Identity management system, identity management method, and program

Abstract

The invention relates to an identity management system which is provided with a qualification management part. The qualification management unit assigns one or more pieces of qualification information to the identity of a real user present in a real space and indicates that the real user has a predetermined qualification. And storing in a storage unit a prescribed plurality of pieces of qualification information among one or more pieces of qualification information assigned to the identity of the virtual image that corresponds to the real user and can exist in the meta universe, in association with one information storage medium owned by the real user.

Description

TECHNICAL FIELD

[0001] The present application relates to an identity management system, an identity management method, and a program. This application claims priority based on Japanese Patent Application No. 2023-107259 filed in Japan on June 29, 2023, and Japanese Patent Application No. 2023-135662 filed in Japan on August 23, 2023, the contents of which are hereby incorporated by reference. BACKGROUND

[0002] It is known that a virtual avatar in a virtual space can perform an action such as a purchase of a virtual object in accordance with an operation of a user (for example, refer to Patent Literature 1).

[0003] Patent Literature 1: Japanese Patent Application Publication No. 2022-117111 SUMMARY

[0004] When a real user acts in a real space, or the real user, a virtual avatar corresponding to another user, acts in a virtual space, a qualification (proof of a status, a condition requested for a prescribed matter, a right, or the like) is required in various cases, and the qualification presented can not be the same at times. In view of this, it is desirable to efficiently perform management of qualifications associated with the existence (identity) of a real user, a virtual avatar, or the like.

[0005] Each real user existing in a real space is different in personality. In addition, a virtual avatar existing in a virtual space (metaverse) corresponding to each real user is also different in personality in accordance with the personality of the corresponding real user or the result of the action so far in the virtual space. In view of this, it is preferable for improving interest, convenience, and the like if information related to the characteristics possessed by the identity of a real user, a virtual avatar, or the like can be effectively and flexibly utilized in the activity space of the identity.

[0006] The present application aims to efficiently perform management of qualifications associated with an identity, and aims to be able to effectively and flexibly utilize the characteristics possessed by the identity in the activity space of the identity.

[0007] A first aspect of the present application, which solves the above problem, is an identity management system having a qualification management unit that stores, in a storage unit, a prescribed plurality of qualification information among one or more qualification information assigned to an identity of a real user existing in a real space and indicating that the real user has a prescribed qualification, and one or more qualification information assigned to an identity of a virtual avatar corresponding to the real user and capable of existing in a metaverse, in association with one information storage medium owned by the real user.

[0008] The second aspect of the present application is the identity management system according to the first aspect, wherein the qualification information includes position proof information proving a position of the identity.

[0009] The third aspect of the present application is the identity management system according to the first aspect or the second aspect, wherein the qualification information includes authenticity proof information proving authenticity of the identity.

[0010] The fourth aspect of the present application is the identity management system according to any one of the first aspect to the third aspect, wherein the qualification management unit outputs, as qualification information for qualification confirmation of the identity of the qualification confirmation target, qualification information selected from the qualification information stored in the storage unit by the real user's operation on the corresponding user terminal.

[0011] The fifth aspect of the present application is an identity management method of an identity management system, including: a qualification management step of storing, by a qualification management unit, a plurality of qualification information, which is given to an identity of a real user existing in a real space and represents a predetermined qualification, and which is given to an identity of a virtual avatar corresponding to the real user and capable of existing in a meta universe, in association with one information storage medium owned by the real user, in a storage unit.

[0012] The sixth aspect of the present application is a program for causing a computer of an identity management system to function as a qualification management unit that stores, in a storage unit, a plurality of qualification information, which is given to an identity of a real user existing in a real space and represents a predetermined qualification, and which is given to an identity of a virtual avatar corresponding to the real user and capable of existing in a meta universe, in association with one information storage medium owned by the real user.

[0013] The seventh aspect of the present application, which solves the above problem, is an identity management system including: a storage unit that stores identity unique information corresponding to an identity of a real user existing in a real space and an identity of a virtual avatar capable of existing in a meta universe, and unique to the identity; and a feature word processing unit that extracts a feature word corresponding to the identity and determines the relevance between the feature words based on the content of the identity unique information stored in the storage unit, and generates feature word relationship information representing the determined relevance.

[0014] The feature word processing section scores the feature words based on the identity unique information when extracting the feature words.

[0015] The feature word processing section generates feature word relational display information that visually presents the relevance between the feature words represented by the feature word relational information.

[0016] The feature word processing section displays the results of scoring the feature words in the feature word relational display information in a prescribed manner.

[0017] The feature word processing section generates a plurality of feature word relational information corresponding to different characteristics of the identity corresponding to one identity.

[0018] The feature word processing section generates integrated feature word relational information obtained by integrating a plurality of feature word relational information.

[0019] The feature word processing section generates integrated feature word relational information in a restructured manner from a part of the plurality of feature word relational information selected from the plurality of feature word relational information used when generating the integrated feature word relational information.

[0020] The identity management system according to any one of the seventh to thirteenth aspects further includes a matching section that makes a determination related to matching of a plurality of identities based on a similarity condition of the feature word relational information corresponding to each of the plurality of identities set as matching targets.

[0021] The feature word processing section generates integrated feature word relational information obtained by integrating the feature word relational information of each identity matched by the matching section.

[0022] The 16th aspect of the present application is an identity management method, which is an identity management method of an identity management system, having: a feature word processing step of extracting a feature word and determining a correlation between the feature words corresponding to an identity based on a content of identity unique information, which is stored in a storage unit, and corresponding to the identity being unique, generating feature word relationality information indicating the determined correlation, wherein the identity is corresponding to an identity of a real user existing in a real space and an identity of a virtual avatar capable of existing in a meta universe.

[0023] The 17th aspect of the present application is a program for causing a computer possessed by an identity management system to function as a feature word processing unit that extracts a feature word and determines a correlation between the feature words corresponding to an identity based on a content of identity unique information, which is stored in a storage unit, and corresponding to the identity being unique, generates feature word relationality information indicating the determined correlation, wherein the identity is corresponding to an identity of a real user existing in a real space and an identity of a virtual avatar capable of existing in a meta universe.

[0024] Effects of the Invention

[0025] According to the present application, it is possible to efficiently manage the qualifications related to the identity, and it is possible to effectively and flexibly utilize the characteristics possessed by the identity in the activity space of the identity. BRIEF DESCRIPTION OF DRAWINGS

[0026] Figure 1 is a diagram showing an example of the structure of the virtual avatar management system according to the first embodiment.

[0027] Figure 2 is a diagram showing an example of the structure of the virtual avatar generation system according to the present embodiment.

[0028] Figure 3 is a diagram schematically showing a flow of the virtual avatar generation according to the present embodiment.

[0029] Figure 4 is a diagram showing an example of the structure of the virtual avatar management device according to the present embodiment.

[0030] Figure 5 is a diagram showing an example of the end user information according to the present embodiment.

[0031] Figure 6 is a diagram showing an example of the virtual avatar information according to the present embodiment.

[0032] Figure 7 is a diagram showing an example of the meta file according to the present embodiment.

[0033] Figure 8 FIG. 1 is a diagram showing an example of information stored in the user VC storage corresponding to a real user, which is related to the present embodiment.

[0034] Figure 9 FIG. 2 is a diagram showing an example of information stored in the virtual image VC storage corresponding to a real user, which is related to the present embodiment.

[0035] Figure 10 FIG. 3 is a diagram showing a configuration example of issuer information, which is related to the present embodiment.

[0036] Figure 11 FIG. 4 is a diagram showing a configuration example of wallet management information, which is related to the present embodiment.

[0037] Figure 12 FIG. 5 is a timing chart showing a processing flow example performed in association with generation of a virtual image, registration of a virtual image, and registration of virtual image authentication information, which is related to the present embodiment.

[0038] Figure 13 FIG. 6 is a diagram showing an example of qualification information management, which is related to the present embodiment.

[0039] Figure 14A FIG. 7 is a diagram showing an operation flow example of the end user terminal corresponding to age authentication of a real user, which is related to the present embodiment.

[0040] Figure 14B FIG. 8 is a diagram showing an operation flow example of the end user terminal corresponding to age authentication of a real user, which is related to the present embodiment.

[0041] Figure 14C FIG. 9 is a diagram showing an operation flow example of the end user terminal corresponding to age authentication of a real user, which is related to the present embodiment.

[0042] Figure 15 FIG. 10 is a timing chart showing a processing flow example performed by the end user terminal and the virtual image management device corresponding to age confirmation of a real user, which is related to the present embodiment.

[0043] Figure 16 FIG. 11 is a timing chart showing a processing flow example performed by the end user terminal, the virtual image management device, and the service providing system corresponding to qualification confirmation of a virtual image, which is related to the present embodiment.

[0044] Figure 17 FIG. 12 is a diagram showing a configuration example of the entire identity management system, which is related to the present embodiment.

[0045] Figure 18 FIG. 13 is a diagram showing a configuration example of the virtual image generation system, which is related to the present embodiment.

[0046] Figure 19 is a diagram schematically showing a flow of virtual image generation to which the present embodiment is related.

[0047] Figure 20 is a diagram showing a hardware structure example of an identity management device to which the present embodiment is related.

[0048] Figure 21 is a diagram showing a functional structure example of an identity management device to which the present embodiment is related.

[0049] Figure 22 is a diagram showing one example of end user information to which the present embodiment is related.

[0050] Figure 23 is a diagram showing one example of virtual image information to which the present embodiment is related.

[0051] Figure 24 is a diagram showing one example of meta file to which the present embodiment is related.

[0052] Figure 25 is a diagram showing one example of information stored in the user VC storage corresponding to the virtual image to which the present embodiment is related.

[0053] Figure 26 is a diagram showing one example of information stored in the virtual image VC storage corresponding to the real user to which the present embodiment is related.

[0054] Figure 27 is a diagram showing a configuration example of wallet management information to which the present embodiment is related.

[0055] Figure 28 is a diagram showing a configuration example of identity history information to which the present embodiment is related.

[0056] Figure 29 is a diagram showing a configuration example of issuer information to which the present embodiment is related.

[0057] Figure 30 is a timing chart showing a processing flow example of the identity management system to which the present embodiment is related, in association with generation of a virtual image, registration of a virtual image, and registration of virtual image authentication information.

[0058] Figure 31 is a diagram showing a management method example of a wallet to which the present embodiment is related.

[0059] Figure 32 is a diagram showing one example of an identity management screen to which the present embodiment is related.

[0060] Figure 33is a diagram showing an example of a display method of trait expression information involved in the present embodiment.

[0061] Figure 34 is a diagram showing an example of a display method of trait expression information involved in the present embodiment.

[0062] Figure 35 is a flowchart showing an example of a processing flow executed by the identity management apparatus in association with generation of trait expression information involved in the present embodiment.

[0063] Figure 36 is a flowchart showing an example of a processing flow executed by the service providing system and the identity management apparatus in association with display of an identity trait curve involved in the present embodiment.

[0064] Figure 37 is a flowchart showing an example of a processing flow executed by the identity management apparatus in association with matching of an identity involved in the present embodiment. DETAILED DESCRIPTION

[0065] <1st Embodiment>

[0066] Figure 1 is a diagram showing an example of a structure of a virtual image management system (one example of a qualification management system) 2 of the present embodiment. The virtual image management system (one example of a qualification management system) 2 is included in an identity management system 1. The virtual image management system 2 of the present embodiment has a virtual image generation system 100, a user interface environment 200, a virtual image management apparatus 400, a network service environment 500, a VC (Verifiable Credentials) issuance system 600, and a DPKI system 700 as structural elements. Connection between the structural elements of these systems is performed via a network.

[0067] The virtual image generation system 100 is a system that generates a virtual image used by the network service environment 500.

[0068] Figure 2 is a diagram showing an example of a structure of the virtual image generation system 100. The virtual image generation system 100 shown in this diagram has a plurality of virtual image material providing systems 110 and one integration system 120.

[0069] The virtual image material providing system 110 is a system that respectively generates prescribed virtual image materials among materials (virtual image materials) that constitute a virtual image, and provides the generated virtual image materials. The virtual image material providing system 110 can be respectively operated by prescribed virtual image material providers (companies), for example.

[0070] The integration system 120 acquires the required virtual image material from the virtual image material provided by the virtual image material providing system 110, integrates (combines) the acquired virtual image material, and thereby generates a virtual image.

[0071] In the virtual image generation system 100, the virtual image material providing system 110 and the integration system 120 can be connected via a network.

[0072] In addition, the number of the virtual image material providing system 110 in the virtual image generation system 100 is not particularly limited as long as it is one or more. In addition, the number of the integration system 120 is not particularly limited as long as it is one or more.

[0073] Figure 3 The flow of the generation of a virtual image in the virtual image generation system 100 is schematically shown. The virtual image in the present embodiment is, for example, a 2-dimensional or 3-dimensional (3D) character or the like, and can also be a 3-dimensional real virtual image of a person or the like. In the description of the drawing, a case where a 3-dimensional real virtual image of a person is generated is exemplified. The real virtual image is, for example, a virtual image that realistically reproduces the posture of an actual person PS based on information obtained by photographing the person PS as a generation source.

[0074] In the virtual image generation system 100 of the drawing, an example in which six virtual image material providing systems 110-1 to 110-6 are provided is shown.

[0075] The virtual image material providing system 110-1 generates a 3D-based face (head) material as a virtual image material, and provides the generated face material MT-1.

[0076] The virtual image material providing system 110-2 generates a body material MT-2 as a virtual image material, and provides the generated body material MT-2. The body material MT-2 here is a part of a human body other than the head. In addition, the virtual image material providing system 110-2 can generate a body material MT-2 in a state of wearing clothes.

[0077] The virtual image material providing system 110-3 generates a voice material MT-3 as a virtual image material, and provides the generated voice material MT-3. The voice material MT-3 is a material of a voice emitted by a virtual image.

[0078] The virtual avatar material providing system 110-4 generates emotion material MT-4 as virtual avatar material, and provides the generated emotion material MT-4. The emotion material MT-4, for example, contains information that changes the expression of the face material, the action of the body material MT-2, and the like according to each emotion as specified. The emotion of the virtual avatar can be expressed by the emotion material MT-4.

[0079] The virtual avatar material providing system 110-5 generates movement material MT-5 as virtual avatar material, and provides the generated movement material MT-5. The movement material MT-5 contains information for giving the virtual avatar an action. For example, in the case where the virtual avatar is a weather forecaster appearing in the web content of a weather forecast, an action corresponding to the weather forecaster, such as indicating a weather map, can be given in accordance with the movement material MT-5 generated in correspondence with the weather forecaster.

[0080] The virtual avatar material providing system 110-6 generates space material MT-6 as virtual avatar material, and provides the generated space material MT-6. The space material MT-6 is material of a space in which the virtual avatar exists.

[0081] In the virtual avatar generating system 100 of the drawing, the virtual avatar material providing system 110-1 generates the face material MT-1 of the person PS as a generation source by taking a photograph of the person PS. In addition, the virtual avatar material providing system 110-2 generates the body material MT-2 of the person PS as a generation source by taking a photograph of the person PS. In addition, the virtual avatar material providing system 110-3 generates the voice material MT-3 using data in which the voice of the person PS as a generation source is recorded.

[0082] Moreover, the integration system 120 acquires the virtual avatar materials (the face material MT-1, the body material MT-2, the voice material MT-3, the emotion material MT-4, the movement material MT-5, the space material MT-6) respectively generated by the virtual avatar material providing systems 110-1 to 110-6. The integration system 120 integrates the acquired virtual avatar materials to generate the virtual avatar AVT.

[0083] The virtual avatar AVT can not use all of the virtual avatar materials (the face material, the body material, the voice material, the emotion material, the movement material, the space material) illustrated in the drawing. That is, the virtual avatar AVT, for example, can be generated using a part of the virtual avatar materials illustrated in the drawing. Which virtual avatar material is used when generating the virtual avatar, for example, can be changed in accordance with the network service in which the generated virtual avatar is used, the environment of the meta universe in which the virtual avatar exists, and the like.

[0084] Returning to Figure 1An explanation will be given. The user interface environment 200 is an environment that provides a user interface to an end user who utilizes the network service environment 500. Specifically, the user interface environment 200 has one or more end user terminals 300 corresponding to one or more end users, respectively.

[0085] The end user terminal 300 is a terminal that an end user utilizes in order to receive a provision of a network service based on the network service environment 500.

[0086] The end user terminal 300 is capable of connecting with the service providing system 510 according to an operation of the end user, and outputting an application, content, and the like corresponding to a network service provided by the connected service providing system 510 by display, voice, and the like.

[0087] The end user terminal 300 can be a personal computer, a smartphone, a tablet terminal, and the like.

[0088] Further, in the following explanation, the end user is sometimes referred to as a "real user". The "real user" is a name in a case where the end user is treated as a user who is associatedly present in a real space, and is used when compared with a virtual avatar corresponding to the end user who is associatedly present in a virtual space as the same user.

[0089] The virtual avatar management apparatus 400 performs management of virtual avatars. Specifically, as the management of virtual avatars, the virtual avatar management apparatus 400 stores virtual avatars generated by the virtual avatar generation system 100 as management objects. The virtual avatar management apparatus 400 uploads the virtual avatars stored as management objects to the network service environment 500. The network service environment 500 provides, toward an end user, a network service provided by the network service environment 500, which uses a virtual avatar.

[0090] In addition, the virtual avatar management apparatus 400 is capable of confirming the authenticity of a virtual avatar by giving the management object virtual avatar authenticity proof information.

[0091] In addition, the virtual avatar management apparatus 400 determines the authenticity of a virtual avatar with respect to an object of an authenticity inquiry (authenticity confirmation request) with respect to a virtual avatar used in a network service provided toward the end user terminal 300, and transmits a determination result to the end user terminal 300.

[0092] In addition, the virtual avatar management apparatus 400 causes the VC issuance system 600 to issue information of a status certificate (virtual avatar status certificate information) as a proof of the status (identification) of a management object virtual avatar itself. The virtual avatar management apparatus 400 is capable of setting a management object by storing the issued virtual avatar status certificate information.

[0093] Specifically, the virtual image management apparatus 400 transmits the virtual image status certification information of the virtual image of the status certification object to the network service of the status certification request source, according to a status certification request of the virtual image from a certain network service in the network service environment 500. At this time, the virtual image management apparatus 400 can impart a signature (electronic signature) (encryption) using a key associated with the virtual image of the object, with respect to the status certification information of the transmission object.

[0094] In addition, the virtual image management apparatus 400 can manage a wallet (one example of an information storage medium). With the wallet here, in addition to containing the custody of assets in the utilization environment of the cryptocurrency, it can also contain, for example, the management of the qualification information (proof of authenticity information, status certification information (VC)) of the real user, the virtual image associated with one end user. Also, the wallet can contain a wallet for various services such as settlement provided by the platform operator, a wallet for a two-dimensional code settlement application, etc. The virtual image management apparatus 400 can manage the data of the wallet through the blockchain.

[0095] The network service environment 500 is an environment that provides one or more network services. Specifically, the network service environment 500 has one or more service providing systems 510 that provide a prescribed network service. The service providing system 510 can be configured, for example, as a web server, an application server, etc., constructed according to the content of the network service to be provided.

[0096] The network service provided by the service providing system 510 can be a website, a network game, a network conferencing system, etc., that utilizes a virtual image. In addition, in the network service that utilizes a virtual image as described above, it can contain a service that causes a virtual image to exist in a metaverse that is a three-dimensional virtual space and act in the metaverse. Specifically, as a network service, in addition to a service such as a market in which a virtual image can purchase goods, etc., at a store, etc., in the metaverse, a service in which a virtual image can be directly bought and sold among virtual images in the metaverse, a service that causes an artist, a certain character to exist in the metaverse, it can also implement, for example, a service such as weather forecasts that sets a virtual image as a weather forecaster, a consultation of medical care that sets a virtual image as a doctor, a prediction that sets a virtual image as a fortune teller, etc.

[0097] In addition, the service providing system 510 can provide a plurality of network services. With the service providing system 510 that provides a metaverse as a network service, it can also provide a plurality of metaverses.

[0098] The VC issuance system 600 is a system that issues status certification information according to an issuance request. The VC issuance system 600 can be configured, for example, by one or more apparatuses connected to a network.

[0099] The VC issuance system 600 of the present embodiment can issue status certification information that certifies the status of an end user (real user), and can issue status certification information that certifies the status of a virtual image itself that is set as a management target by the virtual image management apparatus 400.

[0100] The VC issuance system 600 can issue a plurality of status certification information each corresponding to a plurality of different issuers (issuing sources).

[0101] The VC issuance system 600 issues status certification information of public issuers (public status certification information). The public issuers, for example, refer to issuers who are institutions of administrative operation, institutions that are administratively recognized, or institutions that have a certain degree or more of social creditworthiness. Specifically, for public issuers, for example, institutions that issue licenses corresponding to prescribed qualifications, recognized enterprises, educational institutions, autonomous bodies, financial institutions, and the like can be cited. For example, with respect to public status certification information for settlement in the metaverse, a financial institution can become an issuing institution and issue it. Also, for example, with respect to public status certification information for entering a certain facility in the metaverse or the like, an enterprise that operates the facility, an educational institution, an autonomous body, or the like can become an issuing institution and issue it.

[0102] Also, the VC issuance system 600 issues status certification information of private issuers (private status certification information). The private issuers, for example, can be non-governmental organizations such as volunteer associations, citizen movement groups, department activities of schools, and the like. Such private status certification information issued by the private issuers, for example, can certify that a virtual image belongs to a corresponding non-governmental group, a certificate of award issued by a corresponding non-governmental group, or a license is given to a virtual image, and the like.

[0103] Also, among the private issuers, for example, supporters (fans) of artists can be included. The private status certification information issued by the supporters of artists, for example, can certify that a virtual image of an artist is an existence that is supported by the supporters, by being given to a virtual image of an artist.

[0104] Also, among the private issuers, end users can be included. As one example, an end user who is a private issuer can issue private status certification information of a friend certification. A virtual image to which the private status certification information of the friend certification is given, for example, can certify that there is a friend relationship with a virtual image of an end user who is a private issuer.

[0105] In addition, the private issuer can be, for example, a user of the service providing system 510. As an example, the service providing system 510 as a private issuer can issue private status proof information of a good proof. A virtual image of the end user to which the private status proof information of the good proof is given can prove, for example, that the end user has not committed an inappropriate act in the meta universe provided by the service providing system 510, and is good.

[0106] In addition, the private issuer can include an event host or the like. As an example, the private issuer can issue private status proof information as an entrance ticket to an event held in the meta universe of the prescribed service providing system 510. A virtual image to which the private status proof information as the entrance ticket is given can prove that the virtual image has a qualification to participate in the event held in the meta universe of the prescribed service providing system 510.

[0107] As is clear from the above examples of the private issuer, the private status proof information can function as information that proves the status of the virtual image or the user corresponding to the virtual image based on the relationship between individuals, the evaluation of the individual, by the private issuer.

[0108] As an example of the issuance of the status proof information based on the relationship between individuals, in addition to the above, for example, it can be formed so as to be able to issue private status proof information based on the relationship of an SNS (Social Network System). The private status proof information in this case can prove, for example, that a certain user or virtual image is a friend of a friend of the private issuer in the SNS.

[0109] In addition, as an example of the private status proof information based on the evaluation of the individual, for example, it can be formed so as to be able to issue private status proof information as an evaluation of a user of a network service that performs transactions between individuals (an exhibitor, a purchaser).

[0110] In addition, as an example of the private status proof information based on the evaluation of the other individual, the private status proof information can be issued based on information (credit information) indicating the credit of the user of the service provided by inputting information such as the age, gender, occupation, purchase history, and the like of the user to evaluate the credit of the individual.

[0111] The status proof information issued by the VC issuance system 600 in the present embodiment is, for example, information corresponding to a VC (Verifiable Credential). In the following description, a case where the status proof information in the present embodiment is information corresponding to a VC is taken as an example. Therefore, in the following description, the status proof information issued by the VC issuance system 600 is sometimes referred to as a VC.

[0112] Also, in the present embodiment, regarding the status proof information that proves the status of the virtual avatar itself, it is written as virtual avatar status proof information (virtual avatar VC), and distinguished from the status proof information that proves the status of the real user (end user) (end user status proof information (end user VC)). Also, in the case where the virtual avatar status proof information and the end user status proof information are not distinguished in particular, it is written as status proof information or VC.

[0113] The DPKI system 700 manages public keys in correspondence with a DPKI (Decentralized Public Key Infrastructure).

[0114] The VC issuance system 600 of the present embodiment, when issuing the status proof information as a VC, generates a pair of a public key and a secret key corresponding to an issuer DID that is a DID (Decentralized Identifier) uniquely representing the issuer of the status proof information. Also, a pair of a public key and a secret key corresponding to an owner DID (end user DID or virtual avatar DID) that is a DID uniquely representing the owner of the status proof information (end user or virtual avatar) is generated.

[0115] The VC issuance system 600 registers the generated public keys (public key corresponding to the issuer DID, public key corresponding to the owner DID) to the DPKI system 700. The DPKI system 700 stores the registered public keys in association with each of the issuer DID, the owner DID.

[0116] The DPKI system 700 can perform the registration of the public key by storing the public key to a blockchain. Also, the DPKI system 700 can be constituted by a device that is a node corresponding to the blockchain that stores the public key.

[0117] In the case where there is a need to perform the status proof of the owner, the service providing system 510 acquires the public key associated with the owner DID of the subject owner from the DPKI system 700. The service providing system 510 can perform the determination of whether the status proof information is legitimate (status verification) by decoding the status proof information using the acquired public key.

[0118] Figure 4 A configuration example of the virtual avatar management device 400 is shown. As the functions of the virtual avatar management device 400 of the drawing, they are realized by executing a program by a CPU (Central Processing Unit) possessed by the virtual avatar management device 400.

[0119] The virtual avatar management device 400 of the drawing has a communication section 401, a control section 402, a storage section 403.

[0120] The communication section 401 performs communication via a network.

[0121] The control section 402 performs various controls of the virtual image management apparatus 400. The control section 402 of this figure has a virtual image registration section 421, a reality proof information management section 422 (one example of a qualification management section), a virtual image provision control section 423, and a VC management section 424 (one example of a qualification management section) and a wallet management section 425.

[0122] The virtual image registration section 421 registers virtual images generated in the virtual image generation system 100 as management objects. The registration of virtual images here is performed by storing virtual image information (described later) of the management object virtual image to a virtual image information storage section 432. Virtual images registered by the virtual image registration section 421 can be used in network services provided by the service provision system 510 of the network service environment 500 itself.

[0123] The reality proof information management section 422 performs management of reality proof information of virtual images. Specifically, the reality proof information management section 422 imparts reality proof information to registered virtual images. The reality proof information is described later.

[0124] In addition, the reality proof information management section 422 can perform reality determination on a virtual image that is an object of reality confirmation, using reality proof information imparted to a registered virtual image, in response to a reality confirmation request from the end user terminal 300. The reality proof information management section 422 can transmit a determination result on reality to the end user terminal 300 that is the transmission source of the reality confirmation request.

[0125] The virtual image provision control section 423 performs control related to provision (transmission of virtual image information) of a registered virtual image to the service provision system 510. The virtual image management apparatus 400 and each service provision system 510 are connected by an API, and the virtual image provision control section 423 can transmit data of a virtual image to the service provision system 510 based on a state of online connection.

[0126] The VC management section 424 manages VCs (status proof information) that are identities of management objects existing in a real space or a meta universe. The VCs made management objects by the VC management section 424 are managed as user status proof information (user VC) corresponding to an identity of a real user and virtual image status proof information (virtual image VC) corresponding to an identity of a virtual image.

[0127] The VC management unit 424 requests the VC issuance system 600 to issue proof information of identity (real user or virtual character) via a network. The VC issuance system 600 issues proof information of identity of the object according to the request. The VC issuance system 600 transmits the issued proof information of identity, the corresponding key (key corresponding to the issuer DID, key corresponding to the owner DID) to the virtual character management apparatus 400. The VC management unit 424 stores the transmitted proof information of identity (proof information of virtual character or proof information of user) in association with the key in the virtual character VC storage unit 433 or the user VC storage unit 434.

[0128] The wallet management unit 425 manages a wallet used by the real user and the virtual character.

[0129] The storage unit 403 stores various information corresponding to the virtual character management apparatus 400. The storage unit 403 includes an end user information storage unit 431, a virtual character information storage unit 432, a virtual character VC storage unit 433, a user VC storage unit 434, and a wallet management information storage unit 435.

[0130] The end user information storage unit 431 stores end user information. The end user information is information related to an end user who registers one or more virtual characters corresponding to the end user to the virtual character management apparatus 400.

[0131] Figure 5 An example of end user information corresponding to one end user is shown. The end user information of this figure includes a field of end user ID and a field of user profile information. The field of end user ID stores an end user ID uniquely representing the corresponding end user.

[0132] The field of user profile information stores user profile information of the corresponding end user. The user profile information may, for example, include the name, sex, address, and the like of the end user.

[0133] The virtual character information storage unit 432 stores virtual character information.

[0134] Figure 6 An example of virtual character information stored in the virtual character information storage unit 432 is shown. The virtual character information storage unit 432 of this figure includes an object data storage unit 4321, a material group data storage unit 4322, and a meta file storage unit 4323.

[0135] Virtual character information corresponding to one virtual character includes, for example, object data, material group data, and a meta file.

[0136] The object data storage section 4321 stores object data of each registered virtual image.

[0137] The material group data storage section 4322 stores material group data of each registered virtual image. The meta file storage section 4323 stores a meta file of each registered virtual image. The object data, the material group data, and the meta file corresponding to the same virtual image are associated with each other by the same virtual image ID among the object data storage section 4321, the material group data storage section 4322, and the meta file storage section 4323.

[0138] Specifically, the object data A, the material group data A, and the meta file A stored in the object data storage section 4321, the material group data storage section 4322, and the meta file storage section 4323, respectively, corresponding to the virtual image A are associated with each other by the virtual image ID [00000A] uniquely representing the virtual image A.

[0139] The object data is entity data that is an object of the corresponding virtual image. The object data is formed by combining, for example, a head, a body, and the like, which are components generated using a prescribed virtual image material.

[0140] The material group data is data including one or more virtual image materials prescribed in a manner added to an entity of the virtual image based on the object data. The material group data can include, for example, a voice material, an emotion material, a movement material, a space material, and the like. According to the material group data, a sound can be emitted from the object of the virtual image, a facial expression can be changed, a motion can be applied, or the virtual image can exist in a virtual space based on a prescribed design.

[0141] The meta file includes one or more meta data given to the corresponding virtual image.

[0142] Figure 7 An example of a meta file corresponding to one virtual image is shown in this figure. The meta file in this figure includes meta data such as a virtual image ID, a generation source information, a creator information, an authentication code, a utilization authority information, a virtual image form, and a motion history information.

[0143] The virtual image ID is an identifier that uniquely represents a virtual image in the virtual image information stored in the virtual image information storage section 432. The virtual image ID can be issued by the virtual image registration section 421 when a corresponding virtual image is registered. As described above, the object data, the material group data, and the meta file corresponding to the same virtual image are associated with each other by the virtual image ID.

[0144] The generation source information is information related to the original person (generation source) of the corresponding virtual image. The generation source information includes a generation source ID, profile information of the person who is the generation source, and the like as information items. The generation source information can be provided from the virtual image generation system 100. In a case where the person who is the generation source is an end user, for the generation source ID, an end user ID of the corresponding end user can be used.

[0145] The creator information is information related to the creator of the corresponding virtual image. The creator can be, for example, a group or an individual such as a company corresponding to the integration system 120 that generated the corresponding virtual image in the virtual image generation system 100.

[0146] The authentication code is a code issued by the virtual image management apparatus 400 in association with a virtual image that is an object of provision when the service providing system 510 accepts provision of the virtual image (transmission of virtual image information) from the virtual image management apparatus 400.

[0147] The utilization right holder information is information related to a utilization right holder. The utilization right holder is a person who has a utilization right of the corresponding virtual image. The utilization right holder can be an end user who is a person who is the generation source of the virtual image. In this case, the utilization right holder can cause the virtual image of which the person is the generation source to exist in the meta universe provided by the service providing system 510, for example, and can move within the meta universe according to an operation of the end user terminal 300. In addition, the utilization right holder can be a user of the service providing system 510 or the like. The utilization right holder information is information indicating such a utilization right holder. Specifically, the utilization right holder information can be a utilization right holder ID, a user name, a password, or the like that is a user account registered by the utilization right holder. In a case where the utilization right holder is an end user, for the utilization right holder ID, an end user ID can be used.

[0148] In addition, the utilization right holder information can include, for example, a utilization right holder (secondary utilization right holder) who is another end user to whom a utilization right is given, in addition to the original utilization right holder (primary utilization right holder) who is the end user or the like who is the generation source of the virtual image, for example.

[0149] The virtual image form indicates a file form, a specification, or the like of the virtual image as a form of the corresponding virtual image.

[0150] The action history information is information indicating a history related to an action of the corresponding virtual image in the meta universe, provided by each service providing system 510. The action history information of each virtual image can be acquired by the virtual image provision control unit 423 from each service providing system 510, for example.

[0151] Returning to Figure 4An explanation is given. The virtual character VC storage section 433 stores the virtual character status certification information (virtual character VC) of each virtual character that has been registered. In addition, the virtual character VC storage section 433 stores the key (key corresponding to the issuer DID, key corresponding to the virtual character DID) associated with the virtual character status certification information.

[0152] Figure 8 An example of the information (virtual character status certification information and key) stored by the virtual character VC storage section 433 corresponding to one virtual character is shown.

[0153] As shown in the figure, in the virtual character VC storage section 433, the virtual character status certification information and the key corresponding to the virtual character DID are stored in association with the virtual character ID. The virtual character VC ID is an identifier uniquely labeling the corresponding virtual character status certification information.

[0154] As described above, by associating the virtual character status certification information and the key with the virtual character ID, it is possible to manage the virtual character status certification information and the key in association with the virtual character information of the corresponding virtual character.

[0155] The virtual character status certification information includes the fields of the VC type, the issuer DID, the virtual character DID, and the virtual character association information.

[0156] The field of the VC type stores information indicating the type (type, form) of the status certification information.

[0157] The field of the issuer DID stores the issuer DID indicating the issuer of the virtual character status certification information.

[0158] The field of the virtual character DID stores the virtual character DID of the corresponding virtual character.

[0159] The field of the virtual character association information stores the virtual character association information of the corresponding virtual character. The content of the information included in the virtual character association information is not particularly limited, and for example, information such as rights, qualifications, and the like obtained by the virtual character acting in the meta universe can be included. In addition, the same action history information as the action history information stored in the virtual character information can also be included in the virtual character association information.

[0160] Furthermore, at least one of the virtual character status certification information and the key can be stored to the blockchain by the control of the VC management section 424 of the virtual character management apparatus 400. In the case where either of the virtual character status certification information and the key is stored to the blockchain, the virtual character VC storage section 433 can be omitted.

[0161] Returning to Figure 4 will be described. The user VC storage section 434 stores the user status certification information (user VC) of each end user (real user) registered (stored) in the end user information storage section 431. In addition, the user VC storage section 434 stores the key (key corresponding to the issuer DID, key corresponding to the user DID) associated with the user status certification information.

[0162] Figure 9 An example of the information (user status certification information and key) stored by the user VC storage section 434 corresponding to one real user is shown.

[0163] As shown in the figure, in the user VC storage section 434, the user status certification information and the key corresponding to the user DID are stored in association with the user VC ID and the user ID. The user VC ID is an identifier uniquely labeling the corresponding user status certification information. As described above, by associating the user status certification information and the key with the user ID, it is possible to manage the user status certification information and the key in association with the user information of the corresponding real user (end user).

[0164] The user status certification information contains the fields of the VC type, the issuer DID, the user DID, and the user association information.

[0165] The user association information stores the user association information of the corresponding real user. The content of the information contained in the user association information is not particularly limited, and for example, it can contain information such as rights, qualifications, and the like obtained by the real user as a result of the action (shopping, movement to a prescribed place, and the like) in the real space of the corresponding real user. In addition, the user association information can also contain action history information for the action in the real space of the corresponding real user.

[0166] In addition, at least one of the user status certification information and the key can be stored to the blockchain by the control of the VC management section 424 of the virtual image management apparatus 400. In the case where either of the user status certification information and the key is stored to the blockchain, the user VC storage section 434 can be omitted.

[0167] Returning to Figure 4 will be described. The wallet management information storage section 435 stores the wallet management information. The wallet management information corresponding to one wallet is information that manages the qualification information of the identity (real user, virtual image) corresponding to one end user in an integrated manner. Figure 10An example of the wallet management information corresponding to one wallet. The wallet management information corresponding to one wallet has fields of a wallet ID, an identity list, and a qualification information list.

[0168] The field of the wallet ID stores an identifier, the wallet ID, uniquely representing the corresponding wallet.

[0169] The identity list stores an identity ID (user ID, avatar ID) representing an identity capable of using the corresponding wallet.

[0170] The qualification information list stores a qualification information ID (user VC ID, avatar VC ID, authenticity proof information ID, etc.) for each qualification information (VC, authenticity proof information, etc.) managed as qualification information included in the corresponding wallet.

[0171] With the wallet management information configured in this way, the qualification information (authenticity proof information, VC, etc.) given for each identity (real user, avatar) corresponding to one end user, for example, can be managed integrally as qualification information stored by the wallet owned by the end user. Also, the qualification information stored by the wallet can be shared between the identities represented by the identity IDs (user ID, avatar ID) stored in the identity list.

[0172] Further, the wallet management information can be stored to the blockchain by control of the wallet management section 425 of the avatar management apparatus 400. In this case, the wallet management information storage section 435 can be omitted.

[0173] Further, the avatar management apparatus 400 can be constituted by one apparatus, or can be realized by a plurality of apparatuses cooperatively performing processing on the basis of each of the plurality of apparatuses being communicably connected on a network and each of the plurality of apparatuses being respectively assigned a prescribed function.

[0174] Also, the VC issuance system 600 can store a database (issuer database) related to the issuer.

[0175] Figure 11 An example of the configuration of an entry (issuer information) stored in the issuer database corresponding to one issuer. The issuer information of this figure includes fields of an issuer ID, an issuer profile, and an issued VC.

[0176] The field of the issuer ID stores the issuer ID of the corresponding issuer.

[0177] The field of issuer profile stores an issuer profile. The issuer profile is information indicating a profile of the issuer. As shown in the figure, the issuer profile can include, for example, a field of issuer category, a field of issuer name, and the like. The field of issuer category stores, for example, information indicating which of, for example, a public issuer and a private issuer is a category of the corresponding issuer as an issuer. The field of issuer name stores a name of the corresponding issuer (issuer name).

[0178] The field of issued VC stores information related to the status certification information issued by the corresponding issuer as an issuer.

[0179] Referring to Figure 12 A processing flow example of the virtual image management system (qualification management system) 2 of the present embodiment, which is executed in association with the registration of the end user (real user) (user registration), is described with reference to a timing chart of FIG. 9. The registration of the end user based on the processing flow example of the figure becomes registration for enabling management of the real user who is the end user corresponding to the virtual image as one of the identities.

[0180] Step S100: The end user operates the end user terminal 300 held by the end user to cause the end user to be registered to the virtual image management apparatus 400 in a manner of the end user registration procedure. At the end user registration procedure, the end user can input information of prescribed items of the user profile information, such as a user account number, a user name, and the like, which should be included.

[0181] The virtual image management apparatus 400 generates the end user information of the corresponding end user based on the end user registration procedure from the end user terminal 300, and stores the generated end user information in the storage section 431.

[0182] Step S102: In addition, the end user can perform an issuance procedure of the user status certification information (user VC) corresponding to the end user in association with the user registration of step S100. In this case, the end user can cause the end user terminal 300 to access the VC issuance system 600, and perform an operation of the issuance procedure of the user status certification information (user VC) corresponding to the end user. The end user terminal 300 performs a process corresponding to the user status certification information issuance procedure based on the operation.

[0183] As the processing of the issuance procedure, the end user terminal 300 can transmit information of prescribed items of the user profile information to the VC issuance system 600 together with an issuance request. In addition, the issuance request can include information of specifying a category (for example, a driver's license, a passport, an insurance certificate, and the like) of the user status certification information to be issued, and the like.

[0184] Step S104: The VC issuance system 600 generates user status certification information in accordance with the issuance request received in correspondence with step S102. At this time, the VC issuance system 600 generates (issues) a user DID indicating the corresponding end user, and generates a pair of public key and secret key corresponding to the user DID. On this basis, the VC issuance system 600 signs (encrypts) the generated user status certification information by the secret key generated in correspondence with the issuer DID indicating the issuance authority corresponding thereto.

[0185] Step S106: The VC issuance system 600 registers the user status certification information generated in step S104 to the avatar management device 400. Specifically, the VC issuance system 600 transmits the user status certification information to which the signature is imparted by the secret key corresponding to the issuer DID imparted to the corresponding issuance authority, and the secret key corresponding to the user DID of the corresponding end user, to the avatar management device 400. In the avatar management device 400, the VC management unit 424 stores the user status certification information and the secret key corresponding to the user DID received from the VC issuance system 600 in association with the avatar ID of the corresponding avatar in the user VC storage unit 434.

[0186] Step S108: In addition, the VC issuance system 600 registers the public key (public key corresponding to the issuer DID, public key corresponding to the user DID) generated in step S104 together with the user status certification information to the DPKI system 700.

[0187] Further, the issuance of the user status certification information by steps S102 to S108 can be executed after the user registration is performed, each time new issuance of the prescribed user status certification information is required.

[0188] Next, the processing flow example of the avatar management system 2 of the present embodiment and the processing executed in association with the generation, registration, and registration of the avatar authentication information of the avatar will be explained with reference to the timing chart of Figure 12

[0189] Step S200: The end user operates the end user terminal 300 held by the end user to access the avatar generation system 100, and performs an avatar generation operation. The end user terminal 300 transmits an avatar generation instruction corresponding to the avatar generation operation to the avatar generation system 100.

[0190] Step S202: The avatar generation system executes processing to generate an avatar in accordance with the avatar generation instruction.

[0191] ​Step S204: The end user operates the end user terminal 300 to perform a virtual character registration procedure to register the generated virtual character to the virtual character management apparatus 400. In the virtual character registration procedure, designation of the virtual character to be registered as the registration target and designation of the virtual character management apparatus 400 as the registration target of the designated virtual character are performed.

[0192] Step S206: In accordance with the virtual character registration procedure of step S204, the virtual character generation system 100 and the virtual character management apparatus 400 perform processing corresponding to the virtual character registration.

[0193] First, the virtual character generation system 100 uploads virtual character information of the virtual character designated as the registration target by the virtual character registration procedure to the virtual character management apparatus 400.

[0194] The virtual character registration unit 421 of the virtual character management apparatus 400 stores the uploaded virtual character information in the virtual character information storage unit 432.

[0195] In addition, in this step S206, the authenticity proof information management unit 422 of the virtual character management apparatus 400 imparts authenticity proof information to the virtual character that is the target of this registration.

[0196] The authenticity proof information is information that proves the authenticity of the virtual character itself existing in the metaverse or the like of the service providing system 510. Here, the virtual character has authenticity, meaning that the virtual character is not a counterfeit or tampered with and is legitimate. As examples of virtual characters that are not legitimate (improper), there are virtual characters that are tampered with by replacing virtual character materials such as face materials with counterfeit materials different from the original, virtual characters that are created by copying a virtual character of a creator or the like without the permission of a person having a certain right, and the like.

[0197] Specifically, as the imparting of authenticity proof information to the virtual character of the target, the authenticity proof information management unit 422 can impart a digital watermark (one example of authenticity proof information) and an electronic authenticity certificate (one example of authenticity proof information) in the following manner.

[0198] The authenticity proof information management unit 422 imparts, to the object data of the virtual character of the target, information inherent to the virtual character of the target, such as a virtual character ID, as a digital watermark. The digital watermark imparted to the object data of the virtual character in this manner is preferably imperceptible, but can also be perceptible.

[0199] In addition, the authenticity proof information management unit 422 imparts an electronic authenticity certificate to the virtual character of the target.

[0200] At this time, the authenticity proof information management section 422 can assign an authenticity certificate to the subject virtual image, the authenticity certificate certifying the creator of the subject virtual image, the storage place (URL) of the subject virtual image, the service providing system 510 using the subject virtual image, and the like.

[0201] The authenticity certificate can be issued by the authenticity certificate issuing office (omitted from the drawing) in the network by the authenticity proof information management section 422 performing a prescribed transaction, for example. Such an authenticity certificate can be managed on the network in association with the virtual image ID (an example of information inherent to the subject virtual image) of the subject virtual image, for example.

[0202] As one example, the authenticity certificate assigned to the virtual image by the authenticity proof information management section 422 can be an NFT (Non-Fungible Token) managed by a blockchain. In this case, the authenticity proof information management section 422 can assign the authenticity certificate to the virtual image using an external NFT platform, for example. In addition, the authenticity proof information management section 422 can also assign an authenticity certificate generated using a quantum-resistant blockchain to the virtual image.

[0203] In addition, the authenticity certificate assigned to the virtual image by the authenticity proof information management section 422 can be an NFT that is not transferable, that is, an SBT (Soulbound Token). In this case, the authenticity proof information management section 422 can assign the SBT as the authenticity proof information to the virtual image instead of the NFT, or can assign both the NFT and the SBT to the virtual image. In the case where the authenticity proof information management section 422 assigns both the NFT and the SBT as the authenticity proof information to the virtual image, the authenticity proof information management section 422 can selectively use one of the NFT and the SBT or can use both the NFT and the SBT at the same time each time the authenticity of the virtual image is certified.

[0204] In addition, the authenticity proof information management section 422 issues an authentication code unique to the subject, that is, the virtual image, registered this time in step S206. The authentication code is a code provided to the service providing system 510 using the virtual image data of the subject virtual image, the service providing system 510 providing a network service using the subject virtual image. The authentication code is used for the determination of the authenticity of the virtual image corresponding to a request from an end user, as described later.

[0205] The authentication code is uniquely associated with the subject virtual image, and thus, for example, the virtual image ID can be used.

[0206] However, in the case of enhancing security against a virtual image or registration information that can possibly contain personal information of a user, for example, it is preferable to use a code generated without depending on the virtual image ID as the authentication code.

[0207] The authenticity proof information management section 422 adds, as one of the metadata of the metafile stored in the metafile storage section 4323 in association with the virtual image as the object, the authentication code issued (S208). Figure 7

[0208] Step S208: The creator of the virtual image registered by step S206, that is, the end user can cause the end user terminal 300 to access the VC issuance system 600 and perform an operation of an issuance procedure of the virtual image status proof information. The end user terminal 300 performs a process of the issuance procedure in accordance with the operation.

[0209] As the process of the issuance procedure, the end user terminal 300 can transmit an issuance request to the VC issuance system 600 together with the virtual image information as the object of the virtual image status proof information. In addition, the issuance request can include information (issuance certificate designation information) that designates the virtual image status proof information that should be issued.

[0210] Further, the virtual image status proof information issued by the VC issuance system 600 to the virtual image as the object can be decided in response to the issuance request.

[0211] Further, the end user terminal 300 can temporarily acquire the virtual image information from the virtual image management apparatus 400 each time the issuance request is transmitted, transmit the acquired virtual image information to the VC issuance system 600, or can designate the virtual image as the transmission object to the virtual image management apparatus 400 and transmit the virtual image information from the virtual image management apparatus 400 to the VC issuance system 600.

[0212] Step S210: In accordance with the issuance request from the end user terminal 300 based on step S208, the VC issuance system 600 generates the virtual image status proof information that proves the status of the virtual image based on the virtual image information received together with the issuance request in step S208. At this time, the VC issuance system 600 generates (issues) the virtual image DID that indicates the corresponding virtual image, and generates a pair of a public key and a secret key corresponding to the virtual image DID. On this basis, the VC issuance system 600 gives a signature (encrypts) to the generated virtual image status proof information by the secret key generated in correspondence with the issuer DID that indicates the issuance authority corresponding to itself.

[0213] The VC issuance system 600 can include at least a part of the content of the received virtual image information in the identity information.​

[0214] Step S212: The VC issuing system 600 registers the virtual avatar status verification information to the virtual avatar management device 400. Specifically, it sends the virtual avatar status verification information (an example of signed status verification information) which is signed with a key corresponding to the issuer DID assigned to the corresponding issuing authority, and the key corresponding to the virtual avatar DID of the corresponding virtual avatar, to the virtual avatar management device 400. The VC management unit 424 of the virtual avatar management device 400 stores the virtual avatar status verification information received from the VC issuing system 600 and the key corresponding to the virtual avatar DID in association with the virtual avatar ID of the corresponding virtual avatar in the virtual avatar VC storage unit 433.

[0215] Step S214: In addition, the VC issuance system 600 will register the public key (the public key corresponding to the issuer's DID and the public key corresponding to the virtual avatar's DID) generated in step S210 along with the virtual avatar status verification information to the DPKI system 700.

[0216] In the virtual avatar management system 2 of this embodiment, through the above-described... Figure 12 The processing flow, as an identity corresponding to one end user, can register real users and virtual avatars. After registration, it can assign (issue) qualification information to the identity. That is, it can assign (issue) a user status certificate to real users and assign virtual avatar status certificate information and authenticity certificate information to virtual avatars.

[0217] Based on this, the wallet management unit 425 of the virtual avatar management device 400 can set up a qualification information wallet WL, which is a wallet that comprehensively stores the qualification information assigned to the identity (real user, virtual avatar) corresponding to each end user.

[0218] That is, the wallet management section 425 gives one wallet ID in association with one end user. The wallet management section 425 generates wallet management information corresponding to the given wallet ID in the following manner. For example, the wallet management section 425 stores, in association with the given wallet ID, the identity ID (user ID, avatar ID) of each identity corresponding thereto, to the field of the shared ID list. In addition, the wallet management section 425 stores, in association with the given wallet ID, the list item of the qualification information given to the identity corresponding thereto, to the field of the shared qualification information list. The wallet management section 425 stores the wallet management information generated in this manner in the wallet management information storage section 435. Furthermore, it is possible to store the identity ID of a part of the identities corresponding to one end user in the shared ID list. In addition, it is also possible to store a part of the qualification information selected from all the qualification information given to each identity corresponding to one end user in the shared qualification information list.

[0219] Figure 13 One example of the manner in which the identity and qualification information managed by the wallet management information corresponding to one end user is shown. In this figure, an example of the management manner of the wallet realized based on the avatar management application AP installed in the end user terminal 300 is shown.

[0220] In this figure, an example in which the real user and the three avatars A, B, and C are registered as the identities of the qualification information wallet WL corresponding to one end user is shown. That is, in the field of the shared ID list of the wallet management information, the user ID of the corresponding real user and the avatar IDs of the three avatars A, B, and C are stored.

[0221] In addition, the qualification information wallet WL corresponding to the real user and the three avatars A, B, and C holds the user status certification information (user VC) corresponding to the real user and the avatar status certification information (avatar VC) corresponding to the avatars A, B, and C, respectively. In addition, the qualification information wallet WL of this figure holds the realness certification information such as NFT, SBT, and the like given to each of the avatars A, B, and C, as the coins 1 to 5 In the field of the shared qualification information list of the corresponding wallet management information, these status certification information (VC) and coins (realness certification information) are stored. As the coins, for example, a driver's license, a membership card, an access permission certificate indicating that access to a certain place is permitted, a ticket indicating that participation in a certain event is permitted, and the like can be included as NFT, SBT.

[0222] As described above, in the present embodiment, by associating the qualification information wallet WL with one end user, it is possible to comprehensively manage the qualification information of the plurality of identities corresponding to one end user.

[0223] As described above, according to the ability to comprehensively manage the qualification information of the plurality of identities corresponding to one end user, it is possible to prompt the identity and the qualification information corresponding to the end user in the end user terminal 300 in the following manner.

[0224] Figure 14A An example of an identity management screen displayed on the display section of the end user terminal 300 is shown. In the identity management screen of the figure, an identity selection area AR1, a qualification information selection area AR2, and a service selection area AR3 are arranged.

[0225] The identity selection area AR1 is an area in which an operation of selecting an identity to be the object of authentication, entry into the metaverse, and the like is performed. In the identity selection area AR1, buttons BT1 corresponding to the real user and the plurality of virtual avatars are arranged as the identities corresponding to the end user. In the figure, the buttons BT1 displayed as "Real ID" correspond to the real user, and the buttons BT1 displayed as "Business", "Culture", and "Game" correspond to the virtual avatars, respectively.

[0226] The qualification information selection area AR2 is an area in which an operation of selecting qualification information for the qualification confirmation of the real user in the real space or qualification information for the qualification confirmation of the virtual avatar in the metaverse is performed.

[0227] The qualification information selection area AR2 includes a status certificate information (VC) area AR21 and a veracity certificate information area AR22.

[0228] The status certificate information area AR21 is an area in which an operation of selecting qualification information as status certificate information is performed. In the status certificate information area AR21, buttons BT21 corresponding to each status certificate information are arranged as options.

[0229] The veracity certificate information area AR22 is an area in which an operation of selecting qualification information as veracity certificate information is performed. In the veracity certificate information area AR22, buttons BT22 corresponding to each status certificate information are arranged as options.

[0230] The service selection area AR3 is an area in which an operation of selecting a service to be used by the identity from among services provided in the real space (real services) and services provided in the metaverse (network services) is performed. The real services can include services in which a predetermined non-cash settlement such as a credit card can be used. The service selection area AR3 arranges buttons BT3 corresponding to each service.

[0231] Here, when the end user utilizes a service with age restriction such as purchasing alcohol at a store as a real user in a real space, age confirmation is required. That is, reaching a certain age or older is required as a qualification to utilize the service. In this case, the end user can cope with the age confirmation by utilizing the virtual image management system 2 of the present embodiment in the following manner.

[0232] In this case, the end user performs an operation of selecting the real user as a user who becomes the object of the service utilization (operation on the button BT1) with respect to the identity selection region AR1 of the identity management screen of, for example, Figure 14A

[0233] In addition, the end user performs an operation of selecting the service to be utilized this time as the real user with respect to the service selection region AR3 of the identity management screen (operation on the button BT3).

[0234] Further, the end user performs an operation of selecting the qualification information capable of proving the age requested based on the service to be utilized this time with respect to the qualification information selection region AR2 (operation on the button BT2).

[0235] Corresponding to the above-described operations, the display of the display section of the end user terminal 300 jumps from the state of Figure 14A to the qualification information screen which indicates the content of the qualification information selected by the operation on the qualification information selection region AR2, for example, as shown in Figure 14B At this time, in the display section of the end user terminal 300, a code symbol CD generated based on the selected qualification information is displayed below the qualification information screen. The code symbol CD is obtained by code symbolizing information (age confirmation information) proving that the age of the real user is above the age required for the object service.

[0236] The end user performs an operation on the code symbol CD displayed below the qualification information screen. Corresponding to the operation on the code symbol CD, the display section of the end user terminal 300 jumps to the display of the enlarged code symbol CD as shown in Figure 14C

[0237] The end user prompts the enlarged and displayed code symbol CD to, for example, a clerk of the store. The clerk reads the prompted code symbol CD by a reader. The store terminal acquires the age confirmation information indicated by the read code symbol CD, thereby informing the end user that the age condition is satisfied by display or the like. The clerk can confirm that the end user satisfies the age condition by the informing, and correspondingly provides the service.

[0238] The flow of the above-described Figure 15 is described with reference to the flowchart of Figure 14A ​​、 Figure 14B 、 Figure 14C The age authentication of the real user is explained by the processing flow example performed by the end user terminal 300 and the virtual image management apparatus 400 correspondingly.

[0239] Step S300: In this case, the end user performs an operation of selecting the real user with respect to the identity selection area AR1 of the identity management screen (Fig. 6A). Figure 14A

[0240] Step S302: In addition, the end user performs an operation of selecting the service to be used this time with respect to the service selection area AR3 of the identity management screen. The end user terminal 300 determines the service to be used this time in correspondence with the operation.

[0241] Step S304: In addition, the end user performs an operation of selecting the qualification information that can prove satisfaction of the age condition requested based on the service to be used this time with respect to the qualification information selection area AR2 of the identity management screen. The end user terminal 300 determines the selected qualification information in correspondence with the operation.

[0242] Step S306: The end user terminal 300 transmits a qualification information request requesting the qualification information determined by Step S304 to the virtual image management apparatus 400. The qualification information request can include, for example, a wallet ID associated with the end user and a qualification information ID indicating the qualification information determined by Step S304.

[0243] Step S308: In this case, the qualification information specified by the qualification information request transmitted by Step S306 is the user status proof information. In this case, in the virtual image management apparatus 400, the VC management unit 424 acquires the user status proof information specified by the received qualification information request from the user VC storage unit 434, and transmits the acquired user status proof information to the end user terminal 300.

[0244] Step S310: The end user terminal 300 receives the user status proof information transmitted by Step S308, and refers to the age of the end user (real user) shown in the received user status proof information. The end user terminal 300 generates age confirmation information indicating satisfaction of the age condition requested with respect to the service to be used this time (the service selected in Step S302) based on the referred age, and generates a code symbol indicating the generated age confirmation information. The age confirmation information can be content indicating the state of satisfaction of the age condition, or can be content indicating a specific age.

[0245] ​Step S312: The end-user terminal 300 displays the code symbols generated in step S310 on the display unit.

[0246] Next, refer to Figure 16 The sequence diagram illustrates an example of the processing flow performed by the virtual avatar management system 2 of this embodiment in relation to the qualification verification of virtual avatars operating in the metaverse. Step S400: In this case, the end user approaches the identity management screen ( Figure 14A The user terminal 300 selects an identity in the AR1 area to choose a virtual avatar to act in the metaverse. The virtual avatar selected through this operation is then used as the identity of the object acting in the metaverse.

[0247] Step S402: The end user enables the end-user terminal 300 to access the metaverse service providing system 510 corresponding to the purpose of utilizing the virtual avatar of the object. The end user performs virtual avatar collaboration operations on the accessed target service providing system 510 to enable the existence of the virtual avatar. As the virtual avatar collaboration control corresponding to the virtual avatar collaboration operation, the end-user terminal 300 notifies the accessed target service providing system 510 of the virtual avatar ID of the virtual avatar of the object existing in the metaverse.

[0248] Step S404: The service providing system 510 requests virtual avatar information from the virtual avatar management device 400, represented by the previously notified virtual avatar ID. The virtual avatar providing control unit 423 of the virtual avatar management device 400 forwards the virtual avatar based on the requested virtual avatar information to the requesting service providing system 510. The service providing system 510 makes the forwarded virtual avatar exist in the metaverse. At this time, the end-user terminal 300 accessing the service providing system 510 displays a virtual avatar of an object existing in the metaverse.

[0249] Step S406: Here, the virtual avatar created in the metaverse through step S404 operates in the metaverse under the control of the control unit 423. That is, in this case, the virtual avatar does not depend on the end user's operation of the end user terminal 300, but acts proactively.

[0250] The control of the virtual image to actively act by the virtual image providing control section 423 can be performed on the basis of a prescribed plan (scenario). Alternatively, the control of the virtual image to actively act can be performed by the virtual image providing control section 423 using AI (Artificial Intelligence). In this case, the virtual image providing control section 423 can cause the virtual image to act using a trained model that has learned how to act in correspondence with attributes such as a profession, a personality, and the like set to the virtual image, an environment of the meta universe in which the virtual image exists, and the content of communication with other virtual images.

[0251] Further, as the step S406, an operation to cause the virtual image of the existing object to act is sometimes performed by the end user at the service providing system 510.

[0252] Step S408: Here, in a state in which the virtual image is acting in the meta universe, a situation in which the qualification of the virtual image needs to be confirmed (a situation in which the qualification needs to be confirmed) occurs. As one specific example, for example, in a case in which the virtual image wants to participate in a certain activity, as a participation qualification, it is necessary to confirm whether or not a ticket to participate in the activity is possessed.

[0253] Step S410: In correspondence with the occurrence of the situation in which the qualification needs to be confirmed, the service providing system 510 that becomes the confirmer of the qualification transmits a qualification confirmation request to the end user terminal 300 corresponding to the virtual image of the object. The qualification confirmation request can contain the virtual image ID of the virtual image of the object as information that identifies the virtual image of the object.

[0254] Step S412: The end user terminal 300, in correspondence with the reception of the qualification confirmation request, performs notification to the end user that the qualification confirmation of the virtual image of the object is necessary, for example, by display or the like. The end user recognizes that the qualification confirmation of the virtual image of the object is necessary by accepting the notification. In this case, the end user performs an operation to select the qualification information used for the qualification confirmation necessary this time with respect to the qualification information selection area AR2 of the identity management screen (screen S2) displayed on the end user terminal 300. Figure 14A

[0255] The end user terminal 300 transmits a qualification confirmation request including the qualification information ID of the qualification information selected by the operation to the service providing system 510.

[0256] Step S414: The service providing system 510, in correspondence with the reception of the qualification confirmation request, transmits a qualification information request to the virtual image management apparatus 400. The qualification information request contains the qualification information ID contained in the received qualification confirmation request.

[0257] ​Step S416: The virtual image management apparatus 400 acquires the qualification information indicated by the qualification information ID included in the qualification information request transmitted in step S414. In a case where the qualification information indicated by the qualification information ID included in the qualification information request is the authenticity proof information (authenticity certificate), the authenticity proof information management section 422 can acquire the indicated qualification information from a network (for example, a blockchain). Alternatively, in a case where the qualification information indicated by the qualification information ID included in the qualification information request is the virtual image status proof information (virtual image VC), the VC management section 424 can acquire the corresponding virtual image VC from the virtual image VC storage section 433.

[0258] In addition, when the VC management section 424 acquires the virtual image VC as the qualification information, the VC management section 424 can perform signature assignment (encryption) by the key corresponding to the virtual image DID with which the virtual image status proof information is associated in the virtual image VC storage section 433.

[0259] Step S418: The authenticity proof information management section 422 or the VC management section 424 transmits the qualification information (authenticity proof information or virtual image status proof information) acquired in step S420 to the service providing system 510. In a case where the virtual image status proof information is transmitted, the corresponding issuer DID and virtual image DID can be attached to the transmitted virtual image status proof information.

[0260] Step S420: The service providing system 510 performs qualification confirmation processing using the qualification information received in step S418.

[0261] In a case where the received qualification information is the token (authenticity proof information), the service providing system 510 can confirm the content of the authenticity proof information, for example, and determine whether the virtual image as the target is a person who has a proper qualification.

[0262] In addition, in a case where the received qualification information is the virtual image status proof information, the service providing system 510 can transmit a public key request for requesting a public key corresponding to the received virtual image status proof information to the DPKI system 700. The public key request includes the issuer DID and the virtual image DID attached to the received virtual image status proof information.

[0263] The DPKI system 700 acquires the public key corresponding to the issuer DID and the public key corresponding to the virtual image DID from the blockchain, respectively, corresponding to the issuer DID and the virtual image DID included in the received public key request.

[0264] The DPKI system 700 transmits the two public keys (the public key corresponding to the issuer DID, the public key corresponding to the avatar DID) acquired by receiving the avatar status certification information in step S418 to the service providing system 510 that is the transmission source of the public key request.

[0265] The service providing system 510 decodes the received avatar status certification information using the two public keys transmitted. If the decoding is successful, the received avatar status certification information is authentic, and the status of the avatar of the subject is certified. If the decoding fails, the received avatar status certification information is not authentic, and the status of the avatar of the subject cannot be certified.

[0266] Step S422: The service providing system 510 performs processing corresponding to the result of the confirmation in step S420.

[0267] Further, as Figure 13 indicated, by managing the qualification information corresponding to one end user by storing it in the qualification information wallet WL, it is also possible to arbitrarily associate the qualification information with the identity (real user, avatar) corresponding to the end user. As a result, for example, the qualification information given to each identity corresponding to the end user can be used in common between the identities.

[0268] Further, in the above-described embodiment, the case where the identity (real user, avatar) is created corresponding to one end user is cited as an example. However, in the present embodiment, for example, there can be an avatar that can be associated with a plurality of end users who are certain or uncertain.

[0269] In this case, the avatar providing control section 423 can act autonomously corresponding to all or some of the end users among the plurality of end users. In addition, the avatar providing control section 423 in this case can cause the avatar to act in accordance with the operation of the avatar based on the consensus of the plurality of end users or the operation of the avatar by some of the end users.

[0270] In addition, in this case, for example, the qualification information wallet WL that stores the qualification information of a plurality of real users corresponding to the plurality of end users respectively and the qualification information of a plurality of avatars prescribed can be managed corresponding to the plurality of end users.

[0271] In addition, in the present embodiment, the end user can not be limited to an individual. In the present embodiment, the end user can be, for example, an organization, a group such as a company, a group, and the like.

[0272] Further, the avatar management system 2 of the present embodiment is not limited to the structure shown as the above-described embodiment. For example,Figure 4 The prescribed functional units in the virtual image management apparatus 400 shown can also be provided in the end user terminal 300. For example, by providing the end user terminal 300 with the functions of the wallet management unit 425, the wallet management information storage unit 435, and the like in association with the qualification information wallet WL, it is possible to centrally manage the qualification information of the corresponding end user in the end user terminal 300.

[0273] Further, it can be that a program for realizing the functions of the virtual image generation system 100, the end user terminal 300, the virtual image management apparatus 400, the service providing system 510, the VC issuance system 600, the DPKI system 700, and the like described above is recorded on a computer-readable recording medium, and by reading the program recorded on the recording medium into a computer system and executing it, the processing of the virtual image generation system 100, the end user terminal 300, the virtual image management apparatus 400, the service providing system 510, the VC issuance system 600, the DPKI system 700, and the like described above is performed. Here, "reading the program recorded on the recording medium into the computer system and executing it" includes installing the program on the computer system. The "computer system" referred to here includes the OS, the hardware such as peripheral instruments. In addition, the "computer system" can include a plurality of computer apparatuses connected via a network including communication lines such as the Internet, WAN, LAN, dedicated lines, and the like. In addition, the "computer-readable recording medium" refers to removable media such as floppy disks, optical magnetic disks, ROMs, CD-ROMs, and the like, storage devices such as HDDs, SSDs, and the like built into the computer system. As described above, the recording medium in which the program is stored can be a non-transitory recording medium such as a CD-ROM. In addition, the recording medium can also include a recording medium provided in the internal or external of the publishing server accessible from the publishing server in order to publish the program. The code of the program stored in the recording medium of the publishing server can be different from the code of the program in a form that can be executed by the terminal apparatus. That is, the form stored in the publishing server is arbitrary if it can be downloaded from the publishing server and installed in a form that can be executed by the terminal apparatus. Further, the structure in which the program is divided into a plurality of parts and downloaded at different times and then combined in the terminal apparatus, the publishing server that publishes the divided programs separately, and the like can be different. Also, the "computer-readable recording medium" includes a structure in which the program is held for a constant time, as in the case of a server that transmits the program via a network, a volatile memory (RAM) in the computer system that becomes the client. In addition, the above-described program can be used to realize a part of the above-described functions. Also, it can be a so-called difference file (difference program) that can be realized by combining with a program in which the above-described functions are already recorded in the computer system.

[0274] APPENDIX

[0275] (1) One embodiment of the present embodiment is a qualification management system (identity management system) including a qualification management unit that stores, in association with one information storage medium possessed by a real user who exists in a real space, a plurality of qualification information, including one or more pieces of qualification information that are assigned to an identity of the real user and indicate that the real user has a prescribed qualification, and one or more pieces of qualification information that are assigned to an identity of a virtual avatar corresponding to the real user and capable of existing in a meta universe.

[0276] (2) One embodiment of the present embodiment is the qualification management system described in (1), in which the qualification information can include position proof information that proves a position of the identity.

[0277] (3) One embodiment of the present embodiment is the qualification management system described in (1) or (2), in which the qualification information can include authenticity proof information that proves authenticity of the identity.

[0278] (4) One embodiment of the present embodiment is the qualification management system described in any of (1) to (3), in which the qualification management unit can output, as qualification information for qualification confirmation of the identity of the qualification confirmation target, qualification information selected from the qualification information stored in the storage unit by operation of the real user on the corresponding user terminal.

[0279] (5) One embodiment of the present embodiment is a qualification management method (identity management method) of a qualification management system (identity management system) including a qualification management step of storing, in association with one information storage medium possessed by a real user who exists in a real space, a plurality of qualification information, including one or more pieces of qualification information that are assigned to an identity of the real user and indicate that the real user has a prescribed qualification, and one or more pieces of qualification information that are assigned to an identity of a virtual avatar corresponding to the real user and capable of existing in a meta universe, in a storage unit.

[0280] (6) One embodiment of the present embodiment is a program for causing a computer of a qualification management system (identity management system) to function as a qualification management unit that stores, in association with one information storage medium possessed by a real user who exists in a real space, a plurality of qualification information, including one or more pieces of qualification information that are assigned to an identity of the real user and indicate that the real user has a prescribed qualification, and one or more pieces of qualification information that are assigned to an identity of a virtual avatar corresponding to the real user and capable of existing in a meta universe, in a storage unit.

[0281] (7) One mode of the present embodiment is a non-transitory storage medium that records a program for causing a computer of a qualification management system (identity management system) to function as a qualification management unit that stores, in a storage unit, in association with one information storage medium owned by a real user who is a real user existing in a real space, a prescribed number of pieces of qualification information among one or more pieces of qualification information that are assigned as an identity of the real user and indicate that the real user has a prescribed qualification, and one or more pieces of qualification information that are assigned as an identity of a virtual avatar corresponding to the real user and capable of existing in a meta universe.

[0282] <Embodiment 2>

[0283] Figure 17 An example of the structure of an identity management system (one example of an identity management system) 1A representing the present embodiment as a whole is shown. In the present embodiment, an identity includes a virtual avatar existing and acting in a meta universe. Such a virtual avatar can include, in addition to a virtual avatar acting in accordance with an operation, an instruction, or the like of an end user, for example, a virtual avatar (AI virtual avatar) capable of autonomously acting without depending on an operation or the like of a corresponding end user by using AI (Artificial Intelligence) or the like. A meta universe is a virtual space (one example of an activity space) constructed through a network. In addition, in the present embodiment, an identity can also include an end user acting in a real space (one example of an activity space) in association with a virtual avatar.

[0284] In the following description, an end user as an identity is sometimes referred to as a "real user". The "real user" is a name in a case where an end user is treated as a user existing in association with a real space, and is used when compared with a virtual avatar corresponding to the end user existing in a virtual space in association with the same user.

[0285] In addition, in the present embodiment, an identity can also include an organization such as a business, a group, or the like. The identity of such an organization can also include a real organization existing in a real space and an organization existing in a meta universe in association with the real organization. In addition, as an identity in the present embodiment, a real user, a real organization, a virtual avatar, or the like that is an IP holder who owns intellectual property (IP) based on a two-dimensional or three-dimensional image, text, music, or the like can be included.

[0286] The identity management system 1A of the present embodiment has, as structural elements, a virtual image generation system 100, a user interface environment 200, an identity management apparatus 400A, a network service environment 500, a VC (Verifiable Credentials) issuance system 600, and a DPKI system 700. Connection between the structural elements of these systems is performed via a network.

[0287] The virtual image generation system 100 is a system that generates a virtual image used by the network service environment 500.

[0288] Figure 18 A configuration example of the virtual image generation system 100 is shown. The virtual image generation system 100 shown in this figure has a plurality of virtual image material providing systems 110 and one integration system 120.

[0289] The virtual image material providing system 110 is a system that respectively generates prescribed virtual image materials among materials (virtual image materials) that constitute a virtual image, and provides the generated virtual image materials. The virtual image material providing system 110 can be respectively operated by prescribed virtual image material providers (companies), for example.

[0290] The integration system 120 acquires necessary virtual image materials from the virtual image materials provided by the virtual image material providing systems 110, integrates (combines) the acquired virtual image materials, and thereby generates a virtual image.

[0291] In the virtual image generation system 100, the virtual image material providing systems 110 and the integration system 120 can be connected via a network.

[0292] In addition, the number of virtual image material providing systems 110 in the virtual image generation system 100 is not particularly limited as long as it is one or more. In addition, the number of integration systems 120 is not particularly limited as long as it is one or more.

[0293] Figure 19 A flow of virtual image generation in the virtual image generation system 100 is schematically shown. The virtual image in the present embodiment is, for example, a 2-dimensional or 3-dimensional (3D) character or the like, and can also be a 3-dimensional real virtual image of a person or the like. In the explanation of this figure, a case where a 3-dimensional real virtual image of a person is generated is exemplified. The real virtual image is, for example, a virtual image that realistically reproduces the posture of an actual person PS based on information obtained by photographing a person PS who is a generation source.

[0294] In the virtual image generation system 100 of this figure, an example having six virtual image material providing systems 110-1 to 110-6 is shown.

[0295] The virtual image material providing system 110-1 generates a 3D-based face (head) material as a virtual image material, and provides the generated face material MT-1.

[0296] The virtual image material providing system 110-2 generates a body material MT-2 as a virtual image material, and provides the generated body material MT-2. The body material MT-2 here is a part of a human body other than the head. In addition, the virtual image material providing system 110-2 can generate a body material MT-2 in a state of wearing clothes.

[0297] The virtual image material providing system 110-3 generates a voice material MT-3 as a virtual image material, and provides the generated voice material MT-3. The voice material MT-3 is a material of a voice uttered by a virtual image.

[0298] The virtual image material providing system 110-4 generates an emotion material MT-4 as a virtual image material, and provides the generated emotion material MT-4. The emotion material MT-4 contains, for example, information that changes an expression of a face material, a motion of a body material MT-2, or the like, according to each prescribed emotion. An emotion of a virtual image can be expressed by the emotion material MT-4.

[0299] The virtual image material providing system 110-5 generates a movement material MT-5 as a virtual image material, and provides the generated movement material MT-5. The movement material MT-5 contains information for giving a motion to a virtual image. For example, in a case where a virtual image is a weather forecaster appearing in a web content of a weather forecast, a motion corresponding to the weather forecaster, such as an indication of a weather map, can be given according to the movement material MT-5 generated in correspondence with the weather forecaster.

[0300] The virtual image material providing system 110-6 generates a space material MT-6 as a virtual image material, and provides the generated space material MT-6. The space material MT-6 is a material of a space in which a virtual image exists.

[0301] In the virtual image generating system 100 of the figure, the virtual image material providing system 110-1 generates a face material MT-1 of a person PS as a generation source by photographing the person PS. In addition, the virtual image material providing system 110-2 generates a body material MT-2 of the person PS as the generation source by photographing the person PS. In addition, the virtual image material providing system 110-3 generates a voice material MT-3 using data in which a voice of the person PS as the generation source is recorded.

[0302] Moreover, the integration system 120 acquires the virtual character material (the face material MT-1, the body material MT-2, the voice material MT-3, the emotion material MT-4, the movement material MT-5, the space material MT-6) respectively generated by the virtual character material providing systems 110-1 to 110-6. The integration system 120 generates a virtual character AVT by integrating the acquired virtual character materials.

[0303] The virtual character AVT can not utilize all of the virtual character materials (the face material, the body material, the voice material, the emotion material, the movement material, the space material) illustrated in the drawing. That is, the virtual character AVT can be generated using, for example, a part of the virtual character materials illustrated in the drawing. Which virtual character material is used when generating the virtual character can be changed, for example, in accordance with a network service using the generated virtual character, an environment of a meta universe in which the virtual character exists, and the like.

[0304] Returning to Figure 17 An explanation will be made. The user interface environment 200 is an environment that provides a user interface to an end user using the network service environment 500. Specifically, the user interface environment 200 has one or more end user terminals 300 corresponding to one or more end users.

[0305] The end user terminal 300 is a terminal used for an end user to receive a provision of a network service based on the network service environment 500.

[0306] The end user terminal 300 can connect to the service providing system 510 in accordance with an operation of the end user, and output an application, a content, and the like corresponding to a network service provided by the connected service providing system 510 through display, voice, and the like.

[0307] The end user terminal 300 can be a personal computer, a smartphone, a tablet terminal, and the like.

[0308] The identity management device 400A performs management of an identity (a real user, a virtual character).

[0309] The identity management device 400A stores a virtual character generated by the virtual character generation system 100 as an identity to be managed. The identity management device 400A uploads the virtual character stored as a managed object to the network service environment 500. The network service environment 500 provides an end user with a network service using a virtual character provided by the network service environment 500.

[0310] In addition, the identity management device 400A can confirm the authenticity of a virtual character by giving the managed virtual character authenticity proof information.

[0311] Further, the identity management device 400A determines the authenticity of the virtual image of the object of the inquiry, in accordance with an authenticity inquiry (authenticity confirmation request) regarding the authenticity of the virtual image used in the network service provided toward the end user terminal 300, and transmits the determination result to the end user terminal 300.

[0312] Further, the identity management device 400A causes the VC issuance system 600 to issue information of a status certificate (virtual image status certificate information) as a status certificate for managing the virtual image itself of the object. The identity management device 400A can set the management object by storing the issued virtual image status certificate information.

[0313] Specifically, the identity management device 400A transmits the virtual image status certificate information of the virtual image of the status certificate object to the network service of the status certificate request source, in accordance with a status certificate request of the virtual image from a certain network service in the network service environment 500. At this time, the identity management device 400A can give a signature (electronic signature) (perform encryption) to the status certificate information of the transmission object using the key associated with the virtual image of the object.

[0314] Further, the identity management device 400A can manage a wallet (one example of an information storage medium). The wallet here includes, in addition to the management of the assets held in the utilization environment of the cryptocurrency, for example, the management of the qualification information (authenticity proof information, status certificate information (VC)) of the real user and the virtual image associated with one end user. The identity management device 400A can manage the data of the wallet by the blockchain. The wallet can be constituted as an application provided by the identity management device 400A.

[0315] The network service environment 500 is an environment that provides one or more network services. Specifically, the network service environment 500 has one or more service providing systems 510 that provide a prescribed network service. The service providing system 510 can be constituted, for example, by a web server, an application server constructed in accordance with the content of the network service to be provided.

[0316] The network service provided by the service providing system 510 can be an EC (Electronic Commerce) or the like that a real user utilizes, or a website that utilizes a virtual image, a network game, a network conference system, or the like. In addition, in the network service that utilizes a virtual image as described above, it is possible to include causing the virtual image to exist in a metaverse that is a three-dimensional virtual space and to act in the metaverse. Specifically, as the network service, it is possible to implement services such as a market in which a virtual image can purchase goods and the like at a store and the like, a service in which a virtual image can directly buy and sell between virtual images in the metaverse, a service in which an artist or a certain character exists in the metaverse, in addition to a service in which a virtual image can purchase goods and the like at a store and the like in the metaverse, a service in which a virtual image can directly buy and sell between virtual images in the metaverse, a service in which an artist or a certain character exists in the metaverse, and further, it is possible to implement services such as provision of weather forecasts in which a virtual image is set as a weather forecaster, consultation of medical care and the like in which a virtual image is set as a doctor, and prediction and the like in which a virtual image is set as a fortune teller.

[0317] Further, the service providing system 510 can provide a plurality of network services. For the service providing system 510 that provides a metaverse as a network service, it is also possible to provide a plurality of metaverses.

[0318] The VC issuance system 600 is a system that issues status certification information according to an issuance request. The VC issuance system 600 can be constituted by one or more devices connected to a network, for example.

[0319] The VC issuance system 600 of the present embodiment can issue status certification information that certifies the status of an end user (real user), and can issue status certification information that certifies the status of a virtual image itself that is set as a management object by the identity management device 400A.

[0320] The VC issuance system 600 can issue a plurality of status certification information each corresponding to a plurality of different issuers (issuing sources).

[0321] The VC issuance system 600 issues status certification information of a public issuer (public status certification information). The public issuer refers to an issuer such as an administrative operation organization, an organization that is administratively recognized, or an organization that has a certain degree or more of social credit, for example. Specifically, for the public issuer, it is possible to cite an organization that issues a license corresponding to a prescribed qualification, a recognized business, an educational organization, a municipality, a financial institution, and the like, for example. For example, with regard to public status certification information for settlement in a metaverse, a financial institution can become an issuing organization and issue. In addition, for example, with regard to public status certification information for entering a certain facility in a metaverse and the like, a business that operates the facility, an educational organization, a municipal organization, and the like can become an issuing organization and issue.

[0322] In addition, the VC issuance system 600 issues status certification information of a private issuer (private status certification information). The private issuer can be, for example, a voluntary association, a civic movement group, a departmental activity of a school, or the like. The private status certification information issued by the private issuer can certify, for example, that a virtual image belongs to a corresponding civic group, that a corresponding civic group issued a certificate of merit, or that a license was given to a virtual image.

[0323] In addition, among the private issuers, for example, a supporter (fan) of an artist can be included. The private status certification information issued by the supporter of the artist can certify, for example, that a virtual image of the artist is an existence supported by the supporter, by giving the virtual image of the artist.

[0324] In addition, among the private issuers, an end user can be included. As an example, the end user who is a private issuer can issue private status certification information of a friend certification. The virtual image given the private status certification information of the friend certification can certify, for example, that there is a friend relationship with the virtual image of the end user who is a private issuer.

[0325] In addition, the private issuer can be, for example, a user of the service providing system 510. As an example, the service providing system 510 who is a private issuer can issue private status certification information of a merit certification. The virtual image of the end user given the private status certification information of the merit certification can certify, for example, that the end user is a good person who did not commit an inappropriate act in the meta universe provided by the service providing system 510.

[0326] In addition, among the private issuers, an event host or the like can be included. As an example, the private issuer can issue private status certification information that is an entrance ticket to an event held in the meta universe of a prescribed service providing system 510. The virtual image given the private status certification information that is the entrance ticket can certify that the virtual image has the qualification to participate in the event held in the meta universe of the prescribed service providing system 510.

[0327] As is clear from the above examples of the private issuer, the private status certification information can function as information that certifies the status of a virtual image or a user corresponding to the virtual image based on the relationship between individuals or the evaluation of an individual by the private issuer.

[0328] As an example of issuance of status certification information based on the relationship between individuals, in addition to the above, for example, private status certification information based on a relationship on an SNS (Social Network System) can be formed. In this case, the private status certification information can certify, for example, that a certain user or virtual image is a friend of a private issuer in the SNS.

[0329] Further, as an example of the private status certification information based on the evaluation of the individual, for example, it can be formed as private status certification information capable of issuing an evaluation of a user (an exhi bitor, a purchaser) of a network service that performs a transaction between individuals.

[0330] Further, as an example of the private status certification information based on the evaluation of the other individual, the private status certification information can be issued based on information (credit information) indicating a credit degree of the user of the service provided by evaluating the credit of the individual by inputting information such as the age, the gender, the occupation, the purchase history, and the like of the user.

[0331] The status certification information issued by the VC issuance system 600 in the present embodiment is, for example, information corresponding to a VC (Verifiable Credential). In the following description, a case where the status certification information in the present embodiment is information corresponding to a VC is cited as an example. Therefore, in the following description, the status certification information issued by the VC issuance system 600 is sometimes referred to as a VC.

[0332] Further, in the present embodiment, the status certification information that certifies the status of the virtual avatar itself is referred to as virtual avatar status certification information (virtual avatar VC), and distinguished from the status certification information that certifies the status of the terminal user (terminal user status certification information (terminal user VC)). Further, in a case where the virtual avatar status certification information and the terminal user status certification information are not particularly distinguished, it is referred to as status certification information or a VC.

[0333] The DPKI system 700 manages a public key in correspondence with a DPKI (Decentralized Public Key Infrastructure).

[0334] The VC issuance system 600 of the present embodiment generates a pair of a public key and a secret key corresponding to an issuer DID that is a DID (Decentralized Identifier) uniquely representing an issuing organization when issuing the status certification information as a VC. Further, a pair of a public key and a secret key corresponding to an owner DID (terminal user DID or virtual avatar DID) that is a DID uniquely representing an owner (a terminal user or a virtual avatar) of the status certification information is generated.

[0335] The VC issuance system 600 registers the generated public keys (a public key corresponding to the issuer DID, a public key corresponding to the owner DID) to the DPKI system 700. The DPKI system 700 stores the registered public keys in association with each of the issuer DID and the owner DID.

[0336] The DPKI system 700 can perform registration of the public key by storing the public key to the blockchain. In addition, the DPKI system 700 can be configured of an apparatus that is a node corresponding to the blockchain in which the public key is stored.

[0337] In a case where there is a need to generate a proof of status of the owner, the service providing system 510 acquires the public key associated with the owner DID of the owner of the object from the DPKI system 700. The service providing system 510 can perform determination of whether the proof of status information is legitimate (status verification) by decoding the proof of status information using the acquired public key.

[0338] Figure 20 A hardware structure of the identity management apparatus 400A is shown. The identity management apparatus 400A of the drawing has a communication device 4001, a ROM (Read Only Memory) 4002, a RAM (Random Access Memory) 4003, a storage 4004, and a CPU (Central Processing Unit) 4005. The communication device 4001, the ROM 4002, the RAM 4003, the storage 4004, and the CPU 4005 are connected by a bus 4006.

[0339] The communication device 4001 is a device corresponding to communication via a network.

[0340] The ROM 4002 stores data that is not rewritable.

[0341] The RAM 4003 temporarily stores data used for operations performed by the CPU 4005.

[0342] The storage 4004 is, for example, an HDD (Hard Disc Drive), an SSD (Solid State Drive), and stores various data such as data of programs, for example.

[0343] The CPU 4005 performs operations corresponding to various controls, processes, and the like by executing programs stored in the storage 4004.

[0344] Further, although not shown in the drawing, the identity management apparatus 400A can also have a GPU (Graphics Processing Unit).

[0345] Further, the same functions as the identity management apparatus 400A can also be obtained by a plurality of network terminals distributed in a manner capable of performing transactions corresponding to the blockchain.

[0346] Figure 21Fig. 1 is a functional configuration example of the identity management apparatus 400A. As the functions of the identity management apparatus 400A of this figure, they are realized by execution of a program by a CPU (Central Processing Unit) possessed by the identity management apparatus 400A.

[0347] The identity management apparatus 400A of this figure has a communication section 401, a control section 402A, and a storage section 403A.

[0348] The communication section 401 performs communication via a network.

[0349] The control section 402A performs various controls in the identity management apparatus 400A. The control section 402A of this figure has a virtual image registration section 421, a reality proof information management section 422 (one example of a qualification management section), a virtual image provision control section 423, a VC management section 424 (one example of a qualification management section), a wallet management section 425, and a feature word processing section 426.

[0350] The virtual image registration section 421 registers a virtual image generated in the virtual image generation system 100 as a management object. The registration of the virtual image here is performed by storing virtual image information (described later) of the management object's virtual image to a virtual image information storage section 432. The virtual image registered by the virtual image registration section 421 can be used in a network service provided by the service provision system 510 of the network service environment 500.

[0351] The reality proof information management section 422 performs management of reality proof information of a virtual image. Specifically, the reality proof information management section 422 imparts reality proof information to a registered virtual image. The reality proof information is described later.

[0352] In addition, the reality proof information management section 422 can perform reality determination on a virtual image of a reality confirmation object using the reality proof information imparted to the registered virtual image in response to a reality confirmation request from the end user terminal 300. The reality proof information management section 422 can transmit the determination result on reality to the end user terminal 300 of the transmission source of the reality confirmation request.

[0353] The virtual image provision control section 423 performs control related to provision (transmission of virtual image information) of a registered virtual image to the service provision system 510. The identity management apparatus 400A and each service provision system 510 are connected by an API, and the virtual image provision control section 423 can transmit data of a virtual image to the service provision system 510 based on the state of online connection.

[0354] The VC management unit 424 manages VCs (status proof information) that are identities existing in the real space or the meta universe, as management targets. The VC management unit 424 manages, as management targets, user VCs that are user status proof information corresponding to the identities of real users, and avatar VCs that are avatar status proof information corresponding to the identities of avatars.

[0355] The VC management unit 424 entrusts the VC issuance system 600 with issuance of status proof information of identities (real users or avatars) via a network. The VC issuance system 600 issues, according to the entrustment, status proof information of the object identities. The VC issuance system 600 transmits, to the identity management apparatus 400A, the issued status proof information and the corresponding key (a key corresponding to the issuer DID, a key corresponding to the owner DID). The VC management unit 424 stores the transmitted status proof information (avatar status proof information or user status proof information) and the key in association with each other in the avatar VC storage unit 433 or the user VC storage unit 434.

[0356] The wallet management unit 425 manages wallets utilized by real users and avatars.

[0357] The characteristic word processing unit 426 extracts words as a plurality of characteristic words corresponding to the characteristics of each identity, and generates information (an example of characteristic word relationship information) indicating the relationship of the extracted words (an example of characteristic words). The information generated as described above is understood to represent the characteristics of the corresponding identity by indicating the relationship of the extracted words, and is hereinafter also referred to as "characteristic expression information".

[0358] In addition, the characteristic word processing unit 426 can visually display the generated characteristic expression information on the end user terminal 300.

[0359] The storage unit 403A stores various information corresponding to the identity management apparatus 400A. The storage unit 403A has an end user information storage unit 431, an avatar information storage unit 432, an avatar VC storage unit 433, a user VC storage unit 434, a wallet management information storage unit 435, an identity history information storage unit 436, and a characteristic expression information storage unit 437.

[0360] The end user information storage unit 431 stores end user information. The end user information is information related to an end user who registers one or more avatars corresponding to himself or herself to the identity management apparatus 400A.

[0361] Figure 22An example of end user information corresponding to one end user is shown. The end user information of this figure includes a field of end user ID and a field of user profile information. The field of end user ID stores an end user ID uniquely representing the corresponding end user.

[0362] The field of user profile information stores user profile information of the corresponding end user. The user profile information may, for example, include the name, sex, address, etc. of the end user.

[0363] The virtual image information storage section 432 stores virtual image information.

[0364] Figure 23 An example of virtual image information stored in the virtual image information storage section 432 is shown. The virtual image information storage section 432 of this figure has an object data storage section 4321, a material group data storage section 4322, and a meta file storage section 4323.

[0365] Virtual image information corresponding to one virtual image includes, for example, object data, material group data, and a meta file.

[0366] The object data storage section 4321 stores object data of each virtual image that has been registered.

[0367] The material group data storage section 4322 stores material group data of each virtual image that has been registered. The meta file storage section 4323 stores a meta file of each virtual image that has been registered. Between the object data storage section 4321, the material group data storage section 4322, and the meta file storage section 4323, object data, material group data, and meta files corresponding to the same virtual image are associated by using the same virtual image ID.

[0368] Specifically, the object data A, the material group data A, and the meta file A stored in the object data storage section 4321, the material group data storage section 4322, and the meta file storage section 4323, respectively, corresponding to the virtual image A are associated by using the virtual image ID [00000A] uniquely representing the virtual image A.

[0369] Object data is entity data that is an object of the corresponding virtual image. The object data is formed, for example, by combining components such as a head, a body, etc. generated using prescribed virtual image materials.

[0370] The material group data is data including one or more virtual image materials in a manner prescribed for the virtual image based on the object data. For example, the material group data can include voice materials, emotion materials, movement materials, space materials, and the like. According to the material group data, the object of the virtual image can be made to emit a sound, change a facial expression, perform an action, or exist in a virtual space based on a prescribed design.

[0371] The meta file includes one or more meta data given to the corresponding virtual image.

[0372] Figure 24 An example of a meta file corresponding to one virtual image is shown. The meta file in this figure includes virtual image ID, generation source information, creator information, authentication code, utilization right holder information, virtual image form, and action history information as meta data.

[0373] The virtual image ID is an identifier that uniquely represents a virtual image in the virtual image information stored in the virtual image information storage section 432. The virtual image ID can be issued by the virtual image registration section 421 at the time of registration of the corresponding virtual image. As described above, the object data, the material group data, and the meta file corresponding to the same virtual image are associated with each other by the virtual image ID.

[0374] The generation source information is information related to the original person (generation source) of the corresponding virtual image. The generation source information includes a generation source ID, profile information of the person of the generation source, and the like as information items. The generation source information can be provided from the virtual image generation system 100. In the case where the person of the generation source is an end user, the end user ID of the corresponding end user can be used for the generation source ID.

[0375] The creator information is information related to the creator of the corresponding virtual image. The creator can be a group or an individual such as a company or the like corresponding to the integration system 120 that generated the corresponding virtual image in the virtual image generation system 100, for example.

[0376] The authentication code is a code issued by the identity management apparatus 400A in association with the virtual image to be provided when the service providing system 510 receives the provision (transmission of the virtual image information) of the virtual image from the identity management apparatus 400A.

[0377] The utilization right holder information is information related to a utilization right holder. The utilization right holder is a person who has a corresponding virtual image. The utilization right holder can be an end user who is a generation source of the virtual image. In this case, the utilization right holder can cause the virtual image of which the utilization right holder is a generation source to exist in the meta universe provided by the service providing system 510, for example, to move within the meta universe according to the operation of the end user terminal 300. In addition, the utilization right holder can be a user of the service providing system 510 or the like. The utilization right holder information is information indicating such a utilization right holder. Specifically, the utilization right holder information can be a user account such as a utilization right holder ID, a user name, a password, or the like registered by the utilization right holder. In the case where the utilization right holder is an end user, the end user ID can be used for the utilization right holder ID.

[0378] In addition, the utilization right holder information can include, for example, a utilization right holder (a secondary utilization right holder) indicating another end user to whom the utilization right is granted, in addition to the original utilization right holder (a primary utilization right holder) such as an end user who is a generation source of the virtual image.

[0379] The virtual image form indicates the file form, the specifications, or the like of the corresponding virtual image as a form of the virtual image.

[0380] The action history information is information indicating a history related to the action of the corresponding virtual image in the meta universe, provided by each service providing system 510. The action history information of each virtual image can be acquired by the virtual image providing control unit 423 from each service providing system 510, for example.

[0381] Returning to Figure 21 An explanation will be given. The virtual image VC storage unit 433 stores the virtual image status certificate information (virtual image VC) of each virtual image that has been registered. In addition, the virtual image VC storage unit 433 stores the key (the key corresponding to the issuer DID, the key corresponding to the virtual image DID) associated with the virtual image status certificate information.

[0382] Figure 25 An example of the information (the virtual image status certificate information and the key) stored by the virtual image VC storage unit 433 corresponding to one virtual image is shown.

[0383] As shown in the drawing, in the virtual image VC storage unit 433, the virtual image status certificate information and the key corresponding to the virtual image DID are stored in association with each other with respect to the virtual image VC ID and the virtual image ID. The virtual image VC ID is an identifier uniquely indicating the corresponding virtual image status certificate information.

[0384] As described above, by associating the virtual avatar status certification information and the key with respect to the virtual avatar ID, it is possible to manage the virtual avatar status certification information and the key in association with the virtual avatar information of the corresponding virtual avatar.

[0385] The virtual avatar status certification information includes a field of a VC type, a field of an issuer DID, a field of a virtual avatar DID, and a field of virtual avatar association information.

[0386] The field of the VC type stores information indicating the type (type, form) of the status certification information.

[0387] The field of the issuer DID stores an issuer DID indicating the issuer of the virtual avatar status certification information.

[0388] The field of the virtual avatar DID stores a virtual avatar DID of the corresponding virtual avatar.

[0389] The field of the virtual avatar association information stores virtual avatar association information of the corresponding virtual avatar. The content of the information included in the virtual avatar association information is not particularly limited, and for example, information of a right, a qualification, or the like obtained by the virtual avatar acting in the meta universe can be included. In addition, the virtual avatar association information also includes the same action history information as the action history information stored in the virtual avatar information.

[0390] Further, at least one of the virtual avatar status certification information and the key can be stored to the blockchain by the control of the VC management unit 424 of the identity management device 400A. In a case where either of the virtual avatar status certification information and the key is stored to the blockchain, the virtual avatar VC storage unit 433 can be omitted.

[0391] Returning to Figure 21 will be described. The user VC storage unit 434 stores the user status certification information (user VC) of each end user (real user) registered (stored) in the end user information storage unit 431. In addition, the user VC storage unit 434 stores the key (the key corresponding to the issuer DID, the key corresponding to the user DID) associated with the user status certification information.

[0392] Figure 26 An example of the information (user status certification information and key) stored by the user VC storage unit 434 corresponding to one real user.

[0393] As shown in the figure, in the user VC storage section 434, the user status certification information and the key corresponding to the user DID are stored in association with the user VC ID and the user ID. The user VC ID is an identifier uniquely indicating the corresponding user status certification information. As described above, by associating the user status certification information and the key with the user ID, it is possible to manage the user status certification information and the key in association with the user information of the corresponding real user (end user).

[0394] The user status certification information includes fields of the VC type, the issuer DID, the user DID, and the user association information.

[0395] The user association information stores the user association information of the corresponding real user. The content of the information included in the user association information is not particularly limited, and for example, information of a right, a qualification, or the like obtained by the real user as a result of an action (shopping, movement to a prescribed place, or the like) in a real space of the corresponding real user can be included. In addition, action history information of the action in the real space of the corresponding real user can also be included in the user association information.

[0396] Further, at least one of the user status certification information and the key can be stored to the blockchain by control of the VC management section 424 of the identity management apparatus 400A. In a case where either of the user status certification information and the key is stored to the blockchain, the user VC storage section 434 can be omitted.

[0397] Returning to Figure 21 will be described. The wallet management information storage section 435 stores the wallet management information. The wallet management information corresponding to one wallet is information that manages qualification information of an identity (real user, virtual image) corresponding to one end user in an integrated manner. Figure 27 An example of the wallet management information corresponding to one wallet is shown. The wallet management information corresponding to one wallet has fields of a wallet ID, an identity list, and a qualification information list.

[0398] The field of the wallet ID stores a wallet ID that is an identifier uniquely indicating the corresponding wallet.

[0399] The identity list stores an identity ID (user ID, virtual image ID) indicating an identity that can utilize the corresponding wallet.

[0400] The qualification information list stores a qualification information ID (user VC ID, virtual image VC ID, authenticity certification information ID, or the like) for each qualification information (VC, authenticity certification information, or the like) managed as the qualification information included in the corresponding wallet.

[0401] By the wallet management information configured in this way, for example, qualification information (authenticity proof information, a VC, or the like) that is given for each identity (a real user, a virtual image) corresponding to 1 end user can be integrally managed as qualification information stored by a wallet owned by the 1 end user. In addition, for the qualification information stored by the wallet, it is possible to share between the identities indicated by the identity IDs (user IDs, virtual image IDs) stored in the identity list.

[0402] Further, the wallet management information can be stored in the blockchain by control of the wallet management section 425 of the identity management apparatus 400A. In this case, the wallet management information storage section 435 can be omitted.

[0403] The identity history information storage section 436 stores identity history information indicating a history related to the actions up to now of each identity (a real user or a virtual image).

[0404] The identity history information storage section 436, for the identity history information, for example, can store, in units of real users (end users), the identity history information (real user unique history information) of the real user and the identity history information (virtual image unique history information) of each of 1 or more virtual images associated with the real user.

[0405] The real user unique history information can be collected by the control section 402A, for example, using information of a utilization history of a website, position information, or the like of the end user terminal 300 used by the corresponding end user, and the collected information can be stored as the identity history information in the identity history information storage section 436.

[0406] In addition, the virtual image unique history information can be acquired by the virtual image provision control section 423 from each service provision system 510, for example. Further, for the action history information in the meta file (meta file 1) of the virtual image information stored in the meta file storage section 4323, it is possible to omit, or it is possible to exist separately. Figure 24 ) of the virtual image information stored in the meta file storage section 4323, it is possible to omit, or it is possible to exist separately.

[0407] Figure 28 An example of a management method of the identity history information stored by the identity history information storage section 436 corresponding to 1 real user.

[0408] As illustrated in the drawing, the identity history information corresponding to 1 real user can be managed so as to associate, for the real user ID of the corresponding real user, the real user unique history information and the virtual image unique history information of each virtual image (virtual image A, virtual image B ).

[0409] Further, in Figure 28In the present embodiment, it is assumed that one real user is associated with one real user unique information, and one virtual image is associated with one virtual image unique history information. However, for example, for each distinction of the category of action, a plurality of real user unique information can be associated with one real user, and a plurality of virtual image unique information can be associated with one virtual image.

[0410] Returning to Figure 21 An explanation will be given.

[0411] The trait expression information storage section 437 stores the trait expression information generated by the characteristic word processing section 426.

[0412] Further, the identity management device 400A can be constituted by one device, or can be realized by a plurality of devices cooperatively performing processing on the basis of each of the plurality of devices being respectively assigned a prescribed function.

[0413] In addition, the VC issuance system 600 can store a database (issuer database) related to the issuer.

[0414] Figure 29 An example of the configuration of the entry (issuer information) stored in the issuer database in correspondence with one issuer is shown. The issuer information of this drawing includes a field of issuer ID, a field of issuer profile, and a field of issued VC.

[0415] The field of issuer ID stores the issuer ID of the corresponding issuer.

[0416] The field of issuer profile stores the issuer profile. The issuer profile is information indicating the profile of the issuer. As shown in this drawing, the issuer profile can include, for example, a field of issuer category and a field of issuer name. The field of issuer category stores, for example, information indicating which of, for example, a public issuer and a private issuer is the category of the corresponding issuer. The field of issuer name stores the name of the corresponding issuer (issuer name).

[0417] The field of issued VC stores information related to the credential information issued by the corresponding issuer as an issuer.

[0418] Referring to Figure 30 A processing flow example of the identity management system (qualification management system) 1A of the present embodiment, which is executed in association with the registration (user registration) of the end user (real user), will be explained with reference to the timing chart of this drawing. The registration of the end user based on the processing flow example of this drawing becomes a registration for enabling the end user corresponding to the virtual image to be managed as one of the identities, that is, the real user.

[0419] Step S100A: The end user operates the end user terminal 300 held by the end user himself / herself to cause the end user himself / herself to be registered to the identity management apparatus 400A in a manner of end user registration procedure. At the end user registration procedure, the end user can input information of prescribed items of the user profile information, such as a user account number, a user name, and the like, which should be included in the user profile information.

[0420] The identity management apparatus 400A generates end user information of the corresponding end user in accordance with the end user registration procedure from the end user terminal 300, and stores the generated end user information in the storage section 431.

[0421] Step S102A: In addition, the end user can perform an issuance procedure of the user status certification information (user VC) corresponding to the end user himself / herself in correspondence with the user registration of step S100A. In this case, the end user can cause the end user terminal 300 to access the VC issuance system 600, and perform an operation of the issuance procedure of the user status certification information (user VC) corresponding to the end user himself / herself. The end user terminal 300 performs processing corresponding to the user status certification information issuance procedure in accordance with the operation.

[0422] As the processing of the issuance procedure, the end user terminal 300 can transmit information of prescribed items of the user profile information to the VC issuance system 600 together with the issuance request. In addition, the issuance request can further include information of specifying a category (e.g., a driver's license, a passport, an insurance certificate, and the like) of the user status certification information to be issued as the issuance object.

[0423] Step S104A: The VC issuance system 600 generates the user status certification information in accordance with the issuance request received in correspondence with step S102A. At this time, the VC issuance system 600 generates (issues) a user DID indicating the corresponding end user, and generates a pair of a public key and a secret key corresponding to the user DID. On this basis, the VC issuance system 600 gives (encrypts) a signature to the generated user status certification information by the secret key generated in correspondence with an issuer DID indicating the issuance authority corresponding to the end user himself / herself.

[0424] Step S106A: The VC issuance system 600 registers the user status certification information generated in step S104A to the identity management apparatus 400A. Specifically, the VC issuance system 600 transmits the user status certification information to which a signature is given by a key corresponding to the issuer DID given by the issuance authority corresponding thereto, and a key corresponding to the user DID of the corresponding end user, to the identity management apparatus 400A. In the identity management apparatus 400A, the VC management unit 424 stores the user status certification information and the key corresponding to the user DID received from the VC issuance system 600 in association with the virtual image ID of the corresponding virtual image in the user VC storage unit 434.

[0425] Step S108A: In addition, the VC issuance system 600 registers the public key (the public key corresponding to the issuer DID, the public key corresponding to the user DID) generated in step S104A along with the user status certification information to the DPKI system 700.

[0426] Further, the issuance of the user status certification information by steps S102A to S108A can be performed each time new issuance of the prescribed user status certification information is required after the user registration is performed.

[0427] Next, the processing flow example of the identity management system 1A of the present embodiment and the generation, registration, and registration of the virtual image authentication information performed in association therewith will be described with reference to the timing chart of Figure 30

[0428] Step S200A: The end user operates the end user terminal 300 held by the end user to access the virtual image generation system 100 and performs a virtual image generation operation. The end user terminal 300 transmits a virtual image generation instruction corresponding to the virtual image generation operation to the virtual image generation system 100.

[0429] Step S202A: The virtual image generation system performs processing to generate a virtual image in accordance with the virtual image generation instruction.

[0430] Step S204A: The end user operates the end user terminal 300 and performs a virtual image registration procedure to register the generated virtual image to the identity management apparatus 400A. In the virtual image registration procedure, the designation of the virtual image to be registered and the designation of the identity management apparatus 400A as the registration target of the designated virtual image are performed.

[0431] Step S206A: In accordance with the virtual image registration procedure of step S204A, the virtual image generation system 100 and the identity management apparatus 400A perform processing corresponding to the virtual image registration. ​

[0432] First, the virtual image generation system 100 uploads virtual image information of a virtual image designated as a registration target through a virtual image registration procedure to the identity management apparatus 400A. The virtual image registration unit 421 of the identity management apparatus 400A stores the uploaded virtual image information in the virtual image information storage unit 432.

[0433] In addition, in this step S206A, the authenticity proof information management unit 422 of the identity management apparatus 400A imparts authenticity proof information to the virtual image that is the target of this registration. The authenticity proof information is information that proves the authenticity of the virtual image itself existing in the metaverse or the like of the service providing system 510. Here, the virtual image having authenticity means that the virtual image is not a counterfeit or tampered with, and is legitimate. As examples of virtual images that are not legitimate (improper), there are virtual images that are tampered with by replacing virtual image materials such as face materials with counterfeit materials different from the original, virtual images that are copied from the virtual image of the creator or the like without the permission of the person having the right, and the like.

[0434] Specifically, as the imparting of authenticity proof information to the target virtual image, the authenticity proof information management unit 422 can impart a digital watermark (one example of authenticity proof information) and an electronic authenticity certificate (one example of authenticity proof information) in the following manner.

[0435] The authenticity proof information management unit 422 imparts, to the object data of the target virtual image, information inherent to the target virtual image such as a virtual image ID as a digital watermark. The digital watermark imparted to the object data of the virtual image in this manner is preferably imperceptible, but can also be perceptible.

[0436] In addition, the authenticity proof information management unit 422 imparts an electronic authenticity certificate to the target virtual image.

[0437] At this time, the authenticity proof information management unit 422 can impart an authenticity certificate to the target virtual image, the authenticity certificate proving the creator of the target virtual image, the storage location (URL) of the target virtual image, the service providing system 510 using the target virtual image, and the like.

[0438] The authenticity certificate can be caused to be issued by the authenticity certificate issuing office (omitted from the drawing) in the network by the authenticity proof information management unit 422 performing a prescribed transaction with the authenticity certificate issuing office, for example. Such an authenticity certificate can be managed on the network in association with the virtual image ID (one example of information inherent to the registered virtual image) of the target virtual image, for example.

[0439] As one example, the authenticity proof information management section 422 can assign an authenticity certificate to the virtual image, which can be an NFT (Non-Fungible Token) managed by a blockchain. In this case, the authenticity proof information management section 422 can assign the authenticity certificate to the virtual image using, for example, an external NFT platform. In addition, the authenticity proof information management section 422 can assign an authenticity certificate generated using a quantum-resistant cryptography, a quantum-resistant blockchain to the virtual image.

[0440] In addition, the authenticity proof information management section 422 can assign an authenticity certificate to the virtual image, which can be an SBT (Soulbound Token) that is a non-transferable NFT. In this case, the authenticity proof information management section 422 can assign the SBT as the authenticity proof information to the virtual image instead of the NFT, or can assign both the NFT and the SBT to the virtual image. In the case where the authenticity proof information management section 422 assigns both the NFT and the SBT as the authenticity proof information to the virtual image, the authenticity proof information management section 422 can selectively use either the NFT or the SBT, or can use both the NFT and the SBT at the same time, each time the authenticity of the virtual image is verified.

[0441] In addition, the authenticity proof information management section 422 issues an authentication code unique to the virtual image as the object of this registration in step S206A. The authentication code is a code provided to the service providing system 510 that provides a network service using the virtual image of the object, together with the virtual image data of the virtual image of the object. The authentication code is used for the determination of the authenticity of the virtual image corresponding to a request from the end user, as described later.

[0442] The authentication code is uniquely associated with the virtual image of the object, and thus, for example, the virtual image ID can be used.

[0443] However, in the case of enhancing security with respect to the virtual image, or the registration information that can include personal information of the user, for example, it is preferable to use a code generated independently of the virtual image ID as the authentication code.

[0444] The authenticity proof information management section 422 adds the issued authentication code as one of the metadata of the metafile stored in association with the virtual image of the object in the metafile storage section 4323 (S208). Figure 24

[0445] ​Step S208A: The creator of the virtual image, i.e., the end user, who has registered the virtual image through step S206A can cause the end user terminal 300 to access the VC issuance system 600 to perform an operation of issuance procedures of the virtual image status certification information. The end user terminal 300 performs processing of the issuance procedures in accordance with the operation.

[0446] As the processing of the issuance procedures, the end user terminal 300 can transmit an issuance request to the VC issuance system 600 together with the virtual image information that is the object of the virtual image status certification information. In addition, the issuance request can include information (issuance certificate designation information) that designates the virtual image status certification information that should be issued.

[0447] Further, the virtual image status certification information that is issued by the VC issuance system 600 to the object virtual image can be decided in response to the issuance request.

[0448] Further, the end user terminal 300 can temporarily acquire the virtual image information from the identity management apparatus 400A each time the issuance request is transmitted, transmit the acquired virtual image information to the VC issuance system 600, or can designate the object virtual image to the identity management apparatus 400A and transmit the virtual image information from the identity management apparatus 400A to the VC issuance system 600.

[0449] Step S210A: In accordance with the issuance request from the end user terminal 300 based on step S208A, the VC issuance system 600 generates virtual image status certification information that certifies the status of the virtual image based on the virtual image information received together with the issuance request in step S208A. At this time, the VC issuance system 600 generates (issues) a virtual image DID that indicates the corresponding virtual image, and generates a pair of a public key and a secret key corresponding to the virtual image DID. On this basis, the VC issuance system 600 signs (encrypts) the generated virtual image status certification information by the secret key generated in correspondence with the issuer DID that indicates the corresponding issuing authority.

[0450] The VC issuance system 600 can include at least a part of the content of the received virtual image information in the virtual image association information.

[0451] Step S212A: The VC issuance system 600 registers the virtual avatar status certification information to the identity management apparatus 400A. Specifically, the virtual avatar status certification information (an example of the status certification information with a signature) to which a signature is affixed by a key corresponding to the issuer DID given to the corresponding issuance authority, and a key corresponding to the virtual avatar DID of the corresponding virtual avatar are transmitted to the identity management apparatus 400A. The VC management section 424 of the identity management apparatus 400A stores the virtual avatar status certification information received from the VC issuance system 600 and the key corresponding to the virtual avatar DID in association with the virtual avatar ID of the corresponding virtual avatar in the virtual avatar VC storage section 433.

[0452] Step S214A: In addition, the VC issuance system 600 registers the public key (the public key corresponding to the issuer DID, the public key corresponding to the virtual avatar DID) generated in step S210A along with the virtual avatar status certification information to the DPKI system 700.

[0453] In the identity management system 1A of the present embodiment, by the above-described Figure 29 processing flow, a real user and a virtual avatar can be registered as an identity corresponding to one end user, and after the registration, qualification information can be given (issued) to the identity. That is, a user status certificate can be given (issued) to the real user, and virtual avatar status certification information and authenticity certification information can be given to the virtual avatar.

[0454] On this basis, the wallet management section 425 of the identity management apparatus 400A can set a qualification information wallet WL that is a wallet that comprehensively holds the qualification information given to the identity (the real user, the virtual avatar) corresponding to each end user.

[0455] That is, the wallet management section 425 gives one wallet ID in association with one end user. The wallet management section 425 generates wallet management information corresponding to the given wallet ID in the following manner. For example, the wallet management section 425 stores the identity ID (the user ID, the virtual avatar ID) of each identity corresponding to the given wallet ID to a field of a shared ID list in association with the given wallet ID. In addition, the wallet management section 425 stores a list item of the qualification information given to the corresponding identity to a field of a shared qualification information list in association with the given wallet ID. The wallet management section 425 stores the wallet management information generated in this manner in the wallet management information storage section 435. Furthermore, it is possible to store the identity ID of a part of the identities corresponding to one end user among all the identities corresponding to one end user in the shared ID list. In addition, it is also possible to store a part of the qualification information selected from all the qualification information given to each identity corresponding to one end user in the shared qualification information list.

[0456] Figure 31 One example of a way of expressing the identity and qualification information managed by the wallet management information corresponding to one end user. In this figure, a management mode example of the wallet realized based on the application corresponding to the virtual image management installed in the end user terminal 300 is shown.

[0457] In this figure, an example in which the real user and three virtual images A, virtual image B, virtual image C are registered as the identities of the qualification information wallet WL corresponding to the end user is shown. That is, in the field of the shared ID list of the wallet management information, the user ID of the corresponding real user and the virtual image IDs of the three virtual images A, virtual image B, virtual image C are stored.

[0458] In addition, the qualification information wallet WL corresponding to the real user and the three virtual images A, virtual image B, virtual image C holds the user status certification information (user VC) corresponding to the real user, and the virtual image status certification information (virtual image VC) corresponding to the virtual images A, virtual image B, virtual image C, respectively. In addition, the qualification information wallet WL of this figure holds the realness certification information such as tokens 1 to 5 NFT, SBT, and the like given to each of the virtual images A, virtual image B, virtual image C. In the field of the shared qualification information list of the corresponding wallet management information, these status certification information (VC), tokens (realness certification information) are stored. As the tokens, for example, a driver's license, a membership card, an access permission certificate indicating that access to a certain place is permitted, a ticket indicating that participation in a certain event is possible, and the like can be included as NFT, SBT.

[0459] As described above, in the present embodiment, by associating the qualification information wallet WL with one end user, it is possible to comprehensively manage the qualification information of a plurality of identities corresponding to one end user.

[0460] As described above, according to the ability to comprehensively manage the qualification information of a plurality of identities corresponding to one end user, it is possible to prompt the identity and qualification information corresponding to the end user in the end user terminal 300 in the following manner.

[0461] Figure 32 One example of an identity management screen displayed on the display portion of the end user terminal 300 is shown. The identity management screen of this figure can be displayed by accessing the web page of the identity management screen provided by the identity management device 400A installed in the end user terminal 300. Alternatively, the identity management screen is displayed by the application corresponding to the identity management installed in the end user terminal 300.

[0462] In the identity management screen of the figure, an identity selection area AR1, a qualification information selection area AR2, and a service selection area AR3 are configured.

[0463] The identity selection area AR1 is an area in which an operation of selecting an identity to be an object of authentication, entry into the metaverse, or the like is performed. In the identity selection area AR1, buttons BT1 corresponding to a real user and a plurality of virtual avatars are configured as identities corresponding to end users. In the figure, the button BT1 displayed as "Real ID" corresponds to the real user, and the buttons BT1 displayed as "Business", "Culture", and "Game" respectively correspond to the virtual avatars.

[0464] The qualification information selection area AR2 is an area in which an operation of selecting qualification information for qualification confirmation of the real user in the real space or qualification information for qualification confirmation of the virtual avatar in the metaverse is performed.

[0465] The qualification information selection area AR2 includes a status verification information (VC) area AR21 and a realness verification information area AR22.

[0466] The status verification information area AR21 is an area in which an operation of selecting qualification information as status verification information is performed. In the status verification information area AR21, buttons BT21 corresponding to each status verification information are configured as options.

[0467] The realness verification information area AR22 is an area in which an operation of selecting qualification information as realness verification information is performed. In the realness verification information area AR22, buttons BT22 corresponding to each status verification information are configured as options.

[0468] The service selection area AR3 is an area in which an operation of selecting a service to be used by an identity from among services provided in the real space (real service) and services provided in the metaverse (network service) is performed. The real service can include a service in which a predetermined non-cash settlement such as a credit card can be used. The service selection area AR3 is configured with a corresponding button BT3 for each service.

[0469] The end user is able to act in a manner in which various services are used with an identity (real user, virtual avatar associated with the real user) corresponding to the end user by performing an operation on such an identity management screen.

[0470] In addition, the content / category of the status certification information (VC) issued by the VC issuance system 600, the authenticity certification information (NFT, SBT, etc.), the identity history information, the data of the wallet, the user association information, the virtual image association information, and the like differ for each of the identities (real user, virtual image). That is, it can be said that each of the identities has a trait as an individual or an entity.

[0471] As described above, if the trait for each identity is taken into consideration, it is preferable to flexibly utilize information related to the trait possessed by the identity in the real space in which the real user acts and the meta universe in which the virtual image acts.

[0472] Therefore, in the identity management system 1A of the present embodiment, as information indicating the trait of the identity, trait expression information can be given to each of the identities. The trait expression information is information indicating the relationship between a plurality of words extracted from the identity unique information. The identity unique information can be, for example, the above-described status certification information (VC), the authenticity certification information (NFT, SBT, etc.), the data of the wallet, the user association information, the virtual image association information, the identity history information, and the like. Such identity unique information can be treated as information indicating the trait of the corresponding identity. Therefore, the trait expression information becomes information indicating the trait of the corresponding identity by the words and the relationship between the words.

[0473] In the present embodiment, the trait word processing section 426 of the identity management apparatus 400A can generate the trait expression information and store it in the trait expression information storage section 437.

[0474] On this basis, the trait word processing section 426 can generate an identity trait curve (one example of word relationship display information) that visualizes the trait expression information and display the generated identity trait curve to the end user terminal 300 or the meta universe.

[0475] Figure 33 An example of a display method of an identity trait curve based on the trait expression information generated in correspondence with one identity A.

[0476] The identity trait curve of this figure is a structure in which the sub nodes SN corresponding to each word related to the main node MN are connected at the edges on the basis of the relationship with the main node MN or the relationship between the words, with the main node MN corresponding to the word of "identity A" as the starting point.

[0477] In the identity trait curve, the node serving as the main node MN can be arbitrarily changed from among the nodes corresponding to each word.

[0478] Figure 34 An example of a display method of an identity trait curve based on the trait expression information generated in correspondence with one identity A. Figure 33An example of the subnode SN in the identity trait curve indicated in the word "program" being changed to the main node MN. Figure 34 The identity trait curve of the main node MN is changed to the identity trait curve of the subnode SN indicated in the word "program". Figure 33 The identity trait curve of the main node MN is changed to the identity trait curve of the subnode SN indicated in the word "program".

[0479] In the identity trait curve of the main node MN, the display of the subnode SN indicated in the word "program" is changed. Figure 33 , Figure 34 In the identity trait curve of the main node MN, the display of the subnode SN indicated in the word "program" is changed.

[0480] Referring to the flowchart of the identity management device 400A, an example of the processing flow performed in association with the generation of the trait expression information by the identity management device 400A will be described. The processing of this chart becomes the processing related to the generation of the trait expression information for the real user or the virtual figure as one identity. Figure 35 Step S300A: In the identity management device 400A, the feature word processing section 426 collects the identity unique information of the object's identity.

[0481] In the case where the object's identity is a real user, the identity unique information to be collected can be the user profile information (U) of the corresponding end user, the user status certification information (V) of the real user of the object stored in the user VC storage section 434, the authenticity certification information associated with the real user of the object, the data of the wallet, the real user unique history information (H) of the object stored in the identity history information storage section 436, and the like.

[0482] Figure 22 In the case where the object's identity is a virtual figure, the identity unique information to be collected can be the information stored in the meta file of the corresponding virtual figure, the user status certification information (V) of the virtual figure of the object stored in the virtual figure VC storage section 433, the authenticity certification information associated with the virtual figure of the object, the data of the wallet, the virtual figure unique history information (H) of the object stored in the identity history information storage section 436, and the like. Figure 26 Figure 28

[0483] Step S302A: The feature word processing section 426 extracts the candidate words included in the trait expression information from the identity unique information collected in step S300A. Figure 24 Figure 25 Figure 28

[0484] Step S302A: The feature word processing section 426 extracts the candidate words included in the trait expression information from the identity unique information collected in step S300A.

[0485] ​​​​​​Step S304A: The feature word processing section 426 performs scoring (weighting) for each of the candidate words extracted by step S302A. The feature word processing section 426 can also perform scoring of each of the candidate words based on the frequency of occurrence of the candidate words, the degree of reliability of the identity unique information of the extraction source, the degree of co-occurrence between the candidate words, and the like.

[0486] Step S306A: The feature word processing section 426 selects the words (target words) included in the trait expression information based on the results of the scoring of step S304A, from among the candidate words.

[0487] Step S308A: The feature word processing section 426 generates the trait expression information with the target words selected by step S306A as nodes. In generating the trait expression information, the feature word processing section 426 can utilize the results of the scoring of step S304A in setting the association (relationship) between the nodes (words), the strength of the association, the importance of the words themselves, and the like.

[0488] The feature word processing section 426 can perform the processing of steps S302A to S308A described above using AI (artificial intelligence). In this case, the feature word processing section 426 can perform the processing of scoring of the words, extraction of the words, establishment of the association between the words, and the like, for example, by deep learning, clustering, or the like.

[0489] Step S310A: The feature word processing section 426 stores the trait expression information generated by step S208A in the trait expression information storage section 437. The trait expression information can be, for example, a structure in which information on the strength of the relationship with other words, the importance of the word, and the like is stored for each word.

[0490] The feature word processing section 426 can create an identity trait curve using the trait expression information stored in the trait expression information storage section 437, and control the created identity trait curve to be visualized in the meta universe display provided by the service providing system 510, the final user terminal 300.

[0491] The identity trait curve is not limited to the form of a co-occurrence network as shown in Figure 33 , Figure 34 The identity trait curve can be, for example, a form in which the degree of relationship of each word or the credit of each word for each word that becomes a main word is displayed by a bar graph.

[0492] With reference to Figure 36 , an example of the processing flow performed by the service providing system 510 and the identity management apparatus 400A in association with the display of the identity trait curve will be described. First, an example of the processing flow performed by the service providing system 510 will be described.

[0493] Step S400A: For example, according to the access of the real user from the end user terminal 300 to the network service or the activity of the virtual figure in the meta universe, etc., it becomes necessary to perform the display of the identity trait curve corresponding to the real user or the virtual figure. Therefore, the corresponding service providing system 510 transmits an identity trait curve request to the identity management device 400A. The user ID or the virtual figure ID indicating the identity of the object is included in the identity trait curve request.

[0494] Step S402A: The service providing system 510 receives the identity trait curve transmitted from the identity management device 400A according to the identity trait curve request transmitted by step S400A.

[0495] Step S404A: The service providing system 510 displays the identity trait curve received by step S402A on the network service.

[0496] Next, the processing flow example performed by the identity management device 400A will be described.

[0497] Step S500A: In the identity management device 400A, the characteristic word processing section 426 receives the identity trait curve request transmitted from step S400A.

[0498] Step S502A: The characteristic word processing section 426 acquires the trait expression information of the real user or the virtual figure indicated by the user ID or the virtual figure ID included in the received identity trait curve request from the trait expression information storage section 437.

[0499] Step S504A: The characteristic word processing section 426 creates an identity trait curve using the trait expression information acquired in step S502A.

[0500] Further, in a case where a plurality of forms can be dealt with as the identity trait curve, for example, in a case where the form is specified by the identity trait curve request, the characteristic word processing section 426 creates the identity trait curve of the specified form.

[0501] Step S506A: The characteristic word processing section 426 transmits the created identity trait curve to the service providing system 510A.

[0502] In addition, the characteristic word processing section 426 can provide the trait expression information stored in the trait expression information storage section 437 to the meta universe. In the meta universe, the provided trait expression information is used for a prescribed use.

[0503] As an example, the trait expression information can be used for matching of the identities to each other. As a specific example of the matching, an identity existing in the meta universe as a company can be used to select a virtual image suitable for the company from among virtual images existing in the same meta universe as job seekers.

[0504] Figure 37 The flowchart represents a processing flow example performed by the identity management device 400A in correspondence with the matching of the identities as described above. The processing of the chart, for example, becomes processing of determining the degree of matching with one identity when an identity as a job seeker is selected as a suitable candidate for recruitment of the company as a company.

[0505] Step S600A: A company A existing as one of the identities in the meta universe makes a recruitment request to an agent operating in the same meta universe. According to the recruitment request, the agent makes a request to the identity management device 400A to screen virtual images to be used as members for the company A. The agent registers information of virtual images that wish to match with the company in order to be employed by the company in the talent database.

[0506] In the identity management device 400A, the virtual image provision control section 423 acquires trait expression information of one virtual image from among the trait expression information of the company of the request source and the trait expression information of the virtual image of the job seeker registered in the talent database of the agent according to the request for screening of the virtual image.

[0507] Step S602A: The virtual image provision control section 423 calculates the fitness of the trait expression information of the company of the request source acquired in step S600A and the trait expression information of the virtual image as a talent. In calculating the fitness, the feature word processing section 426, for example, can find the similarity between the trait expression information of the company of the request source and the trait expression information of the virtual image as a job seeker.

[0508] Here, the trait expression information of the company and the trait expression information of the virtual image as a talent used in step S602A are not main nodes of the words of the corresponding identities as in Figure 33 For example, Figure 34 The trait expression information of the company A can be understood as information provided by the company A at the time of making the request for screening of the virtual image. That is, Figure 34 The trait expression information of the virtual image as a job seeker is information registered in the talent database by the virtual image as a job seeker with the purpose of showing that the virtual image has a programmed skill.

[0509] Step S604A: The characteristic word processing section 426 can perform matching determination based on the fitness calculated in step S602A. That is, the characteristic word processing section 426 can determine whether or not the virtual image of the job applicant is appropriate for employment in the company of the commission source.

[0510] The processing of steps S602A and S604A can be performed using AI by the characteristic word processing section 426, for example.

[0511] Step S606A: The characteristic word processing section 426 performs notification of the determination result of step S604A. In this case, the characteristic word processing section 426 can notify the determination result to the company of the commission target and the virtual image of the job applicant respectively, or can notify the determination result to the company of the commission target and the virtual image of the job applicant respectively.

[0512] The company of the commission target can determine whether or not to employ the virtual image of the job applicant based on the notified determination result. In addition, the virtual image of the job applicant can determine whether or not to decide the company as a matching partner as an employment target based on the notified determination result.

[0513] In addition, the characteristic word processing section 426 can determine whether or not to employ the virtual image of the job applicant in the company of the commission source (that is, whether or not the matching is successful) based on the determination result of step S604A.

[0514] Hereinafter, other modes of the characteristic expression information in the present embodiment, utilization examples, and the like will be described. In the present embodiment, the characteristic expression information corresponding to one identity can be generated as one that comprehensively represents the characteristics of the corresponding identity, or can be generated as a plurality according to the classification of the characteristics of the corresponding identity.

[0515] In the present embodiment, the characteristic word processing section 426 can generate, for example, integrated characteristic expression information that integrates the characteristic expression information of a plurality of identities for which the matching is successful.

[0516] As one specific example, in a case where marriage between two identities is successful through matching, integrated characteristic expression information that integrates the characteristic expression information of the two identities can be generated. Such integrated characteristic expression information represents the characteristics of a family composed of the two identities.

[0517] In addition, in a case where there is an identity of an employee for an identity of a company through matching between the identity of the company and the identity of the job applicant, the characteristic word processing section 426 can generate integrated characteristic expression information that integrates the characteristic expression information of the identity of the company and the identity of the employee who is equal to or greater than one. Such integrated characteristic expression information represents the characteristics of the company that reliably reflect the characteristics of the employees.

[0518] Further, the feature word processing section 426 can generate the integrated trait expression information not only by the trait expression information of the matching success identity but also by the trait expression information of a plurality of identities that are prescribed in advance as integration targets.

[0519] Further, the feature word processing section 426 can integrate the integrated trait expression information using partial trait expression information composed of a part of the words of the trait expression information when generating the integrated trait expression information. In this case, the feature word processing section 426 can use the trait expression information including all the words for a certain identity and the partial trait expression information for another certain identity in combination when generating the integrated trait expression information.

[0520] Further, in a case where the integrated trait expression information is generated by integrating the trait expression information of three or more identities, the feature word processing section 426 can reconstruct the integrated trait expression information by selecting a part of the trait expression information of a plurality of identities from the integrated trait expression information based on the trait expression information of all the identities according to a prescribed condition.

[0521] As one specific example, for the integrated trait expression information obtained by integrating the trait expression information of all the avatars of the employees of a company existing in the metaverse, the avatars of the employees of a prescribed department, a branch office, or the like of the company are selected. The feature word processing section 426 reconstructs the integrated trait expression information using the trait expression information of the avatars of the employees selected from among the trait expression information of all the avatars of the employees. As described above, the reconstructed integrated trait expression information exhibits the traits of the selected department, branch office, or the like of the company.

[0522] It can be configured so that the trait expression information can be transferred between identities. The form of the transfer can be buying and selling or can be rental.

[0523] As a result of the transfer of the trait expression information between identities, the content of the trait expression information associated with the identity changes, and the trait of the identity also changes. By this change in the trait, it is possible to give a new skill, qualification, or the like to the identity such as an avatar.

[0524] Further, in the metaverse, the avatar can act as if the trait of the identity represented by the integrated trait expression information obtained by integrating the trait expression information of another identity with the trait expression information of the original identity corresponding to itself is the trait of itself.

[0525] As a result, the avatar in the metaverse can act using the newly acquired qualification. Further, the avatar in the metaverse can also act in a manner that expresses itself with a different personality from the past.

[0526] Next, a modification of the present embodiment will be described.

[0527] The identity management apparatus 400A may, for example, determine, based on the content of the identity unique information, an identity element that the subject's identity lacks in order to approach the target identity profile, and recommend the subject's identity so that the determined identity element can be obtained.

[0528] Specifically, in a case where the target of the virtual image of the subject's identity is to make the level in a certain artist's fan club the highest level, the identity management apparatus 400A determines that the number of attendances at the artist's live performance is small by analyzing the corresponding identity unique information. In this case, the identity management apparatus 400A recommends the subject's identity to actively attend the artist's live performance.

[0529] In this case, the target set for the identity can be set according to the corresponding end user, or can be set by the virtual image registration unit 421 or the like based on the activity history of the virtual image up to now indicated by the content of the identity unique information.

[0530] In addition, the identity management apparatus 400A can detect, among a plurality of virtual images corresponding to one end user, a virtual image whose activity amount is less than or equal to a certain degree and whose activity content is repeated, based on the activity history of the virtual image up to now indicated by the identity unique information corresponding to the one end user. The identity management apparatus 400A can recommend the corresponding end user to delete the registration of the detected virtual image, or how the virtual image will act in the future, and the like.

[0531] In addition, for example, the wallet management unit 425 of the identity management apparatus 400A can manage the identity in a manner that assets are allocated based on the characteristics of the identity. The characteristics here can be derived by the wallet management unit 425 based on the history information, character expression information of the identity of the asset allocation target up to now.

[0532] Specifically, in a case where there are two virtual images A and B that autonomously act by AI corresponding to one end user, a case where the virtual images A and B are cited to act in the meta universe in a manner that each uses assets of the corresponding end user is cited as an example. In this case, the virtual images A and B have different tendencies in investment according to experiences of investment so far. For example, the virtual image A is good at high-risk high-return type investment, and the virtual image B tends to make investment in a manner that stably accumulates funds. Therefore, the wallet management section 425 of the identity management device 400A can determine, based on tendencies of investment of the virtual images A and B, amounts of money among assets owned by the end user that are respectively used for investment by the virtual images A and B to make the most efficient investment. In determining such investment amounts, the wallet management section 425 can use a trained model that learns a relationship between determination results of investment amounts to the virtual images so far and investment effects of the virtual images. Further, the wallet management section 425 can also be configured to manage investment amounts allocated to the virtual image corresponding to itself by judgment of the end user.

[0533] In addition, the virtual image provision control section 423 of the identity management device 400A can determine, based on the action history and the trait expression information of the identity of the object, a space (place, country, etc.) and time in which the identity of the object actively acts. The virtual image provision control section 423 in this case is not limited to the identity of the virtual image, and can also determine the identity of the object as the identity of the real user.

[0534] As one example, when the identity of the object is an AI virtual image that performs a performance activity in the meta universe, the virtual image provision control section 423 can determine an activity place and an activity time of the identity of the object based on the number of supporters mobilized by the action history of the identity of the object, the reaction status of the supporters, the personality setting (role setting) of the identity of the object as a performer indicated by the trait expression information of the identity of the object, and the like. The virtual image provision control section 423 can suggest the activity place and the activity time determined for the identity of the object as the AI virtual image. Alternatively, the virtual image provision control section 423 can control the identity of the object to act according to the determined activity place and the activity time. In addition, such determination of the activity place and the activity time can be performed, for example, by taking a plurality of identities that perform a performance activity as a group as the object. As described above, by the identity acting according to the determined activity place and the activity time, it is possible to mobilize more audience to participate in a live performance, or to newly find a meaningful activity place.

[0535] In addition, for example, in a real space, a certain person can change a trait, a personality, and the like that the person exhibits depending on a communication partner. As a specific example, in a case where a certain person communicates with a friend and a case where the person communicates with a business rival, the person can change a trait, a personality, and the like that the person exhibits.

[0536] In this case, the identity of the object can have a basic trait, and the trait that is presented to the partner can change depending on the identity of the communication partner.

[0537] As described above, the trait of the identity of the object is changed in accordance with the control that the trait changes depending on the identity of the communication partner, and the like, for example, by the characteristic word processing section 426 referring to the trait expression information and the action history of the identity of the communication partner in the meta universe. The characteristic word processing section 426 determines a trait that is exhibited by the identity of the object in accordance with the content of the trait expression information and the action history of the identity of the communication partner that is referred to. The determination of the trait can use a trained model that has learned a trait that is appropriate for the content of the trait expression information and the action history of the identity of the communication partner. The characteristic word processing section 426 generates trait expression information that exhibits the determined trait (adaptive trait expression information) using the trait expression information that the identity of the object originally has. The virtual image providing control section 423 can control the virtual image that is the identity of the object to perform an action, a speech, or the like that corresponds to the trait that is expressed by the generated adaptive trait expression information. In addition, changing the trait of the identity in accordance with the adaptive trait expression information can be applied to communication between real users. In this case, the characteristic word processing section 426 can refer to the trait expression information and the action history of the identity of the communication partner that is a real user, determine a trait that the real user of the object should exhibit, and suggest how the real user of the object should act in accordance with the determined trait.

[0538] In addition, as shown in Figure 31 By managing the qualification information that corresponds to one end user by storing the qualification information to the qualification information wallet WL, it is also possible to easily associate the qualification information with an identity (a real user, a virtual image) of the end user as appropriate. As a result, for example, it is possible to share and use the qualification information that is given to each identity that corresponds to the end user between the identities.

[0539] In addition, in the above-described embodiment, a case where an identity (a real user, a virtual image) that corresponds to one end user exists is cited as an example. However, in the present embodiment, a virtual image that can be associated with a plurality of determined or undetermined end users can exist.

[0540] In this case, the virtual image providing control section 423 can autonomously act in correspondence with all or a part of the plurality of end users. In addition, the virtual image providing control section 423 in this case can also cause the virtual image to act in accordance with the operation of the virtual image based on the consensus of the plurality of end users or the operation of the virtual image by a part of the end users.

[0541] In addition, in this case, for example, the qualification information wallet WL that stores the qualification information of the plurality of real users corresponding to the plurality of end users each and the qualification information of the prescribed plurality of virtual images can be managed in correspondence with the plurality of end users.

[0542] In the present embodiment, the end user can not be limited to an individual. In the present embodiment, the end user can be, for example, an organization, a group such as a company, a group, and the like.

[0543] Furthermore, the identity management system 1A of the present embodiment is not limited to the structure shown as the above-described embodiment. For example, Figure 21 The prescribed functional sections in the identity management apparatus 400A shown can be provided to the end user terminal 300. For example, by causing the end user terminal 300 to have the functions of the wallet management section 425, the wallet management information storage section 435, and the like associated with the qualification information wallet WL, it is possible to comprehensively manage the qualification information of the corresponding end user at the end user terminal 300.

[0544] Further, a program for realizing the functions of the virtual image generation system 100, the end user terminal 300, the identity management apparatus 400A, the service providing system 510, the VC issuance system 600, and the DPKI system 700 described above is recorded in a computer-readable recording medium, and by reading the program recorded in the recording medium into a computer system and executing, processing as the virtual image generation system 100, the end user terminal 300, the identity management apparatus 400A, the service providing system 510, the VC issuance system 600, and the DPKI system 700 described above is performed. Here, "reading the program recorded in the recording medium into the computer system and executing" includes installing the program in the computer system. The "computer system" here includes an OS, a peripheral instrument, and the like hardware. In addition, the "computer system" can include a plurality of computer apparatuses connected via a network including a communication line such as the Internet, a WAN, a LAN, a dedicated line, and the like. In addition, the "computer-readable recording medium" refers to a floppy disk, a magnetic-optical disk, a ROM, a CD-ROM, and the like removable medium, a HDD, an SSD, and the like storage apparatus built in the computer system. As described above, the recording medium in which the program is stored can be a non-transitory recording medium such as a CD-ROM. In addition, the recording medium can include a recording medium provided in the inside or the outside of the publishing server accessible from the publishing server for publishing the program. The code of the program stored in the recording medium of the publishing server can be different from the code of the program in a form executable by the terminal apparatus. That is, the form stored in the publishing server is arbitrary if it can be downloaded from the publishing server and installed in a form executable by the terminal apparatus. Further, the structure in which the program is divided into a plurality of pieces and downloaded at different timings and then combined in the terminal apparatus, the publishing server that publishes the divided programs respectively can be different. Also, the "computer-readable recording medium" includes a structure in which the program is held for a constant time as in a volatile memory (RAM) in the computer system that becomes a client in the case where the program is transmitted via a network, a server, and the like. In addition, the above-described program can be used to realize a part of the above-described functions. Also, it can be a so-called difference file (difference program) that can be realized by a combination with a program in which the above-described functions are already recorded in the computer system.

[0545] APPENDIX

[0546] (1) One embodiment of the present application is an identity management system including: a storage unit that stores identity unique information that corresponds to an identity of a real user existing in a real space and an identity of a virtual avatar capable of existing in a meta universe and is unique to the identities; and a keyword processing unit that extracts keywords corresponding to the identities and determines the relevance between the keywords based on the content of the identity unique information stored in the storage unit, and generates keyword relationship information indicating the determined relevance.

[0547] (2) One embodiment of the present application is the identity management system described in (1), in which the keyword processing unit can score the keywords based on the identity unique information when extracting the keywords.

[0548] (3) One embodiment of the present application is the identity management system described in (1) or (2), in which the keyword processing unit can generate keyword relationship display information that visually presents the relevance between the keywords indicated by the keyword relationship information.

[0549] (4) One embodiment of the present application is the identity management system described in (3), in which the keyword processing unit can display the results of scoring the keywords in the keyword relationship display information in a predetermined manner.

[0550] (5) One embodiment of the present application is the identity management system described in any of (1) to (4), in which the keyword processing unit can generate a plurality of pieces of keyword relationship information corresponding to different characteristics of the identities, for each of the identities.

[0551] (6) One embodiment of the present application is the identity management system described in any of (1) to (5), in which the keyword processing unit can generate integrated keyword relationship information obtained by integrating a plurality of pieces of keyword relationship information.

[0552] (7) One embodiment of the present application is the identity management system described in (6), in which the keyword processing unit can generate integrated keyword relationship information in a restructured manner from a part of the plurality of pieces of keyword relationship information selected from among the plurality of pieces of keyword relationship information used when generating the integrated keyword relationship information.

[0553] (8) One embodiment of the present application is the identity management system described in any of (1) to (7), further including a matching unit that makes a determination related to matching a plurality of identities based on the similarity of the keyword relationship information corresponding to each of the plurality of identities set as matching targets.

[0554] (9) One mode of the present embodiment is a feature word processing section that generates integrated feature word relationality information obtained by integrating the feature word relationality information of each identity matched by the matching section, on the basis of the identity management system described in (8).

[0555] (10) One mode of the present embodiment is an identity management method that is an identity management method of an identity management system, and has a feature word processing step of extracting a feature word and determining the association between the feature words corresponding to an identity on the basis of the content of identity unique information stored in a storage section, and generating feature word relationality information indicating the determined association, corresponding to an identity that is a real user existing in a real space and an identity that is a virtual avatar capable of existing in a meta universe, and corresponding to the identity being unique.

[0556] (11) One mode of the present embodiment is a program for causing a computer possessed by an identity management system to function as a feature word processing section that extracts a feature word and determines the association between the feature words corresponding to an identity on the basis of the content of identity unique information stored in a storage section, and generates feature word relationality information indicating the determined association, corresponding to an identity that is a real user existing in a real space and an identity that is a virtual avatar capable of existing in a meta universe, and corresponding to the identity being unique.

[0557] (12) One mode of the present embodiment is a non-volatile storage medium that records a program for causing a computer possessed by an identity management system to function as a feature word processing section that extracts a feature word and determines the association between the feature words corresponding to an identity on the basis of the content of identity unique information stored in a storage section, and generates feature word relationality information indicating the determined association, corresponding to an identity that is a real user existing in a real space and an identity that is a virtual avatar capable of existing in a meta universe, and corresponding to the identity being unique.

[0558] Industrial applicability

[0559] According to the present application, the management of qualifications related to identities can be efficiently performed, and the characteristics possessed by identities can be effectively and flexibly utilized in the activity space of identities.

[0560] Explanation of reference numerals

[0561] 1, 1A Identity management system

[0562] 2 virtual image management system

[0563] 100 virtual image generation system

[0564] 110 virtual image material providing system

[0565] 120 integration system

[0566] 200 user interface environment

[0567] 300 end user terminal

[0568] 400 virtual image management device

[0569] 400A identity management device

[0570] 401 communication unit

[0571] 402, 402A control unit

[0572] 403, 403A storage unit

[0573] 421 virtual image registration unit

[0574] 422 authenticity proof information management unit

[0575] 423 virtual image providing control unit

[0576] 424 VC management unit

[0577] 425 wallet management unit

[0578] 431 end user information storage unit

[0579] 432 virtual image information storage unit

[0580] 433 virtual image VC storage unit

[0581] 434 user VC storage unit

[0582] 435 wallet management information storage unit

[0583] 500 network service environment

[0584] 510 service providing system

[0585] 600 VC issuing system

[0586] 700 DPKI system

Claims

1. An identity management system, having a qualification management section that stores, in association with one information storage medium possessed by a real user who is a real user existing in a real space, a prescribed plurality of qualification information among one or more pieces of qualification information that are given to an identity of the real user and that indicate that the real user has a prescribed qualification, and one or more pieces of qualification information that are given to an identity of a virtual figure that corresponds to the real user and that is able to exist in a meta universe.

2. The identity management system according to claim 1, wherein the qualification information includes status proof information that proves a status of the identity.

3. The identity management system according to claim 1 or 2, wherein the qualification information includes authenticity proof information that proves authenticity of the identity.

4. The identity management system according to any one of claims 1 to 3, wherein the qualification management section outputs, as qualification information for qualification confirmation of an identity of a qualification confirmation target, qualification information that is selected by a real user from among the qualification information stored in the storage section by operation of a user terminal that corresponds thereto.

5. An identity management method that is an identity management method of an identity management system, having a qualification management step of storing, in association with one information storage medium possessed by a real user who is a real user existing in a real space, a prescribed plurality of qualification information among one or more pieces of qualification information that are given to an identity of the real user and that indicate that the real user has a prescribed qualification, and one or more pieces of qualification information that are given to an identity of a virtual figure that corresponds to the real user and that is able to exist in a meta universe.

6. A program, for causing a computer of an identity management system to function as a qualification management section that stores, in association with one information storage medium possessed by a real user who is a real user existing in a real space, a prescribed plurality of qualification information among one or more pieces of qualification information that are given to an identity of the real user and that indicate that the real user has a prescribed qualification, and one or more pieces of qualification information that are given to an identity of a virtual figure that corresponds to the real user and that is able to exist in a meta universe.

7. An identity management system having: a storage section that stores identity unique information that corresponds to an identity of a real user who is a real user existing in a real space and an identity of a virtual figure that is able to exist in a meta universe, and that is unique to the identity; and a feature word processing section that, based on contents of the identity unique information stored in the storage section, performs extraction of feature words and determination of relevance among the feature words corresponding to the identity, and generates feature word relationship information that indicates the determined relevance.

8. The identity management system according to claim 7, wherein the feature word processing section, when extracting the feature words, performs scoring of the feature words based on the identity unique information.

9. The identity management system according to claim 7 or 8, wherein ​ The feature word processing section generates feature word relationship display information that visually presents the relevance between the feature words represented by the feature word relationship information.

10. The identity management system according to claim 9, wherein The feature word processing section displays the results of the scoring of the feature words in the feature word relationship display information in a prescribed manner.

11. The identity management system according to any one of claims 7 to 10, wherein The feature word processing section generates a plurality of feature word relationship information corresponding to different traits of the identity, respectively, in correspondence with one identity.

12. The identity management system according to any one of claims 7 to 11, wherein The feature word processing section generates integrated feature word relationship information obtained by integrating a plurality of feature word relationship information.

13. The identity management system according to claim 12, wherein The feature word processing section generates integrated feature word relationship information in a restructured manner from a part of the plurality of feature word relationship information selected from among the plurality of feature word relationship information used when generating the integrated feature word relationship information.

14. The identity management system according to any one of claims 7 to 13, wherein Further provided is a matching section that makes a determination related to matching of a plurality of identities based on the similarity of the feature word relationship information corresponding to each of the plurality of identities set as matching targets.

15. The identity management system according to claim 14, wherein The feature word processing section generates integrated feature word relationship information obtained by integrating the feature word relationship information of each of the identities matched by the matching section.

16. An identity management method that is an identity management method of an identity management system, The feature word processing step is performed by a feature word processing section to extract features and determine the relevance between the features corresponding to the identity based on the content of the identity unique information, and generate feature relationship information representing the determined relevance, wherein The identity unique information is stored in a storage section, and corresponds to an identity of a real user existing in a real space and an identity of a virtual avatar capable of existing in a meta universe, and is unique to the identity.

17. A program, for causing a computer possessed by an identity management system to function as a feature word processing section, The feature word processing section extracts features and determines the relevance between the features corresponding to the identity based on the content of the identity unique information, and generates feature relationship information indicating the determined relevance, wherein The identity unique information is stored in a storage section, and corresponds to an identity of a real user existing in a real space and an identity of a virtual avatar capable of existing in a meta universe, and is unique to the identity.

Images