Patent ID: 8544066

Claim:
An access right management system, comprising: an authentication device that manages a condition under which a right is transferred; a service providing device that provides a service in a response to a service request; and a service proxy access device that acts as a proxy in accessing the service providing device, the authentication device, the service providing device, and the service proxy access device being implemented using hardware, wherein the authentication device includes: a user authentication certificate generation unit that issues to the service providing device user authentication information on which information about a user is recorded; and a right transfer certificate/token generation unit that issues to the service proxy access device right transfer information and a token corresponding to the right transfer information on a basis of information about a user to whom the right is transferred and the condition under which the right is transferred, the condition being set by a user who transfers the right, wherein the service proxy access device includes: a token request unit that requests the issuing of the right transfer information and the token to the authentication device in order to access the service providing device; and a user proxy access unit that accesses the service providing device using the token, and wherein the service providing device includes: a user authentication certificate request unit that uses the token to acquire the user authentication information from the authentication device.