Management device, management system, management method, and program

Abstract

To improve the usability of digital certificates that prove affiliation with an organization. [Solution] The system comprises a reception unit that receives applications for the issuance of digital certificates, and a certificate issuing unit that, in response to the issuance applications received by the reception unit, issues hierarchical digital certificates that prove affiliation with sub-organizations formed within the organization based on certificates that prove affiliation with the organization.

Description

Technical Field

[0001] The present invention relates to a management device, a management system, a management method, and a program.

Background Art

[0002] Conventionally, there is a technology related to digital certificates that prove affiliation with an organization. For example, Patent Document 1 discloses a technology capable of improving the reliability of digital student identification cards.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of Invention

Problems to be Solved by the Invention

[0004] However, the above-described conventional technology has room for improvement from the perspective of convenience. Specifically, with the conventional technology, although a user can obtain a digital certificate indicating affiliation with an organization, the certificate does not prove affiliation with a community (sub-organization) formed within that organization.

[0005] For example, in an organization such as a school, communities such as student councils and club activities are formed, and members belonging to each community carry out various activities such as participating in competitions. Such activities include not only those that all students affiliated with the school can optionally participate in, but also those for which only members belonging to a specific community such as a student council or a club activity have participation eligibility. In cases where only members belonging to the community have participation eligibility, it is more convenient to be able to prove not only affiliation with the school, but also affiliation with a community such as the student council or club activity of that school. Furthermore, for example, a company may grant specific personnel access rights to certain electronic information. In such cases, these rights are generally applicable only to the company's internal systems and do not serve as proof to external third parties.

[0006] In view of the above-mentioned problems, the object of the present invention is to provide a management device, a management system, a management method, and a program that can improve the convenience of digital certificates that prove affiliation with an organization. [Means for solving the problem]

[0007] To solve the above-mentioned problems, a management device according to one aspect of the present invention comprises a reception unit that receives applications for the issuance of digital certificates, and a certificate issuing unit that, in response to the issuance applications received by the reception unit, issues hierarchical digital certificates that prove affiliation with sub-organizations formed within the organization based on certificates that prove affiliation with the organization.

[0008] A management system according to one aspect of the present invention comprises the management device described above and a member terminal that is communicatively connected to the management device and transmits the issuance application to the management device.

[0009] A management method according to one aspect of the present invention is a management method performed by a computer which is a management device, wherein a reception unit receives an application for the issuance of a digital certificate, and a certificate issuing unit, in response to the issuance application received by the reception unit, issues a hierarchical digital certificate that proves affiliation with a sub-organization formed within the organization based on a certificate that proves affiliation with the organization.

[0010] A program according to one aspect of the present invention is a program that causes a computer, which is a management device, to receive an application for the issuance of a digital certificate, and, in response to the received application for issuance, causes the computer to issue a hierarchical digital certificate that proves membership in a sub-organization formed within the organization based on a certificate that proves membership in the organization. [Effects of the Invention]

[0011] According to the present invention, the convenience of digital certificates that prove affiliation with an organization can be improved. [Brief explanation of the drawing]

[0012] [Figure 1] This is a block diagram showing an example configuration of the management system 100 according to the embodiment. [Figure 2] This figure shows an example of an organizational hierarchical structure according to the embodiment. [Figure 3] This is a block diagram showing an example configuration of the certificate management server 10 according to the embodiment. [Figure 4] This is a diagram illustrating the management information 120 according to the embodiment. [Figure 5] This is a diagram illustrating the issuance of a higher-level digital certificate according to the embodiment. [Figure 6] This is a sequence diagram showing an example of the issuance process (organization-led) for a hierarchical digital certificate according to the embodiment. [Figure 7] This is a sequence diagram showing an example of the issuance process (member-led) for a hierarchical digital certificate according to the embodiment. [Figure 8] This is a sequence diagram showing an example of the issuance process (external linkage type) for a hierarchical digital certificate according to the embodiment. [Figure 9] This is a sequence diagram showing an example of the issuance process (external linkage type) for a hierarchical digital certificate according to the embodiment. [Figure 10] This figure shows an example of a screen displayed on the employee terminal 20 according to the embodiment. [Figure 11] This figure shows an example of a screen displayed on the employee terminal 20 according to the embodiment. [Figure 12] This figure shows an example of a screen displayed on the employee terminal 20 according to the embodiment. [Figure 13] This figure shows an example of a screen displayed on the employee terminal 20 according to the embodiment. [Figure 14] This figure shows an example of a screen displayed on the operator terminal 30 according to the embodiment. [Figure 15]This is a diagram illustrating an example of a screen displayed on the operator terminal 30 according to the embodiment. [Figure 16] This is a diagram illustrating an example of a screen displayed on the operator terminal 30 according to the embodiment. [Figure 17] This is a diagram illustrating an example of a screen displayed on the operator terminal 30 according to the embodiment. [Figure 18] This is a diagram illustrating an example of a hierarchical image according to the embodiment. [Modes for Carrying Out the Invention]

[0013] Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

[0014] (Regarding the management system 100) The management system 100 according to the present embodiment will be described with reference to FIG. 1. FIG. 1 is a block diagram illustrating a configuration example of the management system 100 according to the embodiment. The management system 100 includes a certificate management server 10, an affiliated person terminal 20, an operator terminal 30, and a verifier terminal 40.

[0015] In the management system 100, the certificate management server 10, the affiliated person terminal 20, the operator terminal 30, and the verifier terminal 40 are communicably connected via a communication network NW.

[0016] The management system 100 is a system for managing certificates issued to affiliated persons belonging to an organization. The certificate herein certifies affiliation with an organization, and is, for example, a student ID card issued by a school organization, an employee ID card issued by a corporate organization, or the like. Further, the certificate in the present embodiment is a digital certificate that is an electronic certificate, and more specifically, is a VC (Verifiable Credentials).

[0017] The business terminal 30 is a computer managed by the business operator corresponding to the organization. The business terminal 30 performs tasks related to certificate issuance via the certificate management server 10. As the business terminal 30, for example, in a business operator such as a school organization, a terminal device operated by a person in charge of general affairs related to certificate issuance, such as a PC (personal computer), server, tablet terminal, etc., can be applied.

[0018] The member terminal 20 is a computer operated by a member (user) belonging to the organization. The member terminal 20 obtains certificates issued by the certificate management server 10. As the member terminal 20, for example, a terminal device operated by a student belonging to a school organization, such as a PC, smartphone, mobile phone, or tablet device, can be used.

[0019] In the example shown in Figure 1, one user terminal 20 is provided in the management system 100. However, it is common for an organization to have multiple users. Therefore, although omitted in Figure 1, it is typical for the management system 100 to have multiple user terminals 20 corresponding to the number of users belonging to the organization.

[0020] The verifier terminal 40 is a computer managed by the service provider that provides services to the user. The verifier terminal 40 verifies the certificate provided from the affiliate terminal 20. As the verifier terminal 40, for example, a terminal device operated by the service provider that provides services to the user, such as a PC or tablet terminal, can be used.

[0021] Here, the services provided to users are those that allow users to receive certain benefits, such as access permits, instructions, or guidance, by proving their affiliation with an organization, services or treatment that they would not be able to receive if they were not affiliated with the organization. Examples of services provided to users include services that provide means of transportation such as trains, buses, and airplanes, or services that provide goods such as retail stores and restaurants. Some of these services offer discounts, so-called student discounts, that reduce fares, book prices, and food and beverage prices for users who prove they are students (belong to a school organization). When a user requests a service using such a student discount, the verifier terminal 40 verifies the certificate presented by the user, and if it can verify that the certificate presented by the user is genuine, that is, a valid student ID issued by a school organization, it provides the student discount service requested by the user.

[0022] The certificate management server 10 is a computer that executes processes related to the issuance of digital certificates and manages the issued digital certificates. As part of the processes related to digital certificates, the certificate management server 10 performs tasks such as issuing, providing, verifying, and renewing digital certificates.

[0023] (Regarding the issuance of digital certificates) The certificate management server 10 issues digital certificates in response to requests from organizations. Specifically, in response to requests from organizations, it issues digital certificates to members of those organizations that prove their membership in the organization. For example, the certificate management server 10 issues a digital student ID card to a student belonging to a school, in response to a request from a business terminal 30 corresponding to a school organization, to prove that the student belongs to that school. The certificate management server 10 stores, for example, information that associates student attribute information with information related to the student's identity verification, as management information 120, which will be described later. The information related to identity verification is, for example, information indicating that identity verification has been performed through online identity verification (eKYC: electronic Know Your Customer) or the Japanese Public Key Infrastructure (JPKI). The certificate management server 10 displays the digital student ID card issued to the user on the affiliate terminal 20 in response to the user's operation on the terminal 20. The digital student ID card displayed on the affiliate terminal 20 includes, for example, student attribute information such as student ID number, name, and date of birth, as well as information related to the student ID card, such as the issuance date and expiration date, and is an image showing the school name and seal, along with text such as "I certify that the above person is a student of this school."

[0024] (Regarding the provision of digital certificates) The certificate management server 10 generates a VP (Verifiable Presentation). The VP is a VC converted into a format for presenting the certificate content to the verifier. For example, a user operates the student terminal 20 and requests the certificate management server 10 to generate a VP (Vision Certificate) to present to the verifier. The certificate management server 10 generates a VP based on the student's attribute information linked to the digital student ID card, in response to the user's request. The user sends the VP generated by the certificate management server 10 to the verifier terminal 40 via the student terminal 20 or the certificate management server 10. The verifier terminal 40 verifies the VP notified by the user. This allows the user to prove to the verifier that they are a student. Here, the certificate management server 10 uses zero-knowledge proof technology to provide the minimum personal information necessary for the verifier to verify the information, while avoiding the provision of unnecessary information. Zero-knowledge proof is a method of communication that allows the "true nature" of information to be proven without disclosing the information itself over an information network. For example, if a verifier wants to verify that "the user is a student," they can generate a VP (Value Proposition) that includes only the information necessary to verify that "the user is a student," and exclude information that is not necessarily required to verify that "the user is a student," such as the name of the school the user belongs to, their grade level, and student ID number. This helps to prevent the unnecessary disclosure of personal information.

[0025] The certificate management server 10 may be configured to generate a VP (Vision Certificate) that combines all or part of the information certified in each of several different digital certificates. For example, if a user wants to prove to a verifier that they are a student and have a driver's license, the certificate management server 10 generates a VP that combines information to prove that the user is a student, extracted from a first digital certificate corresponding to a student ID, and information to prove that the user has a driver's license, extracted from a second digital certificate corresponding to a driver's license. This allows the user to easily generate an original VP that corresponds to the verification items requested by the verifier, without having to go through the trouble of obtaining certificates from multiple affiliation and qualification issuers themselves, or combining them and submitting them to the verifier.

[0026] (Regarding the verification of digital certificates) The certificate management server 10, in response to a request from a verifier, verifies that the certificate to be verified has not been tampered with and that the VP (Virtual Property) was presented by the user who should possess the digital certificate. Technologies used for this verification include, for example, distributed ledger technology used in the VC (Virtual Certificate) verification function, digital signature technologies, and DID (Decentralized Identifiers). Alternatively, the certificate management server 10 may verify whether the VP was presented by the user who should possess the digital certificate by performing online identity verification or using a public personal authentication service.

[0027] (Regarding the renewal of digital certificates) The certificate management server 10 updates issued digital certificates upon request from an organization or user. For example, when an organization updates its member information due to a student advancing to higher education or graduating at the end of the academic year or reaching a set deadline, the certificate management server 10 updates the issued digital certificates according to the updated information. In this case, if a student graduates, the organization may issue a graduation certificate by updating the digital student ID card that the student possessed before graduation. Alternatively, if a user's status changes, such as by dropping out or taking a leave of absence, the certificate management server 10 updates the issued digital certificate according to the changes. When the certificate management server 10 updates an issued digital certificate, it sends the update details to the employee terminals 20 and the business terminals 30, notifying the organization and users that the digital certificate has been updated.

[0028] (Regarding processing of other digital certificates) The certificate management server 10 may be configured to respond to inquiries from users, such as inquiries regarding viewing, checking the details of, renewing, or reissuing digital certificates held by the user. Furthermore, the certificate management server 10 may be configured to notify the member terminal 20 of the information necessary for verification and request the user to obtain a digital certificate related to the information necessary for verification if the user does not possess a digital certificate that proves the information necessary for verification.

[0029] (Regarding the issues) As described above, the certificate management server 10 is configured to prove that a user belongs to an organization by performing processing related to digital certificates. However, conventional processing related to digital certificates did not prove that communities (small organizations) formed within an organization belong to that organization.

[0030] Figure 2 shows an example of the hierarchical structure of an organization according to this embodiment. In this figure, the school as an organization (TOPPAN High School) is comprised of numerous communities (smaller organizations) such as the student council, the track and field club, and voluntary groups. Furthermore, within individual smaller organizations such as the track and field club, teams (even lower-level organizations) are formed, such as members participating in competitions and members registered for rookie competitions. These smaller organizations, or teams, are comprised of students belonging to the organization (TOPPAN High School). However, simply issuing a digital student ID that proves membership in the organization (TOPPAN High School) does not allow the digital student ID to prove which of the student council, track and field club, or voluntary group the student belongs to. Moreover, even if it is known that a student belongs to one of these smaller organizations, the digital student ID cannot prove whether that smaller organization belongs to the organization (TOPPAN High School).

[0031] One possible solution is for communities (small organizations) to independently generate digital certificates proving their affiliation with the larger organization. However, since the larger organization may not always provide individual certificates for the affiliation of every single small organization formed within it, this can make it difficult to prove membership to the larger organization. One possible solution to this problem is to request proof of membership in a community formed within an organization each time it becomes necessary to do so, or to reissue digital certificates proving membership in the organization and its communities by changing the database managed by the organization. However, this is cumbersome and not very convenient.

[0032] As a countermeasure, the management system 100 of this embodiment is designed to issue hierarchical digital certificates that prove that a sub-organization belongs to an organization, based on a digital certificate (higher-level digital certificate) that proves affiliation with the parent organization. In this case, the management system 100 arranges the digital certificates issued to users in a hierarchical structure, with a higher-level digital certificate and hierarchical digital certificates placed below it. This allows linking the affiliation of an organization certified by a higher-level digital certificate with the certification details of a hierarchical digital certificate, making it easy for smaller organizations to prove their affiliation with a larger organization. Moreover, by creating a hierarchical structure for digital certificates, it is only necessary to issue a hierarchical digital certificate and link it to the higher-level digital certificate as a smaller organization is formed, eliminating the need to change the higher-level digital certificate. Therefore, organizations do not need to change their higher-level digital certificates every time a smaller organization is formed, abolished, or merged, thus avoiding increasing the workload for organizations involved in updating digital certificates.

[0033] Furthermore, the management system 100 allows the authorization setting unit 132 to issue hierarchical digital certificates that prove that a team formed within a small organization belongs to that small organization, and by extension, to a higher-level organization. In this case as well, the management system 100 ensures that the digital certificates issued to users have a hierarchical structure. Specifically, the hierarchical digital certificate that proves affiliation with a team formed within a sub-organization whose affiliation is proven by the hierarchical digital certificate (first hierarchical digital certificate) is designated as the second hierarchical digital certificate. This allows the affiliation with the sub-organization proven by the first hierarchical digital certificate to be linked to the content proven by the second hierarchical digital certificate, similar to the hierarchical structure of higher-level digital certificates and hierarchical digital certificates, making it easy to prove that a team belongs to a sub-organization.

[0034] Such a hierarchical structure allows for the placement of even lower-level hierarchical digital certificates. By linking it to the hierarchical digital certificate of the group to which it belongs (small organization, team, etc.), it becomes easy to prove that the issued hierarchical digital certificate belongs to that group (small organization, team, etc.).

[0035] Furthermore, the management system 100 allows organizations or users to be granted the authority to issue hierarchical digital certificates and the authority to edit the contents of hierarchical digital certificates. This enables organizations or users to issue and edit hierarchical digital certificates. Therefore, while organizations can manage the issuance and editing of hierarchical digital certificates for smaller organizations that should be managed by the organization, users can freely issue and edit hierarchical digital certificates for which they have been granted issuance authority, thus preventing an unnecessary increase in the organization's workload.

[0036] Furthermore, the management system 100 allows for setting approval levels, such as whether organizational approval is required when issuing hierarchical digital certificates. Specifically, it is possible to set approval levels such as requiring approval from upper management (e.g., the principal or chairman of the board) when issuing hierarchical digital certificates for school-approved small organizations, requiring approval from middle management (e.g., the homeroom teacher) for small organizations such as temporarily formed action groups, and not requiring approval from the school organization for student-organized friendship groups. This allows organizations to track the issuance status of hierarchical digital certificates for small organizations they should manage, while not requiring approval for small organizations outside their management scope, thus preventing an unnecessary increase in the organization's workload.

[0037] Thus, in the management system 100 of this embodiment, the process for issuing hierarchical digital certificates is devised to improve user convenience by issuing hierarchical digital certificates, while preventing the organization's workload from increasing unnecessarily. As a result, the convenience of digital certificates that prove affiliation with an organization can be improved without increasing the organization's workload.

[0038] (Regarding Certificate Management Server 10) Figure 3 is a block diagram showing an example configuration of a certificate management server 10 according to an embodiment. The certificate management server 10 includes, for example, a communication unit 11, a storage unit 12, and a control unit 13.

[0039] The communication unit 11 has the function of sending and receiving various types of information. The communication unit 11 communicates with member terminals 20, carrier terminals 30, and verifier terminals 40 via the communication network NW.

[0040] The storage unit 12 has the function of storing various types of information. The storage unit 12 is composed of storage media provided as hardware by the certificate management server 10, such as an HDD (Hard Disk Drive), SSD (Solid State Drive), flash memory, EEPROM (Electrically Erasable Programmable Read Only Memory), RAM (Random Access read / write Memory), ROM (Read Only Memory), or any combination of these storage media.

[0041] The storage unit 12 stores management information 120. The management information 120 includes information registered by an organization or user when issuing digital certificates (including higher-level digital certificates and hierarchical digital certificates), and information regarding issued digital certificates.

[0042] Figure 4 is a diagram illustrating the management information 120 according to the embodiment. This diagram shows an example in which the management information 120 stored in the storage unit 12 of the certificate management server 10 is displayed on the management screen of the business terminal 30. In this diagram, the management information 120 includes personal information and organizational information. Personal information refers to information about the individual user to whom a digital certificate has been issued, and includes information corresponding to items such as student ID number, name, date of birth, issue date, expiration date, personal photograph, and status. The student ID number stores the user's student ID number. The name stores the user's name (in both kanji and kana). The date of birth stores the user's date of birth. The issue date stores the date the digital certificate was issued to the user. The expiration date stores the expiration date of the digital certificate issued to the user. The personal photograph stores the image file of the user's face as displayed on the digital certificate issued to the user. The status stores the user's status as an organization member, such as whether they are currently attending school or on leave of absence. Organization information is information about the organization whose affiliation is verified in the digital certificate, and includes information corresponding to items such as issuance type, issuing organization, organization name, organization address, organization logo, organization seal, card design, and authority / qualification management. Issuance type is the type of digital certificate issued by the organization, and stores types such as student ID, qualification certificate, etc. Issuing organization stores information indicating the department in the organization that is responsible for the issuance of digital certificates. Organization name stores the name of the organization that issued the digital certificate. Organization address stores the address of the organization that issued the digital certificate. Organization logo stores image information of an image showing the logo of the organization that issued the digital certificate. Organization seal stores image information of an image showing the seal of the organization that issued the digital certificate. Card design stores image information of an image showing the card design used when displaying the digital certificate image on the member terminal 20, etc.

[0043] The permissions and credentials management section stores information indicating the permissions granted to the user (including publishing and editing permissions). For example, if a user is the student council president (a small organization) in a school, they can grant student council members the position of vice president or student council member, with the approval of student council members and advisors. In this case, the user has the editing authority to set student council members for each position, such as vice president and student council member, in the hierarchical digital certificate of the student council (small organization). For example, if a user is the head of a track and field club (a small organization) within a school, they can, with the approval of the advisor, assign the position of vice-head to members of the track and field club or grant them eligibility to participate in competitions. In this case, the user has the editing authority to set members for positions such as vice-head and competition participants in the hierarchical digital certificate of the track and field club (small organization). For example, if a user is a regular student in a school, they can form communities such as a close-knit group of friends in their class. In this case, the user has the authority to issue hierarchical digital certificates for their close-knit group (small organization).

[0044] Returning to the explanation of Figure 3, the control unit 13 has the function of controlling the overall operation of the certificate management server 10. The control unit 13 is realized, for example, by causing the CPU (Central Processing Unit) or GPU (Graphics Processing Unit) provided as hardware in the certificate management server 10 to execute a program. The control unit 13 includes, for example, a reception unit 130, a certificate issuance unit 131, an authorization setting unit 132, a certificate management unit 133, and a display control unit 134.

[0045] The reception unit 130 accepts applications for the issuance of digital certificates. Specifically, the reception unit 130 accepts various applications for processing related to digital certificates from organizations or users. More specifically, the reception unit 130 accepts applications for the issuance of higher-level digital certificates, editing applications, renewal applications, etc. from the business terminal 30 or the person in charge of issuing digital certificates in the department responsible for issuing digital certificates within the organization. The reception unit 130 also accepts applications for the issuance of hierarchical digital certificates linked to lower levels of already issued higher-level digital certificates, authorization granting applications, editing applications, renewal applications, etc. from the employee terminal 20 or the business terminal 30. If the received content is an issuance application, the management information 120 outputs the received content to the certificate issuance unit 131. If the received content is an authorization granting application, the management information 120 outputs the received content to the authorization setting unit 132. If the received content is an editing application or renewal application for an already issued digital certificate, the management information 120 outputs the received content to the certificate management unit 133.

[0046] The certificate issuing unit 131 issues digital certificates. The certificate issuing unit 131 issues higher-level digital certificates in response to an issuance request from a business terminal 30 or a person in charge of issuing digital certificates within an organization.

[0047] Figure 5 is a diagram illustrating the issuance of a higher-level digital certificate according to the embodiment. This diagram shows the processing flow when an application for the issuance of a higher-level digital certificate is made manually. However, it is not limited to this, and the processing related to the application for the issuance of a higher-level digital certificate may also be performed through communication between the certificate management server 10 and the business terminal 30. In this diagram, the organization is a school (TOPPAN High School). The person responsible for issuing digital certificates within the organization is the person in the high school's general affairs department (high school general affairs).

[0048] First, the high school's administrative staff provides the personal information of the high school students to the employee in charge of the service provider that handles the issuance of digital certificates (the service provider that manages the certificate management server 10), and applies for the issuance of digital student IDs (higher-level digital certificates) to the students corresponding to the personal information provided (Step S10). The employee in charge registers the student's personal information provided by the high school's general affairs department as management information 120 in the storage unit 12 of the certificate management server 10, and performs pre-registration for the issuance of a digital student ID (higher-level digital certificate) (step S11). The high school's administrative staff checks the management screen of the business terminal 30, for example, the management screen shown in Figure 3, to confirm that the submitted information is correctly reflected on the management screen and to approve it. The high school's administrative staff also sets approval levels for the issuance of hierarchical digital certificates for students (users) who have been issued a digital student ID (higher-level digital certificate), and sets issuance permissions or editing permissions as needed (step S12).

[0049] Furthermore, the certificate issuing unit 131 issues hierarchical digital certificates. Specifically, in response to an issuance application received by the reception unit 130, the certificate issuing unit 131 issues a hierarchical digital certificate that proves affiliation with a sub-organization formed within an organization, based on a higher-level digital certificate (a certificate that proves affiliation with an organization).

[0050] The certificate issuing unit 131 issues hierarchical digital certificates based on the information requested by the organization. Alternatively, the certificate issuing unit 131 issues hierarchical digital certificates based on the information requested by a user who has the authority to issue hierarchical digital certificates. For example, at TOPPAN High School, when various communities (small organizations) such as the student council, track and field club, and brass band club are established, the high school's general affairs department submits an issuance request from the business terminal 30 to the certificate management server 10 to request the issuance of hierarchical digital certificates for the newly established small organizations. This issuance request is received by the reception unit 130, and the received information is output to the certificate issuance unit 131. The certificate issuance unit 131 issues a hierarchical digital certificate according to the application information obtained via the reception unit 130, and notifies the user's affiliated terminal 20 that the hierarchical digital certificate has been issued.

[0051] The certificate issuing unit 131 stores the details of the issuance request from the organization or a user with issuance authority in the management information 120 of the storage unit 12, and notifies the member terminals 20 of the user who issued the hierarchical digital certificate that the hierarchical digital certificate has been issued. For example, at TOPPAN High School, when a student creates a community (small organization) such as a friendship group, that student submits an application to the certificate management server 10 from their member terminal 20 to request the issuance of a hierarchical digital certificate for the friendship group. This application is received by the reception unit 130, and the received information is output to the certificate issuance unit 131. The certificate issuance unit 131 issues a hierarchical digital certificate according to the application information obtained via the reception unit 130, and notifies the member terminal 20 of the target user that the hierarchical digital certificate has been issued.

[0052] Returning to the explanation in Figure 3, the authorization setting unit 132 sets the authority to issue or edit hierarchical digital certificates in response to a grant request from the organization or user.

[0053] For example, in an application to issue a digital student ID (higher-level digital certificate), or after the issuance of such a digital student ID, the high school's administrative staff submits an application to the certificate management server 10 from the business terminal 30 to grant the authority to issue hierarchical digital certificates linked to these digital student IDs (higher-level digital certificates), specifically for small organizations formed by general students that are not managed by the school, such as friendship groups. This application is received by the reception unit 130, and the received information is output to the authority setting unit 132. The authority setting unit 132 sets the authority to issue hierarchical digital certificates according to the application information obtained via the reception unit 130, and notifies the user's affiliated terminal 20 that the authority to issue hierarchical digital certificates has been granted.

[0054] Alternatively, in an application to issue hierarchical digital certificates for various communities (small organizations) such as the student council, track and field club, and brass band club, or after these hierarchical digital certificates have been issued, the high school general affairs department applies to the certificate management server 10 from the business terminal 30 to grant editing privileges for these hierarchical digital certificates to users designated by the organization, such as the student council president and vice president, the track and field club advisor and club president, and the brass band club advisor and club president. This application is received by the reception unit 130, and the received information is output to the authorization setting unit 132. The authorization setting unit 132 sets editing privileges for the hierarchical digital certificates according to the application information obtained via the reception unit 130, and notifies the member terminals 20 of the users to whom privileges have been set that editing privileges for the hierarchical digital certificates have been granted.

[0055] Furthermore, the authorization setting unit 132 may grant editing privileges to users who have the issuance privileges for hierarchical digital certificates issued by the certificate issuance unit 131. In this case, when a hierarchical digital certificate is issued by the certificate issuance unit 131 in response to an issuance request from a user with issuance authority, the authority setting unit 132 sets editing authority for the hierarchical digital certificate issued by the certificate issuance unit 131 to the user with issuance authority.

[0056] Furthermore, the authorization setting unit 132 may grant the authority to issue a second hierarchical digital certificate that proves affiliation with a team formed within a small organization (a small organization located below the small organization) to a user who has the authority to edit the first hierarchical digital certificate that proves affiliation with that small organization. For example, if a small organization is a track and field club, the hierarchical digital certificate that proves affiliation with the small organization is the first hierarchical digital certificate. Users who have editing privileges to edit the first hierarchical digital certificate are, for example, the advisor or manager of the track and field club. As users with editing privileges, the track and field club advisor or manager can edit the information (edit the contents of the first tiered digital certificate) to assign track and field club members to positions such as vice-manager or manager. In small organizations like track and field clubs, teams are sometimes formed when participating in competitions. If the advisor or manager of the track and field club, who has editing privileges, is granted the authority to issue a second-tier digital certificate, then when such a team is formed, the advisor or manager can conveniently issue a second-tier digital certificate proving that the team formed within the track and field club belongs to the club. In this case, when a hierarchical digital certificate is issued by the certificate issuance unit 131 in response to an issuance request from an organization or a user with issuance authority, the authorization setting unit 132 sets the issuance authority for the user with issuance authority to issue a hierarchical digital certificate (second hierarchical digital certificate) that will be linked to the hierarchical digital certificate (first hierarchical digital certificate) issued in this instance.

[0057] The Certificate Management Unit 133 performs functions related to digital certificates other than those performed by the Reception Unit 130, Certificate Issuance Unit 131, and Authority Setting Unit 132, such as providing, verifying, renewing, responding to inquiries, and notifying information necessary for verification of digital certificates. The Certificate Management Unit 133 can be operated using the method described above, and its explanation is omitted here.

[0058] The display control unit 134 controls the images displayed on the employee terminal 20 and the business terminal 30. For example, the display control unit 134 displays a management screen, as shown in Figure 3, on the business terminal 30. The display control unit 134 also displays a list of digital certificates issued to users on the employee terminal 20.

[0059] Figure 6 is a sequence diagram showing an example of the issuance process (organization-led) of a hierarchical digital certificate according to the embodiment. Figure 6 shows the process flow when a hierarchical digital certificate is issued in response to an issuance request from an organization. This figure assumes that a higher-level digital certificate has already been issued, as shown in Figure 5, based on a prior issuance request for the higher-level digital certificate.

[0060] The operator terminal 30 notifies the certificate management server 10 of an application for the issuance of a hierarchical VC (hierarchical digital certificate) for a community (small organization) such as a student council or club activity formed within the organization (step S100). The certificate management server 10 creates the hierarchical VC based on the application information indicated in the issuance application notified by the operator terminal 30 (step S101). Furthermore, the business terminal 30 notifies the certificate management server 10 of an application (application for granting authority) to grant editing authority for the hierarchical VC for which issuance was requested in step S100, and / or issuance authority for lower-level hierarchical VCs to a designated user (such as an advisor or department head) (step S102). A lower-level hierarchical VC is a second hierarchical digital certificate linked to the hierarchical VC (first hierarchical digital certificate) for which issuance was requested in step S100. The certificate management server 10 sets editing privileges and / or issuance privileges for lower-level hierarchical VCs in the hierarchical VC created in step 101, based on the application information indicated in the authorization request notified from the business terminal 30 (step S103). The certificate management server 10 notifies the member terminal 20 that it has issued a hierarchical VC, that is, a hierarchical VC issued in step S101 and for which editing privileges and / or issuance privileges have been granted in step S103 (step S104). The member terminal 20 notifies the certificate management server 10 of the request for issuance of a lower-level hierarchical VC based on the issuance authority of the hierarchical VC that was notified of issuance in step S104 (step S105). The certificate management server 10 creates the lower-level hierarchical VC based on the application information indicated in the issuance request notified from the member terminal 20 (step S106). The certificate management server 10 notifies the member terminal 20 that the lower-level hierarchical VC has been issued (step S107). Furthermore, the employee terminal 20 notifies the certificate management server 10 of various inquiries regarding digital certificates, such as requests to view a list of VCs (digital certificates) or VC details, or requests to renew or reissue VCs (step S108). The certificate management server 10 responds to the inquiries notified from the employee terminal 20 (step S109).

[0061] Here, we will explain the process that takes place when the status of a user holding a digital certificate changes.

[0062] Steps S110-S113 explain using the example of a student who has a digital student ID (higher-level digital certificate) and has graduated. The carrier terminal 30 notifies the certificate management server 10 that the user's status has changed and submits an application to change the digital certificate held by the user (status change application) (step S110). Based on the application information indicated in the status change application notified by the carrier terminal 30, the certificate management server 10 modifies the management information 120 associated with the issued digital certificate and reflects the modifications in the issued digital certificate (step S111). The certificate management server 10 notifies the member terminal 20 that the status of the issued digital certificate has changed (step S112). The certificate management server 10 also notifies the carrier terminal 30 that the processing related to the status change applied for in step S110 has been completed (step S113).

[0063] Steps S114-S114 explain using the example of a student who holds a digital student ID (higher-level digital certificate) taking a leave of absence or dropping out of school. The business terminal 30 notifies the certificate management server 10 that the user's status has changed and submits a request to change the digital certificate held by the user (status change request) (step S114). Based on the request information indicated in the status change request notified by the business terminal 30, the certificate management server 10 modifies the management information 120 associated with the issued digital certificate and reflects the modifications in the issued digital certificate (step S115). For example, the certificate management server 10 changes the status when a student takes a leave of absence or withdraws from school and also revokes the permissions granted to the digital certificate (editing permission for hierarchical VCs and issuance permission for lower-level hierarchical VCs). The certificate management server 10 notifies the member terminal 20 that the status of an issued digital certificate has been changed (step S116). The certificate management server 10 also notifies the business terminal 30 that the processing related to the status change requested in step S110 has been completed (step S117).

[0064] Figure 7 is a sequence diagram showing an example of the issuance process (member-led) of a hierarchical digital certificate according to the embodiment. Figure 7 shows the process flow when a hierarchical digital certificate is issued in response to a user's issuance request. This figure assumes that the higher-level digital certificate has already been issued, as shown in Figure 5, based on a prior issuance request for the higher-level digital certificate.

[0065] The user's terminal 20 notifies the certificate management server 10 of a request to issue a hierarchical VC for a community (small organization) such as a close-knit group created by the user (step S200). The certificate management server 10 creates the hierarchical VC based on the application information indicated in the issuance request notified by the user's terminal 20 (step S201). Furthermore, the member terminal 20 notifies the certificate management server 10 of an application (application for permission granting) to grant editing rights for the hierarchical VC that was requested to be issued in step S200, and / or the right to issue lower-level hierarchical VCs, to a specified user (such as another member of the close-knit group) (step 202). The certificate management server 10 sets editing privileges for the hierarchical VC created in step 201, and / or issuing privileges for lower-level hierarchical VCs, based on the application information indicated in the authorization request notified from the member terminal 20 (step S203). At this point, the certificate management server 10 may also notify the member terminal 20 that it has issued a hierarchical VC, that is, a hierarchical VC issued in step S201 and to which editing privileges and / or issuing privileges have been granted in step S203. The member terminal 20 notifies the certificate management server 10 of the request for issuance of a lower-level hierarchical VC based on the issuance authority of the user who has the authority to issue the hierarchical VC issued in steps S201 and S203 (step S204). The certificate management server 10 creates the lower-level hierarchical VC based on the application information indicated in the issuance request notified from the member terminal 20 (step S205). The certificate management server 10 notifies the member terminal 20 that the lower-level hierarchical VC has been issued (step S206). Furthermore, the employee terminal 20 notifies the certificate management server 10 of various inquiries regarding digital certificates, such as requests to view a list of VCs (digital certificates) or VC details, or requests to renew or reissue VCs (step S207). The certificate management server 10 responds to the inquiries notified from the employee terminal 20 (step S208).

[0066] Figure 8 is a sequence diagram showing an example of the issuance process (external linkage type) of a hierarchical digital certificate according to the embodiment. Figure 8 shows the process flow when a hierarchical digital certificate is issued in response to an application from an external organization, in this case the Japan Association of Athletics Federations (JAAF), and when the issued hierarchical digital certificate is linked to the organization (TOPPAN High School). This diagram assumes that the higher-level digital certificate has already been issued, as an application for such a certificate has been submitted in advance, as shown in Figure 5. Furthermore, it is assumed that the hierarchical VC (Virtual Certificate) for the sub-organization (TOPPAN High School Track and Field Club) has already been issued within the organization (TOPPAN High School).

[0067] The verifier terminal 40 notifies the certificate management server 10 of its request to issue a hierarchical VC for an athletics competition (small organization) to be held by an external organization (Japan Association of Athletics Federations) (step 300). The certificate management server 10 creates a hierarchical VC for the athletics competition based on the application information indicated in the issuance request notified by the verifier terminal 40 (step S301). Furthermore, the verifier terminal 40 notifies the certificate management server 10 of an application for the issuance of a hierarchical VC (Virtual Certificate) with entry slots set for the 400m relay race (a sub-organization formed one level below the sub-organization) to be held at the track and field competition (a sub-organization) (step S302). The certificate management server 10 creates a hierarchical VC for the 400m relay race based on the application information indicated in the issuance application notified by the verifier terminal 40 (step S303).

[0068] Furthermore, the verifier terminal 40 notifies the certificate management server 10 of an application for the issuance of a hierarchical VC (Virtual Certificate) that sets the entry slots for each school's participants (small organizations formed two levels below the small organizations) in the 400m relay competition (step S304). Based on the application information indicated in the issuance application notified by the verifier terminal 40, the certificate management server 10 creates a hierarchical VC for registering each school's participants in the 400m relay competition (step S305). The certificate management server 10 links the hierarchical VCs for participant registration created in step S305 and notifies the member terminal 20 that the hierarchical VC for participant registration has been issued (step S306).

[0069] Then, the business terminal 30 notifies the certificate management server 10 of an application (application for permission) to grant editing rights for the hierarchical VC that was requested to be issued in step S304, and / or the right to issue lower-level hierarchical VCs, to a designated user (school representative such as the track and field club advisor of each school) (step S307). Based on the application information indicated in the application for permission to be granted notified from the verifier terminal 40, the certificate management server 10 sets the editing rights for the hierarchical VC created in step 304, and / or the right to issue lower-level hierarchical VCs (step S308). The certificate management server 10 notifies the affiliated terminal 20 that editing rights for the hierarchical VC for participant registration have been granted (step S309).

[0070] Users with editing privileges can set up the participant slots provided for participant registration in the hierarchical VC for participant registration, assigning students from TOPPAN High School to participate. The member's terminal 20 links the edited content to the hierarchical VC for participant registration, notifies the certificate management server 10 of the edited content, and also notifies the certificate management server 10 of the creation request to create a VP (step S310).

[0071] The VP submitted here is used to prove that a student is eligible to participate in the 400m relay competition. For example, it is a VP that proves that a participating student belongs to a track and field club (small organization) and that the track and field club to which the participating student belongs is a club activity of TOPPAN High School. The certificate management server 10 creates a Certificate Value (VP) based on the application information indicated in the creation request notified from the member terminal 20. For example, the certificate management server 10 creates a VP that combines the following information for a participating student: information proving that the student belongs to TOPPAN High School, information proving that the student belongs to the track and field club, and information proving that the track and field club is a club activity belonging to TOPPAN High School. The certificate management server 10 registers (saves) the created VP in the management information 120 (step S311).

[0072] The certificate management server 10 receives the edits made to the hierarchical VC for participant registration made by the member terminal 20 and notifies the verifier terminal 40 of the edits (step S312).

[0073] If it becomes necessary to edit the hierarchical VC (Vertical Classification) for participant registration, such as by adding or changing students participating in the 400m relay race, a user with editing privileges will edit the hierarchical VC for participant registration. The affiliate terminal 20 links the edited content to the hierarchical VC for participant registration and notifies the certificate management server 10 of the edited content (step S313). The certificate management server 10 determines whether the time when the edited content is notified from the affiliate terminal 20 is within the registration period for students participating in the 400m relay competition (step S314). If it is within the period, the certificate management server 10 reflects the edited content in the management information 120 and notifies the verifier terminal 40 of the edited content (step S315). On the other hand, if it is after the period, the certificate management server 10 rejects the edit and notifies the affiliate terminal 20 of this.

[0074] An external organization (Japan Association of Athletics Federations) representative will check the participating students set in the hierarchical VC (Voluntary Classification) for participant registration, as well as their VP (Voluntary Classification), to determine whether the student is eligible to participate. If the student is eligible, their participation in the 400m relay competition will be approved. The verifier terminal 40 notifies the certificate management server 10 whether or not the participation of participating students configured in the hierarchical VC has been approved (step S316).

[0075] The certificate management server 10 stores the information indicating whether or not approval has been granted, which has been notified from the verifier terminal 40, in the management information 120, and reflects the stored information (information indicating whether or not approval has been granted) in the hierarchical VC for participant registration (step S317). The certificate management server 10 notifies the affiliated terminal 20 that the information indicating whether or not participation has been approved has been reflected in the hierarchical VC for participant registration (step S318).

[0076] Furthermore, the employee terminal 20 notifies the certificate management server 10 of various inquiries regarding digital certificates, such as requests to view a list of VCs (digital certificates) or VC details, or requests to renew or reissue VCs (step S319). The certificate management server 10 responds to the inquiries notified from the employee terminal 20 (step S320).

[0077] Figure 9 is a sequence diagram showing an example of the issuance process (external linkage type) of a hierarchical digital certificate according to the embodiment. Figure 9 shows the flow of processes that take place on the day of the competition and after the competition has ended, following the completion of the series of processes shown in Figure 8 (the process of registering participants for the 400m relay competition).

[0078] On the day of the competition, when entering the competition venue, the user (participating student) operates the affiliated terminal 20 to present the VC, which is then transmitted to the verifier terminal 40 via the certificate management server 10 (step S400). The VC presented here includes a hierarchical VC for participant registration in the 400m relay competition. In this hierarchical VC for participant registration, the user (participating student) is set as a participant in the competition. The VC presented here may include the participating student's digital student ID (higher-level digital certificate). Furthermore, the VC presented here may include facial photographs registered in management information 120. Alternatively, instead of the VC presented here, the member terminal 20 may display a two-dimensional code indicating a link to the VP. The VP indicated by this link is the VP created by the certificate management server 10 in step S311 of Figure 8 and registered in the management information 120. The person in charge at the external organization (Japan Association of Athletics Federations) performs an operation to read the two-dimensional code displayed on the member terminal 20 with the verifier terminal 40. The verifier terminal 40 accesses the link embedded in the read two-dimensional code to refer to the VP and confirms that the participating student is a student who has been pre-registered to participate, based on the referred VP.

[0079] In step S400, the verifier terminal 40 requests the certificate management server 10 to verify the authenticity of the VC notified by the member terminal 20 (step S401). The certificate management server 10 verifies the VC notified by the verifier terminal 40, confirms that the certificate content to be verified has not been tampered with (step S402), and notifies the verifier terminal 40 of the verification result (step S403).

[0080] After the tournament ends, the verifier terminal 40 notifies the user holding the hierarchical VC for participant registration that the status has changed due to the end of the tournament, and notifies the certificate management server 10 of an application to change the hierarchical VC held by the user (status change application) (step S405). Based on the application information indicated in the status change application notified by the verifier terminal 40, the certificate management server 10 modifies the management information 120 associated with the issued VC (hierarchical VC for participant registration) and reflects the modified items in the hierarchical VC for participant registration (step S406). The certificate management server 10 notifies the affiliate terminal 20 that the status of the hierarchical VC for participant registration has changed (step S407). The certificate management server 10 also notifies the verifier terminal 40 that the processing related to the status change applied for in step S405 has been completed (step S408).

[0081] Here, we will explain examples of screens displayed on the employee terminal 20 using Figures 10 to 13. Figures 10 to 13 are diagrams showing examples of screens displayed on the employee terminal 20 according to this embodiment.

[0082] Figures 10 and 11 show examples of screens displayed on the member's terminal 20 when a user creates a hierarchical digital certificate.

[0083] Figure 10 shows an example of a VC creation screen. In this figure, the image displayed on the member's terminal 20 includes an input field for entering the community name, a selection field for selecting a role, an input field for setting the issue date, an input field for setting the expiration date, and a specification field for specifying the image of the card icon. The input field for entering the community name is where you enter the name of the small organization to which the hierarchical digital certificate to be created will be associated. The selection field for selecting the role is where you select the role of the user with issuance authority in the small organization to which the hierarchical digital certificate to be created will be associated (whether they are an administrator or a member of the hierarchical digital certificate). The input field for setting the issue date is where you enter the date on which the hierarchical digital certificate to be created will be issued. The input field for setting the expiration date is where you enter the expiration date of the hierarchical digital certificate to be created. The field for specifying the card icon image is where you specify the image of the card icon to be used when displaying the hierarchical digital certificate to be created. Organizations or users with issuing authority can create hierarchical digital certificates for their communities (small organizations) by setting the name of the community (small organization) and other details according to the creation screen shown in Figure 10.

[0084] Figure 11 shows an example of the VC management screen. This figure shows that a hierarchical digital certificate for a small organization has been generated with the community name "26th Student Council". The figure also includes edit and delete operation buttons, as well as a registration field for registering member names. Organizations or users with editing privileges can register, edit, and delete members belonging to a community (small organization) in the hierarchical digital certificate of that small organization, following the management screen shown in Figure 11.

[0085] Figure 12 shows an example of the display screen shown on the member's terminal 20 when presenting a hierarchical digital certificate to a verifier. In this figure, the member's terminal 20 displays a hierarchical digital certificate for the TOPPAN High School Student Council in a card design. This hierarchical digital certificate indicates that the suborganization is the "Student Council" and that Hanako Toppan is a member of the Student Council. Furthermore, this diagram includes a selection button for "QR (registered trademark) display." When this selection button is pressed, a two-dimensional code containing the information shown in the hierarchical digital certificate is displayed, either alongside the hierarchical digital certificate on the card design, or in its place.

[0086] Figure 13 shows an example of a user's digital certificates (including higher-level digital certificates and hierarchical digital certificates) being displayed on the user's terminal 20. In this figure, the digital certificate for "TOPPAN High School" corresponds to the higher-level digital certificate. Below this higher-level digital certificate, the hierarchical digital certificates for the smaller organizations belonging to "TOPPAN High School," such as the "Student Council," "High School Athletic Meet Relay Members," and "The Fun Friends Club," are displayed.

[0087] In this diagram, when the higher-level digital certificate, which is the digital certificate for "TOPPAN High School," is selected, scrolling horizontally will display higher-level digital certificates from other organizations, such as certificates from other issuing organizations. If hierarchical digital certificates are issued below the higher-level digital certificate corresponding to this other issuing organization certificate, those hierarchical digital certificates will be displayed. For example, if the issuing organization is an organization that issues certificates for various qualifications, the higher-level digital certificate showing that the user belongs to that issuing organization will be displayed, and below that, hierarchical digital certificates corresponding to various qualifications and certificates obtained by the user under that issuing organization will be displayed.

[0088] Here, examples of screens displayed on the carrier terminal 30 will be explained using Figures 14 to 17. Figures 14 to 17 are diagrams showing examples of screens displayed on the carrier terminal 30 according to this embodiment.

[0089] Figure 14 is similar to Figure 4 and shows an example of the management screen displayed on the operator terminal 30 when an organization creates a higher-level digital certificate or a hierarchical digital certificate. In this figure, operating button B1 set in the Permissions and Credentials Management section allows you to set permissions (issuance permission and / or editing permission) for the user to whom the higher-level digital certificate or hierarchical digital certificate is issued.

[0090] Figure 15 shows an example of the screen displayed on the operator terminal 30 when button B1, shown in Figure 14, is operated. This figure shows the hierarchical digital certificate issued to the user (Hanako Toppan) shown in Figure 14, and the contents set in that hierarchical digital certificate. Here, Figure 14 shows that a hierarchical digital certificate for the track and field club has been issued to the user, and that Hanako Toppan is set as the vice-captain of the track and field club on the hierarchical digital certificate. It also shows that the vice-captain of the track and field club has the authority to manage permissions and grant qualifications. Here, permission management refers to managing the authority to appoint and expel general members belonging to the track and field club, and the authority to appoint and expel students who have provisionally joined the track and field club. Furthermore, granting qualifications here refers to granting general members belonging to the track and field club the right to participate in events (such as track and field competitions). In this diagram, the "Permission Management" column is set to Execute button B2, and the "Entitlement" column is set to Execute button B3. By operating either Execute button B2 or B3, settings related to permission management or entitlement can be configured.

[0091] Figure 16 shows an example of the screen displayed on the operator terminal 30 when the execution button B2 shown in Figure 15 is operated. In this figure, a registration field is provided for registering club members by grade level. When the registration field is tapped, a search field for searching for students is displayed, and students found using the search field can be registered as track and field club members. In addition, by tapping the plus button located to the right of the registration field, a new registration field can be created, allowing the number of registered members to be increased.

[0092] Figure 17 shows an example of the screen displayed on the operator terminal 30 when the execution button B3 shown in Figure 15 is operated. In this figure, the event "3rd TOP Competition" is set, and participants can be registered for this competition. In this diagram, registration fields are provided for each of the short-distance and middle-distance events. Tapping a registration field displays a search field for finding students, allowing you to register students as participants. Additionally, tapping the plus button to the right of the registration field allows you to create a new registration field and increase the number of participants.

[0093] Figure 18 is a diagram illustrating an example of the hierarchy according to the embodiment. Part of this diagram overlaps with Figure 15. This diagram shows a list of hierarchical digital certificates issued to the user (Hanako Totsuban) shown in Figure 14. In this diagram, the user (Hanako Totsuban) shown in Figure 14 has been issued hierarchical digital certificates corresponding to the student council, the track and field club, and the optional group. Of these, the hierarchical digital certificate for the student council indicates that the user (Hanako Totsuban) shown in Figure 14 is set as a general student council member. The hierarchical digital certificate for the track and field club indicates that the user (Hanako Totsuban) shown in Figure 14 is set as the vice-captain. Furthermore, as an optional group, it is shown that the user (Hanako Totsuban) shown in Figure 14 has been issued hierarchical digital certificates for the close friends group, the school trip group, and the summer vacation amusement park group.

[0094] As described above, the certificate management server 10 (management device) according to this embodiment includes a reception unit 130 and a certificate issuing unit 131. The reception unit 130 receives applications for the issuance of digital certificates. The authorization setting unit 132, in response to the issuance application received by the reception unit 130, issues a hierarchical digital certificate that proves affiliation with a sub-organization formed within an organization, based on a certificate that proves affiliation with the organization. With this configuration, a hierarchical digital certificate that proves affiliation with a sub-organization formed within an organization can be issued in conjunction with a digital certificate that proves affiliation with the organization (higher-level digital certificate), and it is possible to show that a sub-organization belongs to the organization without changing or updating the higher-level digital certificate. Therefore, it is easy to prove that a user belonging to a sub-organization is indeed a member of the sub-organization, and that the sub-organization belongs to the organization.

[0095] Furthermore, in the certificate management server 10 according to this embodiment, sub-organizations are created by the organization. The reception unit 130 receives applications from the organization for the issuance of hierarchical digital certificates that prove affiliation with the sub-organization. The certificate issuing unit 131 issues hierarchical digital certificates in accordance with the issuance applications received by the reception unit 130. As a result, the certificate management server 10 according to this embodiment can issue hierarchical digital certificates that prove affiliation with the sub-organization, under the leadership of the organization.

[0096] Furthermore, the certificate management server 10 according to the embodiment further includes an authorization setting unit 132. The authorization setting unit 132 grants editing privileges to users designated by the organization to edit hierarchical digital certificates issued by the certificate issuance unit 131. As a result, the certificate management server 10 according to the embodiment can grant editing privileges for hierarchical digital certificates issued by the organization to users designated by the organization, and can appropriately manage the issuance and editing of hierarchical digital certificates.

[0097] Furthermore, in the certificate management server 10 according to this embodiment, sub-organizations are created by users belonging to the organization. The reception unit 130 receives applications from users belonging to the organization for the issuance of hierarchical digital certificates that prove membership in sub-organizations. The certificate issuing unit 131 issues hierarchical digital certificates in accordance with the issuance applications received by the reception unit 130. As a result, in the certificate management server 10 according to this embodiment, hierarchical digital certificates that prove membership in sub-organizations can be issued at the user's initiative, and the organization can avoid having to deal with the issuance of hierarchical digital certificates for sub-organizations that are not managed by the organization.

[0098] Furthermore, the certificate management server 10 according to this embodiment further includes an authorization setting unit 132. The authorization setting unit 132 grants the authority to issue hierarchical digital certificates based on a higher-level digital certificate (a higher-level digital certificate that proves affiliation with the organization) issued to a user belonging to the organization. The certificate issuance unit 131 issues a hierarchical digital certificate on the condition that the issuance application received by the reception unit 130 is an application from a user who has been granted issuance authority. As a result, the certificate management server 10 according to this embodiment can manage the system so that hierarchical digital certificates with unknown administrators are not issued by granting issuance authority.

[0099] Furthermore, in the certificate management server 10 according to this embodiment, the authorization setting unit 132 grants editing privileges to users who have issuance privileges to edit hierarchical digital certificates issued by the certificate issuance unit 131. This allows the certificate management server 10 according to this embodiment to enable the user who issued the hierarchical digital certificate to edit that hierarchical digital certificate, thereby improving convenience.

[0100] Furthermore, the certificate management server 10 according to the embodiment further includes an authorization setting unit 132. The authorization setting unit 132 grants the authority to issue hierarchical digital certificates that prove that a team formed in a suborganization corresponding to a hierarchical digital certificate issued by the certificate issuance unit 131 belongs to the suborganization. As a result, the certificate management server 10 according to the embodiment can link lower-level hierarchical digital certificates (second hierarchical digital certificates) under higher-level hierarchical digital certificates (first hierarchical digital certificates), thereby forming a multi-level hierarchical certificate tree.

[0101] Furthermore, the certificate management server 10 according to the embodiment further includes an authorization setting unit 132. The authorization setting unit 132 grants the authority to issue hierarchical digital certificates and sets the approval level required by the organization for issuing hierarchical digital certificates. As a result, the certificate management server 10 according to the embodiment can set the approval level required by the organization for issuing hierarchical digital certificates, along with the issuance authority, and can appropriately manage the issuance of hierarchical digital certificates.

[0102] Furthermore, the management system 100 according to this embodiment includes a certificate management server 10 and a member terminal 20. The member terminal 20 is connected to the certificate management server 10 (management device) so as to be able to communicate with it and sends issuance requests to the certificate management server 10. As a result, the management system 100 according to this embodiment achieves the effects described above.

[0103] The management system 100 and the certificate management server 10 in the above-described embodiment may be implemented in whole or in part by a computer. In that case, the program for implementing this function may be recorded on a computer-readable recording medium, and the program recorded on this recording medium may be loaded into the computer system and executed. The term "computer system" as used herein includes hardware such as the operating system and peripheral devices. Furthermore, "computer-readable recording media" refers to portable media such as flexible disks, magneto-optical disks, ROMs, and CD-ROMs, as well as storage devices such as hard disks built into computer systems. In addition, "computer-readable recording media" may also include those that dynamically hold programs for a short period of time, such as communication lines used when transmitting programs over networks such as the Internet or communication lines such as telephone lines, and those that hold programs for a certain period of time, such as volatile memory inside computer systems that act as servers or clients in such cases. Furthermore, the above program may be for the purpose of implementing some of the functions described above, or it may be for the purpose of implementing the above functions in combination with a program already recorded in the computer system, or it may be implemented using a programmable logic device such as an FPGA (Field Programmable Gate Array).

[0104] Although embodiments of this invention have been described in detail above with reference to the drawings, the specific configuration is not limited to those described above, and various design changes can be made without departing from the spirit of this invention. [Explanation of Symbols]

[0105] 10...Certificate management server, 20...Employee terminal 20, 30...Business operator terminal, 40...Verifier terminal, 11...Communication unit, 12...Storage unit, 13...Control unit, 130...Reception unit, 131...Certificate issuance unit, 132...Authority setting unit, 133...Certificate management unit, 134...Display control unit

Claims

1. The reception desk that accepts applications for the issuance of digital certificates, A certificate issuing unit, in response to the issuance application received by the aforementioned reception unit, issues a hierarchical digital certificate that proves affiliation with a sub-organization formed within the aforementioned organization based on a certificate proving affiliation with the aforementioned organization, A control device equipped with the following features.

2. The aforementioned suborganization was created by the aforementioned organization, The reception department receives the application from the organization for the issuance of the hierarchical digital certificate that proves affiliation with the sub-organization, The certificate issuing unit issues the hierarchical digital certificate in response to the issuance application received by the reception unit. The control device according to claim 1.

3. The system further includes a permission setting unit that grants editing privileges to users designated by the organization to edit the hierarchical digital certificate issued by the certificate issuing unit. The control device according to claim 2.

4. The aforementioned sub-organization is created by a user belonging to the aforementioned organization. The reception department receives the application for the issuance of the hierarchical digital certificate that proves membership in the sub-organization from a user belonging to the organization. The certificate issuing unit issues the hierarchical digital certificate in response to the issuance application received by the reception unit. The control device according to claim 1.

5. The system further includes an authorization setting unit that grants the authority to issue the hierarchical digital certificate based on a higher-level digital certificate issued to a user belonging to the said organization, which proves their affiliation with the said organization. The certificate issuing unit issues the hierarchical digital certificate on the condition that the issuance application received by the reception unit is from a user who has been granted the issuance authority. The control device according to claim 4.

6. The authority setting unit grants editing privileges to the user who has the issuance privileges to edit the hierarchical digital certificate issued by the certificate issuance unit. The control device according to claim 5.

7. The system further includes an authorization setting unit that grants issuance authority to issue hierarchical digital certificates corresponding to the hierarchical digital certificates issued by the certificate issuing unit, which certify that a team formed within the small organization belongs to the small organization. The control device according to claim 1.

8. The system further includes an authority setting unit that grants the authority to issue the aforementioned hierarchical digital certificate and sets the approval level by the organization for issuing the aforementioned hierarchical digital certificate. The control device according to claim 1.

9. The control device according to claim 1, A member's terminal that is connected to the management device in a communication manner and transmits the issuance request to the management device, A management system equipped with the following features.

10. A management method performed by a computer, which is a management device. The reception desk accepts applications for the issuance of digital certificates. The certificate issuing department, in response to the issuance application received by the reception department, issues a hierarchical digital certificate that proves affiliation with a sub-organization formed within the organization, based on a certificate that proves affiliation with the organization. Management method.

11. The computer, which is the management device, We accept applications for the issuance of digital certificates. In response to the aforementioned application for issuance, a hierarchical digital certificate is issued that proves affiliation with a sub-organization formed within the aforementioned organization, based on a certificate proving affiliation with the organization. program.

Images