System, management server, and program

Abstract

The invention relates to a system, a management server, and a program. The purpose of the present invention is to track the use relationship between a first object and a second object while ensuring security, and to reduce the workload thereof. A management server according to one aspect of the present disclosure accepts setting of a correspondence relationship between a first object and a second object in accordance with an association establishment request. When a predetermined condition is not satisfied, the management server acquires authentication results of both the first object and the second object, and sets a correspondence relationship on the basis of both the authentication of the first object and the authentication of the second object in the acquired authentication results. On the other hand, when a predetermined condition is satisfied, authentication of either the first object or the second object is omitted. The management server acquires the authentication result of the other object, and sets the correspondence relationship on the basis of the authentication of the other object in the acquired authentication result.

Description

Technical Field

[0001] The present disclosure relates to a system, a management server, and a program. Background Art

[0002] Patent document 1 proposes a fee collection system for collecting fees for services from vehicle users using a medium such as a card. Specifically, the fee collection system proposed in Patent document 1 is configured to distribute requests for highway usage fees for a target rental car to a target user based on the corresponding relationship (charging information, registration information, settlement information, and usage information) of an ETC (Electronic Toll Collection System) card ID, a rental car company, a rental car usage date and time, and a rental car user.

[0003] Patent Document 1: Japanese Patent Application Publication No. 2022-140747 Summary of the invention

[0004] One of the objects of the present disclosure is to provide a technology for tracking the usage relationship between a first object and a second object while ensuring safety and reducing the workload.

[0005] The system involved in the first aspect of the present disclosure includes a management server, a first terminal of a first object, and a second terminal of a second object. At least one of the first terminal and the second terminal is configured to send an association establishment request to the management server according to the generation of a utilization relationship between the first object and the second object. The management server is configured to set the correspondence relationship between the first object and the second object based on the association establishment request. The setting of the correspondence relationship is configured by the following processing: when the prescribed condition is not satisfied, the authentication results of the first object and the second object are both obtained, and the correspondence relationship between the first object and the second object is set according to the authentication results of the first object and the second object obtained, and when the prescribed condition is satisfied, the authentication of one of the objects of the first object and the second object is omitted, the authentication result of the object of the other party is obtained, and the correspondence relationship between the first object and the second object is set according to the authentication result of the other party obtained.

[0006] The management server according to the second aspect of the present disclosure includes a control unit configured to execute the following processing: when a utilization relationship is generated between a first object and a second object, a correspondence relationship between the first object and the second object is set based on an association establishment request sent from at least one of a first terminal of the first object and a second terminal of the second object. The setting of the above-mentioned correspondence relationship is configured by the following processing: when a prescribed condition is not satisfied, both the authentication results of the first object and the second object are obtained, and the correspondence relationship between the first object and the second object is set based on the fact that the authentication of the first object and the second object is established in the obtained authentication results of the first object and the second object; and when the prescribed condition is not satisfied, the authentication of either the first object or the second object is omitted, the authentication result of the other object is obtained, and the correspondence relationship between the first object and the second object is set based on the fact that the authentication of the other object is established in the obtained authentication result.

[0007] The program involved in the third mode of the present disclosure is a program for causing the first terminal of the first object to perform the following processing: when a utilization relationship is generated between the first object and the second object, sending an association establishment request to the management server; and causing the management server to set the correspondence between the first object and the second object by sending the association establishment request in cooperation with the second terminal of the second object, or causing the second terminal to send the association establishment request. In the case where the specified conditions are not met, the association establishment request includes the authentication delegation of the first object and the second object, and the setting of the correspondence between the first object and the second object is constituted by setting the correspondence between the first object and the second object based on the authentication of the first object and the second object executed based on the authentication delegation. When the conditions specified above are met, the authentication delegation of the object of either the first object or the second object is omitted, the association establishment requirement includes the authentication delegation of the object of the other party, and the corresponding relationship between the first object and the second object is set by setting the corresponding relationship between the first object and the second object based on the establishment of the authentication of the object of the other party performed based on the authentication delegation.

[0008] The management server involved in the fourth aspect of the present disclosure includes a control unit, which is configured to perform the following processing: when a utilization relationship is generated between the first object and the second object, the corresponding relationship between the first object and the second object is set based on the association establishment request sent from at least one of the first terminal of the first object and the second terminal of the second object. The setting of the above-mentioned corresponding relationship is configured by the following processing: when the specified conditions are not satisfied, the authentication result of at least one of the first object and the second object is obtained, and the corresponding relationship between the first object and the second object is set according to the authentication establishment in the obtained authentication result; and when the above-mentioned specified conditions are satisfied, the authentication of both the first object and the second object is omitted, and the corresponding relationship between the first object and the second object is set according to the reception of the above-mentioned association establishment request.

[0009] The program involved in the fifth aspect of the present disclosure is a program for causing the first terminal of the first object to perform the following processing: when a utilization relationship is generated between the first object and the second object, sending an association establishment request to the management server; and causing the management server to set the correspondence relationship between the first object and the second object by sending the association establishment request in cooperation with the second terminal of the second object, or causing the second terminal to send the association establishment request. In the case where the prescribed conditions are not satisfied, the association establishment request includes an authentication delegation of at least one of the first object and the second object, and the setting of the correspondence relationship between the first object and the second object is constituted by setting the correspondence relationship between the first object and the second object according to the establishment of authentication of at least one of the first object and the second object executed based on the authentication delegation. In the case where the prescribed conditions are satisfied, the authentication delegations of the first object and the second object are both omitted from the association establishment request, and the setting of the correspondence relationship between the first object and the second object is constituted by setting the correspondence relationship between the first object and the second object according to the reception of the association establishment request.

[0010] According to the present disclosure, it is possible to provide a technology for tracking the utilization relationship between the first object and the second object while ensuring safety and reducing the workload. BRIEF DESCRIPTION OF THE DRAWINGS

[0011] Figure 1 An example of a scenario in which the present disclosure is applied is schematically shown.

[0012] Figure 2 An embodiment of a scenario in which the present disclosure is applied is schematically shown.

[0013] Figure 3AAn example of linkage information according to the present embodiment is schematically shown.

[0014] Figure 3B An example of user information according to the present embodiment is schematically shown.

[0015] Figure 3C An example of moving object information according to the present embodiment is schematically shown.

[0016] Figure 4 An example of data exchange according to the present embodiment is schematically shown.

[0017] Figure 5 An example of the process of releasing the association according to the present embodiment is schematically shown.

[0018] Figure 6 An example of the predetermined conditions according to the present embodiment is schematically shown.

[0019] Figure 7 An example of the predetermined conditions according to the present embodiment is schematically shown.

[0020] Figure 8 An example of the continued use confirmation process according to the present embodiment is schematically shown.

[0021] Fig. 9 An example of a usage scenario of the association information according to the present embodiment is schematically shown.

[0022] Fig. 10A An example of the hardware configuration of the management server according to the present embodiment is schematically shown.

[0023] Fig. 10B An example of the hardware configuration of the first server according to the present embodiment is schematically shown.

[0024] Fig. 10C An example of the hardware configuration of the second server according to the present embodiment is schematically shown.

[0025] Fig. 10D An example of the hardware configuration of the first terminal according to the present embodiment is schematically shown.

[0026] Fig. 10E An example of the hardware configuration of the second terminal according to the present embodiment is schematically shown.

[0027] Fig.11 An example of the software configuration of each device according to the present embodiment is schematically shown.

[0028] Fig. 12A An example of the processing procedure of association setting according to the present embodiment is shown.

[0029] Fig. 12B An example of the processing procedure of releasing the association according to the present embodiment is shown.

[0030] Fig.13 Another example of a scenario in which the present disclosure is applied is schematically shown.

[0031] Fig.14 An example of an authentication processing procedure when the first authentication method is adopted is schematically shown.

[0032] Fig.15 An example of the authentication processing procedure when the second authentication method is adopted is schematically shown.

[0033] Fig.16 An example of the authentication processing procedure when the 3-1st authentication method is adopted is schematically shown.

[0034] Fig.17A An example of a processing procedure of authentication for the first target when the 3-2 authentication method is adopted is schematically shown.

[0035] Fig. 17B An example of a processing procedure for authentication of the second target when the 3-2 authentication method is adopted is schematically shown.

[0036] Fig.18A An example of a processing procedure for authentication of the first object when the fourth authentication method is adopted is schematically shown.

[0037] Fig.18B An example of a processing procedure for authentication of the second object when the fourth authentication method is adopted is schematically shown. DETAILED DESCRIPTION

[0038] According to the system proposed in Patent Document 1, a user can pay highway tolls using ETC even if he or she does not have his or her own ETC card. However, the inventors of the present application have found that the conventional system has the following problems.

[0039] That is, it can be considered that with the diversification of MaaS (Mobility as a Service), from the perspective of convenience such as efficiency of settlement, there is a demand for tracking the use of mobile bodies by users while ensuring safety. In contrast, in existing systems, the correspondence between the use date and time and the user can be maintained as use information based on the contract or reservation of the rental car, but since the use date and time depends on the contract or reservation, the use information does not necessarily match the actual use of the rental car by the user. In addition, in vehicles that are used without a contract or reservation (such as private cars), the generation of use information is not originally envisioned. Therefore, according to the existing system, it is difficult to track the use of mobile bodies by users while ensuring safety. In addition, the occurrence of this problem is not limited to the scenario of using vehicles. The same problem may also occur in the scenario of using mobile bodies other than vehicles (such as aircraft, ships, etc.) and the scenario of using multiple types of mobile bodies. In addition, the same problem may also occur in all use scenarios other than mobile bodies.

[0040] In contrast, the system involved in the first embodiment of the present disclosure includes a management server, a first terminal of a first object, and a second terminal of a second object. At least one of the first terminal and the second terminal is configured to send an association establishment request to the management server based on the generation of a utilization relationship between the first object and the second object. The management server is configured to set the correspondence between the first object and the second object based on the association establishment request. Setting the correspondence is configured by the following processing: when a specified condition is not satisfied, both the authentication results of the first object and the second object are obtained, and the correspondence between the first object and the second object is set based on the fact that the authentication of the first object and the second object is established in the obtained authentication results of the first object and the second object; and when a specified condition is satisfied, the authentication of either the first object or the second object is omitted, the authentication result of the other object is obtained, and the correspondence between the first object and the second object is set based on the fact that the authentication of the other object is established in the obtained authentication result.

[0041] In the first mode of the present disclosure, the utilization relationship between the first object and the second object can be tracked by setting the correspondence relationship (establishing an association) between the first object and the second object. In addition, when the specified conditions are not met, security can be ensured by implementing authentication of both the first object and the second object when setting the correspondence relationship. On the other hand, when the specified conditions are met, the workload can be reduced by omitting the authentication of either the first object or the second object. Therefore, according to the first mode of the present disclosure, the utilization relationship between the first object and the second object can be tracked while ensuring security and the workload can be reduced.

[0042] In addition, the method of the present disclosure may not be limited to the above-mentioned examples. As other methods of the system involved in the above-mentioned method, one aspect of the present disclosure may be an information processing device that implements all or part of the above-mentioned components, or an information processing method, or a program, or a mechanically readable storage medium such as a computer storing such a program. Here, the mechanically readable storage medium is a medium that stores information such as a program through electrical, magnetic, optical, mechanical or chemical effects. The information processing device may be at least any one of the management server, the first terminal and the second terminal involved in the above-mentioned method. In addition, the system involved in the above-mentioned method may also include at least one of the first server participating in the authentication of the first object and the second server participating in the authentication of the second object.

[0043] For example, the management server involved in the second aspect of the present disclosure may include a control unit configured to perform the following processing: when a utilization relationship is generated between the first object and the second object, the corresponding relationship between the first object and the second object is set based on the association establishment request sent from at least one of the first terminal of the first object and the second terminal of the second object. Setting the corresponding relationship may be configured by the following processing: when a prescribed condition is not satisfied, both the authentication results of the first object and the second object are obtained, and the corresponding relationship between the first object and the second object is set based on the fact that the authentication of the first object and the second object is established in the obtained authentication results of the first object and the second object; and when a prescribed condition is satisfied, the authentication of either the first object or the second object is omitted, the authentication result of the other object is obtained, and the corresponding relationship between the first object and the second object is set based on the fact that the authentication of the other object is established in the obtained authentication result.

[0044] In addition, for example, the program involved in the third aspect of the present disclosure may be a program for causing the first terminal of the first object to perform the following processing: when a utilization relationship is generated between the first object and the second object, sending an association establishment request to the management server; and causing the management server to set the correspondence relationship between the first object and the second object by cooperating with the second terminal of the second object to send the association establishment request, or causing the second terminal to send the association establishment request. In the case where the prescribed conditions are not satisfied, the association establishment request includes the authentication delegation of the first object and the second object, and the setting of the correspondence relationship between the first object and the second object is constituted by setting the correspondence relationship between the first object and the second object based on the authentication of the first object and the second object executed based on the authentication delegation. In the case where the prescribed conditions are satisfied, the authentication delegation of either the first object or the second object is omitted, the association establishment request includes the authentication delegation of the other object, and the setting of the correspondence relationship between the first object and the second object can be constituted by setting the correspondence relationship between the first object and the second object based on the authentication of the other object executed based on the authentication delegation.

[0045] In addition, from the perspective of achieving a balance between ensuring security and reducing workload, the method of omitting authentication is not limited to the above-mentioned examples. In another example, when the specified conditions are not met, authentication of at least one of the first object and the second object is performed, and when the specified conditions are met, authentication of both the first object and the second object is omitted.

[0046] For example, the management server involved in the fourth aspect of the present disclosure may include a control unit configured to perform the following processing: when a utilization relationship is generated between the first object and the second object, the corresponding relationship between the first object and the second object is set based on an association establishment request sent from at least one of the first terminal of the first object and the second terminal of the second object. Setting the corresponding relationship may be configured by the following processing: when a prescribed condition is not satisfied, obtaining an authentication result of at least one of the first object and the second object, and setting the corresponding relationship between the first object and the second object based on the authentication being established in the obtained authentication result; and when a prescribed condition is satisfied, omitting the authentication of both the first object and the second object, and setting the corresponding relationship between the first object and the second object based on the receipt of the association establishment request.

[0047] In addition, for example, the program involved in the fifth embodiment of the present disclosure may be a program for causing the first terminal of the first object to perform the following processing: when a utilization relationship is generated between the first object and the second object, sending an association establishment request to the management server; and causing the management server to set the correspondence relationship between the first object and the second object by sending the association establishment request in cooperation with the second terminal of the second object, or causing the second terminal to send the association establishment request. In the case where the prescribed conditions are not met, the association establishment request includes an authentication delegation of at least one of the first object and the second object, and the setting of the correspondence relationship between the first object and the second object is constituted by setting the correspondence relationship between the first object and the second object based on the establishment of authentication of at least one of the first object and the second object executed based on the authentication delegation. In the case where the prescribed conditions are met, the authentication delegations of the first object and the second object are both omitted from the association establishment request, and the setting of the correspondence relationship between the first object and the second object can be constituted by setting the correspondence relationship between the first object and the second object based on the reception of the association establishment request.

[0048] Hereinafter, an embodiment (hereinafter also referred to as "this embodiment") involved in one aspect of the present disclosure is described based on the accompanying drawings. However, the present embodiment described below is merely an illustration of the present disclosure in all points. Various improvements or modifications can be made without departing from the scope of the present disclosure. When implementing the present disclosure, a specific structure corresponding to the embodiment can be appropriately adopted. Among them, the data appearing in this embodiment is described by natural language, and more specifically, it is specified by pseudo-language, instructions, parameters, machine language, etc. that can be recognized by a computer.

[0049] [1 Application example]

[0050] Figure 1 An example of a scenario in which the present disclosure is applied is schematically shown. The system 100 involved in the present embodiment is composed of a management server 1, a first terminal 4, and a second terminal 5. The management server 1 is one or more computers configured to record the correspondence (association establishment) between the first object VA and the second object WA. The first terminal 4 corresponds to the first object VA, and the second terminal 5 corresponds to the second object WA. The first terminal 4 is assigned to each first object VA, and the second terminal 5 is assigned to each second object WA.

[0051] In the present embodiment, at least one of the first terminal 4 and the second terminal 5 is configured to send an association establishment request to the management server 1 based on the generation of a utilization relationship between the first object VA and the second object WA. As an example, a utilization relationship is generated between the first object VA and the second object WA on a one-to-one basis. That is, a utilization relationship is generated between one first object VA and one second object WA. One first object VA is an individual of the first object VA, and one second object WA is an individual of the second object WA. An individual with which a utilization relationship is generated may be referred to as a "corresponding individual" or an "object individual". Based on the generation of the utilization relationship, at least one of the first terminal 4 corresponding to the corresponding individual of the first object VA and the second terminal 5 corresponding to the corresponding individual of the second object WA sends an association establishment request to the management server 1 (step S10).

[0052] Accordingly, the management server 1 receives an association establishment request from at least one of the first terminal 4 of the first object VA and the second terminal 5 of the second object WA. The management server 1 accepts the setting of the correspondence between the first object VA and the second object WA in response to the reception of the association establishment request (step S20). The management server 1 sets the correspondence (association establishment) between the first object VA and the second object WA based on the accepted association establishment request (step S30). In one example, the management server 1 can generate association establishment information D10 indicating the setting of the correspondence between the first object VA and the second object WA, and can save the generated association establishment information D10.

[0053] In the present embodiment, the authentication processing of the first object VA and the second object WA is set in a manner associated with the setting of the corresponding relationship. The authentication processing of each object (VA, WA) can be performed at any time before the setting of the corresponding relationship. In addition, the specified conditions are set as conditions that simplify and validate the authentication processing. Accordingly, when the specified conditions are not met, the setting of the corresponding relationship is constituted by the following processing: the authentication results of the first object VA and the second object WA are both obtained; and the corresponding relationship between the first object VA and the second object WA is set based on the fact that the authentication of the first object VA and the second object WA is established in the obtained authentication results of the first object VA and the second object WA. On the other hand, when the specified conditions are met, the setting of the corresponding relationship is constituted by the following processing: the authentication of either the first object VA or the second object WA is omitted, and the authentication result of the other object is obtained; and the corresponding relationship between the first object VA and the second object WA is set based on the fact that the authentication of the other object is established in the obtained authentication result.

[0054] In addition, when a utilization relationship is generated between the first object VA and the second object WA, data exchange can be performed between the first terminal 4 corresponding to the corresponding individual of the first object VA and the second terminal 5 corresponding to the corresponding individual of the second object WA. The association establishment request can be executed along with the data exchange. A series of processes from the association establishment request to the association establishment setting can be executed in real time according to the generation of the utilization relationship. After the setting, the corresponding relationship (association establishment) can be terminated at any time. In one example, the corresponding relationship can be terminated according to the disappearance of the utilization relationship.

[0055] In addition, as long as each individual for which a corresponding relationship is set can be determined, the form of expression of the information indicating the setting of the corresponding relationship may not be particularly limited and may be appropriately determined according to the implementation method. In one example, a first identifier I10 may be assigned to each first object VA, and each individual of the first object VA may be identified based on the first identifier I10. Similarly, a second identifier I20 may be assigned to each second object WA, and each individual of the second object WA may be identified based on the second identifier I20. Accordingly, setting the corresponding relationship between the first object VA and the second object WA may be constituted by setting the corresponding relationship between the first identifier I10 assigned to the corresponding individual of the first object VA and the second identifier I20 assigned to the corresponding individual of the second object WA. That is, the setting of the corresponding relationship may be expressed using the first identifier I10 and the second identifier I20.

[0056] As described above, in the present embodiment, by setting the correspondence (establishing an association) between the first object VA and the second object WA, it is possible to track the utilization relationship between the corresponding individuals of the first object VA and the second object WA. In addition, in the present embodiment, when the prescribed conditions are not met, security can be ensured by implementing authentication of both the first object VA and the second object WA when setting the correspondence. On the other hand, when the prescribed conditions are met, it is possible to reduce the workload by omitting the authentication of either the first object VA or the second object WA. Therefore, according to the present embodiment, it is possible to track the utilization relationship between the first object VA and the second object WA while ensuring security and reducing the workload.

[0057] (Target)

[0058] The first object VA and the second object WA are not particularly limited as long as they are objects with which a utilization relationship can be established, and can be appropriately selected according to the implementation method. The first object VA and the second object WA can be any object, a person, other creatures, etc. Any object can include a virtual object. The utilization relationship can be established, for example, by one party using the other party, one party holding the other party, one party combining with the other party, one party connecting with the other party, etc., to generate a real or virtual relationship between at least two things. The system 100 of the present disclosure can be used in any scenario of tracking the correspondence between two or more things.

[0059] (terminal)

[0060] Each terminal (4, 5) is related to each object (VA, WA). The relationship between each terminal (4, 5) and each object (VA, WA) may not be particularly limited and may be appropriately determined according to the implementation method. In one example, the first terminal 4 may follow the corresponding first object VA, and the second terminal 5 may follow the corresponding second object WA. Following may include being temporarily or permanently equipped inside or outside the object, being held by the object (person), and being held by a person participating in the object (object). Equipping may include loading. Loading may include being at least temporarily placed on the object when the object is used, in addition to always being placed on the object. Loading may include being held by the user of the object. In addition, either the first terminal 4 or the second terminal 5 may be the object itself. In addition, with respect to each terminal (4, 5), for example, multiple terminals may be used as the terminals of the same individual, such as when a user shares an account among multiple terminals. In this case, multiple terminals used by the same individual may be interpreted as one terminal of one individual.

[0061] (1st server / 2nd server)

[0062] In one example, in order to show the details of each individual of the first object VA, the first object information O10 related to the first object VA can be used. The first object information O10 may include a first identifier I10. The first object information O10 may include information used in the authentication of the first object VA (registration completion inherent information, etc.). Similarly, in order to show the details of each individual of the second object WA, the second object information O20 related to the second object WA can be used. The second object information O20 may include a second identifier I20. The second object information O20 may include information used in the authentication of the second object WA. The first object information O10 and the second object information O20 may be stored in any storage area. At least a portion of the first object information O10 and the second object information O20 may be stored so as to be accessible from at least any one of the management server 1, the external server, and each terminal (4, 5).

[0063] The first object information O10 and the second object information O20 can be appropriately managed. Figure 1 In the example, the first server 2 may be configured to manage the first object information O10, and the second server 3 may be configured to manage the second object information O20. The first server 2 and the second server 3 may each be configured by one or more server devices. The first object information O10 may be stored in a memory resource provided in at least one of the internal and external storage of the first server 2 in a manner accessible from the first server 2. The second object information O20 may be stored in a memory resource provided in at least one of the internal and external storage of the second server 3 in a manner accessible from the second server 3. The internal memory resources may include, for example, RAM (Random Access Memory), an auxiliary storage device, a storage medium, etc. The external memory resources may include, for example, an external storage device, an external computer (NAS: Network Attached Storage, etc.). In another example, each object information (O10, O20) may be stored in the memory resources of the management server 1.

[0064] The unit for managing each object information (O10, O20) may not be particularly limited and may be appropriately determined according to the implementation method. At least one of the first object information O10 and the second object information O20 may be centrally (unified) managed or decentralized (independently) managed according to each arbitrary group. The server devices constituting each server (2, 3) may be equipped by more than one operating organization (main body). At least one of the first server 2 and the second server 3 may be equipped by multiple operating organizations. In the case of being equipped by multiple operating organizations, the object information may be shared (i.e., centrally managed) or decentralized managed for each operating organization.

[0065] In addition, the first server 2 can participate in the authentication of the first object VA. Participation in authentication can include determining whether the authentication is established (direct participation) and indirect participation (for example, providing information for determining whether the authentication is established). In the case of determining whether the authentication for the first object VA is established, the first server 2 is an example of an external server (external authentication server) that determines whether the authentication for the first object VA is established. The second server 3 can participate in the authentication of the second object WA. In the case of determining whether the authentication for the second object WA is established, the second server 3 is an example of an external server (external authentication server) that determines whether the authentication for the second object WA is established.

[0066] (Identifier)

[0067] In one example, in order to identify each individual of each object (VA, WA), each identifier (I10, I20) can be used. As long as each identifier (I10, I20) can identify each individual of each object (VA, WA), its data form and composition may not be particularly limited and may be appropriately selected according to the implementation method. In one example, each identifier (I10, I20) may be composed of a symbol column including numbers, characters, etc. In another example, each identifier (I10, I20) may use inherent information such as identification information inherent to each object (VA, WA) and information from each terminal (4, 5). The identification information inherently assigned may be, for example, a car registration number, a vehicle identification number (VIN: Vehicle Identification Number), a personal number, etc. In the case of assigning an IC tag to an object, the identification information inherently assigned may include information maintained by the IC tag. The information from each terminal (4, 5) may be, for example, a MAC address (Media Access Control address), terminal identification information (IMEI: International Mobile Equipment Identifier, IMSI: International Mobile Subscriber Identity, MEID: Mobile Equipment Identifier, ICCID: Integrated Circuit Card ID, other serial numbers, etc.), etc.

[0068] (Management Server)

[0069] The management server 1 is configured to set the correspondence between the first object VA and the second object WA according to the association establishment request from at least one of the first terminal 4 and the second terminal 5. In one example, the management server 1 can directly receive the association establishment request from at least one of the first terminal 4 and the second terminal 5, or can indirectly receive the association establishment request via an external server. That is, sending the association establishment request to the management server 1 can be configured by directly sending the association establishment request to the management server 1, or indirectly sending the association establishment request to the management server 1 via an external server. The external server can include, for example, the first server 2, the second server 3, etc. In addition, in one example, the indirect sending can be configured by simply relaying the association establishment request using an external computer. In another example, the indirect sending can be configured by, for example, sending a commission for participating in the association establishment process to an external computer by entrusting the authentication of each object (VA, WA) to each server (2, 3), sending the authentication result to the management server 1, and causing the external computer to send certain information to the management server 1 according to the result of its execution. That is, the association establishment request may be sent from the external computer to the management server 1 as a result of data communication for other purposes of the external computer.

[0070] The management server 1 may receive an association establishment request (commission for association establishment setting) according to the generation of the utilization relationship, and set the correspondence between the corresponding individuals of the first object VA and the second object WA according to the received association establishment request. The management server 1 may receive a release request (commission for association establishment release) according to the disappearance of the utilization relationship, and appropriately release the correspondence according to the received release request. The association establishment request and the release request may be configured to specify the corresponding individual of the processing object by any method. In a typical example, the association establishment request and the release request may be configured to specify the corresponding individual of the processing object by including the first identifier I10 and the second identifier I20 respectively. However, the method of specifying the corresponding individual of the processing object may not be limited to such an example, and may be appropriately changed according to the implementation method. In another example, at least one of the first identifier I10 and the second identifier I20 may be omitted by using alternative information in at least one of the association establishment request and the release request. For example, an identifier may be assigned as alternative information to the combination of the corresponding individuals of the first object VA and the second object WA (association establishment setting). The assignment of the identifier may be performed at any time, such as when the association is set for the first time. At least one of the association request and the release request may include this identifier so as to specify the corresponding individual of each object (VA, WA) to be processed without including at least one of the first identifier I10 and the second identifier I20.

[0071] The management server 1 may be composed of one or more server devices. In the present embodiment, the management server 1 may be configured to record information related to the generation and disappearance of the correspondence between the first object VA and the second object WA as association establishment information D10. The association establishment information D10 may be stored in a memory resource provided in at least one of the internal and external memory resources of the management server 1. The internal memory resources may include, for example, RAM, an auxiliary storage device, a storage medium, etc. The external memory resources may include, for example, an external storage device, an external computer (NAS, etc.), etc.

[0072] The obtained association establishment information D10 can be used in various scenarios. In one example, the association establishment information D10 can be used to track the relationship between the first object VA and the second object WA. As a specific example, during the period when the corresponding relationship between the first object VA and the second object WA is set, the association establishment information D10 can be used to enable the authority to establish an association with either the first object VA and the second object WA (the first object information O10 and the second object information O20) to be exercised by the other party. That is, the association establishment information D10 can be used to validate the authority of either the first object VA and the second object WA to be exercised by the other party based on the establishment of the association between the first object VA and the second object WA (described later). Figure 2 ).

[0073] In one example of the present embodiment, since the association establishment information D10 indicates a combination of a first object VA and a second object WA with which a corresponding relationship is set, the association establishment information D10 may include information of the first identifier I10 and the second identifier I20 of the corresponding individuals. The management server 1 may appropriately obtain the identifiers (I10, I20) of the objects. In one example, the management server 1 may not retain the information of the first identifier I10 and the second identifier I20 with which a corresponding relationship is set in advance, but may obtain the information from at least one of the servers (2, 3) and the terminals (4, 5) each time. In another example, the management server 1 may retain the information of at least one of the first identifier I10 and the second identifier I20 with which a corresponding relationship is set in advance.

[0074] The relationship between the management server 1 and the operating organizations of the servers (2, 3) may be arbitrary. In one example, the operating organization of the management server 1 may overlap with the operating organization of at least one of the first server 2 and the second server 3. In another example, the operating organization of the management server 1 may also be different from the operating organizations of the first server 2 and the second server 3. The system 100 of the present disclosure may be produced by the management server 1 being connected to each terminal (4, 5) via a network and being equipped in a state where each of the terminals (4, 5) can perform the above-mentioned information processing according to the intention of the operating organization of the management server 1. In the case where each server (2, 3) participates in information processing related to the establishment of association (for example, authentication processing), each server (2, 3) may be interpreted as being included in the system 100. In this case, the system 100 of the present disclosure may be produced by the management server 1 being connected to each server (2, 3) via a network and being equipped in a state where each server (2, 3) can perform information processing related to the establishment of association.

[0075] (Application example)

[0076] In one example, one of the first object VA and the second object WA may be a user. One of the first terminal 4 and the second terminal 5 that corresponds to the user may be a user terminal associated with the user. The other of the first object VA and the second object WA may be an object used by the user. One of the first terminal 4 and the second terminal 5 that corresponds to the object may be a loading terminal loaded on the object. According to one example of the present embodiment, the utilization relationship between the user and the object can be tracked.

[0077] As long as the object can be used by the user, its type is not particularly limited and can be appropriately selected according to the implementation method. In one example, the object can be a mobile body (mobility). According to an example of this embodiment, the utilization relationship between the user and the mobile body can be tracked. In addition, the type of mobile body can be appropriately selected. The mobile body can be, for example, a vehicle, a railway vehicle, an aircraft (aircraft, unmanned aircraft, etc.), a ship, etc. The mobile body can be at least any one of a manually controlled manned aircraft and an automatically controlled unmanned aircraft. In the case where the mobile body is a vehicle, the type of vehicle can be arbitrarily selected. The type of vehicle can be selected, for example, from two-wheeled vehicles, three-wheeled vehicles, four-wheeled vehicles, etc. The vehicle can include a private car, a rental car, a shared car, a taxi, a bus, etc. The vehicle can be at least any one of an autonomous driving vehicle and a manually driven vehicle. The loading terminal can be called a mobile terminal.

[0078] Figure 2 An embodiment of a scenario in which the system 100 of the present disclosure is applied is schematically shown. Figure 2In an example, the first object VA is a user and the second object WA is a mobile object. Figure 2 In the description of the example, for convenience, it is assumed that "1" is related to the user and "2" is related to the mobile body. However, the correspondence between "1" and "2" is not limited to Figure 2 "First" and "second" can be interchangeable. That is, the second object WA can be a user and the first object VA can be a mobile object.

[0079] When the first object VA is a user, an example of the first terminal 4 is a user terminal. The user terminal can be any computer such as a portable terminal (smartphone, etc.), a dedicated device (electronic key device, etc.), or other computer devices. Typically, the user terminal can be carried by the user who is the object of association establishment (each individual of the first object VA). The user's account can be shared among multiple computers, and accordingly, each computer sharing the account can be used as the user terminal (first terminal 4) of the same user.

[0080] An example of the first identifier I10 is a user identifier (user ID, my ID). The user identifier may be, for example, an ID of a user account, a personal number, identification information of a user terminal (e.g., a MAC address, terminal identification information), etc. An example of the first object information O10 is user information O10A. User information O10A may include any information related to the user. In one example, the user information O10A may be associated with various information E10 used to exercise the authority by including information related to the authority of the corresponding user (the corresponding individual of the user). Various information E10 may include, for example, public personal authentication information, settlement information, information of other service systems, etc. Public personal authentication information may include, for example, a personal number, etc. Settlement information may include, for example, credit card information, online banking information, electronic settlement information, etc. Information of other service systems may include, for example, information related to electronic prescriptions (insurer number, prescription information, etc.). Various information E10 may be managed in an external system or in the management system 100. Among them, the first server 2 may be equipped by a public institution, a neutral institution, or various enterprises (vehicle manufacturers, service operating companies, etc.). The first server 2 may also be called a user ID server, a my ID server, or the like.

[0081] On the other hand, when the second object WA is a mobile body, an example of the second terminal 5 is a mobile body terminal (on-board terminal). The mobile body terminal may be, for example, a terminal installed inside or outside the mobile body, a terminal held by a person involved in the operation of the mobile body (e.g., a driver, a crew member, etc.), or a device equipped in a facility of the mobile body (e.g., a ticket gate, etc.). When the mobile body is a vehicle, the mobile body terminal may also be referred to as a vehicle-mounted terminal.

[0082] An example of the second identifier I20 is a mobile body identifier (mobile body ID, car ID). The mobile body identifier may be, for example, the ID of a mobile body account, identification information inherent to the target mobile body (such as a car registration number, vehicle identification information, etc.), identification information of a mobile body terminal, etc. An example of the second object information O20 is mobile body information O20A. Mobile body information O20A may include any information related to the mobile body. Figure 2 In one example, at least a portion of the rights of the mobile body to exercise various information E10 associated with the user information O10A can be validated (activated) according to the association establishment setting between the user and the mobile body. The second server 3 can be provided by a public institution, a neutral institution, or various companies (vehicle manufacturers, service operating companies, etc.). The second server 3 can also be called a mobile body ID server, a car ID server, etc.

[0083] A moving object is an example of a usable object. Figure 2 The method can be applied to any situation where the user (occupant) of the object changes dynamically. The object can be other than a mobile object, such as a leased object, an accommodation facility, etc. Leased objects can include leased offices, leased spaces, etc.

[0084] The system 100 may be configured to set a correspondence (establish an association) between the user (first identifier I10) and the corresponding individual (second identifier I20) of the object of use according to the start of use of the object of use. In addition, the system 100 may be configured to cancel the correspondence (establish an association) between the corresponding individuals according to the end of use. The start and end of use may be detected by any method, for example, at the time of boarding or alighting a vehicle, lending or returning the object of use, etc. In one example, at least one of the start and end of use may be detected by the execution of data exchange between the first terminal 4 and the second terminal 5.

[0085] Among them, the objects of use can be divided into at least two types: objects that can be used repeatedly for a long time, and objects that can be used temporarily. For the sake of convenience, the former is called "frequently used objects" and the latter is called "temporarily used objects". An example of a frequently used object is the property of a user such as a private car. It is preferred to select things that are used repeatedly for a long time as frequently used objects. An example of a temporarily used object is an object owned by a person other than a user, such as a rental car, a shared car, a mobile body of a public transportation agency, a rental object, an accommodation facility, etc. The mobile body of a public transportation agency is, for example, a taxi, a bus, a railway vehicle, an airplane, a ship, etc.

[0086] In the system 100, the type of the object to be used (whether it is a frequently used object or a temporarily used object) may or may not be distinguished. In the case of distinguishing the type of the object to be used, the management system 100 may determine the type of the object to be used by any method. In one example, the object information (mobile body information, etc.) may include information indicating the type of the object to be used, and the system 100 may determine the type of the object to be used based on the information. In another example, the type of the object to be used may be determined based on information such as an identifier and attribute information. In another example, information sent from at least one of the first terminal 4 and the second terminal 5 to the management server 1 may include information indicating the type of the object to be used, and the system 100 may determine the type of the object to be used based on the information. In another example, when the server that processes the information of the object to be used is determined based on the type of the object to be used (in Figure 2 In the example of the second server 3), when the operating organization is used, the type of the object can be determined based on the operating organization of the server.

[0087] In addition, the system 100 can switch the method of, for example, the association setting process, the association release condition, the management method of the association information D10, the authentication process, etc., according to the type of the identified object.

[0088] In addition, the application scenarios of the system 100 of the present disclosure may not be limited to scenarios of tracking users and utilizing relationships between objects. In another example, the first object VA and the second object WA may both be robotic devices configured to act autonomously through automatic control. Robotic devices may include mobile objects such as self-driving vehicles and unmanned aircraft. In a scenario where two or more robotic devices interact autonomously, the system 100 of the present disclosure may be used to track the generation and disappearance of relationships between the robotic devices.

[0089] As a specific example, one of the first object VA and the second object WA may be a large autonomous driving vehicle, and the other may be a small autonomous driving vehicle. The large autonomous driving vehicle may be configured to accommodate multiple small autonomous driving vehicles. A small autonomous driving vehicle may not be able to ride in multiple large autonomous driving vehicles at the same time (i.e., at one moment, a small autonomous driving vehicle is only accommodated in one large autonomous driving vehicle). Accordingly, the first object VA may be a small autonomous driving vehicle, and the second object WA may be a large autonomous driving vehicle. The large autonomous driving vehicle may appropriately recover, transport, and release each small autonomous driving vehicle. Each small autonomous driving vehicle may be appropriately used at the release destination. In this case, the system 100 of the present disclosure may be configured to track the operating status (e.g., whether it is being transported) by setting the correspondence between the large autonomous driving vehicle and the small autonomous driving vehicle, switching the status, and releasing it.

[0090] (Relationship establishment information)

[0091] Figure 3A An example of association information D10 according to this embodiment is schematically shown. Figure 3A In one example, it is assumed that a method of using the first identifier I10 and the second identifier I20 to express the setting of the correspondence relationship is adopted. The association establishment information D10 includes the first identifier I10, the second identifier I20, the setting time and the release time. The first identifier I10 and the second identifier I20 represent the corresponding individual of the first object VA and the corresponding individual of the second object WA for which the correspondence relationship (association establishment) is set. The setting time represents the time when the correspondence relationship is set. The setting time can be composed of a timestamp. The release time represents the time when the correspondence relationship is released. The value of the release time can be added when the process of releasing the correspondence relationship is executed. The expression method of release may not be limited to such an example. In another example, the release time can be replaced by at least one of the validity period and the flag. The validity period indicates the period during which the setting of the correspondence relationship is valid. In this case, whether the setting of the correspondence relationship is valid (that is, whether the correspondence relationship is set or released) is indicated by whether it is within the validity period. The flag indicates whether the correspondence relationship is released. The flag can be set when the process of releasing the correspondence relationship is executed. In another example, the association establishment information D10 may include a field for at least one of the validity period and the flag and the release time. In addition, as long as the setting of the corresponding relationship can be indicated, the composition of the association establishment information D10 may not be limited to Figure 3AIn another example, the association establishment information D10 may also include information indicating the type of the object being used (regularly used object or temporarily used object). The type of the object being used may not necessarily be identified based on individual information. For example, the type of the object being used may be identified based on information such as an identifier.

[0092] The data format of the association establishment information D10 may not be particularly limited and may be appropriately selected according to the implementation method. The association establishment information D10 may be maintained by any database platform. In one example, the association establishment information D10 may be maintained by a relational database in a table format or the like. In another example, the association establishment information D10 may be maintained by a blockchain platform. In this case, each transaction of association establishment setting and release may be stored by the blockchain as the association establishment information D10. For example, a transaction of association establishment setting may include a first identifier I10, a second identifier I20, and a setting time. A transaction of association release may include a first identifier I10, a second identifier I20, and a release time (or information indicating release).

[0093] (First target information)

[0094] The first object information O10 may include any information related to the first object VA. For example, the first object information O10 may include a first identifier I10, attribute information of the first object VA, information related to authority, and the like. Figure 2 In the example of , the user information O10A is an example of the first object information O10.

[0095] Figure 3B An example of user information O10A according to this embodiment is schematically shown. Figure 3B In one example, user information O10A includes a user ID (first identifier I10), attribute information, and permission information. Attribute information may include any information related to the attributes of the corresponding user. Attribute information may include, for example, personal information such as name, address, age, gender, and contact information. Permission information is related to the permissions of the corresponding user. Permission information may include, for example, information for cooperating with a server for information processing related to the permissions of the execution object, information indicating the establishment of associations with various information E10, etc. In addition, the composition of user information O10A may not be limited to Figure 3B For example, the user information O10A (first object information O10) may further include information (such as registered unique information) used in authentication of the user (first object VA).

[0096] The data format of the first object information O10 (user information O10A) may not be particularly limited and may be appropriately selected according to the implementation method. The first object information O10 (user information O10A) may be maintained by any database platform. In one example, the first object information O10 (user information O10A) may be maintained by a relational database in a table format or the like. In another example, the first object information O10 (user information O10A) may be maintained by a blockchain platform.

[0097] (Second target information)

[0098] The second object information O20 includes any information related to the second object WA. The second object information O20 may include, for example, the second identifier I20, attribute information of the second object WA, information related to authority, and the like. Figure 2 In the example of , the moving body information O20A is an example of the second object information O20.

[0099] Figure 3C An example of the moving body information O20A according to this embodiment is schematically shown. Figure 3C In one example, the mobile body information O20A includes a mobile body ID (second identifier I20) and attribute information. The attribute information includes a license plate, a type (type of object), a mobile body type, and owner information. In the case where the mobile body is a vehicle, the license plate may be a car registration number. The type may be arbitrarily specified. In one example, the type is specified, for example, to indicate a range of mobile bodies such as a private car, a rental car, a shared car, and a public transportation agency that can distinguish between frequently used objects and temporarily used objects. Accordingly, the second object WA (mobile body) may be identified as a frequently used object or a temporarily used object based on the attribute information of the type. However, the method for identifying whether it is a frequently used object may not be limited to such an example, and may be appropriately selected according to the implementation method. In another example, the second object WA may be identified as a frequently used object or a temporarily used object based on other information such as an identifier. The mobile body type, for example, indicates a category such as a vehicle model. When the mobile body type and the type (type of object) are the same, the field of the mobile body type may be omitted. The owner information may include any information related to the owner of the mobile body. The owner information may include, for example, the owner's personal information such as name, address, age, gender, and contact information. The owner may also be a legal person. In addition, the composition of the mobile body information O20A may not be limited to Figure 3CThe example may be appropriately changed according to the implementation. For example, the mobile body information O20A (second object information O20) may also include information used in the authentication of the mobile body (second object WA) (such as registration-completed inherent information, etc.). In addition, the composition of the attribute information may also be appropriately changed. For example, the mobile body information O20A (attribute information) may also include information related to the mobile body terminal, such as the contact information of the mobile body terminal.

[0100] The data format of the second object information O20 (mobile body information O20A) may not be particularly limited and may be appropriately selected according to the implementation method. The second object information O20 (mobile body information O20A) may be maintained by any database platform. In one example, the second object information O20 (mobile body information O20A) may be maintained by a relational database such as a table. In another example, the second object information O20 (mobile body information O20A) may be maintained by a blockchain platform.

[0101] (Data Exchange)

[0102] In this embodiment, a series of processes related to the association establishment setting can be started by triggering the data exchange between the first terminal 4 and the second terminal 5. That is, the first terminal 4 and the second terminal 5 can be configured to perform data exchange when a utilization relationship is generated between the first object VA and the second object WA. The generation of the utilization relationship (the start of utilization) can be detected by the data exchange. According to an example of this embodiment, it can be expected that the generation of the utilization relationship can be easily detected by data exchange.

[0103] The method of data exchange may not be particularly limited and may be appropriately selected according to the implementation method. In one example, data exchange between the first terminal 4 and the second terminal 5 may be performed through wireless or wired data communication. Wireless communication may be performed, for example, through NFC (Near Field Communication), Bluetooth (registered trademark), Wi-fi (registered trademark), etc. Wired communication may be performed, for example, through wired LAN (Local Area Network), USB (Universal Serial Bus), etc. Data communication may be performed directly between the first terminal 4 and the second terminal 5, or indirectly through other computers. In another example, data exchange may be performed by methods other than data communication such as reading a QR code. For example, data exchange may be performed by one of the first terminal 4 and the second terminal 5 displaying data on a display and the other using a sensor such as an image sensor to read the displayed data.

[0104] Figure 4An example of data exchange involved in this embodiment is schematically shown. In an example of this embodiment, the first terminal 4 may have a short-range wireless communication module 431. The second terminal 5 may have a short-range wireless communication module 531. Accordingly, data exchange between terminals can be carried out through short-range wireless communication. In addition, the type of each short-range wireless communication module (431, 531) may not be particularly limited and can be appropriately selected according to the embodiment. Short-range wireless communication may include, for example, NFC, Bluetooth (registered trademark), Wi-fi (registered trademark), RFID (Radio-Frequency Identification), ZigBee (registered trademark), infrared communication (infrared transmission), etc. In an example of this embodiment, the generation of a utilization relationship can be detected by triggering data exchange based on short-range wireless communication. In addition, since it can be guaranteed that the first terminal 4 and the second terminal 5 exist within the range of short-range wireless communication, it can be expected that the generation of a utilization relationship between the first object VA and the second object WA can be properly detected.

[0105] In addition, the association establishment request may include at least one of the first identifier I10 and the second identifier I20. When the association establishment request includes the first identifier I10, the first identifier I10 may be sent from at least one of the first terminal 4 and the second terminal 5. When the first identifier I10 is sent from the first terminal 4, the first terminal 4 may obtain the first identifier I10 at any time. In one example, the first identifier I10 may be pre-stored in a memory resource of the first terminal 4. The first terminal 4 may obtain the first identifier I10 from the memory resource. In another example, the first terminal 4 may obtain the first identifier I10 using an input device, a sensor, etc. When the first identifier I10 is sent from the second terminal 5, the second terminal 5 may be assigned the first identifier I10 from the first terminal 4 during data exchange, or may obtain it through an active action. In one example, the second terminal 5 may obtain the first identifier I10 from the first terminal 4 through data communication. In another example, the second terminal 5 may obtain the first identifier I10 from the first terminal 4 by a method other than data communication, such as reading the first identifier I10 displayed as a QR code on the first terminal 4. In yet another example, the second terminal 5 may use an input device, a sensor, or the like to obtain the first identifier I10 from any one of the first object VA and the first terminal 4. Acquisition from the first object VA may include, when there is a person related to the second object WA (for example, the second object WA is a person, the second object WA is operated by a person, etc.) and the first object VA is an object, obtaining by a person related to the second object WA operating the device on behalf of the person.

[0106] Similarly, when the association establishment request includes the second identifier I20, the second identifier I20 may be sent from at least one of the first terminal 4 and the second terminal 5. When the second identifier I20 is sent from the second terminal 5, the second terminal 5 may obtain the second identifier I20 at any time. In one example, the second identifier I20 may be pre-stored in a memory resource of the second terminal 5. The second terminal 5 may obtain the second identifier I20 from the memory resource. In another example, the second terminal 5 may obtain the second identifier I20 using an input device, a sensor, etc. When the second identifier I20 is sent from the first terminal 4, the first terminal 4 may be assigned the second identifier I20 from the second terminal 5 during data exchange, or may obtain it through an active action. In one example, the first terminal 4 may obtain the second identifier I20 from the second terminal 5 through data communication. In another example, the first terminal 4 may obtain the second identifier I20 from the second terminal 5 by a method other than data communication, such as reading the second identifier I20 displayed as a QR code on the second terminal 5. In yet another example, the first terminal 4 may use an input device, a sensor, or the like to obtain the second identifier I20 from any one of the second object WA and the second terminal 5. Acquisition from the second object WA may include, when there is a person related to the first object VA (for example, the first object VA is a person, the first object VA is operated by a person, etc.) and the second object WA is an object, obtaining the second identifier I20 by operating the device on behalf of the person related to the first object VA.

[0107] For example, in the above Figure 2 In the example of , the first terminal 4 can obtain the second identifier I20 (mobile body identifier) ​​from the second terminal 5 through data communication or code reading. When the second identifier I20 is a car registration number, the first terminal 4 can obtain the second identifier I20 by photographing the license plate number with an image sensor and analyzing the obtained image. The first terminal 4 can obtain the second identifier I20 via an input device. The second terminal 5 can obtain the second identifier I20 appropriately. In addition, the second terminal 5 can obtain the first identifier I10 (user identifier) ​​through data communication or code reading. When the first identifier I10 is a personal number recorded on a card, etc., the second terminal 5 can obtain the first identifier I10 by photographing the card with an image sensor and analyzing the obtained image. The second terminal 5 can obtain the first identifier I10 via an input device. The first terminal 4 can obtain the first identifier I10 appropriately.

[0108] When an input device is used to obtain data such as each identifier (I10, I20), the terminal of one party can obtain data from the object of the other party by operating the input device of the object of the other party, in addition to obtaining the data of the object of the other party by operating the input device of the object of the other party, and also obtain the data of the object of the other party by operating the input device of one party. Figure 2 In the example, the second identifier I20 is the vehicle registration number. When an input device is used to obtain the vehicle registration number, the first terminal 4 can obtain the second identifier I20 from the mobile body (the second object WA) by the user (the first object VA) inputting the vehicle registration number through the input device.

[0109] In addition, the acquisition of the data of the object of the other party by the terminal of one party does not necessarily have to be performed at the time of data exchange. The terminal of one party can acquire the data of the object of the other party at any time different from the data exchange. The data acquisition method can adopt any of the above methods. In this case, the data exchange between the first terminal 4 and the second terminal 5 can function as a simple trigger for starting a series of processes related to the association establishment setting.

[0110] (Notification Processing)

[0111] When at least one of the processes of association establishment setting and release is executed, the management server 1 may send a notification indicating the execution result to at least one of the first terminal 4 and the second terminal 5. The sending path of the notification may not be particularly limited and may be appropriately determined according to the implementation method. In one example, the management server 1 may directly notify at least one of the first terminal 4 and the second terminal 5. In another example, the management server 1 may indirectly notify at least one of the first terminal 4 and the second terminal 5 via an external computer such as each server (2, 3).

[0112] In addition, in the case of direct notification, the management server 1 can appropriately obtain the contact information of each terminal (4, 5). The contact information can be a telephone number, an email address, account information of an application of a contact system (for example, an application of a social networking service, etc.), an identification number, etc. The management server 1 can obtain information indicating the contact information of each terminal (4, 5) at any time. In one example, the management server 1 can obtain information indicating the contact information at the time of accepting a request to establish an association, a request to release an association, etc. The information indicating the contact information can be sent from at least one of each terminal (4, 5) and each server (2, 3).

[0113] (Authentication Process)

[0114] The authentication of the first object VA and the second object WA may be performed by any method (specific examples will be described later). The authentication process of the first object VA may be performed before or after the authentication process of the second object WA. The authentication process of the first object VA may be performed at least partially in parallel with the authentication process of the second object WA.

[0115] The authentication process of the first object VA and the second object WA can be executed by at least one of the management server 1, the external server (for example, the first server 2, the second server 3), the first terminal 4 and the second terminal 5, respectively. In addition, the authentication process of the first object VA and the second object WA can be executed at any time before the corresponding relationship is set. In one example, the authentication of at least one of the first object VA and the second object WA can be performed before issuing the association establishment request. In another example, the authentication of at least one party can be entrusted together with the association establishment request and executed together with the processing involved in the association establishment setting. Entrustment together with the association establishment request can include the authentication entrustment included in the association establishment request. The authentication entrustment can be called an authentication request. In another example, the authentication of at least one party can be started according to a request from the management server 1 or an external server after the association establishment request is sent. Based on this, in the management server 1, the authentication result can be obtained before the receipt of the association establishment request, can be obtained together with the receipt of the association establishment request, or can be obtained after the receipt of the association establishment request. The authentication result may be obtained together with the association establishment request by including it in the association establishment request, or may be obtained independently of the association establishment request. In addition, in the case where the authentication is not established, obtaining the authentication result in the management server 1 may include obtaining the authentication result indicating that the authentication is not established, and the authentication result does not reach the management server 1 (no authentication result is obtained).

[0116] In one example, whether the authentication of the first object VA and the second object WA is established or not can be determined by the management server 1 or the external server. Determining whether the authentication is established or not is equivalent to performing the authentication process. In one example, the authentication process of both the first object VA and the second object WA can be performed by either the management server 1 or the external server. In another example, the authentication process of one of the first object VA and the second object WA can be performed by the management server 1, and the authentication process of the other can be performed by the external server. The external server can be, for example, the first server 2, the second server 3, etc. Acquiring the authentication result in the management server 1 can be constituted by the following process: acquiring the authentication result by performing the authentication process on the management server 1, or acquiring the authentication result from the external server. For example, the terminal of at least one of the first object VA and the second object WA can send an association establishment request including an authentication delegation to the management server 1. The authentication delegation of each object (VA, WA) can include data (such as identifiers, inherent information, certificates, etc.) used in the authentication of each object (VA, WA). The management server 1 can perform authentication processing based on the received authentication delegation, and can delegate the execution of authentication processing to the external server by sending the authentication delegation to the external server. In addition, for example, the terminal of at least one party can send the authentication delegation to the external server. The external server can perform authentication processing based on the received authentication delegation, and can delegate the execution of authentication processing to the management server 1 by sending the authentication delegation to the management server 1. When the authentication processing is performed, the external server can send the authentication result directly to the management server 1, or can send the authentication result to the management server 1 via an external computer (for example, the terminal of at least one party, etc.). In addition, as mentioned above, the timing of sending the authentication delegation may not be limited to such an example. The authentication delegation can also be sent in the data communication with the management server 1 or the external server before or after the issuance of the association establishment request. In one example of the present embodiment, by performing the authentication processing on the server side, security can be expected to be ensured.

[0117] In another example, the authentication process of at least one of the first object VA and the second object WA can be performed by at least one of the first terminal 4 and the second terminal 5. Obtaining the authentication result in the management server 1 may include obtaining the authentication result from the terminal of at least one party. For example, the terminal of at least one party can perform the authentication process of the object of at least one party as an active action. In addition, for example, the terminal of at least one party can perform the authentication process according to the request from the management server 1 or the external server. The terminal of at least one party can appropriately send the authentication result to the management server 1 together with the association establishment request or independently of the association establishment request. The terminal that performs the authentication process and the terminal that sends the authentication result among the first terminal 4 and the second terminal 5 can be the same as or different from the terminal that sends the authentication result. In the case where the terminal that performs the authentication process is different from the terminal that sends the authentication result, data exchange of the authentication result can be appropriately performed between the terminals (4, 5).

[0118] (Remove association)

[0119] In the present embodiment, the management server 1 may be configured to cancel the correspondence relationship in response to reception of a cancellation request from at least one of the first terminal 4 and the second terminal 5 or satisfaction of a predetermined cancellation condition.

[0120] (I) Release Request

[0121] In one example, the release request may be configured to include at least one of the first identifier I10 and the second identifier I20 to indicate the correspondence relationship of the release target. In another example, the release request may be configured to include replacement information to indicate the correspondence relationship of the release target.

[0122] When the first terminal 4 sends a release request including the second identifier I20, the first terminal 4 can obtain the second identifier I20 at any time. In one example, when the association establishment request is made, the first terminal 4 can obtain the second identifier I20 and store the obtained second identifier I20 in the memory resource. When the release request is made, the first terminal 4 can obtain the second identifier I20 from the memory resource. In addition, when the first terminal 4 sends a release request including the first identifier I10, the first terminal 4 can obtain the first identifier I10 at any time. In one example, the first identifier I10 can be pre-stored in the memory resource. The first terminal 4 can obtain the first identifier I10 from the memory resource.

[0123] Similarly, when the second terminal 5 sends a release request including the first identifier I10, the second terminal 5 can obtain the first identifier I10 at any time. In one example, when the association establishment request is made, the second terminal 5 can obtain the first identifier I10 and store the obtained first identifier I10 in the memory resource. When the release request is made, the second terminal 5 can obtain the first identifier I10 from the memory resource. In addition, when the second terminal 5 sends a release request including the second identifier I20, the second terminal 5 can obtain the second identifier I20 at any time. In one example, the second identifier I20 can be pre-stored in the memory resource. The second terminal 5 can obtain the second identifier I20 from the memory resource.

[0124] Figure 5 An example of the process of establishing and canceling an association according to the present embodiment is schematically shown. Figure 5 In the example, as the first route, the first terminal 4 directly sends a release request to the management server 1 (step SZ10). In addition, as the second route, the first terminal 4 gives an instruction to the second terminal 5 (step SZ10A), so that the second terminal 5 directly sends a release request to the management server 1 (step SZ11A). However, the route for sending the release request may not be limited to such an example. The first terminal 4 may also indirectly send a release request to the management server 1 via an external computer such as the first server 2. In the second route, the second terminal 5 may indirectly send a release request to the management server 1 via an external computer such as the second server 3. In addition, the starting point of the release request may not be limited to the first terminal 4. In another example, the second terminal 5 may directly or indirectly send a release request to the management server 1. In addition, the second terminal 5 may give an instruction to the first terminal 4, so that the first terminal 4 directly or indirectly sends a release request to the management server 1. After receiving the release request, the management server 1 refers to the association establishment information D10 to release the correspondence specified by the identifier included in the release request. After the release process, the management server 1 may transmit a notification indicating the result of the release process to at least one of the first terminal 4 and the second terminal 5 , similarly to when the association is set.

[0125] In one example, the process of requesting a release may include an authentication process of at least one of the first object VA and the second object WA. The authentication process during the release may be the same as the authentication process during the association establishment setting described above. However, the authentication process may not necessarily be performed during the requesting a release. In another example, the process of requesting a release may be simplified by omitting the authentication process.

[0126] The trigger of the release request can be appropriately set according to the implementation method. In one example, when at least one of the first object VA and the second object WA is a user, the release request can be sent from at least one of the first terminal 4 and the second terminal 5 by the user's operation on at least one of the first terminal 4 and the second terminal 5. That is, the trigger of the release request can be an operation performed by the user. In another example, arbitrary information processing can be performed on at least one of the first terminal 4 and the second terminal 5 along with the disappearance of the utilization relationship. The release request can be sent from at least one of the first terminal 4 and the second terminal 5 with the execution of the information processing as a trigger. For example, the arbitrary information processing can be the data exchange between the first terminal 4 and the second terminal 5. The method of data exchange when the association is released can be the same as the data exchange when the association is set. It is possible to appropriately distinguish whether it is the data exchange when the association is set or the data exchange when the association is released. For example, in Figure 2 In the example, the second terminal 5 may be provided with respective sensor devices at the entrance and exit, such as at a bus boarding and alighting gate, a railway ticket gate, etc. In this case, it is possible to distinguish whether the data exchange is when the association is established or when the association is released, based on the sensor device used in the data exchange. In addition, for example, when data exchange is performed by an application of the terminal, the application may be configured to be switchable between an association establishment setting mode and an association establishment release mode. In this case, it is possible to distinguish whether the association is established or when the association is released, based on the mode of the application.

[0127] (II) Conditions for rescission

[0128] The release condition indicates a condition for releasing the correspondence relationship of the object. The release condition can be defined appropriately according to the embodiment.

[0129] In one example, the release condition may be defined as releasing the correspondence at an arbitrarily set release time. The release time may be assigned, for example, by a user's designation or a designation from another application (scheduler, etc.). In this case, the management server 1 may release the correspondence of the object upon the arrival of the release time. The release time may be set as the validity period of the association establishment information D10. When the release time is set according to the validity period, the management server 1 may process the correspondence of the object as being released upon the arrival of the release time.

[0130] In addition, in another example, the number of correspondences that can be set for the same individual of each object (VA, WA) can be infinite or limited. In the case where the number of settable correspondences is limited, an upper limit (threshold) can be set for the number of correspondences that can be set for the same individual. The threshold can be appropriately assigned. In the case where the number of correspondences set for the corresponding individuals of at least one of the first object VA and the second object WA exceeds the upper limit, the management server 1 can cancel at least any one of the correspondences set for the corresponding individuals. Which correspondence to cancel can be appropriately determined based on priority, order, type of object, etc. The management server 1 can send a query related to the cancellation to at least one of the first terminal 4 and the second terminal 5, and decide the correspondence to be cancelled based on the answer obtained.

[0131] For example, Figure 2 As in the example of , it is assumed that the first object VA is a user and the second object WA is an object of use. In this case, the number of users who can establish correspondence with the same object of use may be infinite or limited. In the case where the number of users who can establish correspondence is limited, the upper limit of the number of users who can establish correspondence can be appropriately assigned according to the threshold value. The threshold value can be set according to the attributes of the object of use (for example, the number of passengers that can be carried). When the management server 1 newly accepts the setting of the corresponding individual correspondence relationship for the object of use, it can refer to the association establishment information D10 to extract the previous correspondence relationship that was set and maintained for the corresponding individual of the object of use. In the case where the duplication of the setting of the corresponding relationship for the corresponding individual of the object of use due to the newly accepted setting of the corresponding relationship exceeds the threshold, the management server 1 can abandon the request for the setting of the newly accepted correspondence relationship, or cancel at least any one of the extracted previous correspondence relationships. In the case of canceling the previous correspondence relationship, the management server 1 can decide the correspondence relationship to be canceled according to the priority and order of the users (for example, the earlier the correspondence relationship is set, the more it will be canceled).

[0132] As a specific example, Figure 2 In the example, it is assumed that the mobile object is a private car, and the first user and the second user are, for example, family members who share the private car of the object. The private car can be renamed as a frequently used object. For the sake of convenience, it is assumed that the number of users who can establish a correspondence with the private car of the object is 1. In this case, during the period when the correspondence between one of the first user and the second user and the private car of the object is set, the management server 1 can cancel the previous correspondence (the correspondence between one party and the private car of the object) according to the setting of the correspondence between the other party and the private car of the object.

[0133] The same can be said about users. That is, the number of objects that can be associated with the same user can be unlimited or limited. When the number of objects that can be associated is limited and the number of corresponding relationships set for the user exceeds the upper limit, the management server 1 can abandon the request for setting a newly accepted corresponding relationship or cancel at least one of the extracted previous corresponding relationships. When canceling the previous corresponding relationship, the management server 1 can decide the corresponding relationship to be canceled based on the priority and type of the object (for example, whether it is a frequently used object or a temporary object).

[0134] As described above, the management server 1 can terminate the correspondence upon receipt of a termination request from at least one of the first terminal 4 and the second terminal 5 or upon the establishment of a predetermined termination condition. According to an example of this embodiment, the disappearance of the utilization relationship between the first object VA and the second object WA can be tracked. In addition, the association establishment information D10 after the termination of the correspondence can be saved as a history record.

[0135] (Normal processing / Simplified processing)

[0136] In the present embodiment, when the prescribed conditions are not satisfied, authentication processing of both the first object VA and the second object WA is performed. On the other hand, when the prescribed conditions are satisfied, authentication processing of either the first object VA or the second object WA is omitted. Hereinafter, for the sake of convenience, the processing of the former route of performing authentication processing of both the first object VA and the second object WA (i.e., not omitting authentication processing) is also referred to as "normal processing of association establishment setting". The processing of the latter route of omitting authentication processing of either the first object VA or the second object WA to set the corresponding relationship is also referred to as "simplified processing of association establishment setting".

[0137] Omitting authentication may include omitting obtaining of authentication results. Omitting authentication in the management server 1 may include the management server 1 omitting execution of authentication processing, and the management server 1 omitting obtaining of authentication results executed by other devices other than the management server 1. In the latter case, execution of authentication processing may be omitted in other devices.

[0138] The switching between normal processing and simplified processing can be performed by any method. In one example, when performing authentication processing, whether the prescribed conditions are met can be determined by at least one of the management server 1, the external server (the first server 2, the second server 3, etc.), the first terminal 4 and the second terminal 5. As a result of the determination process, it is possible to switch whether to perform simplified processing. Any device can determine whether the prescribed conditions are met by at least one of the information it maintains and the information provided from other devices. The information used in the determination can be appropriately selected according to the prescribed conditions. In addition, in another example, for example, a program including a mode for performing simplified processing can be installed only on a terminal that may meet the prescribed conditions, such as a terminal that allows the use of objects for simplified processing, and whether to perform simplified processing can be switched by the action of the terminal. The processing of the mode for performing simplified processing can include, for example, storing information on the object target of the association establishment, sending a request for association establishment based on the simplified processing, etc. As described above, the switching between normal processing and simplified processing can be implemented as the execution result of any information processing such as the determination processing, or it can be implemented without information processing and by the satisfaction of prescribed conditions.

[0139] The association establishment request based on the simplified processing may be sent from at least one of the first terminal 4 and the second terminal 5. At least one of the first terminal 4 and the second terminal 5 may send the association establishment request based on the simplified processing directly to the management server 1, or may send it indirectly to the management server 1 via an external computer (for example, an external server such as the first server 2 and the second server 3). In the case where the authentication processing is performed by the external server, omitting the authentication may include omitting the data communication with the external server, and omitting the execution of the authentication processing while performing the data communication with the external server and performing the next information processing.

[0140] In one example, in the case of adopting a method of performing authentication processing by the management server 1 or an external server, the first terminal 4 of the first object VA can be configured to perform the following processing: when a utilization relationship is generated between the first object VA and the second object WA, a request for establishing an association is sent to the management server 1; the management server 1 sets the corresponding relationship between the first object VA and the second object WA by sending the request for establishing an association in cooperation with the second terminal 5 of the second object WA, or by causing the second terminal 5 to send the request for establishing an association. In the case where the prescribed conditions are not satisfied, the request for establishing an association can include the authentication delegation of the first object VA and the second object WA. The authentication processing of each object (VA, WA) corresponding to the authentication delegation can be performed by at least one of the management server 1 and the external server (the first server 2, the second server 3, etc.). Setting the corresponding relationship between the first object VA and the second object WA can be configured by setting the corresponding relationship between the first object VA and the second object WA based on the fact that the authentication of the first object VA and the second object WA performed based on the authentication delegation is established. On the other hand, if the prescribed conditions are met, the authentication delegation of either the first object VA or the second object WA may be omitted, and the association establishment request may include the authentication delegation of the other object. The setting of the correspondence between the first object VA and the second object WA may be configured by setting the correspondence between the first object VA and the second object WA based on the establishment of the authentication of the other object performed based on the authentication delegation.

[0141] Similarly, in the case of adopting a method of performing authentication processing by the management server 1 or an external server, the second terminal 5 of the second object WA can be configured to perform the following processing: when a utilization relationship is generated between the first object VA and the second object WA, a request for establishing an association is sent to the management server 1; the request for establishing an association is sent in cooperation with the first terminal 4 of the first object VA, or the first terminal 4 is caused to send a request for establishing an association so that the management server 1 sets the corresponding relationship between the first object VA and the second object WA. In the case where the prescribed conditions are not satisfied, the request for establishing an association may include an authentication delegation of the first object VA and the second object WA. The authentication processing of each object (VA, WA) corresponding to the authentication delegation may be performed by at least one of the management server 1 and the external server (the first server 2, the second server 3, etc.). Setting the corresponding relationship between the first object VA and the second object WA can be configured by setting the corresponding relationship between the first object VA and the second object WA based on the fact that the authentication of the first object VA and the second object WA performed based on the authentication delegation is established. On the other hand, if the prescribed conditions are met, the authentication delegation of either the first object VA or the second object WA may be omitted, and the association establishment request may include the authentication delegation of the other object. The setting of the correspondence between the first object VA and the second object WA may be configured by setting the correspondence between the first object VA and the second object WA based on the establishment of the authentication of the other object performed based on the authentication delegation.

[0142] It is possible to appropriately determine whether the process to be executed is simplified processing or normal processing. In one example, when the authentication process is performed on at least one of the management server 1 and the external server, the management server 1 and the external server can determine which process to execute between simplified processing and normal processing based on the information included in the association establishment request from at least one of the first terminal 4 and the second terminal 5. For example, the association establishment request may include information indicating whether the process to be executed is simplified processing, and it can be determined whether to execute between simplified processing and normal processing based on the information. In addition, it is possible to determine whether to execute between simplified processing and normal processing based on information related to at least one of the first object VA and the second object WA, such as the first identifier I10, the second identifier I20, and a combination thereof.

[0143] In one example, the association establishment request based on simplified processing may include the first identifier I10 and the second identifier I20. The first identifier I10 and the second identifier I20 included in the association establishment request may be obtained from at least one of the terminals (4, 5) and the external server in the process of being sent from at least one of the first terminal 4 and the second terminal 5 to the management server 1. However, as described above, the configuration of the association establishment request based on simplified processing may not be limited to such an example. In another example, in the association establishment request based on simplified processing, at least one of the first identifier I10 and the second identifier I20 may be omitted by using alternative information.

[0144] In addition, in one example, in simplified processing, the sending method of the authentication processing of the other party of the first object VA and the second object WA may be the same as or different from the sending method of normal processing. For example, in normal processing, it is assumed that the first terminal 4 entrusts the authentication of the second object WA to the second server 3, and the second terminal 5 entrusts the authentication of the first object VA to the first server 2. In this case, in one example, when simplified processing is performed, the first terminal 4 may entrust the authentication of the second object WA to the second server 3. Alternatively, the second terminal 5 may entrust the authentication of the first object VA to the first server 2. In another example, when simplified processing is performed, the first terminal 4 may entrust the authentication of the first object VA to the first server 2. Alternatively, the second terminal 5 may entrust the authentication of the second object WA to the second server 3.

[0145] Furthermore, as one of the optional configurations, at least one of the management server 1 and the external server (the first server 2, the second server 3, etc.) may obtain identification information (MAC address, terminal identification information, etc.) of at least one of the first terminal 4 and the second terminal 5 that are allowed to be simplified and store the obtained identification information as a registration process for the object allowed to be simplified. This registration process may be performed at any time, such as when the association establishment setting was performed in the past. At least one of the management server 1 and the external server may be configured to accept a request for association establishment setting based on simplified processing only from the terminal identified by the identification information.

[0146] In one example, the trigger of the delegation of association establishment setting based on simplified processing can be the same as the normal processing. That is, at least one of the first terminal 4 and the second terminal 5 can use the data exchange between the first terminal 4 and the second terminal 5 as a trigger to send the delegation of association establishment setting based on simplified processing. However, the trigger of simplified processing may not be limited to such an example. In another example, when at least one of the first object VA and the second object WA is a user, the delegation of association establishment setting based on simplified processing can be sent from the terminal of at least one of the first terminal 4 and the second terminal 5 by the user's operation on the terminal of at least one of the first terminal 4 and the second terminal 5. That is, the trigger of the delegation of association establishment setting based on simplified processing can be an operation performed by the user. In another example, the trigger of the delegation of association establishment setting based on simplified processing can be an instruction issued by other applications (schedulers, etc.). In another example, arbitrary information processing can be performed on at least one of the first terminal 4 and the second terminal 5 along with the generation of the utilization relationship. The arbitrary information processing can be used as a trigger to send the delegation of association establishment setting based on simplified processing from at least one of the first terminal 4 and the second terminal 5.

[0147] In addition, in one example, the release process of the correspondence relationship set by the simplified process (release process for the simplified process) can be the same as the process of releasing the association in the above-mentioned normal process (release process for the normal process). However, the release process for the simplified process does not necessarily have to be consistent with the release process for the normal process. The correspondence relationship set by the simplified process can be appropriately released. In another example, when the sending route of the setting delegation based on the correspondence relationship of the simplified process is different from the sending route of the release delegation for the normal process, the sending route of the release delegation for the simplified process can be consistent with the sending route of the setting delegation based on the correspondence relationship of the simplified process.

[0148] In addition, in the simplified processing, the object for which the authentication processing is omitted may be any one of the first object VA and the second object WA, and may be appropriately selected according to the implementation method. The object for which the authentication processing is omitted may be selected, for example, according to the type and relationship of each object (VA, WA). In one example, the first object VA may be a user, and the second object WA may be an object used by the user. The authentication of the object of either the first object VA or the second object WA (the authentication that is omitted) may be the authentication of the object when the prescribed conditions are met. The authentication of the other object (the authentication that is not omitted) may be the authentication of the user. According to an example of the present implementation method, by omitting the authentication of the object while ensuring security through user authentication, a reduction in workload can be achieved.

[0149] (Specified conditions)

[0150] The prescribed conditions specify which of the normal processing and the simplified processing is to be performed. The prescribed conditions may be appropriately determined according to the implementation method. In one example, when the generation and disappearance of the utilization relationship repeatedly occur between the same combination of the first object VA and the second object WA, the system 100 may perform the authentication processing of the first object VA and the second object WA each time, and repeatedly set and release the corresponding relationship. However, in the case where the frequency of the repeated generation and disappearance of the utilization relationship is high, there is a possibility of a large workload if the same authentication processing is performed each time. In view of this, it is preferred that the prescribed conditions are specified to select the simplified processing for the combination of the first object VA and the second object WA where the frequency of the repeated generation and disappearance of such a utilization relationship is likely to increase. The prescribed conditions may include at least one of the following two conditions.

[0151] (1) Condition 1

[0152] Figure 6 An example of the prescribed condition (first condition) involved in this embodiment is schematically shown. For example, due to the frequent use of objects, at least one of the first object VA and the second object WA is of a specific type, and the frequency of the repeated generation and disappearance of the use relationship may increase. In view of this, the first condition may be that at least one of the first object VA and the second object WA is of a specific type. The prescribed conditions may include the first condition.

[0153] That is, when the types of the first object VA and the second object WA are not specific types, the system 100 can set the corresponding relationship through normal processing. On the other hand, when the type of at least one of the first object VA and the second object WA is a specific type, the system 100 can set the corresponding relationship through simplified processing. In one example, a specific type can be set for each of the first object VA and the second object WA. In another example, a specific type can be set only for the object of one of the first object VA and the second object WA, and the object of the other can be omitted. According to an example of the present embodiment, whether to perform simplified processing can be controlled according to the type of at least one of the first object VA and the second object WA.

[0154] The specific category can be appropriately set according to the implementation method. In one example, the first object VA can be a user, and the second object WA can be an object used by the user. Moreover, the category of at least one of the first object VA and the second object WA is a specific category, including that the object is a frequently used object that is repeatedly used by the user. That is, the first condition can include that the object is a frequently used object that is repeatedly used by the user. Frequently used objects are more likely to have a higher frequency of repeated generation and disappearance of utilization relationships than temporary objects. Therefore, according to an example of this embodiment, by allowing simplified processing for frequently used objects, it is possible to track the utilization relationship between users and objects while ensuring safety and reduce their workload. In addition, simplified processing may be allowed or not allowed for temporary objects. In one example, the system 100 can be configured to establish a corresponding relationship through normal processing whenever a utilization relationship is generated by not allowing simplified processing for temporary objects.

[0155] The switching of the authentication mode corresponding to the type can be performed by any method. In one example, before starting the execution of the authentication process, at least one of the management server 1, the external server, the first terminal 4 and the second terminal 5 can identify the type of at least one of the first object VA and the second object WA, and determine which process to perform, the normal process or the simplified process, based on the result of the identification. The execution of the authentication process can be started, for example, by at least one of the first terminal 4 and the second terminal 5 obtaining data used in the authentication. The external server can be, for example, the first server 2, the second server 3, etc. The type of the object of at least one party can be appropriately identified. In one example, the type of the object of at least one party can be identified by the information included in each object information (O10, O20) such as an identifier and attribute information. In the case of the above-mentioned object, it can be identified whether the object is a frequently used object based on the attribute information (e.g., type, mobile type) included in the mobile body information O20A. At least one device can retain information for identifying the type in advance, and the type of the object of at least one party can be identified by the information retained in the external device. Alternatively, at least one device can identify the type of the object of at least one party by referring to the information retained in the external device. At least one of the first terminal 4 and the second terminal 5 can determine whether to execute the normal process or the simplified process, and start the authentication process in a mode corresponding to the determined result. Alternatively, at least one of the terminals can receive the determination result from at least one of the management server 1 and the external server, and start the authentication process in a mode corresponding to the received determination result. In another example, only the terminals ( Figure 2A program including a mode for executing simplified processing is installed in a terminal of an object that meets a specific type of condition, such as a second terminal 5), and whether to execute simplified processing is switched through the action of the terminal.

[0156] (2) Condition 2

[0157] Figure 7 An example of the prescribed condition (second condition) involved in this embodiment is schematically shown. Whether the generation and disappearance of the utilization relationship occur repeatedly can be determined based on the historical record of the association establishment setting. In view of this, the second condition may be that a corresponding relationship has been set for the same combination of the first object VA and the second object WA (a combination of the same individuals) in the past. The prescribed condition may include the second condition.

[0158] That is, in the case where the correspondence has not been set for the combination of the same individual of the first object VA and the second object WA in the past, the system 100 can set the correspondence through normal processing. On the other hand, in the case where the correspondence has been set for the combination of the same individual in the past, the system 100 can set the correspondence through simplified processing. According to an example of this embodiment, by performing at least one authentication process based on the normal processing mode, security can be ensured, and by performing the authentication process based on the simplified processing mode thereafter, the workload can be reduced.

[0159] The switching of the authentication mode based on the second condition can be performed by any method. The information of the combination of the first object VA and the second object WA, which have been set to correspond to each other in the past, can be managed by at least one of the management server 1, the external server, the first terminal 4, and the second terminal 5. Management includes updating (generating) and deleting data stored in at least one of the memory in the device and the memory of the external device.

[0160] In one example, the association establishment information D10 is also maintained as a historical record after the corresponding relationship is released. The management server 1 can determine whether the combination of the first object VA and the second object WA that accepted the association establishment request is a combination for which a corresponding relationship has been set in the past based on the historical record of the association establishment information D10. In the case where it is determined that it is a combination for which a corresponding relationship has been set in the past, the management server 1 can accept the association establishment setting based on simplified processing. In addition, the management server 1 can send an instruction to enable simplified processing for the combination (for example, an instruction to start processing related to authentication in simplified processing mode) to at least one of the first terminal 4 and the second terminal 5.

[0161] In another example, at any time such as when the association establishment setting is based on the normal processing mode, the first terminal 4 can obtain the second identifier I20 of the second object WA and store the obtained second identifier I20 as an object target for which a corresponding relationship has been set in the past (i.e., an object target that allows simplified processing). Similarly, the second terminal 5 can also obtain the first identifier I10 of the first object VA and store the obtained first identifier I10 as an object target for simplified processing. Thus, at least one of the first terminal 4 and the second terminal 5 can maintain information about object targets for which a corresponding relationship has been set in the past, and can use the maintained information about the object targets to determine which process to perform, the normal processing or the simplified processing. For example, in at least one of the terminals, by executing the association establishment setting based on the normal processing mode, the association establishment setting based on the simple processing mode can be validated for the same object target. Accordingly, at least one of the terminals can be configured to be able to execute an association establishment request based on the simple processing mode for the corresponding object target.

[0162] In another example, the external server may save the combination of the first object VA and the second object WA in an accessible storage area when participating in the authentication process. For example, the first server 2 may accept the authentication of the first object VA by receiving the data used in the authentication of the first object VA together with the first identifier I10. At this time, the first server 2 may also receive the second identifier I20 of the second object WA that is the object target for which the corresponding relationship is set. The first server 2 may maintain the information of the object target for which the corresponding relationship was set in the past by establishing an association storage between the second identifier I20 and the first identifier I10 (first object information O10). The same is true for the second server 3. Accordingly, when the external server newly participates in the authentication process, it can determine whether the combination of the first object VA and the second object WA for which the corresponding relationship is required to be set in the authentication process to be participated is a combination for which the corresponding relationship was set in the past by referring to the maintained information. In the case where it is determined that it is a combination for which the corresponding relationship was set in the past, the external server may accept the association establishment setting based on the simplified processing. Furthermore, the external server may transmit a command to enable simplified processing for the combination (for example, a command to start processing related to authentication in simplified processing mode) to at least one of the first terminal 4 and the second terminal 5 .

[0163] In one example, the system 100 may be configured to continuously perform association establishment settings based on the simplified processing mode after the simplified processing mode is validated by executing the authentication process based on the normal processing mode once. That is, the past range may be infinite. In another example, the validation of the simplified processing mode may be temporary, and the authentication process based on the normal processing mode may be executed again after the validation of the simplified processing mode is canceled. That is, the past range may be limited. The validation of the simplified processing mode may be canceled for any reason, such as the expiration of the validity period.

[0164] In addition, when executing the process related to the authentication based on the normal processing mode, at least one of the first terminal 4 and the second terminal 5 may store at least a part of the data (such as the identifier, the inherent information, the certificate, etc.) used in the authentication in the memory resource. Furthermore, when starting the execution of the process based on the simplified processing mode, at least one of the first terminal 4 and the second terminal 5 may read the data used in the authentication from the memory resource and execute the process related to the authentication using the read data.

[0165] The first condition and the second condition can be used in combination. That is, the prescribed condition can include that a correspondence relationship has been set for the same combination of the first object VA and the second object WA in the past and the type of at least one of the first object VA and the second object WA is a specific type. According to an example of this embodiment, by requiring at least one authentication process based on the normal process even for a specific type, it is possible to achieve a reduction in workload while expecting to ensure security.

[0166] In addition, when the first condition and the second condition are used in combination, the first object VA may be a user, and the second object WA may be an object used by the user. Furthermore, the specific type of at least one of the first object VA and the second object WA may include that the object is a frequently used object repeatedly used by the user. According to an example of this embodiment, by requiring at least one authentication process based on the usual process for frequently used objects, it is possible to reduce the workload while expecting to ensure security.

[0167] The type of the object to be utilized can be appropriately selected according to the implementation method. In one example, the object to be utilized can be a mobile object ( Figure 2 Thus, in the case of a mobile object, it is possible to track the usage relationship while ensuring safety and reduce the workload. In another example, the frequently used object may be a private car. With respect to the private car, it is possible to reduce the workload of tracking the usage relationship.

[0168] (Confirmation of continued use)

[0169] As one of the optional configurations, after the correspondence relationship between the corresponding individual of the first object VA and the corresponding individual of the second object WA is set, the management server 1 may further execute a process for confirming whether the correspondence relationship continues (confirmation process). The method for confirming continued use may be appropriately selected according to the embodiment.

[0170] (i-1) Confirmation processing based on authentication

[0171] In one example, the management server 1 may confirm the continuation of the correspondence relationship by authenticating at least one of the first object VA and the second object WA via at least one of the first terminal 4 and the second terminal 5. The authentication method may be performed by any method, similar to the association establishment setting. Figure 2 In the example, for example, the user can be authenticated by using an image sensor equipped on the mobile body to perform facial authentication of the user, using a fingerprint reader installed on the handle to perform fingerprint authentication of the user, or by making the user speak and using a microphone equipped on the mobile body to perform voiceprint authentication. The authentication process can be performed by at least one of the terminal (4, 5), the server (2, 3) and the management server 1. In the case where the authentication process is performed by the server (2, 3), the data used in the authentication can be directly sent from the terminal (4, 5) to the server (2, 3), or indirectly sent to the server (2, 3) via an external computer such as the management server 1. In the case where the authentication process is performed by the management server 1, the data used in the authentication can be directly sent from the terminal (4, 5) to the management server 1, or indirectly sent to the management server 1 via an external computer such as each server (2, 3). The management server 1 can appropriately obtain the authentication result, and can determine that the corresponding relationship continues when the authentication of the object is established in the obtained authentication result, and determine that the corresponding relationship does not continue when the authentication is not established.

[0172] (i-2) Confirmation processing based on notification

[0173] In another example, when at least one of the first object VA and the second object WA is a user (for example Figure 2 In the case of a confirmation notification, the management server 1 may directly or indirectly send a confirmation notification including an operating element to at least one of the first terminal 4 and the second terminal 5. The operating element may be composed of, for example, a confirmation button, a reply button, a link, etc. The destination of the confirmation notification may not necessarily correspond to the user. Figure 2In the case of the above, the management server 1 may send a confirmation notification to at least one of the first terminal 4 and the second terminal 5. The sending destination of the confirmation notification may be the same as or different from the sending destination of the notification indicating the result of the processing related to the association establishment. The confirmation notification may be configured to return a response directly or indirectly to the management server 1 according to the user's operation on the operating element. The management server 1 may determine that the corresponding relationship continues when a response based on the operation of the operating element is received within a prescribed period, and determine that the corresponding relationship does not continue when no response is received.

[0174] (i-3) Confirmation Processing Based on Position Information

[0175] Figure 8 An example of the confirmation process of continued use involved in the present embodiment is schematically shown. In the case of tracking the use relationship in the real world, the first terminal 4 may include a positioning module 47. The first terminal 4 may also be configured to locate the current position of the first terminal 4 through the positioning module 47 of the first terminal 4, and send the positioning result of the current position of the first terminal 4 to the management server 1. In addition, the second terminal 5 may include a positioning module 57. The second terminal 5 may also be configured to locate the current position of the second terminal 5 through the positioning module 57 of the second terminal 5, and send the positioning result of the current position of the second terminal 5 to the management server 1.

[0176] Accordingly, the management server 1 can also be configured to receive the positioning result of the current position (RP10, RP20) of each terminal (4, 5) from each terminal (4, 5) after setting the corresponding relationship between the first object VA and the second object WA, and determine in real time whether the received positioning result of the current position (RP10, RP20) of each terminal (4, 5) satisfies the conditions for utilizing the relationship. If the positioning result of the current position (RP10, RP20) of each terminal (4, 5) satisfies the conditions for utilizing the relationship, it is determined that the corresponding relationship between the first object VA and the second object WA continues; otherwise, it is determined that the corresponding relationship does not continue.

[0177] The conditions of the utilization relationship can be appropriately set according to the embodiment, such as the degree of proximity of the user to the riding vehicle. In one example, the conditions of the utilization relationship can be defined by a range DR of distance based on the current position RP10 of the first terminal 4 or the current position RP20 of the second terminal 5. In this case, whether the conditions of the utilization relationship are satisfied can be determined by whether the user is within the range DR. Figure 8A scenario is envisioned in which the current position RP10 of the first terminal 4 is used as a reference. In this scenario, since the current position RP20 of the second terminal 5 is within the range DR, it can be determined that the conditions for the utilization relationship are satisfied. On the other hand, since the current position RP20 of the second terminal 5 is outside the range DR, it can be determined that the conditions for the utilization relationship are not satisfied.

[0178] In addition, the range DR can be appropriately set so as to be able to determine the second object WA with which the utilization relationship has been established. The shape of the range DR can be arbitrarily specified. The range DR can be specified so that the distances in each direction are the same, or can be specified so that the distances in at least some directions are different.

[0179] The type of each positioning module (47, 57) is not particularly limited and can be appropriately selected according to the implementation. Each positioning module (47, 57) can be, for example, a GPS (Global Positioning Satellite) module, a GNSS (Global Navigation Satellite System) module, or the like.

[0180] The current position (RP10, RP20) of each terminal (4, 5) can be sent to the management server 1 at any time before the confirmation process is performed. In one example, each terminal (4, 5) can report the information of each current position to the management server 1 as an active information process such as periodic transmission. In this case, the management server 1 can use the current positions recently reported from each terminal (4, 5) as each current position (RP10, RP20) to determine whether the conditions of the utilization relationship are met. In another example, at any time before the confirmation process is performed, the management server 1 can directly or indirectly send a request to each terminal (4, 5). Each terminal (4, 5) can report the latest current positions (RP10, RP20) to the management server 1 in real time based on the request. The management server 1 can determine whether the conditions of the utilization relationship are met based on the information of the latest current positions (RP10, RP20) reported in real time. In any of the embodiments, when the most recent current location information of at least one of the first terminal 4 and the second terminal 5 cannot be obtained due to power failure or the like, the management server 1 may determine that the utilization relationship condition is not satisfied.

[0181] In addition, the reporting target of the information of each current location can be appropriately selected according to the implementation method. In one example, the reporting target of the information of each current location can be the management server 1. Accordingly, the information of each current location can be managed by the management server 1. In another example, the reporting target of the information of each current location can be an external server (the first server 2, the second server 3, etc.). Accordingly, the information of each current location can be managed by the external server. The management server 1 can obtain the information of each current location (RP10, RP20) from the external server. Reporting to the management server 1 includes reporting directly to the management server 1 and reporting indirectly to the management server 1 via an external server. The reported information of each current location can be abandoned after it is no longer used in the confirmation process, or it can be saved as a historical record for at least a specified period of time. In the case of directly reporting to the management server 1, the information of each current location can be saved in the management server 1, or it can be saved in an external server (the first server 2, the second server 3, NAS, etc.). Similarly, in the case of indirectly reporting to the management server 1, the information of each current location can be saved in the management server 1, or it can be saved in an external server. According to an example of the present embodiment, by using the relationship between the positions of the first object VA and the second object WA (the first terminal 4 and the second terminal 5 ), it is possible to appropriately check the continuation of the correspondence relationship.

[0182] (ii)

[0183] If it is determined that the correspondence relationship continues, the management server 1 may maintain the setting of the correspondence relationship. On the other hand, if it is determined that the correspondence relationship does not continue, the management server 1 may cancel the correspondence relationship. The management server 1 may be configured to update the state of the correspondence relationship by repeatedly performing the confirmation process periodically or irregularly after the correspondence relationship is set until the correspondence relationship is canceled.

[0184] In addition, when the management server 1 determines that the correspondence relationship is not continuing, the correspondence relationship may be immediately terminated, or the correspondence relationship may be terminated after a predetermined period of retention. The timing of the termination may be appropriately determined according to the implementation method. In the case of the latter method, when the continuation of the correspondence relationship is confirmed by at least one of the above methods during retention, the management server 1 may restore the setting of the correspondence relationship. Thus, in the case of temporary departure, the correspondence relationship is not terminated immediately, and the setting of the correspondence relationship can be restored as soon as possible.

[0185] (Use scenarios of association establishment information)

[0186] As described above, the association information D10 can be used in various situations. In one example, the association information D10 can be used only to track the generation and disappearance of the relationship between the first object VA and the second object WA.

[0187] In another example, the association establishment information D10 can be used to enable at least a portion of the authority to establish a correspondence with either the first object VA or the second object WA to be exercised from the other party during the period in which a correspondence is established between the first object VA and the second object WA. For example, the management server 1 can be configured to further perform the following processing: based on the establishment of a correspondence between the first object VA and the second object WA, the exercise of the authority associated with the corresponding first object VA via the second object WA with which the correspondence is established is validated. In addition, the management server 1 can be configured to further perform the following processing: based on the termination of the correspondence, the exercise of the authority is invalidated. Figure 2 In the example of, the association establishment information D10 can be used to enable the mobile body to exercise at least a part of the authority to establish a correspondence with the user during the period when the correspondence is set between the user and the mobile body. According to an example of this embodiment, the permission and prohibition of the exercise of the authority of the first object VA can be controlled by the second object WA according to the setting and release of the correspondence.

[0188] Fig. 9 An example of a usage scenario of the association information D10 according to the present embodiment is schematically shown. Fig. 9 Conceived in Figure 2 In the example, a scenario is described in which the authority corresponding to the user is exercised from the mobile body. In addition, it is assumed that the association establishment information D10 is constituted by including a first identifier I10 and a second identifier I20 to represent the first object VA (user) and the second object WA (mobile body) with which the corresponding relationship is set. Furthermore, a scenario is envisioned in which the user's information is managed by the first server 2 and the mobile body's information is managed by the second server 3. The external system SY1 is equipped in a place where various services are exercised (such as a parking lot, etc.), and is configured to perform information processing for providing the service of the object to the user who has the authority to the object. The composition and service of the external system SY1 are not particularly limited and can be appropriately selected according to the implementation method.

[0189] First, in step U10, the external system SY1 can obtain the second identifier I20 (mobile body identifier) ​​from the moving body of the object. The method for obtaining the second identifier I20 can be appropriately selected according to the implementation method. In one example, the external system SY1 can obtain the second identifier I20 from the second terminal 5 by exchanging data with the second terminal 5. The method of data exchange can be the same as the data exchange between the first terminal 4 and the second terminal 5. In another example, when the second identifier I20 is a car registration number, the external system SY1 can capture the license plate number through an image sensor and obtain the second identifier I20 by analyzing the obtained image.

[0190] In step U20, the external system SY1 can use the obtained second identifier I20 as a query to inquire the management server 1 whether there is a valid correspondence relationship at the object date and time for the moving body of the object. Valid means that the setting of the correspondence relationship is maintained at the object date and time. In addition, the object date and time is basically the current (instant), but it is not limited to this. For example, in the case of performing a settlement process for a past date and time, the object date and time may be a past date and time. When there is a valid correspondence relationship, the first identifier I10 (user identifier) ​​of the user who establishes a correspondence with the moving body of the object is extracted. On the other hand, when there is no valid correspondence relationship and the user who establishes a correspondence with the moving body of the object cannot be extracted, this processing can be ended.

[0191] In step U30, the external system SY1 can use the extracted first identifier I10 as a query to inquire about the exercisable authority from the first server 2 for the user corresponding to the mobile body of the object. The first server 2 can refer to the first object information O10 (user information O10A) to extract the exercisable authority associated with the user of the object. In the case where the exercisable authority cannot be extracted, the present process can be terminated. In addition, in the first object information O10 (user information O10A), whether the mobile body is allowed to exercise the authority can be set for each authority. The exercisable authority can be extracted based on the setting. In addition, when the authority of the object that the external system SY1 wants to exercise is not included in the exercisable authority, the present process can also be terminated. The authority to exercise the object can be appropriately specified at any time. In one example, the authority to exercise the object can be pre-specified in the external system SY1 or specified by the user.

[0192] In step U40, when the exercisable permissions include permissions for the object, the external system SY1 can perform processing for exercising the permissions for the object. Thus, the permissions established corresponding to the user can be exercised from the mobile body, and the user can receive services via the mobile body. For example, when the permission information includes information of public personal authentication and the permissions of the object are related to public personal authentication, the user can receive public services via the mobile body. In addition, for example, when the permission information includes settlement information and the permissions of the object are related to settlement, the user can receive settlement services via the mobile body. Settlement services can be, for example, payment of parking lot usage fees, highway fees, drive through fees, public transportation fees, rental fees, and the like. In addition, for example, when the permission information includes information related to electronic prescriptions and the object's permission is to accept medicines prescribed according to electronic prescriptions, the user can exercise the electronic prescriptions via the mobile body and receive the medicines.

[0193] In addition, the processing steps for exercising the above-mentioned authority are only an example, and each step can be changed as much as possible. Regarding the above-mentioned processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. In addition, in the above-mentioned processing steps, the user can be replaced by the first object VA, and the mobile body can be replaced by the second object WA. Moreover, in the above-mentioned processing steps, "first" and "second" can be replaced.

[0194] (Data communication between devices)

[0195] The data communication between the devices (management server 1, first server 2, second server 3, first terminal 4 and second terminal 5) may not be particularly limited and may be appropriately selected according to the implementation method. The network between the devices may be appropriately selected from, for example, the Internet, a wireless communication network, a mobile communication network, a telephone network, a dedicated network, a local area network, etc. The data communication between the devices may be encrypted by methods such as SSL (Secure Socket Layer) and TLS (Transport Layer Security). In one example, each terminal (4, 5) may have a SIM (Subscriber Identity Module), and the data communication between each terminal (4, 5) and the server (management server 1, first server 2, second server 3) may be performed by encrypted communication using the SIM.

[0196] [2 Configuration example]

[0197] [Hardware Configuration Example]

[0198] (Management Server)

[0199] Fig. 10AAn example of the hardware configuration of the management server 1 according to the present embodiment is schematically shown. The management server 1 according to the present embodiment is a computer in which a control unit 11, a storage unit 12, a communication interface 13, an input device 14, an output device 15, and a drive 16 are electrically connected.

[0200] The control unit 11 includes a CPU (Central Processing Unit) as a hardware processor, RAM (Random Access Memory), ROM (Read Only Memory), etc., and is configured to execute arbitrary information processing based on programs and various data. The control unit 11 (CPU) is an example of a processor resource of the management server 1.

[0201] The storage unit 12 may be composed of, for example, a hard disk drive, a solid state drive, a semiconductor memory, etc. The storage unit 12 (as well as RAM and ROM) is an example of a memory resource. In the present embodiment, the storage unit 12 stores various information such as the management program 81 and the association establishment information D10. The management program 81 is used to cause the management server 1 to execute information processing related to setting and canceling the corresponding relationship with the first object VA and the second object WA (described later). Fig. 12A as well as Fig. 12B The management program 81 includes a series of commands for information processing.

[0202] The communication interface 13 is configured to perform wired or wireless communication via a network. The communication interface 13 may be configured, for example, by a wired LAN (Local Area Network) module, a wireless LAN module, etc. The management server 1 may perform data communication with other computers (the first server 2, the second server 3, the first terminal 4, and the second terminal 5) via the communication interface 13.

[0203] The input device 14 is, for example, a device for inputting, such as a mouse, a keyboard, or an operation button. The output device 15 is, for example, a device for outputting, such as a display or a speaker. The operator can operate the management server 1 by using the input device 14 and the output device 15. The input device 14 and the output device 15 can be integrally formed by, for example, a touch panel display or the like. The input device 14 and the output device 15 can be connected via an external interface. The external interface can be appropriately configured to be connected to an external device in a wired or wireless manner, for example, through a USB (Universal Serial Bus) port, a dedicated port, a wireless communication port, or the like.

[0204] The drive 16 is a device for reading various information such as programs stored in the storage medium 91. At least one of the management program 81 and the association establishment information D10 can be stored in the storage medium 91 instead of the storage unit 12 or on the basis of the storage unit 12. The storage medium 91 is configured to store various information (stored programs, etc.) through electrical, magnetic, optical, mechanical or chemical effects in a manner that a computer or other machine can read the information. The management server 1 can obtain at least one of the management program 81 and the association establishment information D10 from the storage medium 91. Among them, the storage medium 91 can be a disk-type storage medium such as a CD, DVD, etc., or a storage medium other than a disk-type such as a semiconductor memory (such as a flash memory). The type of the drive 16 can be appropriately selected according to the type of the storage medium 91. The drive 16 can be connected via an external interface.

[0205] In addition, regarding the specific hardware configuration of the management server 1, the components can be appropriately omitted, replaced, and added according to the implementation method. For example, the control unit 11 may include multiple hardware processors. The hardware processor may be composed of a microprocessor, an FPGA (field-programmable gate array), a DSP (digital signal processor), a GPU (Graphics Processing Unit), an ASIC (application specific integrated circuit), etc. At least one of the input device 14, the output device 15, and the driver 16 may be omitted. The association establishment information D10 may also be stored in an external computer (such as NAS, etc.) accessible to the management server 1 instead of the storage unit 12. The management server 1 may be composed of multiple computers. In this case, the hardware configuration of each computer may be consistent or inconsistent. In addition to being an information processing device designed specifically for the service to be provided, the management server 1 may also be a general-purpose server device, a general-purpose computer, etc.

[0206] (Server 1)

[0207] Fig. 10B An example of the hardware configuration of the first server 2 according to the present embodiment is schematically shown. The first server 2 according to the present embodiment is a computer in which a control unit 21, a storage unit 22, a communication interface 23, an input device 24, an output device 25, and a driver 26 are electrically connected. The control unit 21 to the driver 26 and the storage medium 92 of the first server 2 can be configured similarly to the control unit 11 to the driver 16 and the storage medium 91 of the management server 1 described above.

[0208] The control unit 21 (CPU) is an example of a processor resource of the first server 2, and the storage unit 22 (and RAM, ROM) is an example of a memory resource of the first server 2. In the present embodiment, the storage unit 22 stores various information such as a program 82 and the first object information O10. The program 82 is a program for causing the first server 2 to perform information processing related to the authentication of the first object VA. The program 82 includes a series of commands for the information processing. At least one of the program 82 and the first object information O10 can replace the storage unit 22 or be stored in the storage medium 92 on the basis of the storage unit 22. The first server 2 can obtain at least one of the program 82 and the first object information O10 from the storage medium 92. The first server 2 can perform data communication with other computers (such as the second terminal 5 and the management server 1) via the communication interface 23. The first server 2 can be operated via the input device 24 and the output device 25.

[0209] In addition, regarding the specific hardware configuration of the first server 2, the components can be appropriately omitted, replaced, and added according to the implementation method. For example, the control unit 21 may include multiple hardware processors. The hardware processor may be composed of a microprocessor, an FPGA, a DSP, a GPU, an ASIC, etc. At least any one of the input device 24, the output device 25, and the driver 26 may be omitted. The first object information O10 may not be stored in the storage unit 22 but in an external computer (such as NAS, etc.) accessible to the first server 2. The first server 2 may be composed of multiple computers. In this case, the hardware configuration of each computer may be consistent or inconsistent. In addition to being an information processing device designed specifically for the service to be provided, the first server 2 may also be a general-purpose server device, a general-purpose computer, etc.

[0210] (Server 2)

[0211] Fig. 10C An example of the hardware configuration of the second server 3 according to the present embodiment is schematically shown. The second server 3 according to the present embodiment is a computer in which a control unit 31, a storage unit 32, a communication interface 33, an input device 34, an output device 35, and a driver 36 are electrically connected. The control unit 31 to the driver 36 and the storage medium 93 of the second server 3 can be configured similarly to the control unit 11 to the driver 16 and the storage medium 91 of the management server 1 described above.

[0212] The control unit 31 (CPU) is an example of a processor resource of the second server 3, and the storage unit 32 (as well as RAM and ROM) is an example of a memory resource of the second server 3. In the present embodiment, the storage unit 32 stores various information such as a program 83 and the second object information O20. The program 83 is a program for causing the second server 3 to perform information processing related to the authentication of the second object WA. The program 83 includes a series of commands for the information processing. At least one of the program 83 and the second object information O20 can replace the storage unit 32 or be stored in the storage medium 93 on the basis of the storage unit 32. The second server 3 can obtain at least one of the program 83 and the second object information O20 from the storage medium 93. The second server 3 can perform data communication with other computers (such as the first terminal 4 and the management server 1) via the communication interface 33. The second server 3 can be operated via the input device 34 and the output device 35.

[0213] In addition, regarding the specific hardware configuration of the second server 3, the components can be appropriately omitted, replaced, and added according to the implementation method. For example, the control unit 31 may include multiple hardware processors. The hardware processor may be composed of a microprocessor, an FPGA, a DSP, a GPU, an ASIC, etc. At least one of the input device 34, the output device 35, and the drive 36 may be omitted. The second object information O20 may not be stored in the storage unit 32 but in an external computer (such as NAS, etc.) accessible to the second server 3. The second server 3 may be composed of multiple computers. In this case, the hardware configuration of each computer may be consistent or inconsistent. In addition to being an information processing device designed specifically for the service to be provided, the second server 3 may also be a general-purpose server device, a general-purpose computer, etc.

[0214] (Terminal 1)

[0215] Fig. 10D An example of the hardware configuration of the first terminal 4 according to the present embodiment is schematically shown. The first terminal 4 according to the present embodiment is a computer in which a control unit 41, a storage unit 42, a communication interface 43, an input device 44, an output device 45, a driver 46, and a positioning module 47 are electrically connected. The control unit 41 to the driver 46 and the storage medium 94 of the first terminal 4 can be configured similarly to the control unit 11 to the driver 16 and the storage medium 91 of the management server 1 described above.

[0216] The control unit 41 (CPU) is an example of a processor resource of the first terminal 4, and the storage unit 42 (as well as RAM and ROM) is an example of a memory resource of the first terminal 4. In the present embodiment, the storage unit 42 stores various information such as the program 84 and the first identifier I10. The program 84 is for causing the first terminal 4 to execute information processing related to association establishment (described later). Fig. 12A as well as Fig. 12B ). The program 84 includes a series of commands for the information processing. At least one of the program 84 and the first identifier I10 may be stored in the storage medium 94 instead of the storage unit 42 or in addition to the storage unit 42. The first terminal 4 may obtain at least one of the program 84 and the first identifier I10 from the storage medium 94. The first terminal 4 may be operated via the input device 44 and the output device 45.

[0217] The first terminal 4 can communicate data with other computers (management server 1, first server 2, second server 3, second terminal 5, etc.) via the communication interface 43. In one example, the communication interface 43 can be composed of multiple types of modules. For example, the communication interface 43 can have a short-range wireless communication module 431 and other wireless communication modules (such as a cellular communication module, etc.). The first terminal 4 can communicate data with the second terminal 5 via the short-range wireless communication module 431, and communicate data with the servers (management server 1, first server 2, second server 3) via other wireless communication modules.

[0218] In addition, regarding the specific hardware composition of the first terminal 4, the constituent elements can be appropriately omitted, replaced, and added according to the implementation method. For example, the control unit 41 may include multiple hardware processors. The hardware processor may be composed of a microprocessor, an FPGA, a DSP, a GPU, an ASIC, an ECU (Electronic Control Unit), etc. At least one of the input device 44, the output device 45, the driver 46, and the positioning module 47 may be omitted. The first identifier I10 may not be stored in the storage unit 42. The first identifier I10 may be obtained every time. In order to obtain data such as identifiers and information used in authentication, the first terminal 4 may also have data acquisition devices such as sensors and reading devices. The first terminal 4 may be composed of multiple computers. In this case, the hardware composition of each computer may be consistent or inconsistent. In addition to an information processing device designed specifically for the service to be provided, the first terminal 4 may also be a general-purpose computer, a terminal device (for example, a smart phone, a tablet PC, etc.), etc.

[0219] (Terminal 2)

[0220] Fig. 10EAn example of the hardware configuration of the second terminal 5 according to the present embodiment is schematically shown. The second terminal 5 according to the present embodiment is a computer in which a control unit 51, a storage unit 52, a communication interface 53, an input device 54, an output device 55, a driver 56, and a positioning module 57 are electrically connected. The control unit 51 to the driver 56 and the storage medium 95 of the second terminal 5 can be configured similarly to the control unit 11 to the driver 16 and the storage medium 91 of the management server 1 described above.

[0221] The control unit 51 (CPU) is an example of a processor resource of the second terminal 5, and the storage unit 52 (as well as RAM and ROM) is an example of a memory resource of the second terminal 5. In the present embodiment, the storage unit 52 stores various information such as the program 85 and the second identifier I20. The program 85 is for causing the second terminal 5 to execute information processing related to association establishment (described later). Fig. 12A as well as Fig. 12B ). The program 85 includes a series of commands for the information processing. At least one of the program 85 and the second identifier I20 can be stored in the storage medium 95 instead of the storage unit 52 or in addition to the storage unit 52. The second terminal 5 can obtain at least one of the program 85 and the second identifier I20 from the storage medium 95. The second terminal 5 can be operated via the input device 54 and the output device 55.

[0222] The second terminal 5 can communicate data with other computers (management server 1, first server 2, second server 3, first terminal 4, etc.) via the communication interface 53. In one example, like the first terminal 4, the communication interface 53 can be composed of multiple types of modules. For example, the communication interface 53 can have a short-range wireless communication module 531 and other wireless communication modules. The second terminal 5 can communicate data with the first terminal 4 via the short-range wireless communication module 531, and communicate data with the server via other wireless communication modules.

[0223] In addition, regarding the specific hardware composition of the second terminal 5, the constituent elements can be appropriately omitted, replaced, and added according to the implementation method. For example, the control unit 51 may include multiple hardware processors. The hardware processor may be composed of a microprocessor, an FPGA, a DSP, a GPU, an ASIC, an ECU, etc. At least one of the input device 54, the output device 55, the driver 56, and the positioning module 57 may be omitted. The second identifier I20 may not be stored in the storage unit 52. The second identifier I20 may be obtained every time. In order to obtain data such as identifiers and information used in authentication, the second terminal 5 may also have data acquisition devices such as sensors and reading devices. The second terminal 5 may be composed of multiple computers. In this case, the hardware composition of each computer may be consistent or inconsistent. In addition to an information processing device designed specifically for the service to be provided, the second terminal 5 may also be a general-purpose computer, terminal device, etc.

[0224] [Software Configuration Example]

[0225] Fig.11 An example of the software configuration of each device (the management server 1 , the first server 2 , the second server 3 , the first terminal 4 , and the second terminal 5 ) according to the present embodiment is schematically shown.

[0226] (Management Server)

[0227] The control unit 11 of the management server 1 expands the management program 81 stored in the storage unit 12 into the RAM, and the CPU executes the commands included in the management program 81. Thus, the management server 1 operates as a computer including the receiving unit 111, setting unit 112, canceling unit 113, and notifying unit 114 as software modules.

[0228] The receiving unit 111 is configured to directly or indirectly receive an association establishment request from at least one of the first terminal 4 of the corresponding individual of the first object VA and the second terminal 5 of the corresponding individual of the second object WA, based on the generation of the utilization relationship between the corresponding individuals of the first object VA and the second object WA. The receiving unit 111 is configured to accept the setting of the corresponding relationship between the corresponding individuals of the first object VA and the second object WA by receiving the association establishment request.

[0229] The setting unit 112 is configured to perform a setting process of a correspondence relationship between corresponding individuals of the first object VA and the second object WA based on an association establishment request. The setting unit 112 is configured to obtain both the authentication results of the first object VA and the second object WA when a prescribed condition is not satisfied, and to set the correspondence relationship between the first object VA and the second object WA based on the fact that both the authentication of the first object VA and the second object WA are established in the obtained authentication results of the first object VA and the second object WA. In addition, the setting unit 112 is configured to omit the authentication of one of the objects of the first object VA and the second object WA when a prescribed condition is satisfied, obtain the authentication result of the object of the other party, and to set the correspondence relationship between the first object VA and the second object WA based on the fact that the authentication of the object of the other party is established in the obtained authentication result. The release unit 113 is configured to perform a release process of the correspondence relationship in accordance with the reception of a release request from at least one of the first terminal 4 and the second terminal 5 or the satisfaction of a prescribed release condition.

[0230] The notification unit 114 is configured to send a notification indicating the result of executing the processing of setting the correspondence relationship to at least one of the first terminal 4 and the second terminal 5. The notification unit 114 is configured to send a notification indicating the result of executing the processing of releasing the correspondence relationship to at least one of the first terminal 4 and the second terminal 5.

[0231] When the management server 1 performs authentication processing of at least one of the first object VA and the second object WA, the management server 1 may be further configured to include an authentication unit 115 as a software module. The authentication unit 115 may be configured to perform authentication processing of at least one of the first object VA and the second object WA.

[0232] (Server 1)

[0233] When the first server 2 performs the authentication process of the first object VA, the control unit 21 of the first server 2 can execute the command included in the program 82 through the CPU. Thus, the first server 2 can operate as a computer having an authentication unit 211 as a software module. The authentication unit 211 is configured to perform the authentication process of the first object VA according to the authentication request for the first object VA.

[0234] (Server 2)

[0235] When the second server 3 performs the authentication process of the second object WA, the control unit 31 of the second server 3 can execute the command included in the program 83 through the CPU. Thus, the second server 3 can operate as a computer having an authentication unit 311 as a software module. The authentication unit 311 is configured to perform the authentication process of the second object WA according to the authentication request for the second object WA.

[0236] (Terminal 1)

[0237] The control unit 41 of the first terminal 4 executes the command included in the program 84 through the CPU. As a result, the first terminal 4 operates as a computer having a data exchange unit 411, a setting entrusting unit 412, and a release entrusting unit 413 as software modules. The data exchange unit 411 is configured to perform data exchange with the second terminal 5. The setting entrusting unit 412 is configured to send an association establishment request (an association establishment setting entrustment) to the management server 1. The release entrusting unit 413 is configured to send a release request (an association establishment release entrustment) to the management server 1.

[0238] When the first terminal 4 performs authentication processing of at least one of the first object VA and the second object WA, the first terminal 4 may be configured to further include an authentication unit 414 as a software module. The authentication unit 414 may be configured to perform authentication processing of at least one of the first object VA and the second object WA.

[0239] (Terminal 2)

[0240] The control unit 51 of the second terminal 5 executes the command included in the program 85 through the CPU. As a result, the second terminal 5 operates as a computer having a data exchange unit 511, a setting entrusting unit 512, and a release entrusting unit 513 as software modules. The data exchange unit 511 is configured to perform data exchange with the first terminal 4. The setting entrusting unit 512 is configured to send an association establishment request (an association establishment setting entrustment) to the management server 1. The release entrusting unit 513 is configured to send a release request (an association establishment release entrustment) to the management server 1.

[0241] When the second terminal 5 performs authentication processing of at least one of the first object VA and the second object WA, the second terminal 5 may be configured to further include an authentication unit 514 as a software module. The authentication unit 514 may be configured to perform authentication processing of at least one of the first object VA and the second object WA.

[0242] (other)

[0243] In the present embodiment, an example in which each software module of each device is implemented by a general-purpose CPU is described. However, part or all of the above-mentioned software modules may also be implemented by one or more dedicated processors. Each of the above-mentioned modules may be implemented as a hardware module. With regard to the software composition of each device, the modules may be appropriately omitted, replaced, and added according to the implementation method. For example, in the case of adopting a method in which an association establishment request is sent only from the terminal of one of the first terminal 4 and the second terminal 5, the setting delegation unit may be omitted from the terminal of the other party. Similarly, in the case of adopting a method in which a release request is sent only from the terminal of one of the first terminal 4 and the second terminal 5, the release delegation unit may be omitted from the terminal of the other party. The authentication unit may be omitted from the device in which the execution of the authentication process is omitted.

[0244] [3 Action Examples]

[0245] (Association establishment settings)

[0246] Fig. 12A An example of the process steps of association establishment setting performed by the system 100 according to the present embodiment is shown. The following process steps are an example of an information processing method executed by a computer. The process steps of the management server 1 in the following process steps are an example of a management method executed by a computer.

[0247] In step S10 , in response to the generation of the utilization relationship between the corresponding individuals of the first object VA and the second object WA, at least one of the control unit 41 of the corresponding first terminal 4 and the control unit 51 of the corresponding second terminal 5 transmits an association request to the management server 1 .

[0248] In one example, according to the generation of the utilization relationship, the control unit 41 of the corresponding first terminal 4 can act as a data exchange unit 411 to perform data exchange with the corresponding second terminal 5. The control unit 51 of the second terminal 5 can act as a data exchange unit 511 to perform data exchange with the first terminal 4. The data exchange can be performed through short-range wireless communication. The control unit 41 of the first terminal 4 can act as a setting entrusting unit 412 with the data exchange as a trigger, and send an association establishment request to the management server 1. The control unit 51 of the second terminal 5 can act as a setting entrusting unit 512 to send an association establishment request to the management server 1. The first terminal 4 and the second terminal 5 can cooperate to send the association establishment request, or one of the first terminal 4 and the second terminal 5 can send the association establishment request. It is also possible that the terminal of one of the first terminal 4 and the second terminal 5 gives an instruction to the terminal of the other party, and the terminal of the other party sends the association establishment request. In addition, the association establishment request can be sent directly to the management server 1, or it can be sent indirectly to the management server 1 via an external computer (the first server 2, the second server 3, etc.).

[0249] In step S20, the control unit 11 of the management server 1 operates as the receiving unit 111, and directly or indirectly receives an association establishment request from at least one of the first terminal 4 of the corresponding individual of the first object VA and the second terminal 5 of the corresponding individual of the second object WA. The control unit 11 receives the setting of the correspondence relationship between the corresponding individual of the first object VA and the corresponding individual of the second object WA by receiving the association establishment request.

[0250] Furthermore, in step S10, when the first terminal 4 and the second terminal 5 cooperate to send the association establishment request, the first terminal 4 and the second terminal 5 may send one association establishment request separately, or send the same association establishment request. In the case of separate sending, part of the data of the association establishment request may be sent by the first terminal 4, and the remaining data may be sent by the second terminal 5. Partial duplication may be allowed between part of the data and the remaining data. In step S20, in order to determine the combination of the corresponding individuals of the first object VA and the second object WA for which the setting of the corresponding relationship is actually required, the management server 1 may appropriately determine the corresponding establishment of the data (i.e., determine the combination of corresponding data).

[0251] The establishment of data correspondence can be determined by any method. In one example, the data sent from each terminal (4, 5) may include shared information for determining the establishment of data correspondence. The shared information may be composed of, for example, consistent information having a relationship such as the establishment of a correspondence. The management server 1 may determine the establishment of data correspondence based on the establishment of a relationship between the shared information included in the data received from one of the first terminal 4 and the second terminal 5 and the shared information included in the data received from the other party.

[0252] The shared information can be composed arbitrarily. In one example, the shared information can be composed of a combination of a first identifier I10 and a second identifier I20. The management server 1 can determine the establishment of data correspondence based on the consistency of the combination of identifiers (I10, I20) included in the data received from the first terminal 4 and the combination of identifiers (I10, I20) included in the data received from the second terminal 5. In another example, the shared information can be composed of temporary information such as random numbers, timestamps, hash values, etc. In this case, the management server 1 can determine the establishment of data correspondence based on the relationship between the temporary information included in the data received from the first terminal 4 and the temporary information included in the data received from the second terminal 5. In addition, the shared information can be shared between the first terminal 4 and the second terminal 5 at any time. In a typical example, the first terminal 4 and the second terminal 5 can share the shared information when exchanging data.

[0253] In step S25, the branch target of the processing is determined based on whether the prescribed conditions are met. If the prescribed conditions are not met, the processing proceeds to step S301. On the other hand, if the prescribed conditions are met, the processing proceeds to step S311. In one example, whether the prescribed conditions are met can be determined by at least one of the management server 1, the external server (the first server 2, the second server 3, etc.), the first terminal 4, and the second terminal 5. The branch target of the processing can be determined based on the result of the determination. In another example, the branch target of the processing can be determined based on the action mode of at least one of the first terminal 4 and the second terminal 5. In addition, in one example, the prescribed conditions may include at least one of the above two conditions.

[0254] In step S301, the control unit 11 of the management server 1 acts as the setting unit 112 to obtain the authentication results of the first object VA and the second object WA. In step S302, the control unit 11 acts as the setting unit 112 to determine whether the authentication of the first object VA and the second object WA are both established in the obtained authentication results. In the case where the authentication of at least one of the first object VA and the second object WA is not established, the control unit 11 abandons the association establishment request and allows the processing to enter step S40. Thus, the control unit 11 omits the setting of the corresponding relationship. On the other hand, in the case where the authentication of the first object VA and the second object WA is both established, the control unit 11 allows the processing to enter step S320.

[0255] In step S311, the control unit 11 of the management server 1 operates as the setting unit 112, omitting the authentication of one of the first object VA and the second object WA, and obtaining the authentication result of the other object. In one example, the first object VA may be a user and the second object WA may be a utilization object. The authentication of the utilization object may be omitted, and the control unit 11 may obtain the authentication result of the user.

[0256] In step S312, the control unit 11 acts as the setting unit 112 to determine whether the authentication of the other party's object is established in the obtained authentication result. In the case where the authentication of the other party's object is not established, the control unit 11 abandons the association establishment request and causes the processing to proceed to step S40. Thus, the control unit 11 omits the setting of the corresponding relationship. On the other hand, in the case where the authentication of the other party's object is established, the control unit 11 causes the processing to proceed to step S320. The establishment of the authentication of the other party's object may include the continuation of the login state of the other party's object.

[0257] In addition, the authentication process of the first object VA and the second object WA can be executed by at least one of the management server 1, the external server (for example, the first server 2, the second server 3), the first terminal 4, and the second terminal 5. The control unit 11 of the management server 1 can act as the authentication unit 115 to perform the authentication process of at least one of the first object VA and the second object WA. The control unit 21 of the first server 2 can act as the authentication unit 211 to perform the authentication process of the first object VA. The control unit 31 of the second server 3 can act as the authentication unit 311 to perform the authentication process of the second object WA. The control unit 41 of the first terminal 4 can act as the authentication unit 414 to perform the authentication process of at least one of the first object VA and the second object WA. The control unit 41 of the second terminal 5 can act as the authentication unit 514 to perform the authentication process of at least one of the first object VA and the second object WA. The authentication process can be performed at any time before the process of step S301 and step S311 is performed.

[0258] In step S320, the control unit 11 acts as the setting unit 112 to update the association establishment information D10 in a manner that establishes the setting of the correspondence between the first object VA and the second object WA specified by the association establishment request. In one example, the updating of the association establishment information D10 along with the setting of the correspondence can be constituted by generating new association establishment information D10 representing the specified correspondence. If the association establishment information D10 is updated, the control unit 11 advances the processing to the next step S40. In addition, the processing of the above-mentioned steps S301, S302, S311, S312 and S320 is an example of the setting processing of the correspondence corresponding to the accepted association establishment request (the above-mentioned step S30).

[0259] In step S40, the control unit 11 operates as the notification unit 114 to directly or indirectly send a notification indicating the result of the corresponding relationship setting process to at least one of the first terminal 4 and the second terminal 5. When the notification of the result is completed, the processing steps related to the association setting involved in this operation example are completed.

[0260] In addition, the above processing steps are only an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. For example, the branch of step S25 can be configured before step S20 or step S10.

[0261] (Remove association)

[0262] Fig. 12BThe following is an example of a process of disassociating a connection performed by the system 100 according to the present embodiment. The following process is an example of an information processing method executed by a computer. The process of the management server 1 in the following process is an example of a management method executed by a computer. Fig. 12B In the example of FIG. 1 , a scenario is assumed in which a cancellation request is directly sent from the first terminal 4 to the management server 1 .

[0263] In step SZ10, the control unit 41 of the first terminal 4 operates as the release entrusting unit 413 and sends a request for release of the correspondence relationship to the management server 1. In response, the control unit 11 of the management server 1 receives the release request. The correspondence relationship for entrusting release can be appropriately specified. The trigger of the release request can be appropriately selected according to the implementation mode.

[0264] In step SZ20, the control unit 11 acts as the release unit 113 to update the association establishment information D10 in a manner that releases the setting of the corresponding relationship specified by the received release request. In one example, updating the association establishment information D10 along with the release of the corresponding relationship can be constituted by recording information indicating that the relationship has been released. For example, in the association establishment information D10 having Figure 3A In the case of a configuration of, the control unit 11 can cancel the correspondence of the object by adding a cancellation time to the corresponding association establishment information D10 or setting a cancellation flag. In the case where the association establishment information D10 is composed of a blockchain platform, the control unit 11 can cancel the correspondence of the object by generating a transaction indicating the cancellation of the association establishment and adding the generated transaction to the blockchain.

[0265] In step SZ30, the control unit 11 operates as the notification unit 114 to transmit the execution result of the de-association process to the first terminal 4. When the notification of the result is completed, the process steps related to the de-association according to this operation example are terminated.

[0266] In addition, the above processing steps are only an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, steps can be appropriately omitted, replaced, and added according to the implementation method. For example, as mentioned above, the sending route of the release request may not be limited to Fig. 12BExamples may be appropriately selected according to the implementation method. A release request may be sent from the second terminal 5 (release delegation unit 513). The processing of the release request may include authentication processing of at least one of the first object VA and the second object WA. In addition, the control unit 11 of the management server 1 may act as the release unit 113 instead of the above-mentioned step SZ20, and release the corresponding relationship when the prescribed release condition is met. Furthermore, the control unit 11 may act as the release unit 113, and after the corresponding relationship is set, perform the above-mentioned confirmation processing of continued use at any time for the set corresponding relationship.

[0267] [feature]

[0268] In the present embodiment, information indicating the setting of the correspondence relationship between the corresponding individuals of the first object VA and the second object WA is recorded by the processing of step S320. Through this record, the utilization relationship between the corresponding individuals of the first object VA and the second object WA can be tracked. In addition, in the present embodiment, when the prescribed conditions are not met, authentication of both the first object VA and the second object WA is performed when the correspondence relationship is set (the route of step S301 is selected). Thus, safety can be ensured. On the other hand, when the prescribed conditions are met, authentication of either the first object VA or the second object WA is omitted (the route of step S311 is selected). Thus, a reduction in workload can be achieved. Therefore, according to the present embodiment, the utilization relationship between the first object VA and the second object WA can be tracked while ensuring safety and a reduction in workload can be achieved.

[0269] [4 Modifications]

[0270] The embodiments of the present disclosure have been described in detail above, but the descriptions so far are merely illustrations of the present disclosure in all respects. Various improvements or modifications can be made without departing from the scope of the present disclosure. For example, the following changes can be made. Among them, the same figure marks are used for the same components as the above-mentioned embodiments, and the descriptions of the same points as the above-mentioned embodiments are appropriately omitted. The following modifications can be appropriately combined.

[0271] <4.1>

[0272] In the above embodiment, in the normal processing mode, authentication processing of both the first object VA and the second object WA is performed, whereas in the simplified processing mode, one of them is omitted. However, from the perspective of achieving a balance between ensuring security and reducing workload, omitting authentication processing can also be applied to situations other than such allocation. The method of omitting authentication processing may not be limited to the example of the above embodiment. In another example, in the normal processing mode, authentication of at least one of the first object VA and the second object WA is performed, whereas in the simplified processing mode, authentication of both the first object VA and the second object WA may be omitted.

[0273] Fig.13 Another example of a scenario in which the present disclosure is applied is schematically shown. The control unit 11 of the management server 1 may be configured to set the correspondence between the first object VA and the second object WA based on a request for establishing an association sent from at least one of the first terminal 4 of the first object VA and the second terminal 5 of the second object WA when a utilization relationship is generated between the first object VA and the second object WA. In this setting process, if the prescribed conditions are not met, the control unit 11 may obtain the authentication result of at least one of the first object VA and the second object WA, and set the correspondence between the first object VA and the second object WA based on the authentication being established in the obtained authentication result. On the other hand, if the prescribed conditions are met, the control unit 11 may omit the authentication of both the first object VA and the second object WA, and set the correspondence between the first object VA and the second object WA based on the received request for establishing an association.

[0274] In addition, in one example, in the case of adopting a method of performing authentication processing by the management server 1 or an external server, the control unit 41 of the first terminal 4 of the first object VA can be configured to perform the following processing: when a utilization relationship is generated between the first object VA and the second object WA, a request for establishing an association is sent to the management server 1; the request for establishing an association is sent in cooperation with the second terminal 5 of the second object WA, or the second terminal 5 is caused to send a request for establishing an association so that the management server 1 sets the corresponding relationship between the first object VA and the second object WA. In the case where the prescribed conditions are not satisfied, the request for establishing an association can include an authentication delegation of at least one of the first object VA and the second object WA. Setting the corresponding relationship between the first object VA and the second object WA can be configured by setting the corresponding relationship between the first object VA and the second object WA based on the establishment of authentication of at least one of the first object VA and the second object WA executed based on the authentication delegation. In the case where the prescribed conditions are satisfied, the authentication delegations of the first object VA and the second object WA are both omitted from the request for establishing an association. The correspondence relationship between the first object VA and the second object WA may be set by setting the correspondence relationship between the first object VA and the second object WA in response to receiving the association request.

[0275] Similarly, the control unit 51 of the second terminal 5 of the second object WA can be configured to perform the following processing: when a utilization relationship is generated between the first object VA and the second object WA, a request for establishing an association is sent to the management server 1; the request for establishing an association is sent in cooperation with the first terminal 4 of the first object VA, or the first terminal 4 is caused to send a request for establishing an association so that the management server 1 sets the corresponding relationship between the first object VA and the second object WA. In the case where the prescribed conditions are not satisfied, the request for establishing an association may include an authentication delegation of at least one of the first object VA and the second object WA. Setting the corresponding relationship between the first object VA and the second object WA can be configured by setting the corresponding relationship between the first object VA and the second object WA based on the establishment of authentication of at least one of the first object VA and the second object WA executed based on the authentication delegation. In the case where the prescribed conditions are satisfied, the authentication delegations of the first object VA and the second object WA can be omitted from the request for establishing an association. Setting the corresponding relationship between the first object VA and the second object WA can be configured by setting the corresponding relationship between the first object VA and the second object WA based on the reception of the request for establishing an association.

[0276] <4.2>

[0277] In the above-mentioned embodiment, the authentication process can be performed on at least one of the management server 1, the external server (the first server 2, the second server 3, etc.), and each terminal (4, 5). The data communication when performing the authentication process can be appropriately designed according to the embodiment. As an example, at least one of the following four authentication methods can be adopted.

[0278] (A) First authentication method

[0279] Fig.14 An example of a process for setting up an association when the first authentication method is used is schematically shown. In the first authentication method, the second server 3 performs authentication processing of the second object WA according to the request (authentication delegation) of the first terminal 4 of the first object VA. The first server 2 performs authentication processing of the first object VA according to the request (authentication delegation) of the second terminal 5 of the second object WA. Each terminal (4, 5) delegates each other's authentication to each server (2, 3) as an association establishment request and reports the authentication result to the management server 1. Thus, each terminal (4, 5) sends the association establishment request toward the management server 1. The request sent from each terminal (4, 5) to each server (2, 3) is an example of an association establishment request including an authentication delegation. In addition, the process from each terminal (4, 5) sending a request to each server (2, 3) to sending the authentication result to the management server 1 is an example of a process in which the first terminal 4 and the second terminal 5 cooperate to send an association establishment request.

[0280] The first server 2 is configured to have access to a first storage device storing first registered inherent information CA10 for authentication of a first object VA. The first storage device may be composed of at least one of the memory resources of the first server 2 and an external storage device (NAS, etc.). The first registered inherent information CA10 may be included in the first object information O10. The second server 3 may be configured to have access to a second storage device storing second registered inherent information CA20 for authentication of a second object WA. The second storage device may be composed of at least one of the memory resources of the second server 3 and an external storage device (NAS, etc.). The second registered inherent information CA20 may be included in the second object information O20.

[0281] Each registered inherent information (CA10, CA20) is the inherent information pre-registered for the authentication of each object (VA, WA). As long as the inherent information can be used in the authentication, its data form and composition are not particularly limited and can be appropriately selected according to the implementation method. The inherent information can be composed of any information, such as information from the object, information from the terminal, temporarily generated information, information generated by any other method, etc.

[0282] Information from an object may be, for example, biological information, identification information assigned as inherent, etc. Biological information may be, for example, facial images, fingerprints, voiceprints, etc. Identification information assigned as inherent may be, for example, a car registration number, a vehicle identification number, a personal number, etc. In the case of assigning an IC tag to an object, the identification information assigned as inherent may include information maintained by the IC tag. Information from a terminal may be, for example, a MAC address, terminal identification information, etc. Temporarily generated information may be, for example, a one-time password, a private address (dynamically generated address), etc. Temporarily generated information may be composed of a timestamp, a random number, a hash value, etc. Information generated by any other method may include, for example, a password, a verification code, information other than other symbol columns, etc.

[0283] First, when a utilization relationship is established between the first object VA and the second object WA, data is exchanged between the corresponding first terminal 4 and the second terminal 5 (step SA110, step SB110). Next, the authentication process in the normal processing mode will be described.

[0284] In step SA110, the control unit 51 of the second terminal 5 obtains the first identifier I10 and the first inherent information CA1 from the corresponding individual of the first object VA. The first inherent information CA1 corresponds to the first registered inherent information CA10. The control unit 51 can appropriately obtain the first identifier I10 and the first inherent information CA1 from the first object VA during data exchange. Acquisition from the first object VA may include acquisition from the first terminal 4. For example, the control unit 51 can obtain at least one of the first identifier I10 and the first inherent information CA1 from the first object VA via an input device, a sensor, etc. The control unit 51 can obtain at least one of the first identifier I10 and the first inherent information CA1 from the first terminal 4 during data exchange.

[0285] In addition, in step SB110, the control unit 41 of the first terminal 4 obtains the second identifier I20 and the second inherent information CA2 from the corresponding individual of the second object WA. The second inherent information CA2 corresponds to the second registered inherent information CA20. The control unit 41 can appropriately obtain the second identifier I20 and the second inherent information CA2 from the second object WA during data exchange. Acquisition from the second object WA may include acquisition from the second terminal 5. For example, the control unit 41 can obtain at least one of the second identifier I20 and the second inherent information CA2 from the second object WA via an input device, a sensor, etc. The control unit 41 can obtain at least one of the second identifier I20 and the second inherent information CA2 from the second terminal 5 during data exchange. Each identifier (I10, I20) and each inherent information (CA1, CA2) is an example of data used in authentication.

[0286] In step SA120, the control unit 51 of the second terminal 5 sends the first authentication commission including the first identifier I10 and the first inherent information CA1 to the first server 2. Accordingly, the control unit 21 of the first server 2 receives the first authentication commission of the corresponding individual of the first object VA. The control unit 21 of the first server 2 acts as the authentication unit 211, and appropriately performs the authentication process of the first object VA according to the reception of the first authentication commission. In one example, the control unit 21 can retrieve the first object information O10 by using the first identifier I10 included in the first authentication commission in the query, and extract the first registered inherent information CA10 of the corresponding individual of the first object VA from the first object information O10. The control unit 21 can compare the extracted first registered inherent information CA10 with the first inherent information CA1 included in the first authentication commission. The comparison can be appropriately performed according to the inherent information used. The control unit 21 can determine whether the authentication of the corresponding individual of the first object VA is established or not according to the result of the comparison. In step SA130, the control unit 21 reports the authentication result of the corresponding individual of the first object VA to the management server 1. In one example, the control unit 21 may attach the first identifier I10 of the first object VA and send the authentication result of the first object VA to the management server 1. The control unit 21 may send the authentication result to the management server 1 regardless of whether the authentication is established or not, or may send the authentication result to the management server 1 only when the authentication is established.

[0287] On the other hand, in step SB120, the control unit 41 of the first terminal 4 sends the second authentication commission including the second identifier I20 and the second inherent information CA2 to the second server 3. Accordingly, the control unit 31 of the second server 3 receives the second authentication commission of the corresponding individual of the second object WA. The control unit 31 of the second server 3 acts as an authentication unit 311, and appropriately performs the authentication process of the second object WA according to the reception of the second authentication commission. In one example, the control unit 31 can retrieve the second object information O20 by using the second identifier I20 included in the second authentication commission in the query, and extract the second registered inherent information CA20 of the corresponding individual of the second object WA from the second object information O20. The control unit 31 can compare the extracted second registered inherent information CA20 with the second inherent information CA2 included in the second authentication commission. The comparison can be appropriately performed according to the inherent information used. The control unit 31 can determine whether the authentication of the corresponding individual of the second object WA is established or not according to the result of the comparison. In step SB130, the control unit 31 reports the authentication result of the corresponding individual of the second object WA to the management server 1. In one example, the control unit 31 may attach the second identifier I20 of the second object WA and send the authentication result of the second object WA to the management server 1. The control unit 31 may send the authentication result to the management server 1 regardless of whether the authentication is established or not, or may send the authentication result to the management server 1 only when the authentication is established.

[0288] The second terminal 5 grants the first authentication delegation to the first server 2 and causes the first server 2 to transmit the authentication result to the management server 1, which is an example of the second terminal 5 transmitting the association establishment request to the management server 1. In addition, the first terminal 4 grants the second authentication delegation to the second server 3 and causes the second server 3 to transmit the authentication result to the management server 1, which is an example of the first terminal 4 transmitting the association establishment request to the management server 1. That is, when the first authentication method is adopted when setting the association establishment, the processing of step SA120, step SA130, step SB120, and step SB130 is an example of the processing of the above-mentioned step S10. This authentication delegation method is an example of a method of performing authentication processing together with the association establishment request.

[0289] The control unit 11 of the management server 1 receives the authentication results of the corresponding individuals of each object (VA, WA) from each server (2, 3). The control unit 11 can determine the corresponding establishment of the authentication result data by using the above-mentioned shared information and other methods in order to determine the combination of the corresponding individuals of the first object VA and the second object WA for which the setting of the corresponding relationship is actually required. When the authentication of the first object VA and the second object WA is established in the received authentication results of the first object VA and the second object WA, the control unit 11 sets the corresponding relationship between the corresponding individuals of the first object VA and the second object WA. The setting process of the corresponding relationship can be the same as the above-mentioned embodiment. In addition, a series of processes from data exchange between terminals (4, 5) to association establishment setting can be performed in real time according to the generation of the utilization relationship.

[0290] In the first authentication method, in the normal processing mode, authentication of the first object VA and the second object WA is performed on the first server 2 and the second server 3, respectively, based on the use relationship between the first object VA and the second object WA. At this time, the authentication of the first object VA is entrusted from the second terminal 5 of the second object WA. The authentication of the second object WA is entrusted from the first terminal 4 of the first object VA. That is, a cross authentication is performed in which each party does not perform its own authentication but performs the authentication of the other party. As a result, security can be expected to be ensured.

[0291] also, Fig.14 The processing steps are just an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. For example, the processing steps of the authentication of the first object VA (step SA110 to step SA130) and the authentication of the second object WA (step SB110 to step SB130) are not particularly limited and can be appropriately determined according to the implementation method.

[0292] When the simplified processing mode is selected, the authentication processing of either the first object VA or the second object WA can be omitted. The association establishment request of the simplified processing mode can be constructed to appropriately specify the corresponding individuals of the first object VA and the second object WA. In one example, when performing authentication of an object of one of the first object VA and the second object WA, the data sent through the authentication route of the object of one party may include an identifier of the object of one party and an identifier of the object of the other party. For example, when performing authentication of the first object VA, the data sent from the second terminal 5 to the management server 1 via the first server 2 may include the first identifier I10 and the second identifier I20.

[0293] In addition, similar to the above <4.1>, in the normal processing mode, the authentication processing of at least one of the first object VA and the second object WA is performed, whereas in the simplified processing mode, both the first object VA and the second object WA can be omitted. In this case, at least one of the first terminal 4 and the second terminal 5 can omit the authentication request and appropriately send an association establishment request to the management server 1.

[0294] In addition, the authentication result can be sent to a path other than Fig.14 In another example, the first terminal 4 may receive the authentication result of the second object WA from the second server 3, and the second terminal 5 may receive the authentication result of the first object VA from the first server 2. Accordingly, each terminal (4, 5) may send an association establishment request including the received authentication result of each object (VA, WA) to the management server 1. Alternatively, the first terminal 4 and the second terminal 5 may exchange data on the authentication result with the other terminal, and the other terminal may send an association establishment request including the authentication result of the first object VA and the second object WA to the management server 1. This method is an example of a method in which authentication processing is performed before issuing an association establishment request.

[0295] (B) Second authentication method

[0296] Fig.15 An example of a processing procedure for association establishment setting when the second authentication method is adopted is schematically shown. In the second authentication method, the management server 1 entrusts authentication to each server (2, 3) based on a request from at least one of the first terminal 4 and the second terminal 5. That is, at least one of the first terminal 4 and the second terminal 5 sends an association establishment request including an authentication entrustment for each object (VA, WA). The data (inherent information) used in the authentication is the same as that of the first authentication method. The request sent from the first terminal 4 and the second terminal 5 to the management server 1 is an example of an association establishment request including an authentication entrustment. In addition, the authentication entrustment method is an example of a method of performing authentication processing after the association establishment request. The following describes the authentication processing of the normal processing mode.

[0297] First, when the utilization relationship between the corresponding individuals of the first object VA and the second object WA is generated, data exchange is performed between the corresponding first terminal 4 and the second terminal 5 (step SC110, step SD110). At least one of the first terminal 4 and the second terminal 5 sends an authentication request including the first identifier I10, the first inherent information CA1, the second identifier I20 and the second inherent information CA2 as an association establishment request to the management server 1 (step SC120, step SD120). Accordingly, the control unit 11 of the management server 1 receives the authentication request including the first identifier I10, the first inherent information CA1, the second identifier I20 and the second inherent information CA2. The processing of step SC120 and step SD120 is an example of the processing of the above-mentioned step S10.

[0298] The sharing of data transmission can be appropriately determined according to the implementation method. In one example, the second terminal 5 may be responsible for sending the first identifier I10 and the first inherent information CA1, and the first terminal 4 may be responsible for sending the second identifier I20 and the second inherent information CA2. That is, in step SC110, the control unit 51 of the second terminal 5 may obtain the first identifier I10 and the first inherent information CA1 from the first object VA. Acquisition from the first object VA may include acquisition from the first terminal 4. In step SC120, the control unit 51 of the second terminal 5 may send an association establishment request including the acquired first identifier I10 and the first inherent information CA1 to the management server 1. In step SD110, the control unit 41 of the first terminal 4 may obtain the second identifier I20 and the second inherent information CA2 from the second object WA. Acquisition from the second object WA may include acquisition from the second terminal 5. In step SD120 , the control unit 41 of the first terminal 4 may transmit an association request including the acquired second identifier I20 and the second unique information CA2 to the management server 1 .

[0299] In addition, the sharing of data transmission may not be limited to such an example. In another example, at least one of the first identifier I10 and the first inherent information CA1 may be transmitted from the first terminal 4. At least one of the second identifier I20 and the second inherent information CA2 may be transmitted from the second terminal 5. In the case of adopting a method of transmitting in a divided manner, the management server 1 may determine the corresponding establishment of the authentication entrusted data by using the above-mentioned shared information and other methods in order to determine the combination of the corresponding individuals of the first object VA and the second object WA for which the setting of the corresponding relationship is actually required. In another example, the first identifier I10, the first inherent information CA1, the second identifier I20, and the second inherent information CA2 may be transmitted only from one of the first terminal 4 and the second terminal 5.

[0300] In step SC130, the control unit 11 of the management server 1 sends the first identifier I10 and the first inherent information CA1 in the received data to the first server 2, thereby entrusting the first server 2 with the authentication of the corresponding individual of the first object VA. Accordingly, the control unit 21 of the first server 2 can act as the authentication unit 211, compare the first inherent information CA1 and the first registered inherent information CA10, and determine whether the authentication of the corresponding individual of the first object VA is established based on the comparison result. In step SC140, the control unit 21 of the first server 2 returns the authentication result of the corresponding individual of the first object VA to the management server 1.

[0301] Similarly, in step SD130, the control unit 11 of the management server 1 sends the second identifier I20 and the second inherent information CA2 to the second server 3 to entrust the second server 3 with the authentication of the corresponding individual of the second object WA. Accordingly, the control unit 31 of the second server 3 can act as an authentication unit 311, compare the second inherent information CA2 and the second registered inherent information CA20, and determine whether the authentication of the corresponding individual of the second object WA is established based on the comparison result. In step SD140, the control unit 31 of the second server 3 sends the authentication result of the corresponding individual of the second object WA to the management server 1.

[0302] The control unit 11 of the management server 1 receives the authentication results of the corresponding individuals of each object (VA, WA) from each server (2, 3). When the authentication results of the first object VA and the second object WA received are both established, the control unit 11 of the management server 1 sets a corresponding relationship between the corresponding individuals of the first object VA and the second object WA. The setting process of the corresponding relationship can be the same as the above-mentioned embodiment. In addition, a series of processes from data exchange between terminals (4, 5) to association establishment setting can be performed in real time according to the generation of the utilization relationship. Other structures can be the same as the first authentication method.

[0303] In the second authentication method, in the normal processing mode, based on the generation of a utilization relationship between the corresponding individuals of the first object VA and the second object WA, the first server 2 and the second server 3 respectively authenticate the corresponding individuals of the first object VA and the second object WA. Through these two authentications, security can be expected to be ensured.

[0304] also, Fig.15The processing steps are just an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. For example, the processing steps of the authentication of the first object VA (step SC110 to step SC140) and the authentication of the second object WA (step SD110 to step SD140) are not particularly limited and can be appropriately determined according to the implementation method.

[0305] When the simplified processing mode is selected, the authentication process of either the first object VA or the second object WA can be omitted. As in the first authentication method described above, the association establishment request of the simplified processing mode can be configured to appropriately specify the corresponding individuals of the first object VA and the second object WA. In addition, as in <4.1> described above, the authentication process of at least one of the first object VA and the second object WA can be performed in the normal processing mode, while both the first object VA and the second object WA can be omitted in the simplified processing mode.

[0306] In addition, the authentication result can be sent to a path other than Fig.15 In another example, the authentication process of at least one of the first object VA and the second object WA may be performed by the management server 1 instead of an external server. For example, the management server 1 may maintain at least one of the first registered inherent information CA10 and the second registered inherent information CA20. Alternatively, the management server 1 may obtain at least one of the first registered inherent information CA10 and the second registered inherent information CA20 by querying at least one of the first server 2 and the second server 3. Accordingly, the control unit 11 of the management server 1 may act as the authentication unit 115 to perform the authentication process of at least one of the first object VA and the second object WA.

[0307] (C-1) 3-1 Authentication Method

[0308] Fig.16 An example of the association setting process when the third-first authentication method is adopted is schematically shown. The third-first authentication method uses a time-limited certificate instead of unique information in authentication. The authentication process is executed by the management server 1.

[0309] The first server 2 is configured to issue a first time-limited certificate CB10 to each individual of the first object VA. The second server 3 is configured to issue a second time-limited certificate CB20 to each individual of the second object WA.

[0310] Each time-limited certificate (CB10, CB20) is configured to become invalid if the validity period has passed. As long as the invalidation caused by the passage of the validity period can be controlled, the configuration of each time-limited certificate (CB10, CB20) is not particularly limited and can be appropriately selected according to the implementation method. Each time-limited certificate (CB10, CB20) may include arbitrary information. In one example, each time-limited certificate (CB10, CB20) may be composed of a random number, a timestamp, a hash value, etc. Each time-limited certificate (CB10, CB20) may be composed of temporary information such as a one-time password.

[0311] The validity period of each time-limited certificate (CB10, CB20) can be appropriately managed. Expiration due to the passage of the validity period can be appropriately determined. For example, it can be determined whether the object's time-limited certificate has expired based on the passage of the period set for the time-limited certificate, the time-limited certificate being added to the expiration list, the time-limited certificate being deleted from the valid list, being updated to a new time-limited certificate, being given information indicating expiration (such as a timestamp), etc. When reference information such as a revocation list and a valid list is used in the management of the validity period, the reference information can be stored in any storage device that can be accessed from the system 100. Typically, the reference information of each time-limited certificate (CB10, CB20) can be stored in each server (2, 3). The following describes the authentication processing of the normal processing mode.

[0312] First, in step SE110, the control unit 41 of the first terminal 4 of the first object VA sends a request for issuance of the first time-limited certificate CB10 to the first server 2 in a manner associated with the first identifier I10 of the first object VA. Based on the reception of the request, the control unit 21 of the first server 2 issues the first time-limited certificate CB10 in a manner associated with the first identifier I10. In step SE120, the control unit 21 of the first server 2 returns the issued first time-limited certificate CB10 to the first terminal 4. Accordingly, the first terminal 4 receives the issued first time-limited certificate CB10 from the first server 2. The control unit 41 of the first terminal 4 saves the received first time-limited certificate CB10 in a manner that can be used as the first certificate CB1. In addition, in step SE130, the control unit 21 of the first server 2 also notifies the management server 1 of the issued first time-limited certificate CB10. The control unit 21 may notify the first time-limited certificate CB10 by attaching the first identifier I10.

[0313] In step SF110, the control unit 51 of the second terminal 5 of the second object WA sends a request for issuance of the second time-limited certificate CB20 to the second server 3 in a manner associated with the second identifier I20 of the second object WA. Based on the receipt of the request, the control unit 31 of the second server 3 issues the second time-limited certificate CB20 in a manner associated with the second identifier I20. In step SF120, the control unit 31 of the second server 3 returns the issued second time-limited certificate CB20 to the second terminal 5. Accordingly, the second terminal 5 receives the issued second time-limited certificate CB20 from the second server 3. The control unit 51 of the second terminal 5 saves the received second time-limited certificate CB20 in a manner that can be used as the second certificate CB2. In addition, in step SF130, the control unit 31 of the second server 3 also notifies the management server 1 of the issued second time-limited certificate CB20. The control unit 31 can notify the second time-limited certificate CB20 by attaching the second identifier I20.

[0314] When a utilization relationship is generated between the corresponding individuals of the first object VA and the second object WA, data exchange is performed between the corresponding first terminal 4 and the second terminal 5 (step SE140, step SF140). At least one of the first terminal 4 and the second terminal 5 sends an authentication delegation including the first certificate CB1 and the second certificate CB2 as an association establishment request to the management server 1 (step SE150, step SF150). Accordingly, the management server 1 receives the first certificate CB1 corresponding to the first time-limited certificate CB10 and the second certificate CB2 corresponding to the second time-limited certificate CB20. The processing of step SE150 and step SF150 is an example of the processing of the above-mentioned step S10. The request sent from at least one of the first terminal 4 and the second terminal 5 is an example of an association establishment request including an authentication delegation. The authentication delegation method is an example of a method of performing authentication processing together with the association establishment request or after the association establishment request.

[0315] The sharing of data transmission can be appropriately determined according to the implementation method. In one example, the second terminal 5 may be responsible for sending the first certificate CB1, and the first terminal 4 may be responsible for sending the second certificate CB2. That is, in step SE140, the control unit 51 of the second terminal 5 may obtain the first certificate CB1 from the first terminal 4. In step SE150, the control unit 51 of the second terminal 5 may send an association establishment request including the first certificate CB1 to the management server 1. In step SF140, the control unit 41 of the first terminal 4 may obtain the second certificate CB2 from the second terminal 5. In step SF150, the control unit 41 of the first terminal 4 may send an association establishment request including the second certificate CB2 to the management server 1.

[0316] In addition, the sharing of data transmission may not be limited to such an example. In another example, the first certificate CB1 may be sent from the first terminal 4. The second certificate CB2 may be sent from the second terminal 5. In addition, each identifier (I10, I20) may also be sent to the management server 1 together with each certificate (CB1, CB2). In this case, each identifier (I10, I20) and each certificate (CB1, CB2) are an example of data used in authentication. Each identifier (I10, I20) may be sent from at least one of the first terminal 4 and the second terminal 5. In the case of adopting a method of sending in a divided manner, the management server 1 may determine the corresponding establishment of the authentication entrusted data by using the above-mentioned shared information and other methods in order to determine the combination of the corresponding individuals of the first object VA and the second object WA for which the corresponding relationship is actually required. In another example, the first certificate CB1 and the second certificate CB2 may be sent only from one of the first terminal 4 and the second terminal 5.

[0317] The control unit 11 of the management server 1 acts as the authentication unit 115 to compare the received first certificate CB1 with the first time-limited certificate CB10 notified from the first server 2. The control unit 11 of the management server 1 acts as the authentication unit 115 to compare the received second certificate CB2 with the second time-limited certificate CB20 notified from the second server 3. The control unit 11 can appropriately determine the corresponding establishment of the data to be compared. Determining the corresponding establishment of the data to be compared means determining the combination of the first time-limited certificate CB10 and the first certificate CB1 to be compared, and the combination of the second time-limited certificate CB20 and the second certificate CB2. Similar to the corresponding establishment of the data entrusted for authentication, the control unit 11 can determine the corresponding establishment of the data to be compared by using the above-mentioned shared information or other methods. The shared information can be each identifier (I10, I20).

[0318] In addition, the comparison method of the certificate and the time-limited certificate can be appropriately selected according to the relationship between the two. In one example, the time-limited certificate (CB10, CB20) can be directly used as the certificate (CB1, CB2). In this case, whether the comparison in the authentication is established can be determined based on whether the time-limited certificate (CB10, CB20) is consistent with the certificate (CB1, CB2). In another example, the time-limited certificate (CB10, CB20) can be arbitrarily transformed, and the transformed time-limited certificate (CB10, CB20) can be used as the certificate (CB1, CB2). In this case, whether the comparison in the authentication is established can be determined based on whether the prescribed relationship is established between the time-limited certificate (CB10, CB20) and the certificate (CB1, CB2). For example, the first time-limited certificate CB10 can be transformed into a hash value, and the obtained hash value can be used as the first certificate CB1. Accordingly, whether the relationship is established can be determined based on whether the hash value of the first time-limited certificate CB10 is consistent with the first certificate CB1. The transformation may include data operations such as deletion and addition. At least one of the first time-limited certificate CB10 and the second time-limited certificate CB20 may be used as a certificate directly, and the other may be used as a certificate after transformation. In addition, the transformation process may be executed by each terminal (4, 5) or by each server (2, 3). In the case where the transformation process is executed by each server (2, 3), each terminal (4, 5) may receive the transformed time-limited certificate (CB10, CB20) from each server (2, 3).

[0319] The control unit 11 of the management server 1 can determine whether the authentication of the corresponding individuals of each object (VA, WA) is established based on the results of each comparison. If the comparison is not established, the authentication is not established. In the case where the first time-limited certificate CB10 / the second time-limited certificate CB20 is invalid due to expiration of the validity period, the comparison of the first object VA / the second object WA is not established. On the other hand, if the first time-limited certificate CB10 and the second time-limited certificate CB20 are valid and each comparison is established, the authentication of the first object VA and the second object WA are both established. In the case where the authentication of the first object VA and the second object WA is both established, the control unit 11 of the management server 1 sets a corresponding relationship between the corresponding individuals of the first object VA and the second object WA. The setting process of the corresponding relationship can be the same as the above-mentioned embodiment. In addition, a series of processes from data exchange between terminals (4, 5) to association establishment setting can be performed in real time based on the generation of the utilization relationship. Other structures can be the same as the first authentication method, etc.

[0320] In the method 3-1, in the normal processing mode, the first object VA and the second object WA are authenticated using time-limited certificates (CB10, CB20) based on the creation of a utilization relationship between the corresponding individuals of the first object VA and the second object WA. Each time-limited certificate (CB10, CB20) is configured to become invalid if the validity period has expired. Therefore, it is possible to prevent the same certificate from being used continuously, thereby ensuring security.

[0321] also, Fig.16 The processing steps are just an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. For example, the processing steps of the authentication of the first object VA (step SE110 to step SE150) and the authentication of the second object WA (step SF110 to step SF150) are not particularly limited and can be appropriately determined according to the implementation method.

[0322] In addition, the issuance of each time-limited certificate (CB10, CB20) does not necessarily need to be based on a request from each terminal (4, 5). Each server (2, 3) can actively generate each time-limited certificate (CB10, CB20). In this case, the processing of step SE110 and step SF110 can be omitted.

[0323] In addition, the issuance of each time-limited certificate (CB10, CB20) (steps SE110 to SE130, steps SF110 to SF130) can be performed at any time before the commission of the association establishment setting (step SE150, step SF150). In one example, the issuance of each time-limited certificate (CB10, CB20) can be performed in advance before the data exchange between the first terminal 4 and the second terminal 5 (step SE140, step SF140) is performed. In another example, it can also be performed after the data exchange between the first terminal 4 and the second terminal 5 is started and before the association establishment request is sent. From the perspective of reducing the process when the association is established, it is preferred that the issuance of each time-limited certificate (CB10, CB20) is performed at the former time.

[0324] When the simplified processing mode is selected, the authentication process of either the first object VA or the second object WA can be omitted. As in the first authentication method described above, the association establishment request of the simplified processing mode can be constructed to appropriately specify the corresponding individuals of the first object VA and the second object WA. In addition, as in <4.1> described above, in the normal processing mode, the authentication process of at least one of the first object VA and the second object WA is performed, whereas in the simplified processing mode, both the first object VA and the second object WA can be omitted.

[0325] In addition, in the above-mentioned authentication method 3-1, the comparison process of each certificate (CB1, CB2) and each time-limited certificate (CB10, CB20), that is, the authentication process of each object (VA, WA) is performed by the management server 1. However, the subject that performs the comparison process may not be limited to the management server 1. In another example, the management server 1 can entrust the comparison process to each server (2, 3) by sending each certificate (CB1, CB2) to each server (2, 3). Thus, the comparison process can be performed by each server (2, 3). That is, the authentication process of at least one of the first object VA and the second object WA can be performed by an external server. In one example, the control unit 21 of the first server 2 can act as the authentication unit 211, and determine whether the authentication of the first object VA is established by comparing the first certificate CB1 received from the management server 1 with the first time-limited certificate CB10. The control unit 21 can return the authentication result of the first object VA to the management server 1. In addition, the control unit 31 of the second server 3 can act as an authentication unit 311, and determine whether the authentication of the second object WA is established by comparing the second certificate CB2 received from the management server 1 with the second time-limited certificate CB20. The control unit 31 can return the authentication result of the second object WA to the management server 1. In this case, the notification of each time-limited certificate (CB10, CB20) (step SE130, step SF130) can be omitted. In another example, the management server 1 may perform the authentication process of at least one of the first object VA and the second object WA, and the external server may perform the authentication process of the other party.

[0326] (C-2) 3-2 Authentication Method

[0327] In the above-mentioned authentication method 3-1, authentication processing of each object (VA, WA) is performed based on a request for association establishment based on at least one of the first terminal 4 and the second terminal 5. However, the timing of performing the authentication processing may not be limited to such an example. In the authentication method 3-2, authentication processing of at least one of the first object VA and the second object WA may be pre-performed between at least one of the first server 2 and the second server 3 by at least one of the first terminal 4 and the second terminal 5 before the request for association establishment is sent to the management server 1. This authentication delegation method is an example of a method of performing authentication processing before the request for association establishment.

[0328] Fig.17A An example of the association setting processing procedure when the 3-2 authentication method is adopted is schematically shown. Fig.17A A scenario is assumed in which an authentication process of a first object VA is executed.

[0329] First, similar to the above-mentioned authentication method 3-1, the processing of step SE110 and step SE120 can be performed between the first terminal 4 and the first server 2. The result of the execution is that the first time-limited certificate CB10 is issued and the issued first time-limited certificate CB10 is notified to the first terminal 4. At this time, the first server 2 can associate the issued first time-limited certificate CB10 with the first identifier I10 for storage. The first time-limited certificate CB10 can be saved as the first object information O10. The notification to the management server 1 (step SE130) can be omitted. In step SE140, the control unit 41 of the first terminal 4 assigns the issued first time-limited certificate CB10 as the first certificate CB1 to the second terminal 5. In addition, the first terminal 4 assigns the first identifier I10 to the second terminal 5. Accordingly, the second terminal 5 obtains the first identifier I10 and the first certificate CB1 from the first object VA.

[0330] In step SG110, the control unit 51 of the second terminal 5 sends an authentication entrustment including the first identifier I10 and the first certificate CB1 to the first server 2. Based on the reception of the authentication entrustment, the control unit 21 of the first server 2 acts as the authentication unit 211 to compare the received first certificate CB1 with the corresponding first time-limited certificate CB10. The corresponding first time-limited certificate CB10 can be obtained appropriately. In one example, the issued first time-limited certificate CB10 can be saved as the first object information O10, and the control unit 21 of the first server 2 can retrieve the first object information O10 by using the first identifier I10 in the query to extract the corresponding first time-limited certificate CB10. In step SG120, the control unit 21 of the first server 2 returns the result of the comparison to the second terminal 5. Accordingly, the control unit 51 of the second terminal 5 receives the result of the comparison.

[0331] In the received comparison result, when the comparison between the first certificate CB1 and the first time-limited certificate CB10 is not established, the control unit 51 of the second terminal 5 can appropriately end the processing steps of the association establishment setting. The control unit 51 can request the first terminal 4 to send the first certificate CB1 again. On the other hand, when the comparison is established, the control unit 51 sends the association establishment request including the first identifier I10 and the second identifier I20 to the management server 1 (step SG130). The processing of step SG130 is an example of the processing of the above-mentioned step S10.

[0332] Accordingly, the management server 1 receives the association establishment request from the second terminal 5. The control unit 11 of the management server 1 sets the corresponding relationship between the first object VA and the corresponding individuals of the second object WA according to the association establishment request. The setting process of the corresponding relationship can be the same as the above-mentioned embodiment. In addition, a series of processes from the data exchange between the terminals (4, 5) (step SE140) to the association establishment setting can be executed in real time according to the generation of the utilization relationship. The other structures can be the same as the first authentication method, etc.

[0333] In addition, the authentication object according to the 3-2 authentication method is not limited to the first object VA. The second object WA can also be authenticated by the same method.

[0334] Fig. 17B Another example of the association setting process procedure when the 3-2 authentication method is adopted is schematically shown. Fig. 17B A scenario in which the authentication process of the second object WA is performed is assumed. In addition to the point at which the first object VA and the second object WA are exchanged, Fig. 17B The processing steps can be Fig.17A The processing steps are the same. That is, by executing the processing of step SF110 and step SF120 between the second terminal 5 and the second server 3, the second time-limited certificate CB20 is issued, and the issued second time-limited certificate CB20 is notified to the second terminal 5. In step SF140, the control unit 51 of the second terminal 5 assigns the issued second time-limited certificate CB20 to the first terminal 4 as the second certificate CB2. In addition, the control unit 51 of the second terminal 5 assigns the second identifier I20 to the first terminal 4. In step SH110, the control unit 41 of the first terminal 4 sends the authentication request including the second identifier I20 and the second certificate CB2 to the second server 3. Accordingly, the control unit 31 of the second server 3 acts as the authentication unit 311 to perform the comparison processing of the second certificate CB2 and the second time-limited certificate CB20. In step SH120, the control unit 31 of the second server 3 returns the comparison result to the first terminal 4. When the comparison between the second certificate CB2 and the second time-limited certificate CB20 is established in the comparison result, the control unit 41 of the first terminal 4 sends an association establishment request including the first identifier I10 and the second identifier I20 to the management server 1 (step SH130). Accordingly, the management server 1 receives the association establishment request from the first terminal 4. The control unit 11 of the management server 1 sets a correspondence relationship between the corresponding individuals of the first object VA and the second object WA according to the association establishment request.

[0335] In the case of adopting the same authentication process omission method as in the above embodiment, the above-mentioned authentication process can be executed in the normal processing mode. Fig.17A as well as Fig. 17BOn the other hand, in the simplified processing mode, the authentication process of either the first object VA or the second object WA may be omitted.

[0336] In the 3-2 authentication method, in the normal processing mode, the authentication process is executed before the association request. This can reduce the processing load of the management server 1. In addition, the processing time from the association request to the setting process can be shortened.

[0337] also, Fig.17A as well as Fig. 17B The processing steps are just an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, the steps can be appropriately omitted, replaced, and added according to the implementation method. The processing steps for authentication of the first object VA and the authentication of the second object WA are not particularly limited and can be appropriately determined by the implementation party.

[0338] For example, management server 1 can Fig.17A In the processing steps, it is appropriately verified that the matching is successful in the first server 2. In one example, the first server 2 may also send the result of the matching to the management server 1. For example, the above-mentioned authentication delegation may also include the second identifier I20. When the matching is successful, the first server 2 may send the result of the matching including the first identifier I10 and the second identifier I20 to the management server 1. Thereby, the first server 2 may enable the management server 1 to validate the association establishment request for the combination of the first identifier I10 and the second identifier I20 specified by the comparison result. That is, in one example, the verification that the matching is successful may be constituted by receiving the comparison result. The management server 1 may be configured to maintain the comparison result from the first server 2, accept the delegation of the association establishment setting for the combination of the first identifier I10 and the second identifier I20 specified by the comparison result, and discard the delegation of the association establishment setting other than this. Similarly, in Fig. 17B In the processing steps, the management server 1 may also appropriately verify that the comparison is established in the second server 3.

[0339] In addition, similar to the above <4.1>, in the normal processing mode, the above Fig.17A as well as Fig. 17B On the other hand, in the simplified processing mode, the authentication processes of both the first object VA and the second object WA may be omitted.

[0340] In addition, Fig.17A as well as Fig. 17BIn the processing steps, each server (2, 3) may not return the authentication result to each terminal (4, 5), but send it to the management server 1. This sending method is an example of a method of sending an association establishment request to the management server 1 via an external server and a method of performing authentication processing together with the association establishment request.

[0341] (D) 4th authentication method

[0342] Fig.18A An example of a process of establishing an association when the fourth authentication method is used is schematically shown. The fourth authentication method uses a key-based electronic signature and an electronic certificate. The authentication process is performed by a terminal of the other party to the object to be authenticated. The terminal of the other party to the object to be authenticated is the second terminal 5 when authenticating the first object VA, and is the first terminal 4 when authenticating the second object WA. Fig.18A A scenario is assumed in which an authentication process of a first object VA is executed.

[0343] As a preparation stage (pre-processing), a combination of a first key CC10 and a first public key used in the authentication of the first object VA is generated. The method of generating the first key CC10 and the first public key is not particularly limited and can be appropriately selected according to the implementation method. The first key CC10 and the first public key can be generated by at least one of the first terminal 4 and the external computer (the first server 2, the certification authority, etc.).

[0344] Next, the certification authority generates the first electronic certificate CC1 for the first public key. In one example, the certification authority may generate the first electronic certificate CC1 based on a commission from the first terminal 4. The certification authority may be the first server 2 or an external server other than the first server 2. As long as the authenticity of the first public key can be verified, the composition of the first electronic certificate CC1 may not be particularly limited and may be appropriately selected according to the implementation method. In one example, the first electronic certificate CC1 may be composed of the electronic signature of the certification authority, the ownership information and the first public key. The certification authority maintains a combination of the public key and the secret key. The electronic signature of the certification authority may be generated by encrypting the ownership information and the first public key using the secret key of the certification authority. In a specific example, the electronic signature of the certification authority may be generated by transforming the ownership information and the first public key into a hash value using a hash function and encrypting the resulting hash value using the secret key of the certification authority.

[0345] The first electronic certificate CC1 is provided from the certification authority to the first terminal 4. In addition, the first electronic certificate CC1 can be stored in any storage area. The validity period of the first electronic certificate CC1 can be managed by the revocation list. The revocation list can also be stored in any storage area. The first electronic certificate CC1 and the revocation list can be stored in the first server 2, and can also be stored in an external server that can be accessed from the first server 2. The first terminal 4 is in a state where the first key CC10 and the first electronic certificate CC1 are maintained, thereby completing the preparation for the authentication process of the first object VA.

[0346] In the utilization phase, when the utilization relationship between the corresponding individuals of the first object VA and the second object WA is generated, data exchange is performed between the corresponding first terminal 4 and the second terminal 5 (steps SI110 and SI120). In this data exchange, electronic information is shared between the first terminal 4 and the second terminal 5. The electronic information can be composed of arbitrary information such as a random number and a timestamp. The electronic information can include information from the first object VA such as the owner information of the first terminal 4.

[0347] The electronic information may be generated by at least one of the first terminal 4 and the second terminal 5. In the case where the second terminal 5 participates in the generation of at least a part of the electronic information, as a process of step SI110, data related to the electronic information may be provided from the second terminal 5 to the first terminal 4. The control unit 41 of the first terminal 4 generates the electronic signature CD1 by encrypting the first identifier I10 and the electronic information using the first key CC10. In a specific example, the control unit 41 of the first terminal 4 may generate the electronic signature CD1 by converting the first identifier I10 and the electronic information into a hash value using a hash function and encrypting the obtained hash value using the first key CC10.

[0348] In step SI120, the control unit 41 of the first terminal 4 gives the first identifier I10, the generated electronic signature CD1, and the first electronic certificate CC1 to the second terminal 5. Thus, the second terminal 5 obtains the first identifier I10, the electronic signature CD1, and the first electronic certificate CC1 from the first terminal 4. In the case where the first terminal 4 participates in the generation of at least a part of the electronic information such as the information from the first object VA, as the processing of step SI120, the data related to the electronic information can be provided from the first terminal 4 to the second terminal 5.

[0349] Next, the control unit 51 of the second terminal 5 operates as the authentication unit 514 to verify the validity of the first electronic certificate CC1 (step SI130, step SI135). Fig.18AIn the example, a scenario is assumed in which the first server 2 maintains a revocation list. In step SI130, the control unit 51 of the second terminal 5 inquires the first server 2 whether the first electronic certificate CC1 is valid. In the case where the first electronic certificate CC1 is not registered in the revocation list, it is determined that the first electronic certificate CC1 is valid (that is, the validity period has not expired). In the case where the first electronic certificate CC1 is registered in the revocation list, it is determined that the first electronic certificate CC1 is invalid. The first server 2 refers to the revocation list to determine whether the first electronic certificate CC1 is valid. In step SI135, the first server 2 returns the determination result to the second terminal 5. The control unit 51 of the second terminal 5 can simultaneously inquire the first server 2 whether the first identifier I10 is valid. In addition, in the case where the revocation list is maintained on an external server, the control unit 51 of the second terminal 5 can directly or indirectly (for example, via the first server 2) inquire the external server whether the first electronic certificate CC1 is valid. In another example, the control unit 51 of the second terminal 5 can obtain a revocation list and refer to the obtained revocation list to determine whether the first electronic certificate CC1 is valid. When the first electronic certificate CC1 is invalid (i.e., expired), the control unit 51 of the second terminal 5 determines that the verification of the validity of the first electronic certificate CC1 is not established, and can appropriately terminate the processing steps of the association establishment setting. The control unit 51 of the second terminal 5 can request the first terminal 4 to send a series of information again. On the other hand, when the first electronic certificate CC1 is valid, the control unit 51 of the second terminal 5 appropriately obtains the public key of the certification authority. The control unit 51 of the second terminal 5 uses the obtained public key to decode the electronic signature of the certification authority included in the first electronic certificate CC1. In addition, the control unit 51 of the second terminal 5 compares the obtained decoded data with the remaining information (possession information and the first public key) included in the first electronic certificate CC1. When the information is converted into a hash value and then encrypted, the control unit 51 of the second terminal 5 converts the information and the first public key into a hash value using a hash function, and compares the obtained hash value with the decoded data. For the control unit 51 of the second terminal 5, when the two are consistent in the comparison, it is determined that the verification of the validity of the first electronic certificate CC1 is established, and when the two are inconsistent, it is determined that the verification of the validity of the first electronic certificate CC1 is not established.

[0350] In addition, the control unit 51 of the second terminal 5 acts as the authentication unit 514 to verify the validity of the electronic signature CD1 (step SI140). The control unit 51 of the second terminal 5 uses the first public key included in the first electronic certificate CC1 to decode the electronic signature CD1. The control unit 51 of the second terminal 5 compares the obtained decoded data with the shared information (the first identifier I10 and the electronic information). In the case of encryption after conversion to a hash value, the control unit 51 of the second terminal 5 converts the shared information (the first identifier I10 and the electronic information) into a hash value using a hash function, and compares the obtained hash value with the decoded data. For the control unit 51 of the second terminal 5, when the two are consistent in the comparison, it is determined that the verification of the validity of the electronic signature CD1 is established, and when the two are inconsistent, it is determined that the verification of the validity of the electronic signature CD1 is not established.

[0351] When the verification of the validity of the first electronic certificate CC1 and the electronic signature CD1 is established, the authentication of the first object VA is established. In this case, the control unit 51 of the second terminal 5 sends a request for establishing an association including the first identifier I10 and the second identifier I20 to the management server 1 (step SI150). Accordingly, the management server 1 receives the request for establishing an association from the second terminal 5. The control unit 11 of the management server 1 sets a correspondence between the corresponding individuals of the first object VA and the second object WA according to the request for establishing an association. The setting process of the correspondence relationship can be the same as the above-mentioned embodiment. In addition, a series of processes from data exchange between the terminals (4, 5) to the establishment of an association can be performed in real time according to the generation of the utilization relationship. The process of step SI150 is an example of the process of the above-mentioned step S10. On the other hand, when the verification of the validity of at least one of the first electronic certificate CC1 and the electronic signature CD1 is not established, the second terminal 5 can appropriately end the processing steps of the association establishment setting. The second terminal 5 can also request the first terminal 4 to send a series of information again.

[0352] Furthermore, the authentication object according to the fourth authentication method is not limited to the first object VA. The second object WA can also be authenticated by the same method.

[0353] Fig.18B Another example of the association setting processing procedure when the fourth authentication method is adopted is schematically shown. Fig.18B A scenario in which the authentication process of the second object WA is performed is assumed. In addition to the point at which the first object VA and the second object WA are exchanged, Fig.18B The processing steps and data can be Fig.18AThe processing steps and each data are the same. That is, in the preparation stage, a combination of the second key CC20 and the second public key is generated. Next, the certification body generates a second electronic certificate CC2 for the second public key. In one example, the second electronic certificate CC2 can be composed of the electronic signature of the certification body, the possession information and the second public key. The second electronic certificate CC2 is provided to the second terminal 5 from the certification body. In the utilization stage, when the utilization relationship between the corresponding individuals of the first object VA and the second object WA is generated, data exchange (step SJ110, step SJ120) is performed between the corresponding first terminal 4 and the second terminal 5. In this data exchange, electronic information is shared between the first terminal 4 and the second terminal 5. The control unit 51 of the second terminal 5 generates an electronic signature CD2 by encrypting the second identifier I20 and the electronic information using the second key CC20. The control unit 51 of the second terminal 5 gives the second identifier I20, the generated electronic signature CD2 and the second electronic certificate CC2 to the first terminal 4. Thus, the control unit 41 of the first terminal 4 obtains the second identifier I20, the electronic signature CD2 and the second electronic certificate CC2. The control unit 41 of the first terminal 4 acts as the authentication unit 414 to verify the validity of the second electronic certificate CC2 (step SJ130, step SJ135). In addition, the control unit 41 of the first terminal 4 acts as the authentication unit 414 to verify the validity of the electronic signature CD2 (step SJ140). When the verification of the validity of the second electronic certificate CC2 and the electronic signature CD2 is established, the authentication of the second object WA is established. In this case, the control unit 41 of the first terminal 4 sends an association establishment request including the first identifier I10 and the second identifier I20 to the management server 1 (step SJ150). Accordingly, the management server 1 receives the association establishment request from the first terminal 4. The control unit 11 of the management server 1 sets a correspondence relationship between the corresponding individuals of the first object VA and the second object WA according to the association establishment request. The setting process of the correspondence relationship can be the same as the above-mentioned embodiment. On the other hand, if the verification of the validity of at least one of the second electronic certificate CC2 and the electronic signature CD2 is not established, the first terminal 4 can appropriately end the processing steps of the association establishment setting. The first terminal 4 can also request the second terminal 5 to send a series of information again. In another example, by executing Fig.18A as well as Fig.18B A series of processes are performed to execute the authentication process of the first object VA and the second object WA.

[0354] In the case of adopting the same authentication process omission method as in the above embodiment, the above-mentioned authentication process can be executed in the normal processing mode. Fig.18A as well as Fig.18BOn the other hand, in the simplified processing mode, the authentication process of either the first object VA or the second object WA may be omitted.

[0355] In the fourth authentication method, a key and an electronic certificate are used to authenticate at least one of the first object VA and the second object WA. As a result, security can be expected to be ensured. In addition, by performing authentication processing on the terminal side before the association establishment request, it can be expected to reduce the processing burden of the management server 1. In addition, the processing time from the association establishment request to the setting process can be shortened.

[0356] also, Fig.18A as well as Fig.18B The processing steps are just an example, and each step can be changed as much as possible. In addition, regarding the above processing steps, steps can be appropriately omitted, replaced, and added according to the implementation method. For example, in Fig.18A In the processing steps, the processing steps of verifying the validity of the first electronic certificate CC1 (step SI130, step SI135) and verifying the validity of the electronic signature CD1 (step SI140) can be appropriately changed. In another example, the verification of the validity of the electronic signature CD1 can be performed before the verification of the validity of the first electronic certificate CC1. The verification process of the validity of the first electronic certificate CC1 and the verification process of the validity of the electronic signature CD1 can be at least partially performed in parallel. The same is true for the relationship between the verification of the validity of the second electronic certificate CC2 and the verification of the validity of the electronic signature CD2.

[0357] In addition, similar to the above <4.1>, in the normal processing mode, the above Fig.18A as well as Fig.18B On the other hand, in the simplified processing mode, the authentication processes of both the first object VA and the second object WA may be omitted.

[0358] [5 Supplement]

[0359] The processes and means described in the present disclosure can be implemented in combination as long as no technical contradiction occurs.

[0360] Furthermore, a process described as being performed by one device may be shared and executed by a plurality of devices. Alternatively, a process described as being performed by different devices may be executed by one device. In a computer system, the hardware configuration that implements each function can be flexibly changed.

[0361] The present disclosure can also be implemented by supplying a computer program installed with the functions described in the above-mentioned embodiments to a computer, and having one or more processors of the computer read out the program and execute it. Such a computer program can be provided to the computer via a non-temporary computer-readable storage medium that can be connected to the system bus of the computer, or it can be provided to the computer via a network. Non-temporary computer-readable storage media include, for example, any type of disks such as magnetic disks (floppy (registered trademark) disks, hard disk drives (HDDs), etc.), optical disks (CD-ROMs, DVD disks, Blu-ray disks, etc.), read-only memories (ROMs), random access memories (RAMs), EPROMs, EEPROMs, magnetic cards, flash memories, optical cards, semiconductor drives (solid-state drives, etc.), and any type of medium suitable for storing electronic commands.

[0362] Description of reference numerals:

[0363] 1…management server; 11…control unit; 2…first server; 21…control unit; 3…second server; 31…control unit; 4…first terminal; 41…control unit; 47…positioning module; 5…second terminal; 51…control unit; 57…positioning module; VA…first object; WA…second object; I10…first identifier; I20…second identifier; O10…first object information; O10A…user information; O20…second object information; O20A…moving body information; D10…association establishment information; E10…various information.

Claims

1. A system, wherein: A management server, a first terminal of a first target, and a second terminal of a second target are provided. At least one of the first terminal and the second terminal is configured to send an association request to the management server in response to the generation of a utilization relationship between the first object and the second object. The management server is configured to set a correspondence relationship between the first object and the second object based on the association request. The corresponding relationship is set by the following processing: When the specified condition is not satisfied, both the authentication results of the first object and the second object are obtained, and the corresponding relationship between the first object and the second object is set according to the fact that both the authentication of the first object and the second object are established in the obtained authentication results of the first object and the second object; as well as When the specified conditions are met, authentication of either the first object or the second object is omitted, an authentication result of the other object is obtained, and a correspondence between the first object and the second object is set based on the fact that authentication of the other object is established in the obtained authentication result.

2. The system according to claim 1, wherein: The first object is a user, The second object is an object used by the user. The predetermined condition includes that the utilization object is a frequently utilized object that is repeatedly utilized by the user.

3. The system according to claim 1, wherein: The predetermined condition includes that a correspondence relationship has been set for the same combination of the first object and the second object in the past.

4. The system according to claim 1, wherein: The predetermined condition includes that the type of at least one of the first object and the second object is a specific type.

5. The system according to claim 1, wherein: The predetermined condition includes that a correspondence relationship has been set for the same combination of the first object and the second object in the past, and that the type of at least one of the first object and the second object is a specific type.

6. The system according to claim 5, wherein: The first object is a user, The second object is an object used by the user. The fact that the type of at least one of the first object and the second object is a specific type includes that the utilization object is a frequently utilized object that is repeatedly utilized by the user.

7. The system according to claim 6, wherein: The object to be utilized is a moving object.

8. The system according to claim 7, wherein: The frequently used object is a personal car.

9. The system according to claim 1, wherein: The first object is a user, The second object is an object used by the user. When the predetermined condition is satisfied, authentication of one of the first object and the second object is authentication of the object to be used, and authentication of the other object is authentication of the user.

10. The system according to claim 1, wherein: The sending of the association request to the management server is configured by directly sending the association request to the management server or indirectly sending the association request to the management server via an external server.

11. The system according to claim 1, wherein: Whether or not the authentication of the first object and the second object is established is determined by the management server or the external server.

12. The system of claim 1, wherein: When a utilization relationship is established between the first object and the second object, the first terminal and the second terminal are configured to exchange data.

13. The system according to claim 12, wherein: The data exchange is performed via short-range wireless communication.

14. The system of claim 1, wherein: The first terminal includes a positioning module. The first terminal is further configured as follows: Locating the current position of the first terminal by using the positioning module of the first terminal, sending a positioning result of the current position of the first terminal to the management server, The second terminal has a positioning module. The second terminal is further configured as follows: locating the current position of the second terminal by using the positioning module of the second terminal, sending a positioning result of the current position of the second terminal to the management server, The management server is further configured as follows: After the correspondence relationship between the first object and the second object is set, receiving positioning results of the current positions of the first terminal and the second terminal from the first terminal and the second terminal, determining in real time whether the received positioning results of the current positions of the first terminal and the second terminal satisfy the conditions of the utilization relationship, When the positioning results of the current positions of the first terminal and the second terminal satisfy the condition of the utilization relationship, the setting of the correspondence relationship between the first object and the second object is maintained, and when not, the correspondence relationship is cancelled.

15. A management server, wherein: A control unit configured to execute the following processing: When a utilization relationship is generated between a first object and a second object, a correspondence relationship between the first object and the second object is set based on an association establishment request sent from at least one of a first terminal of the first object and a second terminal of the second object, The corresponding relationship is set by the following processing: When the specified condition is not satisfied, both the authentication results of the first object and the second object are obtained, and the corresponding relationship between the first object and the second object is set according to the fact that both the authentication of the first object and the second object are established in the obtained authentication results of the first object and the second object; and When the specified conditions are met, authentication of either the first object or the second object is omitted, an authentication result of the other object is obtained, and a correspondence between the first object and the second object is set based on the fact that authentication of the other object is established in the obtained authentication result.

16. The management server according to claim 15, wherein: The first object is a user, The second object is an object used by the user. The predetermined condition includes that the utilization object is a frequently utilized object that is repeatedly utilized by the user.

17. The management server according to claim 15, wherein: The predetermined condition includes that a correspondence relationship has been set for the same combination of the first object and the second object in the past, and that the type of at least one of the first object and the second object is a specific type.

18. A management server, wherein: A control unit configured to execute the following processing: When a utilization relationship is generated between a first object and a second object, a correspondence relationship between the first object and the second object is set based on an association establishment request sent from at least one of a first terminal of the first object and a second terminal of the second object, The corresponding relationship is set by the following processing: When the predetermined condition is not satisfied, obtaining an authentication result of at least one of the first object and the second object, and setting a correspondence relationship between the first object and the second object based on the authentication being established in the obtained authentication result; and When the predetermined condition is satisfied, authentication of both the first object and the second object is omitted, and a correspondence relationship between the first object and the second object is established in response to receipt of the association request.

19. A program, wherein: for causing a first terminal of a first object to perform the following processing: when a utilization relationship is generated between the first object and the second object, sending an association establishment request to a management server; and causing the management server to set a correspondence relationship between the first object and the second object by sending the association establishment request in cooperation with a second terminal of the second object, or causing the second terminal to send the association establishment request, If the specified conditions are not met, The association establishment request includes authentication requests of the first object and the second object, The corresponding relationship between the first object and the second object is set by setting the corresponding relationship between the first object and the second object according to the authentication of the first object and the second object performed based on the authentication delegation being established. Provided that the above-mentioned conditions are met, The authentication request of one of the first object and the second object is omitted, and the association establishment request includes the authentication request of the other object. The correspondence relationship between the first object and the second object is set by setting the correspondence relationship between the first object and the second object in response to the establishment of authentication of the other object performed based on the authentication delegation.

20. A program, wherein: for causing a first terminal of a first object to perform the following processing: when a utilization relationship is generated between the first object and the second object, sending an association establishment request to a management server; and causing the management server to set a correspondence relationship between the first object and the second object by sending the association establishment request in cooperation with a second terminal of the second object, or causing the second terminal to send the association establishment request, If the specified conditions are not met, The association establishment request includes an authentication request of at least one of the first object and the second object, The corresponding relationship between the first object and the second object is set by setting the corresponding relationship between the first object and the second object according to the establishment of authentication of at least one of the first object and the second object performed based on the authentication delegation. Provided that the above-mentioned conditions are met, The authentication request of the first object and the authentication request of the second object are both omitted from the association establishment request, The setting of the correspondence relationship between the first object and the second object is configured by setting the correspondence relationship between the first object and the second object in response to receiving the association request.

Images