Server device, system, method for controlling server device, and storage medium

Abstract

Provided is a server device that reduces a burden required for assessing the authenticity of information pertaining to a user. This server device comprises an acquisition means, a collection means, and an issuance means. The acquisition means acquires a request for issuance of a personal identification certificate in which items including the identity of a user are to be certified. The collection means transmits user-specifying information for specifying a user to each of a plurality of management servers. The collection means collects, from at least one or more management servers among the plurality of management servers, some or all of user-related information owned by the at least one or more management servers as user information by transmitting the user-specifying information. The issuance means issues a personal identification certificate by using the collected user information.

Description

Server device, system, control method for server device, and storage medium

[0001] The present invention relates to a server device, a system, a control method for a server device, and a storage medium.

[0002] There are technologies related to verifiable credentials (VCs).

[0003] For example, Patent Document 1 describes strengthening the prevention of fraud against verifiable credential information (VC). The issuer server of Patent Document 1 includes a communication device configured to communicate with a holder terminal, and a processor that issues verifiable credential information (VC) in response to an issuance request from the holder terminal. The issuance request includes the holder's attribute information and the holder's decentralized identifier (DID). The processor sets an expiration period for the verifiable credential information based on the holder's attribute information, and associates the set expiration period with the decentralized identifier.

[0004] Japanese Patent Application Laid-Open No. 2024-112432

[0005] With the development of communication technology and information processing technology, various services are provided online. Many of the services provided online include services that cannot be established unless the information provided by the user is correct. In such services, the entity that refers to the user's information needs to determine the authenticity of the provided information. However, it is a heavy burden for the entity to determine the authenticity of a large number of information.

[0006] Note that Patent Document 1 only discloses a technique for preventing fraud against verifiable credential information (VC). Therefore, even if the technique disclosed in Patent Document 1 is applied, the above problems cannot be solved.

[0007] The main object of the present invention is to provide a server device, a system, a control method for a server device, and a storage medium that contribute to reducing the burden required for determining the authenticity of user information.

[0008] According to a first aspect of the present invention, a server device is provided that includes: an acquisition means for acquiring a request to issue an identity certificate that includes the identity of a user; a collection means for collecting all or part of the information relating to the user held by at least one of the management servers as user information by transmitting user identification information for identifying the user to each of the plurality of management servers; and an issuance means for issuing the identity certificate using the collected user information.

[0009] A second aspect of the present invention provides a system comprising: a plurality of management servers and a server device, wherein the server device includes: acquisition means for acquiring a request to issue an identity certificate that includes matters including the identity of a user; collection means for collecting all or part of the information relating to the user held by at least one of the plurality of management servers as user information by transmitting user identification information for identifying the user to each of the plurality of management servers; and issuing means for issuing the identity certificate using the collected user information.

[0010] A third aspect of the present invention provides a server device control method comprising: an acquisition step of acquiring a request for the issuance of an identity certificate that includes the identity of a user; a collection step of collecting all or part of the information relating to the user held by at least one of the multiple management servers as user information by transmitting user identification information for identifying the user to each of the multiple management servers; and an issuance step of issuing the identity certificate using the collected user information.

[0011] According to a fourth aspect of the present invention, a computer-readable storage medium is provided that stores a program for causing a computer mounted on a server device to execute: an acquisition process for acquiring a request to issue an identity certificate that includes the identity of a user as the subject of certification; a collection process for transmitting user identification information to each of a plurality of management servers to identify the user, thereby collecting all or part of the information concerning the user held by at least one of the plurality of management servers as user information; and an issuance process for issuing the identity certificate using the collected user information.

[0012] According to each aspect of the present invention, a server device, a system, a control method for the server device, and a storage medium are provided that contribute to reducing the burden required for determining the authenticity of user information. However, the effects of the present invention are not limited to those described above. The present invention may also produce other effects in lieu of or in conjunction with the effects described above.

[0013] Figure 1 is a diagram illustrating the outline of one embodiment. Figure 2 is a flowchart of the operation of one embodiment. Figure 3 is a diagram showing an example of the schematic configuration of an information processing system according to an embodiment of this disclosure. Figure 4 is a diagram showing an example of the display of a terminal according to an embodiment of this disclosure. Figure 5 is a diagram illustrating the operation of an information processing system according to an embodiment of this disclosure. Figure 6 is a diagram illustrating the operation of an information processing system according to an embodiment of this disclosure. Figure 7 is a diagram illustrating the operation of an information processing system according to an embodiment of this disclosure. Figure 8 is a diagram showing an example of the processing configuration of a terminal according to an embodiment of this disclosure. Figure 9 is a flowchart showing an example of the operation of an acquisition control unit according to an embodiment of this disclosure. Figure 10 is a diagram showing an example of the display of a terminal according to an embodiment of this disclosure. Figure 11 is a diagram showing an example of the processing configuration of a server device according to an embodiment of this disclosure. Figure 12 is a flowchart showing an example of the operation of a certificate issuing unit according to an embodiment of this disclosure. Figure 13 is a diagram showing an example of the processing configuration of a service server according to an embodiment of this disclosure. Figure 14 is a flowchart showing an example of the operation of a service provision control unit according to an embodiment of this disclosure. Figure 15 is a sequence diagram showing an example of the operation of an information processing system according to an embodiment of this disclosure. Figure 16 is a sequence diagram showing an example of the operation of an information processing system according to an embodiment of this disclosure. Figure 17 shows an example of the hardware configuration of the server device related to this disclosure.

[0014] First, an overview of one embodiment will be described. The reference numerals in the drawings attached to this overview are provided for convenience as examples to aid understanding, and this overview is not intended to be limiting in any way. Furthermore, unless otherwise specified, the blocks shown in each drawing represent functional units, not hardware units. The connecting lines between blocks in each drawing include both bidirectional and unidirectional lines. Unidirectional arrows schematically indicate the flow of the main signal (data) and do not exclude bidirectional flow. In this specification and in the drawings, elements that can be similarly described are given the same reference numerals to avoid redundant explanation.

[0015] A server device 100 according to one embodiment includes an acquisition means 101, a collection means 102, and an issuance means 103 (see Figure 1). The acquisition means 101 acquires a request to issue an identity certificate that includes the user's identity (step S1 in Figure 2). The collection means 102 transmits user identification information to each of the multiple management servers to identify the user (step S2). By transmitting the user identification information, the collection means 102 collects all or part of the user information held by at least one of the multiple management servers as user information (step S3). The issuance means 103 issues an identity certificate using the collected user information (step S4).

[0016] Server device 100 issues an identity verification document for the user to submit to the service provider. In doing so, server device 100 requests information from the management server that manages user information and obtains the user information to be included on the identity verification document. Server device 100 generates an identity verification document using the obtained user information and issues the generated identity verification document. The user provides the issued identity verification document to the service provider when receiving the service. Since the authenticity of the information contained on the identity verification document is guaranteed by server device 100 (the operating entity of server device 100), the service provider can utilize the information contained on the identity verification document without verifying the facts. As a result, the burden on the service provider in determining the authenticity of user information is reduced.

[0017] Specific embodiments will be described in more detail below with reference to the drawings.

[0018] [First Embodiment] The first embodiment will be described in more detail with reference to the drawings.

[0019] [System Configuration] As shown in Figure 3, the information processing system according to the first embodiment includes a certificate issuer, at least one information provider, and at least one service provider.

[0020] A certificate issuer is the entity that issues certificates concerning users. For example, a certificate issuer issues an "identity certificate" that guarantees the identity of the recipient and the authenticity of the information contained herein.

[0021] The certificate issuer provides a server device 10. The server device 10 is a server that performs the processing and operations necessary to carry out the certificate issuer's business. The server device 10 may be managed and operated by the certificate issuer, or its management and operation may be entrusted to another business operator, etc. The server device 10 may be installed in the certificate issuer's building, or it may be installed on a network (on the cloud).

[0022] A service provider is an entity that provides services to users. Service providers are not limited to private companies; public institutions such as city halls are also included as service providers in the disclosures made in this application.

[0023] The service provider has a service server 20 for providing services to users. For example, the service server 20 provides services to users via a website. The service server 20 may be managed and operated by the service provider, or its management and operation may be entrusted to another business operator, etc. The service server 20 may be installed in the service provider's building, or it may be installed on a network (on the cloud).

[0024] An information provider is an entity that possesses information about users and provides such information upon request from the certificate issuer. Information providers are not limited to private companies; public institutions such as city halls are also included as information providers disclosed in this application.

[0025] For example, the information provider holds information such as the user's name, gender, date of birth, address, telephone number, email address, qualifications held, and service provision history. The information provider provides all or part of the information about the user to the certificate issuer.

[0026] The information provider has a management server 30. The management server 30 is a server that stores and manages information about the above users using a predetermined database. The management server 30 may be managed and operated by the information provider, or its management and operation may be entrusted to another business operator, etc. The management server 30 may be installed in the information provider's building, or it may be installed on a network (on the cloud).

[0027] Depending on the industry and business type of the service provider and information provider, the same business operator may perform both service and information services. In this case, the service server 20 will have the functions of the management server 30.

[0028] The user possesses terminal 40. For example, the user operates terminal 40 to request (demand) the issuance of an identity verification document from the certificate issuer.

[0029] Each device shown in Figure 3 is connected to a network. Specifically, the server device 10, service server 20, management server 30, and terminal 40 are connected to the network by wired or wireless communication means.

[0030] The configuration of the information processing system shown in Figure 3 is illustrative and not intended to limit its configuration. For example, the server device 10, service server 20, and management server 30 may belong to different networks. Alternatively, a certificate issuer may include multiple server devices 10. Load balancing and redundancy may be achieved by using multiple server devices 10. Similarly, each service provider and information provider may include multiple service servers 20 and multiple management servers 30.

[0031] [Outline of Operation] Next, the outline of the operation of the information processing system according to the first embodiment will be described.

[0032] In the first embodiment, a car rental company is used as an example of a service provider, and the configuration and operation of the information provision system will be described.

[0033] <Preparing for a Digital Wallet> Users will use a digital wallet. A digital wallet is an electronic information storage service that guarantees information security, including data integrity, reliability, and availability.

[0034] The user utilizes an online wallet service (web wallet). The user operates terminal 40 to access the wallet provider's server (not shown in Figure 3, etc.). The user creates an account on the wallet provider's server.

[0035] Users who have created an account on the wallet provider's server can access their digital wallet from a web application, web browser, etc., installed on terminal 40.

[0036] By opening a digital wallet, users can store various digital content such as employee IDs, student IDs, other forms of identification, airline tickets, concert tickets, electronic money, and credit cards in that digital wallet. Users access their online digital wallet using a web application or similar means to store and retrieve digital content.

[0037] For example, the user's digital wallet stores digital content such as that shown in Figure 4.

[0038] <Obtaining Identity Verification Documents> Users who open a digital wallet acquire the digital content to be stored in that digital wallet. The digital content stored in the digital wallet includes identity verification documents. This section explains how users can obtain the identity verification documents (rental car identity verification documents) necessary to enjoy rental car services.

[0039] The user accesses an online digital wallet and requests the credential issuer to issue a personal identification document for car rental. In response to the request from the user, the credential issuer issues a personal identification document (personal identification document for car rental). More specifically, the credential issuer issues Verifiable Credentials (VCs) whose content can be verified online as the personal identification document. In the following description, VCs are referred to as "credential proof documents".

[0040] Also, the personal identification document issued as a credential proof document is referred to as "personal identification document VCs".

[0041] Prior to the request for issuing the personal identification document VCs, the user's terminal 40 generates a pair of public key and private key. Also, the terminal 40 generates a decentralized identifier (DID; Decentralized Identifier). For example, the terminal 40 generates the wallet address of the digital wallet as the user's DID.

[0042] The terminal 40 registers the generated DID (user DID; holder DID) and the public key on the blockchain (step S01 in FIG. 5).

[0043] Furthermore, while presenting the user DID, the user's terminal 40 requests the credential issuer (server device 10) to issue the personal identification document VCs. Specifically, the terminal 40 transmits a "credential issuance request" including the type of the personal identification document VCs to be issued (for example, personal identification document VCs for car rental) and the user DID, etc. to the server device 10 (step S02).

[0044] Upon receiving the credential issuance request, the server device 10 verifies the identity of the user (step S03).

[0045] Specifically, the server device 10 obtains image data showing the identity document (for example, passport, driver's license, etc.) held by the user from the terminal 40. For example, the server device 10 instructs the user to photograph the page showing the face image of the issuer to obtain the image data.

[0046] Furthermore, the server device 10 acquires the biometric information of the user. For example, the server device 10 instructs the user to take a self-portrait using the terminal 40 and acquires image data in which the user's face image is captured.

[0047] Note that, as biometric information, for example, data (feature quantities) calculated from personal physical characteristics such as a face, fingerprint, voiceprint, vein, retina, and iris pattern of a pupil are exemplified. Alternatively, the biometric information may be image data such as a face image or a fingerprint image. The biometric information may be anything as long as it includes the physical characteristics of the user as information. In the present disclosure, the case of using biometric information (a face image or a feature quantity generated from the face image) related to a person's "face" will be described.

[0048] The server device 10 extracts the face image of the issuer (the issuer of the identity certificate) from the image data in which the identity certificate is captured. Furthermore, the server device 10 extracts the face image of the user from the self-portrait image. The server device 10 performs identity verification using the two face images.

[0049] When the identity verification is successful, the server device 10 acquires information regarding the identity of the user. For example, the server device 10 acquires information regarding the identity of the user (identity information; for example, the basic four pieces of information of name, gender, date of birth, and address) from the image data in which the identity certificate is captured.

[0050] Furthermore, the server device 10 collects the information to be described in the personal identification certificate VCs from each information provider. Specifically, the server device 10 participates in a public institution (for example, an automobile safety driving center) or a system that manages and stores information regarding the user's driver's license, and acquires the information to be described in the personal identification certificate VCs from a car rental company or the like participating in the system.

[0051] The server device 10 transmits an "information provision request" including the user's information to the management server 30 of each information provider (see FIG. 6). More specifically, the server device 10 transmits an information provision request including information (user identification information; for example, a combination of name, name and date of birth, email address, etc.) for identifying the user who is the issuer of the personal identification certificate VCs to each management server 30.

[0052] The management server 30 manages information such as the user's name, gender, date of birth, and address, as well as qualifications held and information generated as a result of services being provided to the user, using a predetermined database. Furthermore, the information stored in the management server 30 is updated as needed by the person in charge. For example, the information stored in the database is updated each time a service is provided to a user.

[0053] Each management server 30 searches the database using user identification information and transmits all or part of the user information described in the corresponding entry to the server device 10. In the following description, the user information provided to the server device 10 by the information provider (management server 30) will be referred to as "user information".

[0054] If there is specific user information that can be provided to the server device 10, the management server 30 sends an acknowledgment containing that specific user information to the server device 10.

[0055] For example, the management server 30 of the Japan Automobile Safety Driving Center sends an affirmative response to the server device 10 that includes user information such as the user's driver's license information (e.g., license type, expiration date, etc.). Alternatively, the management server 30 of a rental car company sends an affirmative response to the server device 10 that includes user information such as rental car usage information (e.g., rental history, driving history, etc.).

[0056] If no specific user information is available to provide to the server device 10, the management server 30 sends a negative response to the server device 10 indicating this. For example, if the user has not been issued a driver's license, the management server 30 of the Japan Automobile Safety Driving Center sends a negative response to the server device 10. Alternatively, if the user has no history of using the rental car service of the rental car company, the management server 30 of the rental car company sends a negative response to the server device 10.

[0057] Upon receiving a response (affirmative response, negative response) from each management server 30, the server device 10 generates identity verification certificates (VCs) using the user information obtained from each management server 30.

[0058] Furthermore, prior to issuing the identity verification certificates (VCs), the server device 10 generates and stores the issuer's DID (issuer DID), private key, and public key.

[0059] The server device 10 generates identity verification certificates (VCs) that include metadata such as the type of credential certificate, the name of the issuing organization, the date and time of issue, and the validity period, as well as the content of the claims (credential information, claims) and proof such as the issuer's public key information and digital signature.

[0060] Furthermore, the claim will include specific information certified by the certificate issuer. For example, the claim will include the user's (the recipient of the Identity Verification Certificates) personal information (e.g., name, gender, date of birth, address), driver's license information, and rental car usage information.

[0061] The server device 10 provides the generated identity verification certificates VCs to the user's terminal 40 (the user who will be the holder of the identity verification certificates VCs; the person who requested the issuance of the certificates) (step S04 in Figure 5).

[0062] Specifically, the server device 10 stores the generated identity verification certificates (VCs) in online storage. The server device 10 generates a certificate retrieval URL from the URL (Uniform Resource Locator) where the identity verification certificates (VCs) are stored. The server device 10 sends an acknowledgment (response to the certificate issuance request) containing the generated certificate retrieval URL to the terminal 40.

[0063] Furthermore, the server device 10 registers the issuer DID and the generated public key, etc., on the blockchain (step S05). Alternatively, the server device 10 may register the status of the issued identity verification certificates VCs (valid, invalid), the credential ID that uniquely identifies the identity verification certificates VCs, the issuer DID, etc., in the VDR (Verifiable Data Registry).

[0064] Terminal 40 accesses the URL for obtaining the certificate included in the acknowledgment and obtains identity verification certificates (VCs). Terminal 40 stores the obtained identity verification certificates (VCs) in its digital wallet.

[0065] <Accessing the Service> Users who have obtained an Identity Verification Card (VCs for Rental Cars) apply to a rental car company for rental car services. The user operates terminal 40 to access the service server 20 of the rental car company from which they wish to rent a car and applies for rental car services.

[0066] In response to the application, the service server 20 obtains the information necessary to provide the service to the user. Specifically, the service server 20 obtains the rental car identification certificates (VCs) held by the user. The service server 20 sends a "certificate provision request" to the terminal 40, specifying that the rental car identification certificates (VCs) are the information necessary for providing the service (step S11 in Figure 7).

[0067] Upon receiving a request for identification, terminal 40 retrieves rental car identification VCs from its digital wallet.

[0068] Terminal 40 signs the rental car identity verification documents (VCs) using a private key corresponding to the user's DID (e.g., wallet address).

[0069] Terminal 40 provides the service server 20 with signed identity verification certificates (rental car identity verification certificates) (step S12). Specifically, terminal 40 transmits the rental car identity verification certificates and the user DID to the service server 20. Terminal 40 presents the rental car identity verification certificates to the service server 20 as verifiable presentations (VPs).

[0070] The service server 20 verifies the acquired identity verification certificates (VCs) (rental car identity verification certificates VCs). During this process, the service server 20 obtains the public key from the blockchain. Further details regarding the verification of identity verification certificates VCs will be described later.

[0071] If the verification of the acquired identity verification certificate VCs is successful, the service server 20 outputs information about the user whose content is guaranteed by the identity verification certificate VCs (for example, identity information, driver's license information, rental car usage information, etc.).

[0072] For example, the service server 20 displays or prints the identity information, driver's license information, and rental car usage information listed on the identity verification certificates (VCs) on an LCD monitor. In the following explanation, the information about the user that the identity verification certificates (VCs) are intended to verify will be referred to as "verified information."

[0073] The rental car company representative checks the verification information (identity information, driver's license information, rental car usage information, etc.) output by the service server 20 and determines whether or not to rent a car. Specifically, the representative checks whether the user's identity has been verified (that identity information exists), whether they possess a valid driver's license, and whether they have caused any major problems with other rental car companies, and then determines whether or not to provide the service. The representative inputs the result of the decision into the service server 20.

[0074] The service server 20 performs processing according to the decision result (whether or not a rental car is available). For example, if it is determined that a rental car is available, the service server 20 accepts the rental car reservation, etc. If it is determined that a rental car is not available, the service server 20 notifies the user accordingly.

[0075] Thus, the information provision system (information provision platform) according to the first embodiment "combines" the information held by each of the multiple information providers to issue a single identity verification certificate (VC). The identity verification certificate (VC) is stored in the recipient's digital wallet. When a user receives a service from a service provider, they provide the identity verification certificate (VC) at the request of the service provider. The service provider verifies the acquired identity verification certificate (VC), and if the verification is successful, they trust the items listed on the identity verification certificate (e.g., identity information, driver's license information, rental car usage information) and carry out their business.

[0076] Next, we will describe the details of each device included in the information processing system according to the first embodiment.

[0077] [Terminal] Examples of terminals 40 include mobile devices such as smartphones, mobile phones, game consoles, and tablets, as well as computers (personal computers, laptops), etc. Terminal 40 can be any device or equipment as long as it can receive user input and communicate with the server device 10, etc.

[0078] Figure 8 shows an example of the processing configuration (processing module) of a terminal 40 according to the embodiment disclosed herein. Referring to Figure 8, the terminal 40 comprises a communication control unit 201, an acquisition control unit 202, a utilization control unit 203, and a storage unit 204.

[0079] The communication control unit 201 is a means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the server device 10. The communication control unit 201 also transmits data to the server device 10. The communication control unit 201 passes the data received from other devices to other processing modules. The communication control unit 201 transmits the data acquired from other processing modules to other devices. In this way, other processing modules send and receive data with other devices via the communication control unit 201. The communication control unit 201 has the function of a receiving unit that receives data from other devices and the function of a transmitting unit that transmits data to other devices.

[0080] The acquisition control module 202 and the utilization control module 203 perform control related to the digital wallet.

[0081] The acquisition control unit 202 is a means for controlling the acquisition of credential certificates (identity verification certificates VCs). The acquisition control unit 202 requests the certificate issuer to issue identity verification certificates VCs and stores the identity verification certificates VCs obtained from the certificate issuer in the digital wallet.

[0082] Figure 9 is a flowchart illustrating an example of the operation of the acquisition control unit 202. The operation of the acquisition control unit 202 according to the embodiment disclosed herein will be explained with reference to Figure 9.

[0083] When a user who has opened a digital wallet performs a predetermined action on terminal 40 (for example, pressing the identity verification document issuance button), the acquisition control unit 202 identifies the type of identity verification document VCs that the user wishes to issue (step S101).

[0084] For example, the acquisition control unit 202 uses a GUI (Graphical User Interface) as shown in Figure 10 to identify the type of identity verification document (VCs) that the user wishes to obtain.

[0085] Furthermore, the acquisition control unit 202 generates a public key and private key pair, and a distributed identifier, the user DID. For example, the acquisition control unit 202 generates a wallet address to be used in a digital wallet as the user DID. The acquisition control unit 202 registers the generated user DID and public key on the blockchain (registering the public key, etc.; step S102).

[0086] The acquisition control unit 202 notifies the certificate issuer of the type of identity verification certificate VCs and the user DID. Specifically, the acquisition control unit 202 sends a "certificate issuance request" including the type of identity verification certificate VCs and the user DID to the server device 10 (step S103).

[0087] The acquisition control unit 202 performs processing related to verifying the user's identity in response to instructions from the server device 10 (perform identity verification; step S104).

[0088] Specifically, the acquisition control unit 202 uses a GUI or the like to instruct the user to take a picture of an identification document containing a photograph of their face, and acquires image data of the identification document. Furthermore, the acquisition control unit 202 instructs the user to take a selfie, and acquires image data of the user. The acquisition control unit 202 then transmits the two acquired image data to the server device 10.

[0089] The acquisition control unit 202 receives a response (affirmative response, negative response) to the certificate issuance request from the server device 10 (step S105).

[0090] If a negative response is received indicating that the issuance of the identity verification certificate VCs failed (step S106, No branch), the acquisition control unit 202 notifies the user that the identity verification certificate VCs were not issued (notification of non-issuance; step S107).

[0091] If an affirmative response is received indicating that the issuance of the identity verification certificate VCs was successful (step S106, Yes branch), the acquisition control unit 202 accesses the certificate acquisition URL included in the affirmative response and acquires the identity verification certificate VCs issued by the certificate issuer (step S108).

[0092] The acquisition control unit 202 stores the acquired identity verification documents VCs in the digital wallet (step S109).

[0093] The usage control unit 203 is a means for controlling the use of digital content (including identity verification documents VCs) stored in the digital wallet.

[0094] Specifically, the user control unit 203 processes the certificate provision request received from the service server 20 of the service provider.

[0095] Upon receiving a request for proof of identity, the usage control unit 203 retrieves the credential certificates (identity verification certificates VCs) specified by the service provider from among the multiple credential certificates stored in the digital wallet. For example, the usage control unit 203 retrieves rental car identity verification certificates VCs.

[0096] The user control unit 203 signs the acquired identity verification documents (VCs). The user control unit 203 signs using the private key corresponding to the user's DID (e.g., wallet address).

[0097] If the service provider can provide the specified identity verification documents (VCs) (e.g., rental car identity verification documents), the usage control unit 203 sends an acknowledgment to the service server 20 that includes the signed identity verification documents and the user DID. The usage control unit 203 then presents the identity verification documents to the service server 20 as a verifiable presentation.

[0098] If the service provider cannot provide the specified identity verification documents (VCs), the user control unit 203 sends a negative response to the service server 20 indicating that the specified identity verification documents (VCs) cannot be provided.

[0099] The memory unit 204 is a means for storing information necessary for the operation of the terminal 40.

[0100] [Server Device] Figure 11 is a diagram showing an example of the processing configuration (processing module) of the server device 10 according to the embodiment disclosed herein. Referring to Figure 11, the server device 10 comprises a communication control unit 301, a certificate issuing unit 302, and a storage unit 303.

[0101] The communication control unit 301 is a means for controlling communication with other devices. For example, the communication control unit 301 receives data (packets) from the terminal 40. The communication control unit 301 also transmits data to the terminal 40. The communication control unit 301 passes the data received from other devices to other processing modules. The communication control unit 301 transmits the data acquired from other processing modules to other devices. In this way, other processing modules send and receive data with other devices via the communication control unit 301. The communication control unit 301 has the function of a receiving unit that receives data from other devices and the function of a transmitting unit that transmits data to other devices.

[0102] The certificate issuing unit 302 is a means of issuing credential certificates (identity verification certificates VCs) to users. The certificate issuing unit 302 processes the "certificate issuance request" received from the terminal 40.

[0103] The certificate issuing unit 302 includes functions as an acquisition means, a collection means, and an issuing means. The acquisition means acquires a request from the user's terminal 40 for the issuance of an identity certificate VCs that certify matters including the user's identity. The collection means transmits user identification information to each of the multiple management servers 30 to identify the user. By transmitting the user identification information, the collection means collects all or part of the user information held by at least one of the multiple management servers 30 as user information. The issuing means issues identity certificate VCs using the collected user information.

[0104] Figure 12 is a flowchart illustrating an example of the operation of the certificate issuing unit 302. The operation of the certificate issuing unit 302 according to the embodiment disclosed herein will be explained with reference to Figure 12.

[0105] Upon receiving a request for issuance of a certificate, the certificate issuance unit 302 performs identity verification of the user (the user who wishes to be issued an identity verification certificate VCs) (step S201).

[0106] Specifically, the certificate issuing unit 302 instructs the terminal 40 to acquire image data of the identification document and image data of the user. The certificate issuing unit 302 then uses the two image data files acquired from the terminal 40 to perform identity verification.

[0107] Specifically, the certificate issuing unit 302 extracts a face image from each of the two acquired image data.

[0108] Note that existing technologies can be used for the facial image extraction process by the certificate issuing unit 302, so a detailed explanation will be omitted. For example, the certificate issuing unit 302 may extract facial images (facial regions) from image data using a learning model trained by a CNN (Convolutional Neural Network). Alternatively, the certificate issuing unit 302 may extract facial images using methods such as template matching.

[0109] The certificate issuing unit 302 generates feature quantities from each of the two extracted facial images.

[0110] Regarding the feature generation process, existing technologies can be used, so a detailed explanation will be omitted. For example, the certificate issuing unit 302 extracts the eyes, nose, mouth, etc., from the face image as feature points. Then, the certificate issuing unit 302 calculates the position of each feature point and the distance between each feature point as feature quantities (generating a feature vector consisting of multiple feature quantities).

[0111] Next, the certificate issuing unit 302 performs a matching process (one-to-one matching) using the two generated feature quantities. Specifically, the certificate issuing unit 302 calculates the similarity between corresponding face images using the two feature quantities. Based on the result of thresholding the calculated similarity, the certificate issuing unit 302 determines whether the two images are face images of the same person. The similarity can be calculated using methods such as the chi-squared distance or the Euclidean distance. The greater the distance, the lower the similarity, and the closer the distance, the higher the similarity.

[0112] If the similarity is greater than a predetermined value (if the distance is shorter than a predetermined value), the certificate issuing unit 302 determines that identity verification was successful. If the similarity is less than or equal to the predetermined value, the certificate issuing unit 302 determines that identity verification failed.

[0113] If identity verification is successful, the certificate issuing unit 302 obtains four basic pieces of information (identity information) from the image data of the identification document: name, gender, date of birth, and address. Specifically, the certificate issuing unit 302 uses OCR (Optical Character Recognition) technology to read the name, date of birth, etc., written on the identification document.

[0114] If identity verification fails (step S202, No branch), the certificate issuing unit 302 sends a negative response to the terminal 40 indicating that it is not possible to issue identity certificates VCs (step S203).

[0115] If identity verification is successful (Step S202, Yes branch), the certificate issuing unit 302 collects user information to be written on the identity certificate VCs from the information provider.

[0116] Specifically, the certificate issuing unit 302 collects user information from information providers corresponding to the type of personal identification certificate (VCs) that the user wishes to have issued. For example, if a user wishes to have a personal identification certificate (VCs) for rental cars issued, the certificate issuing unit 302 collects user information from the Japan Automobile Safety Driving Center and the rental car company.

[0117] Specifically, the certificate issuing unit 302 sends an information request including user identification information to the information provider's management server 30 (step S204).

[0118] The certificate issuing unit 302 identifies the management server 30 to which the information request will be sent by referring to table information that stores the type of personal identification certificate VCs and information about the information provider (for example, the address of the management server 30).

[0119] The certificate issuing unit 302 receives responses to information provision requests from each management server 30 (step S205).

[0120] If at least one affirmative response is not received (step S206, No branch), the certificate issuing unit 302 sends a negative response to the terminal 40 indicating that the identity verification certificate VCs cannot be issued (step S203). This is because there are no items other than the four basic pieces of information to be included in the identity verification certificate VCs.

[0121] If at least one affirmative response is received (step S206, No branch), the certificate issuing unit 302 generates identity certificate VCs (step S207). The certificate issuing unit 302 generates identity certificate VCs that include the issuer DID and the user DID (the DID of the recipient of the identity certificate VCs; the user DID included in the certificate issuance request).

[0122] Specifically, the certificate issuing unit 302 generates identity verification certificates (VCs) that include metadata such as the type of credential certificate, the name of the issuing organization, the date and time of issuance, and the validity period, as well as the claims and a proof consisting of the issuer's public key information and digital signature. The digital signature affixed to the identity verification certificates (VCs) is performed using a private key corresponding to the issuer's DID, which is generated in advance.

[0123] The certificate issuing unit 302 stores the generated personal identification certificates VCs in online storage (cloud storage) or the like (step S208).

[0124] The certificate issuing unit 302 generates a certificate acquisition URL from the URL where the identity verification certificates (VCs) are stored. The certificate issuing unit 302 sends an acknowledgment containing the generated certificate acquisition URL to the terminal 40 (step S209). Furthermore, the certificate issuing unit 302 registers the previously generated issuer DID and public key, etc., on the blockchain.

[0125] Thus, the certificate issuing unit 302 functions as a means of identity verification, performing identity verification of the user requesting the issuance of an identity verification certificate VCs. Furthermore, when the collection means determines that the identity verification is successful, it transmits user identification information to each of the multiple management servers 30. Furthermore, the issuing means issues an identity verification certificate VCs that certifies the identity information for which the identity verification was determined to be successful, and the collected user information.

[0126] The memory unit 303 is a means for storing information necessary for the operation of the server device 10.

[0127] [Service Server] Figure 13 is a diagram showing an example of the processing configuration (processing module) of a service server 20 according to the embodiment of the present disclosure. Referring to Figure 13, the service server 20 comprises a communication control unit 401, a service provision control unit 402, and a storage unit 403.

[0128] The communication control unit 401 is a means for controlling communication with other devices. For example, the communication control unit 401 receives data (packets) from the terminal 40. The communication control unit 401 also transmits data to the terminal 40. The communication control unit 401 passes the data received from other devices to other processing modules. The communication control unit 401 transmits the data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data with other devices via the communication control unit 401. The communication control unit 401 has the function of a receiving unit that receives data from other devices and the function of a transmitting unit that transmits data to other devices.

[0129] The service provision control unit 402 is a means for performing control related to the services provided to the user.

[0130] When a user requests a service (for example, a car rental service), the service provision control unit 402 acquires the information necessary to provide that service.

[0131] Figure 14 is a flowchart showing an example of the operation of the service provision control unit 402 according to the embodiment disclosed herein. The operation of the service provision control unit 402 will be explained with reference to Figure 14.

[0132] The service provision control unit 402 sends a "certificate provision request" to the terminal 40 (step S301).

[0133] The service provision control unit 402 sends a certificate provision request to the terminal 40, specifying, for example, the type of identity verification documents (VCs) required according to its own services. For example, a rental car company sends a certificate provision request to the terminal 40, specifying the identity verification documents (VCs) for rental cars.

[0134] The service provision control unit 402 receives a response from the terminal 40 to the certificate provision request (step S302).

[0135] If a negative response (a response indicating that identity verification documents VCs cannot be provided) is received from terminal 40 (step S303, No branch), the service provision control unit 402 notifies the user, etc., that the service cannot be provided because the necessary information cannot be obtained (notification of service provision unavailability; step S304).

[0136] If the terminal 40 receives an affirmative response (a response including identity verification VCs) (step S303, Yes branch), the service provision control unit 402 verifies the identity verification VCs included in the affirmative response (verify identity verification; step S305).

[0137] The service provision control unit 402 verifies at least one of the three items related to the validity of the identity verification documents (VCs).

[0138] The first item is the verification of the electronic signature attached to the identity verification document (VCs).

[0139] In this case, the service provision control unit 402 obtains the issuer DID and user DID listed on the identity verification documents VCs. The service provision control unit 402 obtains the public key corresponding to the obtained issuer DID from the blockchain. Similarly, the service provision control unit 402 obtains the public key corresponding to the obtained user DID from the blockchain.

[0140] The service provision control unit 402 verifies the signature of the holder (the user requesting the service) and the signature of the issuer attached to the identity verification certificate VCs. By verifying these signatures, the service provision control unit 402 confirms that the identity verification certificate VCs obtained from the user (the holder of the identity verification certificate VCs) have not been tampered with and that they are certificates issued by a trustworthy issuer.

[0141] The service provision control unit 402 determines that the verification of the identity verification certificates (VCs) has been successful if it successfully verifies the signatures of both the holder and the issuer of the identity verification certificates (VCs). The service provision control unit 402 determines that the verification of the identity verification certificates (VCs) has been failed if it fails to verify the signature of at least one of the holders or issuers of the identity verification certificates (VCs).

[0142] The second item is to verify that the identity verification documents (VCs) are not set to invalid.

[0143] In this case, the service provision control unit 402 accesses the blockchain or VDR using the credential ID and issuer DID to confirm that the credential certificates corresponding to the received personal identification certificates (VCs) are not listed in the certificate issuer's revocation list. The service provision control unit 402 also confirms that the corresponding personal identification certificates (VCs) obtained from the user have not been invalidated by the issuer before their expiration date.

[0144] The service provision control unit 402 determines that the verification of the identity verification certificates (VCs) was successful if the VCs are not listed in the revocation list. The service provision control unit 402 determines that the verification of the acquired identity verification certificates (VCs) failed if the VCs are listed in the revocation list.

[0145] The third item is verification that the validity period (expiration date) of the identity verification documents (VCs) has not expired.

[0146] The service provision control unit 402 checks the validity period set on the identity verification documents VCs. If the validity period set on the identity verification documents VCs has not expired, the service provision control unit 402 determines that the verification of the acquired identity verification documents VCs was successful. If the validity period set on the identity verification documents VCs has expired, the service provision control unit 402 determines that the verification of the acquired identity verification documents VCs failed.

[0147] The service provision control unit 402 determines that the verification of the identity verification documents VCs obtained from the user has been successful if it determines that "verification was successful" in one of the predetermined items from the first to third items.

[0148] The service provision control unit 402 determines that the verification of the identity verification documents VCs obtained from the user has failed if it determines that "verification failed" in one of the items specified in the first to third items.

[0149] If the verification of the identity verification documents (VCs) is successful, the service provision control unit 402 outputs the verification target information described in the identity verification documents (VCs) (step S306).

[0150] For example, the service provision control unit 402 may display or print on an LCD monitor the identity information, driver's license information, rental car usage information, etc., that are stated in the identity verification documents (VCs). Alternatively, the service provision control unit 402 may transmit the information to be verified to a smartphone, personal computer, etc., used by the person in charge.

[0151] The memory unit 403 is a means for storing information necessary for the operation of the service server 20.

[0152] [Management Server] The configuration of the management server 30 is obvious to those skilled in the art, so a detailed explanation is omitted. When the management server 30 receives an information request, it searches the database using the user identification information contained in the request and identifies the corresponding entry. The management server 30 only needs to transmit all or part of the user information described in the identified entry to the server device 10 as user information.

[0153] [System Operation] Next, the operation of the information processing system according to the first embodiment will be described.

[0154] Figure 15 is a sequence diagram showing an example of the operation of the information processing system according to the embodiment disclosed herein. Referring to Figure 15, the operation of the information processing system according to the first embodiment concerning the issuance of identity verification certificates (VCs) will be described.

[0155] Terminal 40 sends a certificate issuance request to the server device 10, including the type of identity verification certificate (VCs) that the user wishes to have issued (step S21).

[0156] The server device 10 performs user identity verification (step S22).

[0157] If identity verification is successful, the server device 10 sends an information request, including user identification information, to the management server 30 of each information provider (step S23).

[0158] If each management server 30 possesses information about a user corresponding to user identification information, it provides all or part of that information about the user to the server device 10 as user information (step S24).

[0159] The server device 10 generates identity verification certificates (VCs) using user information obtained from the management server 30. The server device 10 provides the generated identity verification certificates (VCs) to the terminal 40 by storing them in online storage or the like (step S25).

[0160] Terminal 40 obtains identity verification certificates (VCs) according to the URL for obtaining the certificate, and stores the obtained identity verification certificates (VCs) in the digital wallet (step S26).

[0161] Figure 16 is a sequence diagram showing an example of the operation of the information processing system according to the embodiment disclosed in this application. Referring to Figure 16, the operation of the information processing system according to the first embodiment regarding the use of identity verification documents (VCs) will be explained.

[0162] The service provider's service server 20 sends a certificate provision request to the terminal 40, specifying the type of identity verification certificate (VCs) required for providing the service (step S31).

[0163] Terminal 40 obtains identity verification certificates (VCs) specified by the service provider from the digital wallet. Terminal 40 transmits the obtained identity verification certificates (VCs) to the service server 20 (step S32).

[0164] The service server 20 verifies the acquired identity verification documents (VCs) (step S33).

[0165] If the verification of the identity verification documents (VCs) is successful, the service server 20 outputs the information to be verified as written in the identity verification documents (VCs) (step S34).

[0166] Next, a modified example of the first embodiment will be described.

[0167] <Modification 1> In the above embodiment, the configuration and operation of the information processing system were explained using a rental car service as an example. However, it is obvious that the information processing system disclosed in this application is applicable to other services as well. For example, a job seeker may provide identity verification documents (VCs) to a recruiting company or a matching service company.

[0168] In this case, the user requests the issuance of a "Job-seeking Identity Verification Card" from the certificate issuer (server device 10). In response to this request, server device 10 obtains information such as the user's educational background, work history, and qualifications from various information providers. For example, server device 10 transmits user identification information to a management server 30 managed by a university, company, qualification testing organization, etc., and obtains user information.

[0169] When the server device 10 obtains user information (for example, educational information, work history information, qualification information, etc.), it issues job-seeking identity certificates (VCs) that use the user's identity information and the obtained user information as the basis for verification.

[0170] Recruiting companies and matching service companies require job seekers to submit a Job Seeker's Identity Verification Card (VC). Recruiting companies refer to the verifiable information obtained from job seekers (educational background, work history, qualifications, etc., listed on the Job Seeker's Identity Verification Card (VC)) to determine whether or not to hire the job seeker. In doing so, recruiting companies (or their representatives) carry out their duties based on the information obtained from the Job Seeker's Identity Verification Card (VC) without verifying the facts (fact-checking) of educational background information, etc.

[0171] <Modification 2> When the server device 10 receives a request from a user to issue an identity verification certificate VCs, it may obtain the items that the user wishes to include in the identity verification certificate VCs. The certificate issuing unit 302 of the server device 10 may issue an identity verification certificate VCs containing the items requested by the user once it has completed fact-checking regarding the items requested by the user.

[0172] For example, a user who wishes to obtain a personal identification card (VC) for job seekers operates terminal 40 to provide information such as their graduating university, employer, and qualifications held to server device 10. Server device 10 sends an information request to management servers 30 of the graduating university, employer, and the organizations that administer the qualifications notified by the user. If server device 10 obtains user information from management server 30, or if the user information obtained from management server 30 matches the information obtained from the user, it includes the items requested by the user as information guaranteed by the personal identification card (VC).

[0173] Thus, the certificate issuing unit 302 may obtain the information that the user wishes to include in the identity certificate VCs. If the certificate issuing unit 302 has obtained the information that the user wishes to include in the identity certificate VCs as user information, it may issue an identity certificate VCs that includes the information that the user wishes to include in the identity certificate VCs as the subject of certification.

[0174] <Modification 3> The server device 10 may generate the information to be included in the identity verification certificate VCs by "summarizing" at least one piece of user information obtained from the information provider.

[0175] For example, when issuing a rental car identification card (VCs), the identification card issuing unit 302 may obtain user information from the Japan Automobile Safety Driving Center, such as "Ordinary driver's license, valid until March 31, 2025, gold license." Furthermore, the identification card issuing unit 302 may obtain user information from rental car company B, such as "Date of use: January 30, 2025, mileage 30km, no accidents."

[0176] In this case, the certificate issuing unit 302 uses the acquired information to generate certification information such as "holds a regular driver's license, is a good driver, and has a rental car usage history." The certificate issuing unit 302 then issues identity verification certificates (VCs) containing the generated certification information.

[0177] The rental car company's representative will perform their duties by referring to the verifiable information obtained from the above-mentioned identity verification documents (VCs). Since the user information is summarized by the server device 10, the service provider's operational efficiency will be improved.

[0178] Furthermore, the certificate issuing unit 302 may use a generative AI (Artificial Intelligence) such as a Large Language Model (LLM) to summarize at least one user information and generate the information to be certified. In addition, the certificate issuing unit 302 may generate identity verification certificates (VCs) that include the original user information obtained from each information provider and the summarized user information.

[0179] Thus, the certificate issuing unit 302 may summarize the user information collected from each information provider and issue identity verification certificates (VCs) that use the summarized user information as the subject of verification.

[0180] <Modification 4> The server device 10 may calculate a "score" for users who wish to have their personal identification certificates (VCs) issued, based on user information obtained from each information provider. The certificate issuing unit 302 may issue personal identification certificates (VCs) that include the calculated score as the information to be certified.

[0181] More specifically, the certificate issuing unit 302 calculates a score (evaluation value) regarding the user from a specific perspective. For example, the certificate issuing unit 302 calculates this score using a large-scale language model.

[0182] For example, if a user requests the issuance of a rental car identification card (VCs), the certificate issuing unit 302 calculates the user's driver score. For example, the certificate issuing unit 302 calculates a high score if the user has no accidents or violations, and a low score if there is a record of accidents or violations.

[0183] Alternatively, if the user requests the issuance of a personal VC for job seekers, the certificate issuing unit 302 may calculate a score that quantifies the job seeker's value in the job market. For example, the certificate issuing unit 302 may calculate a score based on the qualifications held.

[0184] Service providers perform their duties by referring to the scores obtained from identity verification documents (VCs). As a result, the efficiency of service providers' work is further improved.

[0185] Thus, the certificate issuing unit 302 may calculate a score for the user from a predetermined perspective based on the user information collected from each information provider, and issue identity verification certificates (VCs) that are the subject of certification based on the calculated score.

[0186] The server device 10 may determine (change) the perspective and viewpoint used when calculating the score, according to the settings of the system administrator, etc. For example, the server device 10 may select and filter the acquired user information to calculate the score in a way that gives job seekers a greater advantage. Alternatively, the server device 10 may use the acquired user information to calculate the score in a way that allows recruiting companies, etc., to make more accurate judgments.

[0187] <Modification 5> In the above embodiment, the case in which the terminal 40 transmits identity verification VCs requested by the service provider to the service server 20 was described. However, the method of providing identity verification VCs is not limited to the data transmission described above.

[0188] For example, terminal 40 may print the information to be certified, etc., written on the identity verification certificate VCs. In this case, terminal 40 may print a 2D code encoded with the location where the identity verification certificate VCs are stored (URL of online storage) along with the information to be certified, etc. The user may submit the printed document with the 2D code to the service provider.

[0189] The verifier of the Identity Verification Certificates (VCs) (service provider) accesses online storage according to the printed QR code and retrieves the Identity Verification Certificates stored in said online storage. If the service provider successfully verifies the retrieved Identity Verification Certificates, they may trust the information contained in the printed document submitted by the user and proceed with their duties.

[0190] Alternatively, terminal 40 may display a two-dimensional code on its screen along with the information to be certified. The service provider may obtain identity verification documents (VCs) according to the two-dimensional code displayed on terminal 40.

[0191] As described above, the server device 10 according to the first embodiment issues identity verification certificates (VCs) to be submitted by the user to the service provider in response to a request from the user. The server device 10 requests information from each of the multiple management servers 30 that manage user information and collects user information to be included in the identity verification certificate. The server device 10 issues identity verification certificates (VCs) using the acquired user information. Since identity verification certificates (VCs) are certificates that prove the identity of the recipient and matters related to the recipient, the service provider can utilize the information contained in the identity verification certificates (VCs) without verifying the facts of the information. As a result, the burden on the service provider in determining the authenticity of user information is reduced.

[0192] In this way, the server device 10 forms an identity verification certificate issuance platform. On the identity verification certificate platform, identity verification certificates (VCs) are issued by a business operator different from the user or the entity that manages user information (the issuer of evidence for the information to be written on the identity verification certificate; for example, the Japan Automobile Safety Driving Center or a rental car company). Therefore, the objectivity of the identity verification certificates (VCs) provided to service providers is guaranteed. Furthermore, since successful identity verification is a condition for issuing identity verification certificates (VCs), identity verification certificates (VCs) with guaranteed authenticity are issued. Moreover, since the identity verification certificate issuance platform (server device 10) verifies the authenticity of the information written on the identity verification certificates (VCs), service providers utilizing these identity verification certificates (VCs) do not need to perform fact-checking of the information. Service providers only need to verify that the identity verification certificates (VCs) were issued from a trustworthy platform.

[0193] Next, we will describe the hardware of each device that makes up the information processing system. Figure 17 shows an example of the hardware configuration of the server device 10.

[0194] The server device 10 can be configured as an information processing device (a so-called computer), and has the configuration illustrated in Figure 17. For example, the server device 10 includes a processor 311, memory 312, input / output interface 313, and communication interface 314, etc. The components of the processor 311, etc. are connected by an internal bus or the like and are configured to communicate with each other.

[0195] However, the configuration shown in Figure 17 is not intended to limit the hardware configuration of the server device 10. The server device 10 may include hardware not shown, and it may not have to have an input / output interface 313 if necessary. Also, the number of processors 311 etc. included in the server device 10 is not intended to be limited to the example in Figure 17; for example, multiple processors 311 may be included in the server device 10.

[0196] The processor 311 is a programmable device such as a CPU (Central Processing Unit), MPU (Micro Processing Unit), or DSP (Digital Signal Processor). Alternatively, the processor 311 may be a device such as an FPGA (Field Programmable Gate Array) or ASIC (Application Specific Integrated Circuit). The processor 311 executes various programs, including an operating system (OS).

[0197] Memory 312 can be RAM (Random Access Memory), ROM (Read Only Memory), HDD (Hard Disk Drive), SSD (Solid State Drive), etc. Memory 312 stores the OS program, application programs, and various data.

[0198] The input / output interface 313 is an interface for a display device or input device (not shown). The display device is, for example, a liquid crystal display. The input device is, for example, a device that accepts user input such as a keyboard or mouse.

[0199] The communication interface 314 is a circuit, module, etc., that communicates with other devices. For example, the communication interface 314 may include a NIC (Network Interface Card).

[0200] The functions of the server device 10 are realized by various processing modules. These processing modules are realized, for example, by the processor 311 executing a program stored in the memory 312. The program can also be recorded on a computer-readable storage medium. The storage medium can be a non-transitory material such as semiconductor memory, hard disk, magnetic recording medium, or optical recording medium. In other words, the present invention can also be embodied as a computer program product. Furthermore, the program can be downloaded via a network or updated using the storage medium on which the program is stored. Moreover, the processing module may be realized by a semiconductor chip.

[0201] Furthermore, the service server 20, management server 30, and terminal 40 can also be configured using information processing devices, similar to the server device 10. Since their basic hardware configurations are identical to those of the server device 10, a detailed explanation will be omitted.

[0202] The server device 10, which is an information processing device, is equipped with a computer, and its functions can be realized by having the computer execute a program. Furthermore, the server device 10 executes a control method for the server device 10 using this program. Similarly, the terminal 40 is equipped with a computer, and its functions can be realized by having the computer execute a program. Furthermore, the terminal 40 executes a control method for the terminal 40 using this program.

[0203] [Modification] Note that the configuration and operation of the information processing system described in the above embodiment are illustrative examples and are not intended to limit the system configuration.

[0204] The server device 10 may determine whether or not to issue identity verification certificates (VCs) based on the type of identity verification certificate (VC) requested by the user and the user information collected from each information provider. For example, if a user requests the issuance of an identity verification certificate (VC) for rental cars and receives a negative response from the Japan Automobile Safety Driving Center's management server 30 (a response indicating that the user has not been issued a driver's license), the server device 10 does not have to issue the identity verification certificate (VC). This is because it is clear that rental car services cannot be provided to a user who does not possess a driver's license.

[0205] In the above embodiment, the server device 10 was described in a case where it performs identity verification using image data of an identification document and image data of the user. However, the server device 10 may perform identity verification using other methods. For example, the server device 10 may perform identity verification using a facial image obtained from an IC (Integrated Circuit) installed in a passport, etc., and a selfie facial image. Alternatively, the server device 10 may obtain a PIN from the user and determine that identity verification has been successful if it can obtain a user authentication electronic certificate from the My Number Card using the obtained PIN. Alternatively, the server device 10 may request verification of the obtained user authentication electronic certificate from a verification body (J-LIS; Japan Agency for Local Authority Information Systems) and determine that identity verification has been successful if the verification body successfully verifies the electronic certificate.

[0206] In the above embodiment, the case in which the server device 10 transmits a combination of name and date of birth or an email address as user identification information to each management server 30 was described. Here, if each information provider (management server 30) has a common ID for each user, the server device 10 may transmit the common ID to the management server 30 as user identification information. For example, if each management server 30 has a My Number (individual number) or an ID similar to a My Number as a common ID, the server device 10 may transmit an information provision request that includes the common ID.

[0207] In the above embodiment, the case where the digital wallet used by the user is configured online was described. However, the digital wallet may also be configured inside the terminal 40.

[0208] In the above embodiment, the case was described in which the certificate issuer's server device 10 issues a credential certificate that does not require a Certificate Authority for verification. However, the server device 10 may also issue a certificate that requires a Certificate Authority (a public key infrastructure-based certificate).

[0209] Some functions of the server device 10 and terminal 40 may be implemented in other devices or equipment. More specifically, it is sufficient if the "acquisition control unit (acquisition control means)", "utilization control unit (utilization control means)", "service provision control unit (service provision control means)", etc. described above are implemented in any of the devices included in the system.

[0210] The form of data transmission and reception between each device (for example, server device 10, terminal 40) is not particularly limited, but the data transmitted and received between these devices may be encrypted. Personal information of users is transmitted and received between these devices, and it is desirable that encrypted data be transmitted and received in order to appropriately protect this information.

[0211] In the flowcharts (sequence diagrams) used in the above description, multiple processes are shown in order, but the execution order of the processes performed in the embodiment is not limited to the order in which they are shown. In the embodiment, the order of the illustrated processes can be changed to the extent that it does not impede the content, for example, by executing each process in parallel.

[0212] The embodiments described above are explained in detail to facilitate understanding of the disclosure, and it is not intended that all the configurations described above are necessary. Furthermore, when multiple embodiments are described, each embodiment may be used individually or in combination. For example, it is possible to replace parts of the configuration of one embodiment with those of another embodiment, or to add configurations from other embodiments to the configuration of one embodiment. In addition, it is possible to add, delete, or replace parts of the configuration of one embodiment with those of another.

[0213] As described above, the industrial applicability of the present invention is clear, and it is particularly suitable for use in information processing systems that issue identification cards to users.

[0214] Some or all of the above embodiments may also be described as follows, but are not limited to the following:

[0215] [Note 1] A server device comprising: an acquisition means for acquiring a request to issue an identity certificate that includes the identity of a user; a collection means for collecting all or part of the information relating to the user held by at least one of the management servers as user information by transmitting user identification information for identifying the user to each of the multiple management servers; and an issuance means for issuing the identity certificate using the collected user information.

[0216] [Note 2] The server device described in Note 1, further comprising an identity verification means for verifying the identity of a user requesting the issuance of the aforementioned identity certificate, wherein the collection means transmits the user identification information to each of the multiple management servers when the identity verification is determined to be successful.

[0217] [Note 3] The issuing means is the server device described in Note 2, which issues the identity certificate, which is the subject of certification of the identity information for which the identity verification has been determined to be successful and the collected user information.

[0218] [Note 4] The server device as described in Note 3, wherein the acquisition means acquires the information that the user wishes to include in the identity certificate, and the issuing means issues the identity certificate that includes the information that the user wishes to include as the subject of certification when it has been acquired as user information.

[0219] [Note 5] The issuing means is a server device according to any one of Notes 1 to 4, which summarizes the collected user information and issues the identity certificate that uses the summarized user information as the subject of certification.

[0220] [Note 6] The issuing means is a server device according to any one of Notes 1 to 4, which calculates a score relating to the user from a predetermined viewpoint based on the collected user information and issues the identity certificate that is the subject of certification based on the calculated score.

[0221] [Note 7] The issuing means is a server device described in any one of Notes 1 to 4 that issues the personal identification certificate as a credential certificate.

[0222] [Note 8] A system comprising: a plurality of management servers; a server device, wherein the server device includes: acquisition means for acquiring a request to issue an identity certificate that includes matters including the identity of a user; collection means for collecting all or part of the information relating to the user held by at least one of the plurality of management servers as user information by transmitting user identification information for identifying the user to each of the plurality of management servers; and issuing means for issuing the identity certificate using the collected user information.

[0223] [Note 9] The system as described in Note 8, further comprising an identity verification means for verifying the identity of a user requesting the issuance of the aforementioned identity certificate, wherein the collection means transmits the user identification information to each of the multiple management servers when the identity verification is determined to be successful.

[0224] [Note 10] The issuing means is the system described in Note 9, which issues the identity certificate that certifies the identity information of the person whose identity verification has been determined to be successful and the collected user information.

[0225] [Note 11] The system as described in Note 10, wherein the acquisition means acquires the information that the user wishes to include on the identity certificate, and the issuing means, when it has been able to acquire the information that the user wishes to include on the identity certificate as user information, issues the identity certificate that includes the information that the user wishes to include on the identity certificate as the subject of certification.

[0226] [Note 12] The issuing means is the system described in any one of Notes 8 to 11, which summarizes the collected user information and issues the identity certificate that certifies the summarized user information.

[0227] [Note 13] The issuing means is the system described in any one of Notes 8 to 11, which calculates a score relating to the user from a predetermined perspective based on the collected user information and issues the identity certificate that certifies the calculated score.

[0228] [Note 14] The issuing means is the system described in any one of Notes 8 to 11, which issues the personal identification certificate as a credential certificate.

[0229] [Note 15] A server device control method comprising: an acquisition step of acquiring a request for the issuance of an identity certificate that includes the identity of a user; a collection step of collecting all or part of the information relating to the user held by at least one of the multiple management servers as user information by transmitting user identification information for identifying the user to each of the multiple management servers; and an issuance step of issuing the identity certificate using the collected user information.

[0230] [Note 16] A control method for a server device as described in Note 15, further comprising an identity verification step for verifying the identity of a user requesting the issuance of the aforementioned identity certificate, wherein the collection step transmits the user identification information to each of the multiple management servers when the identity verification is determined to be successful.

[0231] [Note 17] The issuance process is a control method for the server device described in Note 16, which issues an identity certificate that certifies the identity information of the person whose identity verification has been determined to be successful and the collected user information.

[0232] [Note 18] The control method for the server device described in Note 17, wherein the acquisition step acquires the information that the user wishes to include in the identity certificate, and the issuance step, when the information that the user wishes to include in the identity certificate has been acquired as user information, issues the identity certificate that includes the information that the user wishes to include in the identity certificate as the subject of certification.

[0233] [Note 19] The issuance process is a control method for a server device according to any one of Notes 15 to 18, wherein the issuance process summarizes the collected user information and issues the identity certificate that certifies the summarized user information.

[0234] [Note 20] The server device control method according to any one of Notes 15 to 18, wherein the issuance step involves calculating a score for the user from a predetermined viewpoint based on the collected user information, and issuing the identity certificate that certifies the calculated score.

[0235] [Note 21] The issuance process is a control method for a server device according to any one of Notes 15 to 18, which issues the personal identification certificate as a credential certificate.

[0236] [Note 22] A computer-readable storage medium that stores a program for causing a computer installed in a server device to execute: an acquisition process for acquiring a request to issue an identity certificate that includes the identity of a user; a collection process for collecting all or part of the information relating to the user held by at least one of the multiple management servers as user information by transmitting user identification information for identifying the user to each of the multiple management servers; and an issuance process for issuing the identity certificate using the collected user information.

[0237] [Note 23] The storage medium described in Note 22, which further performs an identity verification process to verify the identity of the user requesting the issuance of the aforementioned identity certificate, and which, when the identity verification is determined to be successful, transmits the user identification information to each of the multiple management servers.

[0238] [Note 24] The storage medium described in Note 23 issues the identity certificate, which is the subject of the issuance process, and which is the identity information of the person whose identity verification has been determined to be successful and the collected user information.

[0239] [Note 25] The storage medium described in Note 24, wherein the acquisition process acquires the information that the user wishes to include in the identification document, and the issuance process, when the information that the user wishes to include in the identification document has been acquired as user information, issues the identification document that includes the information that the user wishes to include in the identification document as the subject of certification.

[0240] [Note 26] The storage medium described in any one of Notes 22 to 25, wherein the issuance process summarizes the collected user information and issues the identity certificate for which the summarized user information is the subject of certification.

[0241] [Note 27] The storage medium described in any one of Notes 22 to 25, wherein the issuance process calculates a score relating to the user from a predetermined perspective based on the collected user information, and issues the identity certificate that certifies the calculated score.

[0242] [Note 28] The issuance process is a storage medium described in any one of Notes 22 to 25 that issues the personal identification certificate as a credential certificate.

[0243] Furthermore, some or all of the configurations described in Appendices 2 to 7, which are subordinate to Appendice 1 above, may also be subordinate to Appendices 8, 15, and 22 in the same way as those described in Appendices 2 to 7. Moreover, not limited to Appendices 1, 8, 15, and 22, some or all of the configurations described as appendices may also be subordinate to various hardware, software, various recording means for recording software, or systems, without departing from the embodiments described above.

[0244] Furthermore, each disclosure of the above-mentioned prior art documents cited herein is incorporated herein by reference. Although embodiments of the present invention have been described above, the present invention is not limited to these embodiments. It will be understood by those skilled in the art that these embodiments are merely illustrative and that various modifications are possible without departing from the scope and spirit of the present invention. That is, the present invention naturally includes the entire disclosure, including the claims, and various modifications and alterations that can be made by those skilled in the art in accordance with the technical idea.

[0245] 10 Server device 20 Service server 30 Management server 40 Terminal 100 Server device 101 Acquisition means 102 Collection means 103 Issuance means 201 Communication control unit 202 Acquisition control unit 203 Utilization control unit 204 Storage unit 301 Communication control unit 302 Certificate issuance unit 303 Storage unit 311 Processor 312 Memory 313 Input / output interface 314 Communication interface 401 Communication control unit 402 Service provision control unit 403 Storage unit

Claims

1. A server device comprising: an acquisition means for acquiring a request to issue an identity certificate that includes the identity of a user; a collection means for collecting all or part of the information relating to the user held by at least one of the management servers as user information by transmitting user identification information to each of the multiple management servers for identifying the user; and an issuance means for issuing the identity certificate using the collected user information.

2. The server device according to claim 1, further comprising an identity verification means for verifying the identity of a user requesting the issuance of the aforementioned identity certificate, wherein the collection means transmits the user identification information to each of the plurality of management servers when the identity verification is determined to be successful.

3. The server device according to claim 2, wherein the issuing means issues an identity certificate that certifies the identity information of the person whose identity verification has been determined to be successful and the collected user information.

4. The server device according to claim 3, wherein the acquisition means acquires the matters that the user wishes to include in the identity certificate, and the issuing means, when it has been able to acquire the matters that the user wishes to include in the identity certificate as user information, issues the identity certificate that includes the matters that the user wishes to include in the identity certificate as the subject of certification.

5. The server device according to any one of claims 1 to 4, wherein the issuing means summarizes the collected user information and issues the identity certificate for which the summarized user information is the subject of certification.

6. The server device according to any one of claims 1 to 4, wherein the issuing means calculates a score relating to the user from a predetermined viewpoint based on the collected user information, and issues the identity certificate that is the subject of certification of the calculated score.

7. The server device according to any one of claims 1 to 4, wherein the issuing means issues the personal identification certificate as a credential certificate.

8. A system comprising: a plurality of management servers; a server device, wherein the server device includes: acquisition means for acquiring a request to issue an identity certificate that includes the identity of a user; collection means for collecting all or part of the information relating to the user held by at least one of the plurality of management servers as user information by transmitting user identification information for identifying the user to each of the plurality of management servers; and issuing means for issuing the identity certificate using the collected user information.

9. A server device control method comprising: an acquisition step of acquiring a request for the issuance of an identity certificate that includes the identity of a user; a collection step of collecting all or part of the information relating to the user held by at least one of the multiple management servers as user information by transmitting user identification information for identifying the user to each of the multiple management servers; and an issuance step of issuing the identity certificate using the collected user information.

10. A computer-readable storage medium that stores a program for causing a computer installed in a server device to execute: an acquisition process for acquiring a request to issue an identity certificate that includes the identity of a user; a collection process for collecting all or part of the information relating to the user held by at least one of the multiple management servers as user information by transmitting user identification information to each of the multiple management servers for identifying the user; and an issuance process for issuing the identity certificate using the collected user information.

Images