled based on the priority and type of the object (for example, whether it is a permanent object or a temporary object).

[0169] (III) Termination by the individual who entrusted the agency

[0170] In the case of agency, the correspondence between the proxy entrusting individual PR and the target individual TA set by the proxy individual PI can be released by the proxy entrusting individual PR. The method of release by the proxy entrusting individual PR can be appropriately designed according to the implementation. In this implementation, at least one of the following two methods can be adopted.

[0171] (III-1) Request for termination from the individual who entrusted the agency

[0172] Fig. 7A An example of a process of association release (first release method) performed by the proxy client individual PR is schematically shown. In the first release method, the management server 1 can receive a release request from the terminal 6 of the proxy client individual PR. Therefore, the management server 1 can also be configured to release the correspondence between the proxy client individual PR and the target individual TA in response to receiving the release request from the terminal 6.

[0173] Similar to the release request from at least one of the first terminal 4 and the second terminal 5, the release request from the terminal 6 may be configured to include at least one of the first identifier I10 of the proxy entrusting individual PR, the first identifier I10 of the proxy individual PI, and the second identifier I20 of the target individual TA, indicating the corresponding relationship of the release object. The release request from the terminal 6 may be configured to include replacement information, indicating the corresponding relationship of the release object.

[0174] The transmission path of the release request may be appropriately selected according to the implementation mode. Fig. 7AIn the example, the terminal 6 directly sends a release request to the management server 1 (step SZ20). The sending path of the release request may not be limited to such an example. The terminal 6 may indirectly send the release request to the management server 1 via the first server 2, the first terminal 4, the second terminal 5, etc. The terminal 6 may also give an instruction to at least one of the first terminal 4 and the second terminal 5 so that the management server 1 directly or indirectly sends the release request to at least one of the first terminal 4 and the second terminal 5. The other structures of the release request from the terminal 6 may be the same as the release request from at least one of the first terminal 4 and the second terminal 5 described above.

[0175] (III-2) Establishment of new correspondence relationships by the agent entrusting the individual

[0176] Figure 7B An example of the process of association release (second release method) performed by the proxy entrusting individual PR is schematically shown. In the second release method, the management server 1 can also be configured to release the correspondence between the proxy entrusting individual PR and the object individual TA according to the correspondence between the proxy entrusting individual PR and another individual TO of the second object set by the proxy entrusting individual PR. That is, the management server 1 can release the correspondence between the proxy entrusting individual PI and the object individual TA previously set by the proxy entrusting individual PR according to the new correspondence set by the proxy entrusting individual PR.

[0177] The correspondence between the proxy entrusting individual PR and another individual TO of the second object can be set by the above-mentioned processing of the usual path. In one example, data can be exchanged between the terminal 6 of the proxy entrusting individual PR and the terminal 5_1 of another individual TO of the second object according to the generation of the utilization relationship between the proxy entrusting individual PR and another individual TO of the second object. At least one of the terminal 6 of the proxy entrusting individual PR and the terminal 5_1 of the second object can send an association request to the management server 1. The management server 1 can set the correspondence between the proxy entrusting individual PR and another individual TO of the second object according to the association request.

[0178] By setting a new correspondence with another individual TO, the proxy entrusted individual PR can exercise authority through another individual TO. In order to prevent the exercise of authority through another individual TO from coexisting with the exercise of authority through the target individual TA, the management server 1 can cancel the previously set correspondence with the target individual TA along with the setting of the new correspondence. In another example, the management server 1 can also make the exercise of authority through another individual TO coexist with the exercise of authority through the target individual TA by maintaining both the correspondence with another individual TO and the correspondence with the target individual TA based on the proxy individual PI.

[0179] As described above, the management server 1 can terminate the corresponding relationship by receiving a termination request from at least one of the first terminal 4 and the second terminal 5 or by satisfying a predetermined termination condition. In addition, the management server 1 can also terminate the corresponding relationship based on an important factor related to the proxy entrusting individual PR. Thus, the elimination of the utilization relationship between the first object and the second object can be tracked. In addition, the associated information D10 after the termination of the corresponding relationship can be saved as a history record.

[0180] (Use the continued confirmation process)

[0181] As one of the optional structures, after setting the correspondence between the corresponding individuals of the first object and the second object, the management server 1 may further perform a process for confirming whether the utilization relationship between the corresponding individuals continues (confirmation process). In the case where the correspondence is set through a proxy path, the management server 1 may perform a confirmation process for confirming the continuation of the utilization relationship between the proxy individual PI and the object individual TA. The method for confirming the continuation of utilization may be appropriately selected according to the implementation method. In this embodiment, as a method for confirming the utilization relationship, at least any one of the following three methods may be used.

[0182] (i-1) Confirmation processing based on authentication

[0183] In one example, the management server 1 can authenticate at least one of the first object (proxy individual PI) and the second object (object individual TA) via at least one of the first terminal 4 and the second terminal 5, thereby confirming the continuation of the utilization relationship. The authentication method is the same as the association setting, and can be performed by any method. Figure 2 In the example, for example, the user is authenticated by using an image sensor provided by the mobile body to perform face authentication of the user, using a fingerprint reader installed on a handle to perform fingerprint authentication of the user, making the user speak and using a microphone provided by the mobile body to perform voiceprint authentication, etc. The authentication process can be performed on at least one of the terminal (4, 5), the server (2, 3) and the management server 1. When the authentication process is performed on the server (2, 3), the data used for authentication can be sent directly from the terminal (4, 5) to the server (2, 3), or indirectly via an external computer such as the management server 1. When the authentication process is performed on the management server 1, the data used for authentication can be sent directly from the terminal (4, 5) to the management server 1, or indirectly via external computers such as each server (2, 3). The management server 1 can appropriately obtain the authentication result, and in the obtained authentication result, if the authentication of the object is established, it can be determined that the utilization relationship continues, and if the authentication is not established, it can be determined that the utilization relationship does not continue.

[0184] (i-2) Confirmation processing based on notification

[0185] In another example, when at least one of the first object and the second object is a user (for example, Figure 2 In the case of a situation where the management server 1 sends a confirmation notification including an operation object directly or indirectly to at least one of the first terminal 4 and the second terminal 5, the operation object may be, for example, a confirmation button, a return button, a link, etc. The destination of the confirmation notification does not necessarily have to correspond to the user. Figure 2 In the case of the above, the management server 1 may send a confirmation notification to at least one of the first terminal 4 and the second terminal 5. The sending object of the confirmation notification may be the same as or different from the sending object of the notification indicating the result of the processing related to the association. The confirmation notification may be configured to return a response to the management server 1 directly or indirectly based on the user's operation on the operating object. The management server 1 may be configured to determine that the utilization relationship continues when a response based on the operation of the operating object is received within a prescribed period, and determine that the utilization relationship does not continue when no response is received.

[0186] (i-3) Confirmation Processing Based on Location Information

[0187] Figure 8 An example of the confirmation process of the continuation of use involved in the present embodiment is schematically shown. In the case of tracking the use relationship in the real world, the first terminal 4 may include a positioning module 47. The first terminal 4 may also be configured to measure the current position of the first terminal 4 through the positioning module 47 of the first terminal 4, and send the measurement result of the current position of the first terminal 4 to the management server 1. In addition, the second terminal 5 may include a positioning module 57. The second terminal 5 may also be configured to measure the current position of the second terminal 5 through the positioning module 57 of the second terminal 5, and send the measurement result of the current position of the second terminal 5 to the management server 1.

[0188] Correspondingly, the management server 1 can also be constructed as follows: after setting the corresponding relationship between the proxy entrusting individual PR and the object individual TA, the measurement results of the current position (RP10, RP20) of each terminal (4, 5) are received from each terminal (4, 5), and it is determined in real time whether the received measurement results of the current position (RP10, RP20) of each terminal (4, 5) meet the conditions of the utilization relationship. When the measurement results of the current position (RP10, RP20) of each terminal (4, 5) meet the conditions of the utilization relationship, it is determined that the utilization relationship between the proxy individual PI and the object individual TA continues, otherwise it is determined that the utilization relationship does not continue.

[0189] The conditions of the utilization relationship can be appropriately set according to the embodiment, such as the degree of proximity to the user riding on the moving body. In one example, the conditions of the utilization relationship can be specified by a range DR of distance based on the current position RP10 of the first terminal 4 or the current position RP20 of the second terminal 5. In this case, whether the conditions of the utilization relationship are satisfied can be determined based on whether the user is within the range DR. Figure 8 A scenario is assumed in which the current position RP10 of the first terminal 4 is used as a reference. In this scenario, since the current position RP20 of the second terminal 5 is within the range DR, it can be determined that the condition of the utilization relationship is satisfied. On the other hand, since the current position RP20 of the second terminal 5 is outside the range DR, it can be determined that the condition of the utilization relationship is not satisfied.

[0190] In addition, the range DR can be appropriately set so as to be able to determine the second object with which the utilization relationship has been established. The shape of the range DR can be arbitrarily specified. The range DR can be specified so that the distances in each direction are the same, or it can be specified so that the distances in at least some directions are different.

[0191] The type of each positioning module (47, 57) is not particularly limited and can be appropriately selected according to the implementation. Each positioning module (47, 57) can be, for example, a GPS (Global Positioning Satellite) module, a GNSS (Global Navigation Satellite System) module, or the like.

[0192] The current position (RP10, RP20) of each terminal (4, 5) can be sent to the management server 1 at any time before the confirmation process is performed. In one example, each terminal (4, 5) can report the information of each current position to the management server 1 as a spontaneous information process such as periodic transmission. In this case, the management server 1 can use the current positions most recently reported from each terminal (4, 5) as each current position (RP10, RP20) to determine whether the condition of the utilization relationship is satisfied. In another example, the management server 1 can directly or indirectly send a request to each terminal (4, 5) at any time before the confirmation process is performed. Each terminal (4, 5) can report the most recent current positions (RP10, RP20) to the management server 1 in real time based on the request. The management server 1 can determine whether the condition of the utilization relationship is satisfied based on the information of the most recent current positions (RP10, RP20) reported in real time. In any form, when the latest current location information of at least one of the first terminal 4 and the second terminal 5 cannot be obtained due to power failure or the like, the management server 1 may determine that the condition of the utilization relationship is not satisfied.

[0193] In addition, the reporting object of the information of each current location can be appropriately selected according to the implementation method. In one example, the reporting object of the information of each current location can be the management server 1. Correspondingly, the information of each current location can be managed by the management server 1. In another example, the reporting object of the information of each current location can be an external server (the first server 2, the second server 3, etc.). Correspondingly, the information of each current location can be managed by the external server. The management server 1 can also obtain the information of each current location (RP10, RP20) from the external server. Reporting to the management server 1 can include reporting directly to the management server 1 and indirectly reporting to the management server 1 via an external server. The reported information of each current location can be cancelled after not being used for confirmation processing, or it can be saved as a historical record for at least a specified period. In the case of adopting the form of reporting directly to the management server 1, the information of each current location can be saved in the management server 1, or it can be saved in an external server (the first server 2, the second server 3, the NAS, etc.). Similarly, in the case of adopting the form of reporting indirectly to the management server 1, the information of each current location can be saved in the management server 1, or it can be saved in an external server. According to an example of the present embodiment, by using the relationship between the positions of the first terminal 4 and the second terminal 5 , it is possible to appropriately confirm the continuation of the utilization relationship.

[0194] (ii)

[0195] In the case where it is determined that the utilization relationship continues, the management server 1 may maintain the setting of the correspondence relationship between the corresponding individuals. On the other hand, in the case where it is determined that the utilization relationship does not continue, the management server 1 may cancel the correspondence relationship between the corresponding individuals. In the case of agency, based on the fact that the utilization relationship between the proxy individual PI and the object individual TA continues, the management server 1 may maintain the setting of the correspondence relationship between the proxy entrusting individual PR and the object individual TA. On the other hand, based on the fact that the utilization relationship between the proxy individual PI and the object individual TA does not continue, the management server 1 may cancel the correspondence relationship between the proxy entrusting individual PR and the object individual TA. The management server 1 may be configured to repeatedly perform the confirmation process periodically or irregularly after the corresponding relationship is set until the corresponding relationship is canceled, thereby updating the status of the corresponding relationship.

[0196] In addition, when it is determined that the utilization relationship is not continuing, the management server 1 can cancel the corresponding relationship immediately, or cancel it after retaining it for a specified period of time. The timing of the cancellation can be appropriately determined according to the implementation method. In the case of the latter method, when the continuation of the utilization relationship is confirmed by at least one of the above methods during the retention, the management server 1 can revive the setting of the corresponding relationship. In this way, in the case of temporary departure, the corresponding relationship is not immediately cancelled, but the setting of the corresponding relationship can be quickly restored.

[0197] (Use scenarios of related information)

[0198] As described above, the association information D10 can be used in various scenarios. In one example, the association information D10 can be used to track only the generation and elimination of the relationship between the first object and the second object.

[0199] In another example, the association information D10 can be used for the following purpose, namely: during the period when a correspondence is set between the first object and the second object, for at least a part of the authority associated with either the first object or the second object, at least a part of the authority can be exercised by the other party. For example, the management server 1 can be configured to: based on the fact that the correspondence between the first object and the second object is established, it also executes the validation of the exercise of the authority to establish a connection with the corresponding first object via the second object for which the correspondence is set. In addition, the management server 1 can be configured to: based on the fact that the correspondence is released, it also executes the invalidation of the exercise of the authority. In the case of agency, based on the fact that the correspondence between the proxy entrusting individual PR and the object individual TA is set by the proxy individual PI, the management server 1 can enable the proxy individual PI to validate the proxy exercise of at least a part of the authority of the proxy entrusting individual PR via the object individual TA. On the other hand, based on the fact that the correspondence is released, the management server 1 can invalidate the proxy exercise of the authority. Figure 2 In the example of , the association information D10 can be used to enable the mobile object to exercise at least a part of the authority to establish an association with the user during the period when the corresponding relationship is set between the user and the mobile object. According to an example of this embodiment, by setting and releasing the corresponding relationship, the second object can control the permission and prohibition of the exercise of the authority of the first object.

[0200] Fig. 9 An example of a usage scenario of the related information D10 according to the present embodiment is schematically shown. Fig. 9 Assuming that Figure 2In the example, a scenario is described in which the authority to establish an association with a user is exercised from a mobile body. In the case of a proxy, the user who attempts to exercise the authority is a proxy user (proxy individual PI). In addition, it is assumed that the association information D10 is constituted by including a first identifier I10 and a second identifier I20 to represent a first object (user) and a second object (mobile body) for which a corresponding relationship is set. Furthermore, a scenario is assumed in which the user's information is managed by a first server 2 and the mobile body's information is managed by a second server 3. The external system SY1 is configured to be equipped in a place (for example, a parking lot, etc.) where various services are exercised, and to perform information processing for providing the service of the object to a user who has authority over the object. The structure and services of the external system SY1 may not be particularly limited and may be appropriately selected according to the implementation method.

[0201] First, in step U10, the external system SY1 may obtain the second identifier I20 (mobile body identifier) ​​from the mobile body of the object. The method for obtaining the second identifier I20 may be appropriately selected according to the implementation. In one example, the external system SY1 may obtain the second identifier I20 from the second terminal 5 by exchanging data with the second terminal 5. The method of data exchange may be the same as the data exchange between the first terminal 4 and the second terminal 5. In another example, when the second identifier I20 is a car registration number, the external system SY1 may capture the license plate number through an image sensor and analyze the obtained image to obtain the second identifier I20.

[0202] In step U20, the external system SY1 can use the obtained second identifier I20 as a query to inquire the management server 1 whether a valid correspondence exists at the object time for the moving body of the object. Valid means that a setting of a correspondence is maintained at the object time. In addition, basically, the object time is the current (instant), but it is not limited to this. For example, in the case of performing a settlement process for a past time, the object time can be a past time. In the case of a valid correspondence, the first identifier I10 (user identifier) ​​of the user who establishes an association with the moving body of the object is extracted. In the case of an agent, the user identifier of the agent entrusting the user (the first identifier I10 of the agent entrusting individual PR) is extracted. On the other hand, when there is no valid correspondence and the user who establishes an association with the moving body of the object is not extracted, the present processing can be terminated.

[0203] In step U30, the external system SY1 can use the extracted first identifier I10 as a query to inquire the first server 2 about the authority that can be exercised for the user associated with the mobile body of the object. The first server 2 can refer to the first object information O10 (user information O10A) to extract the authority that can be exercised by establishing a connection with the user of the object. If the authority that can be exercised is not extracted, the present process can be terminated. In addition, in the first object information O10 (user information O10A), it can also be set whether to allow the mobile body to exercise the authority according to each authority. According to this setting, the authority that can be exercised can be extracted. In addition, if the authority of the object that the external system SY1 wants to exercise is not included in the authority that can be exercised, the present process can be terminated. The authority to exercise the object can be appropriately specified at any time. In one example, the authority to exercise the object can be pre-specified by the external system SY1 or specified by the user.

[0204] In step U40, when the authority of the object is included in the authority that can be exercised, the external system SY1 can perform processing for exercising the authority of the object. Thereby, the authority associated with the user is exercised from the mobile body, and the user can receive services via the mobile body. For example, when the authority information includes information of public personal authentication, and the authority of the object is an authority related to public personal authentication, the user can receive public services via the mobile body. In addition, for example, when the authority information includes settlement information, and the authority of the object is an authority related to settlement, the user can receive settlement services via the mobile body. Settlement services can be, for example, payments of parking lot usage fees, highway fees, roadside restaurant fees, public transportation fees, rental fees, and the like. In addition, for example, when the authority information includes information related to electronic prescriptions, and the authority of the object is to collect prescription drugs issued on the electronic prescription, the user can exercise the electronic prescription via the mobile body and receive the drugs.

[0205] In the case of agency, the agent user (agent individual PI) can exercise the authority to establish an association with the agent entrusting user (agent entrusting individual PR) via the object's mobile body (object individual TA) and receive services corresponding to the result of the exercise. For example, assume that the authority information includes information related to an electronic prescription, and the object's authority is a scenario in which prescription drugs are accepted on the electronic prescription. In this case, even if the agent entrusting user does not pick up the prescription drugs himself, by granting agency rights to other users (agent users) such as taxi drivers, he can also entrust other users to collect the prescription drugs via the mobile body.

[0206] In addition, the processing sequence when exercising the above authority is only an example, and each step can be changed as much as possible. For the above processing sequence, according to the implementation method, steps can be appropriately omitted, replaced, and added. In addition, in the above processing sequence, the user can be replaced by the first object, and the mobile body can be replaced by the second object. Moreover, in the above processing sequence, "first" and "second" can be replaced.

[0207] (Data communication between devices)

[0208] The data communication between the devices (management server 1, first server 2, second server 3, first terminal 4, second terminal 5, and terminal 6) is not particularly limited and can be appropriately selected according to the implementation method. The network between the devices can be appropriately selected from, for example, the Internet, a wireless communication network, a mobile communication network, a telephone network, a dedicated network, a local area network, etc. The data communication between the devices can be encrypted by methods such as SSL (Secure Socket Layer) and TLS (Transport Layer Security). In one example, each terminal (4, 5, 6) can have a SIM (Subscriber Identity Module), and the data communication between each terminal (4, 5, 6) and the server (management server 1, first server 2, second server 3) can be performed by encrypted communication using the SIM.

[0209] [2 Structure example]

[0210] [Hardware configuration example]

[0211] (Management Server)

[0212] Fig. 10A An example of the hardware configuration of the management server 1 according to the present embodiment is schematically shown. The management server 1 according to the present embodiment is a computer to which a control unit 11, a storage unit 12, a communication interface 13, an input device 14, an output device 15, and a drive 16 are electrically connected.

[0213] The control unit 11 includes a CPU (Central Processing Unit), a RAM (Random Access Memory), a ROM (Read Only Memory), etc. as hardware processors, and executes arbitrary information processing based on programs and various data. The control unit 11 (CPU) is an example of a processor and resource of the management server 1.

[0214] The storage unit 12 may be composed of, for example, a hard disk drive, a solid state drive, a semiconductor memory, etc. The storage unit 12 (and RAM, ROM) is an example of a memory resource. In the present embodiment, the storage unit 12 stores various information such as the management program 81 and the associated information D10. The management program 81 is used to cause the management server 1 to perform information processing related to setting and canceling the correspondence relationship between the first object and the second object (described later). Fig. 12A and Fig. 12B The management program 81 includes a series of commands for information processing.

[0215] The communication interface 13 is configured to perform wired or wireless communication via a network. The communication interface 13 may be configured, for example, by a wired LAN (Local Area Network) module, a wireless LAN module, etc. The management server 1 may perform data communication with other computers (the first terminal 4, the second terminal 5, etc.) via the communication interface 13.

[0216] The input device 14 is, for example, a device for inputting, such as a mouse, a keyboard, or an operation button. The output device 15 is, for example, a device for outputting, such as a display, a speaker, or the like. The operator can operate the management server 1 by using the input device 14 and the output device 15. The input device 14 and the output device 15 may be integrally formed by, for example, a touch panel display or the like. The input device 14 and the output device 15 may be connected via an external interface. The external interface may be appropriately configured, for example, to be connected to an external device in a wired or wireless manner via a USB (Universal Serial Bus) port, a dedicated port, a wireless communication port, or the like.

[0217] The drive 16 is a device for reading various information such as programs stored in the storage medium 91. At least one of the management program 81 and the associated information D10 can be stored in the storage medium 91 instead of the storage unit 12, or can be stored in the storage medium 91 in addition to the storage unit 12. The storage medium 91 is configured to store various information (stored programs, etc.) through electrical, magnetic, optical, mechanical or chemical effects in a manner that a machine such as a computer can read the information. The management server 1 can obtain at least one of the management program 81 and the associated information D10 from the storage medium 91. In addition, the storage medium 91 can be a disk-type storage medium such as a CD, DVD, or a storage medium other than a disk-type storage medium such as a semiconductor memory (for example, a flash memory). The type of the drive 16 can be appropriately selected according to the type of the storage medium 91. The drive 16 can also be connected via an external interface.

[0218] In addition, regarding the specific hardware structure of the management server 1, according to the implementation method, structural elements can be appropriately omitted, replaced, and added. For example, the control unit 11 may also include multiple hardware processors. The hardware processor may be composed of a microprocessor, an FPGA (field-programmable gate array), a DSP (digital signal processor), a GPU (Graphics Processing Unit), an ASIC (application specific integrated circuit), etc. At least one of the input device 14, the output device 15, and the driver 16 may also be omitted. The associated information D10 may also be stored in an external computer (for example, NAS, etc.) that the management server 1 can access instead of being stored in the storage unit 12. The management server 1 may also be composed of multiple computers. In this case, the hardware structure of each computer may be consistent or inconsistent. In addition to being designed as an information processing device dedicated to the service provided, the management server 1 may also be a general-purpose server device, a general-purpose computer, etc.

[0219] (Server 1)

[0220] Fig. 10B An example of the hardware structure of the first server 2 according to the present embodiment is schematically shown. The first server 2 according to the present embodiment is a computer to which a control unit 21, a storage unit 22, a communication interface 23, an input device 24, an output device 25, and a drive 26 are electrically connected. The control unit 21 to the drive 26 and the storage medium 92 of the first server 2 can be configured to be the same as the control unit 11 to the drive 16 and the storage medium 91 of the management server 1 described above.

[0221] The control unit 21 (CPU) is an example of a processor resource of the first server 2, and the storage unit 22 (and RAM, ROM) is an example of a memory resource of the first server 2. In the present embodiment, the storage unit 22 stores various information such as a program 82 and the first object information O10. The program 82 is a program for causing the first server 2 to perform information processing related to the authentication of the first object. The program 82 includes a series of commands for the information processing. At least one of the program 82 and the first object information O10 can be stored in the storage medium 92 instead of the storage unit 22, or can be stored in the storage medium 92 in addition to the storage unit 22. The first server 2 can obtain at least one of the program 82 and the first object information O10 from the storage medium 92. The first server 2 can perform data communication with other computers via the communication interface 23. The first server 2 can be operated via the input device 24 and the output device 25.

[0222] In addition, regarding the specific hardware structure of the first server 2, structural elements can be appropriately omitted, replaced, and added according to the implementation method. For example, the control unit 21 may also include multiple hardware processors. The hardware processor may be composed of a microprocessor, an FPGA, a DSP, a GPU, an ASIC, etc. At least any one of the input device 24, the output device 25, and the drive 26 may also be omitted. The first object information O10 may also be stored in an external computer (for example, NAS, etc.) that the first server 2 can access instead of being stored in the storage unit 22. The first server 2 may also be composed of multiple computers. In this case, the hardware structure of each computer may be consistent or inconsistent. In addition to being designed as an information processing device dedicated to the service provided, the first server 2 may also be a general-purpose server device, a general-purpose computer, etc.

[0223] (Server 2)

[0224] Fig. 10C An example of the hardware structure of the second server 3 involved in the present embodiment is schematically shown. The second server 3 involved in the present embodiment is a computer electrically connected to a control unit 31, a storage unit 32, a communication interface 33, an input device 34, an output device 35, and a driver 36. The control unit 31 to the driver 36 and the storage medium 93 of the second server 3 can be configured to be the same as the control unit 11 to the driver 16 and the storage medium 91 of the above-mentioned management server 1.

[0225] The control unit 31 (CPU) is an example of a processor resource of the second server 3, and the storage unit 32 (and RAM, ROM) is an example of a memory resource of the second server 3. In the present embodiment, the storage unit 32 stores various information such as a program 83 and the second object information O20. The program 83 is a program for causing the second server 3 to perform information processing related to the authentication of the second object. The program 83 includes a series of commands for the information processing. At least one of the program 83 and the second object information O20 can be stored in the storage medium 93 instead of the storage unit 32, or can be stored in the storage medium 93 in addition to the storage unit 32. The second server 3 can obtain at least one of the program 83 and the second object information O20 from the storage medium 93. The second server 3 can perform data communication with other computers via the communication interface 33. The second server 3 can be operated via the input device 34 and the output device 35.

[0226] In addition, regarding the specific hardware structure of the second server 3, structural elements can be appropriately omitted, replaced, and added according to the implementation method. For example, the control unit 31 may also include multiple hardware processors. The hardware processor may be composed of a microprocessor, an FPGA, a DSP, a GPU, an ASIC, etc. At least any one of the input device 34, the output device 35, and the drive 36 may also be omitted. The second object information O20 may also be stored in an external computer (for example, NAS, etc.) accessible to the second server 3 instead of the storage unit 32. The second server 3 may also be composed of multiple computers. In this case, the hardware structure of each computer may be consistent or inconsistent. In addition to being designed as an information processing device dedicated to the service provided, the second server 3 may also be a general-purpose server device, a general-purpose computer, etc.

[0227] (Terminal 1)

[0228] Fig. 10D An example of the hardware structure of the first terminal 4 involved in the present embodiment is schematically shown. The first terminal 4 involved in the present embodiment is a computer electrically connected to a control unit 41, a storage unit 42, a communication interface 43, an input device 44, an output device 45, a driver 46, and a positioning module 47. The control unit 41 to the driver 46 and the storage medium 94 of the first terminal 4 can be configured to be the same as the control unit 11 to the driver 16 and the storage medium 91 of the above-mentioned management server 1.

[0229] The control unit 41 (CPU) is an example of a processor resource of the first terminal 4, and the storage unit 42 (and RAM, ROM) is an example of a memory resource of the first terminal 4. In the present embodiment, the storage unit 42 stores various information such as the program 84 and the authority verification information AU. The program 84 is used to cause the first terminal 4 to execute information processing related to the association (described later). Fig. 12A and Fig. 12B ) program. The program 84 includes a series of instructions for the information processing. The program 84 may be stored in the storage medium 94 instead of the storage unit 42, or may be stored in the storage medium 94 in addition to the storage unit 42. The first terminal 4 may obtain the program 84 from the storage medium 94. The first terminal 4 may be operated via the input device 44 and the output device 45.

[0230] The first terminal 4 can perform data communication with other computers via the communication interface 43. In one example, the communication interface 43 can be composed of multiple types of modules. For example, the communication interface 43 can have a short-range wireless communication module 431 and other wireless communication modules (for example, a cellular communication module, etc.). The first terminal 4 can perform data communication with the second terminal 5 via the short-range wireless communication module 431, and perform data communication with the server (management server 1, first server 2, second server 3, etc.) via other wireless communication modules.

[0231] In addition, regarding the specific hardware structure of the first terminal 4, according to the implementation method, structural elements can be appropriately omitted, replaced, and added. For example, the control unit 41 may also include multiple hardware processors. The hardware processor may be composed of a microprocessor, an FPGA, a DSP, a GPU, an ASIC, an ECU (Electronic Control Unit), etc. At least one of the input device 44, the output device 45, the driver 46, and the positioning module 47 may also be omitted. The storage unit 42 may store the first identifier I10 of the proxy individual PI. Alternatively, the first identifier I10 of the proxy individual PI may not be stored in the storage unit 42, but may be obtained each time. In order to obtain data such as identifiers and information for authentication, the first terminal 4 may also be equipped with data acquisition devices such as sensors and reading devices. The first terminal 4 may also be composed of multiple computers. In this case, the hardware structure of each computer may be consistent or inconsistent. In addition to being designed as an information processing device dedicated to the service provided, the first terminal 4 may also be a general-purpose computer, terminal device (for example, a smartphone, a tablet PC, etc.), etc.

[0232] (Terminal 2)

[0233] Fig. 10E An example of the hardware structure of the second terminal 5 involved in the present embodiment is schematically shown. The second terminal 5 involved in the present embodiment is a computer electrically connected to a control unit 51, a storage unit 52, a communication interface 53, an input device 54, an output device 55, a driver 56, and a positioning module 57. The control unit 51 to the driver 56 and the storage medium 95 of the second terminal 5 can be configured to be the same as the control unit 11 to the driver 16 and the storage medium 91 of the above-mentioned management server 1.

[0234] The control unit 51 (CPU) is an example of a processor resource of the second terminal 5, and the storage unit 52 (and RAM, ROM) is an example of a memory resource of the second terminal 5. In the present embodiment, the storage unit 52 stores various information such as the program 85 and the second identifier I20 of the target individual TA. The program 85 is used to cause the second terminal 5 to execute information processing related to association (described later). Fig. 12A and Fig. 12B ). The program 85 includes a series of instructions for the information processing. At least one of the program 85 and the second identifier I20 can be stored in the storage medium 95 instead of the storage unit 52, or can be stored in the storage medium 95 in addition to the storage unit 52. The second terminal 5 can obtain at least one of the program 85 and the second identifier I20 from the storage medium 95. The second terminal 5 can be operated via the input device 54 and the output device 55.

[0235] The second terminal 5 can perform data communication with other computers via the communication interface 53. In one example, the communication interface 53 can be composed of multiple types of modules, similar to the first terminal 4. For example, the communication interface 53 can include a short-range wireless communication module 531 and other wireless communication modules. The second terminal 5 can perform data communication with the first terminal 4 via the short-range wireless communication module 531, and perform data communication with the server via other wireless communication modules.

[0236] In addition, regarding the specific hardware structure of the second terminal 5, structural elements can be appropriately omitted, replaced, and added according to the implementation method. For example, the control unit 51 may also include multiple hardware processors. The hardware processor may be composed of a microprocessor, an FPGA, a DSP, a GPU, an ASIC, an ECU, etc. At least one of the input device 54, the output device 55, the driver 56, and the positioning module 57 may also be omitted. The second identifier I20 may not be stored in the storage unit 52 but acquired each time. In order to obtain data such as identifiers and information for authentication, the second terminal 5 may also be equipped with data acquisition devices such as sensors and reading devices. The second terminal 5 may also be composed of multiple computers. In this case, the hardware structure of each computer may be consistent or inconsistent. In addition to being designed as an information processing device dedicated to the service provided, the second terminal 5 may also be a general-purpose computer, terminal device, etc.

[0237] (terminal)

[0238] Fig.10F An example of the hardware structure of the terminal 6 involved in this embodiment is schematically shown. The terminal 6 involved in this embodiment is a computer electrically connected to a control unit 61, a storage unit 62, a communication interface 63, an input device 64, an output device 65, and a driver 66. The control unit 61 to the driver 66 and the storage medium 96 of the terminal 6 can be configured to be the same as the control unit 11 to the driver 16 and the storage medium 91 of the above-mentioned management server 1.

[0239] The control unit 61 (CPU) is an example of a processor resource of the terminal 6, and the storage unit 62 (and RAM, ROM) is an example of a memory resource of the terminal 6. In the present embodiment, the storage unit 62 stores various information such as the program 86 and the first identifier I10 of the proxy entrusting individual PR. The program 86 is a program for causing the terminal 6 to execute information processing related to the setting and release of the correspondence relationship based on the proxy. The program 86 includes a series of commands for the information processing. At least one of the program 86 and the first identifier I10 can also be stored in the storage medium 96 instead of the storage unit 62, or can be stored in the storage medium 96 in addition to the storage unit 62. The terminal 6 can obtain at least one of the program 86 and the first identifier I10 from the storage medium 96. The terminal 6 can perform data communication with other computers via the communication interface 63. The terminal 6 can be operated via the input device 64 and the output device 65.

[0240] In addition, regarding the specific hardware structure of the terminal 6, according to the implementation method, structural elements can be appropriately omitted, replaced, and added. For example, the control unit 61 may also include multiple hardware processors. The hardware processor may be composed of a microprocessor, FPGA, DSP, GPU, ASIC, ECU (Electronic Control Unit), etc. At least one of the input device 64, the output device 65, and the driver 66 may also be omitted. The first identifier I10 may not be stored in the storage unit 62 but acquired each time. Similar to the first terminal 4 and the second terminal 5, in order to obtain data such as identifiers and certificates, the terminal 6 may also have data acquisition devices such as sensors and reading devices. The communication interface 63 may have a short-range wireless communication module and other wireless communication modules. The terminal 6 may be configured to be able to measure the current position of the terminal 6 by having a positioning module. The terminal 6 may also be composed of multiple computers. In this case, the hardware structure of each computer may be consistent or inconsistent. In addition to being designed as an information processing device dedicated to the service provided, the terminal 6 may also be a general-purpose computer, terminal device, etc.

[0241] [Software structure example]

[0242] Fig.11 An example of the software configuration of each device (the management server 1 , the first server 2 , the second server 3 , the first terminal 4 , the second terminal 5 , and the terminal 6 ) according to the present embodiment is schematically shown.

[0243] (Management Server)

[0244] The control unit 11 of the management server 1 expands the management program 81 stored in the storage unit 12 into the RAM, and the CPU executes the commands included in the management program 81. Thus, the management server 1 operates as a computer including the receiving unit 111, setting unit 112, canceling unit 113, and notifying unit 114 as software modules.

[0245] The receiving unit 111 is configured to directly or indirectly receive an association request from a terminal of at least one of the first object and the second object based on the generation of a utilization relationship between the corresponding individuals of the first object and the second object. The receiving unit 111 is configured to receive a setting entrustment of a corresponding relationship between the corresponding individuals of the first object and the second object by receiving the association request. In the case of an agent, the receiving unit 111 is configured to receive an association request from at least one of the first terminal 4 and the second terminal 5 based on the generation of a utilization relationship between the agent individual PI of the first object and the object individual TA of the second object. The receiving unit 111 is configured to receive a setting entrustment of a corresponding relationship between the agent entrusting individual PR of the first object and the object individual TA of the second object by receiving the association request.

[0246] The setting unit 112 is configured to perform a setting process of a correspondence relationship between the first object and the corresponding individuals of the second object based on the association request. In the case of a proxy, the setting unit 112 is configured to set a correspondence relationship between the proxy entrusting individual PR and the object individual TA based on the fact that the authentication of the proxy entrusting individual PR is established. The releasing unit 113 is configured to perform a release process of the correspondence relationship in response to receiving a release request from at least one of the first terminal 4 and the second terminal 5 or the establishment of a predetermined release condition. The releasing unit 113 is configured to perform a release process of the correspondence relationship based on an important factor related to the proxy entrusting individual PR.

[0247] The notification unit 114 is configured to send a notification indicating the result of executing the process of setting the correspondence relationship to at least one of the first terminal 4 and the second terminal 5. The notification unit 114 is configured to send a notification indicating the result of executing the process of releasing the correspondence relationship to at least one of the first terminal 4 and the second terminal 5. The notification unit 114 is configured to send a notification indicating that the correspondence relationship is set to the terminal 6. In addition, the notification unit 114 is configured to send a notification indicating that the correspondence relationship is released to the terminal 6.

[0248] When the management server 1 performs authentication processing of at least one of the first object and the second object, the management server 1 may be further provided with an authentication unit 115 as a software module. The authentication unit 115 may be configured to perform authentication processing of at least one of the first object and the second object.

[0249] (Server 1)

[0250] In the case where the first server 2 performs the authentication process of the first object, the control unit 21 of the first server 2 can execute the command included in the program 82 through the CPU. As a result, the first server 2 can operate as a computer having an authentication unit 211 as a software module. The authentication unit 211 is configured to perform the authentication process of the first object according to the authentication request to the first object.

[0251] (Server 2)

[0252] In the case of adopting a form in which the authentication process of the second object is executed by the second server 3, the control unit 31 of the second server 3 can execute the command included in the program 83 through the CPU. Thus, the second server 3 can operate as a computer having an authentication unit 311 as a software module. The authentication unit 311 is configured to perform the authentication process of the second object according to the authentication request to the second object.

[0253] (Terminal 1)

[0254] The control unit 41 of the first terminal 4 executes the command included in the program 84 through the CPU. As a result, the first terminal 4 operates as a computer having a data exchange unit 411, a setting entrusting unit 412, and a release entrusting unit 413 as software modules. The data exchange unit 411 is configured to perform data exchange with the second terminal 5. The setting entrusting unit 412 is configured to send an association request (entrustment of association setting) to the management server 1. The release entrusting unit 413 is configured to send a release request (entrustment of association release) to the management server 1.

[0255] (Terminal 2)

[0256] The control unit 51 of the second terminal 5 executes the command included in the program 85 through the CPU. As a result, the second terminal 5 operates as a computer having a data exchange unit 511, a setting entrusting unit 512, and a release entrusting unit 513 as software modules. The data exchange unit 511 is configured to perform data exchange with the first terminal 4. The setting entrusting unit 512 is configured to send an association request to the management server 1. The release entrusting unit 513 is configured to send a release request to the management server 1.

[0257] (terminal)

[0258] The control unit 61 of the terminal 6 executes the commands included in the program 86 through the CPU. As a result, the terminal 6 operates as a computer having a proxy entrusting unit 611 and a de-entrusting unit 612 as software modules. The proxy entrusting unit 611 is configured to receive settings related to the granting of proxy rights including the designation of the proxy individual PI, and directly or indirectly send the authority granting information AG to the first terminal 4 of the designated proxy individual PI. The de-entrusting unit 612 is configured to send a de-entrusting request to the management server 1.

[0259] (other)

[0260] In the present embodiment, an example in which each software module of each device is implemented by a general-purpose CPU is described. However, part or all of the above-mentioned software modules may also be implemented by one or more dedicated processors. The above-mentioned modules may also be implemented as hardware modules. Regarding the software structure of each device, modules may be appropriately omitted, replaced, and added according to the embodiment. For example, in the case of adopting a form in which an association request is sent only from a terminal on one side of the first terminal 4 and the second terminal 5, the setting delegation unit may be omitted from the terminal on the other side. Similarly, in the case of adopting a form in which a release request is sent only from a terminal on one side of the first terminal 4 and the second terminal 5, the release delegation unit may be omitted from the terminal on the other side. The authentication unit may be omitted from the device in which the execution of the authentication process is omitted.

[0261] [3 Action Examples]

[0262] (Related settings)

[0263] Fig. 12A An example of a process sequence of association setting of the system 100 according to the present embodiment is shown. The following process sequence is an example of an information processing method executed by a computer. The process sequence of the management server 1 in the following process sequence is an example of a management method executed by a computer.

[0264] In step S10, the control unit 61 of the terminal 6 operates as the proxy entrusting unit 611, and receives settings related to the granting of proxy rights, including the designation of the proxy individual PI. The control unit 61 directly or indirectly notifies the first terminal 4 of the designated proxy individual PI of the authority granting information AG. In response, the control unit 41 of the first terminal 4 receives the authority granting information AG.

[0265] In step S20, according to the generation of the utilization relationship between the proxy individual PI and the target individual TA, the control unit 41 of the first terminal 4 operates as the data exchange unit 411 and performs data exchange with the second terminal 5. The control unit 51 of the second terminal 5 operates as the data exchange unit 511 and performs data exchange with the first terminal 4. This data exchange can be performed by short-range wireless communication. In this data exchange, the control unit 41 of the first terminal 4 entrusts the verification of the proxy right by sending the authority verification information AU to the second terminal 5.

[0266] In step S30, the control unit 51 of the second terminal 5 verifies the proxy right using the authority verification information AU according to the entrustment from the first terminal 4. The verification method of the proxy right can use at least any one of the above two methods. In the case of adopting the first method, the processing of the above steps S301 and S302 is an example of the processing of step S30. In the case of adopting the second method, the processing of the above step S305 is an example of the processing of step S30. In step S35, the branch route of the processing is determined according to the success or failure of the verification of the proxy right. In the case of successful verification, the control unit 51 of the second terminal 5 causes the processing to enter the following step S40. On the other hand, in the case of unsuccessful verification, the control unit 51 of the second terminal 5 returns the processing to step S20, urging the first terminal 4 to send the authority verification information AU again. In addition, in the case of unsuccessful verification, the first terminal 4 and the second terminal 5 can appropriately end the processing sequence related to the association setting involved in this action example.

[0267] In step S40, at least one of the first terminal 4 and the second terminal 5 sends an association request including an authentication request of the proxy entrusting individual PR to the management server 1. The control unit 41 of the first terminal 4 may also operate as a setting entrusting unit 412 and send an association request to the management server 1. The control unit 51 of the second terminal 5 may also operate as a setting entrusting unit 512 and send an association request to the management server 1. The association request may be sent jointly by the first terminal 4 and the second terminal 5, or by one of the first terminal 4 and the second terminal 5. Alternatively, the terminal of one of the first terminal 4 and the second terminal 5 may give an instruction to the terminal of the other party, and the terminal of the other party may send the association request. In addition, the association request may be sent directly to the management server 1, or may be sent indirectly via an external server. The control unit 11 of the management server 1 operates as a receiving unit 111 and receives the association request.

[0268] Furthermore, in step S40, when the first terminal 4 and the second terminal 5 jointly send the association request, one association request may be sent separately from the first terminal 4 and the second terminal 5, or the same association request may be sent. In the case of sending separately, a part of the data of the association request may be sent from the first terminal 4, and the remaining data may be sent from the second terminal 5. Partial duplication may be allowed between a part of the data and the remaining data. In step S20, in order to determine the combination of the corresponding individuals of the first object and the second object of the setting of the current request correspondence relationship, the management server 1 may appropriately determine the establishment of the correspondence of the data (i.e., identify the combination of corresponding data).

[0269] The establishment of data correspondence can be determined by any method. In one example, the data sent from each terminal (4, 5) can include shared information for determining the establishment of data correspondence. The shared information can be composed of, for example, information having a relationship such as being consistent and having a corresponding relationship. The management server 1 can determine that the data correspondence is established based on the fact that a relationship is established between the shared information included in the data received from one of the first terminal 4 and the second terminal 5 and the shared information included in the data received from the other party.

[0270] The shared information can be constructed arbitrarily. In one example, the shared information can be composed of a combination of the first identifier I10 of the proxy entrusting individual PR and the second identifier I20 of the target individual TA. The management server 1 can determine the establishment of data correspondence based on the combination of the identifiers (I10, I20) contained in the data received from the first terminal 4 and the combination of the identifiers (I10, I20) contained in the data received from the second terminal 5. The shared information can also include the first identifier I10 of the proxy individual PI. In another example, the shared information is composed of temporary information such as a random number, a time stamp, and a hash value. In this case, the management server 1 can determine the establishment of data correspondence based on the fact that the relationship between the temporary information contained in the data received from the first terminal 4 and the temporary information contained in the data received from the second terminal 5 is established. In addition, the shared information can be shared between the first terminal 4 and the second terminal 5 at any time. In a typical example, the first terminal 4 and the second terminal 5 can share the shared information when exchanging data.

[0271] In step S45, the management server 1 and the external server perform authentication of the proxy delegate individual PR based on the authentication delegation. The first server 2 is an example of an external server. In the present embodiment, the authentication process of the proxy delegate individual PR can be performed by the management server 1 or the first server 2. In one example, the control unit 11 of the management server 1 can also act as the authentication unit 115 and perform authentication of the proxy delegate individual PR. In another example, the control unit 21 of the first server 2 can also act as the authentication unit 211 and perform authentication of the proxy delegate individual PR. The management server 1 or the first server 2 can obtain data for authentication of the proxy delegate individual PR from at least one of the first terminal 4 and the second terminal 5, or can obtain it from the terminal 6 of the proxy delegate individual PR.

[0272] In addition, the processing order of step S40 and step S45 can be appropriately determined according to the implementation method. In one example, at least one of the first terminal 4 and the second terminal 5 can send an authentication request to the management server 1 or the first server 2. Based on the authentication request, the management server 1 or the first server 2 can authenticate the proxy-entrusted individual PR. The management server 1 or the first server 2 can return the authentication result of the proxy-entrusted individual PR to at least one of the first terminal 4 and the second terminal 5. For the authentication result, based on the fact that the authentication of the proxy-entrusted individual PR is established, at least one of the first terminal 4 and the second terminal 5 can also send an association request to the management server 1. In another example, at least one of the first terminal 4 and the second terminal 5 can send an association request including the authentication request to the first server 2, and the first server 2 can authenticate the proxy-entrusted individual PR based on the authentication request. When the authentication of the proxy-entrusted individual PR is established, the first server 2 can send an association request including the authentication result of the proxy-entrusted individual PR to the management server 1. In another example, at least one of the first terminal 4 and the second terminal 5 may send an association request including an authentication delegation to the management server 1. The management server 1 may perform authentication of the proxy delegate individual PR based on the authentication delegation. Alternatively, the management server 1 may also delegate authentication of the proxy delegate individual PR to the first server 2 by forwarding the authentication delegation to the first server 2. The first server 2 may perform authentication of the proxy delegate individual PR based on the delegation and return the authentication result to the management server 1. Thus, the management server 1 may obtain the authentication result of the proxy delegate individual PR.

[0273] In addition, the object of the authentication process may not be limited to the proxy entrusting individual PR. In one example, authentication of at least one of the proxy entrusting individual PI and the target individual TA may be performed together with the proxy entrusting individual PR. The control unit 11 of the management server 1 may operate as the authentication unit 115 and authenticate at least one of the proxy individual PI and the target individual TA. The control unit 21 of the first server 2 may also operate as the authentication unit 211 and authenticate the proxy individual PI. The control unit 31 of the second server 3 may also operate as the authentication unit 311 and authenticate the target individual TA.

[0274] In step S50, the branch route of the processing is determined according to whether the authentication is successful or not. When the authentication of the proxy entrusting individual PR is established, the control unit 11 of the management server 1 causes the processing to enter the following step S60. On the other hand, when the authentication of the proxy entrusting individual PR is not established, the control unit 11 of the management server 1 can return to step S45 and request at least one of the first terminal 4, the second terminal 5 and the terminal 6 to resend the data used for the authentication of the proxy entrusting individual PR. In addition, when the authentication is not established, the management server 1 can also appropriately end the processing sequence related to the association setting involved in this action example.

[0275] In step S60, the control unit 11 of the management server 1 acts as the setting unit 112 to update the association information D10 in a manner that establishes the setting of the correspondence between the first object (proxy entrusting individual PR) and the second object (target individual TA) specified by the association request. In one example, the updating of the association information D10 accompanied by the setting of the correspondence may be composed of generating new association information D10 indicating the specified correspondence. In this embodiment, the management server 1 sets the correspondence between the proxy entrusting individual PR and the target individual TA, thereby validating the proxy exercise of the authority of the proxy entrusting individual PR by the proxy individual PI via the target individual TA.

[0276] In step S70, the control unit 11 operates as the notification unit 114 to directly or indirectly send a notification indicating the result of executing the corresponding relationship setting process to at least one of the first terminal 4 and the second terminal 5. The control unit 11 may also directly or indirectly send a notification indicating that the corresponding relationship is set to the terminal 6. When the notification of the result is completed, the processing sequence related to the association setting involved in this operation example is completed.

[0277] In addition, the above processing sequence is only an example, and each step can be changed as much as possible. In addition, for the above processing sequence, steps can be appropriately omitted, replaced, and added according to the embodiment.

[0278] (Remove association)

[0279] Fig. 12B An example of the processing sequence of de-association involved in the system 100 involved in this embodiment is shown. The following processing sequence is an example of an information processing method executed by a computer. The processing sequence of the management server 1 in the following processing sequence is an example of a management method executed by a computer. Fig. 12B In the example of FIG. 1 , it is assumed that a scenario is adopted in which a release request is directly sent from the first terminal 4 to the management server 1 .

[0280] In step SZ10, the control unit 41 of the first terminal 4 operates as the release entrustment unit 413 and sends a request for release of the correspondence relationship to the management server 1. In response, the control unit 11 of the management server 1 receives the release request. The correspondence relationship for entrustment release can be appropriately specified. The trigger for the release request can be appropriately selected according to the implementation method.

[0281] In step SZ102, the control unit 11 operates as the release unit 113 to update the association information D10 in a manner that cancels the setting of the correspondence relationship specified by the received release request. In one example, updating the association information D10 along with the cancellation of the correspondence relationship may include recording information indicating that the cancellation has been completed. For example, in the association information D10 having Figure 3A In the case of a structure, the control unit 11 can cancel the correspondence of the object by adding a cancellation time or displaying a cancellation mark in the corresponding association information D10. In the case where the association information D10 is composed of a blockchain infrastructure, the control unit 11 can generate an event indicating the cancellation of the association and add the generated event to the blockchain, thereby canceling the correspondence of the object.

[0282] In step SZ103, the control unit 11 operates as the notification unit 114 and transmits the execution result of the de-linking process to the first terminal 4. When the notification of the result is completed, the processing procedure related to the de-linking according to this operation example ends.

[0283] In addition, the above processing sequence is only an example, and each step can be changed within a possible range. In addition, for the above processing sequence, according to the implementation method, steps can be appropriately omitted, replaced, and added. For example, as mentioned above, the sending path of the release request can be not limited to Fig. 12BExamples can be appropriately selected according to the implementation method. The release request can also be sent from the second terminal 5 (release delegation unit 513) or the terminal 6 (release delegation unit 612). The management server 1 (notification unit 114) can also send a notification to the terminal 6 indicating that the correspondence has been released. The processing of the release request can include authentication processing of at least one of the first object and the second object. In addition, the control unit 11 of the management server 1 can also replace the above-mentioned step SZ102 and act as the release unit 113 to release the correspondence when the prescribed release condition is met. The control unit 11 can also act as the release unit 113 to release the correspondence with the object individual TA according to the setting of the correspondence with the other individual TO of the second object by the proxy delegation individual PR. In addition, the control unit 11 can also act as the release unit 113 to perform the above-mentioned confirmation processing of the continued use at any time for the set correspondence after the correspondence is set.

[0284] [feature]

[0285] In the present embodiment, information indicating the setting of the correspondence between the proxy entrusting individual PR of the first object and the object individual TA of the second object is recorded through the processing of step S60. Through this record, the utilization relationship between the proxy individual PI corresponding to the entrustment of the proxy entrusting individual PR and the object individual TA can be tracked. In addition, security can be ensured through the verification processing of step S30 and the authentication processing of step S45. And, according to the setting of the correspondence between the proxy entrusting individual PR and the object individual TA, the proxy exercise of the authority of the proxy entrusting individual PR via the object individual TA by the proxy individual PI is validated. Thus, the proxy individual PI can exercise at least a part of the authority of the proxy entrusting individual PR in a proxy manner. Therefore, according to the present embodiment, security can be ensured, and the utilization relationship between the first object and the second object can be tracked, and during the period when the utilization relationship is established, the proxy individual PI can be granted the proxy authority for exercising at least a part of the authority of the proxy entrusting individual PR on behalf of the proxy individual PR.

[0286] [4 Modifications]

[0287] The embodiments of the present disclosure are described in detail above, but the above description is merely an illustration of the present disclosure in all aspects. It goes without saying that various improvements or modifications can be made without departing from the scope of the present disclosure. For example, the following changes can be made. In addition, the same figure marks are used for the same structural elements as the above-mentioned embodiments, and the description of the same points as the above-mentioned embodiments is appropriately omitted. The following modified examples can be appropriately combined.

[0288] In the above-mentioned embodiment, the authentication process can be performed by at least any one of the management server 1 and the external server (the first server 2, the second server 3, etc.). The data communication when performing the authentication process can be appropriately designed according to the embodiment. As an example, at least any one of the following three authentication methods can be adopted.

[0289] (A) First authentication method

[0290] Fig.14A An example of the association setting processing procedure when the first authentication method is adopted is schematically shown. Fig.14A In the example of , it is assumed that the following scenario is adopted, that is, the above-mentioned first method is adopted as the verification method of the proxy right, and the proxy entrusting individual PR and the target individual TA are authenticated when the association is set. In the first authentication method, the second terminal 5 performs the authentication process of the second object according to the request of the terminal of the first object (authentication entrustment). According to the request of the terminal of the second object (authentication entrustment), the first server 2 performs the authentication process of the first object. The first terminal 4 and the second terminal 5 entrust the authentication of the proxy entrusting individual PR and the target individual TA to the first server 2 and the second server 3 as an association request, and make the management server 1 report the authentication result. Thus, the first terminal 4 and the second terminal 5 send the association request to the management server 1. The request sent from each terminal (4, 5) to each server (2, 3) is an example of the association request including the authentication entrustment. The process until each terminal (4, 5) sends the authentication entrustment to each server (2, 3) and makes the management server 1 send the authentication result to each server (2, 3) is an example of the process in which the first terminal 4 and the second terminal 5 jointly send the association request.

[0291] The first server 2 is configured to be able to access a first storage device that stores first registered inherent information CA10 for authentication of a first object. The first storage device may be composed of at least one of a memory and resource of the first server 2 and an external storage device (NAS, etc.). The first registered inherent information CA10 may be included in the first object information O10. The second server 3 may be configured to be able to access a second storage device that stores second registered inherent information CA20 for authentication of a second object. The second storage device may be composed of at least one of a memory and resource of the second server 3 and an external storage device (NAS, etc.). The second registered inherent information CA20 may be included in the second object information O20.

[0292] Each registered inherent information (CA10, CA20) is inherent information pre-registered for the authentication of each object. As long as the inherent information can be used for authentication, its data form and structure are not particularly limited and can be appropriately selected according to the implementation method. The inherent information can be composed of any information such as object-based information, terminal-based information, temporarily generated information, and information generated by any other method.

[0293] Object-based information may be, for example, biometric information, inherently assigned identification information, etc. Biometric information may be, for example, facial images, fingerprints, voiceprints, etc. Intrinsically assigned identification information may be, for example, a car registration number, a vehicle identification number, a personal number, etc. In the case of assigning an IC tag to an object, the inherently assigned identification information may include information maintained by the IC tag. Terminal-based information may be, for example, a MAC address, terminal identification information, etc. Temporarily generated information may be, for example, a one-time password, a dedicated address (dynamically generated address), etc. Temporarily generated information may be composed of a time stamp, a random number, a hash value, etc. Information generated by any other method may include, for example, passwords, keys, information other than other symbol sequences, etc.

[0294] First, in step S10, the control unit 61 of the terminal 6 performs settings related to the granting of the proxy right, and notifies the first terminal 4 of the designated proxy individual PI of the authority granting information AG. In one example, the control unit 61 of the terminal 6 may notify the first terminal 4 of the authority granting information AG including the first identifier I10 and the contact information AU1 of the proxy entrusting individual PR. In response, the first terminal 4 receives the authority granting information AG.

[0295] In step S20, the first terminal 4 and the second terminal 5 exchange data. In the data exchange, the control unit 41 of the first terminal 4 can send the first identifier I10 and the contact information AU1 of the proxy entrusting individual PR to the second terminal 5. The control unit 51 of the second terminal 5 can obtain the first identifier I10 and the contact information AU1 of the proxy entrusting individual PR from the proxy individual PI or the first terminal 4. In addition, in the data exchange, the control unit 41 of the first terminal 4 can obtain the second identifier I20 and the second inherent information CA2 of the target individual TA from any one of the target individual TA and the second terminal 5. The method of obtaining the second identifier I20 and the second inherent information CA2 can be appropriately selected according to the implementation method. In one example, the control unit 41 of the first terminal 4 can use an input device, a sensor, etc. to obtain at least one of the second identifier I20 and the second inherent information CA2 of the target individual TA. In another example, the second identifier I20 and the second unique information CA2 may be stored in the second terminal 5 in advance, and the control unit 41 of the first terminal 4 may acquire the second identifier I20 and the second unique information CA2 by exchanging data with the second terminal 5 .

[0296] In step S301, the control unit 51 of the second terminal 5 sends an inquiry according to the contact information AU1. In step S302, the control unit 51 of the second terminal 5 receives a reply of approval as the result of the execution of the approval process. In one example, the contact information AU1 may be the contact information of the terminal 6, and the control unit 51 of the second terminal 5 may send an inquiry to the terminal 6. Based on the receipt of the inquiry, the control unit 61 of the terminal 6 may execute the approval process and return the reply of approval to the second terminal 5. The control unit 61 of the terminal 6 may also send the first inherent information CA1 of the proxy request individual PR together with the reply of approval to the second terminal 5. Correspondingly, the control unit 51 of the second terminal 5 may receive the reply of approval and the first inherent information CA1 of the proxy request individual PR from the terminal 6. In another example, the control unit 51 of the second terminal 5 may send an inquiry to an external computer, or may receive the first inherent information CA1 of the proxy request individual PR from the external computer together with the reply of approval. The method of obtaining the first inherent information CA1 may be appropriately selected according to the embodiment. In one example, the control unit 61 of the terminal 6 can obtain the first inherent information CA1 from the proxy entrusting individual PR using an input device, a sensor, etc. The terminal 6 can also store the first inherent information CA1 in advance. The control unit 51 of the second terminal 5 can directly or indirectly receive the first inherent information CA1 from the terminal 6. Each identifier (I10, I20) and each inherent information (CA1, CA2) are examples of data used for authentication. By obtaining a response indicating consent, the verification of the proxy is established.

[0297] In step SA410, the control unit 51 of the second terminal 5 sends an authentication request including the first identifier I10 and the first inherent information CA1 of the proxy request individual PR to the first server 2. In response, the control unit 21 of the first server 2 receives the authentication request of the proxy request individual PR. The control unit 21 of the first server 2 operates as an authentication unit 211 and performs authentication processing of the proxy request individual PR. In one example, the control unit 21 can use the first identifier I10 included in the authentication request as a query to retrieve the first object information O10, thereby extracting the first registered inherent information CA10 of the proxy request individual PR from the first object information O10. The control unit 21 can compare the extracted first registered inherent information CA10 with the first inherent information CA1 included in the authentication request. The comparison can be appropriately performed according to the inherent information used. The control unit 21 can determine whether the authentication of the proxy request individual PR is successful or not based on the result of the comparison. In step SA420, the control unit 21 reports the authentication result of the proxy request individual PR to the management server 1. In one example, the control unit 21 may add the first identifier I10 of the proxy request individual PR and send the authentication result of the proxy request individual PR to the management server 1. The control unit 21 may send the authentication result to the management server 1 regardless of the success of the authentication, or may send the authentication result to the management server 1 only when the authentication is successful.

[0298] On the other hand, in step SB410, the control unit 41 of the first terminal 4 sends an authentication request including the second identifier I20 and the second inherent information CA2 of the target individual TA to the second server 3. In response, the control unit 31 of the second server 3 receives the authentication request of the target individual TA. The control unit 31 of the second server 3 acts as an authentication unit 311 to perform authentication processing of the target individual TA. In one example, the control unit 31 can use the second identifier I20 included in the authentication request as a query to retrieve the second object information O20, thereby extracting the second registered inherent information CA20 of the target individual TA from the second object information O20. The control unit 31 can compare the extracted second registered inherent information CA20 with the second inherent information CA2 included in the authentication request. The comparison can be appropriately performed according to the inherent information used. The control unit 31 can determine whether the authentication of the target individual TA is successful or not based on the result of the comparison. In step SB420, the control unit 31 reports the authentication result of the target individual TA to the management server 1. In one example, the control unit 31 may add the second identifier I20 of the target individual TA and send the authentication result of the target individual TA to the management server 1. The control unit 31 may send the authentication result to the management server 1 regardless of whether the authentication is successful or not, or may send the authentication result to the management server 1 only when the authentication is successful.

[0299] The second terminal 5 sends the authentication entrustment to the first server 2 and causes the management server 1 to send the authentication result to the first server 2, which is an example of the second terminal 5 sending the association request to the management server 1. In addition, the first terminal 4 sends the authentication entrustment to the second server 3 and causes the management server 1 to send the authentication result to the second server 3, which is an example of the first terminal 4 sending the association request to the management server 1. That is, when the first authentication method is adopted at the time of association setting, the processing of step SA410, step SA420, step SB410 and step SB420 is an example of the processing of the above-mentioned step S40 and step S45. The form of this authentication entrustment is an example of the form of executing the authentication processing together with the association request.

[0300] The control unit 11 of the management server 1 receives the authentication results of each individual (PR, TA) from each server (2, 3). In order to determine the combination of the corresponding individuals of the first object and the second object for the setting of the current request correspondence relationship, the control unit 11 can determine the establishment of the corresponding data of the authentication result by using the above-mentioned shared information and other methods. For the received authentication result, when the authentication of the proxy entrusting individual PR and the object individual TA is established, the control unit 11 sets the corresponding relationship between the proxy entrusting individual PR and the object individual TA. The setting process of the corresponding relationship can be the same as the above-mentioned embodiment. In addition, a series of processes from data exchange between terminals (4, 5) to association setting can be performed in real time according to the generation of the utilization relationship.

[0301] In the first authentication method, in accordance with the fact that a utilization relationship is established between the first object and the second object, the first server 2 and the second server 3 respectively perform authentication of the first object and the second object. At this time, the second terminal 5 of the second object entrusts the authentication of the first object. The first terminal 4 of the first object entrusts the authentication of the second object. That is, what is performed is so-called cross authentication that promotes mutual authentication, not each of the authentications itself. As a result, security can be expected to be ensured.

[0302] Fig. 13BAn example of the processing procedure of association setting when the first authentication method is adopted as the authentication method and the second method described above is adopted as the verification method of the proxy right is schematically shown. When the first authentication method is adopted, the system 100 may also adopt the second method instead of the first method as the verification method of the proxy right. When the second method is adopted, in step S20, the control unit 41 of the first terminal 4 may send the proxy authentication information AU2 to the second terminal 5. The proxy authentication information AU2 may be obtained appropriately. In one example, in step S10, the first terminal 4 may receive the authority granting information AG including the authentication information PC1 as the proxy authentication information AU2 from the terminal 6. In another example, the first terminal 4 may also obtain the proxy authentication information AU2 from the proxy individual PI at any time.

[0303] At any time before executing the process of step S305, the control unit 51 of the second terminal 5 can obtain the authentication information PC1 through the process of step S100. In one example, in the setting of step S10, the target individual TA can be specified, and the terminal 6 can also send the authentication information PC1 to the second terminal 5 of the specified target individual TA. In this way, the control unit 51 of the second terminal 5 can obtain the authentication information PC1. In another example, according to the situation that the utilization relationship with the proxy individual PI is generated (for example, data exchange with the first terminal 4 is started), the control unit 51 of the second terminal 5 can also download the authentication information PC1 from the external computer. The control unit 51 of the second terminal 5 can obtain the first inherent information CA1 of the proxy entrusting individual PR together with the authentication information PC1.

[0304] In step S305, the control unit 51 of the second terminal 5 verifies the proxy authority by comparing the proxy authentication information AU2 with the authentication information PC1. When the comparison is successful (verification is successful), the control unit 51 of the second terminal 5 can perform the processing after step SA410 and step SB410 together with the control unit 41 of the first terminal 4. On the other hand, when the comparison is not successful, the control unit 51 of the second terminal 5 can also urge the first terminal 4 to send the proxy authentication information AU2 again. When the comparison is not successful, the control unit 51 of the second terminal 5 can also appropriately end the processing sequence related to the association setting. Other processing sequences when the second method is used as the verification method can be the same as those when the above method is used. Fig.13A The same is true for the first method.

[0305] also, Fig.13A and Fig. 13BThe processing sequence is just an example, and each step can be changed within the possible range. For the above processing sequence, steps can be appropriately omitted, replaced, and added according to the implementation method. For example, the authentication of the second object (the object individual TA) can be omitted. The authentication of the proxy individual PI can also be performed by the same method as the proxy entrusting individual PR.

[0306] In addition, regardless of whether authentication of the proxy individual PI is performed, the first identifier I10 of the proxy individual PI can be sent from the first terminal 4 or the first server 2 to the management server 1. In one example, the first identifier I10 of the proxy individual PI can be sent to the management server 1 through at least one of the authentication path of the first object (step SA410, step SA420) and the authentication path of the second object (step SB410, step SB420). Correspondingly, the management server 1 can generate association information D10 that also includes the first identifier I10 of the proxy individual PI as a setting process for the correspondence between the proxy entrusting individual PR and the object individual TA.

[0307] In addition, the authentication result transmission path may not be limited to Fig.13A and Fig. 13B In another example, the first terminal 4 can receive the authentication result of the target individual TA from the second server 3, and the second terminal 5 can receive the authentication result of the proxy entrusting individual PR from the first server 2. Correspondingly, each terminal (4, 5) can also send an association request including the received authentication result of each individual (PR, TA) to the management server 1. Alternatively, it can also be configured as follows: the terminal of one of the first terminal 4 and the second terminal 5 exchanges the authentication result data with the terminal of the other party, and the terminal of the other party sends an association request including the authentication result of each individual (PR, TA) to the management server 1.

[0308] In addition, the transmission path of the first inherent information CA1 of the proxy entrusting individual PR can be appropriately changed according to the implementation method. In another example, the second terminal 5 can also send the authentication entrustment of the proxy entrusting individual PR to the first server 2 without the first inherent information CA1 of the proxy entrusting individual PR. The first server 2 can request the first inherent information CA1 from the terminal 6 of the proxy entrusting individual PR based on the authentication entrustment. The terminal 6 can appropriately obtain the first inherent information CA1 and send it to the first server 2. Thereby, the first server 2 can obtain the first inherent information CA1 used for the authentication of the proxy entrusting individual PR.

[0309] (B) Second authentication method

[0310] Fig. 14B An example of the association setting processing procedure when the second authentication method is adopted is schematically shown. Fig. 14B In the example, it is assumed that the following scenario is adopted, that is, the above-mentioned first method is adopted as the verification method of the proxy right, and the proxy entrusting individual PR and the target individual TA are authenticated when the association is set. In the second authentication method, the management server 1 entrusts the authentication to each server (2, 3) based on the request from at least one of the first terminal 4 and the second terminal 5. That is, the external server (first server 2, second server 3) authenticates each individual (PR, TA) based on the authentication entrustment included in the association request sent from at least one of the first terminal 4 and the second terminal 5. The data (inherent information) used for authentication is the same as that of the first authentication method. The request sent from the first terminal 4 and the second terminal 5 to the management server 1 is an example of an association request including an authentication entrustment.

[0311] First, the processing of step S10, step S20, step S301 and step S302 can be performed in the same manner as the first authentication method described above. After the second terminal 5 receives a reply indicating consent, at least one of the first terminal 4 and the second terminal 5 sends an authentication request including the first identifier I10 of the proxy entrusting individual PR, the first inherent information CA1 of the proxy entrusting individual PR, the second identifier I20 of the target individual TA, and the second inherent information CA2 of the target individual TA to the management server 1 as an association request (step SC410, step SD410). Correspondingly, the control unit 11 of the management server 1 receives the authentication request including the first identifier I10, the first inherent information CA1, the second identifier I20, and the second inherent information CA2. The processing of step SC410 and step SD410 is an example of the processing of the above-mentioned step S40.

[0312] The distribution of data transmission can be appropriately determined according to the implementation. In one example, the second terminal 5 can be responsible for the transmission of the first identifier I10 and the first inherent information CA1, and the first terminal 4 can be responsible for the transmission of the second identifier I20 and the second inherent information CA2. For example, in any of step S20 and step S302, the control unit 51 of the second terminal 5 can obtain the first identifier I10 and the first inherent information CA1 of the proxy request individual PR. In step SC410, the control unit 51 of the second terminal 5 can send an association request including the obtained first identifier I10 and the first inherent information CA1 of the proxy request individual PR to the management server 1. On the other hand, in step S20, the control unit 41 of the first terminal 4 can obtain the second identifier I20 and the second inherent information CA2 of the target individual TA from either the target individual TA or the second terminal 5. In step SD410, the control unit 41 of the first terminal 4 can send an association request including the obtained second identifier I20 and the second inherent information CA2 of the target individual TA to the management server 1.

[0313] In addition, the distribution of data transmission may not be limited to such an example. In another example, at least one of the first identifier I10 and the first inherent information CA1 may be transmitted from the first terminal 4. At least one of the second identifier I20 and the second inherent information CA2 may be transmitted from the second terminal 5. In the case of adopting the form of split transmission, the management server 1 may also determine the corresponding establishment of the authentication entrusted data by using the above-mentioned shared information and other methods in order to determine the combination of the corresponding individuals of the first object and the second object set for the current request correspondence relationship. In another example, the first identifier I10, the first inherent information CA1, the second identifier I20 and the second inherent information CA2 may be transmitted only from one of the first terminal 4 and the second terminal 5.

[0314] In step SC420, the control unit 11 of the management server 1 sends the first identifier I10 and the first inherent information CA1 in the received data to the first server 2, thereby entrusting the first server 2 with the authentication of the proxy entrusting individual PR. Correspondingly, the control unit 21 of the first server 2 can act as the authentication unit 211, compare the first inherent information CA1 with the first registered inherent information CA10, and determine whether the authentication of the proxy entrusting individual PR is successful or not based on the comparison result. In step SC430, the control unit 21 of the first server 2 returns the authentication result of the proxy entrusting individual PR to the management server 1.

[0315] Similarly, in step SD420, the control unit 11 of the management server 1 sends the second identifier I20 and the second inherent information CA2 to the second server 3, thereby entrusting the second server 3 with the authentication of the target individual TA. Correspondingly, the control unit 31 of the second server 3 can act as an authentication unit 311, compare the second inherent information CA2 with the second registered inherent information CA20, and determine whether the authentication of the target individual TA is successful or not based on the comparison result. In step SD430, the control unit 31 of the second server 3 sends the authentication result of the target individual TA to the management server 1.

[0316] The control unit 11 of the management server 1 receives the authentication results of each individual (PR, TA) from each server (2, 3). When the authentication of both the proxy entrusting individual PR and the target individual TA is established in the received authentication results, the control unit 11 sets the corresponding relationship between the proxy entrusting individual PR and the target individual TA. The setting process of the corresponding relationship can be the same as the above-mentioned embodiment. In addition, a series of processes from data exchange between the terminals (4, 5) to association setting can be performed in real time according to the generation of the utilization relationship. The other structures can be the same as the first authentication method.

[0317] In the second authentication method, when a utilization relationship is established between the first object and the second object, authentication of the first object and the second object is performed respectively on the first server 2 and the second server 3. Security can be expected to be ensured by these two authentications.

[0318] Fig. 14B An example of the processing procedure of the association setting in the case where the second authentication method is adopted as the authentication method and the second method is adopted as the verification method of the proxy right is schematically shown. In the case where the second authentication method is adopted, the system 100 may also adopt the second method instead of the first method as the verification method of the proxy right. Similar to the first authentication method, in step S20, the control unit 41 of the first terminal 4 may send the proxy authentication information AU2 to the second terminal 5. At any time before executing the processing of step S305, the control unit 51 of the second terminal 5 may obtain the authentication information PC1 through the processing of step S100. The control unit 51 of the second terminal 5 may obtain the first inherent information CA1 of the proxy entrusting individual PR together with the authentication information PC1. In step S305, the control unit 51 of the second terminal 5 verifies the proxy right by comparing the proxy authentication information AU2 and the authentication information PC1. When the comparison is established (verification is established), the processing after step SC410 and step SD410 may be executed. The other sequence may be the same as above. Fig. 13B and Fig.14A The same situation.

[0319] also, Fig.14A and Fig. 14B The processing sequence is only an example, and each step can be changed within the possible range. For the above processing sequence, steps can be appropriately omitted, replaced, and added according to the implementation method. For example, the authentication of the second object (object individual TA) can be omitted, similar to the above-mentioned first authentication method. Authentication of the proxy individual PI can also be performed in the same method as the proxy delegate individual PR. The management server 1 can also generate associated information D10 that also includes the first identifier I10 of the proxy individual PI. The sending path of the first inherent information CA1 of the proxy delegate individual PR can be appropriately changed according to the implementation method. In another example, the first inherent information CA1 of the proxy delegate individual PR can also be sent from the terminal 6 to the first server 2.

[0320] In addition, the authentication result transmission path may not be limited to Fig.14A and Fig. 14BIn another example, the authentication process of at least one of the first object and the second object may be performed by the management server 1 instead of the external server. For example, the management server 1 may maintain at least one of the first registered inherent information CA10 and the second registered inherent information CA20. Alternatively, the management server 1 may obtain at least one of the first registered inherent information CA10 and the second registered inherent information CA20 by inquiring at least one of the first server 2 and the second server 3. Correspondingly, the control unit 11 of the management server 1 may act as the authentication unit 115 to perform the authentication process of at least one of the first object and the second object.

[0321] (C-1) Authentication method of Section 3-1

[0322] Fig.15A An example of the association setting process when the authentication method 3-1 is adopted is schematically shown. Fig.15A In the example of , the following scenario is assumed, that is, the above-mentioned method 1 is used as the verification method of the proxy right, and the proxy entrusting individual PR and the target individual TA are authenticated when the association is set. The authentication method 3-1 uses a time limit certificate for authentication instead of inherent information. The authentication process is executed by the management server 1.

[0323] The first server 2 is configured to issue a first time limit certificate CB10 to each individual of the first target. The second server 3 is configured to issue a second time limit certificate CB20 to each individual of the second target.

[0324] Each time-limited certificate (CB10, CB20) is configured to become invalid after the validity period has passed. As long as the invalidation can be controlled according to the passage of the validity period, the structure of each time-limited certificate (CB10, CB20) is not particularly limited and can be appropriately selected according to the implementation method. Each time-limited certificate (CB10, CB20) can contain arbitrary information. In one example, each time-limited certificate (CB10, CB20) can also be composed of a random number, a time stamp, a hash value, etc. Each time-limited certificate (CB10, CB20) can also be composed of temporary information such as a one-time password.

[0325] The validity period of each time-limited certificate (CB10, CB20) can be appropriately managed. Expiration can be appropriately determined based on the passage of the validity period. For example, a time-limited certificate that has passed the period set in the time-limited certificate can be added to an expiration list, and whether the object's time-limited certificate is expired can be determined by deleting the time-limited certificate from the valid list, updating it with a new time-limited certificate, and assigning information indicating expiration (for example, a time stamp). When reference information such as an expiration list and a valid list is used for the management of the validity period, the reference information can be stored in any storage device that can be accessed from the system 100. Typically, the reference information of each time-limited certificate (CB10, CB20) can be stored in each server (2, 3).

[0326] First, in step SE910, the control unit 61 of the terminal 6 of the proxy client individual PR sends a request for the issuance of the first time limit certificate CB10 to the first server 2 in association with the first identifier I10 of the proxy client individual PR. In response to the receipt of the request, the control unit 21 of the first server 2 issues the first time limit certificate CB10 in association with the first identifier I10. In step SE920, the control unit 21 of the first server 2 returns the issued first time limit certificate CB10 to the terminal 6. Correspondingly, the terminal 6 receives the issued first time limit certificate CB10 from the first server 2. The control unit 61 of the terminal 6 can store the received first time limit certificate CB10 as the first certificate CB1 in a usable manner. In step SE930, the control unit 21 of the first server 2 also notifies the management server 1 of the issued first time limit certificate CB10. The control unit 21 can also notify the first time limit certificate CB10 by marking the first identifier I10.

[0327] Similarly, in step SF910, the control unit 51 of the second terminal 5 of the target individual TA sends a request for the issuance of the second time limit certificate CB20 to the second server 3 in association with the second identifier I20 of the target individual TA. In response to the receipt of the request, the control unit 31 of the second server 3 issues the second time limit certificate CB20 in association with the second identifier I20. In step SF920, the control unit 31 of the second server 3 returns the issued second time limit certificate CB20 to the second terminal 5. Correspondingly, the second terminal 5 receives the issued second time limit certificate CB20 from the second server 3. The control unit 51 of the second terminal 5 stores the received second time limit certificate CB20 as the second certificate CB2 in a usable manner. In addition, in step SF930, the control unit 31 of the second server 3 also notifies the management server 1 of the issued second time limit certificate CB20. The control unit 31 may also notify the second time limit certificate CB20 by marking the second identifier I20.

[0328] The processing of step S10, step S20, step S301 and step S302 can be performed in the same manner as the above-mentioned first authentication method. After the second terminal 5 receives a reply indicating consent, at least one of the first terminal 4 and the second terminal 5 sends an authentication request including the first certificate CB1 of the proxy entrusting individual PR and the second certificate CB2 of the target individual TA to the management server 1 as an association request (step SE410, step SF410). Correspondingly, the management server 1 receives the first certificate CB1 corresponding to the first time-limited certificate CB10 and the second certificate CB2 corresponding to the second time-limited certificate CB20. The processing of step SE410 and step SF410 is an example of the processing of the above-mentioned step S40. The request sent from at least one of the first terminal 4 and the second terminal 5 is an example of an association request including an authentication request.

[0329] The distribution of data transmission can be appropriately determined according to the implementation method. In one example, the second terminal 5 may be responsible for sending the first certificate CB1 of the proxy client PR, and the first terminal 4 may be responsible for sending the second certificate CB2 of the target individual TA. That is, in step SE410, the control unit 51 of the second terminal 5 may send an association request including the first certificate CB1 of the proxy client PR to the management server 1. In step SF410, the control unit 41 of the first terminal 4 may send an association request including the second certificate CB2 of the target individual TA to the management server 1.

[0330] However, the distribution of data transmission may not be limited to such an example. In another example, the first certificate CB1 may also be sent from the first terminal 4. The second certificate CB2 may also be sent from the second terminal 5. In addition, the identifiers (I10, I20) of the individuals (PR, TA) may also be sent to the management server 1 together with the certificates (CB1, CB2). In this case, the identifiers (I10, I20) and the certificates (CB1, CB2) are an example of data used for authentication. The identifiers (I10, I20) may be sent from at least one of the first terminal 4 and the second terminal 5. In the case of adopting the form of split transmission, in order to determine the combination of the corresponding individuals of the first object and the second object of the current request correspondence relationship, the management server 1 may determine the corresponding establishment of the authentication entrusted data by using the above-mentioned shared information and other methods. In another example, the first certificate CB1 and the second certificate CB2 may also be sent only from one of the first terminal 4 and the second terminal 5.

[0331] In addition, each terminal (4, 5) can obtain each certificate (CB1, CB2) as appropriate. In the case where the second terminal 5 sends the first certificate CB1 of the proxy-entrusted individual PR, the second terminal 5 can obtain the first certificate CB1 together with the reply of consent in step S302, or can obtain the first certificate CB1 through the first terminal 4 through steps S10 and S20. In the case where the first terminal 4 sends the first certificate CB1 of the proxy-entrusted individual PR, the first terminal 4 can obtain the first certificate CB1 together with the authority granting information AG in step S10, or can obtain the first certificate CB1 through the second terminal 5 through steps S302 and S20. In the case where the first terminal 4 sends the second certificate CB2 of the target individual TA, the first terminal 4 can obtain the second certificate CB2 from the second terminal 5 in step S20.

[0332] The control unit 11 of the management server 1 operates as the authentication unit 115, and compares the received first certificate CB1 with the first time-limited certificate CB10 notified from the first server 2. The control unit 11 of the management server 1 operates as the authentication unit 115, and compares the received second certificate CB2 with the second time-limited certificate CB20 notified from the second server 3. The control unit 11 can appropriately determine the establishment of correspondence of the compared data. Determining the establishment of correspondence of the compared data is to distinguish the combination of the compared first time-limited certificate CB10 and the first certificate CB1, and the combination of the second time-limited certificate CB20 and the second certificate CB2. Similar to the establishment of correspondence of the authentication-entrusted data, the control unit 11 can determine the establishment of correspondence of the compared data by using the above-mentioned shared information or other methods. The shared information can be each identifier (I10, I20).

[0333] In addition, the comparison method of the certificate and the time limit certificate can be appropriately selected according to the relationship between the two. In one example, the time limit certificate (CB10, CB20) can be directly used as the certificate (CB1, CB2). In this case, the success or failure of the comparison in the authentication can be determined based on whether the time limit certificate (CB10, CB20) is consistent with the certificate (CB1, CB2). In another example, the time limit certificate (CB10, CB20) can be arbitrarily transformed, and the transformed time limit certificate (CB10, CB20) can be used as the certificate (CB1, CB2). In this case, the success or failure of the comparison in the authentication can be determined based on whether the relationship specified between the time limit certificate (CB10, CB20) and the certificate (CB1, CB2) is established. For example, the first time limit certificate CB10 can be transformed into a hash value, and the obtained hash value can be used as the first certificate CB1. Correspondingly, whether the relationship is established can be determined based on whether the hash value of the first time limit certificate CB10 is consistent with the first certificate CB1. The conversion may include data operations such as deletion and addition. At least one of the first time-limit certificate CB10 and the second time-limit certificate CB20 may be used as a certificate directly, and the other may be used as a certificate after conversion. In addition, the conversion process may be executed by each terminal (4, 5, 6) or by each server (2, 3). When the conversion process is executed by each server (2, 3), each terminal (5, 6) may receive the converted time-limit certificate (CB10, CB20) from each server (2, 3).

[0334] The control unit 11 of the management server 1 can determine whether the authentication of each individual (PR, TA) is successful or not based on the results of each comparison. If the comparison is not established, the authentication is not established. In the case where the first time limit certificate CB10 / the second time limit certificate CB20 is invalid due to the expiration of the validity period, the comparison of the first object / the second object is not established. On the other hand, if the first time limit certificate CB10 and the second time limit certificate CB20 are valid and each comparison is established, the authentication of the proxy entrusting individual PR and the object individual TA is established. In the case where the authentication of the proxy entrusting individual PR and the object individual TA is established, the control unit 11 of the management server 1 sets the corresponding relationship between the proxy entrusting individual PR and the object individual TA. The setting process of the corresponding relationship can be the same as the above-mentioned embodiment. In addition, a series of processes from data exchange between terminals (4, 5) to association setting can be performed in real time based on the generation of the utilization relationship. Other structures can be the same as the first authentication method, etc.

[0335] In the method of 3-1, based on the fact that a utilization relationship is established between the first object and the second object, the first object and the second object are authenticated using time-limited certificates (CB10, CB20). Each time-limited certificate (CB10, CB20) is configured to become invalid when the validity period has expired. Therefore, it is possible to prevent the same certificate from being used permanently, thereby ensuring security.

[0336] Fig. 15B An example of the processing procedure of association setting when the authentication method 3-1 is adopted as the authentication method and the above-mentioned second method is adopted as the verification method of the proxy right is schematically shown. When the authentication method 3-1 is adopted, the system 100 may also adopt the second method as the verification method of the proxy right instead of the above-mentioned first method. Similar to the above-mentioned first authentication method, in step S20, the control unit 41 of the first terminal 4 may send the proxy authentication information AU2 to the second terminal 5. At any time before executing the processing of step S305, the control unit 51 of the second terminal 5 may obtain the authentication information PC1 through the processing of step S100. The control unit 51 of the second terminal 5 may also obtain the first certificate CB1 of the proxy entrusting individual PR together with the authentication information PC1. In step S305, the control unit 51 of the second terminal 5 verifies the proxy right by comparing the proxy authentication information AU2 with the authentication information PC1. When the comparison is established (verification is established), the processing after step SE410 and step SF410 may be executed. The other sequence may be the same as above. Fig.15A The same situation.

[0337] also, Fig.15A and Fig. 15B The processing sequence is only an example, and each step can be changed within the possible range. For the above processing sequence, steps can be appropriately omitted, replaced, and added according to the implementation method. For example, the authentication of the second object (object individual TA) can be omitted, similar to the above-mentioned first authentication method. The authentication of the proxy individual PI can also be performed in the same way as the proxy entrusting individual PR. The management server 1 can also generate the associated information D10 that also includes the first identifier I10 of the proxy individual PI.

[0338] In addition, the issuance of each time limit certificate (CB10, CB20) does not necessarily depend on the entrustment (request) from each terminal (4, 5). Each server (2, 3) can also generate each time limit certificate (CB10, CB20) spontaneously. In this case, the processing of step SE910 and step SF910 can be omitted.

[0339] In addition, the issuance of each time limit certificate (CB10, CB20) (step SE910 to step SE930, step SF910 to step SF930) can be performed at any time before the commission of the association setting (step SE410, step SF410). In one example, the issuance of each time limit certificate (CB10, CB20) can be performed in advance before the data exchange between the first terminal 4 and the second terminal 5 (step S20) is performed. In another example, it can also be performed after the data exchange between the first terminal 4 and the second terminal 5 is started and before the association request is sent. From the perspective of reducing the process when setting the association, it is preferred that the issuance of each time limit certificate (CB10, CB20) is performed at the former time.

[0340] In addition, in the above-mentioned authentication method 3-1, the comparison process of each certificate (CB1, CB2) and each time limit certificate (CB10, CB20), that is, the authentication process of each object is performed by the management server 1. However, the subject that performs the comparison process is not limited to the management server 1. In another example, the management server 1 can also entrust the comparison process to each server (2, 3) by sending each certificate (CB1, CB2) to each server (2, 3). Thus, the comparison process can also be performed by each server (2, 3). That is, the authentication process of at least one of the first object and the second object can also be performed by an external server. In one example, the control unit 21 of the first server 2 can act as the authentication unit 211 and compare the first certificate CB1 and the first time limit certificate CB10 received from the management server 1, thereby determining whether the authentication of the first object is successful or not. The control unit 21 can return the authentication result of the first object to the management server 1. In addition, the control unit 31 of the second server 3 can act as the authentication unit 311, and compare the second certificate CB2 received from the management server 1 with the second time limit certificate CB20, thereby determining whether the authentication of the second object is successful or not. The control unit 31 can return the authentication result of the second object to the management server 1. In this case, the notification of each time limit certificate (CB10, CB20) can be omitted (step SE930, step SF930). In another example, the management server 1 can perform the authentication process of at least one of the first object and the second object, and the external server can perform the authentication process of the other party.

[0341] In addition, the sending path of the first certificate CB1 of the proxy-entrusted individual PR can be appropriately changed according to the implementation method. In another example, at least one of the first terminal 4 and the second terminal 5 can also send the authentication request of the proxy-entrusted individual PR to the management server 1 without the first certificate CB1 of the proxy-entrusted individual PR. The management server 1 can also request the first certificate CB1 from the terminal 6 directly or indirectly via an external server such as the first server 2. The terminal 6 can also send the first certificate CB1 to the management server 1 directly or indirectly based on the request. In this way, the management server 1 can also obtain the first certificate CB1 for the authentication of the proxy-entrusted individual PR.

[0342] (C-2) Authentication method of Section 3-2

[0343] In the above-mentioned authentication method 3-1, authentication processing of each individual (PR, TA) is performed on the management server 1 according to the association request of at least one of the first terminal 4 and the second terminal 5. However, the timing of performing the authentication processing may not be limited to such an example. In the authentication method 3-2, as an opportunity to send an association request to the management server 1, at least one of the first terminal 4 and the second terminal 5 may perform authentication processing of at least one of the proxy entrusting individual PR and the target individual TA between at least one of the first server 2 and the second server 3.

[0344] Fig.16A An example of the association setting processing procedure when the 3-2 authentication method is adopted is schematically shown. Fig.16A A scenario is assumed in which an authentication process of a first target (proxy requesting individual PR) is executed.

[0345] First, between the terminal 6 and the first server 2, the processing of step SE910 and step SE920 can be performed in the same manner as the authentication method 3-1 described above. As a result of the execution, the first time-limit certificate CB10 is issued, and the issued first time-limit certificate CB10 is notified to the terminal 6. At this time, the first server 2 can store the issued first time-limit certificate CB10 in association with the first identifier I10. The first time-limit certificate CB10 can also be saved as the first object information O10. The notification to the management server 1 can be omitted (step SE930). The processing of step S10, step S20 and step S30 can be performed in the same manner as the authentication method 3-1 described above. The method for verifying the proxy authority can also adopt any one of the first method and the second method. Thus, the second terminal 5 obtains the first identifier I10 and the first certificate CB1.

[0346] In step SG410, the control unit 51 of the second terminal 5 sends an authentication request including the first identifier I10 and the first certificate CB1 to the first server 2. Based on the reception of the authentication request, the control unit 21 of the first server 2 acts as the authentication unit 211, and compares the received first certificate CB1 and the corresponding first time-limit certificate CB10. The corresponding first time-limit certificate CB10 can be appropriately obtained. In one example, the issued first time-limit certificate CB10 can be saved as the first object information O10, and the control unit 21 of the first server 2 can retrieve the first object information O10 by using the first identifier I10 for query, thereby extracting the corresponding first time-limit certificate CB10. In step SG420, the control unit 21 of the first server 2 returns the comparison result to the second terminal 5. Correspondingly, the control unit 51 of the second terminal 5 receives the comparison result.

[0347] When the comparison between the first certificate CB1 and the first time limit certificate CB10 is not successful in the received comparison result, the control unit 51 of the second terminal 5 can appropriately end the processing sequence of the association setting. In one example, the control unit 51 can also request the terminal 6 to send the first certificate CB1 again. On the other hand, when the comparison is successful, the control unit 51 sends an association request including the first identifier I10 and the second identifier I20 to the management server 1 (step SG430). The processing of step SG410, step SG420 and step SG430 is an example of the processing of the above-mentioned step S40 and step S45.

[0348] Correspondingly, the management server 1 receives an association request from the second terminal 5. The control unit 11 of the management server 1 sets a corresponding relationship between the first object (proxy entrusting individual PR) and the second object (object individual TA) according to the association request. The setting process of the corresponding relationship can be the same as the above-mentioned embodiment. In addition, a series of processes from data exchange between the terminals (4, 5) to association setting can be performed in real time according to the generation of the utilization relationship. The other structures can be the same as the first authentication method, etc.

[0349] Furthermore, the authentication object of the authentication method of No. 3-2 is not limited to the first object. The second object may also be authenticated by the same method.

[0350] Fig. 16B Another example of the association setting processing procedure when the 3-2 authentication method is adopted is schematically shown. Fig. 16B A scenario is assumed in which the authentication process of the second object (the object individual TA) is executed. Except that the first object and the second object are replaced and the process related to the proxy is omitted, Fig. 16B The processing order can also be Fig.16A The processing order is the same.

[0351] That is, by executing the processing of step SF910 and step SF920 between the second terminal 5 and the second server 3, the second time limit certificate CB20 is issued, and the issued second time limit certificate CB20 is notified to the second terminal 5. In step S20, the control unit 51 of the second terminal 5 sends the issued second time limit certificate CB20 as the second certificate CB2 to the first terminal 4. In addition, the control unit 51 of the second terminal 5 sends the second identifier I20 to the first terminal 4. In step SH410, the control unit 41 of the first terminal 4 sends the authentication request including the second identifier I20 and the second certificate CB2 to the second server 3. Correspondingly, the control unit 31 of the second server 3 acts as the authentication unit 311 and performs the comparison processing of the second certificate CB2 and the second time limit certificate CB20. In step SH420, the control unit 31 of the second server 3 returns the comparison result to the first terminal 4. When the comparison between the second certificate CB2 and the second time limit certificate CB20 is established in the comparison result, the control unit 41 of the first terminal 4 sends an association request including the first identifier I10 and the second identifier I20 to the management server 1 (step SH430). In response, the management server 1 receives the association request from the first terminal 4. The control unit 11 of the management server 1 sets a correspondence relationship between the corresponding individuals of the first object (proxy request individual PR) and the second object (target individual TA) according to the association request.

[0352] In the authentication method of 3-2, the authentication process is executed before the association request. This can reduce the processing load of the management server 1. In addition, the processing time from the association request to the setting process can be shortened.

[0353] also, Fig.16A and Fig. 16B The processing sequence is just an example, and each step can be changed within the possible range. For the above processing sequence, steps can be appropriately omitted, replaced, and added according to the implementation method. The processing sequence of the authentication of the first object and the authentication of the second object is not particularly limited and can be appropriately determined according to the implementation method.

[0354] In addition, the management server 1 can Fig.16AIn the processing sequence of , it is appropriately verified that the comparison is successful in the first server 2. In one example, the first server 2 may also send the comparison result to the management server 1. For example, the above-mentioned authentication delegation may also include the second identifier I20. When the comparison is successful, the first server 2 may also send the comparison result including the first identifier I10 and the second identifier I20 to the management server 1. Thus, for the management server 1, the first server 2 can make the association request for the combination of the first identifier I10 and the second identifier I20 specified by the comparison result valid. That is, in one example, the verification that the comparison is successful may be constituted by receiving the comparison result. The management server 1 may be configured to: maintain the comparison result from the first server 2, accept the delegation of the association setting for the combination of the first identifier I10 and the second identifier I20 specified by the comparison result, and cancel the delegation of the association setting other than it. Similarly, in Fig. 16B In the processing sequence, the management server 1 may also appropriately verify that the comparison is established in the second server 3.

[0355] In addition, Fig.16A and Fig. 16B In the processing sequence, each server (2, 3) may send the authentication result to the management server 1 instead of returning it to each terminal (4, 5). This sending mode is an example of a mode of sending an association request to the management server 1 via an external server and a mode of executing authentication processing together with the association request.

[0356] [5 Supplement]

[0357] The processes and means described in the present disclosure can be implemented in combination as long as no technical contradiction occurs.

[0358] In addition, a process described as being performed by one device may be shared and executed by multiple devices. Alternatively, a process described as being performed by different devices may be executed by one device. In a computer system, the hardware structure that implements each function can be flexibly changed.

[0359] The present disclosure can also be implemented by providing a computer program installed with the functions described in the above-mentioned embodiments, and one or more processors of the computer read out the program and execute it. Such a computer program can be provided to the computer through a non-temporary computer-readable storage medium that can be connected to the system bus of the computer, or it can be provided to the computer via a network. Non-temporary computer-readable storage media include, for example, disks (floppy disks (registered trademarks), hard disk drives (HDDs), etc.), optical disks (CD-ROMs, DVD disks, Blu-ray disks, etc.) and other disks of any type, read-in dedicated memory (ROM), random access memory (RAM), EPROM, EEPROM, magnetic cards, flash memory, optical cards, semiconductor drives (solid state hard disks, etc.), and any type of medium suitable for storing electronic commands.

Claims

1. A system, wherein: The system has: Manage servers; A first terminal of the agent entity of the first object; and a second terminal of the target individual of the second object, The first terminal is configured as follows: receiving authority granting information notifying granting of the proxy right from a terminal of the proxy entrusting individual of the first object, When a utilization relationship is established between the agent individual and the target individual, data is exchanged with the second terminal, and In the data exchange, the verification of the proxy authority is delegated by sending the authority verification information to the second terminal. The second terminal is configured to verify the proxy authority using the authority verification information based on the delegation from the first terminal, At least one of the first terminal and the second terminal is configured to send a link request including the authentication request of the proxy requesting individual to the management server in response to the completion of the authentication performed by the second terminal. The management server is configured to set a correspondence relationship between the proxy client individual and the target individual based on the fact that authentication of the proxy client individual corresponding to the authentication delegation is established, thereby validating the proxy individual's proxy exercise of authority over the proxy client individual via the target individual.

2. The system according to claim 1, wherein: Set a validity period for the said power of attorney, The management server is further configured to release the correspondence between the proxy requesting individual and the target individual upon arrival of the validity period.

3. The system according to claim 1, wherein: Set effective authority for the said proxy, The management server is further configured to release the correspondence between the proxy entrusting individual and the target individual according to the proxy individual exercising or canceling the effective authority.

4. The system according to claim 1, wherein: The management server is further configured to cancel the correspondence relationship between the proxy request individual and the target individual in response to receiving a cancellation request from a terminal of the proxy request individual.

5. The system according to claim 1, wherein: The management server is further configured to cancel the correspondence relationship between the proxy client individual and the target individual, based on the fact that the proxy client individual sets the correspondence relationship between the proxy client individual and the other individual of the second target.

6. The system according to claim 1, wherein: The permission verification information includes the contact information for executing the consent processing. Verifying the said proxy consists of the following processes, namely: Make inquiries according to the contact information included in the authority verification information; and The response of consent is accepted as the execution result of the consent processing.

7. The system according to claim 1, wherein: The second terminal is further configured to receive notification of authentication information from the terminal of the proxy entrusting individual, The authority verification information includes proxy authentication information corresponding to the authentication information, Verifying the proxy consists of the following processes, namely: The proxy authentication information included in the authority verification information is compared with the authentication information notified from the terminal of the proxy requesting individual.

8. The system according to claim 1, wherein: Sending the association request to the management server comprises the following processing, namely: The association request is sent directly to the management server, or is sent indirectly to the management server via an external server.

9. The system according to claim 1, wherein: The success or failure of the authentication corresponding to the authentication delegation is determined by the management server or the external server.

10. The system according to claim 1, wherein: The data exchange is performed via short-range wireless communication.

11. The system according to claim 1, wherein: The first terminal includes a positioning module. The first terminal is further configured as follows: Determining the current location of the first terminal by using the positioning module of the first terminal, sending the measurement result of the current position of the first terminal to the management server, The second terminal has a positioning module. The second terminal is further configured as follows: Determining the current location of the second terminal by using the positioning module of the second terminal, sending the measurement result of the current position of the second terminal to the management server, The management server is further configured as follows: After the correspondence relationship between the proxy requesting individual and the target individual is set, the measurement results of the current positions of the first terminal and the second terminal are received from the first terminal and the second terminal. determining in real time whether the received measurement results of the current positions of the first terminal and the second terminal satisfy the conditions of the utilization relationship, When the measurement results of the current positions of the first terminal and the second terminal satisfy the condition of the utilization relationship, the setting of the correspondence relationship between the proxy requesting individual and the target individual is maintained; otherwise, the correspondence relationship is cancelled.

12. The system according to any one of claims 1 to 11, wherein: The first object is a user, The proxy individual of the first object is a proxy user, The first object of the proxy entrusting individual is a proxy entrusting user, The second object is an object used by the user.

13. The system according to claim 12, wherein: The object to be utilized is a moving object.

14. A program, wherein: The program is used to cause the first terminal of the agent entity of the first object to execute the following processing, namely: receiving authority granting information notifying granting of the proxy right from a terminal of the proxy entrusting individual of the first object; When a utilization relationship is established between the proxy individual and a target individual of a second object, data is exchanged with a second terminal of the target individual; In the data exchange, the verification of the proxy authority is delegated by sending authority verification information to the second terminal; as well as Based on the establishment of the verification performed by the second terminal, an association request including the authentication delegation of the proxy delegate individual is sent to the management server, the association request is sent jointly with the second terminal, or the second terminal is caused to send the association request, thereby enabling the management server to set the corresponding relationship between the proxy delegate individual and the object individual based on the fact that the authentication of the proxy delegate individual corresponding to the authentication delegation is established, thereby validating the proxy individual's proxy exercise of the authority of the proxy delegate individual via the object individual.

15. The program according to claim 14, wherein: At least one of a validity period and effective authority is set for the proxy.

16. The program according to claim 14, wherein: The authority verification information includes contact information for performing consent processing or agent authentication information used for the verification.

17. A program, wherein: The program is used to cause the second terminal of the target individual of the second object to execute the following processing, namely: When a utilization relationship is established between the agent individual of the first object and the object individual, data is exchanged with the first terminal of the agent individual; In the data exchange, receiving a request for verification of the proxy right accompanied by authority verification information from the first terminal; verifying the proxy authority using the authority verification information according to the delegation from the first terminal; and Based on the establishment of the verification, an association request including the authentication delegation of the proxy delegate individual is sent to the management server, the association request is sent jointly with the first terminal, or the first terminal is caused to send the association request, thereby enabling the management server to set a corresponding relationship between the proxy delegate individual and the object individual based on the fact that the authentication of the proxy delegate individual corresponding to the authentication delegation is established, thereby validating the proxy individual's proxy exercise of the authority of the proxy delegate individual via the object individual.

18. The program according to claim 17, wherein: At least one of a validity period and effective authority is set for the proxy.

19. The program according to claim 17, wherein: The permission verification information includes the contact information for executing the consent processing. Verifying the said proxy consists of the following processes, namely: Make inquiries according to the contact information included in the authority verification information; and The response of consent is accepted as the execution result of the consent processing.

20. The program according to claim 17, wherein: causing the second terminal to further execute a process of receiving a notification of authentication information from the terminal of the proxy requesting individual, The authority verification information includes proxy authentication information corresponding to the authentication information, Verifying the proxy authority includes a process of comparing the proxy authentication information included in the authority verification information with the authentication information notified from the terminal of the proxy entrusting individual.

Images