Utilization management system, management device, utilization control device, utilization management method, and computer-readable program

A utilization management system configured to manage use of a usage target object, comprising:

• a utilization control device configured to control a use of the usage target object by locking/unlocking, access control or encrypting/decrypting based on a use permit;
• a management device configured to manage the usage target object by association with the utilization control device;
• and
• a biometric reader connected to the utilization control device,
• wherein the management device is configured to:
• manage transaction information including a list of biometric authentication information of users permitted to be used and conditions for using the usage target object, and manage a first secret key, a first public key, a second secret key, and a second public key associated with the utilization control device,
• generate a first signature on hole data including the second public key associated with the utilization control device by using the first secret key associated with the utilization control device, and
• generate a second signature on the use permit including the transaction information by using the second secret key associated with the utilization control device,
• wherein the utilization control device configured to:
• when the first signature generated by the management device is received together with the hole data, verify the first signature by using pre-registered the first public key to set the hole data in the utilization control device itself if the verification has been established;
• when the second signature generated by the management device is received together with the use permit, verify the second signature by using the second public key included in the hole data set in the utilization control device itself to obtain the transaction information included in the use permit if the verification has been established;
• and
• when the biometric reader reads biometric authentication information from a user, lift the restriction on use of the usage target object if the biometric authentication information exists in the list of biometric authentication information included in the transaction information obtained and if conditions for using included in the transaction information obtained are satisfied.

A utilization management system configured to manage use of a usage target object, comprising:

• a utilization control device configured to control a use of the usage target object by locking/unlocking, access control or encrypting/decrypting based on a use permit;
• a management device configured to manage the usage target object by association with the utilization control device;
• and
• a provider terminal configured to set hole data required for verification of the use permit in the utilization control device,
• wherein the management device is configured to:
• manage transaction information including conditions for using the usage target object, and manage a first secret key, a first public key, a second secret key, and a second public key associated with the utilization control device,
• generate a first signature on the hole data including the second public key associated with the utilization control device by using the first secret key associated with the utilization control device, and
• generate a second signature on the use permit including the transaction information by using the second secret key associated with the utilization control device,
• wherein the provider terminal is configured to send the hole data with the first signature generated by the management device to the utilization control device,
• wherein the utilization control device is configured to:
• when the first signature generated by the management device is received from the provider terminal together with the hole data, verify the first signature by using pre-registered the first public key to set the hole data in the utilization control device itself if the verification has been established,
• when the second signature generated by the management device is received together with the use permit, verify the second signature by using the second public key included in the hole data set in the utilization control device itself to obtain the transaction information included in the use permit if the verification has been established, and
• lift the restriction on use of the usage target object if conditions for using included in the transaction information obtained are satisfied.

A utilization management system configured to manage use of a usage target object, comprising:

• a utilization control device configured to control a use of the usage target object by locking/unlocking, access control or encrypting/decrypting based on a use permit;
• a management device configured to manage the usage target object by association with the utilization control device;
• and
• a user terminal configured to notify the utilization control device of the use permit,
• wherein the management device is configured to:
• manage transaction information including conditions for using the usage target object, and manage a first secret key, a first public key, a second secret key, and a second public key associated with the utilization control device,
• generate a first signature on hole data, associated with the utilization control device, including the second public key required for verification of the use permit by using the first secret key associated with the utilization control device, and
• generate a second signature on the use permit including the transaction information by using the second secret key associated with the utilization control device,
• wherein the user terminal configured to send the use permit with the second signature received from the management device to the utilization control device,
• wherein the utilization control device is configured to:
• when the first signature generated by the management device is received together with the hole data, verify the first signature by using pre-registered the first public key to set the hole data in the utilization control device itself if the verification has been established,
• when the second signature generated by the management device is received from the user terminal together with the use permit, verify the second signature by using the second public key included in the hole data set in the utilization control device itself to obtain the transaction information included in the use permit if the verification has been established, and
• lift the restriction on use of the usage target object if conditions for using included in the transaction information obtained are satisfied.

A management device configured to manage a utilization control device that controls use of a usage target object by locking/unlocking, access control or encrypting/decrypting based on a use permit, the management device comprising at least one processor, wherein the processor is configured to execute:

• a process of managing transaction information including a list of permission IDs required for using the usage target object or a list of biometric authentication information of users permitted to be used and conditions for using the usage target object,
• a process of managing a first secret key, a first public key, a second secret key, and a second public key associated with the utilization control device,
• a process of generating a first signature on hole data required for verification of the use permit, the hole data including the second public key associated with the utilization control device, by using the first secret key associated with the utilization control device, and
• a process of generating a second signature on the use permit including the transaction information by using the second secret key associated with the utilization control device.

A utilization control device configured to control use of a usage target object by locking/unlocking, access control or encrypting/decrypting based on a use permit,

• wherein the utilization control device configured to:
• verify a first signature received together with hole data required for verification of the use permit by using pre-registered a first public key to set the hole data in the utilization control device itself if the verification has been established,
• verify a second signature received together with the use permit by using a second public key included in the hole data set in the utilization control device itself to obtain transaction information included in the use permit if the verification has been established, and
• lift restriction on use of the usage target object if a permission ID read from an ID storage medium by an ID reader connected to the utilization control device itself exists in a list of permission IDs included in the transaction information and if conditions for using included in the transaction information are satisfied.

A utilization control device configured to control use of a usage target object by locking/unlocking, access control or encrypting/decrypting based on a use permit, comprising at least one processor,

• wherein the processor is configured to execute:
• a process of verifying a first signature received together with hole data required for verification of the use permit by using pre-registered a first public key to set the hole data in the utilization control device itself if the verification has been established,
• a process of verifying a second signature received together with the use permit by using a second public key included in the hole data set in the utilization control device itself to obtain transaction information included in the use permit if the verification has been established, and
• a process of lifting restriction on use of the usage target object if a permission ID read from an ID storage medium by an ID reader connected to the utilization control device itself exists in a list of permission IDs included in the transaction information and if conditions for using included in the transaction information are satisfied.

A utilization management method for managing use of a usage target object, the method comprising:

• actuating a utilization control device that controls a use of the usage target object by locking/unlocking, access control or encrypting/decrypting based on a use permit;
• and
• actuating a management device that manages the usage target object by association with the utilization control device;
• and an ID reader connected to the utilization control device,
• wherein the management device:
• manages transaction information including a list of permission IDs required for using the usage target object and conditions for using the usage target object, and manages a first secret key, a first public key, a second secret key, and a second public key associated with the utilization control device,
• generates a first signature on hole data including the second public key associated with the utilization control device by using the first secret key associated with the utilization control device, and
• generates a second signature on the use permit including the transaction information by using the second secret key associated with the utilization control device,
• wherein the utilization control device:
• when the first signature generated by the management device is received together with the hole data, verifies the first signature by using pre-registered the first public key to set the hole data in the utilization control device itself if the verification has been established,
• when the second signature generated by the management device is received together with the use permit, verifies the second signature by using the second public key included in the hole data set in the utilization control device itself to obtain the transaction information included in the use permit if the verification has been established, and
• when the ID reader reads a permission ID from an ID storage medium, lifts the restriction on use of the usage target object if the permission ID exists in the list of permission IDs included in the transaction information obtained and if conditions for using included in the transaction information obtained are satisfied.

A utilization management method for managing use of a usage target object, the method comprising:

• actuating a utilization control device that controls use of the usage target object by locking/unlocking, access control or encrypting/decrypting based on a use permit;
• and
• actuating a management device that managing the usage target object by association with the utilization control device;
• and a biometric reader connected to the utilization control device,
• wherein the management device:
• manages transaction information including a list of biometric authentication information of users permitted to be used and conditions for using the usage target object, and manages a first secret key, a first public key, a second secret key, and a second public key associated with the utilization control device,
• generates a first signature on hole data including the second public key associated with the utilization control device by using the first secret key associated with the utilization control device, and
• generates a second signature on the use permit including the transaction information by using the second secret key associated with the utilization control device,
• wherein the utilization control device:
• when the first signature generated by the management device is received together with the hole data, verifies the first signature by using pre-registered the first public key to set the hole data in the utilization control device itself if the verification has been established,
• when the second signature generated by the management device is received together with the use permit, verifies the second signature by using the second public key included in the hole data set in the utilization control device itself to obtain the transaction information included in the use permit if the verification has been established, and
• when the biometric reader reads biometric authentication information from a user, lifts the restriction on use of the usage target object if the biometric authentication information exists in the list of biometric authentication information included in the transaction information obtained and if conditions for using included in the transaction information obtained are satisfied.

A utilization management method for managing use of a usage target object, the method comprising:

• actuating a utilization control device that controls use of the usage target object by locking/unlocking, access control or encrypting/decrypting based on a use permit;
• and
• actuating a management device that manages the usage target object by association with the utilization control device;
• and a provider terminal that sets hole data required for verification of the use permit in the utilization control device,
• wherein the management device:
• manages transaction information including conditions for using the usage target object, and manages a first secret key, a first public key, a second secret key, and a second public key associated with the utilization control device,
• generates a first signature on the hole data including the second public key associated with the utilization control device by using the first secret key associated with the utilization control device, and
• generates a second signature on the use permit including the transaction information by using the second secret key associated with the utilization control device,
• wherein the provider terminal sends the hole data with the first signature generated by the management device to the utilization control device,
• wherein the utilization control device:
• when the first signature generated by the management device is received from the provider terminal together with the hole data, verifies the first signature by using pre-registered the first public key to set the hole data in the utilization control device itself if the verification has been established,
• when the second signature generated by the management device is received together with the use permit, verifies the second signature by using the second public key included in the hole data set in the utilization control device itself to obtain the transaction information included in the use permit if the verification has been established, and
• lifts the restriction on use of the usage target object if conditions for using included in the transaction information obtained are satisfied.

A utilization management method for managing use of a usage target object, the method comprising:

• actuating a utilization control device that controls use of the usage target object by locking/unlocking, access control or encrypting/decrypting based on a use permit;
• and
• actuating a management device that manages the usage target object by association with the utilization control device;
• and a user terminal that notifies the utilization control device of the use permit,
• wherein the management device:
• manages transaction information including conditions for using the usage target object, and manages a first secret key, a first public key, a second secret key, and a second public key associated with the utilization control device,
• generates a first signature on the hole data, associated with the utilization control device, including the second public key required for verification of the use permit by using the first secret key associated with the utilization control device, and
• generates a second signature on the use permit including the transaction information by using the second secret key associated with the utilization control device,
• wherein the user terminal sends the use permit with the second signature received from the management device to the utilization control device,
• wherein the utilization control device:
• when the first signature generated by the management device is received together with the hole data, verifies the first signature by using pre-registered the first public key to set the hole data in the utilization control device itself if the verification has been established,
• when the second signature generated by the management device is received from the user terminal together with the use permit, verifies the second signature by using the second public key included in the hole data set in the utilization control device itself to obtain the transaction information included in the use permit if the verification has been established, and
• lifts the restriction on use of the usage target object if conditions for using included in the transaction information obtained are satisfied.

A computer program product embodying computer readable instructions stored on a non-transitory computer readable medium configured to cause a computer to function as a management device that manages a utilization control device controlling use of a usage target object by locking/unlocking, access control or encrypting/decrypting based on a use permit,

• wherein the computer is configured to execute the computer readable instructions so as to execute:
• a process of managing transaction information including a list of permission IDs required for using the usage target object or a list of biometric authentication information of users permitted to be used and conditions for using the usage target object,
• a process of managing a first secret key, a first public key, a second secret key, and a second public key associated with the utilization control device,
• a process of generating a first signature on hole data required for verification of the use permit, the hole data including the second public key associated with the utilization control device, by using the first secret key associated with the utilization control device, and
• a process of generating a second signature on the use permit including the transaction information by using the second secret key associated with the utilization control device.

A computer program product embodying computer readable instructions stored on a non-transitory computer readable medium configured to cause a computer to function as a utilization control device configured to control use of a usage target object by locking/unlocking, access control or encrypting/decrypting based on a use permit,

• wherein the computer is configured to execute the computer readable instructions so as to execute:
• a process of verifying a first signature received together with hole data required for verification of the use permit by using pre-registered a first public key to set the hole data in the utilization control device itself if the verification being established,
• a process of verifying a second signature received together with the use permit by using a second public key included in the hole data set in the utilization control device itself to obtain transaction information included in the use permit if the verification being established, and
• a process of lifting restriction on use of the usage target object if a permission ID read from an ID storage medium by an ID reader connected to the utilization control device itself exists in a list of permission IDs included in the transaction information and if conditions for using included in the transaction information are satisfied.

A computer program product embodying computer readable instructions stored on a non-transitory computer readable medium configured to cause a computer to function as a utilization control device configured to control use of a usage target object by locking/unlocking, access control or encrypting/decrypting based on a use permit,

• wherein the computer is configured to execute the computer readable instructions so as to execute:
• a process of verifying a first signature received together with hole data required for verification of the use permit by using pre-registered a first public key to set the hole data in the utilization control device itself if the verification being established,
• a process of verifying a second signature received together with the use permit by using a second public key included in the hole data set in the utilization control device itself to obtain transaction information included in the use permit if the verification being established, and
• a process of lifting restriction on use of the usage target object if biometric authentication information read from a user by a biometric reader connected to the utilization control device itself exists in a list of biometric authentication information included in the transaction information and if conditions for using included in the transaction information are satisfied.

A utilization management method for executing management of a utilization control device that controls use of a usage target object by locking/unlocking, access control or encrypting/decrypting based on a use permit, by at least one processor, the method comprising:

• a step of managing transaction information including a list of permission IDs required for using the usage target object or a list of biometric authentication information of users permitted to be used and conditions for using the usage target object, and of managing a first secret key, a first public key, a second secret key, and a second public key associated with the utilization control device;
• a step of generating a first signature on hole data required for verification of the use permit, the hole data including the second public key associated with the utilization control device, by using the first secret key associated with the utilization control device;
• and
• a step of generating a second signature on the use permit including the transaction information by using the second secret key associated with the utilization control device.

A utilization control method for executing control of use of the usage target object by locking/unlocking, access control or encrypting/decrypting based on a use permit, by at least one processor, the method comprising:

• a step of verifying a first signature received together with hole data required for verification of the use permit by using pre-registered a first public key to set the hole data in the utilization control device itself if the verification being established;
• a step of verifying a second signature received together with the use permit by using a second public key included in the hole data set in the utilization control device itself to obtain transaction information included in the use permit if the verification being established;
• and
• a step of lifting restriction on use of the usage target object if a permission ID read from an ID storage medium by an ID reader connected to the utilization control device itself exists in a list of permission IDs included in the transaction information and if conditions for using included in the transaction information are satisfied.

A utilization control method for executing control of use of the usage target object by locking/unlocking, access control or encrypting/decrypting based on a use permit, by at least one processor, the method comprising:

• a step of verifying a first signature received together with hole data required for verification of the use permit by using pre-registered a first public key to set the hole data in the utilization control device itself if the verification being established;
• a step of verifying a second signature received together with the use permit by using a second public key included in the hole data set in the utilization control device itself to obtain transaction information included in the use permit if the verification being established;
• and
• a step of lifting restriction on use of the usage target object if biometric authentication information read from a user by a biometric reader connected to the utilization control device itself exists in a list of biometric authentication information included in the transaction information and if conditions for using included in the transaction information are satisfied.