Access right management system, access right management method, and access right management program

An access right management system, comprising:

• an authentication device that manages a condition under which a right is transferred;
• a service providing device that provides a service in a response to a service request;
• and
• a service proxy access device that acts as a proxy in accessing the service providing device,
• the authentication device, the service providing device, and the service proxy access device being implemented using hardware,
• wherein the authentication device includes:
• a user authentication certificate generation unit that issues to the service providing device user authentication information on which information about a user is recorded;
• and
• a right transfer certificate/token generation unit that issues to the service proxy access device right transfer information and a token corresponding to the right transfer information on a basis of information about a user to whom the right is transferred and the condition under which the right is transferred, the condition being set by a user who transfers the right,
• wherein the service proxy access device includes:
• a token request unit that requests the issuing of the right transfer information and the token to the authentication device in order to access the service providing device;
• and
• a user proxy access unit that accesses the service providing device using the token, and
• wherein the service providing device includes:
• a user authentication certificate request unit that uses the token to acquire the user authentication information from the authentication device.