Patent ID: 8397291
Filing Date: 2013-03-12
Classification: H04L

Abstract:
1. A group administration organization system, including a group administration organization device which administers a user device which belongs to an authorized group on the basis of a group signature scheme, the authorized group having authority to receive service provision, the system comprising: the group administration organization device comprising: user information verification means for, upon receipt of authority key initial information, user information, and a request to issue authority permission information including authorized group designation information from the user device at a time of admission to the authorized group, verifying the user information; initial information verification means for, upon receipt of the authority key initial information, the user information, and the request to issue authority permission information including the authorized group designation information from the user device, verifying the authority key initial information; partial information creation means for, when each of the verification results by the user information verification means and the initial information verification means indicates validity, creating authority partial information including unpredictable information, and sending the authority partial information to the user device; permission information creation means for, upon receipt of authority key configuration information sent from the user device as a result of transmission by the partial information creation means, verifying the authority key configuration information and, when the verification result indicates validity, creating authority permission information on the basis of the authority key configuration information; management means for managing the authority permission information created by the permission information creation means and the user information in such a way that they are associated with each other and sending the authority permission information to the user device; and user identification means for, upon receipt of the authority proof information and user identification request sent from a service provider device, identifying a user from the authority proof information on the basis of the group signature scheme, and sending an identification result, the identification result being the user information associated with the authority permission information recovered from the authority proof information; one or more service provider devices being configured to: determine whether or not the user belongs to the authorized group without identifying the user on the basis of the group signature scheme; provide service information by outputting service information when the determination result indicates validity; wherein the authority proof information is a group signature in the group signature scheme, and the group signature is created by an individual user using the authority permission information.