JP7848704B2 - Server, server control method, program and system - Google Patents

Description

This invention relates to a system and method.

Technology exists for digitized student ID cards.

For example, Patent Document 1 describes a digital student ID conversion system for digitizing student ID cards. The digital student ID conversion system in Patent Document 1 is a system that displays a digital student ID card on a portable electronic medium. The system comprises a school database, a student ID application, and an operation management server. The school database is a database containing information for converting student or pupil information held by schools into digital student ID cards. The student ID application is an application for converting student ID cards into digital student ID cards. The operation management server manages and operates the student ID application and the school database. The school database is assigned a school-specific account for digital student ID cards from the operation management server, and has an ID and password for each student or pupil. In the system of Patent Document 1, the student ID card is converted into a digital student ID card based on the ID and password and a facial photograph stored on the portable electronic medium, using the student ID application downloaded to the portable electronic medium.

Japanese Patent Publication No. 2022-096624

As disclosed in Patent Document 1, student ID cards may be digitized. Student ID cards are sometimes used as proof of student identity. Therefore, reliability is required for student ID cards. However, digitized information is easily susceptible to forgery, and ensuring the reliability of digitized student ID cards is essential.

The primary objective of this invention is to provide a system and method that contribute to improving the reliability of digital student ID cards.

According to a first aspect of the present invention, a system is provided comprising: a first server that controls digital student IDs; and a second server that stores, in association with a first ID linked to an electronic certificate stored in an identification card and a second ID used by an educational institution to manage students. The first server notifies the second server of the second ID of a student who wishes to use the digital student ID; and the second server, if the first ID corresponding to the notified second ID is valid, generates a digital student ID for the student who wishes to use the digital student ID and transmits the generated digital student ID to the first server.

According to a second aspect of the present invention, a system is provided comprising a first server that controls digital student IDs, and a second server that stores, in association with a first ID linked to an electronic certificate stored in an identification card and a second ID used by an educational institution to manage students. The system includes a method in which the first server notifies the second server of the second ID of a student who wishes to use the digital student ID, and if the first ID corresponding to the notified second ID is valid, the second server generates a digital student ID for the student who wishes to use the digital student ID and transmits the generated digital student ID to the first server.

From each perspective of the present invention, a system and method are provided that contribute to improving the reliability of digital student IDs. However, the effects of the present invention are not limited to those described above. The present invention may produce other effects in lieu of or in conjunction with these effects.

Figure 1 is a diagram illustrating the outline of one embodiment. Figure 2 is a flowchart illustrating the operation of one embodiment. Figure 3 shows an example of a schematic configuration of the information processing system according to the first embodiment. Figure 4 is a diagram illustrating the operation of the information processing system according to the first embodiment. Figure 5 is a diagram illustrating the operation of the information processing system according to the first embodiment. Figure 6 shows an example of the display of a terminal according to the first embodiment. Figure 7 shows an example of the processing configuration of a digital student ID server according to the first embodiment. Figure 8 shows an example of the processing configuration of the ID management server according to the first embodiment. Figure 9 shows an example of an ID management database according to the first embodiment. Figure 10 is a flowchart showing an example of the operation of the digital student ID generation unit according to the first embodiment. Figure 11 is a flowchart showing an example of the operation of the digital student ID card generation unit according to the first embodiment. Figure 12 is a sequence diagram showing an example of the operation of the information processing system according to the first embodiment. Figure 13 shows an example of the hardware configuration of the ID management server disclosed in this application.

First, an overview of one embodiment will be described. The reference numerals in the drawings attached to this overview are provided for convenience as examples to aid understanding, and this overview is not intended to be limiting in any way. Furthermore, unless otherwise specified, the blocks shown in each drawing represent functional units, not hardware units. The connecting lines between blocks in each drawing include both bidirectional and unidirectional lines. Unidirectional arrows schematically indicate the flow of the main signal (data) and do not exclude bidirectional flow. In this specification and drawings, elements that can be similarly described are denoted by the same reference numerals, thus omitting redundant explanations.

A system according to one embodiment includes a first server 101 and a second server 102 (see Figure 1). The first server 101 performs control related to digital student IDs. The second server 102 stores a first ID associated with an electronic certificate stored in an identification card, and a second ID used by educational institutions to manage students, in association with each other. The first server 101 notifies the second server 102 of the second ID of a student who wishes to use a digital student ID (step S1 in Figure 2). If the first ID corresponding to the notified second ID is valid, the second server 102 generates a digital student ID for the student who wishes to use it and transmits the generated digital student ID to the first server 101 (step S2).

In the system described above, the second server 102 generates a digital student ID for a student who wishes to receive one, provided that the student's first ID is valid. The second server 102 issues the digital student ID only if the electronic certificate stored in the identification document (e.g., My Number Card) (the electronic certificate linked to the first ID) is valid. If the electronic certificate is invalid, the second server 102 does not issue the digital student ID. In other words, the digital student ID generated by the second server 102 is issued only to students whose identity has been verified using their identification document, thus ensuring high reliability.

The following describes specific embodiments in more detail with reference to the drawings.

[First Embodiment]
The first embodiment will be described in more detail with reference to the drawings.

[System Configuration]
Figure 3 is a diagram showing an example of the schematic configuration of an information processing system (student ID management system, ID management system) according to the first embodiment. As shown in Figure 3, the information processing system includes a digital student ID server 10, an ID management server 20, an authentication server 30, and a plurality of university servers 40.

The digital student ID server 10 is a server device (the first server) that manages and controls student IDs (digital student IDs) issued to students of each university participating in the system.

The ID management server 20 is a server device (second server) that manages IDs issued to students. The ID management server 20 stores the first ID, which is linked to the electronic certificate stored in the student identification card, and the second ID, which is used by the educational institution to manage students, in association with each other. Details regarding these IDs will be described later.

The authentication server 30 is a server device (third server) that performs the authentication of electronic certificates requested by users. The authentication server 30 controls the validity determination of electronic certificates. The authentication server 30 is managed by the business operator that performs the electronic certificate authentication services.

The university server 40 is a server device (the fourth server) that controls the operations of each university participating in the system. The university server 40 stores student information about enrolled students.

The student operates terminal 50 to access the digital student ID server 10, etc.

The servers shown in Figure 3 (digital student ID server 10, ID management server 20, authentication server 30, university server 40, etc.) are configured to communicate with each other via a network. For example, the digital student ID server 10 and the ID management server 20 are connected by wired or wireless communication means and are configured to communicate with each other.

The configuration of the information processing system shown in Figure 3 is illustrative and not intended to limit its configuration. For example, the information processing system may include multiple digital student ID servers 10, etc.

[Overview of operation]
Next, we will describe the general operation of the information processing system according to the first embodiment.

<Issuance of Educational Digital IDs>
New students receive a digital student ID from the university they are enrolling in. To receive a digital student ID, new students must obtain an educational digital ID. The educational digital ID is a second ID used to identify students within the educational institution.

To obtain an educational digital ID, new students launch the "Digital Student ID Application" installed on terminal 50 and request the system to issue an educational digital ID through that application.

At that time, incoming students will need to register their identity information in the system. This identity verification will be carried out using an identification document issued by a public institution. Specifically, an IC (Integrated Circuit) card containing an electronic certificate will be used for identity verification. In this disclosure, the My Number Card will be used as an example of an IC card (identification document) containing an electronic certificate.

Terminal 50 reads the electronic certificate (e.g., user authentication electronic certificate) stored on the My Number Card in response to the user's (new student's) operation. Terminal 50 then sends an "ID issuance request" containing the read electronic certificate and contact information (e.g., an email address that Terminal 50 can receive emails) to the authentication server 30 (step S01 in Figure 4).

By sending an ID verification request, the incoming student (terminal 50) requests identity verification using their My Number Card from the authentication server 30.

Upon receiving an ID issuance request, the authentication server 30 requests the certification authority server (not shown) to verify the digital certificate included in the ID issuance request. Specifically, the authentication server 30 sends the obtained digital certificate to the certification authority server.

The Certificate Authority (CA) server is a server device managed by a corporation jointly operated by the national and local governments, known as J-LIS (Japan Agency for Local Authority Information Systems). The CA server verifies the validity of electronic certificates (My Number Cards).

The Certificate Authority server sends the verification result (valid or invalid) of the digital certificate obtained from the Authentication Server 30 back to the Authentication Server 30.

If the certification authority server fails to verify the digital certificate (i.e., the digital certificate is invalid), the authentication server 30 notifies the terminal 50 that the issuance of the educational digital ID has failed.

In this case, the digital student ID application on terminal 50 will notify the user (new student) that the issuance of the educational digital ID failed. At that time, terminal 50 may also notify the user that the issuance of the educational digital ID failed because the electronic certificate read from the My Number Card was invalid.

If the certification authority server successfully verifies the digital certificate (i.e., the digital certificate is valid), the authentication server 30 issues an "end-user ID" to the student. The end-user ID is a unique ID (first ID) that uniquely corresponds to the serial number of the digital certificate. This end-user ID is linked to the validity status of the My Number Card. That is, if the My Number Card expires, the end-user ID also becomes invalid.

When an end-user ID is issued, the authentication server 30 stores the issued end-user ID in a database, associating it with the serial number of the digital certificate.

Furthermore, upon issuing an end-user ID, the authentication server 30 notifies the ID management server 20 of the issued end-user ID. Specifically, the authentication server 30 sends an "end-user ID notification" containing the end-user ID and contact information to the ID management server 20 (step S02 in Figure 4).

Upon receiving an end-user ID notification, the ID management server 20 generates an educational digital ID. The ID management server 20 associates the end-user ID obtained from the authentication server 30 with the generated educational digital ID and stores it in the ID management database. Details of the ID management database will be described later.

The ID management server 20 notifies the digital student ID server 10 of the generated educational digital ID. Specifically, the ID management server 20 sends an "educational digital ID notification" containing the educational digital ID and contact information to the digital student ID server 10 (step S03 in Figure 4).

Upon receiving an educational digital ID notification, the digital student ID server 10 generates an account for managing the student's (new student's) digital student ID. Once the account is generated, the digital student ID server 10 stores the acquired educational digital ID as the student's login information.

Furthermore, the digital student ID server 10 notifies the terminal 50 (the terminal 50 corresponding to the contact information obtained from the ID management server 20) of the educational digital ID. Specifically, the digital student ID server 10 sends an "ID issuance notification" containing the educational digital ID to the terminal 50 (step S04 in Figure 4). The terminal 50 stores the received educational digital ID (login information).

In this manner, the authentication server 30 (third server) receives an ID issuance request, including an electronic certificate, from the terminal 50 held by the student. The authentication server 30 performs control related to the validity determination of the received electronic certificate (requesting a validity determination from the certification authority server). If the electronic certificate is deemed valid, it generates an end-user ID (first ID) for the student who wishes to obtain an ID. The authentication server 30 stores the generated end-user ID in association with the serial number of the valid electronic certificate. Furthermore, the authentication server 30 transmits the generated end-user ID to the ID management server 20 (second server).

The ID management server 20 generates an educational digital ID (second ID) in response to the receipt of an end-user ID. The ID management server 20 stores the received end-user ID in association with the generated educational digital ID, and also transmits the generated educational digital ID to the digital student ID server 10 (first server).

The digital student ID server 10 notifies students who wish to obtain the educational digital ID of the notified educational digital ID. At that time, the digital student ID server 10 also notifies students who wish to obtain the ID of the notified educational digital ID as login information.

<Issuance of Digital Student ID Cards>
Once the issuance of the educational digital ID is complete, students (new students) can receive a digital student ID card. Specifically, new students operate terminal 50 to launch the digital student ID application and log in to their account on the digital student ID server 10.

When a new student requests the issuance of a digital student ID card, the digital student ID server 10 obtains information to identify the new student (student identification information). Examples of student identification information include the student's name or a combination of name and date of birth. Alternatively, if the new student has received their student ID number from the university in advance, the student ID number may be used as student identification information.

Furthermore, the digital student ID server 10 acquires information to identify the university to which the incoming student will enroll (university identification information; for example, university name or university code).

Upon obtaining student identification information and university identification information, the digital student ID server 10 sends a "digital student ID generation request" containing the educational digital ID, student identification information, and university identification information to the ID management server 20 (step S11 in Figure 5).

The digital student ID server 10 transmits the educational digital ID to the ID management server 20, thereby requesting the ID management server 20 to verify the validity of the educational digital ID.

Upon receiving a digital student ID generation request, the ID management server 20 requests the authentication server 30 to verify the validity of the end-user ID corresponding to the educational digital ID. Specifically, the ID management server 20 accesses the ID management database and retrieves the end-user ID corresponding to the acquired educational digital ID. The ID management server 20 then sends an "end-user ID verification request" containing the retrieved end-user ID to the authentication server 30 (step S12 in Figure 5).

Upon receiving an end-user ID verification request, the authentication server 30 determines the validity of the electronic certificate (My Number Card) associated with that end-user ID. Specifically, the authentication server 30 accesses a database storing end-user IDs and electronic certificate serial numbers, and retrieves the serial number of the electronic certificate corresponding to the acquired end-user ID.

The authentication server 30 transmits the read serial number to the certification authority server (a server operated by J-LIS) and requests the certification authority server to determine the validity of the digital certificate corresponding to the serial number of the digital certificate.

The authentication server 30 sends a response to the ID management server 20 in accordance with the response from the certification authority server (whether the digital certificate corresponding to the serial number is valid or invalid) (step S13 in Figure 5).

Specifically, upon receiving a response from the Certificate Authority server indicating that the digital certificate is valid, the authentication server 30 sends an affirmative response to the ID management server 20 indicating that the end-user ID is valid. Upon receiving a response from the Certificate Authority server indicating that the digital certificate is invalid, the authentication server 30 sends a negative response to the ID management server 20 indicating that the end-user ID is invalid.

If the end-user ID is valid, the ID management server 20 determines that the educational digital ID obtained from the digital student ID server 10 is valid. If the educational digital ID is valid, the ID management server 20 requests verification from the university to which the student will enroll (the university identified from the university identification information) regarding the student who wishes to be issued a digital student ID. Specifically, the ID management server 20 sends a "current student verification request" containing the educational digital ID and student identification information to the university server 40 (step S14 in Figure 5).

The ID management server 20 sends a student verification request to the university server 40, thereby requesting the university to determine (verify) whether or not a student who wishes to receive a digital student ID is enrolled at the university specified by that student.

Upon receiving a student verification request, the university server 40 refers to a student information database containing the student's name, date of birth, biometric information (e.g., facial image), and affiliated faculty, and determines whether the student (new student) corresponding to the student identification information is registered in the database. The university server 40 then transmits the determination result to the ID management server 20 (step S15 in Figure 5).

If the student corresponding to the student identification information is not registered in the student information database, the university server 40 sends a negative response to the ID management server 20 indicating that the student corresponding to the student identification information does not exist.

If a student corresponding to the student identification information is registered in the student information database, the university server 40 sends an acknowledgment containing the student's information (student information) to the ID management server 20. For example, the university server 40 sends the student's name, date of birth, university name, faculty, department, student ID number, biometric information, university address, and university contact information to the ID management server 20 as "student information."

Furthermore, if a student corresponding to the student identification information is registered in the student information database, the university server 40 stores the educational digital ID obtained from the ID management server 20 in the student information database.

The university (university server 40) manages students using the educational digital ID as new student identification information. Specifically, the university server 40 stores the educational digital ID, student personal information (name, date of birth, etc.), biometric information (e.g., facial image), student ID number, faculty affiliation, and course registration information (information related to grades; e.g., credits earned, attendance information), etc., in an associated manner.

The ID management server 20 sends a response to the digital student ID generation request to the digital student ID server 10 (step S16 in Figure 5).

If the authentication server 30 notifies that "the end-user ID is invalid," the ID management server 20 sends a negative response to the digital student ID server 10 indicating that the digital student ID cannot be generated.

Alternatively, if the ID management server 20 receives a negative response from the university server 40 in response to a student verification request, it will also send the negative response to the digital student ID server 10.

Upon receiving an acknowledgment from the university server 40, the ID management server 20 generates (issues) a digital student ID card. The ID management server 20 uses the student information obtained from the university server 40 to generate "card information" to be included on the digital student ID card, and then generates the digital student ID card containing this card information.

The digital student ID will include the student's name, date of birth, student ID number, biometric information (e.g., facial image), and information about their affiliated university.

When a digital student ID is generated, the ID management server 20 sends an acknowledgment containing the generated digital student ID to the digital student ID server 10.

Furthermore, once the issuance of the digital student ID is complete, the ID management server 20 registers student identification information (e.g., student ID number) and university identification information (e.g., university name) that identify the student who received the digital student ID in the ID management database. In other words, when a digital student ID is issued to a student, the ID management server 20 stores the student's end-user ID, educational digital ID, student ID number, and university name in association with each other.

Upon receiving an acknowledgment of the digital student ID generation request, the digital student ID server 10 notifies the student (new student) that the digital student ID has been issued. Alternatively, the digital student ID server 10 may display the issued digital student ID on the terminal 50. For example, the terminal 50 displays a digital student ID as shown in Figure 6.

<Use of Digital Student ID>
Next, we will explain how students can use digital student IDs. Students can use digital student IDs as identification.

In this case, the student operates terminal 50 to log in to the digital student ID server 10. Specifically, the student launches the digital student ID application and sends login information (educational digital ID) to the digital student ID server 10 via this application.

The digital student ID server 10 authenticates students using login information (educational digital ID). After logging into the account on the digital student ID server 10, students operate terminal 50 to perform predetermined actions and request the display of their digital student ID.

Upon receiving a request to display a digital student ID, the digital student ID server 10 sends a "digital student ID generation request" to the ID management server 20, similar to the process used when generating a digital student ID.

Upon receiving a digital student ID generation request, the ID management server 20 searches the ID management database using the educational digital ID included in the request as a key and identifies the corresponding entry. If the student ID number is registered in the corresponding entry (i.e., a digital student ID has already been issued), the ID management server 20 processes the digital student ID generation request based on a predetermined policy (digital student ID control policy).

For example, the digital student ID control policy includes policies regarding the validity verification of end-user IDs (validity verification of My Number cards).

Policies regarding the validity verification of end-user IDs include rules (criteria) regarding the frequency and timing of verifying the validity of end-user IDs. For example, policies regarding the validity of end-user IDs may include "verifying the validity of the end-user ID each time the digital student ID is used" or "verifying the validity of the end-user ID if a specified period has elapsed since the previous validity verification." Alternatively, the policy regarding the validity verification of end-user IDs may state, "verifying the validity of the end-user ID after a specified period has elapsed." For example, if the specified period is "first half" and "second half," then verification of the end-user ID only needs to be performed once every six months. Alternatively, the policy regarding the validity verification of end-user IDs may state, "If the end-user ID has not been verified more than a specified number of times within a specified period, then the validity of the end-user ID will be verified from that specified number onward." For example, if the specified period is six months and the specified number of verifications is five, then the validity of the end-user ID will not be verified for the first five times within the six-month period, and will be verified from the sixth time onward.

If, in accordance with the digital student ID control policy, it is determined that verification of the end-user ID's validity is necessary, the ID management server 20 executes the same process as the digital student ID generation process shown in Figure 5.

Specifically, the ID management server 20 sends an end-user ID verification request to the authentication server 30. The ID management server 20 also sends a student verification request to the university server 40, which is identified from the university-specific information. The ID management server 20 sends the student verification request including the educational digital ID or student ID number as student-specific information.

The ID management server 20 generates a digital student ID card if the end-user ID is valid and student information can be retrieved from the university server 40. The ID management server 20 then transmits the generated digital student ID card to the digital student ID server 10.

If, in accordance with the digital student ID control policy, it is determined that verification of the end-user ID's validity is not required, the ID management server 20 sends a student verification request to the university server 40. Even in this case, the ID management server 20 sends a student verification request to the university server 40 that includes the educational digital ID or student ID number as student identification information.

The ID management server 20 generates a digital student ID card using student information obtained from the university server 40. The ID management server 20 then transmits the generated digital student ID card to the digital student ID server 10.

The digital student ID server 10 displays the digital student ID received from the ID management server 20 on the terminal 50. For example, a student presents their digital student ID to a third party to prove their identity. For example, when purchasing a commuter pass with a student discount, a student presents their digital student ID to the railway company. The railway company trusts the digital student ID, whose identity is verified by a My Number Card, and sells the commuter pass.

Thus, the digital student ID server 10 (first server) notifies the ID management server 20 (second server) of the educational digital ID (second ID) of the student who wishes to use the digital student ID. If the end-user ID (first ID) corresponding to the notified educational digital ID is valid, the ID management server 20 generates a digital student ID for the student who wishes to use the digital student ID and transmits the generated digital student ID to the digital student ID server 10.

At that time, the ID management server 20 notifies the authentication server 30 (the third server) of the end-user ID corresponding to the notified educational digital ID, requesting the authentication server 30 to determine the validity of the end-user ID. The authentication server 30 controls the validity determination of the digital certificate corresponding to the notified end-user ID and notifies the ID management server 20 of the determination result.

The ID management server 20 generates a digital student ID if the end-user ID corresponding to the notified educational digital ID is valid and if it has obtained student information from the university server 40 (the fourth server) for students who wish to use a digital student ID. For students who have already been issued a digital student ID, the ID management server 20 determines, according to a predetermined policy, whether or not to request the authentication server 30 to verify the validity of the end-user ID.

Next, we will describe the details of each device included in the information processing system according to the first embodiment.

[Digital Student ID Server]
Figure 7 shows an example of the processing configuration (processing module) of the digital student ID server 10 according to the first embodiment. Referring to Figure 7, the digital student ID server 10 comprises a communication control unit 201, an ID issuance control unit 202, a digital student ID control unit 203, and a storage unit 204.

The communication control unit 201 is a means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the ID management server 20. The communication control unit 201 also transmits data to the ID management server 20. The communication control unit 201 passes data received from other devices to other processing modules. The communication control unit 201 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data with other devices via the communication control unit 201. The communication control unit 201 includes a function as a receiving unit for receiving data from other devices and a function as a transmitting unit for transmitting data to other devices.

The ID issuance control unit 202 is a means for controlling the issuance of educational digital IDs. The ID issuance control unit 202 processes educational digital ID notifications received from the ID management server 20.

Upon receiving an educational digital ID notification, the ID issuance control unit 202 generates an account for managing the digital student ID. Once the account is generated, the ID issuance control unit 202 manages the student's educational digital ID as login information within that account. The ID issuance control unit 202 may also generate an ID other than the educational digital ID as login information.

Furthermore, once a student account is generated, the ID issuance control unit 202 sends an "ID issuance notification" to the terminal 50 held by the student who wishes to receive a digital student ID. The ID issuance notification includes login information (educational digital ID).

Furthermore, the ID issuance control unit 202 may treat the educational digital ID as a login ID and request the student to set a password for logging into their account. Specifically, when the ID issuance control unit 202 sends the educational digital ID to the terminal 50, it may prompt the student to decide on a password for logging into their account via the terminal 50.

The digital student ID control unit 203 is a means for controlling the digital student ID.

When a student who has logged into their account using their login information (educational digital ID) performs a predetermined action (for example, pressing the digital student ID issuance button displayed on terminal 50), the digital student ID control unit 203 acquires student identification information and university identification information.

For example, the digital student ID control unit 203 displays a GUI (Graphical User Interface) or similar on the terminal 50 to obtain student identification information (e.g., a combination of name and date of birth) and university identification information (e.g., university name or university code).

Upon acquiring student identification information and university identification information, the digital student ID control unit 203 sends a "digital student ID generation request" containing the educational digital ID, student identification information, and university identification information to the ID management server 20.

The digital student ID control unit 203 receives a response (affirmative response, negative response) to the digital student ID generation request.

If an affirmative response (a response indicating successful generation of the digital student ID) is received, the digital student ID control unit 203 notifies the new student that the digital student ID has been successfully issued. If a negative response (a response indicating failure to generate the digital student ID) is received, the digital student ID control unit 203 notifies the new student that the digital student ID has been failed to issue.

Furthermore, when a logged-in student performs a predetermined action (for example, pressing the digital student ID display button on terminal 50), a "digital student ID generation request" containing the logged-in student's educational digital ID and university-specific information is sent to the ID management server 20.

The digital student ID control unit 203 processes the response from the ID management server 20 in the same way as when issuing a digital student ID.

The memory unit 204 is a means for storing information necessary for the operation of the digital student ID server 10.

[ID Management Server]
Figure 8 shows an example of the processing configuration (processing module) of the ID management server 20 according to the first embodiment. Referring to Figure 8, the ID management server 20 comprises a communication control unit 301, an ID management unit 302, a digital student ID generation unit 303, and a storage unit 304.

The communication control unit 301 is a means for controlling communication with other devices. For example, the communication control unit 301 receives data (packets) from the digital student ID server 10. The communication control unit 301 also transmits data to the digital student ID server 10. The communication control unit 301 passes data received from other devices to other processing modules. The communication control unit 301 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data with other devices via the communication control unit 301. The communication control unit 301 has the function of a receiving unit that receives data from other devices and the function of a transmitting unit that transmits data to other devices.

The ID management unit 302 is a means for controlling and managing end-user IDs and educational digital IDs.

The ID management unit 302 receives an "end-user ID notification" from the authentication server 30. Upon receiving the end-user ID, the ID management unit 302 generates an educational digital ID. The educational digital ID can be any information that uniquely corresponds to the end-user ID. For example, the ID management unit 302 may assign a unique value each time it processes an end-user ID notification and use that as the educational digital ID.

When an educational digital ID is generated, the ID management unit 302 associates the end-user ID with the educational digital ID and stores it in the ID management database (see Figure 9). As shown in Figure 9, the ID management database stores the end-user ID, educational digital ID, student ID number, and university name in association. Although not shown in Figure 9, the ID management database also stores the history of end-user ID verification (date and time of sending the end-user ID verification request and the verification result).

Furthermore, the ID management database shown in Figure 9 is an example and is not intended to limit the items to be stored. For example, the creation date and time of the educational digital ID may be registered in this database.

The ID management unit 302 sends an educational digital ID notification to the digital student ID server 10, which includes the generated educational digital ID and contact information (for example, the contact information of the terminal 50 held by the student who wishes to receive a digital student ID).

The digital student ID generation unit 303 is a means for generating digital student IDs. Figures 10 and 11 are flowcharts illustrating an example of the operation of the digital student ID generation unit 303 according to the first embodiment. The operation of the digital student ID generation unit 303 will be explained with reference to Figures 10 and 11.

Upon receiving a request to generate a digital student ID card, the digital student ID card generation unit 303 searches the ID management database using the educational digital ID included in the request as a key, and identifies the corresponding entry (database search; step S101).

The digital student ID generation unit 303 determines whether a student ID is set in the "Student ID Number" field of the corresponding entry (determining the presence or absence of a student ID number; step S102).

If a student ID number is set (Step S103, Yes branch), the digital student ID generation unit 303 executes the processes from Step S201 onwards in Figure 11. The processes from Step S102 onwards will be described later.

If no student ID number is set (Step S103, No branch), the digital student ID generation unit 303 reads the end-user ID of the identified entry. The digital student ID generation unit 303 sends an "end-user ID verification request" containing the read end-user ID to the authentication server 30 (Step S104).

The digital student ID generation unit 303 receives a response from the authentication server 30 to the end-user ID verification request.

If the authentication server 30 receives a negative response (end-user ID is invalid) (step S105, No branch), the digital student ID generation unit 303 sets the response to be sent to the digital student ID server 10 to a negative response (step S106).

If the authentication server 30 receives an affirmative response (end-user ID is valid) (step S105, Yes branch), the digital student ID generation unit 303 sends a "student verification request" to the university server 40 of the university identified from the university identification information (step S107). The student verification request includes the educational digital ID and student identification information.

The digital student ID generation unit 303 receives a response from the university server 40 to the student verification request.

If the university server 40 receives a negative response (a response indicating that the corresponding student is not enrolled) (step S108, No branch), the digital student ID generation unit 303 sets the response to be sent to the digital student ID server 10 to a negative response (step S106).

If the university server 40 receives an affirmative response (a response indicating that the corresponding student is enrolled) (step S108, Yes branch), the digital student ID generation unit 303 sets the response to be sent to the digital student ID server 10 to an affirmative response (step S109).

The digital student ID generation unit 303 generates a digital student ID using the student information (card information to be printed on the digital student ID) included in the acknowledgment received from the university server 40 (step S110).

Furthermore, when a digital student ID card is generated (newly issued), the digital student ID card generation unit 303 stores the student ID number and university name obtained from the university server 40 in the ID management database.

The digital student ID generation unit 303 sends a response to the digital student ID generation request to the digital student ID server 10 (step S111). If an affirmative response is sent, the digital student ID generation unit 303 sends the generated digital student ID to the digital student ID server 10.

If the student ID number is set in the entry identified by searching the ID management database (step S103, Yes branch), the digital student ID generation unit 303 executes the process shown in Figure 11.

Specifically, the digital student ID generation unit 303 refers to a pre-configured digital student ID control policy (policy referencing; step S201).

The digital student ID generation unit 303 refers to the digital student ID control policy and determines whether or not to verify the validity of the end-user ID (determining whether or not to verify ID validity; step S202).

If verification of the validity of the educational digital ID is required (Step S203, Yes branch), the digital student ID generation unit 303 executes the processing from Step S104 onwards, as shown in Figure 10.

If validity verification of the educational digital ID is not required (step S203, No branch), the digital student ID generation unit 303 executes the processing from step S107 onwards, as shown in Figure 10.

If a student ID number is already set in the ID management database (i.e., a digital student ID has already been issued to the student), the digital student ID generation unit 303 may send a student verification request to the university server 40 that includes the student ID number in place of, or in addition to, the educational digital ID. That is, the educational digital ID or student ID number may be sent to the university server 40 as information to identify the student. However, the digital student ID generation unit 303 is not required to send student verification based on the digital student ID control policy.

The memory unit 304 is a means for storing information necessary for the operation of the ID management server 20.

[Authentication Server]
The explanation of the processing configuration of the authentication server 30 is omitted. The authentication server 30 receives an ID issuance request and generates an end-user ID if the electronic certificate (My Number Card) is valid. For example, the authentication server 30 calculates the hash value of the serial number of the electronic certificate and uses the calculated hash value as the end-user ID. The authentication server 30 also processes the end-user ID verification request received from the ID management server 20.

[University Server]
The explanation of the processing configuration and other details related to the university server 40 will be omitted. The university server 40 stores student information about enrolled students, including incoming students. The university server 40 uses a student information database to manage students' names, dates of birth, facial images, departments, etc.

[Terminal]
Examples of terminal 50 include mobile devices such as smartphones, mobile phones, game consoles, and tablets, as well as computers (personal computers, laptops). Terminal 50 can be any device that can receive student input and communicate with the digital student ID server 10, etc. Further explanation of the processing configuration of terminal 50 is omitted. Students request the system to issue or display a digital student ID using the digital student ID application installed on terminal 50. Terminal 50 also reads the electronic certificate from the My Number Card by obtaining a four-digit PIN from the student or by performing authentication using facial information stored on the My Number Card.

[System operation]
Next, the operation of the information processing system according to the first embodiment will be described. Figure 12 is a sequence diagram showing an example of the operation of the information processing system according to the first embodiment. The operation of the information processing system for issuing digital student IDs will be described with reference to Figure 12.

When a student requests the issuance of a digital student ID, the digital student ID server 10 sends a digital student ID generation request, including the student's educational digital ID, to the ID management server 20 (step S21).

The ID management server 20 requests the authentication server 30 to verify the validity of the end-user ID corresponding to the educational digital ID. The ID management server 20 sends an end-user ID verification request, including the end-user ID, to the authentication server 30 (step S22).

Upon receiving confirmation from the authentication server 30 that the end-user ID is valid, the ID management server 20 requests the university specified by the student to verify the existence of the student who wishes to receive a digital student ID. Specifically, the ID management server 20 sends a student verification request, including the educational digital ID and student identification information, to the university server 40 (step S23).

Upon receiving confirmation from the university server 40 that the student is enrolled, the ID management server 20 generates a digital student ID card using the student information notified by the university server 40 (step S24).

The ID management server 20 transmits the generated digital student ID to the digital student ID server 10 (step S25).

The digital student ID server 10 presents the acquired digital student ID to the student (new student) (step S26).

Next, a modified example of the information processing system according to the first embodiment will be described.

<Modification 1 of the First Embodiment>
In the above embodiment, it was explained that if the authentication server 30 fails to verify the electronic certificate (i.e., an end-user ID is not generated), a digital student ID will not be issued. However, even if an end-user ID is not generated, the ID management server 20 may issue a provisional digital student ID.

For example, if a student requests an educational digital ID while their My Number Card has expired, a temporary digital student ID may be issued. In this case, the ID management server 20 may issue a true digital student ID to the student who subsequently receives an end-user ID.

If the verification result of the digital certificate performed by the certification authority server in response to the ID issuance request sent from terminal 50 is "digital certificate is invalid," the authentication server 30 issues a temporary end-user ID to the incoming student. This temporary end-user ID is stored in association with the contact information of terminal 50.

The authentication server 30 sends an end-user ID notification, including a temporary end-user ID, to the ID management server 20. The ID management server 20 registers the temporary end-user ID in the ID management database. Upon receiving the temporary end-user ID, the ID management server 20 generates an educational digital ID and notifies the terminal 50 of the educational digital ID via the digital student ID server 10.

When a student requests the issuance of a digital student ID, the digital student ID server 10 sends a digital student ID generation request to the ID management server 20. If the end-user ID corresponding to the educational digital ID included in the digital student ID issuance request is a temporary end-user ID, the ID management server 20 sends a student verification request to the university server 40 without requesting verification from the authentication server 30.

Upon receiving a student verification request, the ID management server 20 obtains student information and uses that information to issue a temporary digital student ID card. The ID management server 20 then provides the temporary digital student ID card to the new student via the digital student ID server 10.

The terminal 50 of a student who has received a temporary digital student ID will display the temporary digital student ID, clearly indicating that it is temporary.

When a My Number Card becomes valid, such as through renewal, the student operates terminal 50 to request the issuance of an educational digital ID. If the authentication server 30 determines that the electronic certificate obtained from terminal 50 is valid, it then determines whether a temporary end-user ID linked to the terminal 50's contact information exists.

If a temporary end-user ID exists linked to the contact information of terminal 50, the authentication server 30 replaces this temporary end-user ID with the true end-user ID and stores it in the database (stored in association with the serial number of the digital certificate). Furthermore, the authentication server 30 sends the pair of the temporary end-user ID and the true end-user ID to the ID management server 20.

Upon receiving the pair of IDs, the ID management server 20 generates a true digital student ID for the student with the temporary end-user ID and notifies the terminal 50 that the true digital student ID has been issued. The ID management server 20 also updates the ID management database by overwriting the temporary end-user ID with the true end-user ID.

After the ID management database is updated, the ID management server 20 performs the normal operations related to the control and management of digital student IDs as described above.

Thus, if the end-user ID corresponding to the educational digital ID notified by the authentication server 30 is invalid (i.e., the My Number Card is invalid), the ID management server 20 may generate a temporary digital student ID for students who wish to use a digital student ID. The ID management server 20 may also set an expiration period for the temporary end-user ID obtained from the authentication server 30. If the true end-user ID is not received during the expiration period (i.e., the My Number Card is not renewed during the expiration period), the ID management server 20 may invalidate the temporary end-user ID. Similarly, the ID management server 20 may also set an expiration date for the temporary digital student ID. In this case, if the My Number Card is not renewed during the validity period of the temporary digital student ID, the temporary digital student ID becomes invalid.

<Modification 2 of the First Embodiment>
Terminal 50 can provide the digital student ID to other devices. Specifically, terminal 50 can provide the information on the digital student ID to other devices using a two-dimensional barcode and contactless communication means such as NFC (Near Field Communication).

Other devices can provide various services to students using ticket information obtained through 2D barcodes or contactless communication methods. For example, a gate device installed at a university can obtain ticket information and then grant permission for its students to pass through.

Alternatively, other devices may acquire the student's biometric information using a 2D barcode or contactless communication method. This acquired biometric information may be used in services employing biometric authentication. For example, consider a case where a student purchases a beverage from a vending machine located on campus. In this case, the vending machine acquires the student's biometric information using a 2D barcode or similar method. The vending machine also acquires the student's biometric information by photographing them. The vending machine then transmits these two pieces of acquired biometric information to the university server 40.

The university server 40 performs a one-to-one matching using the two acquired biometric data points. If the one-to-one matching is successful (confirming that the true owner of terminal 50 is using the vending machine), the university server 40 identifies the authenticated person through a matching process using the acquired biometric data and pre-registered biometric data. Subsequently, the university server 40 processes the payment using the identified authenticated person's account information (e.g., credit card information). If the payment process is successful, the student can purchase beverages, etc.

Thus, digital student IDs can provide biometric information to other devices through the display of a 2D barcode and contactless communication via NFC. The biometric information provided to other devices can be used in services employing biometric authentication. Note that the biometric information provided to other devices (e.g., facial image) may also be the facial image stored on a My Number Card.

<Modification 3 of the First Embodiment>
Graduates can access the university server 40 directly or indirectly and obtain corresponding student information by verifying their identity using their end-user ID. The obtained student information can be submitted to a third party (such as a company) at the graduate's discretion.

For example, a graduate operates terminal 50 to request authentication server 30 to verify their digital certificate. If the authentication server 30's verification result is "digital certificate is valid," terminal 50 requests university server 40 to provide student information (e.g., course completion certificate) along with the verification result from authentication server 30.

The university server 40 confirms the verification results from the authentication server 30, and if the My Number Card (end-user ID) is valid, it sends the student information specified by the graduate to the terminal 50.

<Modification 4 of the First Embodiment>
University graduates can provide their student information (e.g., course completion certificates) to third parties.

The graduate operates terminal 50 to input a request for student information to the digital student ID server 10 via the digital student ID application. The digital student ID server 10 then transmits the graduate's educational digital ID to the ID management server 20.

The ID management server 20 requests the authentication server 30 to verify the validity of the end-user ID corresponding to the educational digital ID.

If the end-user ID is valid (i.e., the My Number Card is valid), the ID management server 20 transmits the educational digital ID to the university server 40, thereby obtaining the graduate's student information (e.g., course completion certificate, etc.) from the university server 40.

The ID management server 20 transmits the acquired student information to the terminal 50 held by the graduate via the digital student ID server 10. The graduate can then submit this acquired student information to a third party (e.g., a company) from the terminal 50.

In this way, graduates can undergo identity verification using their end-user ID and retrieve corresponding student information from the university server 40. The retrieved student information can be submitted to a third party (such as a company) at the graduate's discretion.

<Modification 5 of the First Embodiment>
Students can temporarily suspend the use of their digital student ID if they lose their device 50 or their My Number Card. In other words, students can prevent the misuse of their digital student ID.

If a student loses their My Number Card, they must contact the call center or other relevant authority to have the card invalidated. When the My Number Card is invalidated, the authentication server 30 fails to verify the validity of the end-user ID, and the ID management server 20 is unable to generate a digital student ID.

If a student loses terminal 50, they should contact the university and have their status set to "Student Information Disclosure Prohibited." The university server 40 will not provide student information to the ID management server 20 for students whose status is set to "Student Information Disclosure Prohibited." As a result, the ID management server 20 will not be able to generate a digital student ID card.

As described above, when generating or displaying a digital student ID, the ID management server 20 according to the first embodiment requests the authentication server 30 to verify the validity of the end-user ID associated with the student's educational digital ID. The authentication server 30, upon receiving the request, determines that the end-user ID is valid if the electronic certificate uniquely corresponding to the end-user ID (the electronic certificate read from the student's My Number Card) is valid. That is, the ID management server 20 indirectly requests the authentication server 30 to verify the validity of the My Number Card through the validity verification of the educational digital ID. If the educational digital ID is valid (i.e., the My Number Card is valid), the ID management server 20 generates a digital student ID for the student who wishes to receive (or use) one. As a result, the digital student ID generated by the ID management server 20 is issued to students whose identity has been verified by their My Number Card, thus possessing high reliability.

Next, we will describe the hardware of each device that makes up the information processing system. Figure 13 shows an example of the hardware configuration of the ID management server 20.

The ID management server 20 can be configured using an information processing device (a so-called computer), and has the configuration illustrated in Figure 13. For example, the ID management server 20 includes a processor 311, memory 312, input/output interface 313, and communication interface 314, etc. These components, such as the processor 311, are connected by an internal bus or the like and are configured to communicate with each other.

However, the configuration shown in Figure 13 is not intended to limit the hardware configuration of the ID management server 20. The ID management server 20 may include hardware not shown, and it may not have an input/output interface 313 if necessary. Furthermore, the number of processors 311, etc., included in the ID management server 20 is not limited to the example in Figure 13; for example, multiple processors 311 may be included in the ID management server 20.

The processor 311 is a programmable device such as a CPU (Central Processing Unit), MPU (Micro Processing Unit), or DSP (Digital Signal Processor). Alternatively, the processor 311 may be a device such as an FPGA (Field Programmable Gate Array) or ASIC (Application Specific Integrated Circuit). The processor 311 executes various programs, including an operating system (OS).

Memory 312 includes RAM (Random Access Memory), ROM (Read Only Memory), HDD (Hard Disk Drive), SSD (Solid State Drive), etc. Memory 312 stores the OS program, application programs, and various data.

The input/output interface 313 is an interface for a display device or input device (not shown). The display device is, for example, a liquid crystal display. The input device is, for example, a device that accepts user input such as a keyboard or mouse.

The communication interface 314 is a circuit, module, etc., that communicates with other devices. For example, the communication interface 314 may include a NIC (Network Interface Card), etc.

The functions of the ID management server 20 are realized by various processing modules. These processing modules are realized, for example, by the processor 311 executing a program stored in memory 312. Furthermore, this program can be recorded on a computer-readable storage medium. The storage medium can be a non-transitory medium such as semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. In other words, the present invention can also be embodied as a computer program product. Moreover, the program can be downloaded via a network or updated using the storage medium on which the program is stored. Furthermore, the processing module may be realized by a semiconductor chip.

Furthermore, the digital student ID server 10, etc., can also be configured using an information processing device, similar to the ID management server 20. Since its basic hardware configuration is identical to that of the ID management server 20, a detailed explanation is omitted.

The ID management server 20, which is an information processing device, is equipped with a computer, and its functions are realized by having the computer execute a program. Furthermore, the ID management server 20 executes its control method through this program.

[Variations]
The configuration and operation of the information processing system described in the above embodiment are illustrative examples and are not intended to limit the system configuration.

In the above embodiment, a university was used as an example of an educational institution, but the educational institution may also be a high school, vocational school, etc. Furthermore, the educational institution is not limited to one in Japan; it may also be an educational institution in a foreign country.

In the above embodiment, the My Number Card was used as an example of an identification document equipped with an electronic certificate for identity verification; however, other identification documents may be used.

In the above embodiment, a user authentication certificate was used as an example of the electronic certificate verified by the authentication server 30 (certification authority server). However, the authentication server 30 (certification authority server) may also verify a signature electronic certificate. That is, the authentication server 30 may manage the serial number of the signature electronic certificate in association with the end-user ID.

In the above embodiment, the case where the ID management server 20 obtains student information of a student receiving a digital student ID by sending a student verification request to the university server 40 was described (steps S14 and S15 in Figure 5). However, if the ID management server 20 stores student information for each university, these steps are unnecessary.

Furthermore, although the end-user ID issuance procedure and the digital student ID issuance procedure were described as separate steps in the above embodiment, the issuance of the end-user ID and the digital student ID may be performed as a series of procedures. Specifically, upon receiving an "end-user ID notification" from the authentication server 30, the ID management server 20 obtains student information by sending a "student verification request" to the university server 40. The ID management server 20 generates a digital student ID using the acquired student information and transmits the generated digital student ID to the digital student ID server 10. The digital student ID server 10 provides the student with the educational digital ID and the digital student ID. In this way, when the issuance of the end-user ID and the digital student ID are performed as a series of procedures, the verification of the end-user ID (steps S12 and S13 in Figure 5) may be omitted.

In the above embodiment, it was explained that each student's student ID number is registered in the ID management database to identify (manage) students who have been issued a digital student ID (see Figure 9). Here, the information used to identify students who have been issued a digital student ID is not limited to the student ID number; any information can be used. For example, the ID management database may store email addresses, names, telephone numbers, and combinations of student ID numbers and departments (faculties) as information for managing students who have been issued a digital student ID. Alternatively, the ID management database may store combinations of student ID numbers and university names (information identifying the university to which the student belongs) as information for managing (identifying) students who have been issued a digital student ID. In this case, the digital student ID generation unit 303 of the ID management server 20 should determine whether the information stored in the ID management database is set in step S103 of Figure 10. For example, if the ID management database stores a combination of student ID number and university name as information for identifying students, the digital student ID generation unit 303 should determine whether the combination of student ID number and university name is set in the ID management database.

The above embodiment describes a case where the ID management server 20 generates the digital student ID. However, other devices (for example, the digital student ID server 10 or the university server 40) may also generate the digital student ID. Furthermore, when the university server 40 generates the digital student ID, it may generate a digital student ID bearing the university's digital signature. Additionally, other devices that acquire the digital student ID via a 2D barcode or the like may utilize the digital student ID if they successfully verify the digital signature attached to it.

In the above embodiment, the ID management server 20 determined whether verification of the end-user ID was necessary based on the digital student ID control policy. Here, the digital student ID control policy may differ for each university. For example, a policy might be set such that for students of University A1, the end-user ID is verified each time the digital student ID is used, while for students of University A2, the end-user ID is verified only after a predetermined period has elapsed since the previous verification.

Alternatively, the digital student ID control policy may include policies related to student verification. For example, policies such as "Student verification will be performed each time the digital student ID is used" or "Student verification will be performed the first time the digital student ID is used at the start of a new academic year" may be set.

In the above embodiment, the case where various databases are configured within each server was described, but these databases may be built on an external database server or the like. That is, some functions of each server may be implemented on another server. For example, all or part of the functions of the digital student ID server 10 may be implemented on the ID management server 20. In other words, it is sufficient that the "digital student ID control unit (digital student ID control means)," "digital student ID generation unit (digital student ID generation means)," etc., described above are implemented on any device included in the system.

The form of data transmission and reception between each device (digital student ID server 10, ID management server 20, etc.) is not particularly limited, but the data transmitted and received between these devices may be encrypted. Since student identification information is transmitted and received between these devices, it is desirable that encrypted data be transmitted and received in order to appropriately protect such information.

In the flowcharts (sequence diagrams) used in the above description, multiple processes (processes) are shown in order. However, the execution order of the processes performed in the embodiment is not limited to that order. In the embodiment, the order of the illustrated processes can be changed, for example, by executing each process in parallel, as long as it does not impair the content.

The embodiments described above are explained in detail to facilitate understanding of the disclosure, and it is not intended that all the configurations described above are necessary. Furthermore, where multiple embodiments are described, each embodiment may be used individually or in combination. For example, it is possible to replace parts of the configuration of one embodiment with those of another embodiment, or to add configurations from other embodiments to the configuration of one embodiment. Moreover, it is possible to add, delete, or replace parts of the configuration of one embodiment with those of another.

As described above, the industrial applicability of the present invention is clear, and it is particularly suitable for applications such as information processing systems for managing digital student ID cards.

Some or all of the above embodiments may also be described as follows, but are not limited to the following:
[Note 1]
A first server that controls the digital student ID,
A second server stores a first ID linked to an electronic certificate stored in an identification document, and a second ID used by educational institutions to manage students, in association with each other.
Includes,
The first server notifies the second server of the second ID of a student who wishes to use the digital student ID,
A system in which the second server generates a digital student ID for a student who wishes to use the digital student ID if the first ID corresponding to the notified second ID is valid, and transmits the generated digital student ID to the first server.
[Note 2]
The system further includes a third server that performs control over the validity determination of the aforementioned electronic certificate,
The second server notifies the third server of the first ID corresponding to the notified second ID, thereby requesting the third server to make a determination regarding the validity of the first ID.
The system as described in Appendix 1, wherein the third server controls the validity determination of the electronic certificate corresponding to the notified first ID and notifies the second server of the determination result.
[Note 3]
It further includes a fourth server that stores student information about enrolled students,
The system as described in Appendix 2, wherein the second server generates the digital student ID using the student information obtained from the fourth server when the first ID corresponding to the notified second ID is valid and the second server has obtained the student information of a student who wishes to use the digital student ID from the fourth server.
[Note 4]
The system described in Appendix 3, wherein the second server determines, in accordance with a predetermined policy, whether or not to request the third server to make a determination regarding the validity of the first ID.
[Note 5]
The system described in Appendix 4, wherein the third server, upon receiving an ID issuance request including an electronic certificate from a terminal owned by a student, performs control related to the validity determination of the received electronic certificate, and if the electronic certificate whose validity has been determined is valid, generates the first ID of the student who wishes to be issued the ID, and stores the generated first ID in association with the serial number of the valid electronic certificate.
[Note 6]
The third server transmits the generated first ID to the second server.
The second server generates a second ID in response to the reception of the first ID, stores the received first ID and the generated second ID in association, and transmits the generated second ID to the first server.
The first server is the system described in Appendix 5, which notifies the student who wishes to obtain the second ID that has been notified.
[Note 7]
The system described in Appendix 6, wherein the first server notifies students who wish to obtain the second ID of the notification, using the second ID as login information.
[Note 8]
The system described in Appendix 7, wherein the second server generates a temporary digital student ID for a student who wishes to use the digital student ID if the first ID corresponding to the notified second ID is invalid.
[Note 9]
The system described in Appendix 8, wherein the information contained in the aforementioned digital student ID card is provided to other devices from the terminal of the student who wishes to use the aforementioned digital student ID card via a two-dimensional barcode or contactless communication means.
[Note 10]
The system described in any one of the appendices 1 to 9, wherein the digital student ID card includes at least the biometric information of a student who wishes to use the digital student ID card.
[Note 11]
The aforementioned identification document is a My Number Card, as described in Appendix 10.
[Note 12]
A first server that controls the digital student ID,
A second server stores a first ID linked to an electronic certificate stored in an identification document, and a second ID used by educational institutions to manage students, in association with each other.
In a system including,
The first server notifies the second server of the second ID of a student who wishes to use the digital student ID,
A method comprising: if the second server is found to have a valid first ID corresponding to the notified second ID, generating a digital student ID for a student who wishes to use the digital student ID, and transmitting the generated digital student ID to the first server.

Furthermore, the disclosures of the above-mentioned prior art documents cited are incorporated herein by reference. While embodiments of the present invention have been described above, the present invention is not limited to these embodiments. Those skilled in the art will understand that these embodiments are merely illustrative, and that various modifications are possible without departing from the scope and spirit of the present invention. That is, the present invention naturally includes the entire disclosure, including the claims, and various modifications and alterations that those skilled in the art could make in accordance with the technical idea.

10 Digital student ID server 20 ID management server 30 Authentication server 40 University server 50 Terminal 101 First server 102 Second server 201 Communication control unit 202 ID issuance control unit 203 Digital student ID control unit 204 Storage unit 301 Communication control unit 302 ID management unit 303 Digital student ID generation unit 304 Storage unit 311 Processor 312 Memory 313 Input/output interface 314 Communication interface

Claims (8)

A storage unit that stores, in association with an ID linked to an electronic certificate stored in an identification document, a first ID linked to the validity or invalidity of the identification document, and a second ID for educational institutions to manage students.
An acquisition unit that acquires the aforementioned second ID based on the student's request to use a digital student ID from a device the student possesses,
A determination unit determines whether it is necessary to verify the validity of the first ID corresponding to the acquired second ID, and if it is necessary to verify the validity of the first ID, it determines the validity of the first ID.
A server equipped with the following features. The server according to claim 1, wherein the determination unit determines whether or not verification of the validity of the first ID is necessary based on a predetermined policy. The server according to claim 1, wherein the determination unit determines that confirmation of the validity of the first ID is necessary when a predetermined period has elapsed since the validity of the first ID was confirmed. The server according to claim 1, wherein the determination unit determines whether or not confirmation of the validity of the first ID is necessary based on the number of times the validity of the first ID has been confirmed during a predetermined period. The server according to claim 1, wherein the determination unit determines whether or not verification of the validity of the first ID is necessary based on the services used by the student. On the server,
An ID linked to an electronic certificate stored in an identification document, comprising a first ID linked to the validity status of the identification document and a second ID used by educational institutions to manage students, stored in association with each other.
The second ID mentioned above is obtained from the student's device based on their request to use a digital student ID.
A server control method that determines whether it is necessary to verify the validity of the first ID corresponding to the acquired second ID, and if it is necessary to verify the validity of the first ID, determines the validity of the first ID. On the computer installed in the server,
A process for storing, in association with, an ID linked to an electronic certificate stored in an identification document, a first ID linked to the validity or invalidity of the identification document, and a second ID for educational institutions to manage students.
The process of obtaining the aforementioned second ID based on the student's request to use a digital student ID from a device they possess,
The process involves determining whether it is necessary to verify the validity of the first ID corresponding to the acquired second ID, and if it is necessary to verify the validity of the first ID, determining the validity of the first ID.
A program to execute. A first server that controls the digital student ID,
A second server stores, in association with an ID linked to an electronic certificate stored in an identification document, a first ID linked to the validity status of the identification document, and a second ID used by an educational institution to manage students.
The devices that students possess,
Includes,
When the first server obtains from the terminal that the student wishes to use the digital student ID, it notifies the second server of the student's second ID.
The second server determines whether it is necessary to verify the validity of the first ID corresponding to the notified second ID, and if it is necessary to verify the validity of the first ID, it determines the validity of the first ID.