JP6979101B2 - Authorization device, authorization method and authorization program - Google Patents

Description

The present invention relates to a method of granting a user the right to use a service based on the position of the user.

Currently, various services are provided to users through networks such as the Internet. A user who wants to use a specific service among such services registers as a user for that service. For example, the user registers the user's identification information and authentication information such as a password in the service. This gives the user the right to use the service. After that, at the time of login, user authentication is executed in response to the user inputting the authentication information, and if this authentication is successful, the user can use the service.

In addition, a method of granting usage authority using the user's position has also been proposed. For example, Patent Document 1 discloses an access permission method to a business server system using an access permission area and a current position of a user's mobile terminal. In this method, the mobile terminal transmits the current position information of the mobile terminal to the authentication device, and the authentication device determines whether the current position of the mobile terminal is within the permitted area. The authentication device performs user authentication only when the current position is within the permitted area, and stores the terminal-specific key of the mobile terminal. As a result, the user is given the authority to use the business server system. After that, by inputting the user ID and password in the access permission area, the user can use the business server system.

Japanese Patent No. 6360862

Services provided to users are often associated with a particular subject (eg, a particular matter, thing or person, etc.). In order to activate the use of such a service, it is desirable to grant the right to use the service to a user who has a certain degree of interest in a specific target. Therefore, it is conceivable to acquire the user's location information, determine that the user is located in a place or area related to a specific target, and grant the user the usage authority. Indeed, users who are interested in a particular subject may go to places related to that subject, so it may be possible to attract some interested users. However, without any special restrictions, anyone can go to the place. Therefore, in order to make the use of the service more active, it is desired to enhance the appropriateness of the control for granting the right to use the service.

The present invention has been made in view of the above points, and one example of the problem is that a user who has a certain degree of interest in an object related to the service can be granted the right to use the service. It is to provide an authorization device, an authorization method, and an authorization program.

In order to solve the above problems, the invention according to claim 1 is a first system for providing a first service, and a user who has the right to use the first service is provided with first user identification information. In the authorization device included in the first system to be identified by using, a user who has a usage authority of the second service different from the first service can use the second system to provide the second service. The first user identification information and the second user identification information are independently registered in the first system and the second system, respectively, and designated by the provider of the second service. Area information acquisition means for acquiring area information indicating an area, area information storage control means for storing the acquired area information in a storage means, and position information acquisition means for acquiring position information indicating the position of a terminal device. If the position indicated by the obtained position information is included in the area indicated by the stored area information, verify that the terminal user using the terminal device has the use authority of the second service A control means for causing the second system to execute user authentication for the purpose, and an granting means for executing a process of granting the usage authority of the first service to the terminal user when the user authentication by the second system is successful. It is characterized by having and.

According to the present invention, the area is designated by the provider of the second service corresponding to one of the conditions for the user to use the first service. The second service is a service different from the first service. In the first service and the second service, user identification information is separately registered for the same user. When a user carrying a terminal device enters the designated area, user authentication by the second system for providing the second service is executed. If this user authentication is successful, the user is given the right to use the first service. The provider is considered to pre-designate the area where things related to the provider or the second service are. Further, it is one of the conditions for the user to use the first service that the user goes within the designated area. Therefore, the first service is considered to be related to that thing within the territory. In addition, a user who has the right to use the second service may be interested in the provider or things related to the second service. Therefore, a user who has the right to use the second service and goes to the area designated by the provider is highly likely to go to the area because he / she is interested in the matter. Therefore, it is possible to grant the right to use the first service to a user who has a certain degree of interest in the target related to the first service.

The invention according to claim 2 is characterized in that the granted authority is an authority capable of using the first service regardless of whether or not the terminal device is located in the area. And.

According to the present invention, a user who has been shown to have a certain degree of interest in an object related to the first service can use the first service even after leaving the designated area. can.

The invention according to claim 3 is the provision of a predetermined community in a community service for providing at least one community in which the first service is capable of posting information and receiving posted information via a network. A plurality of users in which the first user identification information is registered in the first system have the right to use the community service, and the given right is the right to post information to the predetermined community. It is characterized by that.

According to the present invention, among a plurality of users who have the right to use the community service, the community service is provided to the user who goes within the area designated by the provider of the second service and has the right to use the second service. You are authorized to post information to a given community of at least one community provided by. It is one of the conditions for the user to acquire the posting authority that the user goes within the designated area. Therefore, it is considered that information about things in the area will be exchanged in the designated community. Therefore, among a plurality of users who can use the community service, the community can be formed by the users who have a certain degree of interest in the target for which information is exchanged in the predetermined community.

The invention according to claim 4 is the case where the user authentication by the second system is executed based on the terminal user inputting the second user identification information to the terminal device, and the user authentication is successful. , A token that indicates that the terminal user has been authenticated to have the right to use the second service, and that is different from the input second user identification information, is acquired from the second system. Further provided with means, the granting means is characterized in that when the token is acquired, the usage authority is granted to the terminal user.

According to the present invention, the second user identification information is input for user authentication by the second user. If the user authentication is successful, the second system provides a token different from the second user identification information as information indicating that the user has been authenticated to have the right to use the second service. Therefore, the first system itself can acquire the result of user authentication in the second service without acquiring the second user identification information. Therefore, it is possible to prevent the personal information of the user from leaking to the outside of the second system.

The invention according to claim 5 is a token storage control means for storing the acquired token in the storage means, and when the terminal user uses the first service, the stored token is stored in the second. A token transmitting means to be transmitted to the system, and a permission means for executing a process of permitting the terminal user to use the first service when the terminal user is authenticated by the second system based on the transmitted token. It is characterized by further providing.

According to the present invention, even after the user is granted the right to use the first service, when the user uses the first service, the second system executes user authentication based on the token. Therefore, it is possible to confirm that the user has the right to use the second system when using the first service without having to re-enter the second user identification information.

The invention according to claim 6 is a first system for providing a first service, and is a first system for identifying a user who has the right to use the first service by using the first user identification information. In the authorization method executed by the included authorization device , a user who has a usage authority of the second service different from the first service obtains the second user identification information by the second system for providing the second service. The first user identification information and the second user identification information are independently registered in the first system and the second system, respectively, and are designated by the provider of the second service. The area information acquisition step for acquiring the area information indicating the above, the area information storage control step for storing the acquired area information in the storage means, the position information acquisition step for acquiring the position information indicating the position of the terminal device, and the above. the position indicated by the acquired position information, if included in the area indicated by the stored area information, the terminal user using the terminal device is confirmed to have the use authority of the second service A control step for causing the second system to execute user authentication for the purpose, and an grant step for executing a process of granting the use authority of the first service to the terminal user when the user authentication by the second system is successful. , Is included.

The invention according to claim 7 is a first system for providing a first service, and is a first system for identifying a user who has the right to use the first service by using the first user identification information. In the authorization program executed by the computer of the included authorization device, a user who has a usage authority of the second service different from the first service identifies the second user by the second system for providing the second service. The first user identification information and the second user identification information are identified using the information, and the first user identification information and the second user identification information are independently registered in the first system and the second system, respectively, and the computer is provided with the second service. The area information acquisition means for acquiring the area information indicating the area designated by the person, the area information storage control means for storing the acquired area information in the storage means, and the position for acquiring the position information indicating the position of the terminal device. When the information acquisition means and the position indicated by the acquired position information are included in the area indicated by the stored area information , the terminal user who uses the terminal device has the right to use the second service. A control means for causing the second system to execute user authentication for confirming that the system has, and a process for granting the terminal user the right to use the first service when the user authentication by the second system is successful. It is characterized in that it functions as a granting means for executing.

According to the present invention, it is possible to grant a user who has a certain degree of interest in an object related to a service the right to use the service.

It is a figure which shows an example of the outline structure of the system S which concerns on one Embodiment. It is a block diagram which shows an example of the outline structure of the center server 1 which concerns on one Embodiment. It is a figure which shows an example of the contents stored in a database. It is a figure which shows an example of the functional block of the system control unit 11 of the center server 1 which concerns on one Embodiment. It is a figure which shows an example of a state in which a user performs participation registration. It is a figure which shows an example of the relationship between the participation registration possible period and the posting possible period. It is a figure which shows the screen example in a dedicated application. It is a figure which shows the screen example in a dedicated application. It is a sequence diagram which shows an example of the operation of the system S which concerns on one Embodiment. It is a sequence diagram which shows an example of the operation of the system S which concerns on one Embodiment. It is a sequence diagram which shows an example of the operation of the system S which concerns on one Embodiment.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. In the embodiment described below, the present invention is applied to a community service for providing at least one Internet community capable of posting information and receiving posted information via a network. It is a form. Individual communities are called channels.

[1-1. System configuration]
First, the configuration and functional outline of the system S according to the present embodiment will be described with reference to FIG. FIG. 1 is a diagram showing an example of an outline configuration of a system S according to the present embodiment.

As shown in FIG. 1, the system S includes a channel system SA, one or a plurality of service systems SB, and a plurality of user terminals 3. The channel system SA, each service system SB, and each user terminal 3 are connected to each other via a network NW. The network NW is constructed by, for example, the Internet, a dedicated communication line (for example, a CATV (Community Antenna Television) line), a mobile communication network (including a base station, etc.), a gateway, and the like.

The channel system SA is a system for providing a channel service. The channel service is to provide a user or a user terminal 3 with at least one channel through which information is exchanged. The channel system SA includes a center server 1. The channel system SA may further include other server devices and terminal devices. The center server 1 is a server device that manages channel services. By using the user terminal 3, the participants of the channel can post information to the channel and receive the information posted to the channel via the network NW. Examples of the information exchange method in the channel include a bulletin board method and a chat method. The center server 1 performs processing for controlling user authentication, channel establishment, channel participation registration by the user, information exchange between users participating in the channel, and the like.

In order to acquire the right to use the channel service, the user needs to register as a member. Therefore, the first user ID for identifying the user in the channel service is registered in the channel system SA. It may also be necessary to register passwords or other authentication information (eg, fingerprints, irises, facial features). The user ID and password used in the channel service are referred to as a first user ID and a first password, respectively. The first user ID and the first password are stored in, for example, the center server 1. A plurality of users whose first user IDs are registered in the channel system SA each have the right to use the channel service. A user who has the right to use the channel service may be able to, for example, search for a channel, open a channel, request registration for participation in a channel, and the like. The channel system SA and the center server 1 identify a user who has the authority to use the channel service by using the first user ID. The center server 1 may have the user input the first user ID at the time of login. The center server 1 determines whether or not the user is a member of the channel service based on the first user ID, and identifies which member the user is. Users who have registered to join the channel can post information to the channel and view information posted by other users. The channel system SA and the center server 1 also identify a user who has the right to use a specific channel by using the first user ID. For example, the center server 1 determines whether or not the user is a participant of a specific channel based on the first user ID input at the time of login, and which participant is the user. To identify.

Each service system SB is a system different from the channel system SA. Each service system SB is a system for providing a specific service different from the channel service to the user or the user terminal 3. The specific service may be provided through the network NW, may be provided by other communication means, or may be provided directly from the provider to the user. The specific service may be any service. The specific service may be a community service different from the channel service. Examples of specific services are after-sales service, product sales (online shopping site), product sales brokerage (electronic shopping street), service reservation brokerage (reservation site), content provision, social networking service, internet banking, payment service. , Information search service, blog service, etc. Examples of providers of specific services include companies, stores, associations, and the like. The provider of a specific service and the provider of a channel service are different. However, the providers of these services may be the same as each other.

In order to acquire the right to use a specific service, the user needs to register as a member. A user ID for identifying a user in a specific service is registered in the service system SB. It may also be necessary to register a password or other authentication information. The user ID and password used in the specific service are referred to as a second user ID and a second password, respectively. As in the case of the channel system SA, each service system SB identifies a user who has the right to use a specific service provided by the service system SB by using the second user ID.

The first user ID and the second user ID are registered independently of each other. Specifically, the first user ID is registered in the center server 1 in the channel system SA. The second user ID is registered in the service system SB. When registering as a member of the channel service, the user registers the first user ID and the first password, and when registering as a member of the specific service, the user registers the second user ID and the second password. It is up to the user to decide whether the first user ID and the second user ID are different IDs or the same ID. A user who can use both the channel service and at least one specific service logs in using the first user ID and the first password when using the channel service, and the second user ID and the second user when using the specific service. Log in using your password.

Each service system SB includes a server 2-1 and a service member DB 2-2, and a management terminal 2-3. The server 2-1 and the service member DB 2-2 and the management terminal 2-3 may be connected to each other via a network such as a LAN (Local Area Network). The server 2-1 is a server device that performs processing such as user authentication and provision of a specific service in the service system SB. The server 2-1 may include a plurality of server devices, for example, an authentication server, a WWW server, a database server, and the like. Information about users who can use the specific service is stored in the service member DB 2-2 for each user. For example, in the service member DB 2-2, the second user ID, the second password, and the like are stored in association with each other. The management terminal 2-3 is a terminal device used by a provider of a specific service. Examples of the management terminal 2-3 include a personal computer, a tablet computer, and the like.

Each user terminal 3 is a portable terminal device used by a user who uses a channel service. Examples of the user terminal 3 include mobile information terminals such as smartphones and tablet computers, mobile phones, PDAs (Personal Digital Assistants), and the like. Each user terminal 3 may store a web browser, an e-mail client, an application program for a channel service (hereinafter referred to as a dedicated application), and the like. The user can use the channel service by transmitting and receiving information from the user terminal 3 to and from the center server 1. A user who has registered as a member of any of the specific services can use the specific service by transmitting and receiving information from the user terminal 3 of the user to and from the service system SB.

Each user terminal 3 has a function of acquiring position information indicating the position of the user terminal 3. For example, a satellite positioning system such as GPS (Global Positioning System) may be used to calculate latitude and longitude as position information. Further, for example, the mobile communication operator may provide the user terminal 3 with location information using the base station. In this case, the user terminal 3 acquires the latitude and longitude, the address, or the zip code corresponding to the position of the base station near the user terminal 3 as the position information. Further, for example, location information may be acquired by using a wireless LAN (Local Area Network). For example, when the user terminal 3 receives radio waves from a plurality of access points, the user terminal 3 measures the radio wave strength from each access point and acquires the SSID of each access point. The user terminal 3 transmits information including radio field intensity and SSID to a predetermined server device (not shown). This server device stores the latitude and longitude of the installation position of the access point. The server device calculates the position of the user terminal 3 by, for example, triangulation, using the information received from the user terminal 3.

In the system S, the founder designates a geographical area when the channel is opened. The designated area usually includes a place where information is exchanged within the channel, a place where information is exchanged, and the like. For example, the founder can specify an area to include a particular store, facility, landmark, or the like. In addition, the founder can specify an area to include a place where a specific person, an animal or a plant, etc. is present, or a place where a specific object or service is provided. In addition, the founder can specify the area to include the place where a specific event is held.

Of the users who use the system S, only the users who have entered the designated area can register to participate in the channel. The registered user acquires the authority to post information to the channel. This authority will continue to be granted to the participant even after the participant leaves the designated area. A user who is even a little interested in things in a given area may or may not go within that area. However, the act of going to a certain place is an act that consumes the user's time and effort. Therefore, it is highly probable that a user who has gone to the designated area is a user who has a certain degree of interest in things in the area. Therefore, it is possible to form a community with users who have a certain degree of interest in a specific thing.

The provider of each specific service can open a channel in the channel service. Channels opened may exchange information about specific services or providers. For example, this channel may exchange information about services or products provided by its providers other than specific services. Alternatively, this channel may exchange information about events hosted or attended by the provider. The area designated by the provider may include places where there are things related to a particular service or provider, where such services or goods are provided, and where such an event is held. It may include the place where it is done.

If a channel is a channel opened by a provider of a particular service, the user will be registered to join the channel upon entering the designated area, provided that the user is a member of the particular service. can do. As mentioned above, a user who has gone within a designated area is likely to be a user who is more than a certain degree of interest in things within that area. However, without any particular restrictions, anyone can go within that area. As a result, some of the users who try to join the channel may not be very interested in it. On the other hand, members of a particular service are likely to be interested in the provider of that service or things related to that provider. Therefore, it is highly probable that a member who has gone to the designated area is a user who has a certain degree of interest in things in the area. Therefore, it is possible to form a community with users who have a certain degree of interest in specific things related to a specific service provider. In addition, the provider of a specific service can provide a channel related to the provider to the members of the service without making an additional capital investment.

In order to subscribe to a channel opened by someone other than the provider of a specific service, the user needs to go to, for example, an area designated by the provider. However, the user does not have to be a member of any particular service. A detailed explanation of how to subscribe to a channel opened by someone other than the provider of a specific service is omitted.

The center server 1 or the system S provides the channel to a user who has the authority to post information to the channel established by the provider of the specific service. This service is a part of the channel service. Specifically, the center server 1 enables the user to post information. The center server 1 identifies a user who has the authority to post information to the channel by using the first user ID. The information posted to the channel service may be viewed only by a user having posting authority, or may be available to all users.

At the time of opening a channel, the creator may be able to specify the period during which participation can be registered in addition to the area. The registration period may correspond to, for example, a period of time when information is exchanged on the channel. In this case, only users who have entered the designated area within the registration period can register to participate in the channel. For example, when specifying an area for a place where an event with a fixed holding period or date and time occurs, or a place with fixed business hours, specify the period during which participation registration is possible according to the period, date and time, etc. It is good to do it.

[1-2. Center server configuration]
Next, the configuration of the center server 1 will be described with reference to FIGS. 2 and 3. FIG. 2 is a block diagram showing an example of an outline configuration of the center server 1 according to the present embodiment. As shown in FIG. 2, the center server 1 includes a system control unit 11, a system bus 12, an input / output interface 13, a storage unit 14, and a communication unit 15. The system control unit 11 and the input / output interface 13 are connected via the system bus 12.

The system control unit 11 is composed of a CPU (Central Processing Unit) 11a, a ROM (Read Only Memory) 11b, a RAM (Random Access Memory) 11c, and the like.

The input / output interface 13 performs interface processing between the storage unit 14 and the communication unit 15 and the system control unit 11.

The storage unit 14 is composed of, for example, a hard disk drive or the like. A database such as a member DB 14a, a position information DB 14b, a channel DB 14c, an area DB 14d, and a posting information DB 14e is stored in the storage unit 14. "DB" is an abbreviation for database.

FIG. 3 is a diagram showing an example of the contents stored in the database. In the member DB 14a, member information about the user of the system S is stored for each user. Specifically, in the member DB 14a, as member information, a first user ID, a first password, a nickname, a gender, a date of birth, a telephone number, an e-mail address, an address, preference information, a notification channel list, a participating channel list, etc. Information is associated and stored. The preference information is information indicating the user's preference. For example, the preference information may include a list of genres, categories, etc. that the user likes. The notification channel list is, for example, a list of channel IDs of channels registered by the user. The channel ID is identification information for identifying a channel in the system S. When the user enters the area specified for the channel to which the channel ID is added to the notification channel list, the user may be notified that the channel can be registered for participation. The participating channel list is a list of channel IDs of the channels to which the user is participating.

The position information of the user terminal 3 is stored in the position information DB 14b for each user. Specifically, the position information DB 14b stores the first user ID, the recording date and time, and the terminal position information in association with each other as the position information. The first user ID indicates a user who uses the user terminal 3. The recording date and time is the date and time when the position information is recorded by the user terminal 3. The terminal position information may be, for example, a latitude and longitude indicating the position of the user terminal. For each user, only the latest location information may be stored, or location information acquired at a plurality of time points may be stored as a history of location information.

Channel information about the opened channel is stored in the channel DB 14c for each channel. Specifically, in the channel DB 14c, as channel information, channel ID, founder ID, campaign ID, channel name, channel outline, tag information, area ID, participation registration period, publication type, login URL (Uniform Resource Locator) , Participant list, etc. are stored in association with each other. Of these information, the campaign ID, channel name, channel outline, tag information, registration period, publication type, and login URL can be set by the channel creator. The campaign ID is identification information for identifying the channel indicated by the channel ID and the target with which information is exchanged on the channel in the service system SB. A provider of a particular service can open multiple channels. In that case, in the service system SB, each channel is identified by the campaign ID as a campaign. When the provider of the specific service does not open a plurality of channels, the campaign ID may not be stored in the channel DB 14c. The founder ID is identification information that identifies the founder. When the founder is a provider of a specific service, the founder ID may be identification information for identifying the service system SB. The tag information is a list of genres, keywords, and the like related to the channel. The area ID is identification information that identifies the area information indicating the area designated by the founder. The participation registration period may or may not be stored in the channel DB 14c depending on the selection of the founder. The disclosure type indicates whether or not the information posted on the channel is disclosed to users who are not participating in the channel. The login URL is a URL indicating the service system SB accessed by the user terminal 3 in order for the user to receive login authentication by the service system SB. The participant list is a list of users who are participating in the channel. The participant list contains at least one participant information. Each participant information includes a first user ID and an access token. The first user ID indicates a user who has registered to participate in the channel. The access token indicates that the user indicated by the first user ID has been authenticated to have the right to use the specific service specified by the founder ID. This access token is generated by the service system SB. A different access token is generated for each member of a specific service. The access token is information different from the second user ID possessed by the user indicated by the first user ID.

The area DB 14d stores area information indicating an area designated by the channel creator. Specifically, the area ID, the area information, and the like are stored in association with each designated area in the area DB 14d. The area corresponding to a channel may include a place where things are exchanged for information on that channel. The area information indicates the area designated by the channel creator. For example, if the designated area is a circular area, the area information may include the latitude and longitude of the center point and the radius. Alternatively, the region information may include the latitude and longitude of each line segment constituting the boundary of the region. Alternatively, the area information may include a place name, an address, or the like.

The posted information DB 14e stores the information posted on the channel. Specifically, the channel ID, the first user ID, the posting date and time, the posting information, and the like are stored in association with each other in the posting information DB 14e. The channel ID indicates the channel to which the message is posted. The first user ID indicates the poster. The posted information is the posted information. Examples of posted information include still images, moving images, sounds, texts, and the like.

The storage unit 14 further stores various programs such as an operating system, a DBMS (Database Management System), and a server program. The server program is a program that causes the system control unit 11 to execute various processes related to the system S. The server program may be acquired from another device via the Internet NW, or may be recorded on a recording medium such as a magnetic tape, an optical disk, or a memory card and read via the drive device. May be good.

The communication unit 15 connects to the online shopping server 2 and the user terminal 3 via the network NW, and controls the communication state with these devices.

[1-3. Overview of the functions of the system control unit of the center server]
Next, the functional outline of the system control unit 11 of the center server 1 will be described with reference to FIGS. 4 to 8. FIG. 4 is a diagram showing an example of a functional block of the system control unit 11 of the center server 1 according to the present embodiment. As shown in FIG. 4, the system control unit 11 reads and executes various program codes included in the server program by the CPU 11a, so that the channel information acquisition unit 111, the channel information registration unit 112, the position information acquisition unit 113, and the authentication unit 11 are authenticated. It functions as a control unit 114, an authentication result acquisition unit 115, a posting authority granting unit 116, a channel information providing unit 117, and the like.

The channel information acquisition unit 111 acquires channel information including area information indicating an area designated by the founder requesting the opening of the channel. When the provider is a provider of a specific service, the channel information acquisition unit 111 acquires area information indicating an area designated by the provider. In this case, the founder may be able to specify the area by operating the management terminal 2-3. For example, a map is displayed on the screen of the management terminal 2-3. The founder can scroll the map. The founder specifies the center point of the area on the map. In addition, the founder specifies the radius of the area. The shape of the region is not limited to the circle. For example, the shape of the region may be an ellipse, a square, a rectangle, a rhombus, or the like. Moreover, the method of designating the area may be another method. For example, the boundary line of the area may be drawn and specified by the user tracing on the map with a finger, a mouse pointer, or the like. Alternatively, it may be possible to specify an address, a facility name, a building name, a landmark name, or the like as the central point of the area. Further, the method of designating the area may be selectable by the founder. The founder may further input channel information such as a campaign ID. The management terminals 2-3 transmit the area information including the latitude and longitude and the radius of the center point and the input channel information to the center server 1. These pieces of information may be transmitted to the center server 1 via the server 2-1. Further, the campaign ID may be automatically generated by the server 2-1.

The channel information registration unit 112 stores the area information acquired by the channel information acquisition unit 111 and the channel ID for identifying the channel requested to be opened in the storage unit 14 in association with each other. For example, the channel information registration unit 112 determines a new channel ID for the channel to be opened and a new area ID for the designated area. The channel information registration unit 112 stores the channel information including the determined channel ID and area ID in the channel DB 14c. When the participation registration possible period specified by the founder is acquired by the channel information acquisition unit 111, the channel information registration unit 112 stores the participation registration possible period, the channel ID, and the area ID in the storage unit 14. .. Further, the channel information registration unit 112 stores the area ID and the area information in the area DB 14d in association with each other.

The channel information acquisition unit 111 and the channel information registration unit 112 may be configured so that the creator can specify a plurality of areas for one channel. Further, after the channel is opened, the channel information acquisition unit 111 and the channel information registration unit 112 may be configured so that an area can be added or deleted for one channel.

The position information acquisition unit 113 acquires position information indicating the position of the user terminal 3. For example, according to a dedicated application installed on the user terminal 3, each user terminal 3 periodically in the background (for example, every 5 minutes, every 10 minutes, etc.) and uses GPS or the like to provide location information of the user terminal 3. To get. For example, the user terminal 3 may periodically acquire the terminal position information only when the notification channel list of the user who uses the user terminal 3 includes one or more channel IDs. Alternatively, the user terminal 3 may periodically acquire the terminal position information regardless of whether or not the channel ID is included in the channel list. Further, the user terminal 3 may acquire the position information at the timing when the dedicated application is started or the like. With the regular location information acquisition interval, even if the location information cannot be acquired while in the area, the user can register to join the channel by starting the dedicated application. .. Each time the user terminal 3 acquires the terminal position information, the user terminal 3 acquires the current date and time as the recording date and time. The user terminal 3 transmits the terminal position information, the recording date and time, and the position information including the first user ID of the user who uses the user terminal 3 to the center server 1. When the user terminal 3 transmits the position information in real time, the position information acquisition unit 113 may determine the recording date and time instead of the user terminal 3 determining the recording date and time. For example, the position information acquisition unit 113 may determine the reception date and time of the position information as the recording date and time. The position information acquisition unit 113 may store the position information transmitted from the user terminal 3 in the position information DB 14b. The location information may include at least the terminal location information. The position information acquisition unit 113 may store only the latest position information in the position information DB 14b for each user terminal 3, or may store the history of the position information. For example, the position information acquisition unit 113 may add this position information to the position information DB 14b each time the position information is acquired from the user terminal 3. Then, the position information acquisition unit 113 may acquire the history of the position information from the position information DB 14b as needed. Alternatively, the user terminal 3 may store the history of location information. Then, the position information acquisition unit 113 may acquire the history of the position information from the user terminal 3.

When the position of the user terminal 3 indicated by the position information acquired by the position information acquisition unit 113 is included in the area indicated by the area information stored in the storage unit 14, the authentication control unit 114 tells the service system SB. User authentication for confirming that the user who uses the user terminal 3 has the right to use the specific service is executed. This process is a process for registering only members of a specific service to join the channel.

For example, the authentication control unit 114 may transmit the login URL of the service system SB corresponding to the area where the user terminal 3 is located to the user terminal 3. The user terminal 3 uses the login URL to access the server 2-1 of the corresponding service system SB. The server 2-1 transmits the information on the login screen to the user terminal 3. On the login screen, the user inputs a second user ID and a second password. The server 2-1 compares the entered second user ID and second password with the service member DB2-2 to perform user authentication.

When the user authentication by the service system SB is successful, the authentication result acquisition unit 115 acquires information from the service system SB indicating that the user is authenticated to have the right to use the specific service. When the user authentication is successful, the server 2-1 transmits this information to the center server 1. This information may be, for example, information simply indicating that the user has been authenticated, or may be an access token. The access token may be generated by the server 2-1. When the server 2-1 generates an access token for a certain user, the access token is different from the second user ID of the user and is different from the access token generated for another user. Generate an access token. Therefore, the access token can identify a user who has been authenticated to have the right to use a specific service in the service system SB. The access token or the information indicating that the user has been authenticated is information different from the user's second user ID. Therefore, it is possible to prevent the personal information of the user in the specific service from leaking to the outside of the service system SB.

When the user authentication by the service system SB is successful, the posting authority granting unit 116 executes a process of granting the user the authority to post information to the channel. For example, the posting authority granting unit 116 may grant the posting authority to the user when the access token or the information indicating that the user has been authenticated is acquired by the authentication result acquisition unit 115. This authority may be an authority that allows posting of information regardless of whether or not the user terminal 3 is located in the area.

The provider of a particular service is considered to pre-designate an area where there are things related to that provider or the particular service. Further, it is one of the conditions for the user to use a specific channel that the user goes within the designated area. Therefore, the channel is considered to be related to the thing in the area. In particular, in this embodiment, a channel is opened by a provider of a particular service, so that channel relates to that thing within the territory. Members of the particular service are considered to be interested in the provider or things related to the particular service. Therefore, a member who goes to the area designated by the provider of a specific service is likely to go to the area because he / she is interested in the matter. Therefore, it is possible to grant the authority to post information to the channel to a user who has a certain degree of interest in the object related to the channel.

Further, in order to acquire the channel usage authority, the user needs to transmit three pieces of information, that is, the first user ID, the second user ID, and the position information of the user terminal 3 to the center server 1. However, the location information is automatically acquired by the user terminal 3 and transmitted to the center server 1. Therefore, the user may input the first user ID when logging in to the channel service, and input the second user ID when the user is authenticated by the service system SB. Therefore, the user only has to take two steps. This can reduce the time and effort of the user. Further, the first user ID input to the dedicated application may be stored in the user terminal 3. Upon logging in to the channel service, the user terminal 3 may automatically transmit the stored first user ID to the center server 1. In this case, the user only needs to enter the second user ID.

The process of granting the authority to post information may be, for example, associating the first user ID of the user to whom the authority to post information is granted with the channel ID of the channel to which information can be posted. By referring to this association, it is possible to control whether or not to allow a specific user to post to a specific channel. This association may be, for example, in the channel DB 14c, the first user ID of the participant is added to the participant list associated with the channel ID. Alternatively, the association may be that the channel ID of the channel registered by the user is added to the participation channel list associated with the first user ID in the member DB 14a.

The posting authority granting unit 116 may grant posting authority only when the position of the user terminal 3 indicated by the latest position information is included in the area indicated by the area information. That is, the posting authority granting unit 116 may grant posting authority only when the user requests participation registration while the user is in the designated area. Alternatively, when the posting authority granting unit 116 includes the position of the user terminal 3 indicated by at least one of the location information acquired by the location information acquisition unit 113 in the area indicated by the area information. May be granted posting authority. That is, the posting authority granting unit 116 may grant posting authority even when the user requests participation registration after the user leaves the designated area.

When the user authentication by the service system SB fails, for example, the server 2-1 may display the login screen on the user terminal 3 again. Alternatively, the center server 1 may display a message to the effect that the registration for participation in the channel has failed on the user terminal 3.

FIG. 5 is a diagram showing an example of a user registering for participation. XYZ, which manufactures and sells automobiles, provides XYZ automobile services. This service includes providing after-sales service to XYZ car buyers and providing event information related to XYZ. Only the user who owns the automobile manufactured by XYZ may be able to participate in the XYZ automobile service. The user may be registered as a member of the XYZ automobile service by accessing the server 2-1 and registering the second user ID and the second password. As shown in FIG. 5, at one point, an automobile-related event is held at facility F1. During the event period, the booth of XYZ company will be placed in the facility F1. XYZ has set up a channel C1 for exchanging information about automobile-related events (particularly XYZ's booth) by designating the area R1 surrounding the facility F1. The user U1 carries the user terminal 3-1. User U1 is registered as a member of the XYZ automobile service in advance. User U1 has moved from point A to point B. Point B is outside the area R1. Therefore, the user U1 cannot register to participate in the channel C1. After that, the user U1 moved into the area R1. At this point, the user U1 can register to participate in the channel C1. After that, the user U1 moved to the C point. Although the point C is outside the area R1, the user U1 can post the information of C1 to the channel. A user who has the right to use a particular service and who has gone within the area specified by the provider of that service is likely to be more or less interested in things within that area, that is, things related to the provider. Is high. If it becomes clear that the user has a certain degree of interest in the matter, there is no need to limit where the user can post. On the other hand, the user U2 carries the user terminal 3-2. User U2 has not registered as a member of the XYZ automobile service. User U2 has moved from point D into region R1. However, the user U2 cannot register to participate in the channel C1.

When the participation registration period is specified by the founder, the posting authority granting unit 116 stores the position of the user terminal 3 indicated by the position information acquired by the position information acquisition unit 113 in the area information stored in the channel DB 14c. The time when the user authentication was successful in the area indicated by the service system SB and the user terminal 3 was located at the position indicated by the position information is stored in association with the area information. When it is included in the participation registration period, the process of granting the user the authority to post information within the participation registration period and after the participation registration period has elapsed is executed. You may.

FIG. 6 is a diagram showing an example of the relationship between the participation registration period and the posting period. For example, XYZ Company, which has been described with reference to FIG. 5, has designated the start date and time and the end date and time of the automobile-related event as the start date and time and the end date and time of the participation registration possible period. Since user U1 is interested in automobiles, he went to facility F1 to participate in the event. At this time, since the participation registration is possible, the user has performed the participation registration as shown in FIG. You can post to the channel from the time you register to participate. Posting is possible even after the registration period has expired.

As with the events mentioned above, there may be a predetermined time when something of interest may occur. When the user goes to the place at that time, it is found that the user has a certain degree of interest. The registration period can be specified for that purpose. If it becomes clear that a participant has a certain degree of interest in a particular thing, there is no need to limit the posting period. The duration of the channel itself may be specified by the founder.

The channel information providing unit 117 causes the user terminal 3 to display information about the channel. Examples of the displayed information include channel search results, channel information stored in the channel DB 14c, information posted to the channel, and the like. 7 and 8 are diagrams showing screen examples in the dedicated application. For example, it may be possible to search for a channel using a dedicated application. For example, it may be possible to input a genre, a tag, a keyword, an address, a region, etc. as a search condition. The channel information providing unit 117 searches for a channel that matches the search conditions, and transmits the search result to the user terminal 3. The user terminal 3 displays a list of searched channels, and displays an icon or the like indicating the searched channel superimposed on the map. As shown in FIG. 7, the user terminal 3 displays the in-channel screen 100-1 based on the user selecting one of the searched channels. Alternatively, the service system SB may provide the user terminal 3 of the member of the specific service with information for joining the corresponding channel through an e-mail, an instant message, a web page or other means. The user terminal 3 may display the in-channel screen 100-1 by the user selecting the information displayed on the user terminal 3.

The in-channel screen 100-1 includes a channel information area 110. In the channel information area 110, various information originally related to the channel is displayed. For example, when the user scrolls the screen, the information posted on the channel is displayed. However, if the user has not registered to join the channel at this time, the channel information area 110 may be subjected to a blurring process so that the user cannot recognize such information. The user cannot see or post the posted information.

Here, the user terminal 3 may display the channel registration screen 200 by the user operation. On the channel registration screen 200, in order to register for participation in a channel, it is necessary for the user to be a member of a specific service corresponding to the channel, and it is necessary for the user to enter the designated area. Message is displayed. Further, the channel registration screen 200 may display the distance from the current position of the user terminal 3 to the designated area. Further, the notification registration button 210 is displayed on the channel registration screen 200. The notification registration button 210 is a button for registering to receive a notification from the system S when the user terminal 3 enters the designated area. When the user presses the notification registration button 210, the center server 1 adds the channel ID of the channel on which the information is displayed to the notification channel list of the user.

The time when the notification registration button 210 is pressed is the time when it becomes clear that the user wants to join the channel. If the user is out of the channel area at the time when he / she wants to join the channel, and the user terminal 3 has not periodically transmitted the location information to the center server 1, the user terminal 3 may use the user terminal 3. Periodic transmission of location information may be started. Further, when the user terminal 3 has periodically transmitted the position information, the user terminal 3 may shorten the time interval for acquiring and transmitting the position information.

After that, the user carries the user terminal 3 and enters the designated area. Then, as shown in FIG. 8, the user terminal 3 displays the notification screen 300. On the notification screen 300, a message 310 indicating that the user has entered the area of the channel registered by the user is displayed. Further, the participation registration button 320 is displayed on the notification screen 300. When the user presses the participation registration button 320, the service system SB displays the login screen 400 for logging in to the specific service on the user terminal 3. The login screen 400 includes a login ID input field 410, a password input field 420, and a send button 430. The user inputs the second user ID in the login ID input field 410, and inputs the second password in the password input field 420. Then, when the user presses the send button 430, the service system SB executes user authentication.

When the user authentication by the service system SB is successful, the user terminal 3 displays the in-channel screen 100-2. The in-channel screen 100-2 includes a channel information area 110. In this case, various information about the channel is clearly displayed in the channel information area 110. Further, the channel information area 110 includes a posting column 120. The posting field 120 is an area for inputting text as information to be posted and selecting a still image or an image to be posted. The user can post information by operating the posting field 120.

The in-channel screen 100-1 shown in FIG. 7 is an example of a screen when the public type of the channel is “private”. For a user who has not registered to participate in a channel whose public type is "public", the user terminal 3 clearly displays information about the channel in the channel information area 110, but does not display the posting column 120. May be good.

After granting the authority to post information to the channel, the posting authority granting unit 116 authenticates the user by the service system SB every time the user tries to use the channel or posts information to the channel. You don't have to do it. However, the posting authority granting unit 116 may execute user authentication by the service system SB. If the user authentication by the service system SB is successful, the posting authority granting unit 116 may allow the user to use the channel. In this case, the posting authority granting unit 116 may use the access token. Therefore, the authentication result acquisition unit 115 stores the access token acquired from the service system SB in the channel DB 14c. When the user uses the channel, the authentication control unit 114 transmits the access token stored in the channel DB 14c to the service system SB. When the user is authenticated by the service system SB based on the transmitted token, the posting authority granting unit 116 executes a process of permitting the user to use the channel. User authentication by the service system SB is executed by, for example, the server 2-1. The server 2-1 determines whether or not the access token received from the center server 1 is an access token of an actual member in the specific service. If the received access token is a member's access token, user authentication is successful. As an example of the process of permitting the user to use the channel, the authentication result indicating that the user authentication is successful may be transmitted to the user terminal 3. According to this authentication result, the user terminal 3 displays the in-channel screen 100-2. When the user authentication fails, the posting authority granting unit 116 transmits an authentication result indicating that the user authentication has failed to the user terminal 3. According to this authentication result, the user terminal 3 displays the in-channel screen 100-1.

Security can be enhanced by performing user authentication using tokens. Further, the user does not need to enter the second user ID and the second password. Further, if a user who was a member of the specific service at the time of granting the posting authority subsequently withdraws from the specific service, the use of the channel by the withdrawn user can be prohibited or restricted. This is in line with the idea that only members of a specific service can join the channel. For example, the server 2-1 may associate the access token generated for granting the posting authority with the second user ID of the corresponding user and store it in the service member DB 2-2. When the user withdraws from the membership, the server 2-1 may delete the user's second user ID, second password, and access token from the service member DB 2-2.

[1-4. System operation]
Next, the operation of the system S will be described with reference to FIGS. 9 to 11. 9 to 11 are sequence diagrams showing an example of the operation of the system S according to the present embodiment. The system control unit 11 of the center server 1 executes the processing of the center server 1 shown in FIGS. 9 to 11 according to the program code included in the server program.

As shown in FIG. 9, the provider of the specific service inputs the area information to the management terminal 2-3 in order to open a new channel C1. In addition, the provider inputs the channel information including the campaign ID, the channel name, the channel outline, the tag information, the participation registration period and the publication type. In response to this, the service system SB transmits the input area information and channel information to the center server 1 (step S1).

When the channel information acquisition unit 111 receives the area information and the channel information in the center server 1, the channel information registration unit 112 generates a new area ID. The channel information registration unit 112 associates the received area information with the new area ID and stores it in the area DB 14d (step S2). Next, the channel information acquisition unit 111 generates a new channel ID. The channel information registration unit 112 stores the channel information in the channel DB 14c in association with the new channel ID and the area ID (step S3).

After that, the user U1 operates the user terminal 3-1 to activate the dedicated application. The user terminal 3-1 displays the login screen of the dedicated application. The user U1 inputs the first user ID and the first password (step S4). The user terminal 3-1 transmits the input first user ID and first password to the center server 1 (step S5).

In the center server 1, the authentication control unit 114 executes user authentication using the first user ID and the first password received from the user terminal 3-1. Then, the authentication control unit 114 determines whether or not the user authentication is successful (step S6). For example, the authentication control unit 114 determines whether or not the same combination of the received first user ID and the first password is stored in the member DB 14a. If the user authentication fails (step S6: NO), the authentication control unit 114 rejects the login. If the user authentication is successful (step S6: YES), the authentication control unit 114 transmits a login completion notification to the user terminal 3-1 (step S7).

Upon receiving the login completion notification, the user terminal 3-1 displays the main screen of the dedicated application. The user terminal 3 may store the input first user ID and first password in the memory of the user terminal 3. After that, when the dedicated application is started, the user terminal 3 transmits the first user ID and the first password stored in the memory to the center server 1. Therefore, once the input is made, the user does not need to re-enter the first user ID and the first password.

After that, the user U1 selects the channel C1. In response to this, the user terminal 3-1 transmits a request for in-channel information to the center server 1 (step S8). The request for in-channel information includes the channel ID of the selected channel C1. In response to this, the channel information providing unit 117 acquires the information associated with the channel ID of the channel C1 from the channel DB 14c. Further, the channel information providing unit 117 determines whether or not the participant list associated with the channel ID of the channel C1 includes the user ID of the user U1. At this point, since the participant list does not include the user ID of the user U1, the channel information providing unit 117 transmits the acquired information about the channel C1 and the participation state indicating "not participating" to the user terminal 3-1. (Step S9). The user terminal 3-1 displays the in-channel screen 100-1 based on the information received from the center server 1 (step S10). Here, since the participation state is "not participated", the user terminal 3-1 does not display the posting column 120. Next, in response to the operation by the user U1, the user terminal 3-1 displays the channel registration screen 200. The user U1 presses the notification registration button 210. In response to this, the user terminal 3-1 transmits a notification registration request (step S11). Upon receiving the notification registration request, the center server 1 adds the channel ID of the channel C1 selected by the user U1 to the notification channel list stored in the member DB 14a in association with the user ID of the user U1 (step S12).

After that, as shown in FIG. 10, the user terminal 3-1 periodically transmits the position information of the user terminal 3-1 at that time to the center server 1 (step S101). Each time the authentication control unit 114 receives the position information, the authentication control unit 114 determines whether or not the position of the user 3-1 is included in the designated area (step S102). For example, the authentication control unit 114 acquires the channel ID of the channel C1 from the notification channel list stored in the member DB 14a in association with the user ID of the user U1. The authentication control unit 114 acquires the channel information associated with the acquired channel ID from the channel DB 14c. The authentication control unit 114 acquires the area information associated with the area ID included in the acquired channel information from the area DB 14d. Then, the authentication control unit 114 determines whether or not the position of the user terminal 3 indicated by the position information received from the user terminal 3 is within the area indicated by the acquired area information. Specifically, the authentication control unit 114 calculates the distance from the central point included in the area information to the position of the user terminal 3 shown in the terminal position information included in the position information. When the calculated distance exceeds the radius included in the area information, the authentication control unit 114 determines that the position of the user terminal 3 is not within the area (step S102: NO). In this case, the authentication control unit 114 refuses to grant the posting authority to the user U1. On the other hand, when the calculated distance is equal to or less than the radius included in the area information, the authentication control unit 114 determines that the position of the user terminal 3 is within the area (step S102: YES). In this case, the authentication control unit 114 transmits the area intrusion notification to the user terminal 3 (step S103). The area intrusion notification includes the channel name of the channel C1, the channel ID, and the like.

When the channel information includes the participation registration possible period, the authentication control unit 114 acquires the recording date and time from the position information determined that the position of the user terminal 3-1 is within the area. The authentication control unit 114 determines whether or not the acquired recording date and time is within the participation registration possible period. If the recording date and time is outside the registration period, the authentication control unit 114 refuses to grant the posting authority to the user U1. On the other hand, when the recording date and time is within the participation registration possible period, the authentication control unit 114 transmits the area intrusion notification to the user terminal 3 (step S103).

In response to receiving the area intrusion notification, the user terminal 3 displays the notification screen 300. Here, when the user U1 presses the participation registration button 320, the user terminal 3-1 transmits a participation registration request for which the channel ID included in the area intrusion notification is set to the center server 1 (step S104).

In response to receiving the participation registration request, the authentication control unit 114 transmits the campaign ID and login URL included in the channel information to the user terminal 3-1 in order to execute the user authentication by the service system SB (step). S105). The user terminal 3 that has received the campaign ID and the login URL transmits a login screen request to the server 2-1 included in the service system SB based on the login URL (step S106). In response to this, the server 2-1 transmits the information of the login screen 400 to the user terminal 3-1 (step S107).

The user terminal 3-1 displays the login screen 400 based on the information received from the server 2-1. Here, the user inputs the second user ID and the second password (step S108). In response to this, the user terminal 3-1 sets the input second user ID and second password, the campaign ID received in step S106, and the first user ID stored in the memory to the server 2-1. (Step S109).

In response to this, the server 2-1 executes user authentication using the second user ID, the second password, and the campaign ID received from the user terminal 3-1 (step S110). For example, the server 2-1 determines whether or not the received campaign ID is a campaign ID that is normally generated by the service system SB including the server 2-1. If the received campaign ID is not a legitimate campaign ID, user authentication fails (step S110: NO). On the other hand, when the received campaign ID is a legitimate campaign ID, the authentication control unit 114 stores the same combination of the received second user ID and the second password in the service member DB 2-2. Determine if it is. If the same combination is not stored, user authentication fails (step S110: NO). If the user authentication fails, the server 2-1 sends a message to the user terminal 3-1 prompting the user to re-enter the second user ID and the second password. On the other hand, if the same combination is stored, the user authentication succeeds (step S110: YES). In this case, the server 2-1 generates a new access token. The server 2-1 associates the campaign ID received from the user terminal 3-1 and the generated access token with the second user ID of the user U1 and stores them in the service member DB 2-2. Further, the server 2-1 transmits the campaign ID, the access token, and the first user ID received from the user terminal 3-1 to the center server 1 (step S111).

Upon receiving the access token or the like, the posting authority granting unit 116 executes a process of granting the user U1 the authority to post information to the channel C1 (step S112). For example, the center server 1 adds the first user ID and the access token received from the server 2-1 to the participant list stored in the channel DB 14c in association with the campaign ID received from the server 2-1. .. Further, the posting authority granting unit 116 may add the channel ID of the channel C1 to the participating channel list stored in the member DB 14a in association with the user ID of the user U1.

Next, the channel information providing unit 117 acquires information associated with the channel ID of the channel C1 registered by the user U1 from the channel DB 14c. Since the participant list associated with the channel ID of channel C1 includes the user ID and access token of user U1, the center server 1 further acquires the information associated with the channel ID of channel C1 from the posting information DB 14e. .. Then, the channel information providing unit 117 transmits the acquired information about the channel C1 and the participation state indicating "participation registration completed" to the user terminal 3-1 (step S113).

The user terminal 3-1 displays the in-channel screen 100-2 based on the information received from the center server 1 (step S114). Here, since the participation state is "participation registration completed", the user terminal 3-1 displays the posting column 120. After that, the user U1 inputs the information to be posted by operating the posting field 120. The user terminal 3-1 transmits the input information to the center server 1 as posting information (step S115). The center server 1 stores the received post information in the post information DB 14e in association with the channel ID of the channel C1 (step S116). After that, the user U1 terminates the dedicated application.

After a while has passed since the information was posted, the user U1 activates the dedicated application again, as shown in FIG. In response to this, the user terminal 3-1 transmits the first user ID and the first password stored in the memory to the center server 1 (step S201). In response to this, the authentication control unit 114 executes user authentication in the same manner as in step S6, and determines whether or not the user authentication is successful (step S202). When the user authentication is successful (step S202: YES), the authentication control unit 114 transmits a login completion notification to the user terminal 3-1 (step S203).

After that, the user U1 selects the channel C1. In response to this, the user terminal 3-1 transmits a request for in-channel information to the center server 1 (step S204).

In response to the request for the in-channel information, the authentication control unit 114 acquires the campaign ID from the channel information associated with the channel ID of the channel C1. Further, the authentication control unit 114 acquires an access token associated with the user ID of the user U1 from the participant list included in the channel information. The authentication control unit 114 transmits the acquired campaign ID and access token to the server 2-1 (step S205).

Server 2-1 executes user authentication based on the received campaign ID and access token. Then, the server 2-1 determines whether or not the user authentication is successful (step S206). For example, the server 2-1 determines whether or not the same access token as the received access token is stored in the service member DB 2-2 in association with the received campaign ID. If the same access token is stored, the user authentication succeeds (step S206: YES). In this case, the server 2-1 sends an authentication success response to the center server 1 (step S207).

In response to receiving the authentication success response, the channel information providing unit 117 transmits information about the channel C1 and a participation state indicating "participation registration completed" to the user terminal 3-1 as in step S113 (similar to step S113). Step S208). In response to this, the user terminal 3-1 displays the in-channel screen 100-2 in the same manner as in step S114 (step S209).

If the same access token is not stored in the server 2-1 user authentication fails (step S206: NO). In this case, the server 2-1 sends an authentication failure response to the center server 1. In response to this, the channel information providing unit 117 may display the in-channel screen 100-1 by the user terminal 3-1. Alternatively, the channel information providing unit 117 may transmit information indicating that the information cannot be posted to the channel C1 to the user terminal 3-1.

As described above, according to the present embodiment, the center server 1 acquires the area information indicating the area designated by the provider of the specific service. Further, the center server 1 stores the acquired area information in the storage unit 14. Further, the center server 1 acquires the position information indicating the position of the user terminal 3. Further, when the position indicated by the acquired location information is included in the area indicated by the stored area information, the center server 1 uses the user terminal 3 in the service system SB for providing the specific service. Execute user authentication to confirm that the user who uses the service has the right to use the specific service. Further, when the user authentication by the service system SB is successful, the center server 1 executes a process of granting the user the right to use the specific channel established by the provider of the specific service. Therefore, it is possible to grant the right to use the channel to a user who has a certain degree of interest in the object related to the channel.

Here, the authority given may be an authority that allows the use of the specific channel regardless of whether or not the user terminal 3 is located in the area. In this case, the user who has been shown to have a certain degree of interest in the object related to the channel can use the channel even after leaving the designated area.

Further, the authority given may be the authority to post information to the specific channel. In this case, the channel can be formed by a user who has a certain degree of interest in an object for which information is exchanged on a specific channel.

Further, the user authentication by the service system SB may be executed based on the user inputting the second user ID to the user terminal 3. Further, when the user authentication by the service system SB is successful, the center server 1 is an access token indicating that the user is authenticated to have the right to use the specific service, and is the entered second user ID. Different access tokens may be obtained from the service system SB. Further, when the access token is acquired, the center server 1 may grant the user the right to use the specific service. In this case, the channel system SA itself can acquire the result of user authentication in the specific service without acquiring the second user ID. Therefore, it is possible to prevent the personal information of the user from leaking to the outside of the service system SB.

Here, the center server 1 may store the acquired access token in the storage unit 14. Further, when the user uses the channel, the center server 1 may transmit the stored access token to the service system SB. Further, when the terminal user is authenticated by the service system SB based on the transmitted token, the center server 1 may execute a process of permitting the user to use the special channel. In this case, it is possible to confirm that the user has the right to use the service system SB when using the channel without having to re-enter the second user ID.

[1-5. Other embodiments]
In the above-described embodiment, the first service of the present invention has been applied to the provision of a predetermined channel in the channel service. However, the first service may be a service different from the provision of a predetermined channel. The first service may be any service as long as it is a service that can be used by a user who has entered the area designated by the provider of the specific service and who has succeeded in user authentication by the service system SB. .. Examples of the first service include the channel service itself, product sales, product sales mediation, service reservation mediation, content provision, social networking service, Internet banking, payment service, information retrieval service, blog service, and the like. .. The user does not have to be a member of the first service in advance. That is, the first user ID of the user may not be registered in the first system in advance. For example, after the user authentication by the service system SB is successful, the first user ID of the user is registered in the first system as a process of granting the usage authority of the first service, so that the user becomes the first service. You may be registered as a member.

1 Center server 2-1 Server 2-2 Service member DB
2-3 Management terminal 3 User terminal 11 System control unit 12 System bus 13 Input / output interface 14 Storage unit 14a Member DB
14b Location information DB
14c channel DB
14d area DB
14e Post information DB
15 Communication unit 111 Channel information acquisition unit 112 Channel information registration unit 113 Location information acquisition unit 114 Authentication control unit 115 Authentication result acquisition unit 116 Posting authority granting unit 117 Channel information provision unit NW network SA Channel system SB service system S system

Claims (7)

In the first system for providing the first service, in the authorization device included in the first system that identifies a user who has the right to use the first service by using the first user identification information.
A user who has the right to use the second service different from the first service is identified by the second system for providing the second service by using the second user identification information.
The first user identification information and the second user identification information are independently registered in the first system and the second system, respectively.
And area information acquisition means for acquiring region information indicating the specified region by the provider of the second service,
The area information storage control means for storing the acquired area information in the storage means, and the area information storage control means.
Position information acquisition means for acquiring position information indicating the position of the terminal device,
If the position indicated by the obtained position information is included in the area indicated by the stored area information, verify that the terminal user using the terminal device has the use authority of the second service A control means for causing the second system to execute user authentication for the purpose, and an granting means for executing a process of granting the usage authority of the first service to the terminal user when the user authentication by the second system is successful. When,
An authorization device characterized by comprising. The authority according to claim 1, wherein the authority to be granted is an authority that enables the use of the first service regardless of whether or not the terminal device is located in the area. Grant device. The first service is the provision of a predetermined community in a community service for providing at least one community capable of posting information and receiving posted information via a network.
A plurality of users in which the first user identification information is registered in the first system have the right to use the community service.
The authority granting device according to claim 1 or 2, wherein the authorized authority is an authority to post information to the predetermined community. The user authentication by the second system is executed based on the terminal user inputting the second user identification information into the terminal device.
When the user authentication is successful, the token indicating that the terminal user has been authenticated to have the right to use the second service, which is different from the input second user identification information, is used as the first token. 2 Further equipped with token acquisition means to be acquired from the system,
The authority granting device according to any one of claims 1 to 3, wherein the granting means grants the usage authority to the terminal user when the token is acquired. A token storage control means for storing the acquired token in the storage means,
When the terminal user uses the first service, the token transmission means for transmitting the stored token to the second system and the token transmission means.
When the terminal user is authenticated by the second system based on the transmitted token, a permission means for executing a process of permitting the terminal user to use the first service, and a permission means.
4. The authority-giving device according to claim 4, further comprising. It is a first system for providing the first service, and is executed by an authorization device included in the first system that identifies a user who has the right to use the first service by using the first user identification information. In the authorization method
A user who has the right to use the second service different from the first service is identified by the second system for providing the second service by using the second user identification information.
The first user identification information and the second user identification information are independently registered in the first system and the second system, respectively.
And area information acquisition step of acquiring region information indicating the specified region by the provider of the second service,
The area information storage control step for storing the acquired area information in the storage means, and
The location information acquisition step to acquire the location information indicating the location of the terminal device,
If the position indicated by the obtained position information is included in the area indicated by the stored area information, verify that the terminal user using the terminal device has the use authority of the second service A control step for causing the second system to execute user authentication for performing the user authentication, and a granting step for executing a process of granting the use authority of the first service to the terminal user when the user authentication by the second system is successful. When,
An authorization method characterized by including. A first system for providing a first service, which is executed by a computer of an authorization device included in the first system that identifies a user who has the right to use the first service by using the first user identification information. In the authorization program to be done
A user who has the right to use the second service different from the first service is identified by the second system for providing the second service by using the second user identification information.
The first user identification information and the second user identification information are independently registered in the first system and the second system, respectively.
The computer
And area information acquisition means for acquiring region information indicating the specified region by the provider of the second service,
The area information storage control means for storing the acquired area information in the storage means, and the area information storage control means.
Position information acquisition means for acquiring position information indicating the position of the terminal device,
If the position indicated by the obtained position information is included in the area indicated by the stored area information, verify that the terminal user using the terminal device has the use authority of the second service A control means for causing the second system to execute user authentication for the purpose, and an granting means for executing a process of granting the usage authority of the first service to the terminal user when the user authentication by the second system is successful. When,
An authorization program characterized by functioning as.

Images