CERTIFICATION SYSTEM, CERTIFICATION PROCEDURES AND PROGRAM

Abstract

Solution: A certification system includes: an investigation unit, which determines the result of user identification based on user information and state information indicating a specific user state from a state detection device that detects that specific state; and a certification unit, which, based on the result of user identification and state information, certifies that a user state meets a predetermined condition. The investigation unit receives management information for the state detection device from a calibration unit, which calibrates the state detection device. The certification unit certifies that the user state meets the predetermined condition based on the management information.

Description

BACKGROUND 1. TECHNICAL AREA

[0001] The present invention relates to a certification system, a certification procedure and a program. 2. STATE OF THE ART

[0002] US 10,229,549 B2 describes how the management system unit is configured to store the results of the verification of authorization data and authorization information, as well as the results of the breath sample analysis, and to link these results with the personal identification information. JP 7,209,121 B1 describes a method for calibrating a user input device for a motor vehicle, a method for detecting the actuation of a user input device for a motor vehicle, a user input device for a motor vehicle, and a motor vehicle with such a user input device. Correction factors are formed to adjust the actuation force accordingly.

[0003] DE 10 2021 124 731 A1 describes a method for calibrating a user input device for a motor vehicle, a method for detecting the actuation of a user input device of a motor vehicle, a user input device for a motor vehicle, and a motor vehicle with such a user input device. Correction factors are generated to adjust the actuation force accordingly. SUMMARY TECHNICAL PROBLEM

[0004] It should be ensured that the status information for a user is correct. TECHNICAL SOLUTION

[0005] A certification system according to one aspect of the present invention can include an identification unit that receives a result of user identification, performed based on user information about the user and state information indicating a specific user state detected by a state detection device. The certification system can include a certification unit that, based on the result of user identification and the state information, certifies that a user state meets a predetermined condition. The identification unit can receive management information from a calibration unit that performs the calibration of the state detection device, including at least one of the following: a calibration time at which the calibration is to be performed by the calibration unit;whether a calibration was performed by the calibration unit; a calibration date and time, a calibration method, calibration information or a calibration setting; a correction amount or correction formula to correct the specific condition of the user detected by the condition detection device; the presence or absence of a fault in the condition detection device; a cumulative number of times the condition detection device has been used; an expiration date for the use of the condition detection device; or a version or update of the software of the condition detection device. The certification unit can certify that the user's condition meets the specified condition, further based on the administrative information.

[0006] In the certification system, if the management information does not meet the predetermined calibration condition, the certification unit can issue a message indicating that the management information does not meet the predetermined calibration condition.

[0007] The certification system may include an issuing unit which, when the certification unit certifies that the user's condition meets the predetermined condition, issues a permit certificate stating that it has been certified that the user's condition meets the predetermined condition.

[0008] In the certification system according to any of the above descriptions, the specific state may include at least one state relating to the physical state of the user, one relating to an activity of the user, one relating to the work of the user, or one relating to the capacity of the user.

[0009] In the certification system according to any of the above descriptions, the condition regarding the user's physical state may include at least one of the following: breath alcohol concentration, blood alcohol concentration, body temperature, heart rate, pulse, respiratory rate, blood pressure, blood sugar level, cough, voice, eye movement, myoelectricity, facial expression, staggering or state of stress.

[0010] In the certification system according to any of the above descriptions, the status regarding the user's activity may include at least one of the following: meal times, meal contents, movement records, sleep times, medication history, hospitalization history, or treatment history.

[0011] In the certification system according to any of the above descriptions, the status regarding the user's work may include at least one of the following: hours worked, overtime, time elapsed since the end of the last work, or the number of consecutive working days.

[0012] In the certification system according to any of the above descriptions, the status regarding the user's capacity may include at least one test to verify cognitive capacity or physical capacity.

[0013] The certification system according to one of the above descriptions may also include a provisioning unit that makes the authorization certificate available to a device that the user is allowed to operate on the basis of the authorization certificate.

[0014] In the certification system as described above, the investigating unit can re-obtain the status information and the result of the identification in response to the finding that a user operating the device has changed. The certification unit can then certify that the user's status meets the predetermined condition, based on the newly obtained result of the identification and the status information.

[0015] In the certification system according to one of the above descriptions, the device is a movable body that is driven by the user, and if the certificate of user permission is available, the movable body can allow the user to drive the movable body.

[0016] In the certification system as described above, the investigation unit can re-obtain the status information and the result of the identification in response to the detection that a driver of the moving body has changed. The certification unit can then certify that the user's condition meets the predetermined condition, based on the newly obtained identification result and the status information.

[0017] In the certification system as described above, the investigating unit can further obtain information about the moving body from the moving body itself. The certification unit can then certify that the user's condition meets the predetermined condition, based on this information about the moving body.

[0018] In the certification system as described above, the investigation unit can further determine environmental information that indicates the state of the user's environment. Based on this environmental information, the certification unit can then certify that the user's state meets the specified condition.

[0019] In the certification system as described above, the investigating unit can also obtain location information indicating the user's location. Based on this location information, the certification unit can then certify that the user's condition meets the specified condition.

[0020] In the certification system according to one of the above descriptions, the certification body can change the specified condition based on the location information.

[0021] The certification system according to one of the above descriptions may also include a notification unit which, if the certification unit does not certify that the user's condition meets the predetermined condition, issues a message indicating that the user has not been certified.

[0022] In the certification system according to one of the above descriptions, the certification unit can cause a storage unit to save a certification result.

[0023] In the certification system as described above, the investigating unit can obtain the result of user identification from a user identification device that identifies the user. The user identification device can identify the user based on biometric authentication, ID authentication, and / or password authentication.

[0024] In the certification system as described above, the condition detection device may include a calibration unit that performs the calibration of the condition detection device. The detection unit may receive management information containing at least one of the following: a calibration time at which the calibration is to be performed by the calibration unit; or a calibration date and time, a calibration method, or calibration information for the calibration performed by the calibration unit. Based on the management information, the certification unit may certify that the user's condition meets the specified condition.

[0025] In the certification system according to one of the above descriptions, if the administrative information meets a predetermined calibration condition, the certification body can certify, based on the result of the user identification and the condition information, that the user's condition meets the predetermined condition.

[0026] The certification method according to one aspect of the present invention may involve an investigation unit obtaining a result of user identification based on user information and state information indicating a specific user state detected by a state detection device. The certification method may involve a certification unit certifying that a user state meets a predetermined condition, based on the result of user identification and the state information. The investigation may involve obtaining management information from a calibration unit that performs the calibration of the state detection device, including at least one of the following elements: a calibration time,the calibration unit is to perform; whether a calibration was performed by the calibration unit; a calibration date and time, a calibration method, calibration information, or a calibration setting; a correction amount or formula to correct the specific user condition detected by the condition detection device; the presence or absence of a fault in the condition detection device; a cumulative number of times the condition detection device has been used; an expiration date for the use of the condition detection device; or a version or update of the condition detection device software. Certification may include certifying that the user's condition meets the predetermined condition, based on the management information.

[0027] A program according to one aspect of the present invention can cause a computer to function as an identification unit that determines the result of user identification, which is performed based on user information about the user and state information indicating a specific state of the user, as detected by a state detection device. The program can cause the computer to function as a certification unit that, based on the result of the user identification and the state information, certifies that a state of the user satisfies a predetermined condition. The program can cause the computer to function as an output unit that, when the certification unit certifies that the state of the user satisfies the predetermined condition, issues a permission certificate indicating that it has been certified thatthat the user's condition meets the predetermined condition. The investigation unit may obtain management information from a calibration unit that performs the calibration of the condition detection device, containing at least one of the following elements: a calibration time at which the calibration unit is to perform the calibration; whether any calibration has been performed by the calibration unit; a calibration date and time, a calibration method, calibration information, or a calibration setting; a correction amount or formula for correcting the specific user condition detected by the condition detection device; the presence or absence of a fault in the condition detection device; a cumulative number of times,the status detection device used; an expiration date for the use of the status detection device; or a version or update of the status detection device software. The certification body can certify that the user's status meets the specified condition based on the administrative information.

[0028] The summary does not necessarily describe all necessary features of the embodiments of the present invention. Furthermore, the invention may also be a subcombination of the features described above. BRIEF DESCRIPTION OF THE DRAWINGS Fig. Figure 1 shows an example of a functional block of a certification system according to the present embodiment. Fig. Figure 2 shows a specific configuration example of a certification system. Fig. 3 is an example of a functional block of a certification body. Fig. Figure 4 is a flowchart showing an example of a certification procedure of a certification body. Fig. Figure 5 is a flowchart showing another example of a certification procedure of a certification body. Fig. 6 is an example of a hardware configuration. DESCRIPTION OF EXAMPLE FORMS OF EXECUTION

[0029] The following are embodiments of the present invention. However, the following embodiments are not intended to limit the invention according to the claims. Furthermore, not all of the combinations of features described in the exemplary embodiments are essential for the solution of the invention.

[0030] Fig. Figure 1 shows an example of a functional block of a certification system 10 according to the present embodiment. The certification system 10 comprises a status detection device 20, a user identification device 30, and a certification device 100. The status detection device 20, the user identification device 30, and the certification device 100 are interconnected to communicate with each other over a network 50, such as the Internet or an intranet. The status detection device 20, the user identification device 30, and the certification device 100 can be configured as a single device. Two of the status detection devices 20, the user identification device 30, and the certification device 100 can be configured as a single device.This means that the status detection device 20 and the user identification device 30 can be configured as a single device. The user identification device 30 and the certification device 100 can be configured as a single device. The status detection device 20 and the user identification device 30 can be configured as a single device. The status detection device 20 and the certification device 100 can be configured as a single device.

[0031] The state detection device 20 detects a specific user state. The user identification device 30 identifies the user based on user information. The user identification device 30 identifies the user based on at least one biometric authentication, ID authentication, or password authentication method. The certification device 100 certifies that a user state meets a predetermined condition, based on state information specifying the user's state, provided by the state detection device 20, and based on the user identification result provided by the user identification device 30, and issues a certificate of authorization.The permission certificate confirms that the status information reflects the state of a specific user without any alteration. The authorization certificate confirms that the status information does not reflect a state of a specific user that was fraudulently obtained. Using this type of permission certificate allows for the verification of the credibility of information indicating the specific state of the user. Using this type of permission certificate enables an accurate assessment of whether the user is authorized to operate a particular facility, based on the user's status.

[0032] The state detection device 20 may include a statistics generation unit 28 that statistically processes the state information. The certification device 100 can certify that the user's state meets the predetermined condition, based on the state information indicating the user's specific state, provided by the state detection device 20 and statistically processed by the statistics generation unit 28, and on the result of the user identification provided by the user identification device 30, and issues the certificate of authorization. The statistical processing generates at least an average, a maximum, a minimum, a variance, a moment, or a histogram of measured values.

[0033] Fig. Figure 2 shows a more specific configuration example of a certification system 10. A certification device 100 is, for example, provided in a moving body 80, such as an automobile. The moving body 80 is a concept that includes a vehicle moving on the ground, an aircraft moving in the air, a ship moving on water, and the like. The aircraft moving in the air is a concept that includes a flying machine, an airship, a helicopter, and the like that move in the air.

[0034] If a Certification Device 100 is installed in an automobile, an electronic control unit (ECU) that controls the automobile can function as the Certification Device 100. The ECU can be configured to include a so-called microcomputer, consisting of a CPU, ROM, RAM, an input / output interface, and the like. The ECU performs signal processing according to a program stored in the ROM, while utilizing a temporary storage function of the RAM.

[0035] A condition detection device 20 detects at least one condition relating to a user's physical condition, a condition relating to a user's activity, a condition relating to the user's work, or a condition relating to a user's capacity. The user's physical condition may include at least one of the following: breath alcohol concentration, blood alcohol concentration, body temperature, heart rate, pulse, respiratory rate, blood pressure, blood glucose level, cough, voice, eye movement, myoelectricity, facial expression, staggering, or stress level. The user's activity condition may include at least one of the following: meal times, meal contents, movement log, sleep times, medication history, hospitalization history, or treatment history.The user's work status can include at least one of the following: hours worked, overtime, time elapsed since the last work session, or the number of consecutive workdays. The user's performance status can include at least one of the following: cognitive abilities or a test to assess physical performance.

[0036] The state detection device 20 can be an alcohol detector 200 that detects breath alcohol concentration. If the state detection device 20 is the alcohol detector 200 that detects breath alcohol concentration, it can measure the alcohol concentration in the breath with high accuracy, so the alcohol detector 200 is preferably of an optical type. The state detection device 20 can, for example, be a portable terminal 202 that detects at least blood alcohol concentration, body temperature, heart rate (HR measurement), pulse, respiratory rate, blood pressure, blood glucose level, cough, voice, eye movement, myoelectricity, facial expression, staggering, or a state of stress. The state detection device 20 can comprise the alcohol detector 200 and the portable terminal 202.In addition to the alcohol detector 200 and the portable terminal 202, the condition detection device 20 can include another device, such as a sensor, that detects a specific condition of the user. The condition detection device 20 can be a sensor provided inside the moving body 80 that detects the specific condition of the user.

[0037] If the condition detection device 20 is the alcohol detector 200, which detects the breath alcohol concentration and has a statistics generation unit 28 that statistically processes the result of the measurement by the alcohol detector 200, the certification device 100 can certify that the user is not in a drunken state if the average of the results of the measurement of the alcohol concentration contained in the user's breath is below a reference value (e.g. 0.15 mg / L).

[0038] If the condition detection device 20 is a thermometer that detects the user's body temperature and has a statistics generation unit 28 that statistically processes a measurement result from the thermometer, the certification device 100 can certify that the user has a normal body temperature if the measurement result of the thermometer does not deviate significantly from a reference value estimated from an average or variance of measurement results taken over a certain period in the past, or if the measurement result is below a certain value (e.g. 37.5 degrees C).

[0039] The condition detection device 20 can be a user activity management device that manages the user's condition regarding activity. The user activity management device can be a mobile device, such as a smartphone with at least one built-in application that manages at least one of the following information: meal times, meal contents, movement records (number of steps or calories burned), sleep times, medication history, hospital visit history, or treatment history.

[0040] If the state detection device 20 is the user activity management device that manages the state regarding the user's activity, the certification device 100 can certify that the user is fit for work if the user's last hours of sleep are equal to or longer than a certain period of time (for example, five hours).

[0041] The state detection device 20 can be an attendance management device that manages a user's status regarding work or schoolwork. The state detection device 20 can also be a user capacity management device that manages the user's capacity. The user capacity management device can be a mobile device such as a smartphone that stores cognitive capacity, skills, and the result of a test to verify performance capacity.

[0042] If the status detection device 20 is the attendance management device that manages the user's status regarding work or schoolwork, if a certain period of time (e.g., nine hours) or more has elapsed since the user last finished work (studies), if the total work hours (study hours) for a month are equal to or less than a certain period of time (e.g., 284 hours), if the user is in a predefined area at a certain time, or if the consecutive work hours (consecutive study hours) are equal to or less than a certain period of time (e.g., four hours), the certification device 100 can certify that the user is fit for work (studying).

[0043] If the condition detection device 20 is a sensor that detects breath alcohol concentration or similar parameters, the condition detection device 20 may comprise a measuring unit 22, a calibration unit 24, and a storage unit 26. The measuring unit 22 may measure a physical quantity related to the user. This physical quantity may be a condition relating to the user's physical state, such as breath alcohol concentration. It may also be body temperature or cardiopulmonary information such as heart sounds or heart rate.

[0044] The calibration unit 24 performs the calibration of the condition detection device 20. If the condition detection device 20 is a sensor, a property of the sensor may change over time.

[0045] The calibration unit 24 can perform calibration based on an indicator of the specific condition, such as the breath alcohol concentration measured by the measuring unit 22, and a reference indicator measured beforehand when the user being measured is in that specific condition. A calibration unit 106 can correct a coefficient used to calculate the measurement so that the measured indicator matches the reference indicator. The condition detection device 20 can correct the coefficient so that a minimum of an indicator it calculates itself matches the reference indicator within a specified time period.

[0046] If the measuring unit 22 measures the breath alcohol concentration, a measurement value VM for a period during which no breathing occurred can also be used as a zero point to automatically perform a zero-point calibration of the measuring unit 22. Specifically, the zero-point calibration is corrected by subtracting the VM from a measurement value.

[0047] The storage unit 26 can store administrative information that includes at least one of the following elements: a calibration time at which calibration is to be performed by the calibration unit 24; whether calibration was performed by the calibration unit 24; a calibration date and time, a calibration method, calibration information, or a calibration setting (whether automatic calibration is to be performed, an automatic calibration interval, or similar); a correction amount or formula for correcting the specific user condition detected by the condition detection device 20; the presence or absence of a fault in the condition detection device 20; a cumulative number of times the condition detection device 20 has been used; an expiration date for the use of the condition detection device 20;or a version or update of the software of the condition detection device 20. The storage unit 26 can store management information that includes at least one of the following: a calibration time at which calibration is to be performed by the calibration unit 24; whether calibration has been performed by the calibration unit 24; a calibration date and time, a calibration method, calibration information, or a calibration setting (whether automatic calibration is to be performed, an automatic calibration interval, or similar); a correction amount or formula for correcting the physical quantity measured by the measuring unit 22; the presence or absence of a fault in the measuring unit 22; a cumulative number of times the measuring unit 22 has been used; and an expiration date for the use of the measuring unit 22.or a version or update of the software of measuring unit 22. The calibration procedure is a method of calibration performed by the calibration unit 24. The calibration procedure may include environmental information (temperature, humidity, air pressure, and date and time) during calibration.

[0048] A user identification device 30 comprises a user information detection unit 32, an identification unit 34, and a storage unit 36. The user information detection unit 32 can be an image detection unit that captures an image showing, for example, a face, fingerprint, iris, or vein of the user as user information relating to the user for user identification. The user information detection unit 32 can be a microphone that records the user's voice as user information. If the user information detection unit 32 captures the user's voice, it can instruct the user to read aloud different words each time the user information is captured to prevent the user from impersonating a legitimate user by replaying a recorded sound.

[0049] The User Information Detection Unit 32 can be a reader that reads a user ID from a card, which it displays or stores. The card can be an ID card that displays or stores information to uniquely identify the user, such as an employee ID card or a driver's license. The User Information Detection Unit 32 can also be an input device, such as a touch panel or a keyboard, that accepts an ID and password from the user.

[0050] The identification unit 34 identifies the user based on user information. The storage unit 36 ​​can store a variety of information that the identification unit 34 needs to identify the user. The storage unit 36 ​​stores user identification information that enables the user to be identified based on user information. The identification unit 34 can identify the user by comparing the user information with the user identification information to determine whether the user is a legitimate, pre-certified user, authorized to perform target processing, authorized to operate a target facility, an employee, a registered user, or similar information.

[0051] The user identification device 30 can be a mobile device such as a smartphone with a user authentication function such as a camera function, facial authentication, or fingerprint authentication function. The user identification device 30 can be a camera, a microphone, or similar device provided inside the moving body 80.

[0052] Fig. Figure 3 is an example of a functional block of a certification device 100. The certification device 100 comprises a control unit 110 and a storage unit 130.

[0053] The control unit 110 can consist of a microprocessor such as a CPU or MPU, a microcontroller such as an MCU, or similar. The control unit 110 includes an investigation unit 112, a certification unit 114, an issuance unit 116, a deployment unit 118, a change detection unit 120, a notification unit 122, and a restriction unit 124.

[0054] Investigation Unit 112 receives a user identification result from a user identification device 30 and receives status information indicating a specific user state from a status detection device 20. Investigation Unit 112 can obtain from status detection device 20 the user identification result obtained by status detection device 20 from user identification device 30, along with the status information indicating the specific user state. Investigation Unit 112 can obtain from user identification device 30 the status information indicating the specific user state obtained by user identification device 30 from status detection device 20, along with the user identification result.Investigation Unit 112 also determines common information that links the user identification result with the status information. If the status detection device 20 and the user identification device 30 are part of the same facility, Investigation Unit 112 can determine the user identification result and the status information together with facility information to uniquely identify the facility. Investigation Unit 112 can determine the identification result, including the facility information, and the status information, including the facility information, separately.If the state detection device 20 and the user identification device 30 are not the same device, they can be arranged so that they are adjacent to each other to such an extent that both user identification by the user identification device 30 and user detection by the state detection device 20 can be performed in the same location without the user having to move from one place to the other. The state detection device 20 and the user identification device 30 can be positioned at a distance that allows for short-range communication.

[0055] The condition detection device 20 and the user identification device 30, which are arranged so that they are adjacent to each other, can have common information; the condition detection device 20 can transmit the condition information, including the common information, to the certification device 100; and the user identification device 30 can transmit the result of the user identification, including the common information, to the certification device 100.

[0056] Certification Unit 114 certifies that a user's state meets a predetermined condition, based on the result of user identification and state information. If the user identification result indicates that the user is legitimate, the state information indicates a legitimate user state, and the user's state meets a predetermined acceptance condition, Certification Unit 114 can certify that the user's state meets the predetermined condition.

[0057] For example, if the result of the user identification shows that the user is authorized to drive a specific motor vehicle, the condition information shows a breath alcohol content of the specific user, and a condition is met that a breath alcohol concentration of the specific user is equal to or lower than a reference value for which driving a motor vehicle is permitted, the certification unit 114 can certify that the user's condition meets the specified condition.

[0058] Furthermore, in addition to measuring breath alcohol concentration, measuring unit 22 can also measure CO2 concentration in exhaled air. The CO2 concentration in human breath is approximately 4%, which is higher than the CO2 concentration in the atmosphere. Therefore, measuring the CO2 concentration in breath with measuring unit 22 of certification unit 114 allows for the assessment that the target being measured by measuring unit 22 is not a disguised gas, but rather the user's exhaled air.

[0059] In addition to measuring breath alcohol concentration, measuring unit 22 can also measure pressure. Measuring unit 22, which measures pressure, allows certification unit 114 to estimate whether the user breathed correctly.

[0060] Furthermore, during the certification process, Certification Unit 114 can use an image or video captured by a camera that records the user. This image or video can be used to determine whether the user has cheated and whether the certification has been successful.

[0061] If a condition for certification is considered a certification requirement, Certification Unit 114 may also obtain information about changes in legislation or similar matters via the Internet or similar means and amend the certification requirement in response to the change in legislation or similar matters.

[0062] Certification Unit 114 can additionally certify that the condition detection device 20 is maintained in an appropriate condition. An appropriate condition is, for example, one in which the condition detection device 20 is regularly calibrated and maintained.

[0063] If the result of the user identification indicates that the user is authorized to drive a specific motor vehicle, the condition information shows a time period that has elapsed since the specific user last completed work, and a condition is met that the time period that has elapsed since the specific user last completed work is equal to or longer than an elapsed reference period for which driving is permitted, the Certification Unit 114 may certify that the user's condition meets the predetermined condition.

[0064] Certification Unit 114 can certify that the user's condition meets the predetermined condition by determining whether at least one of the information about the moving body, environmental information, or location information, in addition to the user's condition information and the result of user identification, meets a predetermined condition corresponding to a property of a user-operated facility.

[0065] If the user's condition does not meet the specified condition, Certification Authority 114 may request the user to re-provide their condition information and the result of the user identification. Furthermore, if the user's condition still does not meet the specified condition after the repeated provision of this information, the user, a certification authority designated by a national or local government, a third party, the user's employer, a certification system manufacturer, or the user's legal guardian may be notified that the user's condition has not met the specified condition.

[0066] If Certification Unit 114 certifies that the user's condition meets the predetermined condition, Issuing Unit 116 issues a Permission Certificate indicating that the user's condition has been certified as meeting the predetermined condition. The Permission Certificate may be an electronic certificate. Specifically, the electronic certificate may be an electronic document electronically signed by an authorizing body, indicating that the user's condition has been certified as meeting the predetermined condition. The authorizing body may be a certification body designated by, or authorized by, a national or local government, a third party, the user's employer, a manufacturer of a certification scheme, or the user's legal guardian.

[0067] The provisioning unit 118 provides the authorization certificate for a device that the user is permitted to operate based on the authorization certificate. The provisioning unit 118 provides the authorization certificate to a moving body 80, which the user is permitted to drive based on the authorization certificate. The provisioning unit 118 can pass the authorization certificate to an ECU of the moving body 80, which the user is permitted to drive based on the authorization certificate. If the ECU of the moving body 80 acts as the certification unit 100, the provisioning unit 118 can provide the authorization certificate to an assessment unit contained in the ECU of the moving body 80, which assesses whether driving the moving body 80 should be permitted.

[0068] If the permission certificate is provided to the user, i.e., if the certificate of permission is issued to the user, the ECU of the moving body 80 can allow the user to drive the moving body 80. If the user is authorized to drive the moving body 80, the ECU of the moving body 80 can allow the starting of a power source in response to the activation of an ignition switch. If the user has permission to drive the moving body 80, the ECU of the moving body 80 can allow a door to a driver's cabin of the moving body 80 to be unlocked.

[0069] The change detection unit 120 detects that a user operating the device has changed. In response to the change detection unit 120 recognizing the user change, the investigation unit 112 can re-obtain the user's status information and the result of the user identification, and the certification unit 114 can, based on the newly obtained identification result and the newly re-obtained status information, certify that the user's status meets the predetermined condition.

[0070] The change detection unit 120 can detect that a driver of the moving body 80 has been changed. The change detection unit 120 can detect that the driver of the moving body 80 has been changed based on facial authentication performed using an image captured by a camera that captures an image of the driver's cab of the moving body 80. The change detection unit 120 can detect that the driver of the moving body 80 has been changed based on the result of detection by a seat sensor provided in a seat of the driver's cab of the moving body 80. The change detection unit 120 can detect that the driver of the moving body 80 has been changed based on the result of detection by a millimeter-wave detector provided in the moving body 80.

[0071] In response to the change detection unit 120, which detects that the driver of the moving body 80 has changed, the investigation unit 112 can re-obtain the status information from the status detection device 20 and the result of the user identification from the user identification device 30, and the certification unit 114 can re-certify, based on the result of the user identification that was re-obtained and the status information for the user that was re-obtained, that the user's status meets the predetermined condition.

[0072] Investigation Unit 112 can also obtain information about the moving body 80 from the moving body itself. Certification Unit 114 can confirm that the user's condition meets the predetermined condition based on the information about the moving body. This information about the moving body can include details such as a vehicle identification number (VIN) for the unique identification of the moving body 80. Additionally, the moving body information can include an inspection record (inspection details, inspection date and time, inspector, operations manager, maintenance manager, post-inspection tasks, or similar) of the moving body 80, mileage of the moving body 80, and condition information for the moving body 80 (temperature of each component comprising the moving body 80, remaining coolant level, tension / damage level of a fan belt, etc.).(Engine speed, engine oil level, engine power, gears used, flashing status of a lighting system, dirt on the lighting system and damage to the lighting system, mounting status of a wheel, tire pressure, tire wear, remaining fuel quantity, remaining battery level, amount of water condensed in an air tank, air tank pressure, brake fluid level, remaining brake pad material, washer fluid level, windshield wiper wear, or similar). Certification Unit 114 can determine whether the user identified by the result of the user identification is a user authorized to operate a specific mobile body, as indicated by information such as the vehicle identification number.

[0073] The investigation unit 112 can also receive environmental information indicating the user's environment. The certification unit 114 can confirm that the user's condition meets the specified condition based on this environmental information. This environmental information can include, for example, gas concentration, dust quantity, temperature, humidity, noise, illuminance, vibration, electromagnetic wave, X-ray dose, radiation dose, or ozone concentration. The gas concentration could, for example, be a CO concentration. The accuracy of the user's specific condition, as detected by the condition detection unit 20, can vary depending on the temperature.Therefore, the certification unit 114 can certify that the user's condition meets the predetermined condition, based on whether the temperature indicated by the environmental information falls within a temperature range in which the detection accuracy of the condition detection device 20 meets or exceeds a reference value.

[0074] The investigation unit 112 can also receive location information indicating the user's location. The certification unit 114 certifies that the user's condition meets the specified condition based on this location information. For example, an area can be defined within which a specific user is permitted to operate the moving body 80. Alternatively, the accuracy of the user's specific condition, as detected by the condition detection device 20, can change depending on the user's location.Therefore, the certification unit 114 can certify that the user's condition meets the predetermined condition, based on whether the location specified by the location information is an area where the specific user is permitted to operate the moving body 80, or whether the location specified by the location information is an area where the accuracy of the specific user's condition, as detected by the condition detection device 20, meets or exceeds the reference value. Furthermore, the certification unit 114 can modify the certification condition depending on the location information.For example, in Japan an alcohol concentration in the breath of 0.15 mg / L or higher is considered drunk driving, but in Germany an alcohol concentration in the breath of 0.25 mg / L or higher is considered a violation of the law, so that the certification unit 114 can change the condition for certification depending on the location information.

[0075] Certification Unit 114 instructs Storage Unit 130 to save a certification result. Certification Unit 114 can also instruct another storage unit, such as Storage Unit 26 of State Detection Device 20 or Storage Unit 36 ​​of User Identification Device 30, to save the certification result as a backup in addition to Storage Unit 130.

[0076] Investigation Unit 112 can obtain management information from Condition Detection Unit 20, containing at least one of the following elements: a calibration time at which a calibration is to be performed by a Calibration Unit 24; whether a calibration has been performed by the Calibration Unit 24; a calibration date and time, a calibration method, calibration information, or a calibration setting (whether an automatic calibration is to be performed, an automatic calibration interval, or the like); a correction amount or formula for correcting the specific user condition detected by Condition Detection Unit 20; the presence or absence of a fault in Condition Detection Unit 20; a cumulative number of times,the condition detection device 20 was used; an expiration date for the use of the condition detection device 20; or a version or update of the software of the condition detection device 20. The investigation unit 112 can obtain management information from the condition detection device 20 that includes at least one of the following: a calibration time at which a calibration is to be performed by a calibration unit 24; whether a calibration has been performed by the calibration unit 24; a calibration date and time, a calibration method, calibration information, or a calibration setting (whether an automatic calibration is to be performed,an automatic calibration interval or similar); a correction amount or formula for correcting a physical quantity measured by the measuring unit 22; the presence or absence of a fault in the measuring unit 22; a cumulative number of times the measuring unit 22 has been used; an expiration date for the use of the measuring unit 22; or a version or update of the software of the measuring unit 22. The certification unit 114 can certify that the user's condition meets the predetermined condition based on the management information. The condition detection device 20, if not calibrated correctly, may provide less accurate condition information. Therefore, the certification unit 114 can certify that the user's condition meets the predetermined condition based on whether the calibration of the condition detection device 20 meets a predetermined calibration condition.based on the management information. If the management information meets the predetermined calibration condition, the certification unit 114 can certify that the user's condition meets the predetermined condition, based on the result of the user identification and the condition information. For example, the management information that meets the predetermined calibration condition could mean that the condition detection device 20 was calibrated within one year by a certified calibrator using a suitable calibration procedure.

[0077] If the management information does not meet the specified calibration condition, the user, a certification body designated by a national or local government, a third party, the user's employer, a manufacturer of a certification system, or the user's supervisor may be informed that the management information does not meet the specified calibration condition.

[0078] If the certification unit 114 does not certify that the user's condition meets the specified condition, the notification unit 122 issues a message indicating that the user has not been certified. Notification unit 122 may notify the user's mobile device, an internal display of the movement body 80, a certification authority designated by a national or local government, a third party, the user's employer, a manufacturer of a certification system, the user's legal guardian, or similar entities that the user has not been certified. Notification methods may include an audible alarm, a warning light, a telephone call, or an electronic communication (email, social media, SMS, or similar).

[0079] If the certification unit 114 does not confirm that the user's condition meets the predetermined condition, the restriction unit 124 can restrict a user action. For example, if the user is driving or controlling a moving vehicle such as a car, ship, or aircraft, the restriction unit 124 can limit the speed, range of movement, and driver of the moving vehicle, or restrict human driving and switch to an automatic driving mode.The Restriction Unit 124 may include a Lifting Unit, and if the user is prevented from acting by the Restriction Unit 124, the Lifting Unit may lift the restriction in accordance with an instruction from the user or a third party (a certification body designated by a national or local government, a third-party entity, the user's employer, a manufacturer of a certification system, the user's legal guardian, or the like). If the restriction is lifted, the Restriction Unit 124 may store at least one of the following characteristics: whether the lifting was performed, a date and time, a location, a lifter, or a reason for the lifting.

[0080] Fig. Figure 4 is a flowchart showing an example of a certification procedure of a certification body 100.

[0081] An investigation unit 112 retrieves the result of a user identification from a user identification device 30 (S100). Furthermore, the investigation unit 112 retrieves status information for the user from a status detection device 20 (S102). The investigation unit 112 can obtain information, including the result of the user identification and the status information for the user, from a single device that has the functions of both the status detection device 20 and the user identification device 30.

[0082] A certification unit 114 performs certification processing for the user based on the result of the user identification and the user status information (S104). The certification unit 114 can compare common information contained in the result of the user identification with common information contained in the user status information, thereby determining whether the status detection device 20 and the user identification device 30 are positioned close enough to each other that both the user identification by the user identification device 30 and the user detection by the status detection device 20 can be performed in place without the user having to move from one location to the other.If the result of the user identification indicates that the user is legitimate, the status information indicates a state of the legitimate user, and the user's state meets a predetermined acceptability condition, the certification body 114 can certify, based on the result of the user identification and the user's state information, that the user's state meets a predetermined condition.

[0083] If the certification unit 114 successfully certifies that the user's state meets the predetermined condition, an output unit 116 issues a permission certificate indicating that it has been certified that the user's state meets the predetermined condition (S108). If, however, the certification unit 114 fails to certify that the user's state meets the predetermined condition, a notification unit 122 issues an error message indicating that the user has not been certified (S110).

[0084] Fig. Figure 5 is a flowchart showing another example of a certification procedure of a certification body 100.

[0085] An investigation unit 112 receives management information from a condition detection device 20 (S200). A certification unit 114 determines whether information regarding the calibration by the condition detection device 20 meets a predetermined calibration condition, based on information regarding the calibration by a calibration unit 24 displayed by the management information (S202). If the information regarding the calibration does not meet the predetermined calibration condition, a user is prompted to calibrate the condition detection device 20 (S204).

[0086] If the calibration information meets the predetermined calibration condition, the investigation unit 112 receives a user identification result from a user identification device 30 (S206). Furthermore, the investigation unit 112 receives user status information from the status detection device 20 (S208). The certification unit 114 performs certification processing for the user based on the user identification result and the user status information (S210).

[0087] If the certification unit 114 succeeds in certifying that a user's state meets a predetermined condition, an issuing unit 116 issues a permit certificate indicating that it has been certified that the user's state meets the predetermined condition (S214).

[0088] If the certification unit 114 fails to obtain certification, it is determined whether the number of times the certification unit 114 has performed the certification processing has reached a certain number (S216). If the number of times the certification processing has been performed has not reached the specified number, the certification unit 100 repeats the processing from step S206, so that the certification unit 114 performs the certification processing again. If the number of times the certification processing has been performed has reached the specified number, a notification unit 122 issues an error message indicating that the user has not been certified (S218).

[0089] If Issuing Unit 116 issues the permit certificate as described above, the user to whom this certificate is issued may be authorized to operate a specific vehicle. For example, if it is certified that a user has passed a breathalyzer test without fraud, the user may drive a motor vehicle.

[0090] A certification system 10 according to the present embodiment can prevent the fraudulent processing of status information indicating a specific condition, such as the user's breathing state. Therefore, it is also possible to make an accurate decision, based on the specific condition, as to whether the operation of the specific device should be permitted, or similar decisions.

[0091] Fig.Figure 6 shows an example of a computer 1200 in which a variety of aspects of the present invention may be wholly or partially embodied. Programs installed in the computer 1200 can cause the computer 1200 to function as operations associated with the device according to embodiments of the present invention or with one or more "units" of the device. Alternatively, the programs can cause the computer 1200 to execute the operations or the one or more "units". The programs can cause the computer 1200 to execute a process according to embodiments of the present invention or process stages. Such programs can be executed by a CPU 1212 to cause the computer 1200 to perform certain operations associated with some or all of the blocks in the flowcharts and block diagrams described in this description.

[0092] The computer 1200 according to the present embodiment comprises the CPU 1212 and a RAM 1214, which are interconnected via a host controller 1210. The computer 1200 also comprises a communication interface 1222 and an input / output unit, which are connected to the host controller 1210 via an input / output controller 1220. The computer 1200 also includes a ROM 1230.

[0093] The CPU 1212 operates in accordance with the programs stored in the ROM 1230 and the RAM 1214, thus controlling each device.

[0094] The communication interface 1222 communicates with another electronic device over a network. A hard disk drive can store the programs and data used by the CPU 1212 in the computer 1200. The ROM 1230 stores boot programs or similar items that are executed by the computer 1200 at the time of activation, and / or programs that depend on the computer 1200's hardware. A program is provided via a computer-readable recording medium, such as a CD-ROM, USB flash drive, or IC card, or via a network. The programs are installed in the RAM 1214 or in the ROM 1230, which is also an example of a computer-readable recording medium, and executed by the CPU 1212. The information processing described in these programs is read by the computer 1200 and ensures the cooperation between the programs and the various types of hardware resources described above.The device or procedure can be configured by implementing operations or processing of information in accordance with the use of the computer 1200.

[0095] For example, if communication is taking place between the computer 1200 and an external device, the CPU 1212 can execute a communication program loaded in RAM 1214 and instruct the communication interface 1222 to perform communication processing based on a process described in the communication program. Under the control of the CPU 1212, the communication interface 1222 reads transmission data stored in a transmission buffer area provided in a recording medium such as RAM 1214 or USB storage, transmits the read transmission data to the network, or writes received data from the network to a receive buffer area or similar provided on the recording medium.

[0096] Furthermore, the CPU 1212 can cause all or a necessary part of a file or database stored on an external recording medium, such as a USB drive, to be read from the RAM 1214 and perform various types of processing on the data in the RAM 1214. The CPU 1212 can then write the processed data back to the external recording medium.

[0097] Various types of information, such as different types of programs, data, tables, and databases, can be stored on the recording medium to perform information processing. The CPU 1212 can perform various types of processing on the data read from the RAM 1214, including various types of operations, information processing, conditional evaluation, conditional branching, unconditional branching, information search / replacement, or similar operations, as described in this disclosure and designated by instruction sequences of the programs, to write the results back to the RAM 1214. Furthermore, the CPU 1212 can search for information in a file, database, or similar on the recording medium.For example, if a large number of entries, each of which has an attribute value of a first attribute that is associated with an attribute value of a second attribute, are stored in the recording medium, the CPU 1212 can search from the large number of entries for an entry with the attribute value of the first attribute that satisfies a condition, and read the attribute value of the second attribute that is stored in the entry, thereby obtaining the attribute value of the second attribute that is associated with the first attribute that satisfies a predetermined condition.

[0098] The programs or software modules described above can be stored on a computer-readable storage medium on or near the computer 1200. In addition, a recording medium such as a hard drive or RAM in a server system connected to a dedicated communication network or the Internet can be used as a computer-readable storage medium, so that the programs are made available to the computer 1200 via the network.

[0099] A computer-readable medium can comprise any tangible device capable of storing instructions for execution by a suitable device. Consequently, the computer-readable medium, with the instructions stored therein, comprises a manufacturing item containing instructions that can be executed to provide the means for carrying out the operations described in the flowcharts or block diagrams. Examples of computer-readable media include electronic storage media, magnetic storage media, optical storage media, electromagnetic storage media, semiconductor storage media, and the like.More specific examples of a computer-readable medium include a floppy disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), electrically erasable programmable read-only memory (EEPROM (registered trademark)), static random access memory (SRAM), compact disc read-only memory (CD-ROM), digital versatile disk (DVD), Blu-ray disk (registered trademark), memory stick, integrated circuit card, and the like.

[0100] Computer-readable instructions can contain either source code or object code described in any combination of one or more programming languages. The source code or object code contains a conventional procedural programming language. This conventional procedural programming language can be assembly instructions, ISA (Instruction Set Architecture) instructions, machine instructions, machine-dependent instructions, microcode, firmware instructions, stateful data, or an object-oriented programming language such as Smalltalk (registered trademark), Java (registered trademark), C++, etc., as well as programming languages ​​such as the C programming language or similar programming languages.The computer-readable instructions can be provided to a processor or programmable circuit of a programmable data processing device locally or via a local area network (LAN) or a wide area network (WAN) such as the internet or similar. The processor or programmable circuit can execute the computer-readable instructions to provide the means to perform the operations specified in the flowcharts or block diagrams.

[0101] This can be a single computer, such as a personal computer (PC), tablet computer, smartphone, workstation, server computer, or general-purpose computer, or it can be a computer system in which multiple computers are interconnected. This type of computer system, in which multiple computers are interconnected, is also called a distributed computing system and is a computer in the broadest sense. In a distributed computing system, multiple computers jointly execute a program, with each computer running a part of the program and exchanging data between computers as needed during program execution.

[0102] Examples of a processor include a computer processor, a central processing unit (CPU), a processing unit, a microprocessor, a digital signal processor, a controller, a microcontroller, and the like. A computer can contain one or more processors. In a multiprocessor system, the multiple processors execute a program together, with each processor running a portion of the program and passing data to other processors as needed during program execution. For example, when executing multiple tasks, each processor can execute a portion of each task piecemeal by switching tasks for each time slice. In this case, the portion of the program each processor executes changes dynamically.Which part of the program is to be executed by each of the multiple processors can also be determined statically through multiprocessor programming.

[0103] Although the present invention has been described with reference to the exemplary embodiments, the technical scope of the present invention is not limited to that described in the exemplary embodiments above. It is obvious to those skilled in the art that various modifications or improvements can be made to the embodiments described above. It is also evident from the description of the claims that the embodiments to which such modifications or improvements are made can be included within the technical scope of the present invention.

[0104] It should be noted that any process, including operations, procedures, steps, stages, and the like, performed by the device, system, program, and method described in the claims, specification, or drawings, may be carried out in any order, provided that the order is not specified by "before," "prior," or similar terms, and provided that the output of a previous process is not used in a subsequent process. Even if, for the sake of simplicity, the workflow is described in the claims, description, or drawings using terms such as "first" or "next," this does not necessarily mean that the process must be performed in that order. 1. A certification system that includes: an investigation unit that determines the result of a user identification carried out on the basis of user information relating to the user, and obtains the state information indicating a specific state of the user from a state detection device that detects the specific state of the user; and A certification unit that, based on the result of user identification and state information, certifies that a user's state meets a predetermined condition. 2. The certification system according to claim 1, further comprising an issuing unit which, when the certification unit certifies that the user's condition meets the specified condition, issues a certificate of authorization stating that it has been certified that the user's condition meets the specified condition. 3. The certification system according to claim 1, wherein The specific state includes at least one state relating to a physical state of the user, a state relating to an activity of the user, a state relating to the work of the user, or a state relating to a capacity of the user. 4. The certification system according to claim 3, wherein The condition in relation to the user's physical state includes at least one of the following parameters: breath alcohol concentration, blood alcohol concentration, body temperature, heart rate, pulse rate, respiratory rate, blood pressure, blood sugar level, cough, voice, eye movement, myoelectricity, facial expression, staggering, or state of stress. 5. The certification system according to claim 3, wherein The user's activity status includes at least one of the following: meal times, meal contents, physical activity records, sleep times, medication history, hospitalization history, or treatment history. 6. The certification system according to claim 3, wherein The status regarding the user's work must include at least one of the following: hours worked, overtime, time elapsed since the end of the last work, or the number of consecutive working days. 7. The certification system according to claim 3, wherein The user's performance status includes at least one cognitive performance test or one physical performance test. 8. The certification system according to claim 2, further comprising a provisioning unit that provides the authorization certificate for a facility which the user is permitted to operate on the basis of the authorization certificate. 9. The certification system according to claim 8, further comprising a change detection unit that detects that a user operating the facility has been changed, wherein the investigation unit the status information and the result of the identification in response to the A change detection unit that recognizes that the user has been changed, re-identified, and the certification unit, based on the result of the identification re-identified by the detection unit and the state information re-identified by the detection unit, certifies that the user's state meets the predetermined condition. 10. The certification system according to claim 8, wherein The device is a moving body that is controlled by the user, and if the certificate of user authorization is available, the moving body allows the user to drive the moving body. 11. The certification system according to claim 10, further comprising a change detection unit that detects that a driver of the moving body has been changed, wherein the investigation unit the status information and the result of the identification in response to the A change detection unit that recognizes that the driver of the moving body has been changed, newly procured, and the certification unit, based on the result of the identification newly procured by the investigation unit and the condition information newly procured by the investigation unit, certifies that the user's condition meets the predetermined condition. 12. The certification system according to claim 10, wherein the investigation unit also receives information about the moving body from the moving body, and The certification unit certifies that the user's condition meets the specified condition, based on information about the moving body. 13. The certification system according to claim 1, wherein The investigation unit also receives environmental information that indicates the state of the environment around the user, and The certification body certifies that the user's condition meets the specified condition, based on environmental information. 14. The certification system according to claim 1, wherein The investigation unit also receives location information indicating where the user is located, and The certification body certifies that the user's condition meets the specified condition, based on the location information. 15. The certification system according to claim 1, further comprising a notification unit which, if the certification unit does not certify that the user's condition meets the specified condition, issues a message indicating that the user has not been certified. 16. The certification system according to claim 1, wherein The certification unit instructs a storage unit to save a certification result. 17. The certification system according to claim 1, wherein The investigation unit receives the result of the user identification from a user identification device that identifies the user, and the User identification device identifies the user based on at least one biometric authentication, ID authentication, or password authentication. 18. The certification system according to claim 1, wherein The condition detection device has a calibration unit that performs the calibration of the condition detection device. The investigation unit receives administrative information containing at least one of the following elements: a calibration date and time at which the calibration is to be performed by the calibration unit, or a calibration date and time, a calibration procedure or calibration information for the calibration of the calibration performed by the calibration unit, and The certification body certifies that the user's condition meets the specified condition, based on the administrative information. 19. The certification system according to claim 18, wherein if the administrative information meets a predetermined calibration condition, the certification unit certifies that the user's condition meets the predetermined condition, based on the result of the user identification and on the condition information. 20. A certification process that includes the following: Determine, by an investigative unit, a result of the identification of a user, which is carried out on the basis of user information relating to the user; Determining state information indicating a specific user state, from a state detection device that detects the specific user state, by the detection unit; and To certify, by a certification body, that a user's state meets a predetermined condition, based on the result of user identification and state information. 21. A program that makes a computer work: an investigation unit that receives a result of the identification of a user, which is carried out on the basis of user information relating to the user, and receives the state information indicating a specific state of the user from a state detection device that detects the specific state of the user; and A certification unit that, based on the result of user identification and state information, certifies that a user's state meets a predetermined condition. EXPLANATION OF THE REFERENCE SYMBOLS 10 Certification system 20 Condition detection device 22 Unit of measurement 24 calibration units 26 storage units 28 Statistical generation unit 30 User identification device 32 User Information Detection Unit 34 Identification unit 36 storage units 50 network 80 moving bodies 100 certification bodies 106 calibration units 110 Control unit 112 Investigation Unit 114 Certification Unit 116 Issuing Unit 118 Deployment unit 120 change detection unit 122 notification unit 124 Restriction unit 130 storage units 200 alcohol detector 202 portable terminal 1200 computers 1210 Host Controller 1212 CPU 1214 RAM 1220 Input / Output Control 1222 Communication interface 1230 ROM

Claims

Certification system (10), comprising: an investigation unit (112) that receives a result of user identification, which is carried out on the basis of user information relating to the user and state information indicating a specific state of the user, which is detected by a state detection device (20); and a certification unit (114) that, on the basis of the result of user identification and the state information, certifies that a state of the user satisfies a predetermined condition, wherein the investigation unit (112) receives management information from a calibration unit (24) that performs the calibration of the state detection device (20), which includes at least one of: a calibration time at which the calibration is to be performed by the calibration unit (24); whether a calibration has been performed by the calibration unit (24);a calibration date and time, a calibration procedure, calibration information or a calibration setting; a correction amount or correction formula for correcting the specific condition of the user detected by the condition detection device (20); the presence or absence of a fault of the condition detection device (20); a cumulative number of times the condition detection device (20) has been used; an expiration date for the use of the condition detection device (20); or a version or update of the software of the condition detection device (20), and the certification unit (114) certifies that the user's condition meets the specified condition, further based on the management information. Certification system (10) according to claim 1, wherein if the administrative information does not meet the specified calibration condition, the certification unit (114) issues a notification indicating that the administrative information does not meet the specified calibration condition. Certification system (10) according to claim 1 or 2, further comprising an issuing unit which, when the certification unit (114) certifies that the user's condition meets the specified condition, issues a certificate of authorization stating that it has been certified that the user's condition meets the specified condition. Certification system (10) according to any one of claims 1 to 3, wherein the specific state includes at least one state relating to a physical state of the user, a state relating to an activity of the user, a state relating to the work of the user or a state relating to a capacity of the user. Certification system (10) according to claim 4, wherein the condition in relation to the physical condition of the user includes at least one of the following parameters: breath alcohol concentration, blood alcohol concentration, body temperature, heart rate, pulse rate, respiratory rate, blood pressure, blood glucose level, cough, voice, eye movement, myoelectricity, facial expression, staggering or state of stress. Certification system (10) according to claim 4, wherein the user's activity status includes at least one of: meal times, meal content, physical activity record, sleep times, medication history, hospital stay history or treatment history. Certification system (10) according to claim 4, wherein the status regarding the work of the user includes at least one of: hours worked, overtime, time elapsed since the end of the last work or the number of consecutive working days. Certification system (10) according to claim 4, wherein the user's performance status includes at least one cognitive performance test or one physical performance test. Certification system (10) according to claim 3, further comprising a provisioning unit (118) that delivers the authorization certificate to an establishment which the user is permitted to operate on the basis of the authorization certificate. Certification system (10) according to claim 9, wherein the detection unit (112) re-detects the status information and the result of the identification in response to the detection that a user operating the facility has changed, and the certification unit (114) certifies that the user's status meets the predetermined condition, based on the result of the identification re-detected by the detection unit (112) and on the status information re-detected by the detection unit (112). Certification system (10) according to claim 9, wherein the device is a moving body (80) which is controlled by the user, and when the user's permission certificate is available, the moving body (80) allows the user to control the moving body (80). Certification system (10) according to claim 11, wherein the detection unit (112) re-detects the status information and the result of the identification in response to the detection that a driver of the user identification device (30) has been changed, and the certification unit (114) certifies that the user's state meets the predetermined condition, based on the result of the identification re-detected by the detection unit (112) and on the status information re-detected by the detection unit (112). Certification system (10) according to claim 11, wherein the detection unit (112) further receives information about the moving body (80) from the moving body (80), and the certification unit (114) certifies that the user's condition meets the specified condition, further based on the information about the moving body (80). Certification system (10) according to one of claims 1 to 13, wherein the detection unit (112) further receives environmental information indicating the state of an environment around the user, and the certification unit (114) certifies that the user's state meets the specified condition based on the environmental information. Certification system (10) according to any one of claims 1 to 14, wherein the detection unit (112) further determines location information indicating a location where the user is located, and the certification unit (114) certifies that the user's condition meets the specified condition, further based on the location information. Certification system (10) according to claim 15, wherein the certification unit (114) modifies the specified condition based on the location information. Certification system (10) according to one of claims 1 to 16, further comprising a notification unit (122) which, if the certification unit (114) does not certify that the user's condition meets the specified condition, issues a notification indicating that the user has not been certified. Certification system (10) according to any one of claims 1 to 17, wherein if the management information meets a predetermined calibration condition, the certification unit (114) certifies that the user's condition meets the predetermined condition, based on the result of user identification and on the condition information. Certification procedure, comprising: Determining (S100, S102), by a determination unit (112), a result of the identification of a user, which is carried out on the basis of user information relating to the user and state information indicating a specific state of the user, which is detected by a state detection device (20); and certifying (S104), by a certification unit (114), that a state of the user satisfies a predetermined condition, based on the result of the user identification and on the state information, wherein the determination includes a determination, by a calibration unit (24) performing the calibration of the state detection device (20), of management information, which includes at least one of: a calibration time at which the calibration is to be performed by the calibration unit (24);whether any calibration was performed by the calibration unit (24); a calibration date and time, a calibration method, calibration information or a calibration setting; a correction amount or correction formula for correcting the specific condition of the user detected by the condition detection device (20); the presence or absence of a fault of the condition detection device (20); a cumulative number of times the condition detection device (20) has been used; an expiry date for the use of the condition detection device (20); or a version or update of the software of the condition detection device (20), and the certification (S108) which includes certifying that the user's condition meets the predetermined condition, further based on the management information. A program that causes a computer (1200) to function as: an investigation unit (112) that determines the result of user identification, which is carried out on the basis of user information relating to the user and state information indicating a specific state of the user, which is detected by a state detection device (20); and a certification unit (114) that, based on the result of user identification and state information, certifies that a state of the user satisfies a predetermined condition, wherein the investigation unit (112) receives management information from a calibration unit (24) that performs the calibration of the state detection device (20), which includes at least one of: a calibration time at which the calibration is to be performed by the calibration unit (24);whether a calibration was performed by the calibration unit (24); a calibration date and time, a calibration procedure, calibration information or a calibration setting; a correction amount or correction formula to correct the specific condition of the user detected by the condition detection device (20); the presence or absence of a fault of the condition detection device (20); a cumulative number of times the condition detection device (20) has been used; an expiry date for the use of the condition detection device (20); or a version or update of the software of the condition detection device (20), and the certification unit (114) certifies that the user's condition meets the specified condition, further based on the management information.

Images