Server device, control method for server device, and program

Abstract

Provided is a server device that improves convenience for users who desire delivery of luggage, and allows business operators that provide luggage delivery services to operate services without anxiety. This server device is provided with an acquisition means and a destination control means. The acquisition means acquires, from an entrant who checked luggage with an airline company at the time of departure, a credential landing permit issued to the entrant as verifiable credentials (VCs), and entrant information. The entrant information involves information about at least the entrant's name and place of stay among the information entered by the entrant into an online service that allows the entrant to submit information necessary for immigration procedures in advance. If an electronic signature attached to the credential landing permit is successfully verified, the destination control means generates luggage destination information on the basis of the information about the name and the place of stay included in the entrant information. The luggage destination information is information for sending the entrant's luggage that has been checked with the airline company to the entrant's place of stay. The destination control means outputs the generated luggage destination information.

Description

Server device, server device control method and storage medium

[0001] The present invention relates to a server device, a control method for a server device, and a storage medium.

[0002] There is technology for sending and receiving packages.

[0003] For example, Patent Document 1 describes a method for enabling a user to appropriately collect checked baggage at a desired time at an arrival airport. The baggage management method in Patent Document 1 includes a first step, a second step, and a third step. The first step detects a tag ID transmitted from a tag attached to the checked baggage before the user collects the checked baggage at the arrival airport. The second step obtains the user ID of the corresponding user from a member database based on the tag ID detected in the first step, and notifies the user terminal of the user associated with the user ID that the user's checked baggage has arrived at the arrival airport. The third step outputs an instruction to evacuate the user's checked baggage based on an instruction from the user via the user terminal in response to the notification.

[0004] Japanese Patent Application Laid-Open No. 2019-021149

[0005] There are services that deliver the luggage of entrants to their hotels. To use such services, users must enter the address of the hotel to which their luggage will be delivered. Entering an address can be a significant burden for users, especially foreigners such as inbound tourists.

[0006] In addition, businesses providing parcel delivery services may be hesitant to accept parcels with uncertain delivery destinations due to concerns about potential problems. In other words, delivery service businesses may only want to provide parcel delivery services to people who have entered the country after going through the proper procedures.

[0007] The technology disclosed in Patent Document 1 is a technology related to receiving packages, and therefore, even if the technology disclosed in Patent Document 1 is applied, the above problems cannot be solved.

[0008] The main purpose of the present invention is to provide a server device, a control method for a server device, and a storage medium that contribute to improving convenience for users who wish to have their packages delivered and enabling businesses that provide package delivery services to provide their services with peace of mind.

[0009] According to a first aspect of the present invention, there is provided a server device comprising: an acquisition means for acquiring, from an entrant who has checked their baggage with an airline at the time of departure, a credential landing permit issued to the entrant as a VC (Verifiable Credentials) and entrant information including at least information regarding the entrant's name and place of stay from information entered by the entrant into an online service that enables the entrant to submit information necessary for entry procedures in advance; and a destination control means for, if verification of the electronic signature affixed to the credential landing permit is successful, generating baggage destination information for sending the entrant's baggage checked with the airline to the entrant's place of stay based on the name and place of stay included in the entrant information, and outputting the generated baggage destination information.

[0010] According to a second aspect of the present invention, there is provided a method for controlling a server device, comprising: an acquisition step of acquiring, from an entrant who has checked their baggage with an airline at the time of departure, a credential landing permit issued to the entrant as a VC (Verifiable Credentials) and entrant information including at least information regarding the entrant's name and place of stay from information entered by the entrant into an online service that enables the entrant to submit information necessary for entry procedures in advance; and a destination control step of, if verification of the electronic signature attached to the credential landing permit is successful, generating baggage destination information for shipping the entrant's baggage checked with the airline to the entrant's place of stay based on the name and information regarding the place of stay included in the entrant information, and outputting the generated baggage destination information.

[0011] According to a third aspect of the present invention, there is provided a computer-readable storage medium storing programs for causing a computer mounted on a server device to execute the following operations: an acquisition process for acquiring, from an entrant who has checked their baggage with an airline at the time of departure, a credential landing permit issued to the entrant as a VC (Verifiable Credentials) and entrant information including at least the entrant's name and place of stay from among the information entered by the entrant into an online service that enables the entrant to submit information necessary for entry procedures in advance; and a destination control process for generating baggage destination information for shipping the entrant's baggage checked with the airline to the entrant's place of stay based on the name and place of stay included in the entrant information, if verification of the electronic signature affixed to the credential landing permit is successful, and outputting the generated baggage destination information.

[0012] According to each aspect of the present invention, a server device, a control method for a server device, and a storage medium are provided that contribute to improving convenience for users who wish to have their packages delivered and enabling businesses that provide package delivery services to provide services with peace of mind. Note that the effects of the present invention are not limited to those described above. The present invention may achieve other effects instead of or in addition to the effects described above.

[0013] FIG. 1 is a diagram illustrating an overview of an embodiment. FIG. 2 is a flowchart illustrating an overview of an operation of an embodiment. FIG. 3 is a diagram illustrating an example of a schematic configuration of an information processing system according to an embodiment of the present disclosure. FIG. 4 is a diagram illustrating an example of a display of an entrant terminal according to an embodiment of the present disclosure. FIG. 5 is a diagram illustrating an example of an operation of the information processing system according to an embodiment of the present disclosure. FIG. 6 is a diagram illustrating an example of an operation of the information processing system according to an embodiment of the present disclosure. FIG. 7 is a diagram illustrating an operation of the information processing system according to an embodiment of the present disclosure. FIG. 8 is a diagram illustrating an operation of the information processing system according to an embodiment of the present disclosure. FIG. 9 is a diagram illustrating an example of an operation of the information processing system according to an embodiment of the present disclosure. FIG. 10 is a diagram illustrating an example of a processing configuration of a server device according to an embodiment of the present disclosure. FIG. 11 is a diagram illustrating an example of a user management database according to an embodiment of the present disclosure. FIG. 12 is a diagram illustrating an example of a processing configuration of an entrant terminal according to an embodiment of the present disclosure. FIG. 13 is a flowchart illustrating an example of an operation of an acquisition control unit according to an embodiment of the present disclosure. FIG. 14 is a diagram illustrating an example of a processing configuration of a business operator terminal according to an embodiment of the present disclosure. FIG. 15 is a flowchart illustrating an example of an operation of a service provision control unit according to an embodiment of the present disclosure. FIG. 16 is a sequence diagram showing an example of operation of the information processing system according to an embodiment of the present disclosure. FIG. 17 is a sequence diagram showing an example of operation of the information processing system according to an embodiment of the present disclosure. FIG. 18 is a diagram showing an example of a configuration of the information processing system according to an embodiment of the present disclosure. FIG. 19 is a diagram showing an example of a processing configuration of a service server according to an embodiment of the present disclosure. FIG. 20 is a diagram showing an example of a reservation management database according to an embodiment of the present disclosure. FIG. 21 is a diagram for explaining operation of a service provision control unit according to an embodiment of the present disclosure. FIG. 22 is a diagram for explaining operation of an information processing system according to a modified example of an embodiment of the present disclosure. FIG. 23 is a diagram showing an example of a display of an entrant terminal according to a modified example of an embodiment of the present disclosure. FIG. 24 is a diagram showing an example of a hardware configuration of a server device according to the present disclosure. FIG. 25 is a diagram for explaining operation of the information processing system according to a modified example of an embodiment of the present disclosure. FIG. 26 is a diagram showing an example of a display of an entrant terminal according to a modified example of an embodiment of the present disclosure.

[0014] First, an overview of one embodiment will be described. Note that the reference numerals in the drawings are added to each element for convenience as an example to facilitate understanding, and the description of this overview is not intended to be limiting in any way. Furthermore, unless otherwise specified, the blocks shown in each drawing represent functional units, not hardware units. Connection lines between blocks in each drawing include both bidirectional and unidirectional lines. Unidirectional arrows are used to schematically indicate the flow of the main signal (data) and do not exclude bidirectionality. Note that in this specification and drawings, elements that can be similarly described may be assigned the same reference numerals to avoid redundant explanation.

[0015] A server device 100 according to one embodiment includes an acquisition unit 101 and a destination control unit 102 (see FIG. 1 ). The acquisition unit 101 acquires a credential landing permit issued as a verifiable credential (VC) and entrant information from an entrant who has checked their luggage with an airline upon departure (step S1 in FIG. 2 ). The entrant information includes at least the entrant's name and destination information, among the information entered by the entrant into an online service that allows the entrant to submit information required for immigration procedures in advance. If the destination control unit 102 successfully verifies the digital signature attached to the credential landing permit, it generates baggage destination information based on the name and destination information included in the entrant information (step S2). The baggage destination information is information for shipping the entrant's luggage checked with the airline to the entrant's destination. The destination control unit 102 outputs the generated baggage destination information (step S3).

[0016] A parcel delivery service provider provides parcel delivery services to users via the server device 100. The server device 100 acquires a credential landing permit, which is issued to entrants who have entered the country after going through official procedures, from entrants who wish to receive the service. The server device 100 verifies the acquired credential landing permit. If the server device 100 successfully verifies the credential landing permit, it determines that the entrant has a residence or place of stay within the country. The server device 100 sets such entrant as an eligible person for the parcel delivery service. As a result, the delivery service provider can provide the service to entrants with peace of mind.

[0017] Furthermore, the server device 100 generates information necessary for delivering packages based on the entrant information provided by the entrant. In other words, the entrant does not need to directly input the delivery address and other information into the server device 100. As a result, convenience for users (entrants) who wish to have their packages delivered is improved.

[0018] Specific embodiments will be described in more detail below with reference to the drawings.

[0019] First Embodiment The first embodiment will be described in more detail with reference to the drawings.

[0020] [System Configuration] Fig. 3 is a diagram illustrating an example of a schematic configuration of an information processing system according to an embodiment of the present disclosure. As shown in Fig. 3, the information processing system includes a management center, a delivery service provider, and an airport.

[0021] A management center is an organization or institution that manages and provides information to entrants, such as foreigners visiting Japan and Japanese people returning to their home countries. Management centers are managed and operated by voluntary organizations. For example, management centers are managed and operated by national public institutions or private businesses commissioned by the government.

[0022] The management center includes a server device 10. The server device 10 is a server that realizes the main functions of the management center. The server device 10 may be installed in the building of the management center, or may be installed on a network (on the cloud).

[0023] Delivery service providers are businesses that provide a service of shipping luggage of entrants to their destinations. The equipment and devices provided by delivery service providers will be described later.

[0024] A CIQ (Customs, Immigration, and Quarantine) inspection station 20 is installed within the airport. Immigrants (e.g., inbound passengers and returning residents) undergo inspections and screenings for customs, immigration, and quarantine at the CIQ inspection station 20. Once entrants have completed immigration procedures, including CIQ inspections, at the arrival airport, they are free to move around the country.

[0025] The entrant carries an entrant terminal 30 such as a smartphone.

[0026] The devices shown in FIG. 3 (server device 10, terminals installed in CIQ inspection center 20, etc.) are connected by wired or wireless communication means and are configured to be able to communicate with each other.

[0027] 3 is merely an example and is not intended to limit the scope of the present invention. For example, the system may include multiple server devices 10.

[0028] [Overall Operation] Next, an overall operation of the information processing system according to the first embodiment will be described.

[0029] <Preparing a Digital Wallet> The entrant's (user's) entrant terminal 30 is equipped with a digital wallet function. A digital wallet is an electronic information storage service that guarantees information security such as data integrity, reliability, and availability.

[0030] The user installs an application to realize a digital wallet on the entrant terminal 30 that the user possesses. By opening a digital wallet on the entrant terminal 30, the user can store various digital content on the entrant terminal 30, such as electronic money, identification documents such as passports and driver's licenses, various ticket information such as airline tickets and boarding passes, and vaccination certificates.

[0031] For example, the entrant terminal 30 stores digital content such as that shown in Fig. 4. The digital content stored in the entrant terminal 30 includes electronic money and official identification documents such as passports and driver's licenses.

[0032] <Pre-entry procedures and CIQ inspection> As mentioned above, all travelers must go through immigration procedures at the airport of arrival. These procedures include customs, immigration, and quarantine inspections.

[0033] Online services are available to reduce the burden of immigration procedures for visitors. Specifically, a service called "Visit Japan Web" is available at designated arrival airports. By using the Visit Japan Web service, visitors can submit information regarding quarantine, immigration inspection, and customs procedures online upon arrival.

[0034] Before leaving the country, an entrant (a person wishing to enter the country) operates the entrant terminal 30 to input information related to quarantine, immigration inspection, and customs application into the server device 10. In the following explanation, the information that the user (a person wishing to enter the country) inputs into the server device 10 to use the Visit Japan Web service will be referred to as "pre-registration information." The entrant terminal 30 transmits the pre-registration information to the server device 10 in response to the user's operation (see FIG. 5).

[0035] The pre-registration information includes name, gender, date of birth, address, telephone number, passport number, email address, biometric information (e.g., facial image), nationality, and information about the destination within the country (e.g., the name, address, and telephone number of the hotel where the person will be staying).

[0036] Examples of biometric information include data (features) calculated from physical characteristics unique to an individual, such as a face, fingerprint, voiceprint, veins, retina, or iris pattern. Alternatively, the biometric information may be image data such as a face image or fingerprint image. The biometric information may be any information that includes the user's physical characteristics. In the embodiment disclosed herein, a case where biometric information related to a person's "face" (a face image or features generated from a face image) is used will be described.

[0037] After completing the pre-registration information, users (those wishing to enter the country) board an aircraft and arrive at the arrival airport. The entrant then collects their checked baggage at the baggage claim table at the arrival airport. The entrant then undergoes customs inspection, immigration screening, and quarantine inspection.

[0038] <Issuance of Landing Permit> A landing permit stamp is issued to entrants (inbound passengers, etc.) who have successfully completed customs inspection, immigration screening, and quarantine inspection. Specifically, an authentication seal is affixed to the entrant's passport, and a landing permit stamp is printed on the authentication seal. In addition, the information contained in the landing permit stamp is printed on the authentication seal in the form of a two-dimensional barcode.

[0039] Once an entrant has obtained a landing permission stamp, they can request the Management Center to issue an electronic landing permit. In response to the entrant's request, the Management Center will issue verifiable credentials (VCs) as landing permits, the contents of which can be verified online. In the following explanation, landing permits issued as VCs will be referred to as "credential landing permits."

[0040] Prior to requesting the issuance of a credential landing permit, the entrant's entrant terminal 30 generates a pair of a public key and a private key. The entrant terminal 30 also generates a decentralized identifier (DID). The entrant terminal 30 registers the generated DID (user ID; holder ID) and public key in the blockchain (step S01 in FIG. 6).

[0041] Furthermore, the user's immigration terminal 30, while presenting the user ID, requests the issuer of the landing permit (control center) to issue a credential landing permit. Specifically, the user operates the immigration terminal 30 to photograph the two-dimensional barcode (two-dimensional barcode containing information about the landing permit stamp) affixed to the passport. The immigration terminal 30 then transmits a "landing permit issuance request" containing the photographed two-dimensional barcode to the server device 10 (step S02).

[0042] The server device 10 generates and stores in advance the DID (issuer ID), private key, and public key of the issuer.

[0043] Upon receiving the landing permit issuance request, the server device 10 generates a credential landing permit including the issuer ID and the user ID.

[0044] Specifically, the server device 10 generates a credential landing permit that includes metadata including the type of VC (landing permit), the name of the issuing organization (e.g., the Immigration Services Agency), the date and time of issue, etc., a main body of qualification information, and the issuer's public key information, electronic signature, etc. Note that the main body of qualification information describes specific information certified by the issuer (e.g., date of landing permit, expiration date of stay, status of residence, etc.).

[0045] The server device 10 transmits the generated credential landing permit to the entrant terminal 30 of the user (the user who will become the certificate holder; the person requesting the issuance of the certificate) (issuance of credential landing permit; step S03).

[0046] Furthermore, the server device 10 registers the issuer ID and the generated public key, etc. in the blockchain (step S04).

[0047] The entrant terminal 30 stores the received credential landing permit in the digital wallet.

[0048] <Acquisition of Immigrant Information> Immigrants can acquire all or part of the pre-registered information they have registered in advance to use the Visit Japan Web service as "Immigrant Information" from the server device 10. The Immigrant Information includes at least the name of the Immigrant and information about their place of stay.

[0049] The entrant information may be provided to the entrant in the form of an electronic certificate, similar to a landing permit, or in the form of a two-dimensional barcode. Here, a case will be described in which the entrant information is provided to the entrant from the server device 10 in the form of a two-dimensional barcode.

[0050] The entrant terminal 30 transmits to the server device 10 an "entrant information provision request" including information that identifies the entrant (see FIG. 7). More specifically, the entrant terminal 30 transmits to the server device 10 an "entrant information provision request" including information that identifies the entrant (entrant identification information; for example, passport number, name, or a combination of name and date of birth).

[0051] The server device 10 identifies a person who wishes to receive entrant information based on entrant identification information (e.g., passport number). The server device 10 generates entrant information using all or part of the pre-registered information previously registered by the identified entrant.

[0052] The server device 10 generates a two-dimensional barcode including the generated entrant information. For example, the server device 10 generates a two-dimensional barcode including the entrant's name, address, telephone number, email address, passport number, information about the entrant's place of stay (such as the address of the hotel where the entrant is staying), etc.

[0053] The server device 10 transmits the two-dimensional barcode (the two-dimensional barcode including the entrant information) to the entrant terminal 30. The entrant terminal 30 stores the received entrant information in the digital wallet.

[0054] <Application for delivery service> Arriving travelers can use the luggage delivery service for large luggage such as suitcases. Arriving travelers can request a delivery service provider to deliver their luggage from the arrival airport to their hotel.

[0055] The delivery service provider has a delivery service reception desk in part of the airport (see FIG. 8 ), which is equipped with a provider terminal 40 used by employees of the delivery service provider.

[0056] A resident carrying luggage who wishes to use a luggage delivery service visits the delivery service reception desk with the luggage they wish to have delivered. The resident informs an employee waiting at the delivery service reception desk that they would like their luggage delivered to their hotel or other location. At that time, the resident presents (provides) their landing permit and resident information to the delivery service company.

[0057] For example, the user operates the entrant terminal 30 to display two barcodes: a two-dimensional barcode generated based on the credential landing permit and a two-dimensional barcode containing entrant information (the two-dimensional barcode received from the server device 10) (see Figure 9).

[0058] An employee of the delivery service provider operates the provider terminal 40 to read each of the two two-dimensional barcodes displayed on the entrant terminal 30. The provider terminal 40 decodes each of the two two-dimensional barcodes and obtains the landing permit credential and the entrant information.

[0059] The business operator terminal 40 determines whether or not it is possible to provide a luggage delivery service to a user (entrant) who wishes to receive the delivery service (determines whether or not the entrant is qualified to receive the luggage delivery service).

[0060] Specifically, the business operator terminal 40 determines whether the user in front of the user has passed immigration procedures (CIQ inspection) and is an entrant authorized to stay in Japan. Since an entrant officially authorized to stay in Japan is assumed to have a place of stay (a destination for sending luggage) in Japan, the delivery service business operator determines that it is possible to provide luggage delivery services to the entrant.

[0061] The business operator terminal 40 verifies the acquired credential landing permit to determine whether or not the entrant desiring to receive the delivery service is qualified to receive the service.

[0062] Specifically, the business operator terminal 40 acquires the issuer ID and the user ID included in the acquired credential landing permit. Furthermore, the business operator terminal 40 acquires the public key corresponding to the acquired issuer ID and the public key corresponding to the acquired user ID from the blockchain (see FIG. 9).

[0063] The business operator terminal 40 verifies the electronic signature attached to the credential landing permit using the acquired public key. Specifically, the business operator terminal 40 verifies the holder's electronic signature and the issuer's electronic signature attached to the credential landing permit. By verifying these electronic signatures, the business operator terminal 40 confirms that the credential landing permit acquired from the user (credential landing permit holder) has not been tampered with and is a certificate issued by a trustworthy issuer.

[0064] If the acquired credential landing permit is successfully verified, the business operator terminal 40 recognizes that the user who wishes to use the luggage delivery service is an entrant who has entered the country after going through the proper immigration procedures. The business operator terminal 40 determines that the delivery service can be provided to the entrant.

[0065] If the verification of the acquired credential landing permit fails, the business operator terminal 40 determines that the user who wishes to use the delivery service is an entrant who may not have undergone proper immigration procedures, and determines that the business operator terminal 40 cannot provide delivery services to the entrant.

[0066] If it is determined that the delivery service can be provided, the business operator terminal 40 acquires information regarding the delivery destination of the package. The business operator terminal 40 acquires the destination of the package from the acquired entrant information. For example, the business operator terminal 40 acquires information regarding the name, address, and destination of stay (e.g., the name and address of the hotel where the entrant is staying) included in the entrant information.

[0067] The business operator terminal 40 displays the acquired information (name, information about the destination) as package destination information on a display, etc. The employee, etc., asks the user in front of the business operator to confirm that the presented package destination information is correct.

[0068] When the user agrees to send the package to the provided address, the employee or the like inputs this into the business terminal 40. In response to this input, the business terminal 40 outputs (prints) a delivery slip to be attached to the user's package.

[0069] The user's (entrant's) luggage, with the delivery slip attached, will be delivered (shipped) to the designated accommodation, etc.

[0070] Next, details of each device included in the information processing system according to the first embodiment will be described.

[0071] 10 is a diagram showing an example of a processing configuration (processing module) of the server device 10 according to an embodiment of the present disclosure. Referring to FIG. 10, the server device 10 includes a communication control unit 201, an entrant information control unit 202, a landing permit control unit 203, and a storage unit 204.

[0072] The communication control unit 201 is a means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the entrant terminal 30. The communication control unit 201 also transmits data to the entrant terminal 30. The communication control unit 201 passes data received from other devices to other processing modules. The communication control unit 201 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 201. The communication control unit 201 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0073] The entrant information control unit 202 is a means for controlling entrant information. When a user operates the entrant terminal 30 to access a predetermined website (the Visit Japan Web service website), the entrant information control unit 202 obtains pre-registration information via the entrant terminal 30.

[0074] The pre-registration information (e.g., name, date of birth, address, passport number, etc.) acquired by the entrant information control unit 202 is used for the Visit Japan Web service. Note that a detailed explanation of the Visit Japan Web service will be omitted, as realizing the Visit Japan Web service is outside the scope of the present disclosure.

[0075] When the entrant information control unit 202 acquires the pre-registration information, it stores the acquired pre-registration information in the user management database (see FIG. 11). Note that the user management database shown in FIG. 11 is an example and is not intended to limit the items to be stored.

[0076] The entrant information control unit 202 receives a "request for provision of entrant information" from the entrant terminal 30. Upon receiving the request for provision of entrant information, the entrant information control unit 202 searches the user management database using the entrant identification information (e.g., passport number) included in the request as a key.

[0077] If the search fails, the entrant information control unit 202 determines that the pre-registration information of the user (entrant) corresponding to the entrant identification information is not registered. In this case, the entrant information control unit 202 sends a negative response to the entrant terminal 30 indicating that the entrant information cannot be provided.

[0078] If the search is successful, the entrant information control unit 202 generates entrant information including all or part of the information stored in the entry identified by the search (for example, name, address, telephone number, passport number, and information regarding the place of stay). The entrant information control unit 202 transmits the generated entrant information to the entrant terminal 30.

[0079] Specifically, the entrant information control unit 202 converts the generated entrant information into a two-dimensional barcode format (generates image data in the two-dimensional barcode format). The entrant information control unit 202 then transmits an affirmative response including the generated two-dimensional barcode to the entrant terminal 30.

[0080] The landing permit control unit 203 is a means for controlling the issuance of landing permits (credential landing permits) and the like.

[0081] The landing permit control unit 203 processes the "landing permit issuance request" received from the entrant terminal 30. Upon receiving the landing permit issuance request, the landing permit control unit 203 decodes the two-dimensional barcode included in the request to obtain the information printed on the landing permit stamp. Specifically, the landing permit control unit 203 obtains information such as the landing permit date, period of stay, and status of residence.

[0082] If the two-dimensional barcode cannot be correctly decoded and the information written on the landing permit stamp cannot be obtained, the landing permit control unit 203 sends a negative response to the entrant terminal 30 indicating that the credential landing permit cannot be issued.

[0083] If the information written on the landing permit stamp is acquired, the landing permit control unit 203 generates a credential landing permit to be issued to the entrant. The landing permit control unit 203 generates a credential landing permit including an issuer ID and a user ID (the DID of the person to whom the credential landing permit is issued).

[0084] Specifically, the landing permit control unit 203 generates a credential landing permit that includes metadata including the type of VCs, the issuing organization name, the date and time of issue, etc., the qualification information body, the issuer's public key information, an electronic signature, etc. The electronic signature affixed to the credential landing permit is made using a private key corresponding to the issuer ID generated in advance.

[0085] The landing permit control unit 203 transmits the generated landing permit credential to the entrant terminal 30. The landing permit control unit 203 transmits an affirmative response including the generated landing permit credential to the entrant terminal 30.

[0086] In addition, the landing permit control unit 203 registers the issuer ID, public key, etc., which have been generated in advance, in the blockchain.

[0087] The storage unit 204 is a means for storing information necessary for the operation of the server device 10 .

[0088] 12 is a diagram showing an example of a processing configuration (processing module) of the entrant terminal 30 according to an embodiment of the present disclosure. Referring to FIG. 12, the entrant terminal 30 includes a communication control unit 301, an acquisition control unit 302, a usage control unit 303, and a storage unit 304.

[0089] The communication control unit 301 is a means for controlling communication with other devices. For example, the communication control unit 301 receives data (packets) from the server device 10. The communication control unit 301 also transmits data to the server device 10. The communication control unit 301 passes data received from other devices to other processing modules. The communication control unit 301 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 301. The communication control unit 301 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0090] The acquisition control unit 302 is a means for controlling the acquisition of a landing permit credential and entrant information.

[0091] First, the operation of the acquisition control unit 302 regarding the acquisition of a credential landing permit will be described.

[0092] 13 is a flowchart showing an example of the operation of the acquisition control unit 302. The operation of the acquisition control unit 302 for acquiring a credential landing permit will be described with reference to FIG.

[0093] When a user who has opened a digital wallet starts the digital wallet application and performs a predetermined operation (for example, pressing the landing permit issuance button), the acquisition control unit 302 controls the acquisition of a credential landing permit.

[0094] The acquisition control unit 302 generates a public key / private key pair and a user ID (user DID), which is a distributed identifier. The acquisition control unit 302 registers the generated user ID and public key in the blockchain (registering the public key, etc.; step S201).

[0095] Next, the acquisition control unit 302 acquires information necessary for requesting the issuance of a credential landing permit using a GUI or the like (acquisition of necessary information; step S202).

[0096] Specifically, the acquisition control unit 302 photographs the two-dimensional barcode attached to the passport (the two-dimensional barcode into which the information of the landing permission stamp has been converted) in response to the user's operation. The acquisition control unit 302 then acquires image data showing the two-dimensional barcode.

[0097] The acquisition control unit 302 notifies the server device 10 of the management center of the image data showing the two-dimensional barcode and the user ID. Specifically, the acquisition control unit 302 transmits a "request for issuance of a credential landing permit" including the image data, the user ID, etc. to the server device 10 (request for issuance of a landing permit; step S203).

[0098] The acquisition control unit 302 may also affix an electronic signature to the information included in the credential landing permit issuance request using a private key corresponding to the public key registered in the blockchain.

[0099] The acquisition control unit 302 receives a response (positive response or negative response) to the credential landing permit issuance request from the server device 10 (step S204).

[0100] If a negative response is received indicating that the issuance of the credential landing permit has failed (step S205, No branch), the acquisition control unit 302 notifies the user that the credential landing permit has not been issued (notification of non-issuance; step S206).

[0101] When an affirmative response indicating that the credential landing permit has been successfully issued is received (step S205, Yes branch), the acquisition control unit 302 stores the credential landing permit received from the server device 10 in the digital wallet (step S207). At that time, the acquisition control unit 302 may notify the user that the credential landing permit has been issued.

[0102] The acquisition control unit 302 may verify the electronic signature attached to the credential landing permit acquired from the server device 10. In this case, the acquisition control unit 302 acquires from the blockchain a public key corresponding to the issuer ID written on the credential landing permit. The acquisition control unit 302 may verify the electronic signature attached to the credential landing permit using the acquired public key, and if the verification is successful, may store the credential landing permit in the digital wallet.

[0103] In this way, the acquisition control unit 302 acquires the credential landing permit from the server device 10 and stores the acquired credential landing permit in the digital wallet. At that time, if the acquisition control unit 302 succeeds in verifying the signature of the acquired credential landing permit, the acquisition control unit 302 may store the acquired credential landing permit in the digital wallet.

[0104] Next, the operation of the acquisition control unit 302 regarding the acquisition of entrant information will be described.

[0105] When a user starts the digital wallet application and performs a predetermined operation (for example, pressing the entrant information provision button), the acquisition control unit 302 controls the acquisition of entrant information.

[0106] First, the acquisition control unit 302 acquires information necessary for the request to provide entrant information using a GUI, etc. Specifically, the acquisition control unit 302 acquires entrant identification information (e.g., passport number) using a GUI (Graphical User Interface), etc.

[0107] The acquisition control unit 302 transmits to the server device 10 a "request for provision of entrant information" including the acquired entrant identification information.

[0108] The acquisition control unit 302 receives a response (positive response, negative response) to the request for providing entrant information from the server device 10 .

[0109] If a negative response indicating that entrant information cannot be provided is received, the acquisition control unit 302 notifies the user that entrant information could not be acquired.

[0110] When receiving a positive response indicating that the entrant information can be provided, the acquisition control unit 302 stores in the digital wallet the entrant information received from the server device 10 (the two-dimensional barcode converted from the entrant information, which is included in the positive response). At this time, the acquisition control unit 302 may notify the user that the entrant information has been provided.

[0111] The usage control unit 303 is a means for controlling the use of digital content (landing permit credentials) stored in the digital wallet. For example, if an entrant wishes to receive a package delivery service, the usage control unit 303 provides the landing permit credentials and entrant information stored in the digital wallet to a delivery service provider.

[0112] Specifically, when the user performs a predetermined operation (for example, pressing a button corresponding to the landing permit and a button corresponding to the entrant information written on the digital wallet), the usage control unit 303 displays the credential landing permit and the entrant information.

[0113] Specifically, the usage control unit 303 signs the credential landing permit stored in the digital wallet using a private key corresponding to the user ID. The usage control unit 303 converts the credential landing permit with the user's (entrant's) signature affixed into a two-dimensional barcode.

[0114] Since the entrant information is stored in the digital wallet in the form of a two-dimensional barcode, the usage control unit 303 displays the entrant information (two-dimensional barcode) received from the server device 10 as is.

[0115] The usage control unit 303 displays two two-dimensional barcodes (a two-dimensional barcode corresponding to the credential landing permit and a two-dimensional barcode corresponding to the entrant information).

[0116] The storage unit 304 is a means for storing information necessary for the operation of the entrant terminal 30. The storage unit 304 stores certificates issued by certificate issuers and the like in a digital wallet.

[0117] 14 is a diagram illustrating an example of a processing configuration (processing module) of the provider terminal 40 according to an embodiment of the present disclosure. Referring to FIG. 14, the provider terminal 40 includes a communication control unit 401, a service provision control unit 402, and a storage unit 403.

[0118] The communication control unit 401 is a means for controlling communication with other devices. For example, the communication control unit 401 receives data (packets) from a server of a delivery service provider. The communication control unit 401 also transmits data to the server. The communication control unit 401 passes data received from other devices to other processing modules. The communication control unit 401 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 401. The communication control unit 401 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0119] The service provision control unit 402 is a means for executing control related to the luggage delivery service provided to the user. When a user requests the provision of luggage delivery service, the service provision control unit 402 acquires the landing permit credential and entrant information from the entrant terminal 30 of the user.

[0120] The service provision control unit 402 has a function as an acquisition unit (acquisition means) and a function as a destination control unit (destination control means).

[0121] The acquisition unit acquires from an entrant carrying baggage a credential landing permit issued to the entrant as a VC (Verifiable Credentials) and entrant information. The entrant information is information that includes at least the entrant's name and destination of stay from information (pre-registration information) that the entrant has entered into an online service that allows the entrant to submit information required for immigration procedures in advance.

[0122] If the verification of the electronic signature attached to the credential landing permit is successful, the destination control unit generates baggage destination information for sending the entrant's baggage to the entrant's place of stay based on the name and place of stay information included in the entrant information. The destination control unit outputs the generated baggage destination information.

[0123] 15 is a flowchart showing an example of the operation of the service provision control unit 402. The operation of the service provision control unit 402 will be described with reference to FIG.

[0124] The service provision control unit 402 acquires the landing permit credentials and entrant information held by the entrant (acquisition of landing permit, etc.; step S301). Specifically, the service provision control unit 402 reads each of the two two-dimensional barcodes displayed on the entrant terminal 30 in response to an operation by an employee of the delivery service provider, etc. The service provision control unit 402 reads the two two-dimensional barcodes via a barcode reader, etc.

[0125] The service provision control unit 402 determines whether or not the entrant who wishes to receive the delivery service is qualified to receive the package delivery service (qualification determination; step S302). That is, the service provision control unit 402 determines whether or not the entrant who wishes to receive the delivery service is a entrant who has permission to stay in Japan.

[0126] Specifically, the service provision control unit 402 makes the above determination by verifying the acquired landing permit credentials. Based on the verification results of the landing permit credentials acquired from the entrant, the service provision control unit 402 determines whether or not the entrant who wishes to receive delivery services is eligible to receive the package delivery service.

[0127] The service provision control unit 402 verifies the electronic signature attached to the credential landing permit using the public key obtained from the blockchain. Specifically, the service provision control unit 402 obtains the issuer ID and user ID from the credential landing permit. The service provision control unit 402 obtains the public key corresponding to the obtained issuer ID from the blockchain. Similarly, the service provision control unit 402 obtains the public key corresponding to the obtained user ID from the blockchain.

[0128] The service provision control unit 402 verifies the signature of the holder (entrant seeking luggage delivery service) and the signature of the issuer attached to the credential landing permit. By verifying these signatures, the service provision control unit 402 confirms that the credential landing permit obtained from the user (credential landing permit holder) has not been tampered with and is a certificate issued by a trustworthy issuer.

[0129] If the verification of the landing credential fails, the service provision control unit 402 determines that the entrant is not qualified to receive the baggage delivery service. If the verification of the landing credential succeeds, the service provision control unit 402 determines that the entrant is qualified to receive the baggage delivery service.

[0130] Alternatively, the service provision control unit 402 may determine that the entrant is eligible to receive luggage delivery services if the credential landing permit is successfully verified and the credential landing permit has not been invalidated by the management center.

[0131] Alternatively, the service provision control unit 402 may determine whether or not an entrant is eligible to receive the luggage delivery service based on the specific information recorded on the landing permit credential in addition to the above two requirements. For example, the service provision control unit 402 may determine that an entrant is eligible to receive the luggage delivery service if the period of stay recorded on the landing permit credential has not expired.

[0132] Alternatively, the service provision control unit 402 may determine that an entrant is not eligible to receive the luggage delivery service if the remaining period of stay of the entrant at the time of service provision is less than a predetermined period. For example, the service provision control unit 402 may determine that an entrant who desires service is not eligible to receive the luggage delivery service if the remaining period of stay of the entrant is one week or less or two weeks or less.

[0133] In this way, the service provision control unit 402 determines whether or not the entrant is eligible to receive the baggage delivery service based on the verification result of the electronic signature attached to the landing permit credential. Alternatively, the service provision control unit 402 may determine whether or not the entrant is eligible to receive the baggage delivery service based on the information stated in the landing permit credential. For example, the service provision control unit 402 may determine that the entrant is eligible to receive the baggage delivery service if the period of stay stated in the landing permit credential has not expired.

[0134] If the entrant is not qualified to receive the service (step S303, No branch), the service provision control unit 402 notifies an employee of the delivery service provider of this fact (notification of ineligibility; step S304). For example, the service provision control unit 402 displays on a display or the like that the luggage delivery service cannot be provided to the user in front of the entrant because verification of the landing permit credentials has failed.

[0135] If the entrant is eligible to receive the service (step S303, Yes branch), the service provision control unit 402 acquires information regarding the delivery destination of the package (step S305). Specifically, the service provision control unit 402 acquires destination information regarding the package from the entrant information acquired from the entrant terminal 30. For example, the service provision control unit 402 extracts information regarding the name, address in Japan, and place of stay included in the entrant information.

[0136] The service provision control unit 402 displays the acquired information (name, delivery address) as package destination information on a display or the like (display package destination information; step S306). An employee of the delivery service provider or the like asks the user in front of the user to confirm that the displayed package destination information is correct.

[0137] When the user agrees to ship the package to the provided address, the employee or the like inputs this into the business operator terminal 40. In response to this input, the service provision control unit 402 outputs package address information (step S307). For example, the service provision control unit 402 prints a delivery slip to be attached to the user's package.

[0138] In this way, if an entrant is qualified to receive a package delivery service, the service provision control unit 402 generates package destination information for the package brought in by the entrant to the delivery service reception desk.

[0139] The storage unit 403 is a means for storing information necessary for the operation of the operator terminal 40 .

[0140] [System Operation] Next, the operation of the information processing system according to the first embodiment will be described.

[0141] 16 is a sequence diagram illustrating an example of the operation of the information processing system according to the embodiment of the present disclosure. The operation of the information processing system according to the first embodiment regarding the issuance of a credential landing permit will be described with reference to FIG.

[0142] The entrant terminal 30 generates a public key, a private key, and a user ID, and registers the user ID and public key in the blockchain (step S11).

[0143] The entrant terminal 30 sends a credential landing permit issuance request including the user ID and the two-dimensional barcode (the two-dimensional barcode printed on the authentication sticker affixed to the passport) to the server device 10 (step S12).

[0144] The server device 10 generates qualification information for the user (the person to whom the credential landing permit is issued) and generates a credential landing permit including the generated qualification information (step S13). The server device 10 generates a credential landing permit including the user ID and issuer ID and affixed with a digital signature.

[0145] The server device 10 transmits the generated landing permit credential to the entrant terminal 30 (step S14). As mentioned above, the landing permit credential is issued to an entrant who has completed a customs inspection, immigration examination, and quarantine inspection.

[0146] The entrant terminal 30 stores the landing permit credentials in the digital wallet (step S15).

[0147] 17 is a sequence diagram illustrating an example of the operation of the information processing system according to the embodiment of the present disclosure. The operation of the information processing system according to the first embodiment regarding the provision of a landing permit and entrant information will be described with reference to FIG.

[0148] In response to the user's operation, the entrant terminal 30 displays two-dimensional barcodes corresponding to the landing permit credential and the entrant information (step S21). The business operator terminal 40 acquires the landing permit credential and the entrant information from the two-dimensional barcodes displayed on the entrant terminal 30.

[0149] The business operator terminal 40 verifies the credential landing permit (step S22).

[0150] If the business operator terminal 40 has successfully verified the credential landing permit, it generates baggage destination information relating to the destination of the baggage from the entrant information (step S23).

[0151] The business operator terminal 40 outputs the acquired package destination information (step S24). If the user approves the package destination, the package will be delivered to the hotel or other location where the user is staying.

[0152] Next, a modification of the first embodiment will be described.

[0153] <First Modification of First Embodiment> The two-dimensional barcode corresponding to the entrant information provided to the delivery service provider may be a two-dimensional barcode generated in real time by the server device 10. Specifically, when a request to provide entrant information is received from the entrant terminal 30, the entrant information control unit 202 of the server device 10 generates a two-dimensional barcode including the entrant information. The server device 10 displays the generated two-dimensional barcode together with the current time on the entrant terminal 30.

[0154] The entrant terminal 30 displays a two-dimensional barcode corresponding to the credential landing permit and a two-dimensional barcode generated in real time by the server device 10.

[0155] In this way, the two-dimensional barcode corresponding to the entrant information may be generated by the server device 10, and the two-dimensional barcode may be displayed together with the current time on the entrant terminal 30. Since the current time is displayed together with the two-dimensional barcode, fraud using the two-dimensional barcode (counterfeiting the two-dimensional barcode) becomes more difficult.

[0156] <Variation 2 of First Embodiment> A delivery service provider may provide a service to a user who has made a reservation for a luggage delivery service. Specifically, the user makes a reservation on the delivery service provider's webpage or the like before arriving at the arrival airport. The user provides the delivery service provider with information such as a passport number.

[0157] The business terminal 40 of the delivery service business stores the date of entry of the entrant (date of use of the service) and the passport number of the entrant in association with each other. The business terminal 40 determines whether the user has made a reservation using the passport number obtained from the entrant information acquired from the user.

[0158] If a reservation for the user exists and the credential landing permit is successfully verified, the business operator terminal 40 determines that the user is eligible to receive the package delivery service.

[0159] If there is no reservation for the user, the business operator terminal 40 determines that the user is not eligible to receive the parcel delivery service. In this case, the business operator terminal 40 notifies an employee of the delivery service provider of this fact. The employee informs the user that the parcel delivery service cannot be provided.

[0160] Alternatively, depending on the company's situation (the amount of parcels accepted, the number of employees on duty), the employee may provide parcel delivery services to users without reservations. In this case, the employee inputs into the business operator terminal 40 that they will provide parcel delivery services to users in front of them. The business operator terminal 40 then verifies the credential landing permit and generates parcel destination information.

[0161] <Third Modification of First Embodiment> The entrant terminal 30 may display a single two-dimensional barcode containing the credential landing permit and the entrant information, rather than displaying two-dimensional barcodes for both.

[0162] In this case, the usage control unit 303 of the entrant terminal 30 decodes the two-dimensional barcode corresponding to the entrant information obtained from the server device 10. The usage control unit 303 converts the landing permit credential and the entrant information into a two-dimensional barcode together. The usage control unit 303 may provide the delivery service provider with a two-dimensional barcode containing the two certificates (landing permit credential, entrant information).

[0163] As described above, the business operator terminal 40 according to the first embodiment acquires a landing permit credential and entrant information from a user (entrant) who wishes to receive a package delivery service. If the business operator terminal 40 successfully verifies the acquired landing permit credential, it determines that the entrant has a residence or place of stay within Japan. In other words, the business operator terminal 40 determines that an entrant who has a place of stay within Japan is eligible to receive package delivery services. As a result, the delivery service operator can provide services to the entrant with peace of mind.

[0164] Furthermore, for an entrant who is qualified to receive the luggage delivery service, the business operator terminal 40 generates luggage destination information regarding the luggage delivery destination based on the entrant information of the entrant. The business operator terminal 40 outputs the generated luggage destination information. The user's luggage is delivered to the user's hotel or other location in accordance with the luggage destination information. In this way, the entrant does not need to enter the address of the luggage delivery destination at the reception desk of the luggage delivery service. As a result, convenience is improved for users (entrants) who wish to have their luggage delivered.

[0165] Second Embodiment Next, a second embodiment will be described in detail with reference to the drawings.

[0166] In the first embodiment, a case where an entrant brings his / her luggage to a delivery service reception desk is described. In the second embodiment, a case where an entrant's luggage is handed over to a delivery service provider directly from an aircraft is described.

[0167] The configuration of the information processing system according to the second embodiment can be the same as that of the first embodiment, and therefore the explanation corresponding to Fig. 3 will be omitted. Also, the processing configuration of the server device 10 and the entrant terminal 30 according to the second embodiment can be the same as that of the first embodiment, and therefore the explanation thereof will be omitted.

[0168] The following description will focus on the differences between the first and second embodiments.

[0169] As shown in Fig. 18, the delivery service provider according to the second embodiment includes a service server 50. The service server 50 is a server that handles online reservations and reception of parcel delivery services. The service server 50 corresponds to the server device 100 described above. The delivery service provider according to the second embodiment may or may not include the business operator terminal 40 described in the first embodiment.

[0170] In addition, employees of the delivery service provider have a person-in-charge terminal 51 .

[0171] 19 is a diagram illustrating an example of a processing configuration (processing module) of the service server 50 according to an embodiment of the present disclosure. Referring to FIG. 19, the service server 50 includes a communication control unit 501, a service provision control unit 502, and a storage unit 503.

[0172] The communication control unit 501 is a means for controlling communication with other devices. For example, the communication control unit 501 receives data (packets) from the entrant terminal 30. The communication control unit 501 also transmits data to the entrant terminal 30. The communication control unit 501 passes data received from other devices to other processing modules. The communication control unit 501 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 501. The communication control unit 501 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0173] The service provision control unit 502 is a means for executing control related to the parcel delivery service provided to the user. The service provision control unit 502 has the same functions as the service provision control unit 402 of the business operator terminal 40 according to the first embodiment, and has functions that differ from the service provision control unit 402 mainly in the points described below.

[0174] <Reservation for baggage delivery service> A user makes a reservation for a baggage delivery service before arriving at a destination airport. For example, the user operates the departing passenger terminal 30 to access the service server 50 before departure (before leaving the country). The user inputs, via the departing passenger terminal 30, the date of use of the baggage delivery service (date of entry, date of arrival), information identifying the person making the reservation (reservation person identification information; for example, passport number), etc., into the service server 50.

[0175] The service provision control unit 502 stores the information entered by the user in a reservation management database (see FIG. 20). Note that the reservation management database shown in FIG. 20 is an example and is not intended to limit the items stored therein.

[0176] <Baggage Delivery> A user checks their baggage in with an airline at the departure airport. At that time, airline staff affixes information (owner identification information) that identifies the baggage owner (departing person) to the baggage. For example, airline staff affixes a two-dimensional barcode converted from a passport number to the baggage.

[0177] When a user (entrant) boards an aircraft and arrives at a destination airport, the user undergoes immigration procedures including a CIQ inspection, etc. After completing the immigration procedures, the entrant obtains a credential landing permit and entrant information from the server device 10, as in the first embodiment.

[0178] An entrant who has reserved a baggage delivery service operates the entrant terminal 30 to access the service server 50. The service server 50 confirms whether the entrant has reserved a baggage delivery service. Specifically, the service provision control unit 502 obtains reservation identification information (passport number) from the entrant using a GUI or the like. The service provision control unit 502 searches the reservation management database to determine whether reservation identification information (passport number) exists on the entrant's arrival date (entry date).

[0179] If the reservation management database stores the reservation user identification information (passport number), the service provision control unit 502 determines that the entrant has made a reservation for the baggage delivery service. If the reservation management database does not store the reservation user identification information, the service provision control unit 502 determines that the entrant has not made a reservation for the baggage delivery service.

[0180] If an entrant who desires the use of the luggage delivery service has not made a reservation for the luggage delivery service, the service provision control unit 502 notifies the entrant that the luggage delivery service cannot be provided.

[0181] When a service applicant has made a reservation for a luggage delivery service, the service provision control unit 502 acquires the landing permit credential and entrant information from the entrant terminal 30 of the applicant. For example, the service provision control unit 502 instructs the user to provide the landing permit credential and entrant information via a GUI or the like.

[0182] Upon receiving the instructions, the user operates the entrant terminal 30 to launch the digital wallet and select the landing permit credential and entrant information. The usage control unit 303 of the entrant terminal 30 transmits the landing permit credential and entrant information to the service server 50 (see FIG. 21). The usage control unit 303 transmits the landing permit credential and entrant information to the service server 50 via a network such as the Internet.

[0183] In this case, the usage control unit 303 may send the two-dimensional barcode into which the entrant information has been converted directly to the service server 50, or may decode the two-dimensional barcode and send the entrant information itself to the service server 50.

[0184] Upon acquiring the landing permit credential and entrant information, the service provision control unit 502 uses the acquired landing permit credential to determine whether the user is qualified to receive the luggage delivery service. If the user is qualified to receive the luggage delivery service, the service provision control unit 502 generates luggage destination information from the entrant information. If necessary, the service provision control unit 502 acquires the user's consent (confirmation) regarding the generated luggage destination information.

[0185] As mentioned above, the verification operation of the credential landing permit by the service provision control unit 502 can be the same as the verification operation by the service provision control unit 402 of the operator terminal 40 in the first embodiment, so detailed explanation will be omitted.

[0186] The service provision control unit 502 notifies the person in charge of the package delivery of the generated package destination information and reservation user identification information (passport number). For example, the service provision control unit 502 transmits the package destination information and reservation user identification information (passport number) to the person in charge terminal 51 carried by the person in charge.

[0187] The staff member terminal 51 stores the list consisting of the package destination information and reservation person identification information (passport number) received from the service server 50. The staff member also operates the staff member terminal 51 to print out a delivery slip on which the package destination information is written.

[0188] The staff member extracts luggage eligible for the luggage delivery service from among the luggage unloaded from the aircraft. For example, the staff member operates staff member terminal 51 to read a two-dimensional barcode (owner identification information; a two-dimensional barcode converted from a passport number) affixed to the luggage. If the passport number (owner identification information, reservation person identification information) read from the two-dimensional barcode is included in the list, staff member terminal 51 determines that the luggage is eligible for the delivery service. When staff member terminal 51 detects luggage eligible for the luggage delivery service, it notifies the staff member of this fact.

[0189] The person in charge picks up the luggage that is the subject of the luggage delivery service. The person in charge attaches a delivery slip (a delivery slip with luggage destination information corresponding to the passport number) printed on it to the luggage. The luggage with the delivery slip attached is delivered to the hotel or other location where the entrant is staying.

[0190] As described above, the service provision control unit 502 according to the second embodiment functions as an acquisition unit and a destination control unit. The service provision control unit 502 acquires a credential landing permit issued as a verifiable credential (VC) to an entrant who has checked their luggage with an airline upon departure, and entrant information. If the service provision control unit 502 successfully verifies the electronic signature attached to the credential landing permit, the service provision control unit 502 generates luggage destination information for shipping the entrant's luggage checked with the airline to the entrant's destination, based on the name and destination information included in the entrant information. The service provision control unit 502 outputs the generated luggage destination information. For example, the service provision control unit 502 transmits the generated luggage destination information and reservation user identification information (e.g., passport number) to the staff terminal 51.

[0191] Next, a modified example of the second embodiment will be described.

[0192] <Variation 1 of Second Embodiment> The delivery service provider may use a reception terminal 52, instead of the service server 50, as an interface for users who wish to use the parcel delivery service (see FIG. 22 ). For example, the reception terminal 52 is installed downstream of the CIQ inspection station 20. For example, the reception terminal 52 is a signage-type terminal.

[0193] An entrant who has made a reservation for a luggage delivery service presents the landing permit credential and entrant information to the delivery service provider. At that time, the entrant operates the entrant terminal 30 to present two two-dimensional barcodes to the reception terminal 52. The reception terminal 52 acquires the landing permit credential and entrant information from the two two-dimensional barcodes.

[0194] The reception terminal 52 acquires reservation identification information (passport number) from the arrival passenger information. The reception terminal 52 transmits the passport number to the service server 50 and inquires whether or not a reservation corresponding to the passport number exists. The service provision control unit 502 of the service server 50 notifies the reception terminal 52 whether or not a reservation exists based on the passport number.

[0195] If there is no reservation for a user who desires the provision of the parcel delivery service, the reception terminal 52 informs the user that the service cannot be provided.

[0196] If there is a reservation for a user who wishes to receive luggage delivery services, the reception terminal 52 verifies the landing permit credentials. If the verification of the landing permit credentials is successful, the reception terminal 52 generates luggage destination information based on the information included in the entrant information.

[0197] The reception terminal 52 transmits the generated package destination information and reservation user identification information (passport number) to the delivery service provider's staff terminal 51. As explained above, the staff member picks up the package that is the subject of the package delivery service and affixes a delivery slip on which the package destination information is printed to the package.

[0198] <Modification 2 of Second Embodiment> The information processing system disclosed herein may include a mechanism for preventing a user from forgetting to specify a delivery destination. For example, the entrant terminal 30 stores information that a reservation for a package delivery service has been made with a delivery service provider.

[0199] The entrant terminal 30 displays a message that the entrant needs to complete the luggage delivery procedure with the delivery service provider when a reservation for the luggage delivery service is made and the credential landing permit is obtained from the server device 10. For example, the entrant terminal 30 may display (push notification) a message such as that shown in FIG.

[0200] Upon seeing this display, the user operates the entrant terminal 30 to access the service server 50. The entrant terminal 30 follows instructions from the service server 50 and transmits the landing permit credential and entrant information to the service server 50.

[0201] <Variation 3 of the Second Embodiment> A delivery service provider may provide the parcel delivery service to users who have not made a reservation for the parcel delivery service, depending on the circumstances of the company (the amount of parcels accepted, the number of employees on duty). For example, the service server 50 may provide the parcel delivery service to a user who has not made a reservation, if the verification of the credential landing permit is successful.

[0202] As described above, the service server 50 according to the second embodiment acquires a landing permit credential and entrant information from a user (entrant) who desires to receive a parcel delivery service. If the service server 50 successfully verifies the acquired landing permit credential, it provides the parcel delivery service to the entrant. At this time, the service server 50 generates parcel destination information regarding the parcel delivery destination based on the entrant information acquired from the entrant. As a result, even in the second embodiment, delivery service providers can provide services to entrants with peace of mind. Furthermore, since entrants do not need to enter the address of the parcel delivery destination into the service server 50, convenience for users (entrants) who desire parcel delivery is improved. Furthermore, since entrants do not need to retrieve their parcels from a carousel in the second embodiment, convenience for the users is further improved.

[0203] Next, the hardware of each device constituting the information processing system will be described. Fig. 24 is a diagram showing an example of the hardware configuration of the server device 10.

[0204] The server device 10 can be configured by an information processing device (so-called computer), and has the configuration exemplified in Fig. 24. For example, the server device 10 includes a processor 311, a memory 312, an input / output interface 313, and a communication interface 314. The components such as the processor 311 are connected by an internal bus or the like, and are configured to be able to communicate with each other.

[0205] However, the configuration shown in Fig. 24 is not intended to limit the hardware configuration of the server device 10. The server device 10 may include hardware not shown, and may not include the input / output interface 313 as necessary. Furthermore, the number of processors 311 and the like included in the server device 10 is not intended to be limited to the example shown in Fig. 24, and for example, the server device 10 may include multiple processors 311.

[0206] The processor 311 is a programmable device such as a central processing unit (CPU), a micro processing unit (MPU), or a digital signal processor (DSP). Alternatively, the processor 311 may be a device such as a field programmable gate array (FPGA) or an application specific integrated circuit (ASIC). The processor 311 executes various programs including an operating system (OS).

[0207] The memory 312 is a random access memory (RAM), a read only memory (ROM), a hard disk drive (HDD), a solid state drive (SSD), etc. The memory 312 stores an OS program, application programs, and various data.

[0208] The input / output interface 313 is an interface for a display device and an input device (not shown). The display device is, for example, a liquid crystal display, etc. The input device is, for example, a device that accepts user operations, such as a keyboard or a mouse.

[0209] The communication interface 314 is a circuit, module, etc. that communicates with other devices. For example, the communication interface 314 includes a network interface card (NIC).

[0210] The functions of the server device 10 are realized by various processing modules. The processing modules are realized, for example, by the processor 311 executing a program stored in the memory 312. The program can be recorded on a computer-readable storage medium. The storage medium can be a non-transitory medium such as a semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. That is, the present invention can also be embodied as a computer program product. The program can be downloaded via a network or updated using a storage medium storing the program. Furthermore, the processing modules can be realized by semiconductor chips.

[0211] In addition, the entrant terminal 30, business operator terminal 40, service server 50, staff terminal 51, reception terminal 52, etc. can also be configured using information processing devices in the same way as server device 10, and their basic hardware configurations are no different from server device 10, so explanations will be omitted.

[0212] The server device 10, which is an information processing device, is equipped with a computer, and functions of the server device 10 can be realized by causing the computer to execute a program. The server device 10 also executes a control method for the server device 10 by the program.

[0213] [Modifications] The configuration, operation, etc. of the information processing system described in the above embodiment are merely examples, and are not intended to limit the configuration, etc. of the system.

[0214] <Modification 1> In the first embodiment, a case has been described in which a landing permit credential and entrant information are transmitted and received mainly using a two-dimensional barcode. The landing permit credential and / or entrant information may be transmitted and received using other means.

[0215] For example, the landing permit credential and entrant information may be transmitted from the entrant terminal 30 to the business operator terminal 40 using short-range wireless communication means such as Bluetooth (registered trademark) or NFC (Near Field Communication).

[0216] Alternatively, the landing permit credential may be provided to the business operator terminal 40 by short-range wireless communication means such as Bluetooth (registered trademark), and the entrant information may be provided to the business operator terminal 40 by a two-dimensional barcode. That is, the service provision control unit 402 of the business operator terminal 40 may acquire at least one of the landing permit credential and the entrant information in the form of a two-dimensional barcode.

[0217] <Modification 2> In the above embodiment, the user himself / herself selects the information necessary for receiving the parcel delivery service from the digital wallet and provides the selected information (landing permit credentials, entrant information) to the parcel service provider. The information necessary for receiving the parcel delivery service may be transmitted to the provider terminal 40 in response to a request from the delivery service provider.

[0218] When a user wishes to receive a luggage delivery service, an employee of the delivery service provider inputs this information into the provider terminal 40. In response to this input, the provider terminal 40 requests the information necessary to provide the luggage delivery service from the entrant terminal 30.

[0219] Specifically, the service provision control unit 402 of the business operator terminal 40 transmits a "request for necessary information" specifying information necessary to determine whether or not to provide the package delivery service to the entrant terminal 30 (see FIG. 25). For example, the service provision control unit 402 transmits the request for necessary information to the entrant terminal 30 using a means such as Bluetooth (registered trademark). The request for necessary information includes the type of certificate, such as a "landing permit credential" or "entrant information," for which the business operator terminal 40 specifies the necessary information.

[0220] When the request for providing necessary information is received, the usage control unit 303 of the entrant terminal 30 reads from the digital wallet the information (landing permit credential, entrant information) specified by the business operator terminal 40. The usage control unit 303 transmits the read landing permit credential and entrant information to the business operator terminal 40.

[0221] In this way, in response to an entrant's request to receive a baggage delivery service, the service provision control unit 402 of the business operator terminal 40 requests the entrant's terminal 30 held by the entrant to provide the landing permit credentials and entrant information necessary for providing the baggage delivery service. In response to this request, the service provision control unit 402 obtains the landing permit credentials and entrant information.

[0222] <Modification 3> Immigrant information provided from the server device 10 of the management center may be provided to the entrant terminal 30 as a credential certificate (VCs). The server device 10 may issue an "immigrant information certificate" that guarantees the content of the entrant information acquired in advance.

[0223] In this case, the server device 10 performs identity verification of the user when registering information for the Visit Japan Web service. For example, the server device 10 acquires, via the immigration terminal 30, a facial image printed on the passport and a facial image of the user operating the immigration terminal 30. If one-to-one authentication using the two facial images is successful, the server device 10 determines that identity verification has been successful.

[0224] By successfully verifying the identity of the user, the server device 10 can guarantee the accuracy of at least the information stated on the identification document such as a passport, among the pre-registration information acquired from the user. The server device 10 (the entrant information control unit 202) may issue to the entrant terminal 30 a credential entrant information certificate including information whose contents can be guaranteed.

[0225] <Modification 4> The entrant terminal 30 may provide other information to the delivery service provider instead of or in addition to the entrant information. For example, the entrant terminal 30 may transmit to the business operator terminal 40 an identification document such as a passport or My Number card (electronic certificate stored in a My Number card) stored in a digital wallet.

[0226] For example, an entrant residing in Japan may provide the delivery service provider with an identification document such as a passport with an address written on it, a My Number card, etc., instead of the entrant information. In this case, the passport or other identification document may be transmitted to the provider terminal 40 as a credential certificate.

[0227] The business operator terminal 40 may generate package destination information (name, address, etc.) from a credential certificate such as a passport.

[0228] <Variation 5> The entrant terminal 30 may transmit a VP (Verifiable Presentation) to the delivery service provider instead of a credential certificate such as a credential entrant information certificate or a credential passport (VCs in a passport). That is, a portion of the VCs issued by the management center may be provided by the user (holder) to the delivery service provider (verifier) ​​as a verifiable presentation.

[0229] For example, a credential immigration certificate may contain information that is not required by the delivery service provider, such as the user's gender or date of birth. Furthermore, users may not want to provide unnecessary personal information to third parties when receiving package delivery services. To meet such requirements, "selective minimal disclosure" using verifiable presentation (VP) may be implemented.

[0230] To achieve the selective minimal disclosure, the certificate issuer of the credential certificate (server device 10 at the management center) separates the data to be subject to selective minimal disclosure from the data set and calculates a hash value of the separated data. The server device 10 embeds the hash value of the separated data in the data set. The server device 10 signs the entire data set, including the hash value of the separated data, and generates a credential entrant information certificate.

[0231] When providing a package delivery service to a user, the business terminal 40 of the delivery service business notifies the entrant terminal 30 of the necessary items along with the type of certificate required. For example, the business terminal 40 notifies the entrant terminal 30 of the credential landing permit, credential entrant information certificate, and necessary items (e.g., name, address).

[0232] The entrant terminal 30 presents the information (certificate type, required items) acquired from the business terminal 40 to the user. The entrant terminal 30 also displays a GUI that allows the user to select items to be provided to the delivery service provider from among the multiple items listed on the credential entrant information certificate. For example, the entrant terminal 30 uses a GUI such as that shown in FIG. 26 to acquire the items in the credential entrant information certificate that the user authorizes the delivery service provider to provide. At this time, the entrant terminal 30 may not allow the user to select items requested by the delivery service provider, assuming that the items will be submitted to the service provider. In the example of FIG. 26, the name and address may not be submitted or not selected. Note that if the cancel button in FIG. 26 is pressed, the credential entrant information certificate is not provided to the business terminal 40.

[0233] The entrant terminal 30 transmits to the business operator terminal 40 a verifiable presentation (VP) that includes the selected items and is signed with the user's private key.

[0234] The business operator terminal 40 verifies the signature of the VP as necessary, and if the verification is successful, generates package destination information using the VP.

[0235] Alternatively, the entrant terminal 30 may automatically generate a VP from the credentials and necessary items specified by the delivery service provider, and transmit the automatically generated VP to the provider terminal 40 .

[0236] In the above embodiment, the user provides the delivery service provider (verifier) ​​with a credential landing permit stored in the digital wallet. Here, it is sufficient for the delivery service provider to know whether the user has entered the country through the proper procedures, and the delivery service provider may not need the information written on the credential landing permit.

[0237] Therefore, the information processing system disclosed herein may use technology such as zero-knowledge proof to provide the delivery service provider (verifier) ​​with only the fact that the proposition held by the user (holder of the credential landing permit) is true. Specifically, the user may inform the delivery service provider only that he or she possesses the credential landing permit, without providing the specific date of landing permit.

[0238] In order to realize the proof using the above-mentioned zero-knowledge proof, the user's immigration terminal 30 and the delivery service provider's business terminal 40 exchange only the information required by the delivery service provider using an interactive knowledge proof protocol.

[0239] <Modification 7> The immigration terminal 30 may verify the identity of the user when opening a digital wallet.

[0240] For example, the entrant terminal 30 performs identity verification using an identification document containing the biometric information of the holder, such as a My Number card or a passport. The entrant terminal 30 uses the My Number card or the passport as a root of trust.

[0241] The entrant terminal 30 acquires information about the holder (issuer) of the identification card from the user's identification card. For example, the entrant terminal 30 acquires information about the holder of the My Number card from the integrated circuit (IC) of the My Number card.

[0242] Specifically, the entrant terminal 30 acquires basic information of the cardholder (the so-called four basic pieces of information: name, sex, date of birth, and address) and biometric information (facial image) of the cardholder. The entrant terminal 30 stores the basic information and biometric information read from the card.

[0243] Furthermore, the entrant terminal 30 acquires biometric information of the user (the person who opened the digital wallet). For example, the entrant terminal 30 acquires a facial image of the user by taking a selfie.

[0244] The entrant terminal 30 performs a matching process (authentication process) using the biometric information acquired from the identification card and the biometric information of the user. If the authentication process (one-to-one authentication) is successful, the entrant terminal 30 opens a digital wallet. The entrant terminal 30 confirms through the matching process (authentication process) using the biometric information that the person in whose name the identification card was issued and the user using the digital wallet of the entrant terminal 30 are the same person.

[0245] <Variation 8> The delivery service provider may verify that the person who wishes to receive the parcel delivery service and the person in whose name the digital wallet opened on the entrant terminal 30 held by the person who wishes to receive the parcel delivery service are the same person.

[0246] In this case, the entrant terminal 30 performs identity verification when the digital wallet is opened, and stores the biometric information (for example, a facial image) that has been successfully verified.

[0247] When a user requests to receive delivery services, the entrant terminal 30 transmits the stored biometric information together with the landing credential and entrant information to the business operator terminal 40. For example, the entrant terminal 30 converts the facial image into a two-dimensional barcode, and displays three two-dimensional barcodes including the two-dimensional barcode generated from the facial image.

[0248] The business operator terminal 40 acquires the facial image stored in the entrant terminal 30 from the two-dimensional barcode. Furthermore, the business operator terminal 40 acquires the facial image by photographing the user (the person who wishes to receive the delivery service) in front of the user in response to an operation by an employee of the delivery service operator or the like.

[0249] The business operator terminal 40 performs one-to-one authentication using the two facial images. If the identity verification using one-to-one authentication is successful, the business operator terminal 40 may determine that it is possible to provide the parcel delivery service to the user in front of the business operator terminal 40.

[0250] Alternatively, the identity verification may be performed visually by an employee of the delivery service provider. In this case, the provider terminal 40 displays the facial image received from the entrant terminal 30 on a display or the like. The employee using the provider terminal 40 compares the displayed facial image with the face of the user in front of them to verify the identity of the user.

[0251] <Other Modifications> In the above embodiment, a case where a luggage delivery service is provided to foreigners entering Japan has been described. However, the information processing system disclosed in the present application can also be applied to a case where a luggage delivery service is provided to foreigners entering countries other than Japan.

[0252] The entrant terminal 30 may provide the landing permit credential and the entrant information to the delivery service provider at different times, rather than at the same time. For example, the entrant terminal 30 may first provide the landing permit credential to the delivery service provider. If the delivery service provider determines that it is possible to provide the service to the user, the entrant terminal 30 provides the entrant information to the delivery service provider. In this way, the landing permit credential and the entrant information may be provided to the delivery service provider in two stages.

[0253] When the arrival information includes multiple candidate delivery destinations (for example, a domestic address or a domestic hotel where the arrival person is staying), the delivery service provider's device (business terminal 40, service server 50) may allow an employee to input which candidate delivery destination to use as the delivery destination of the package. The delivery service provider's device may also have an interface that determines the delivery destination to use in generating package destination information from among the multiple candidate delivery destinations.

[0254] The entrant terminal 30 may perform identity verification of the user when displaying (providing to the delivery service provider) a two-dimensional barcode related to the credential landing permit or entrant information. For example, the entrant terminal 30 performs facial authentication using a facial image of the user acquired when opening a digital wallet, etc., and a facial image obtained by photographing the user attempting to display the two-dimensional barcode. If facial authentication is successful, the entrant terminal 30 may display the two-dimensional barcode.

[0255] The service server 50 may acquire information regarding the parcel delivery destination when reserving a parcel delivery service.

[0256] In the above embodiment, a case has been described in which a passport number is used as information for identifying a user who makes a reservation for a service (reservation user identification information). Here, the reservation user identification information may be a combination of the passport number and other information. For example, in the second embodiment, a user may input their passport number and flight number as reservation user identification information to the service server 50 after checking in. The delivery service provider may use the flight number included in the reservation user identification information to obtain the aircraft (airline) on which the incoming passenger is boarding, the location where the luggage will be collected, and the like. Also, in the first embodiment, the user may notify the delivery service provider of their passport number and flight number when reserving a luggage delivery service.

[0257] In the above embodiment, the case where the user management database is configured inside the server device 10 has been described, but the database may also be configured on an external database server or the like. That is, some of the functions of the server device 10 may be implemented on another server. More specifically, the above-described "immigration information control unit (immigration information control means)" and "landing permit control unit (landing permit control means)" may be implemented on any of the devices included in the system.

[0258] There are no particular restrictions on the format of data transmission between each device (server device 10, entrant terminal 30, etc.), but data transmitted and received between these devices may be encrypted. Personal information and the like is transmitted and received between these devices, and in order to appropriately protect this information, it is desirable that encrypted data be transmitted and received.

[0259] In the flow charts (flowcharts, sequence diagrams) used in the above explanation, multiple steps (processes) are described in order, but the order of execution of the steps executed in the embodiments is not limited to the order described. In the embodiments, the order of the steps shown in the drawings can be changed to the extent that the content is not affected, such as by executing each process in parallel.

[0260] The above-described embodiments have been described in detail to facilitate understanding of the present disclosure, and it is not intended that all of the above-described configurations are required. Furthermore, when multiple embodiments are described, each embodiment may be used alone or in combination. For example, it is possible to replace part of the configuration of one embodiment with the configuration of another embodiment, or to add the configuration of another embodiment to the configuration of one embodiment. Furthermore, it is possible to add, delete, or replace part of the configuration of one embodiment with another configuration.

[0261] From the above explanation, it is clear that the present invention has industrial applicability, and the present invention can be suitably applied to an information processing system that provides delivery services to entrants.

[0262] Some or all of the above embodiments can be described as, but are not limited to, the following supplementary notes.

[0263] [Supplementary Note 1] A server device comprising: an acquisition means for acquiring, from an entrant who has checked their baggage with an airline at the time of departure, a credential landing permit issued to the entrant as a VC (Verifiable Credentials) and entrant information including at least the entrant's name and place of stay from information entered by the entrant into an online service that allows the entrant to submit information necessary for entry procedures in advance, and a destination control means for generating baggage destination information for shipping the entrant's baggage checked with the airline to the entrant's place of stay based on the name and place of stay included in the entrant information if verification of the electronic signature attached to the credential landing permit is successful, and outputting the generated baggage destination information. [Supplementary Note 2] The server device according to Supplementary Note 1, wherein the destination control means verifies the electronic signature attached to the credential landing permit using a public key obtained from a blockchain. [Supplementary Note 3] The server device of Supplementary Note 2, wherein the destination control means determines whether the entrant is eligible to receive the baggage delivery service based on the information stated in the landing permit credential, and generates the baggage destination information if the entrant is eligible to receive the baggage delivery service. [Supplementary Note 4] The server device of Supplementary Note 3, wherein the destination control means determines that the entrant is eligible to receive the baggage delivery service if the period of stay stated in the landing permit credential has not expired. [Supplementary Note 5] The server device of Supplementary Note 4, wherein the destination control means acquires the landing permit credential and the entrant information if an entrant who wishes to receive the baggage delivery service has made a reservation for the baggage delivery service. [Appendix 6] The server device described in any one of Appendices 1 to 4, wherein the acquisition means acquires the landing permit credentials and the entrant information necessary for providing the baggage delivery service by requesting the provision of the landing permit credentials and the entrant information from a terminal carried by the entrant in response to the entrant's wish to receive the baggage delivery service.[Supplementary Note 7] The server device according to any one of Supplementary Notes 1 to 4, wherein the credential landing permit is issued to an entrant who has completed a customs inspection, immigration examination, and quarantine inspection. [Supplementary Note 8] A control method for a server device, comprising: an acquisition step of acquiring, from an entrant who has checked their baggage with an airline at the time of departure, a credential landing permit issued to the entrant as a VC (Verifiable Credentials) and entrant information including at least information regarding the entrant's name and place of stay from information entered by the entrant into an online service that allows the entrant to submit information necessary for entry procedures in advance; and a destination control step of, if verification of the electronic signature attached to the credential landing permit is successful, generating baggage destination information for shipping the entrant's baggage checked with the airline to the entrant's place of stay based on the name and information regarding the place of stay included in the entrant information, and outputting the generated baggage destination information. [Supplementary Note 9] The control method for a server device according to Supplementary Note 8, wherein the destination control step verifies the electronic signature attached to the credential landing permit using a public key obtained from a blockchain. [Supplementary Note 10] The control method for a server device according to Supplementary Note 9, wherein the destination control step determines whether the entrant is eligible to receive the baggage delivery service based on the information stated on the credential landing permit, and generates the baggage destination information if the entrant is eligible to receive the baggage delivery service. [Supplementary Note 11] The control method for a server device according to Supplementary Note 10, wherein the destination control step determines that the entrant is eligible to receive the baggage delivery service if the period of stay stated on the credential landing permit has not expired. [Supplementary Note 12] The control method for a server device according to Supplementary Note 11, wherein the destination control step acquires the credential landing permit and the entrant information if an entrant wishing to receive the baggage delivery service has made a reservation for the baggage delivery service.[Supplementary Note 13] The method for controlling a server device according to any one of Supplementary Notes 8 to 12, wherein the obtaining step obtains the landing permit credentials and the entrant information necessary for providing the baggage delivery service by requesting a terminal carried by the entrant to provide the landing permit credentials and the entrant information necessary for providing the baggage delivery service in response to the entrant's request to receive the baggage delivery service. [Supplementary Note 14] The method for controlling a server device according to any one of Supplementary Notes 8 to 12, wherein the landing permit credentials are issued to entrants who have completed a customs inspection, an immigration examination, and a quarantine inspection. [Supplementary Note 15] A computer-readable storage medium storing a program for causing a computer mounted on a server device to execute the following: an acquisition process for acquiring, from an entrant who has checked their baggage with an airline at the time of departure, a credential landing permit issued to the entrant as a VC (Verifiable Credentials) and entrant information including at least the entrant's name and place of stay from information entered by the entrant into an online service that allows the entrant to submit information necessary for immigration procedures in advance; and a destination control process for generating baggage destination information for shipping the entrant's baggage checked with the airline to the entrant's place of stay based on the name and place of stay included in the entrant information if verification of the electronic signature attached to the credential landing permit is successful, and outputting the generated baggage destination information. [Supplementary Note 16] The storage medium according to Supplementary Note 15, wherein the destination control process verifies the electronic signature attached to the credential landing permit using a public key obtained from a blockchain. [Supplementary Note 17] The storage medium of Supplementary Note 16, wherein the destination control process determines whether the entrant is eligible to receive the baggage delivery service based on the information recorded on the landing permit credential, and generates the baggage destination information if the entrant is eligible to receive the baggage delivery service. [Supplementary Note 18] The storage medium of Supplementary Note 17, wherein the destination control process determines that the entrant is eligible to receive the baggage delivery service if the period of stay recorded on the landing permit credential has not expired.[Supplementary Note 19] The storage medium of Supplementary Note 18, wherein the destination control process acquires the landing permit credential and the entrant information when an entrant who wishes to receive the baggage delivery service has made a reservation for the baggage delivery service. [Supplementary Note 20] The storage medium of any one of Supplements 15 to 19, wherein the acquisition process acquires the landing permit credential and the entrant information by requesting a terminal carried by the entrant to provide the landing permit credential and the entrant information necessary for providing the baggage delivery service in response to the entrant's desire to receive the baggage delivery service. [Supplementary Note 21] The storage medium of any one of Supplements 15 to 19, wherein the landing permit credential is issued to an entrant who has completed a customs inspection, immigration examination, and quarantine inspection.

[0264] Furthermore, some or all of the configurations described in Supplementary Notes 2 to 7 that are dependent on Supplementary Note 1 above may also be dependent on Supplementary Notes 8 and 15 in the same dependent relationship as Supplementary Notes 2 to 7. Furthermore, not limited to Supplementary Notes 1, 8, and 15, some or all of the configurations described as Supplements may be made dependent on various hardware, software, various recording means for recording software, or systems, within the scope of each of the above-mentioned embodiments.

[0265] The disclosures of the above-cited prior art documents are incorporated herein by reference. Although the embodiments of the present invention have been described above, the present invention is not limited to these embodiments. Those skilled in the art will understand that these embodiments are merely illustrative and that various modifications are possible without departing from the scope and spirit of the present invention. In other words, the present invention naturally includes various modifications and alterations that may be made by those skilled in the art in accordance with the entire disclosure, including the claims, and the technical concepts thereof.

[0266] 10 Server device 20 CIQ inspection station 30 Immigrant terminal 40 Business operator terminal 50 Service server 51 Person in charge terminal 52 Reception terminal 100 Server device 101 Acquisition means 102 Destination control means 201 Communication control unit 202 Immigrant information control unit 203 Landing permit control unit 204 Memory unit 301 Communication control unit 302 Acquisition control unit 303 Usage control unit 304 Memory unit 311 Processor 312 Memory 313 Input / output interface 314 Communication interface 401 Communication control unit 402 Service provision control unit 403 Memory unit 501 Communication control unit 502 Service provision control unit 503 Memory unit

Claims

1. A means of obtaining, from an entrant who checked their luggage with an airline upon departure, the credential landing permit issued to the entrant as VCs (Verifiable Credentials), and entrant information, including at least the entrant's name and address, from information entered by the entrant into an online service that allows the submission of information necessary for immigration procedures in advance. If the verification of the electronic signature attached to the aforementioned credential landing permit is successful, a destination control means generates luggage destination information for sending the luggage of the entrant, which has been checked with the airline, to the entrant's place of stay, based on the name and accommodation information contained in the entrant's information, and outputs the generated luggage destination information. A server device equipped with the following features.

2. The server device according to claim 1, wherein the destination control means verifies the electronic signature attached to the credential landing permit using a public key obtained from the blockchain.

3. The server device according to claim 2, wherein the destination control means determines whether the entrant is eligible to receive the baggage delivery service based on the information described in the credential landing permit, and generates the baggage destination information if the entrant is eligible to receive the baggage delivery service.

4. The server device according to claim 3, wherein the destination control means determines that the entrant is eligible to receive the package delivery service if the period of stay stated on the credential landing permit has not expired.

5. The server device according to claim 4, wherein the destination control means acquires the credential landing permit and the entrant information when an entrant who wishes to enjoy the parcel delivery service has made a reservation for the parcel delivery service.

6. The server device according to any one of claims 1 to 4, wherein the acquisition means acquires the credential landing permit and the entrant information by requesting the terminal held by the entrant to provide the credential landing permit and the entrant information necessary for providing the credential landing permit, in response to the entrant's desire to enjoy the credential delivery service.

7. The server device according to any one of claims 1 to 4, wherein the aforementioned credential landing permit is issued to an entrant who has completed customs inspection, immigration inspection, and quarantine inspection, respectively.

8. The acquisition process involves obtaining, from an incoming passenger who checked their luggage with the airline upon departure, the credential landing permit issued to the said passenger as VCs (Verifiable Credentials), and passenger information, including at least the passenger's name and address, from the information entered by the said passenger in an online service that allows for the prior submission of information necessary for immigration procedures. If the verification of the electronic signature attached to the aforementioned credential landing permit is successful, a destination control step is performed in which, based on the name and accommodation information contained in the arrival information, luggage destination information is generated for sending the arrival person's luggage, which has been checked with the airline, to the arrival person's accommodation, and the generated luggage destination information is output. A control method for a server device, comprising the following features.

9. The computer installed in the server device A data acquisition process that obtains, from an incoming passenger who checked their luggage with an airline upon departure, the following: the credential landing permit issued to the said passenger as VCs (Verifiable Credentials), and passenger information, including at least the passenger's name and address, from the information entered by the said passenger in an online service that allows for the prior submission of information necessary for immigration procedures. If the verification of the electronic signature attached to the aforementioned credential landing permit is successful, a destination control process is performed in which, based on the name and accommodation information contained in the arrival information, luggage destination information is generated for sending the arrival person's luggage, which has been checked with the airline, to the arrival person's accommodation, and the generated luggage destination information is output. A program to execute.