Terminal, server device, terminal control method, and storage medium

Abstract

The present invention provides a terminal that contributes to enabling a business operator to feel safe when providing a car rental service. This terminal comprises an acquisition control means and a provision control means. The acquisition control means acquires a credential landing permit issued as verifiable credentials (VCs). When a vehicle is rented from a business operator who runs a car rental business, the provision control means provides the acquired credential landing permit to said business operator.

Description

Terminal, server device, terminal control method, and storage medium

[0001] The present invention relates to a terminal, a server device, a method for controlling a terminal, and a storage medium.

[0002] There is technology related to car rental services that are primarily targeted at foreigners.

[0003] For example, Patent Document 1 describes the provision of a management server, a store terminal, and a rental car rental system that can reliably verify driving qualifications granted by public institutions. In the rental car rental system of Patent Document 1, the management server has a network communication unit and a processor. The network communication unit communicates with a store terminal installed in the store that rents out rental cars. The processor acquires information including license information read by the store terminal from a mobile terminal carried by a foreign user via the communication unit. If the acquired user's license information includes an international driver's license that permits driving a rental car, the processor transmits to the store terminal a notice that the rental car is permitted for the user.

[0004] Japanese Patent Application Laid-Open No. 2022-021656

[0005] The rental car rental system disclosed in Patent Document 1 permits rental cars on the condition that the foreign national seeking the service possesses an international driver's license. However, this approach may not be able to increase the risks associated with providing rental car services. For example, if a foreign national applies to rent a car for a period exceeding the permitted stay, there is a high possibility that the rented vehicle will not be returned correctly.

[0006] A primary object of the present invention is to provide a terminal, a server device, a method for controlling a terminal, and a storage medium that contribute to enabling businesses to provide rental car services with peace of mind.

[0007] According to a first aspect of the present invention, there is provided a terminal comprising: an acquisition control means for acquiring a credential landing permit issued as a VC (Verifiable Credential); and a provision control means for providing the acquired credential landing permit to a private automobile rental business operator when renting a vehicle from the operator.

[0008] According to a second aspect of the present invention, a server device is provided which includes an acquisition means for acquiring a credential landing permit issued as a VC (Verifiable Credentials) to a user who has reserved a vehicle rental, and a determination means for using the acquired credential landing permit to determine whether the vehicle can be rented to the user.

[0009] According to a third aspect of the present invention, there is provided a terminal control method comprising: an acquisition control process for acquiring a credential landing permit issued as VCs (Verifiable Credentials); and a provision control process for providing the acquired credential landing permit to a private automobile rental business operator when renting a vehicle from the operator.

[0010] According to a fourth aspect of the present invention, a computer-readable storage medium is provided that stores a program for causing a computer mounted on a terminal to execute an acquisition control process for acquiring a credential landing permit issued as a VC (Verifiable Credentials), and a provision control process for providing the acquired credential landing permit to a business operating a private automobile rental business when renting a vehicle from the business.

[0011] According to each aspect of the present invention, a terminal, a server device, a terminal control method, and a storage medium are provided that contribute to enabling businesses to provide rental car services with peace of mind. Note that the effects of the present invention are not limited to those described above. The present invention may achieve other effects instead of or in addition to the effects described above.

[0012] FIG. 1 is a diagram illustrating an overview of an embodiment. FIG. 2 is a flowchart illustrating an overview of an operation of an embodiment. FIG. 3 is a diagram illustrating an example of a schematic configuration of an information processing system according to an embodiment of the present disclosure. FIG. 4 is a diagram illustrating an example of a display of a terminal according to an embodiment of the present disclosure. FIG. 5 is a diagram illustrating an example of an operation of the information processing system according to an embodiment of the present disclosure. FIG. 6 is a diagram illustrating an example of an operation of the information processing system according to an embodiment of the present disclosure. FIG. 7 is a diagram illustrating an example of an operation of the information processing system according to an embodiment of the present disclosure. FIG. 8 is a diagram illustrating an example of a processing configuration of a control server according to an embodiment of the present disclosure. FIG. 9 is a diagram illustrating an example of a processing configuration of a terminal according to an embodiment of the present disclosure. FIG. 10 is a flowchart illustrating an example of an operation of an acquisition control unit according to an embodiment of the present disclosure. FIG. 11 is a diagram illustrating an example of a processing configuration of a service server according to an embodiment of the present disclosure. FIG. 12 is a flowchart illustrating an example of an operation of a service provision control unit according to an embodiment of the present disclosure. FIG. 13 is a flowchart illustrating an example of an operation of a service provision control unit according to an embodiment of the present disclosure. FIG. 14 is a sequence diagram illustrating an example of an operation of the information processing system according to an embodiment of the present disclosure. FIG. 15 is a sequence diagram illustrating an example of an operation of the information processing system according to an embodiment of the present disclosure. Fig. 16 is a diagram for explaining the operation of an information processing system according to a modified example of an embodiment of the present disclosure. Fig. 17 is a diagram for explaining the operation of an information processing system according to a modified example of an embodiment of the present disclosure. Fig. 18 is a diagram for explaining the operation of an information processing system according to a modified example of an embodiment of the present disclosure. Fig. 19 is a diagram illustrating an example of the hardware configuration of a service server according to the present disclosure.

[0013] First, an overview of one embodiment will be described. Note that the reference numerals in the drawings are added to each element for convenience as an example to facilitate understanding, and the description of this overview is not intended to be limiting in any way. Furthermore, unless otherwise specified, the blocks shown in each drawing represent functional units, not hardware units. Connection lines between blocks in each drawing include both bidirectional and unidirectional lines. Unidirectional arrows are used to schematically indicate the flow of the main signal (data) and do not exclude bidirectionality. Note that in this specification and drawings, elements that can be similarly described may be assigned the same reference numerals to avoid redundant explanation.

[0014] The terminal 100 according to one embodiment includes an acquisition control unit 101 and a provision control unit 102 (see FIG. 1). The acquisition control unit 101 acquires a credential landing permit issued as a VC (Verifiable Credentials) (step S1 in FIG. 2). When renting a vehicle from a private automobile rental business, the provision control unit 102 provides the acquired credential landing permit to the business (step S2).

[0015] The terminal 100 provides the rental car service provider with a credential landing permit issued to an entrant who has entered the country after going through the proper procedures. The credential landing permit contains the date of landing permission, the expiration date of stay, etc. The rental car service provider can verify the consistency between the user's period of stay and the desired rental period (vehicle reservation period) based on the information contained in the acquired credential landing permit. If the rental car service provider determines that the vehicle rental period is inappropriate in light of the user's permitted period of stay, it can refuse to rent the vehicle to the user. As a result, the risk of the rented vehicle not being returned is reduced. In other words, the service provider can provide the rental car service with peace of mind.

[0016] Specific embodiments will be described in more detail below with reference to the drawings.

[0017] First Embodiment The first embodiment will be described in more detail with reference to the drawings.

[0018] [System Configuration] Fig. 3 is a diagram illustrating an example of a schematic configuration of an information processing system according to an embodiment of the present disclosure. As shown in Fig. 3, the information processing system includes a management center, a company that operates a private automobile rental business (so-called car rental business), and an airport. In the following description, the company that operates a private automobile rental business will be referred to as a car rental company.

[0019] A management center is an organization or institution that manages and provides information to entrants, such as foreigners visiting Japan and Japanese people returning to their home countries. Management centers are managed and operated by voluntary organizations. For example, management centers are managed and operated by national public institutions or private businesses commissioned by the government.

[0020] The management center includes a control server 10. The control server 10 is a server that realizes the main functions of the management center. In particular, the control server 10 controls the issuance of credential landing permits, which will be described later. The control server 10 may be installed in the building of the management center, or on a network (cloud).

[0021] A CIQ (Customs, Immigration, and Quarantine) inspection station 20 is installed within the airport. Immigrants (e.g., inbound passengers and returning residents) undergo inspections and screenings for customs, immigration, and quarantine at the CIQ inspection station 20. Once entrants have completed immigration procedures, including CIQ inspections, at the arrival airport, they are free to move around the country.

[0022] A rental car company is a business that provides a service of renting out private cars to users for a fee. The rental car company is equipped with a service server 30. The service server 30 is a server that realizes the main functions of the rental car service. The service server 30 may be installed in the rental car company's building or on a network (cloud).

[0023] In this disclosure, a case will be described in which the rental car company provides services primarily to foreign visitors to Japan (inbound tourists). However, it goes without saying that the rental car company may also provide services to Japanese people living in Japan.

[0024] A user (inbound passenger) carries a terminal 40 such as a smartphone.

[0025] The devices shown in FIG. 3 (control server 10, terminals installed in CIQ inspection station 20, service server 30, etc.) are connected by wired or wireless communication means and are configured to be able to communicate with each other.

[0026] 3 is an example, and is not intended to limit the configuration of the information processing system. For example, a plurality of control servers 10 may be included in the system.

[0027] [Overall Operation] Next, an overall operation of the information processing system according to the first embodiment will be described.

[0028] <Installation of Rental Car Application> A user who wishes to use the rental car service installs a rental car application on the terminal 40. A detailed description of application installation will be omitted.

[0029] <Preparing a Digital Wallet> The terminal 40 of the user (inbound passenger) has a digital wallet function. A digital wallet is an electronic information storage service that guarantees information security such as data integrity, reliability, and availability.

[0030] A user installs an application for realizing a digital wallet on their terminal 40. By opening a digital wallet on terminal 40, the user can store various digital content on terminal 40, such as electronic money, identification documents such as passports and driver's licenses, various ticket information such as airline tickets and boarding passes, and vaccination certificates.

[0031] For example, the terminal 40 stores digital content as shown in Fig. 4. The digital content stored in the terminal 40 includes official identification documents such as electronic money, electronic passports (digital passports), and electronic driver's licenses (mobile driver's licenses).

[0032] A user (inbound passenger) is issued a digital passport or a mobile driver's license (an international driver's license that certifies eligibility to drive a vehicle in Japan) by a public institution or the like in their home country. The terminal 40 stores the issued digital passport or mobile driver's license (international driver's license) in a digital wallet. Note that instead of or in addition to the mobile driver's license, image data of a regular driver's license (image data showing the front side with a facial image) may be stored in the digital wallet. Alternatively, image data of the back side may be stored in addition to image data of the front side.

[0033] <Rental Car Reservation> A user (inbound passenger) makes a reservation for a rental car. Specifically, the user operates the terminal 40 to launch a rental car application. The rental car application accesses the service server 30 of the rental car company.

[0034] The user makes a reservation for a rental car on a reservation page or the like provided by the service server 30. The user inputs their preferences, such as the rental period (rental start date, rental end date), car model, and rental car pick-up location, into the service server 30. The service server 30 determines whether or not a rental car that meets the user's preferences can be prepared.

[0035] If a rental car that meets the user's desire is available, the service server 30 acquires the user's identification card and driver's license from the user's terminal 40.

[0036] The service server 30 acquires an identification card containing the user's biometric information. In the following description, the service server 30 acquires a digital passport.

[0037] Examples of biometric information include data (features) calculated from physical characteristics unique to an individual, such as a face, fingerprint, voiceprint, veins, retina, or iris pattern. Alternatively, the biometric information may be image data such as a face image or fingerprint image. The biometric information may be any information that includes the user's physical characteristics. In the embodiment disclosed herein, a case where biometric information related to a person's "face" (a face image or features generated from a face image) is used will be described.

[0038] The service server 30 also acquires the user's driver's license. In this example, the user is assumed to be a foreign visitor to Japan (inbound passenger), and therefore, in the following explanation, the service server 30 will be described as acquiring a mobile driver's license (international driver's license).

[0039] To obtain a digital passport and a mobile driver's license, the service server 30 sends a "certificate provision request" to the user's terminal 40 (see FIG. 5).

[0040] In response to receiving the certificate provision request, the terminal 40 reads the digital passport and the mobile driver's license from the digital wallet, and transmits the read digital passport and the mobile driver's license to the service server 30.

[0041] The service server 30 uses the acquired digital passport to verify the identity of the user (reservation person). Specifically, the service server 30 performs one-to-one authentication using a facial image obtained from the digital passport and a facial image of the reservation person (a so-called facial image taken by a selfie).

[0042] If the one-to-one authentication is successful, the service server 30 determines that the identity of the user (reserving person) has been successfully verified.

[0043] If the identity verification is successful, the service server 30 determines whether the user is qualified to drive a vehicle in the country (the country where the vehicle is rented). Specifically, the service server 30 determines whether the user is qualified to drive a vehicle in the country based on the mobile driver's license acquired from the user's terminal 40.

[0044] If the user is qualified to drive a vehicle, the service server 30 accepts the user's reservation. In this case, the service server 30 generates a reservation ID that uniquely identifies the reservation and transmits it to the terminal 40. The terminal 40 (rental car application) stores the received reservation ID internally.

[0045] <Pre-entry procedures> As mentioned above, all visitors must go through immigration procedures at the airport of arrival. These procedures include customs, immigration, and quarantine inspections.

[0046] Online services are available to reduce the burden of immigration procedures for travelers. Specifically, a service called "Visit Japan Web" is available at designated arrival airports. By using the Visit Japan Web service, users can submit information regarding quarantine, immigration inspection, and customs procedures online upon arrival.

[0047] Before leaving the country, a user (person wishing to enter the country) operates terminal 40 to input information regarding quarantine, immigration inspection, and customs application to control server 10. For example, the user inputs information such as name, sex, date of birth, address, telephone number, passport number, email address, biometric information (e.g., facial image), nationality, and information regarding the place of stay within the country (e.g., the name, address, and telephone number of the hotel where the user will be staying) to control server 10.

[0048] After completing the registration of the above information, users (those wishing to enter the country) board an aircraft and arrive at the arrival airport. After that, the entrant will undergo customs inspection, immigration screening, and quarantine inspection.

[0049] <Issuance of Landing Permit> A landing permit stamp is issued to inbound passengers who have successfully completed customs inspection, immigration screening, and quarantine inspection. Specifically, an authentication seal is affixed to the passport of the entrant, and a landing permit stamp is printed on the authentication seal. In addition, the information contained in the landing permit stamp is printed on the authentication seal in the form of a two-dimensional barcode.

[0050] Once an entrant has obtained a landing permission stamp, they can request the Management Center to issue an electronic landing permit. In response to the entrant's request, the Management Center will issue verifiable credentials (VCs) as landing permits, the contents of which can be verified online. In the following explanation, landing permits issued as VCs will be referred to as "credential landing permits."

[0051] Prior to requesting the issuance of a credential landing permit, the user's terminal 40 generates a pair of a public key and a private key. The terminal 40 also generates a decentralized identifier (DID). The terminal 40 registers the generated DID (user ID; holder ID) and public key in the blockchain (step S01 in FIG. 6).

[0052] Furthermore, the user's terminal 40 presents the user ID and requests the issuer of the landing permit (the management center) to issue a credential landing permit. Specifically, the user operates the terminal 40 to photograph the two-dimensional barcode (the two-dimensional barcode containing information about the landing permit stamp) affixed to the passport. The terminal 40 then transmits a "landing permit issuance request" containing the photographed two-dimensional barcode to the control server 10 (step S02).

[0053] The control server 10 generates and stores in advance the DID (issuer ID), private key, and public key of the issuer.

[0054] Upon receiving the landing permit issuance request, the control server 10 generates a credential landing permit including an issuer ID and a user ID.

[0055] Specifically, the control server 10 generates a credential landing permit that includes metadata including the type of VC (landing permit), the name of the issuing organization (e.g., the Immigration Services Agency), the date and time of issue, etc., the main body of the credential information, and the issuer's public key information, electronic signature, etc. Note that the main body of the credential information describes specific information certified by the issuer (e.g., the date of landing permit, the period of stay, the status of residence, etc.).

[0056] The control server 10 transmits the generated credential landing permit to the terminal 40 of the user (the user who will become the certificate holder; the person requesting the issuance of the certificate) (issuance of credential landing permit; step S03).

[0057] Furthermore, the control server 10 registers the issuer ID and the generated public key, etc. in the blockchain (step S04).

[0058] The terminal 40 stores the received credential landing permit in the digital wallet. The credential landing permit is stored in the digital wallet of the user who has entered the country after going through the official procedures.

[0059] <Rental Car Rental Procedures> Once a user enters the country, they carry out procedures to rent the reserved rental car. Specifically, the user operates terminal 40 to launch the rental car application. When the user performs a predetermined operation (for example, pressing the "rental button"), terminal 40 transmits to service server 30 the reservation ID received from service server 30 upon completion of the reservation.

[0060] The service server 30 identifies the user's reservation (rental period, vehicle type, rental location, etc.) based on the received reservation ID. If the identified reservation is valid (if the date of receipt of the reservation ID and the rental start date are the same), the service server 30 obtains a credential landing permit from the user's terminal 40.

[0061] Specifically, the service server 30 transmits a "landing permit request" to the user's terminal 40 (step S11 in FIG. 7).

[0062] In response to the request, the terminal 40 reads the credential landing permit from the digital wallet, and then attaches an electronic signature to the read credential landing permit and transmits it to the service server 30 (step S12).

[0063] Upon receiving the credential landing permit, the service server 30 verifies the received credential landing permit. Specifically, the service server 30 acquires the issuer ID and user ID included in the acquired credential landing permit. Furthermore, the service server 30 acquires the public key corresponding to the acquired issuer ID and the public key corresponding to the acquired user ID from the blockchain (step S13).

[0064] The service server 30 verifies the electronic signature attached to the credential landing permit using the acquired public key. Specifically, the service server 30 verifies the electronic signature of the holder and the electronic signature of the issuer attached to the credential landing permit. By verifying these electronic signatures, the service server 30 confirms that the credential landing permit acquired from the user (credential landing permit holder) has not been tampered with and is a certificate issued by a trustworthy issuer.

[0065] If the acquired landing permit credential is successfully verified, the service server 30 verifies the validity of the rental period reserved by the user based on the qualification information of the landing permit credential. Specifically, if the rental car is reserved for a period exceeding the permitted stay period of the user (inbound passenger), the service server 30 determines that the rental car cannot be rented.

[0066] If the rental period is included in the stay period permitted for the user (inbound passenger), the service server 30 determines that the rental car can be rented.

[0067] The service server 30 delivers the rental car key to the user who has been determined to be able to rent the car. The service server 30 then transmits a digital key for operating the vehicle to the terminal 40 carried by the user (step S14).

[0068] The terminal 40 (rental car application) stores the received digital key.

[0069] <Using a Rental Car> When using (driving) a rental car, the user operates the terminal 40 to start up a rental car application.

[0070] When the user (renter of a rental car) performs a predetermined operation (for example, pressing the "rental car use button"), the terminal 40 performs identity verification of the user. The terminal 40 performs identity verification using a facial image obtained from a digital passport stored in the digital wallet and a facial image of the operator of the device obtained by taking a selfie. If identity verification is successful, the terminal 40 (rental car application) activates the digital key to unlock the rental car and start the engine.

[0071] Next, details of each device included in the information processing system according to the first embodiment will be described.

[0072] 8 is a diagram illustrating an example of a processing configuration (processing module) of the control server 10 according to an embodiment of the present disclosure. Referring to FIG. 8, the control server 10 includes a communication control unit 201, a user information acquisition unit 202, a landing permit control unit 203, and a storage unit 204.

[0073] The communication control unit 201 is a means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the terminal 40. The communication control unit 201 also transmits data to the terminal 40. The communication control unit 201 passes data received from other devices to other processing modules. The communication control unit 201 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 201. The communication control unit 201 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0074] The user information acquisition unit 202 is a means for acquiring information necessary for providing the Visit Japan Web service. When a user operates the terminal 40 to access a predetermined website (the website of the Visit Japan Web service), the user information acquisition unit 202 acquires information such as the user's name, gender, date of birth, address, and passport number via the terminal 40.

[0075] The information acquired by the user information acquisition unit 202 is used for the Visit Japan Web service. Note that a detailed description of the Visit Japan Web service will be omitted because realizing the Visit Japan Web service is outside the scope of the present disclosure.

[0076] The landing permit control unit 203 is a means for controlling the issuance of landing permits (credential landing permits) and the like.

[0077] The landing permit control unit 203 processes the "landing permit issuance request" received from the terminal 40. Upon receiving the landing permit issuance request, the landing permit control unit 203 decodes the two-dimensional barcode included in the request to obtain the information printed on the landing permit stamp. Specifically, the landing permit control unit 203 obtains information such as the landing permit date, period of stay, and status of residence.

[0078] If the two-dimensional barcode cannot be correctly decoded and the information written on the landing permit stamp cannot be obtained, the landing permit control unit 203 sends a negative response to the terminal 40 indicating that the credential landing permit cannot be issued.

[0079] If the information written on the landing permit stamp is acquired, the landing permit control unit 203 generates a credential landing permit to be issued to the entrant. The landing permit control unit 203 generates a credential landing permit including an issuer ID and a user ID (the DID of the person to whom the credential landing permit is issued).

[0080] Specifically, the landing permit control unit 203 generates a credential landing permit that includes metadata including the type of VCs, the issuing organization name, the date and time of issue, etc., the qualification information body, the issuer's public key information, an electronic signature, etc. The electronic signature affixed to the credential landing permit is made using a private key corresponding to the issuer ID generated in advance.

[0081] The landing permit control unit 203 transmits the generated credential landing permit to the terminal 40. The landing permit control unit 203 transmits an affirmative response including the generated credential landing permit to the terminal 40.

[0082] In addition, the landing permit control unit 203 registers the issuer ID, public key, etc., which have been generated in advance, in the blockchain.

[0083] The storage unit 204 is a means for storing information necessary for the operation of the control server 10 .

[0084] 9 is a diagram illustrating an example of a processing configuration (processing module) of the terminal 40 according to an embodiment of the present disclosure. Referring to FIG. 9, the terminal 40 includes a communication control unit 301, an acquisition control unit 302, a function realization unit 303, and a storage unit 304.

[0085] The communication control unit 301 is a means for controlling communication with other devices. For example, the communication control unit 301 receives data (packets) from the control server 10. The communication control unit 301 also transmits data to the control server 10. The communication control unit 301 passes data received from other devices to other processing modules. The communication control unit 301 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 301. The communication control unit 301 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0086] The acquisition control unit 302 is a means for controlling the acquisition of a credential landing permit, and acquires a credential landing permit issued to a user as a VC (Verifiable Credential).

[0087] 10 is a flowchart showing an example of the operation of the acquisition control unit 302. The operation of the acquisition control unit 302 for acquiring a credential landing permit will be described with reference to FIG.

[0088] When a user who has opened a digital wallet starts the digital wallet application and performs a predetermined operation (for example, pressing the landing permit issuance button), the acquisition control unit 302 controls the acquisition of a credential landing permit.

[0089] The acquisition control unit 302 generates a pair of a public key and a private key and a user ID (user DID), which is a distributed identifier. The acquisition control unit 302 registers the generated user ID and public key in the blockchain (registering the public key, etc.; step S101).

[0090] Next, the acquisition control unit 302 acquires information necessary for requesting the issuance of a credential landing permit using a GUI or the like (acquisition of necessary information; step S102).

[0091] Specifically, the acquisition control unit 302 photographs the two-dimensional barcode attached to the passport (the two-dimensional barcode into which the information of the landing permission stamp has been converted) in response to the user's operation. The acquisition control unit 302 then acquires image data showing the two-dimensional barcode.

[0092] The acquisition control unit 302 notifies the control server 10 in the management center of the image data showing the two-dimensional barcode and the user ID. Specifically, the acquisition control unit 302 transmits a "credential landing permit issuance request" including the image data, the user ID, etc. to the control server 10 (landing permit issuance request; step S103).

[0093] The acquisition control unit 302 may also affix an electronic signature to the information included in the credential landing permit issuance request using a private key corresponding to the public key registered in the blockchain.

[0094] The acquisition control unit 302 receives a response (positive response or negative response) to the credential landing permit issuance request from the control server 10 (step S104).

[0095] If a negative response is received indicating that the issuance of the credential landing permit has failed (step S105, No branch), the acquisition control unit 302 notifies the user that the credential landing permit has not been issued (notification of non-issuance; step S106).

[0096] When receiving a positive response indicating that the credential landing permit has been successfully issued (step S105, Yes branch), the acquisition control unit 302 stores the credential landing permit received from the control server 10 in the digital wallet (step S107). At that time, the acquisition control unit 302 may notify the user that the credential landing permit has been issued.

[0097] The acquisition control unit 302 may verify the electronic signature attached to the credential landing permit obtained from the control server 10. In this case, the acquisition control unit 302 obtains from the blockchain a public key corresponding to the issuer ID written on the credential landing permit. The acquisition control unit 302 may verify the electronic signature attached to the credential landing permit using the obtained public key, and if the verification is successful, may store the credential landing permit in the digital wallet.

[0098] In this way, the acquisition control unit 302 acquires a credential landing permit from the control server 10 and stores the acquired credential landing permit in the digital wallet. At that time, if the acquisition control unit 302 successfully verifies the signature of the acquired credential landing permit, the acquisition control unit 302 may store the acquired credential landing permit in the digital wallet.

[0099] The function realization unit 303 is a means for realizing the functions of the rental car application, and controls the reservation, rental, and use of a rental car.

[0100] The function realization unit 303 accesses the rental car company's service server 30 in response to a user's operation. The function realization unit 303 transmits to the service server 30 rental car reservation information (rental period, vehicle type, rental location, etc.) acquired from the user via a GUI (Graphical User Interface) or the like.

[0101] The function realization unit 303 receives a "certificate provision request" from the service server 30 that has accepted the reservation.

[0102] Upon receiving the certificate provision request, the function realization unit 303 attempts to read the digital passport and mobile driver's license from the digital wallet.

[0103] If reading of at least one of the digital passport and the mobile driver's license fails, the function realization unit 303 sends a negative response to the service server 30 indicating that the required certificate cannot be provided.

[0104] If the digital passport and mobile driver's license are successfully read, the function realization unit 303 sends an affirmative response including the read digital passport and mobile driver's license to the service server 30.

[0105] When the rental car reservation is completed, the function realization unit 303 receives the reservation ID from the service server 30. The function realization unit 303 stores the received reservation ID.

[0106] In this way, the function realization unit 303 has the function of a provision unit (provision means) that provides an electronic identification card (digital passport) and an electronic driver's license (mobile driver's license) to the rental car company when a user reserves a vehicle to rent a vehicle.

[0107] When renting a car, the function realization unit 303 accesses the service server 30 in response to a user operation (for example, pressing the "rental button"). At that time, the function realization unit 303 transmits to the service server 30 the reservation ID received from the service server 30 at the time of reservation completion.

[0108] Thereafter, the function realization unit 303 receives a “landing permit provision request” from the service server 30 .

[0109] When the landing permit provision request is received, the function realization unit 303 attempts to read the credential landing permit stored in the digital wallet.

[0110] If the reading of the credential landing permit fails, the function realization unit 303 transmits a negative response to the service server 30 indicating that the credential landing permit cannot be provided.

[0111] If the credential landing permit is successfully read, the function realization unit 303 signs the read credential landing permit using a private key corresponding to the user's DID (user ID), and then transmits an affirmative response including the credential landing permit with the digital signature to the service server 30.

[0112] In this way, when a user rents a vehicle from a rental car company, the function realization unit 303 provides the rental car company with the credential landing permit obtained from the license management center.

[0113] The function realization unit 303 receives the key (digital key) for the reserved rental car from the service server 30. The function realization unit 303 stores the received digital key.

[0114] When the user performs a predetermined operation (for example, pressing the "rent a car" button), the function realization unit 303 performs identity verification of the user. The function realization unit 303 performs identity verification using a facial image obtained from a digital passport stored in the digital wallet and a facial image of the operator obtained by taking a selfie.

[0115] If the identity verification is successful, the function realization unit 303 unlocks the rental car, starts the engine, etc. in response to the user's operation. At this time, the function realization unit 303 unlocks the rental car, etc. using the digital key received from the service server 30. Note that controlling the vehicle using the digital key is not within the scope of the present disclosure, and therefore a detailed description thereof will be omitted.

[0116] The storage unit 304 is a means for storing information necessary for the operation of the terminal 40 .

[0117] 11 is a diagram illustrating an example of a processing configuration (processing module) of the service server 30 according to an embodiment of the present disclosure. Referring to FIG. 11, the service server 30 includes a communication control unit 401, a service provision control unit 402, and a storage unit 403.

[0118] The communication control unit 401 is a means for controlling communication with other devices. For example, the communication control unit 401 receives data (packets) from the terminal 40. The communication control unit 401 also transmits data to the terminal 40. The communication control unit 401 passes data received from other devices to other processing modules. The communication control unit 401 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 401. The communication control unit 401 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

[0119] The service provision control unit 402 is a means for executing control relating to the rental car service provided to the user. The service provision control unit 402 controls the rental car reservation, rental car handover procedure, and the like.

[0120] The service provision control unit 402 has functions as an acquisition unit (acquisition means), a reservation unit (reservation means), a determination unit (determination means), and a key control unit (key control means).

[0121] The reservation unit acquires an electronic identification card from a user who wishes to reserve a vehicle for rent, and if identity verification using the acquired identification card is successful, accepts the reservation for renting the vehicle. The acquisition unit acquires a credential landing permit issued to the user who has reserved the vehicle for rent as a VC (Verifiable Credential). The determination unit uses the acquired credential landing permit to determine whether or not the vehicle can be rented to the user. If it is determined that the vehicle can be rented to the user, the key control unit transmits a digital key for the vehicle to the user.

[0122] The operation of the service provision control unit 402 regarding rental car reservations will be described with reference to FIG.

[0123] When a user accesses a predetermined reservation page or the like and wishes to reserve a rental car, the service provision control unit 402 displays a GUI on the terminal 40 and acquires reservation information (step S201). The service provision control unit 402 acquires the user's desired rental period (rental start date, rental end date), car model, rental car pick-up location, etc.

[0124] The service provision control unit 402 refers to a database that manages rental car reservations and determines whether a rental car that meets the user's needs can be prepared. Note that rental car reservation management and the like are obvious to those skilled in the art and are not within the scope of the present disclosure, so detailed explanation will be omitted.

[0125] If a rental car that meets the user's needs is available, the service provision control unit 402 acquires the digital passport and mobile driver's license from the user's terminal 40. Specifically, the service provision control unit 402 sends a "certificate provision request" to the terminal 40 (step S202).

[0126] The service provision control unit 402 receives a response (positive response or negative response) to the certificate provision request (step S203).

[0127] If a negative response is received (step S204, No branch), the service provision control unit 402 notifies the user that the rental car reservation cannot be accepted (notification that reservation is not possible; step S205).

[0128] If an affirmative response is received (step S204, Yes branch), the service provision control unit 402 uses the acquired digital passport to verify the identity of the user (reservation person) (step S206).

[0129] Specifically, the service provision control unit 402 instructs the user to acquire biometric information (face image) via the terminal 40. The user takes a so-called selfie to acquire the face image. The service provision control unit 402 acquires the face image of the user from the terminal 40.

[0130] The service provision control unit 402 performs one-to-one authentication using the face image stored (described) in the digital passport and the face image of the user. The service provision control unit 402 generates feature quantities from each of the two acquired face images.

[0131] Note that since existing technology can be used for the process of generating feature amounts, detailed description thereof will be omitted. For example, the service provision control unit 402 extracts the eyes, nose, mouth, etc. from the face image as feature points. Then, the service provision control unit 402 calculates the positions of each feature point and the distances between each feature point as feature amounts (generating a feature vector consisting of multiple feature amounts).

[0132] Next, the service provision control unit 402 performs a matching process (one-to-one matching) using the two generated feature amounts. Specifically, the service provision control unit 402 calculates the similarity between corresponding face images using the two feature amounts. Based on the result of threshold processing on the calculated similarity, the service provision control unit 402 determines whether the two images are face images of the same person. Note that the similarity can be calculated using a chi-squared distance, Euclidean distance, or the like. The greater the distance, the lower the similarity, and the closer the distance, the higher the similarity.

[0133] If the similarity is greater than a predetermined value (if the distance is shorter than a predetermined value), the service provision control unit 402 determines that the identity verification is successful. If the similarity is equal to or less than the predetermined value, the service provision control unit 402 determines that the identity verification is unsuccessful.

[0134] If the identity verification fails (step S207, No branch), the service provision control unit 402 notifies the user that the rental car reservation cannot be accepted (step S205).

[0135] If the identity verification is successful (step S207, Yes branch), the service provision control unit 402 determines whether the user is qualified to drive a vehicle in Japan (determining driving qualification; step S208). Specifically, the service provision control unit 402 determines whether the user is qualified to drive a vehicle in Japan based on the mobile driver's license acquired from the user's terminal 40.

[0136] The service provision control unit 402 determines whether the user is qualified to drive based on the issuing country, date of issue, issuing institution, etc., written on the mobile driver's license. For example, the service provision control unit 402 sets the validity period of the mobile driver's license to one year from the date of issue. The service provision control unit 402 determines whether the rental period of the car desired by the user is included in the validity period.

[0137] In addition, if the mobile driver's license is signed (electronic signature of the issuing authority), the service provision control unit 402 may make successful verification of the electronic signature a requirement when determining that the user is qualified to drive a vehicle.

[0138] If the user does not have the driving qualifications (step S209, No branch), the service provision control unit 402 notifies the user that the rental car reservation cannot be accepted (step S205).

[0139] If the user is qualified to drive a vehicle (step S209, Yes branch), the service provision control unit 402 accepts the rental car reservation from the user. In this case, the service provision control unit 402 notifies the user that the reservation has been accepted (notifying that the reservation has been completed; step S210).

[0140] When a reservation is accepted, the service provision control unit 402 generates a reservation ID that identifies the reservation information of the user. The service provision control unit 402 stores the generated reservation ID and reservation information in a database.

[0141] Furthermore, the service provision control unit 402 transmits the generated reservation ID to the terminal 40 (step S211).

[0142] In this way, the service provision control unit 402 acquires an electronic driver's license from a user who wishes to reserve a vehicle for rent. The service provision control unit 402 uses the acquired driver's license to determine whether the user who wishes to reserve a vehicle is permitted to drive a vehicle in the country in which the user wishes to rent a vehicle. If the user who wishes to reserve a vehicle is permitted to drive a vehicle, the service provision control unit 402 accepts the reservation for renting a vehicle.

[0143] Next, the operation of the service provision control unit 402 regarding rental of a rental car will be described with reference to FIG.

[0144] The service provision control unit 402 receives a reservation ID from the terminal 40 of a user who wishes to rent a car. The service provision control unit 402 searches a database that manages reservations using the received reservation ID as a key, and obtains the corresponding reservation information (step S301).

[0145] The service provision control unit 402 determines the validity of the acquired reservation information (determining the validity of reservation information; step S302). For example, if the date the reservation ID was received is the same as the rental start date, the service provision control unit 402 determines that the user's reservation information is valid. If the date the reservation ID was received is before the rental start date, or if the date the reservation ID was received has passed the rental start date, the service provision control unit 402 determines that the reservation information is invalid.

[0146] If the reservation information is invalid (step S303, No branch), the service provision control unit 402 notifies the user that the rental car cannot be rented (step S304).

[0147] If the reservation information is valid (step S303, Yes branch), the service provision control unit 402 acquires a credential landing permit from the terminal 40. Specifically, the service provision control unit 402 transmits a "landing permit request" to the terminal 40 (step S305).

[0148] The service provision control unit 402 receives a response (positive response, negative response) to the landing permit request (step S306).

[0149] If a negative response is received (step S307, No branch), the service provision control unit 402 notifies the user that the rental car cannot be handed over (step S304).

[0150] If an affirmative response is received (step S307, branch Yes), the service provision control unit 402 verifies the credential landing permit included in the affirmative response (verifying landing permit; step S308).

[0151] Specifically, the service provision control unit 402 acquires the issuer ID and user ID written on the credential landing permit. The service provision control unit 402 acquires a public key corresponding to the acquired issuer ID from the blockchain. Similarly, the service provision control unit 402 acquires a public key corresponding to the acquired user ID from the blockchain.

[0152] The service provision control unit 402 verifies the signature of the holder (user desiring service provision) and the signature of the issuer attached to the credential landing permit. If the service provision control unit 402 successfully verifies the two signatures, it determines that the credential landing permit verification has been successful. If the service provision control unit 402 fails to verify either of the two signatures, it determines that the credential landing permit verification has failed.

[0153] If the verification of the credential landing permit fails (step S309, No branch), the service provision control unit 402 notifies the user that the rental car cannot be handed over (step S304).

[0154] The fact that the verification of the landing permit credential has failed indicates that the landing permit credential may be forged. Therefore, the service provision control unit 402 will refuse to rent a car to a user who presents such a landing permit credential.

[0155] If the verification of the credential landing permit is successful (step S309, Yes branch), the service provision control unit 402 verifies the validity of the rental period reserved by the user (step S310).

[0156] Specifically, the service provision control unit 402 determines, based on the information contained in the credential landing permit, whether a rental car reservation has been made for a period exceeding the permitted stay period for the user (inbound passenger).

[0157] Specifically, the service provision control unit 402 calculates the period of stay permitted to the user from the expiration date of stay and the date of landing permission obtained from the credential landing permit. If the rental car reservation period (rental period) is included in the period of stay permitted to the user, the service provision control unit 402 determines that the rental period is appropriate. If the rental car reservation period (rental period) is not included in the period of stay permitted to the user, the service provision control unit 402 determines that the rental period is inappropriate.

[0158] For example, if the date of landing permission is September 1, 2023, and the expiration date of stay is October 1, 2023, the rental period will be deemed valid if it falls within the above period (September 1 to October 1, 2023).

[0159] If the rental period is invalid (step S311, No branch), the service provision control unit 402 notifies the user that the rental car cannot be handed over (step S304).

[0160] If the rental period is appropriate (step S311, Yes branch), the service provision control unit 402 transmits a digital key for operating the vehicle to the terminal 40 carried by the user (step S312).

[0161] At this time, the service provision control unit 402 may notify the terminal 40 of detailed information regarding the rental car pick-up location and the like together with the digital key.

[0162] In this way, the service provision control unit 402 determines the validity of the period for which the user has reserved the vehicle based on the user's stay period obtained from the acquired credential landing permit. If the period for which the user has reserved the vehicle is valid, the service provision control unit 402 determines that the vehicle can be rented to the user.

[0163] The storage unit 403 is a means for storing information necessary for the operation of the service server 30. For example, the storage unit 403 stores a digital key for each vehicle.

[0164] [System Operation] Next, the operation of the information processing system according to the first embodiment will be described.

[0165] 14 is a sequence diagram illustrating an example of the operation of the information processing system according to the embodiment of the present disclosure. The operation of the information processing system according to the first embodiment regarding the issuance of a credential landing permit will be described with reference to FIG.

[0166] The terminal 40 generates a public key, a private key, and a user ID, and registers the user ID and public key in the blockchain (step S21).

[0167] The terminal 40 transmits a credential landing permit issuance request including the user ID and the two-dimensional barcode (the two-dimensional barcode printed on the authentication sticker attached to the passport) to the control server 10 (step S22).

[0168] The control server 10 generates qualification information for the user (the person to whom the credential landing permit is issued) and generates a credential landing permit that includes the generated qualification information (step S23). The control server 10 generates a credential landing permit that includes the user ID and issuer ID and is digitally signed.

[0169] The control server 10 transmits the generated landing permit credential to the terminal 40 (step S24). As described above, the landing permit credential is issued to an entrant who has completed a customs inspection, immigration examination, and quarantine inspection.

[0170] The terminal 40 stores the credential landing permit in the digital wallet (step S25).

[0171] 15 is a sequence diagram illustrating an example of the operation of the information processing system according to the embodiment of the present disclosure. The operation of the information processing system according to the first embodiment, which is related to the utilization of the credential landing permit, will be described with reference to FIG.

[0172] When a user requests to rent a car, the service server 30 transmits a "landing permit request" to the terminal 40 carried by the user (step S31).

[0173] The terminal 40 reads the credential landing permit from the digital wallet, affixes an electronic signature to the read credential landing permit, and transmits it to the service server 30 (step S32).

[0174] The service server 30 verifies the acquired credential landing permit (step S33) and the rental period (step S34).

[0175] If the verification of the credential landing permit is successful and the user's rental car reservation is valid, the service server 30 transmits the digital key of the rental car to be rented to the terminal 40 (step S35).

[0176] The terminal 40 stores the received digital key (step S36).

[0177] Next, a modification of the first embodiment will be described.

[0178] <Variation 1 of the First Embodiment> The terminal 40 may store credential certificates (VCs) of a digital passport or a mobile driver's license in a digital wallet. In this case, the terminal 40 requests the issuance of a credential certificate from a public institution or the like that has the authority to issue passports or driver's licenses. Specifically, the terminal 40 transmits information required for issuing the credential certificate to a server or the like of the public institution, similar to the issuance of a credential landing permit.

[0179] The rental car company may provide rental car services to users using a digital passport or a mobile driver's license issued as a credential certificate. In this case, the service server 30 may accept a rental car reservation on the condition that the digital signature attached to the digital passport or the mobile driver's license is successfully verified.

[0180] <Variation 2 of First Embodiment> The rental car company may obtain these identification documents when handing over the rental car, rather than obtaining a digital passport or a mobile driver's license at the time of reservation. When the user rents a vehicle, the terminal 40 may provide the rental car company with an electronic identification document and an electronic driver's license.

[0181] In this case, the service server 30 accepts a reservation for the rental car desired by the user. If the reservation is possible, the service server 30 transmits a reservation ID to the terminal 40.

[0182] When a user wishes to rent a car, the service server 30 transmits a "certificate request" to the terminal 40 instead of the landing permit request shown in Fig. 7. In response to receiving the certificate request, the terminal 40 transmits the digital passport, mobile driver's license, and credential landing permit to the service server 30.

[0183] The service server 30 performs identity verification using a digital passport, determination of driving qualification using a mobile driver's license, verification of the rental period using a credential landing permit, etc. If these verifications and determinations are successful, the service server 30 transmits a digital key to the terminal 40.

[0184] In this way, the service server 30 may acquire the digital passport or the mobile driver's license when the rental car is rented after being reserved. In other words, the service server 30 may enable the user to reserve a rental car after entering the country and receiving the issuance of a credential landing permit.

[0185] <Third Modification of First Embodiment> A user may provide information necessary for enjoying the rental car service to an employee or the like standing by at a reception desk located inside or outside the airport (see FIG. 16).

[0186] In this case, the user terminal 40 provides the credential landing permit etc. to the operator terminal 31 using a short-range wireless communication means such as Bluetooth (registered trademark) or NFC (Near Field Communication), or a two-dimensional barcode.

[0187] When short-range wireless communication means is used, the business operator terminal 31 transmits a landing permit request to the terminal 40 in response to an operation by an employee of the rental car business, etc. The terminal 40 transmits the credential landing permit to the business operator terminal 31 in the same manner as when the terminal 40 receives a landing permit request from the service server 30.

[0188] The business operator terminal 31 performs the same verification and determination process as the service server 30 and then transmits the rental car digital key to the terminal 40 .

[0189] When a two-dimensional barcode is used, the terminal 40 (rental car application) converts the landing permit credential into a two-dimensional barcode format in response to a user's operation. The terminal 40 displays the two-dimensional barcode containing the landing permit credential as information (see FIG. 17).

[0190] The business operator terminal 31 reads the two-dimensional barcode (using a barcode reader or the like) in response to an operation by an employee or the like. The terminal 40 decodes the read two-dimensional barcode and obtains a credential landing permit.

[0191] Furthermore, the business operator terminal 31 may acquire a digital passport or a mobile driver's license from the terminal 40. In this case, the business operator terminal 31 may perform identity verification and a determination regarding driving qualifications using the digital passport.

[0192] Specifically, the business operator terminal 31 acquires the digital passport by means of Bluetooth (registered trademark), a two-dimensional barcode, etc. Furthermore, the business operator terminal 31 photographs the user in front of the user in response to an operation by an employee, etc. The business operator terminal 31 may perform identity verification using a facial image obtained from the digital passport and a facial image obtained by photographing the user in front of the user.

[0193] Alternatively, the identity verification of the user and the determination of whether the user is qualified to drive may be performed visually by an employee, etc. Specifically, the business operator terminal 31 displays the information on the digital passport or mobile driver's license acquired from the terminal 40 on a display or the like.

[0194] The employee or the like checks the information displayed on the business operator terminal 31 and determines whether or not to rent a car. In this way, identity verification may not be performed by the rental car business's device (service server 30, business operator terminal 31), but may be performed by the employee comparing the face of the user in front of them with the facial image recorded on the digital passport. The employee may also visually check whether or not the user has a driving license.

[0195] The user may access the service server 30 by means of mobile communication or the like at the reception desk where an employee of the rental car company is waiting. That is, the user may operate the terminal 40 to access the service server 30 in the presence of an employee of the rental car company and provide the digital passport or the like to the rental car company.

[0196] <Fourth Modification of First Embodiment> The service server 30 may determine whether to allow a rental car to be rented or change the permitted rental period depending on the country of issue of the mobile driver's license. For example, the service server 30 may refuse to rent a car to a user who holds a mobile driver's license issued by a country with low international credibility, or may set a shorter permitted rental period.

[0197] <Fifth Modification of First Embodiment> The information processing system disclosed in the present application may include a mechanism for preventing a user from forgetting to complete the rental car rental procedure.

[0198] The terminal 40 displays a message that a rental car reservation has already been made and that the rental car rental procedure is required at the timing when the credential landing permit is obtained from the control server 10. For example, the terminal 40 may display (push notification) a message as shown in FIG.

[0199] Upon seeing this display, the user operates the terminal 40 to access the service server 30. In response to a request from the service server 30, the terminal 40 transmits the credential landing permit to the service server 30.

[0200] As described above, the terminal 40 according to the first embodiment stores a digital passport, a credential landing permit, a mobile driver's license, and the like. When a user requests a rental car reservation, the service server 30 obtains the digital passport and the mobile driver's license from the terminal 40 to verify the user's identity and determine whether the user is licensed to drive. The service server 30 accepts the reservation from a user who has successfully verified the user's identity and is licensed to drive. The service server 30 then obtains a credential landing permit from the user after completing the CIQ inspection and other procedures. The service server 30 uses the information contained in the credential landing permit to determine whether a vehicle can be rented to the user. The service server 30 verifies the consistency between the user's permitted period of stay and the reserved rental period, and if there is no discrepancy between these periods, determines that the vehicle can be rented to the user. After this inspection, a digital key for the vehicle is sent to the user (the user's terminal 40). This configuration and operation of the information processing system reduces the risk of a rented vehicle not being returned. This means that rental car operators can provide rental car services with peace of mind.

[0201] Next, the hardware of each device constituting the information processing system will be described. Fig. 19 is a diagram showing an example of the hardware configuration of the service server 30.

[0202] The service server 30 can be configured by an information processing device (so-called computer), and has the configuration exemplified in Fig. 19. For example, the service server 30 includes a processor 311, a memory 312, an input / output interface 313, and a communication interface 314. The components such as the processor 311 are connected by an internal bus or the like, and are configured to be able to communicate with each other.

[0203] However, the configuration shown in Fig. 19 is not intended to limit the hardware configuration of the service server 30. The service server 30 may include hardware not shown, and may not include the input / output interface 313 as necessary. Furthermore, the number of processors 311 and the like included in the service server 30 is not intended to be limited to the example shown in Fig. 19, and for example, the service server 30 may include multiple processors 311.

[0204] The processor 311 is a programmable device such as a central processing unit (CPU), a micro processing unit (MPU), or a digital signal processor (DSP). Alternatively, the processor 311 may be a device such as a field programmable gate array (FPGA) or an application specific integrated circuit (ASIC). The processor 311 executes various programs including an operating system (OS).

[0205] The memory 312 is a random access memory (RAM), a read only memory (ROM), a hard disk drive (HDD), a solid state drive (SSD), etc. The memory 312 stores an OS program, application programs, and various data.

[0206] The input / output interface 313 is an interface for a display device and an input device (not shown). The display device is, for example, a liquid crystal display, etc. The input device is, for example, a device that accepts user operations, such as a keyboard or a mouse.

[0207] The communication interface 314 is a circuit, module, etc. that communicates with other devices. For example, the communication interface 314 includes a network interface card (NIC).

[0208] The functions of the service server 30 are realized by various processing modules. The processing modules are realized, for example, by the processor 311 executing a program stored in the memory 312. The program can be recorded on a computer-readable storage medium. The storage medium can be a non-transitory medium such as a semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. That is, the present invention can also be embodied as a computer program product. The program can be downloaded via a network or updated using a storage medium storing the program. The processing modules can also be realized by a semiconductor chip.

[0209] The control server 10, the business operator terminal 31, the terminal 40, etc. can also be configured using information processing devices, just like the service server 30, and their basic hardware configurations are no different from those of the service server 30, so a description thereof will be omitted.

[0210] The service server 30, which is an information processing device, is equipped with a computer, and the computer executes a program to realize the functions of the service server 30. The service server 30 also executes a control method for the service server 30 by the program.

[0211] [Modifications] The configuration, operation, etc. of the information processing system described in the above embodiment are merely examples, and are not intended to limit the configuration, etc. of the system.

[0212] In the above embodiment, a case has been described in which identity verification (one-to-one authentication) of a user is performed when reserving a rental car, when picking up the rental car, when using the rental car, etc. However, all or part of the identity verification may be omitted. For example, if identity verification is performed when reserving a rental car, identity verification when using the rental car may be omitted.

[0213] In the above embodiment, a case where a rental car service is provided to foreigners entering Japan has been described. However, the information processing system disclosed in the present application can be applied to a case where a rental car service is provided to foreigners entering a country other than Japan.

[0214] In the above embodiment, a case has been described in which identity verification is performed using a digital passport. However, identity verification may also be performed using an identification card such as a driver's license or a My Number card. That is, the service server 30 may perform identity verification using an identification card other than a digital passport. For example, the service server 30 may perform identity verification using a facial image obtained from a My Number card. Alternatively, if a mobile driver's license contains biometric information (e.g., a facial image), the service server 30 may perform identity verification and determine whether the person is eligible to drive using the mobile driver's license.

[0215] The terminal 40 may verify the identity of the user when opening a digital wallet. For example, the terminal 40 performs identity verification using an identification card, such as a My Number card or a passport, that contains the holder's biometric information. The terminal 40 performs a matching process (authentication process) using the biometric information acquired from the identification card and the user's biometric information. If the authentication process (one-to-one authentication) is successful, the terminal 40 opens the digital wallet. The terminal 40 confirms, through a matching process (authentication process) using biometric information, that the holder who was issued the identification card and the user who uses the digital wallet of the terminal 40 are the same person.

[0216] The rental car company may verify that a user wishing to rent a car is the same person as the owner of a digital wallet opened on the user's terminal 40. In this case, the terminal 40 performs identity verification when the digital wallet is opened and stores biometric information (e.g., a facial image) that successfully verifies the identity. When the user begins the rental car rental procedure, the terminal 40 transmits the stored biometric information to the service server 30 along with a credential landing permit. The service server 30 also acquires a facial image of the user via the terminal 40 (the service server 30 instructs the user to take a selfie). The service server 30 performs one-to-one authentication using the two facial images. If identity verification using one-to-one authentication is successful, the service server 30 may determine that the vehicle can be rented to the user wishing to rent a car.

[0217] Some of the functions of the control server 10 may be implemented in another server. More specifically, the above-described "user information acquisition unit (user information acquisition means)" and "landing permit control unit (landing permit control means)" may be implemented in any of the devices included in the system.

[0218] The form of data transmission and reception between the devices (the control server 10, the terminal 40, etc.) is not particularly limited, but the data transmitted and received between these devices may be encrypted. Personal information and the like is transmitted and received between these devices, and in order to appropriately protect this information, it is desirable to transmit and receive encrypted data.

[0219] In the flow charts (flowcharts, sequence diagrams) used in the above explanation, multiple steps (processes) are described in order, but the order of execution of the steps executed in the embodiments is not limited to the order described. In the embodiments, the order of the steps shown in the drawings can be changed to the extent that the content is not affected, such as by executing each process in parallel.

[0220] The above-described embodiments have been described in detail to facilitate understanding of the present disclosure, and it is not intended that all of the above-described configurations are required. Furthermore, when multiple embodiments are described, each embodiment may be used alone or in combination. For example, it is possible to replace part of the configuration of one embodiment with the configuration of another embodiment, or to add the configuration of another embodiment to the configuration of one embodiment. Furthermore, it is possible to add, delete, or replace part of the configuration of one embodiment with another configuration.

[0221] The above explanation makes it clear that the present invention has industrial applicability, and the present invention is suitably applicable to information processing systems that provide rental car services to users (especially inbound passengers).

[0222] Some or all of the above embodiments can be described as, but are not limited to, the following supplementary notes.

[0223] [Supplementary Note 1] A terminal comprising: an acquisition control means for acquiring a credential landing permit issued as a VC (Verifiable Credentials); and a provision control means for providing the acquired credential landing permit to a private automobile rental business operator when renting a vehicle from the business operator. [Supplementary Note 2] The terminal according to Supplementary Note 1, wherein the provision control means provides an electronic identification card and an electronic driver's license to the business operator when renting the vehicle. [Supplementary Note 3] The terminal according to Supplementary Note 1, wherein the provision control means provides an electronic identification card and an electronic driver's license to the business operator when reserving rental of the vehicle. [Supplementary Note 4] A server device comprising: an acquisition means for acquiring a credential landing permit issued as a VC (Verifiable Credentials) to a user who has reserved rental of a vehicle, from the user; and a determination means for determining whether or not rental of the vehicle to the user is possible using the acquired credential landing permit. [Supplementary Note 5] The server device of Supplementary Note 4, wherein the determination means determines the validity of the period for which the user has reserved the rental of the vehicle based on the user's period of stay obtained from the acquired credential landing permit, and determines that the vehicle can be rented to the user if the period for which the user has reserved the rental of the vehicle is valid. [Supplementary Note 6] The server device of Supplementary Note 5, further comprising a reservation means that acquires an electronic identification document from the user who wishes to reserve the rental of the vehicle, and accepts the reservation for the rental of the vehicle if identity verification using the acquired identification document is successful. [Supplementary Note 7] The server device of Supplementary Note 6, wherein the reservation means acquires an electronic driver's license from the user who wishes to reserve the rental of the vehicle, and uses the acquired driver's license to determine whether the user who wishes to reserve the vehicle is able to drive the vehicle in the country where the user who wishes to reserve the vehicle is able to drive the vehicle, and accepts the reservation for the rental of the vehicle if the user who wishes to reserve the vehicle is able to drive the vehicle. [Supplementary Note 8] The server device according to any one of Supplementary Notes 4 to 7, further comprising a key control means that transmits a digital key for the vehicle to the user when it is determined that the vehicle can be rented to the user.[Supplementary Note 9] A terminal control method comprising: an acquisition control step of acquiring a credential landing permit issued as a VC (Verifiable Credentials); and a provision control step of providing the acquired credential landing permit to a private automobile rental business operator when renting a vehicle from the business operator. [Supplementary Note 10] The terminal control method according to Supplementary Note 9, in which the provision control step provides an electronic identification card and an electronic driver's license to the business operator when renting the vehicle. [Supplementary Note 11] The terminal control method according to Supplementary Note 9, in which the provision control step provides an electronic identification card and an electronic driver's license to the business operator when reserving rental of the vehicle. [Supplementary Note 12] A computer-readable storage medium storing a program for causing a computer mounted on a terminal to execute: an acquisition control process for acquiring a credential landing permit issued as a VC (Verifiable Credentials); and a provision control process for providing the acquired credential landing permit to a private automobile rental business operator when renting a vehicle from the business operator. [Supplementary Note 13] The storage medium according to Supplementary Note 12, wherein the provision control process provides an electronic identification card and an electronic driver's license to the business operator when renting the vehicle. [Supplementary Note 14] The storage medium according to Supplementary Note 12, wherein the provision control process provides an electronic identification card and an electronic driver's license to the business operator when reserving rental of the vehicle.

[0224] Furthermore, some or all of the configurations described in Supplementary Notes 2 and 3, which are dependent on Supplementary Note 1, may also be dependent on Supplementary Notes 9 and 12 in the same dependent relationship as Supplementary Notes 2 and 3. Furthermore, not limited to Supplementary Notes 1, 9, and 12, some or all of the configurations described as Supplements may be made dependent on various hardware, software, various recording means for recording software, or systems, within the scope of each of the above-mentioned embodiments.

[0225] The disclosures of the above-cited prior art documents are incorporated herein by reference. Although the embodiments of the present invention have been described above, the present invention is not limited to these embodiments. Those skilled in the art will understand that these embodiments are merely illustrative and that various modifications are possible without departing from the scope and spirit of the present invention. In other words, the present invention naturally includes various modifications and alterations that may be made by those skilled in the art in accordance with the entire disclosure, including the claims, and the technical concepts thereof.

[0226] REFERENCE SIGNS LIST 10 Control server 20 CIQ inspection station 30 Service server 31 Operator terminal 40 Terminal 100 Terminal 101 Acquisition control means 102 Provision control means 201 Communication control unit 202 User information acquisition unit 203 Landing permit control unit 204 Storage unit 301 Communication control unit 302 Acquisition control unit 303 Function realization unit 304 Storage unit 311 Processor 312 Memory 313 Input / output interface 314 Communication interface 401 Communication control unit 402 Service provision control unit 403 Storage unit

Claims

1. A terminal comprising: an acquisition control means for acquiring a credential landing permit issued as a VC (Verifiable Credentials); and a provision control means for providing the acquired credential landing permit to a business operator engaged in the private automobile rental business when renting a vehicle from the business operator.

2. The terminal according to claim 1, wherein said provision control means provides said business operator with an electronic identification card and an electronic driver's license when said vehicle is rented.

3. The terminal according to claim 1, wherein said provision control means provides said business operator with an electronic identification card and an electronic driver's license when reserving rental of said vehicle.

4. A server device comprising: an acquisition means for acquiring a credential landing permit issued as a VC (Verifiable Credentials) to a user who has reserved a vehicle rental; and a determination means for determining whether or not the vehicle can be rented to the user using the acquired credential landing permit.

5. The server device described in claim 4, wherein the determination means determines the validity of the period for which the user has reserved the rental of the vehicle based on the user's period of stay obtained from the acquired credential landing permit, and determines that the vehicle can be rented to the user if the period for which the user has reserved the rental of the vehicle is valid.

6. The server device according to claim 5, further comprising a reservation means for acquiring an electronic identification document from a user who wishes to make a reservation to rent the vehicle, and accepting the reservation to rent the vehicle if identity verification using the acquired identification document is successful.

7. The server device according to claim 6, wherein the reservation means acquires an electronic driver's license from a user who wishes to make a reservation to rent the vehicle, uses the acquired driver's license to determine whether the user who wishes to make the reservation is able to drive the vehicle in the country in which the user wishes to rent the vehicle, and accepts the reservation to rent the vehicle if the user who wishes to make the reservation is able to drive the vehicle.

8. The server device according to any one of claims 4 to 7, further comprising a key control means for transmitting a digital key of the vehicle to the user when it is determined that the vehicle can be rented to the user.

9. A terminal control method comprising: an acquisition control process for acquiring a credential landing permit issued as a VC (Verifiable Credentials); and a provision control process for providing the acquired credential landing permit to a business operator engaged in the private automobile rental business when renting a vehicle from the business operator.

10. A computer-readable storage medium storing a program for causing a computer installed in a terminal to execute the following: an acquisition control process for acquiring a credential landing permit issued as a VC (Verifiable Credentials); and a provision control process for providing the acquired credential landing permit to a business operator engaged in the private automobile rental business when renting a vehicle from the business operator.

Images