Electric apparatus management mediating system, and information processing method and information processing program executed by electric apparatus management mediating system

Abstract

To provide an electric apparatus management mediation system, an information processing method, and a program capable of securing high information security when providing a service to a user in cooperation with a business operator system.SOLUTION: The mediation system 10 includes a mediation server 26 and a mediation application 30. The mediation server 26 includes an information database 26a in which a plurality of pieces of information including cooperation-related information shared between the business operator system 22 and the present mediation system 10 for cooperation between the business operator system 22 and the present mediation system 10 are registered in association with the user. The cooperation related information includes at least cooperation user identification information set for each business operator to identify the user, cooperation device identification information set for each business operator to identify the user device 20, and business operator identification information to identify the business operator.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to an electrical appliance management intermediary system that manages the operating status of electrical appliances used in a user's home in cooperation with a business system, and an information processing method and information processing program executed by the electrical appliance management intermediary system. [Background technology]

[0002] Conventionally, there has been an access control system that enables a service provider such as an electric power company to externally control user equipment installed in a user's home, and acts as an intermediary between multiple service providers and multiple users and user equipment, as disclosed in Patent Document 1, for example. This access control system is composed of a server and a controller installed in the user's home, and information on users and user equipment who are the target of the service, service providers who have been granted access authority, etc. is registered in an access authority information storage unit provided in the server, linked to each other (see Figure 4 of Patent Document 1, etc.). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2015-18468 Summary of the Invention [Problem to be solved by the invention]

[0004] In recent years, in order to promote initiatives such as power aggregation and carbon offsets, there has been an increasing need for a linked device management system in which intermediaries act as intermediaries between multiple businesses and multiple users, and the businesses and intermediaries work together to provide services to users. In this case, the intermediary handles information about multiple businesses and information about multiple users and user devices, so the intermediary's system must have high information security.

[0005] However, Patent Document 1 does not particularly mention the information security of important information such as identification information (identification ID, etc.) of users and user devices. For example, if a contract is concluded between user A, business operator X, and the access control system of Patent Document 1, business operator X will be given the right to access the access control system, but some kind of measure is needed to prevent business operator X from illegally obtaining the details of the contract between user A and another business operator Y when he accesses the access control system. However, it is unclear what kind of measure is taken in this access control system.

[0006] Furthermore, for the convenience of the user, it is preferable that the procedure for concluding a contract between the user, business operator, and intermediary be easily completed via the user's smartphone or computer. However, since important information is exchanged via the user's device, it becomes an issue to prevent spoofing and information tampering by malicious third parties.

[0007] The present invention has been made in consideration of the above-mentioned background technology, and aims to provide an electrical equipment management intermediation system, information processing method, and program that can ensure high information security when working in cooperation with a business system to provide services to users. [Means for solving the problem]

[0008] <Invention of an electrical equipment intermediation system> The present invention provides an electrical appliance management intermediary system that is connected to a business operator's business system and a user's user terminal via a network and manages the operating status of user appliances that are electrical appliances used in a user's home in cooperation with the business operator system, The intermediation system is comprised of an intermediation server that exchanges information with the provider system, and an intermediation app that is application software used through the user terminal, that exchanges information with the user device, and that provides services in cooperation with the intermediation server; The intermediation server includes an information database in which a plurality of pieces of information, including linkage-related information shared between the provider system and the intermediation system for linking the two, are registered in association with the user, a main information management unit that manages the information database, and a device command creation unit that, when receiving a provider request from the provider system, creates a device command for the user device that is the target of the provider request based on the linkage-related information; the intermediary application includes an information management application unit that executes a process of supporting the registration of the link-related information in the information database and a process of extracting specific information from the information database, and a device command execution application unit that is a block that controls or monitors the operating status of the user device, or both, and that, when the device command creation unit creates the device command, executes a process on the target user device in accordance with the device command; This is an electrical equipment management intermediation system in which the collaboration-related information includes at least collaboration user identification information set for each business operator to identify the user, collaboration device identification information set for each business operator to identify the user device, and business identification information to identify the business operator.

[0009] When the intermediary system receives a service collaboration request from the provider system, the request including a desire to start a service for a new user and information about the user, the information management application unit notifies the user terminal of the new user requesting permission to respond to the service collaboration request, and if the user's permission is obtained, the main information management unit performs a process of registering the collaboration-related information, including the collaboration user identification information and the collaboration device identification information for the user, in the information database, which does not overlap with existing information set between other provider systems and registered in the information database, and preferably performs a process of notifying the provider system that the service collaboration request has been approved, or a process of transmitting the collaboration-related information, including the collaboration user identification information and the collaboration device identification information, to the provider system.

[0010] According to a prior agreement with the business operator, the service collaboration request transmitted from the business operator system is transmitted to the information management application unit with a digital signature generated based on the service collaboration request attached thereto; It is preferable that when the information management application unit receives the service collaboration request and the electronic signature, the main information management unit determines the legitimacy of the service collaboration request by verifying the electronic signature, and if the legitimacy of the service collaboration request is confirmed, the information management application unit sends a notification to the user terminal of the new user requesting permission to respond to the service collaboration request.

[0011] Alternatively, in accordance with a prior agreement with the business operator, the service collaboration request transmitted from the business operator system is composed of a main collaboration request transmitted to the main information management unit of the intermediation server and a secondary collaboration request transmitted to the information management application unit after the main collaboration request, the main collaboration request including information about the new user, and the secondary collaboration request including a business collaboration code issued by this intermediation system, It is preferable that, when the main information management unit receives the main collaboration request, it issues the business collaboration code and transmits it to the business system, and when the information management application unit receives the secondary collaboration request, it determines the legitimacy of the service collaboration request by verifying the business collaboration code included in the received secondary collaboration request, and when the legitimacy of the service collaboration request is confirmed, the information management application unit sends a notification to the user terminal of the new user requesting permission to respond to the service collaboration request.

[0012] In a case where, in accordance with a prior agreement with the business operator, the intermediation system is to issue the linkage user identification information and the linkage device identification information for the new user, when the user's permission to respond to the service linkage request is obtained, the main information management unit issues the information for the new user, registers it in the information database, and transmits the issued information to the business operator system; In a case where a prior agreement has been made with the operator that the operator will issue the user identification information and device identification information for collaboration for the new user and include them in the service collaboration request, the main information management unit is configured to, upon receiving the information from the operator system, register the information in the information database if it determines that the received information does not overlap with existing information that has been set up with another operator system and registered in the information database, and if the user's permission to respond to the service collaboration request has been obtained.

[0013] In addition to the link-related information, the information database also stores at least a dedicated user identification information that is identification information used uniquely by the intermediation system to identify the user and is different from the link-use user identification information, and a dedicated device identification information that is identification information used uniquely by the intermediation system to identify the user device and is different from the link-use user device identification information, and it is preferable that when the main information management unit is able to register the link-use user identification information and link-use device identification information of a new user in the information database, it issues the corresponding dedicated user identification information and dedicated device identification information and registers them in the information database.

[0014] When a request for service content presentation is received from the user through the user terminal, the information management application unit may be configured to extract all or part of the collaboration-related information related to the user from the information database and execute a process of transmitting the information to the user terminal of the user.

[0015] <Invention of an information processing method executed by an electrical device intermediation system> The present invention also provides an information processing method executed by an electrical appliance management intermediary system that is connected to a business operator system of a business operator and a user terminal of a user via a network and manages the operating status of a user device that is an electrical appliance used in a user's home in cooperation with the business operator system, the information processing method comprising: The intermediation system is comprised of an intermediation server that exchanges information with the provider system, and an intermediation app that is application software used through the user terminal, that exchanges information with the user device, and that provides services in cooperation with the intermediation server; The intermediation server is provided with an information database in which a plurality of pieces of information, including linkage-related information shared between the business operator system and the intermediation system for linking the two, are registered in association with the user, and the linkage-related information includes at least linkage user identification information set for each business operator for identifying the user, linkage device identification information set for each business operator for identifying the user device, and business identification information for identifying the business operator; a link permission request step in which, when the intermediary system receives from the provider system a service link request including a request to start a service for the new user and information about the user, the intermediary application notifies the user terminal of the new user to request permission to respond to the service link request; an association identification information registration step in which, when the association permission request step is performed and permission is obtained, the intermediary server registers, in the information database, the association-related information including each piece of information of the association user identification information and the association device identification information of the new user, the each piece of information not overlapping with existing information set between the other business system and registered in the information database; This is an information processing method in which, when the collaboration permission request step is performed and permission is obtained, the intermediary server notifies the operator system that the service collaboration request has been approved, or executes a user permission notification step in which the collaboration-related information including the collaboration user identification information and the collaboration device identification information is sent to the operator system.

[0016] According to a prior agreement with the business operator, the service collaboration request transmitted from the business operator system is transmitted to the information management application unit with a digital signature generated based on the service collaboration request attached thereto; It is preferable that, upon receiving the service collaboration request and the electronic signature from the operator system, the intermediary server executes a collaboration request verification step to determine the legitimacy of the service collaboration request by verifying the electronic signature, and if the collaboration request verification step determines that the service collaboration request is a legitimate request, executes the collaboration permission request step for the service collaboration request.

[0017] Alternatively, in accordance with a prior agreement with the business operator, the service collaboration request transmitted from the business operator system is composed of a main collaboration request transmitted to the intermediation server and a secondary collaboration request transmitted to the intermediary application after the main collaboration request, the main collaboration request includes information about the new user, and the secondary collaboration request includes a business collaboration code issued by the intermediation system, It is preferable that, upon receiving the main collaboration request from the operator system, the intermediary server executes an operator collaboration code transmission step in which it issues the operator collaboration code and transmits it to the operator system, and, upon receiving the secondary collaboration request from the operator system, the intermediary server executes an collaboration request verification step in which it determines the legitimacy of the service collaboration request by verifying the operator collaboration code included in the received secondary collaboration request, and if the collaboration request verification step determines that the service collaboration request is a legitimate request, it executes the collaboration permission request step for the service collaboration request.

[0018] In a case where, in accordance with a prior agreement with the business operator, the intermediary system is to issue the information on the new user for the association user identification information and the association device identification information, when the association permission request step is executed and the user's permission is obtained, the intermediary server executes an association identification information issuing step of issuing the information on the new user, and then executes the association identification information registration step and the user permission notification step of transmitting the information issued in the association identification information issuing step to the business operator system; In a case where a prior agreement has been made with the operator that the operator will issue the user identification information for collaboration and the device identification information for collaboration for the new user and include them in the service collaboration request, when the collaboration permission request step is executed and the user's permission is obtained, if it is determined in the collaboration identification information registration step that the information received from the operator system does not overlap with existing information set with another operator system and registered in the information database, the information is registered in the information database, and then the user permission notification step is executed.

[0019] When the linkage identification information registration step becomes executable, it is preferable that the intermediary server is configured to execute a dedicated identification information issuance and registration step in which it issues dedicated user identification information, which is identification information used uniquely in the intermediary system and is different from the linkage user identification information to identify the user, and dedicated device identification information, which is identification information used uniquely in the intermediary system and is different from the linkage device identification information to identify the user device, and registers these in the information database.

[0020] <Invention of information processing program> The present invention also provides an information processing program comprising programs for executing each step, for causing a computer system to execute the above information processing method. [Effects of the Invention]

[0021] In the electrical appliance management intermediation system of the present invention, and the information processing method and information processing program executed by the electrical appliance management intermediation system, the linkage identification information (linkage user identification information and linkage device identification information) shared between the intermediation system and the business system is set to a different code for each business. Therefore, in a situation where a linkage service is being provided to a user, when business X, who has a contract with user A, accesses the intermediation system, it is extremely difficult to illegally obtain the details of the contract between user A and another business Y, ensuring high information security.

[0022] Furthermore, when contract procedures for linked services for new users or user devices are carried out through a user terminal, by adding a process to confirm the validity of information using an electronic signature, etc., it is possible to maintain convenience for users while reliably preventing impersonation and information tampering by malicious third parties.

[0023] Furthermore, the present system and information processing method are highly versatile and can be combined with various types of business systems, making it possible to easily provide a collaborative device management service with high information security. [Brief explanation of the drawings]

[0024] [Figure 1] 1 is a system configuration diagram showing a first linked device management system constructed using an embodiment of the electrical device management intermediation system of the present invention. [Figure 2] 10 is a table showing an example of information registered in an information database held by an intermediation server of the electrical appliance management intermediation system of this embodiment. [Figure 3] FIG. 10 is a sequence diagram showing an example of new registration processing executed in the first linked device management system (operation example 1: first embodiment of an information processing method executed by the electrical device management intermediary system of the present invention). [Figure 4]3A shows a screen displayed in step S1-3 of FIG. 3, requesting consent to access the intermediary application; and FIG. 3B shows a screen displayed in step S1-7, requesting permission to respond to a service collaboration request. [Figure 5] FIG. 10 is a sequence diagram showing the flow of another example of new registration processing executed in the first linked device management system (operation example 2: second embodiment of the information processing method executed by the electrical device management intermediary system of the present invention). [Figure 6] FIG. 10 is a sequence diagram showing the flow of another example of new registration processing executed in the first linked device management system (operation example 3: third embodiment of the information processing method executed by the electrical device management intermediary system of the present invention). [Figure 7] FIG. 10 is a sequence diagram showing the flow of another example of new registration processing executed in the first linked device management system (operation example 4: fourth embodiment of the information processing method executed by the electrical device management intermediary system of the present invention). [Figure 8] 2 is a system configuration diagram showing a second linked device management system constructed using the electrical device management intermediary system of FIG. 1. FIG. [Figure 9] FIG. 10 is a sequence diagram showing an example of new registration processing executed in the second linked device management system (operation example 5: fifth embodiment of the information processing method executed by the electrical device management intermediary system of the present invention). [Figure 10] FIG. 10 is a sequence diagram showing the flow of another example of new registration processing executed in the second linked device management system (operation example 6: sixth embodiment of the information processing method executed by the electrical device management intermediary system of the present invention). [Figure 11] FIG. 10 is a sequence diagram showing the flow of another example of new registration processing executed in the second linked device management system (operation example 7: seventh embodiment of the information processing method executed by the electrical device management intermediary system of the present invention). [Figure 12] FIG. 10 is a sequence diagram showing the flow of another example of new registration processing executed in the second linked device management system (operation example 8: eighth embodiment of the information processing method executed by the electrical device management intermediary system of the present invention). [Figure 13]1. FIG. 4 is a system configuration diagram showing a third linked device management system constructed using the electrical device management intermediary system of FIG. [Figure 14] FIG. 10 is a sequence diagram showing an example of new registration processing executed in the third linked device management system (operation example 9: ninth embodiment of the information processing method executed by the electric device management intermediary system of the present invention). DETAILED DESCRIPTION OF THE INVENTION

[0025] <<<First linked equipment management system 18 (electrical equipment management intermediary system 10)>>> An electrical appliance management intermediary system 10 according to one embodiment of the present invention will now be described. The intermediary system 10 is connected to user terminals 12 and 14 and a business operator system 16 via a network, and constitutes a first linked appliance management system 18 shown in Fig. 1. The first linked appliance management system 18 is a system in which the intermediary system 10 and the business operator system 16 work together to manage the operating status of user appliances 20, which are electrical appliances used in users' homes.

[0026] <<Configuration of the first linked device management system 18>> First, the configuration of the first linked device management system 18 will be described. <Configuration of User Terminals 12, 14 and User Device 20> The intermediation system 10 provides services to multiple users, but here we will explain the configuration for one of the users, user A. User A owns a first user terminal 12A, such as a personal computer installed in A's home, and a second user terminal 14A, such as a smartphone that he carries when he goes out. User devices 20A are lighting, air conditioners, etc. used in A's home.

[0027] <Configuration of business operator system 16> The intermediation system 10 provides services in cooperation with multiple business operator systems 16. A business operator system 16X managed and operated by business operator X is composed of a business operator server 22X and a business operator application 24X, and the business operator application 24X is a native application that runs on the second user terminal 14A. Similarly, a business operator system 16Y managed and operated by business operator Y is composed of a business operator server 22Y and a business operator application 24Y, and the business operator application 24Y is also a native application that runs on the second user terminal 14A.

[0028] <Configuration of Electrical Equipment Management Intermediation System 10> The intermediation system 10 is composed of an intermediation server 26 that exchanges information with the provider system 16, and intermediation apps 28, 30 that are application programs used through the user terminals 12, 14, that exchange information with the user devices 12, 14, and that provide services in cooperation with the intermediation server 26. The intermediation server 26 may be composed of one or more computers, or may be realized by cloud computing.

[0029] The intermediation server 26 includes an information database 26a in which a plurality of pieces of information, including linkage-related information shared between the provider system 16 and the intermediation system 10 for linking the two, are registered in association with individual users, and a main information management unit 26b that manages the information database 26a. The intermediation server 26 further includes a device command creation unit 26c that, when receiving a provider request from the provider system 16, creates a device command for the user device 20 that is the target of the provider request, based on the linkage-related information in the information database 26a.

[0030] When the first linked device management system 18 is a system that provides a power aggregation service, the information database 26a stores a plurality of pieces of information as shown in Fig. 2. The link-related information shared with the provider system includes registered provider identification information for identifying the provider with whom the link is provided, linking user identification information for identifying the user who provides the service, linking device identification information for identifying the user device to be managed, contract information between the provider and the user, and location information of the user's home. Furthermore, registered information uniquely used by the intermediation system 10 includes dedicated user identification information for identifying the user who provides the service and dedicated device identification information for identifying the user device to be managed. The identification information is a code composed of symbols, numbers, and the like.

[0031] A first feature of the information database 26a is that the association identification information (association user identification information and association device identification information) has different contents for each business operator. For example, for user A, the association user identification information used with business operator X is "ABC-X", and the association user identification information used with business operator Y is "EFG-Y".

[0032] A second feature of the information database 26a is that dedicated identification information (dedicated user identification information and dedicated device identification information) with different contents is provided in addition to the association identification information (association user identification information and association device identification information). For example, for user A, the dedicated identification information is "aaaa", which is different from the association user identification information "ABC-X" with business operator X and the association user identification information "EFG-Y" with business operator Y.

[0033] Next, the intermediary applications 28 and 30 will be described. The intermediary application 28 is a native application that runs in the first user terminal 12A, and includes a device command execution application unit 28a, as shown in Fig. 1. The device command execution application unit 28a is a block that controls the user device 20, monitors the operating status, or both, and when a device command is created by the device command creation unit 26c, executes processing on the target user device 20 according to the device command.

[0034] The intermediary application 30 is a native application that runs in the second user terminal 14A and includes an information management application unit 30a and a remote control application unit 30b. The information management application unit 30a executes processes such as supporting the registration of link-related information in the information database 26a and extracting specific information from the information database 26a. The remote control application unit 30b is a block that supports the user in remotely controlling the user device and executes processes such as sending user requests to the device command creation unit 26c.

[0035] <<Operation of the first linked device management system 18 (part 1)>> Next, the operation of the first linked device management system 18 when it provides a service to a user will be described with reference to FIG. First, an example of the operation of the provider system 16 and the intermediation system 10 working together to provide a service will be described, assuming a case where a power aggregation service is provided. For example, a provider request such as "Turn off the lights in A's house to save energy (DR command)" is transmitted from the provider server 22X, and when the intermediation server 26 receives this, the device command creation unit 26c creates a device command corresponding to the provider request and transmits it to the device command execution unit 28a in the first user terminal 12A. Then, the device command execution unit 28a executes a process of turning off the user device 20A (lights) based on the device command.

[0036] Next, we will explain the operation of the intermediation system 10 alone to provide a service that enables a user away from home to remotely operate a user device. When user A accesses the remote operation application unit 30b of the second user terminal 14A and inputs a user request, for example, "I will be home in 10 minutes, so please turn on the air conditioner," the user request is sent from the remote operation application unit 30b to the intermediation server 26, and the device command creation unit 26c creates a device command corresponding to the user request and sends it to the device command execution unit 28a in the first user terminal 12A. The device command execution unit 28a then executes a process to start up the user device 20A (air conditioner) based on the device command.

[0037] 1, the intermediary system 10 also provides a service in which, upon request from a user, the provider system 16 and the intermediary system 10 cooperate to notify the user of the contents of the service being provided to the user. Specifically, upon receiving a service content presentation request from user A via the second user terminal 14A, the information management application unit 30a extracts some or all of the cooperation-related information related to user A from the information database 26a, compiles it into a list, or the like, and transmits it to the second user terminal 14A.

[0038] Here, the effects obtained by the two features of the information database 26a explained above will be described. The first feature is that the association identification information (association user identification information and association device identification information) is set to a code such as a character string that is different for each business. Although multiple business servers 22 can access the intermediation server 26 of the present intermediation system 10, since the association identification information is different for each business, it is extremely difficult for a specific business (e.g., business X) to illegally obtain the details of a contract between another business (e.g., business Y) and a user (e.g., user A). Therefore, the first feature ensures high information security.

[0039] The second feature is that dedicated identification information (dedicated user identification information and dedicated device identification information) with different content is provided in addition to the association identification information (association user identification information and association device identification information). The intermediation system 10 independently provides a service that enables remote operation of the user device 20, and this service is executed based on the dedicated identification information. Although the intermediation server 26 of the intermediation system 10 can be accessed by multiple business server 22, the dedicated identification information is kept secret, making it extremely difficult for each business (e.g., business X, Y) to illegally obtain the contract details regarding remote operation between the intermediation system 10 and a user (e.g., user A). Therefore, the second feature ensures high information security.

[0040] <<Operation of the first linked device management system 18 (part 2)>> Next, an example of the operation of the first linked device management system 18 and the present intermediation system 10 will be described when a new application is made to receive a linked service provided by the business operator system 16 and the present intermediation system 10. The operation described here is the flow of a process for registering identification information of a new user or user device in the information database 26a, i.e., the flow of a new registration process, and four operation examples (operation examples 1 to 4) will be described in order below.

[0041] The processing procedures are agreed upon in advance between the business operator system 16 and the intermediary system 10, and the details of the agreement differ for each operation example. Therefore, the details of the agreement will be introduced individually in the explanation of each operation example. <Operation Example 1: First Embodiment of Information Processing Method of the Present Invention> Operation example 1 will be described with reference to Figures 1 and 3. First, user A operates second user terminal 14A to access provider application 24X and makes a new application to receive an integrated service. Then, provider application 24X transmits the user's application details to provider server 22X and requests a DL-URL [step S1-1]. The DL-URL is a URL (Uniform Resource Locator) used to launch intermediary application 30 by deep link in a later step.

[0042] When step S1-1 is executed, the business server 22X creates a DL-URL including information about user A, affixes a digital signature to it, and transmits it to the business application 24X [step S1-2]. The information about user A here includes the association identification information (association user identification information and association device identification information) issued by the business server 22X, contract information between business X and user A, location information about A's home, etc. The process of affixing a digital signature is a process based on a prior agreement between the business system 16X and the intermediation system 10, and in a later step, the intermediation server 26 receives the information transmitted from the business application 24X and verifies the digital signature using a common key, private key, or public key to determine the legitimacy of the received information.

[0043] When step S1-2 is executed, the provider application 24X causes the second user terminal 14A to display a screen requesting consent to access the intermediary application 30, i.e., a screen prompting a deep link operation [step S1-3]. For example, as shown in FIG. 4(a), a tap button TB1 saying "Link with the intermediary (the intermediary system 10)" is displayed, and if user A taps the tap button TB1, user A is deemed to have consented. Then, if user A's consent is obtained (if the tap button TB1 is tapped), the deep link is executed, the intermediary application 30 is launched, and the information management application unit 30a receives the service link request sent from the provider application 24X.

[0044] The service linkage request is information that includes a request to start a service for new user A and information about user A, which in this case is the information included in the DL-URL and the digital signature attached to the DL-URL. Upon receiving the service linkage request, the information management application unit 30a transmits the DL-URL and the digital signature to the main information management unit 26b of the intermediary server 26 and requests confirmation of the validity of the DL-URL [step S1-4].

[0045] The main information management unit 26b executes a linkage request verification step to determine the validity of the service linkage request by verifying the digital signature [step S1-5]. If the service linkage request is determined to be valid, the main information management unit 26b transmits some or all of the information about User A included in the DL-URL (User A's application details) to the information management application unit 30a [step S1-5].

[0046] If the information management application unit 30a determines in step S1-5 that the service collaboration request is valid, it executes a collaboration permission request step of notifying the second user terminal 14A of the request for permission to respond to the service collaboration request [step S1-6]. For example, as shown in FIG. 4(b), a tap button TB2 "Allow / Not allow collaboration with business operator X" is displayed, and if user A taps "Allow," it is determined that user A has granted permission.

[0047] Then, when user A's permission is obtained (when "Allow" is tapped), if it is determined that the association identification information (association user identification information and association device identification information) issued by the business server 22X does not overlap with existing information set with another business system (for example, the business system 16Y) and registered in the information database 26a, the main information management unit 26a executes an association identification information registration step of registering the association identification information issued by the business server 22X in the information database 26a [step S1-7]. Furthermore, the main information management unit 26b executes a dedicated identification information issuance and registration step of issuing dedicated identification information (dedicated user identification information and dedicated device identification information) corresponding to the association identification information registered in step S1-7 and registering it in the information database 26a [step S1-8].

[0048] In addition, in the association identification information registration step [step S1-7], in addition to the association identification information (association user identification information and association device identification information), association-related information such as contract information between operator X and user A and location information of the user's home is also registered in the information database 26b.

[0049] Furthermore, the main information management unit 26b executes a user consent notification step of notifying the provider server 22X that the service collaboration request has been approved by user A [step S1-9]. This completes the new registration process for user A, and the service becomes available to provide the collaborative service to user A.

[0050] A feature of Operation Example 1, other than the linkage identification information and dedicated identification information, is that it executes a linkage request verification step [Step S1-5] that uses a digital signature to determine the legitimacy of the service linkage request. While high security can be easily ensured for information exchange between the provider server 22x and the intermediary server 26 by using a WebAPI or the like, the service linkage request is transmitted to the intermediary system 10 via the second user terminal 14A, raising concerns about spoofing or information tampering by a malicious third party. However, Operation Example 1 executes the linkage request verification step [Step S1-5] and proceeds to the next step only if the service linkage request is determined to be legitimate, thereby reliably preventing fraudulent acts such as spoofing.

[0051] <Operation Example 2: Second Embodiment of Information Processing Method of the Present Invention> Operation example 2 will be described with reference to Figures 1 and 5. First, user A operates second user terminal 14A to access provider application 24X and makes a new application to receive an integrated service. Then, provider application 24X transmits the details of user A's application to provider server 22X and requests a download URL [step S2-1]. The download URL is a URL used to launch intermediary application 30 by deep linking in a later step.

[0052] When step S2-1 is executed, the business server 22X transmits information about user A to the intermediary server 26 and requests a DL-URL [step S2-2]. The information about the user here includes the association identification information (association user identification information and association device identification information) issued by the business server 22X, contract information between business X and user A, location information of A's house, etc.

[0053] When step S2-2 is executed, the main information management unit 26b creates a DL-URL that includes appropriate information, attaches a digital signature to it, and transmits it to the business server 22X [step S2-3]. The business server 22X then transmits the received DL-URL and digital signature to the business application 24X [step S2-4]. The process of attaching a digital signature is based on a prior agreement between the business system 16X and the intermediation system 10. In a later step, the intermediation server 26 receives the information transmitted from the business application 24X and verifies the digital signature using a common key, or a private key and a public key, to determine the legitimacy of the received information.

[0054] When step S2-4 is executed, the provider application 24X causes the second user terminal 14A to display a screen requesting consent to access the intermediary application 30, i.e., a screen prompting a deep link operation [step S2-5]. For example, a screen such as that shown in FIG. 4(a) is displayed, and if user A taps tap button TB1, user A is deemed to have consented. Then, if user A's consent is obtained (if tap button TB1 is tapped), deep linking is executed, the intermediary application 30 is launched, and the information management application unit 30a receives the service linkage request sent from the provider application 24X.

[0055] The service linkage request is information that includes a request to start a service for new user A, and in this case, it is the information included in the DL-URL and the digital signature attached to the DL-URL. Upon receiving the service linkage request, the information management application unit 30a transmits the DL-URL and the digital signature to the main information management unit 26b of the intermediary server 26, and requests confirmation of the validity of the DL-URL [step S2-6].

[0056] The main information management unit 26b executes a linkage request verification step to determine the validity of the service linkage request by verifying the digital signature [step S2-7]. If the service linkage request is determined to be valid, the main information management unit 26b transmits some or all of the information about user A (user A's application details) received when step S2-2 was executed to the information management application unit 30a [step S2-7].

[0057] If the information management application unit 30a determines in step S2-7 that the service collaboration request is valid, it executes a collaboration permission request step of sending a notification to the second user terminal 14A requesting permission to respond to the service collaboration request [step S2-8]. For example, a screen such as that shown in FIG. 4(b) is displayed, and if user A taps the "Allow" tap button TB2, it is determined that user A has granted permission.

[0058] Then, when user A's permission is obtained (when "Allow" is tapped), if it is determined that the association identification information (association user identification information and association device identification information) issued by the business server 22X does not overlap with existing information set with another business system (for example, the business system 16Y) and registered in the information database 26a, the main information management unit 26a executes an association identification information registration step of registering the association identification information issued by the business server 22X in the information database 26a [step S2-9]. Furthermore, the main information management unit 26b executes a dedicated identification information issuance and registration step of issuing dedicated identification information (dedicated user identification information and dedicated device identification information) corresponding to the association identification information registered in step S2-9 and registering it in the information database 26a [step S2-10].

[0059] In addition, in the association identification information registration step [step S2-9], in addition to the association identification information (association user identification information and association device identification information), association-related information such as contract information between operator X and user A and location information of A's home is also registered in the information database 26b.

[0060] After executing step S2-4, the business operator system 16X does not know the status of the interaction between user A and the intermediary system 10, so at an appropriate time after step S2-4, the business operator server 22X requests the intermediary server 26 for the association identification information for user A (association user identification information and association device identification information) [step S2-11].

[0061] Upon receiving this request, the main information management unit 26b transmits the association identification information registered in the information database 26a in step S2-9 to the provider server 22X [S2-12]. By receiving this association identification information, the provider system 16X becomes aware that the service association request has been approved by user A. In other words, step S2-12 is positioned as a user consent notification step that notifies the provider server 22X that the service association request has been approved by user A.

[0062] Therefore, although operation example 2 is configured to "request association identification information in step S2-11 and transmit association identification information in step S2-12," as can be seen in light of the purpose of steps S2-11 and S2-12, it is also possible to change the content to, for example, "request result information on whether user A's permission has been obtained in step S2-11 and transmit result information in step S2-12." This completes the new registration process for User A, and the linked service becomes available for User A.

[0063] A feature of Operation Example 2, other than the linkage identification information and dedicated identification information, is that it executes a linkage request verification step [Step S2-7] that uses an electronic signature to determine the legitimacy of the service linkage request. Comparing Operation Example 1 and Operation Example 2, there is a difference in that in Operation Example 1, the business entity server 16X creates the electronic signature [Step S1-2], while in Operation Example 2, the intermediary server 26 creates it [Step S2-3]. However, both Operation Example 1 and Operation Example 2 are the same in that the electronic signature is used to determine the legitimacy of the service linkage request [Steps S1-5 and S2-7], and thus, Operation Example 2 can also reliably prevent fraudulent acts such as impersonation. Furthermore, Operation Example 2 has the advantage of reducing the burden on the business entity system 16 that is the linkage destination, because the intermediary system 10 creates the electronic signature.

[0064] <Operation Example 3: Third Embodiment of Information Processing Method of the Present Invention> Operation example 3 will be described with reference to Figures 1 and 6. In the above-described operation examples 1 and 2, the service collaboration request is composed of one request sent from the business operator application 24X to the intermediary application 30. On the other hand, in operation example 3, the service collaboration request is composed of two requests: a main collaboration request sent from the business operator server 22X to the intermediary server 26, and a secondary collaboration request sent from the business operator application 24X to the intermediary application 30 after the main collaboration request. The main collaboration request includes information about new user A, and the secondary collaboration request includes a JR-Code (business collaboration code) issued by the intermediation system 10. The JR-Code is a secret code used to determine whether the main collaboration request and secondary collaboration request are a pair.

[0065] The flow of Operation Example 3 will be described below in order. First, user A operates second user terminal 14A to access provider application 24X and submits a new application to receive an integrated service. Then, provider application 24X transmits the details of user A's application to provider server 22X and requests a download URL [step S3-1]. The download URL is a URL used to launch intermediary application 30 via a deep link in a later step.

[0066] When step S3-1 is executed, the business server 22X transmits information about user A to the intermediary server 26 and requests a JR-Code [step S3-2]. The information about user A here includes the association identification information (association user identification information and association device identification information) issued by the business server 22X, contract information between business X and user A, location information of A's house, etc.

[0067] When step S3-2 is executed, the main information management unit 26b creates a JR-Code and transmits it to the business server 22X [step S3-3]. Then, the business server 22X creates a DL-URL that includes the received JR-Code and transmits it to the business application 24X [step S3-4].

[0068] When step S3-4 is executed, the provider application 24X causes the second user terminal 14A to display a screen requesting consent to access the intermediary application 30, i.e., a screen prompting a deep link operation [step S3-5]. For example, a screen such as that shown in FIG. 4(a) is displayed, and if user A taps tap button TB1, user A is deemed to have consented. Then, when user A's consent is obtained (when tap button TB1 is tapped), deep linking is executed, the intermediary application 30 is launched, and the information management application unit 30a receives the sub-linking request sent from the provider application 24X.

[0069] The secondary collaboration request is information that includes a request to start a service for new user A, and in this case, this information is included in the DL-URL. Upon receiving the secondary collaboration request, the information management application unit 30a transmits the DL-URL to the main information management unit 26b of the intermediary server 26 and requests confirmation of the validity of the DL-URL [step S3-6].

[0070] The main information management unit 26b executes an interaction request verification step to determine the validity of the service interaction request by verifying the JR-Code [step S3-7]. If the service interaction request is determined to be valid, the main information management unit 26b transmits some or all of the information about user A (user A's application details) received when step S3-2 was executed to the information management application unit 30a [step S3-7].

[0071] If the information management application unit 30a determines in step S3-7 that the service collaboration request is valid, it executes a collaboration permission request step of notifying the second user terminal 14A of the request for permission to respond to the service collaboration request [step S3-8]. For example, a screen such as that shown in FIG. 4(b) is displayed, and if user A taps the "Allow" tap button TB2, it is determined that user A has granted permission.

[0072] Then, when permission from user A is obtained (when "Allow" is tapped), if it is determined that the association identification information (association user identification information and association device identification information) issued by the business operator server 22X does not overlap with existing information set with another business operator system (for example, business operator system 16Y) and registered in the information database 26a, the main information management unit 26a executes an association identification information registration step of registering the association identification information issued by the business operator server 22X in the information database 26a [step S3-9]. Note that in the association identification information registration step [step S3-9], in addition to the association identification information (association user identification information and association device identification information), association-related information such as contract information between business operator X and user A and location information of A's home is also registered in the information database 26b.

[0073] After executing step S3-4, the provider system 16X does not know the status of the interaction between user A and the intermediary system 10. Therefore, at an appropriate timing after step S3-4, the provider server 22X requests the intermediary server 26 for association identification information for user A (association user identification information and association device identification information) [step S3-10]. Then, upon receiving this request, the main information management unit 26b executes a user consent notification step of transmitting the association identification information registered in the information database 26a in step S3-9 to the provider server 22X [step S3-11]. This completes the new registration process for user A, and the provider system is ready to provide an association service to user A.

[0074] A feature of Operation Example 3, other than the feature related to the collaboration identification information, is that it executes a collaboration request verification step [step S3-7] that determines the legitimacy of the service collaboration request using a secret JR-Code issued by the intermediary server 26. Operation Example 3 differs from Operation Examples 1 and 2 in that it uses a JR-Code instead of an electronic signature, but is similar to Operation Examples 1 and 2 in that it determines the legitimacy of the service collaboration request using a secret code that cannot be known by a third party, and it can reliably prevent fraudulent acts such as impersonation.

[0075] In addition, in the operation example 3, it is determined that a certain level of information security is ensured without providing a dedicated identification information in addition to the association identification information, and therefore the dedicated identification information issuance and registration step is not executed. In this way, the dedicated identification information issuance and registration step can be omitted as necessary.

[0076] <Operation Example 4: Fourth Embodiment of Information Processing Method of the Present Invention> Operation example 4 will be described with reference to Figures 1 and 7. Operation example 4 has much in common with the above-described operation example 2, and steps S4-1 to S4-12 of operation example 4 correspond to steps S2-1 to S2-12 of operation example 2, respectively, and the flows are generally similar. However, there is a difference in that in operation example 2, the association identification information (association user identification information and association device identification information) is agreed upon to be issued by the business server 22X, whereas in operation example 4, the association identification information is agreed upon to be issued by the mediation server 22X. Therefore, the explanation of operation example 4 will focus on steps whose processing content has changed because of the agreement that the association identification information is agreed upon to be issued by the mediation server 22X.

[0077] In step S4-2, the provider server 22X transmits information about user A to the intermediary server 26 and requests a DL-URL. Here, the information about the user includes contract information between provider X and user A, location information of A's house, etc., and does not include association identification information (association user identification information and association device identification information).

[0078] Furthermore, if, as a result of performing step S4-8, permission is obtained from user A to respond to the service collaboration request, the intermediary server 26 executes a collaboration identification information issuance step [S4-9] to issue collaboration identification information for the new user A, and then executes a collaboration identification information registration step [4-9] and a dedicated identification information registration step [4-10].

[0079] As described above, the linkage identification information registered in the information database 26 is to be different for each business operator, so the linkage identification information issued in the linkage identification information issuance step [S4-9] does not overlap with the existing linkage identification information set with other business systems (e.g., business system 16Y, etc.) and registered in the information database 26a, and new, non-overlapping linkage identification information is registered in the linkage identification information registration step [4-9]. In this way, although the fourth operation example differs from the second operation example in some of the processing contents, it can obtain substantially the same effects as the second operation example.

[0080] <<Effects of Electrical Equipment Management Intermediation System 10>> As described above, the electrical appliance management intermediation system 10, the information processing method executed by the electrical appliance management intermediation system 10 (operation examples 1 to 4), and the information processing program for executing this information processing method are characterized in that the linkage identification information (linkage user identification information and linkage device identification information) shared between the intermediation system 10 and the business system 16 is set to a different code for each business. Therefore, in a situation where a linkage service is being provided to a user, when business X, which has made a contract with user A, accesses the intermediation system, it is extremely difficult to illegally obtain the contents of the contract between user A and another business Y, ensuring high information security.

[0081] Furthermore, the intermediation system 10 is configured to carry out the contract procedures for linked services for new user A and user device 20A through the user terminal 14A, and performs a process to confirm the legitimacy of information using electronic signatures and JR-Code, thereby maintaining convenience for user A while reliably preventing impersonation and information tampering by malicious third parties.

[0082] <<<Second linked device management system 32 (electrical device management intermediary system 10)>>> Next, we will explain a second linked device management system 32 that is constructed using the same electrical device management intermediary system 10 as above. Here, the same components as those in the first linked device management system 18 are assigned the same reference numerals and will not be explained again.

[0083] As shown in Figure 8, the second collaborative equipment management system 32 is a system in which the intermediary system 10 is connected to user terminals 12, 14 and a business system 34 via a network, and the intermediary system 10 and the business system 34 work together to manage the operating status of user equipment 20, which is electrical equipment used in the user's home.

[0084] <<Configuration of second linked device management system 32>> The configuration of the second linked device management system 32 will be explained. The only difference from the first linked device management system 16 is the form of the business operator system 34, but the other configurations are the same. <Configuration of business operator system 34> The intermediation system 10 provides services in cooperation with multiple business operator systems 34. A business operator system 34X managed and operated by business operator X includes a business operator server 36X, but does not include the business operator application described above. Similarly, a business operator system 34Y managed and operated by business operator Y includes a business operator server 36Y, but does not include the business operator application described above.

[0085] <<Operation of the second linked device management system 32 (part 1)>> The operation of the second linked device management system 32 when it is providing a service to a user is the same as that of the first linked device management system 18, as indicated by the dashed arrows in FIG.

[0086] The second linked device management system 32 includes the present intermediation system 10, and thus achieves the same excellent effects as the first linked device management system 18 through the first and second features related to the information registered in the information database 26a of the intermediation server 26. That is, the first feature is that the linkage identification information is set to a different code for each business. Although the intermediation server 26 of the present intermediation system 10 can be accessed by multiple business servers 36, the linkage identification information is different for each business, making it extremely difficult for a specific business (e.g., business X) to fraudulently obtain the details of a contract between another business (e.g., business Y) and a user (e.g., user A). Therefore, the first feature ensures high information security.

[0087] The second feature is that dedicated identification information (dedicated user identification information and dedicated device identification information) with different content is provided in addition to the association identification information. The intermediation system 10 independently provides a service that enables remote control of the user device 20, and this service is executed using the dedicated identification information. Although the intermediation server 26 of the intermediation system 10 can be accessed by multiple business servers 36, the dedicated identification information is kept secret, making it extremely difficult for each business (e.g., business X, Y) to illegally obtain the contract details regarding remote control between the intermediation system 10 and a user (e.g., user A). Therefore, the second feature ensures high information security.

[0088] <<Operation of the second linked device management system 32 (part 2)>> Next, an example of the operation of the second linked device management system 32 and the present intermediation system 10 will be described when a new application is made to receive a linked service provided by the business operator system 32 and the present intermediation system 10. The operation described here is the flow of a process for registering identification information, etc. of a new user or user device 20 in the information database 26a, i.e., the flow of a new registration process, and four operation examples (operation examples 5 to 8) will be described in order below.

[0089] <Operation Example 5: Fifth Embodiment of Information Processing Method of the Present Invention> Operation example 5 will be described with reference to Figures 8 and 9. Operation example 5 has much in common with the above-described operation example 1, and steps S5-2 to S5-7 of operation example 5 correspond to steps S1-4 to S1-9 of operation example 1, respectively, and the processing content of these parts is the same. However, in the case of operation example 5, the business operator system 34 does not have a business operator application, so the flow up to when the service collaboration request is sent to the intermediation system 10 is different. Therefore, the explanation of operation example 5 will focus on the steps that have been changed because the business operator system 34 does not have a business operator application.

[0090] First, user A submits a new application to provider X to receive the linked service. The application may be made by telephone or by mailing an application document. Then, a person in charge at provider X enters the details of user A's application into provider server 36X.

[0091] The business operator server 36X then creates a DL-URL that includes information about user A, affixes a digital signature to it, and outputs the resulting two-dimensional code [step S5-1]. The two-dimensional code output in step S5-1 is delivered to user A, for example, by a person in charge at business operator X printing it on paper and mailing it. If user A agrees to access the intermediary application 30, he or she performs an operation to have the second user terminal 14A read the two-dimensional code. When the two-dimensional code is read (user A's consent is obtained), a deep link is executed, the intermediary application 30 is launched, and the information management application unit 30a receives the service linkage request included in the two-dimensional code.

[0092] Steps S5-2 to S5-7 performed after the information management application unit 30a receives the service cooperation request are the same as steps S1-4 to S1-9 in the first operational example.

[0093] In Operation Example 4, some of the processing content has changed from Operation Example 1 because the business operator system 34 does not have a business operator application, but the content of the steps executed by the present intermediation system 10 is almost the same, and high information security is ensured as in Operation Example 1. Therefore, it can be said that the information processing method executed by the present intermediation system 10 is an information processing method with extremely high versatility.

[0094] <Operation Example 6: Sixth Embodiment of Information Processing Method of the Present Invention> Operational Example 6 will be described with reference to Figures 8 and 10. Operational Example 6 has much in common with Operational Example 2 described above. Steps S6-1 and S6-2 of Operational Example 6 correspond to steps S2-2 and S2-3 of Operational Example 2, respectively, and steps S6-4 to S6-10 of Operational Example 6 correspond to steps S2-6 to S2-12 of Operational Example 2, respectively, and the processing content of these parts is the same. However, in Operational Example 6, the business operator system 34 does not have a business operator application, so the flow up to when a service collaboration request is sent to the intermediation system 10 is different. Therefore, the explanation of Operational Example 6 will focus on the steps that have been changed because the business operator system 34 does not have a business operator application.

[0095] First, user A makes a new application to receive a linked service from business operator X. This is the same as in operation example 5, and a person in charge at business operator X enters the details of user A's application into business operator server 36X.

[0096] After step S6-2 is executed, the business operator server 36X converts the received DL-URL and digital signature into a two-dimensional code and outputs it [step S6-3]. As in the case of operation example 5, the two-dimensional code output in step S6-3 is delivered to user A by a person in charge at business operator X, for example, by printing it on paper and mailing it. If user A agrees to access the intermediary application 30, user A performs an operation to have the second user terminal 14A read the two-dimensional code. When the two-dimensional code is read (user A's consent is obtained), a deep link is executed, the intermediary application 30 is launched, and the information management application unit 30a receives the service linkage request included in the two-dimensional code.

[0097] Steps S6-4 to S6-10 performed after the information management application unit 30a receives the service cooperation request are the same as steps S2-6 to S1-12 in the second operation example.

[0098] In Operation Example 5, some of the processing content has changed from Operation Example 2 because the business operator system 34 does not have a business operator application, but the content of the steps executed by the present intermediation system 10 is almost the same, and high information security is ensured as in Operation Example 2. Therefore, it can be said that the information processing method executed by the present intermediation system 10 is an information processing method with extremely high versatility.

[0099] <Operation Example 7: Seventh Embodiment of Information Processing Method of the Present Invention> Operational Example 7 will be described with reference to Figures 8 and 11. Operational Example 7 has much in common with Operational Example 3 described above. Steps S7-1 and S7-2 of Operational Example 7 correspond to steps S3-2 and S3-3 of Operational Example 3, respectively, and steps S7-4 to S7-9 of Operational Example 7 correspond to steps S3-6 to S3-11 of Operational Example 3, respectively, and the processing content of these parts is the same. However, in Operational Example 7, the business operator system 34 does not have a business operator application, so the flow up to when a service collaboration request is sent to the intermediation system 10 is different. Therefore, the explanation of Operational Example 7 will focus on the steps that have been changed because the business operator system 34 does not have a business operator application.

[0100] First, user A makes a new application to receive a linked service from business operator X. This is the same as in operation example 5, and a person in charge at business operator X enters the details of user A's application into business operator server 36X.

[0101] After step S7-2 is executed, the business operator server 36X creates a DL-URL incorporating the received JR-Code, converts it into a two-dimensional code, and outputs it [step S7-3]. As in operation example 5, the two-dimensional code output in step S7-3 is delivered to user A by a person in charge at business operator X, who prints it on paper and mails it. If user A agrees to access the intermediary application 30, user A performs an operation to have the second user terminal 14A read the two-dimensional code. When the two-dimensional code is read (user A's consent is obtained), a deep link is executed, the intermediary application 30 is launched, and the information management application unit 30a receives the service linkage request included in the two-dimensional code.

[0102] Steps S7-4 to S7-9 performed after the information management application unit 30a receives the service cooperation request are the same as steps S3-6 to S3-11 in the third operation example.

[0103] In Operation Example 7, some of the processing content has changed from Operation Example 3 because the business operator system 34 does not have a business operator application, but the content of the steps executed by the present intermediation system 10 is almost the same, and high information security is ensured as in Operation Example 3. Therefore, it can be said that the information processing method executed by the present intermediation system 10 is an information processing method with extremely high versatility.

[0104] <Operation Example 8: Eighth Embodiment of Information Processing Method of the Present Invention> Operational Example 8 will be described with reference to Figures 8 and 12. Operational Example 8 has much in common with Operational Example 4 described above. Steps S8-1 and S8-2 of Operational Example 8 correspond to steps S4-2 and S4-3, respectively, of Operational Example 4, and steps S8-4 to S8-10 of Operational Example 8 correspond to steps 4-6 to S4-12, respectively, of Operational Example 4, and the processing content of these parts is the same. However, in the case of Operational Example 8, the business operator system 34 does not have a business operator application, so the flow up to when a service collaboration request is sent to the intermediation system 10 is different. Therefore, Operational Example 8 will be described focusing on the steps that have been changed because the business operator system 34 does not have a business operator application.

[0105] First, user A makes a new application to receive a linked service from business operator X. This is the same as in operation example 5, and a person in charge at business operator X enters the details of user A's application into business operator server 36X.

[0106] After step S8-2 is executed, the business operator server 36X converts the received DL-URL and digital signature into a two-dimensional code and outputs it [step S8-3]. As in the case of operation example 5, the two-dimensional code output in step S8-3 is delivered to user A by a person in charge at business operator X, for example, by printing it on paper and mailing it. If user A agrees to access the intermediary application 30, user A performs an operation to have the second user terminal 14A read the two-dimensional code. When the two-dimensional code is read (user A's consent is obtained), a deep link is executed, the intermediary application 30 is launched, and the information management application unit 30a receives the service linkage request included in the two-dimensional code.

[0107] Steps S8-4 to S8-10 performed after the information management application unit 30a receives the service cooperation request are the same as steps S4-6 to S4-12 in the fourth operational example.

[0108] In Operation Example 8, some of the processing content has changed from Operation Example 4 because the business operator system 34 does not have a business operator application, but the content of the steps executed by the present intermediation system 10 is almost the same, and high information security is ensured as in Operation Example 4. Therefore, it can be said that the information processing method executed by the present intermediation system 10 is an information processing method with extremely high versatility.

[0109] <<Effects of Electrical Equipment Management Intermediation System 10>> As described above, according to the electrical equipment management intermediation system 10, the information processing method executed by the electrical equipment management intermediation system 10 (operation examples 5 to 8), and the information processing program for executing this information processing method, even if the intermediation system 10 is linked to an operator system 34 that does not have an operator application, it is possible to provide linked services without any problems, just as when the intermediation system 10 is linked to an operator system 18 that has an operator application, and similar excellent effects can be obtained.

[0110] <<<Third linked equipment management system 38 (electrical equipment management intermediary system 10)>>> Next, we will explain a third linked device management system 38 that is constructed using the same electrical device management intermediary system 10 as above. Here, the same components as those in the first linked device management system 18 are given the same reference numerals and will not be explained again.

[0111] As shown in FIG. 13, the second collaborative equipment management system 38 is a system in which the intermediary system 10 is connected to user terminals 12, 14, 46 and a business system 40 via a network, and the intermediary system 10 and the business system 40 work together to manage the operating status of user equipment 20, which is electrical equipment used in the user's home.

[0112] <<Configuration of the third linked device management system 38>> Regarding the configuration of the third linked device management system 38, it differs from the first linked device management system 16 in the form of the operator system 40X of operator X and in the fact that user A, one of multiple users, owns three user terminals 12A, 14A, and 46A; otherwise, the configuration is similar.

[0113] <Configuration of user terminals 12, 14, and 46> User A owns a first user terminal 12A, such as a personal computer installed in A's home, and second and third user terminals 14A, 46A, such as smartphones that he carries when he goes out. Of the second and third user terminals 14A, 46A, User A uses the second user terminal 14A to exchange information with the intermediation server 10, and the third user terminal 46A to exchange information with the provider system 40X.

[0114] <Configuration of business operator system 40> The intermediation system 10 provides services in cooperation with multiple business operator systems 40. The business operator system 40X, which is managed and operated by business operator X, is composed of a business operator server 42X and a business operator application 44X, which is a web application that runs on a web browser via a third user terminal 46 in this case.

[0115] <<Operation of the third linked device management system 38 (part 1)>> The operation of the third linked device management system 38 when it is providing a service to a user is the same as that of the first linked device management system 18, as indicated by the dashed arrows in FIG.

[0116] The third linked device management system 38 includes the present intermediation system 10, and thus achieves the same excellent effects as the first linked device management system 18 through the first and second features related to the information registered in the information database 26a of the intermediation server 26. Specifically, the first feature is that the linkage identification information is set to a different code for each business. Although the intermediation server 26 of the present intermediation system 10 can be accessed by multiple business servers 42, the linkage identification information is different for each business, making it extremely difficult for a specific business (e.g., business X) to fraudulently obtain the details of a contract between another business (e.g., business Y) and a user (e.g., user A). Therefore, the first feature ensures high information security.

[0117] The second feature is that dedicated identification information (dedicated user identification information and dedicated device identification information) with different content is provided in addition to the association identification information. The intermediation system 10 independently provides a service that enables remote control of the user device 20, and this service is executed using the dedicated identification information. Although the intermediation server 26 of the intermediation system 10 can be accessed by multiple business servers 42, the dedicated identification information is kept secret, making it extremely difficult for each business (e.g., business X, Y) to illegally obtain the contract details regarding remote control between the intermediation system 10 and a user (e.g., user A). Therefore, the second feature ensures high information security.

[0118] <<Operation of the third linked device management system 38 (part 2)>> Next, we will explain an example of the operation of the third linked device management system 38 and the present intermediation system 10 when there is a new application to receive a linked service provided by the business operator system 40 and the present intermediation system 10. The operation example (operation example 9) explained here is the process flow for registering identification information of a new user or user device in the information database 26a, i.e., the flow of a new registration process.

[0119] <Operation Example 9: Ninth Embodiment of Information Processing Method of the Present Invention> Operation example 9 will be described with reference to Figures 13 and 14. Operation example 9 has much in common with the above-mentioned operation example 5, and steps S9-2 to S9-8 of operation example 9 correspond to steps S5-1 to S5-7 of operation example 5, respectively, and the processing content of these parts is the same. However, in the case of operation example 9, the flow up to the output of the two-dimensional code is different because user A uses two user terminals 14A and 46A selectively. Therefore, the explanation of operation example 9 will focus on the steps that have been changed because user A uses two user terminals 14A and 46A selectively.

[0120] First, user A operates third user terminal 46A to access provider application 44X and makes a new application to receive an integrated service. Then, provider application 44X transmits the user's application details to provider server 42X and requests a DL-URL [step S9-1]. The DL-URL is a uniform resource locator (URL) used to launch intermediary application 30 by deep linking in a later step. Steps S9-2 to S9-8 after provider application unit 44X requests a DL-URL are the same as steps S5-1 to S5-7 in operation example 5.

[0121] In Operation Example 9, some of the processing content has changed from Operation Example 5 because User A uses two user terminals 14A and 46A selectively, but the content of the steps executed by the present intermediation system 10 is almost the same, and high information security is ensured as in Operation Example 5. Therefore, it can be said that the information processing method executed by the present intermediation system 10 is an information processing method with extremely high versatility.

[0122] <<Effects of Electrical Equipment Management Intermediation System 10>> As described above, according to the electrical equipment management intermediation system 10, the information processing method (operation example 9) executed by the electrical equipment management intermediation system 10, and the information processing program for executing this information processing method, even when user A uses two user terminals depending on the caller, the linked service can be provided without any problems, just as when the two user terminals are not used separately, and similar excellent effects can be obtained.

[0123] <<<Other embodiments, modifications, etc.>>> The electrical appliance management intermediation system, the information processing method executed by the electrical appliance management intermediation system, and the information processing program for executing the information processing method of the present invention are not limited to the above-described embodiments. For example, in the above-described electrical appliance management intermediation system 10, the information management application unit is provided only in the intermediation application 30 of the second user terminal 14A. However, the information management application unit may be provided in the intermediation application 28 of the first and second user terminals 12A and 14A. Furthermore, if user A does not have a portable user terminal (such as a smartphone), the information management application unit may be provided in the intermediation application 28 of the first user terminal 12A in A's home. Furthermore, in the system configuration diagrams of FIGS. 1, 8, and 13, the intermediation applications 28 and 30 are represented as native applications running in the user terminals 12A and 14A, respectively. However, the intermediation applications 28 and 30 may be web applications running on a web browser via the user terminals 12A and 14A.

[0124] In the above-described operation examples 1 to 9, a deep link is executed by user A performing a specific operation (tapping or scanning a two-dimensional code), and a service link request is sent to intermediary application 30. This method is preferable because it allows user A to easily complete the contract procedure. Of course, the same effect can be achieved by using universal links, app links, or the like. However, the method for sending the service link request to the intermediary application is not particularly limited, and may be changed to another method that does not use deep links or the like.

[0125] The electrical appliance management intermediary system of the present invention is characterized by its function of providing services between the provider system and the user, and is therefore referred to as an "intermediary system" for convenience, but it goes without saying that the system may also have a function of providing services to users on its own. For example, as shown in Fig. 1, the system may have a function that allows users to remotely control their home electrical appliances while they are away from home, or a function that provides users with actual power usage data for their home.

[0126] In addition, the electrical appliance management intermediation system of the present invention can be combined with various types of business operator systems, and the type of business operator system is not limited to that described in the above embodiment. For example, the business operator system 16X (business operator server 22X and business operator application 24X) shown in FIG. 1 is configured to automatically execute all processes on a computer system when performing the operations shown in Operation Examples 1 to 4. On the other hand, the business operator system 34X shown in FIG. 8 is configured to manually deliver the two-dimensional code to user A when performing the operations shown in Operation Examples 5 to 8. In this way, the business operator system may be configured to execute individual processes in accordance with prior agreements with the intermediation system, and may be configured so that some manual processes are manually executed by a person in charge.

[0127] Furthermore, the use of the electrical appliance management intermediation system is not particularly limited, and it may be used, for example, to promote efforts such as power aggregation and carbon offset, or for other purposes. The items of link-related information registered in the information database are determined depending on the use, the items of appliance management, etc., but at least the business operator identification information, the linking user identification information, and the linking appliance identification information are essential information, so the excellent effects of the present invention can be obtained regardless of the use. [Explanation of symbols]

[0128] 10 Electrical Equipment Management Intermediation System (this intermediation system) 12, 12A First user terminal 14, 14A Second user terminal 16, 16X, 16Y, 34, 34X, 34Y, 40, 40X, 40Y Operator System 18, 32, 38 Collaborative equipment management system 20,20A User equipment 22X, 22Y, 36X, 36Y, 42X, 42Y Business Server 24X, 24Y, 44X Business App 26 Intermediary Server 26a Information Database 26b Main Information Management Department 26c Equipment Directive Creation Department 28,30 Intermediary App 28a Device command execution application section 30a Information Management Application Department 30b Remote control application section 46, 46A Third User Terminal

Claims

1. An electrical appliance management intermediary system that is connected to a business operator's business system and a user's user terminal via a network and manages the operating status of user equipment that is electrical appliances used in a user's home in cooperation with the business operator system, The intermediation system is comprised of an intermediation server that exchanges information with the provider system, and an intermediation app that is application software used through the user terminal, that exchanges information with the user device, and that provides services in cooperation with the intermediation server; The intermediation server includes an information database in which a plurality of pieces of information, including linkage-related information shared between the provider system and the intermediation system for linking the two, are registered in association with the user, a main information management unit that manages the information database, and a device command creation unit that, when receiving a provider request from the provider system, creates a device command for the user device that is the target of the provider request based on the linkage-related information; the intermediary application includes an information management application unit that executes a process of supporting the registration of the link-related information in the information database and a process of extracting specific information from the information database, and a device command execution application unit that is a block that controls or monitors the operating status of the user device, or both, and that, when the device command creation unit creates the device command, executes a process on the target user device in accordance with the device command; An electrical equipment management intermediation system characterized in that the collaboration-related information includes at least collaboration user identification information set for each of the businesses to identify the user, collaboration device identification information set for each of the businesses to identify the user device, and business identification information to identify the business.

2. When the intermediary system receives a service linkage request from the business system, the request includes a request to start a service for the new user and information about the user, the information management application unit notifies the user terminal of the new user to request permission to respond to the service cooperation request; The electrical equipment management intermediation system of claim 1, wherein the main information management unit, when the user's consent is obtained, performs a process of registering in the information database the collaboration-related information, including the collaboration user identification information and the collaboration device identification information for the user, which information does not overlap with existing information set between other operator systems and registered in the information database, and also performs a process of notifying the operator system that the service collaboration request has been approved, or a process of sending the collaboration-related information, including the collaboration user identification information and the collaboration device identification information, to the operator system.

3. According to a prior agreement with the business operator, the service collaboration request transmitted from the business operator system is transmitted to the information management application unit with a digital signature generated based on the service collaboration request attached thereto; When the information management application unit receives the service collaboration request and the digital signature, the main information management unit verifies the digital signature to determine the validity of the service collaboration request; The electrical equipment management intermediation system of claim 2, wherein when the legitimacy of the service collaboration request is confirmed, the information management application unit notifies the user terminal of the new user requesting permission to respond to the service collaboration request.

4. In accordance with a prior agreement with the business operator, the service collaboration request transmitted by the business operator system is composed of a main collaboration request transmitted to the main information management unit of the intermediation server and a secondary collaboration request transmitted to the information management application unit after the main collaboration request, the main collaboration request including information about the new user, and the secondary collaboration request including a business collaboration code issued by the intermediation system, When the main information management unit receives the main collaboration request, it issues the business collaboration code and transmits it to the business system. When the information management application unit receives the secondary collaboration request, it verifies the business collaboration code included in the received secondary collaboration request to determine the legitimacy of the service collaboration request. The electrical equipment management intermediation system of claim 2, wherein when the legitimacy of the service collaboration request is confirmed, the information management application unit notifies the user terminal of the new user requesting permission to respond to the service collaboration request.

5. In a case where, in accordance with a prior agreement with the business operator, the linkage user identification information and the linkage device identification information for the new user are to be issued by the intermediation system, the main information management unit, when obtaining permission from the user to respond to the service collaboration request, issues the respective pieces of information about the new user, registers the information in the information database, and transmits the issued pieces of information to the business operator system; In a case where, in accordance with a prior agreement with the business operator, the business operator issues the information on the user identification information for linking and the device identification information for linking for the new user and includes the information in the service link request, The electrical equipment management intermediation system of claim 2, wherein when the main information management unit receives each piece of information from the operator system, it determines that the received information does not overlap with existing information set up with other operator systems and registered in the information database, and if the user's consent is obtained to respond to the service collaboration request, it registers the information in the information database.

6. In addition to the link-related information, the information database registers at least identification information uniquely used by the intermediation system, dedicated user identification information different from the link-use user identification information for identifying the user, and dedicated device identification information uniquely used by the intermediation system, dedicated device identification information different from the link-use user device identification information for identifying the user device; An electrical equipment management intermediation system as described in any one of claims 1 to 5, wherein when the main information management unit becomes able to register the linked user identification information and linked device identification information of a new user in the information database, it issues the corresponding dedicated user identification information and dedicated device identification information and registers them in the information database.

7. When a service content presentation request is received from the user through the user terminal, An electrical equipment management intermediation system as described in any one of claims 1 to 5, wherein the information management application unit extracts all or part of the collaboration-related information related to the user from the information database and transmits it to the user terminal of the user.

8. An information processing method executed by an electrical appliance management intermediary system that is connected to a business operator system of a business operator and a user terminal of a user via a network and manages the operating status of a user device that is an electrical appliance used in a user's home in cooperation with the business operator system, comprising: The intermediation system is comprised of an intermediation server that exchanges information with the provider system, and an intermediation app that is application software used through the user terminal, that exchanges information with the user device, and that provides services in cooperation with the intermediation server; The intermediation server is provided with an information database in which a plurality of pieces of information, including linkage-related information shared between the business operator system and the intermediation system for linking the two, are registered in association with the user, and the linkage-related information includes at least linkage user identification information set for each business operator for identifying the user, linkage device identification information set for each business operator for identifying the user device, and business identification information for identifying the business operator; a link permission request step in which, when the intermediary system receives from the provider system a service link request including a request to start a service for the new user and information about the user, the intermediary application notifies the user terminal of the new user to request permission to respond to the service link request; an association identification information registration step in which, when the association permission request step is performed and permission is obtained, the intermediary server registers, in the information database, the association-related information including each piece of information of the association user identification information and the association device identification information of the new user, the each piece of information not overlapping with existing information set between the other business system and registered in the information database; An information processing method characterized in that, when the collaboration permission request step is performed and permission is obtained, the intermediary server notifies the operator system that the service collaboration request has been approved, or executes a user permission notification step in which the collaboration-related information including the collaboration user identification information and the collaboration device identification information is sent to the operator system.

9. According to a prior agreement with the business operator, the service collaboration request transmitted from the business operator system is transmitted to the information management application unit with a digital signature generated based on the service collaboration request attached thereto; Upon receiving the service collaboration request and the digital signature from the provider system, the intermediary server executes a collaboration request verification step of verifying the digital signature to determine the validity of the service collaboration request; 9. The information processing method according to claim 8, wherein when the service collaboration request is determined to be a valid request in the collaboration request verification step, the collaboration permission request step is executed for the service collaboration request.

10. In accordance with a prior agreement with the business operator, the service collaboration request transmitted from the business operator system is composed of a primary collaboration request transmitted to the intermediation server and a secondary collaboration request transmitted to the intermediary application after the primary collaboration request, the primary collaboration request includes information about the new user, and the secondary collaboration request includes a business collaboration code issued by the intermediation system, When the primary link request is received from the business operator system, the intermediary server executes a business operator link code transmission step of issuing the business operator link code and transmitting it to the business operator system; Upon receiving the secondary collaboration request from the business operator system, the intermediary server executes a collaboration request verification step of verifying the business operator collaboration code included in the received secondary collaboration request to determine the validity of the service collaboration request; 9. The information processing method according to claim 8, wherein when the service collaboration request is determined to be a valid request in the collaboration request verification step, the collaboration permission request step is executed for the service collaboration request.

11. In a case where, in accordance with a prior agreement with the business operator, the linkage user identification information and the linkage device identification information for the new user are to be issued by the intermediation system, When the linkage permission request step is executed and the user's permission is obtained, the intermediary server executes a linkage identification information issuing step of issuing each piece of information about the new user, and then executes the linkage identification information registration step and the user permission notification step of transmitting each piece of information issued in the linkage identification information issuing step to the business system; In a case where, in accordance with a prior agreement with the business operator, the information on the user identification information for cooperation and the device identification information for cooperation for the new user is issued by the business operator and is included in the service cooperation request, 9. An information processing method according to claim 8, wherein when the user's consent is obtained by executing the linkage permission request step, if it is determined in the linkage identification information registration step that the information received from the operator system does not overlap with existing information set between other operator systems and registered in the information database, the information is registered in the information database, and then the user consent notification step is executed.

12. An information processing method as described in claim 8, wherein when the linkage identification information registration step becomes executable, the intermediary server executes a dedicated identification information issuance and registration step in which the intermediary server issues dedicated user identification information, which is identification information used uniquely in the intermediary system and is different from the linkage user identification information to identify the user, and dedicated device identification information, which is identification information used uniquely in the intermediary system and is different from the linkage device identification information to identify the user device, and registers them in the information database.

13. 13. An information processing program comprising programs for executing each step of the information processing method according to claim 8, for causing a computer system to execute the method.

Images