Authentication server, authentication system, control method of authentication server, and storage medium

An authentication system comprising:

• an authentication server;
• and
• a management server,
• wherein the authentication server includes
• at least one memory storing a set of instructions;
• and
• at least one processor configured to execute the set of instructions to:
• acquire a first ID that uniquely determines a user in the system and first biological information that is used for authentication of the user;
• process a service registration request that is transmitted from a service provider of a service that the user wishes to use and that includes the first ID and a second ID that identifies the service provider,
• wherein
• the at least one processor is further configured to execute the set of instructions to:
• generate a third ID that is uniquely determined by a combination of the user and the service provider;
• generate an encryption key;
• transmit the third ID and the encryption key to the service provider;
• and
• store the first biological information, the first ID, the second ID, the third ID and the encryption key in association with each other, and
• wherein the management server includes
• at least one memory storing a set of instructions;
• and
• at least one processor configured to execute the set of instructions to:
• acquire the first ID and personal information of the user from the user;
• acquire the third ID and the encryption key by transmitting the service registration request to the authentication server;
• and
• store personal information of the user encrypted with the encryption key and the third ID in association with each other.

A control method of an authentication server, the control method comprising:

• acquiring a first ID that uniquely determines a user in a system and first biological information that is used for authentication of the user;
• receiving a service registration request that is transmitted from a service provider of a service that the user wishes to use and that includes the first ID and a second ID that identifies the service provider;
• generating a third ID that is uniquely determined by a combination of the user and the service provider, and an encryption key;
• transmitting the third ID and the encryption key to the service provider;
• and
• storing the first biological information, the first ID, the second ID, the third ID, and the encryption key in association with each other.