JP7232085B2 - Management system, server, management method, and program - Google Patents

Description

TECHNICAL FIELD The present disclosure relates to a management system, server, management method, and program, and more particularly to a management system, server, management method, and program for managing rights managed by a blockchain.

In recent years, a system that manages various rights using blockchain technology has been proposed (for example, Non-Patent Document 1). One of its utilization examples is the record of delivery and receipt of a delivery box having one or more storage compartments. If the history of unlocking the delivery box is written and managed on the blockchain, it will be possible to objectively grasp the delivery and receipt of the package without falsification. As a result, erroneous deliveries or receipts can be prevented, as well as the correct cause can be traced if a problem occurs.

Furthermore, in a delivery box system using a block chain, the usage right, which is the right to use the delivery box, can be obtained by writing right holder information indicating the right holder who can use the delivery box on the blockchain. considered to be managed.

In such a home delivery box system, usage rights are managed and exercised by means of a system called a smart contract that can execute arbitrary programs. This makes it possible to easily perform complicated processing for the delivery box as well as unlocking the delivery box.

Information and Communications Council, Information and Communications Policy Subcommittee, IoT Policy Committee, Basic Strategy Working Group, Summary of Blockchain Utilization Study Sub-Working Group, [online], [searched June 25, 2018], Internet <URL: http:/ /www. soumu. go. jp/main_content/000496919. pdf. pdf>

By the way, in such a home delivery box system, when a user receives a package, the user requests execution of a receipt completion smart contract to return the right to use the home delivery box to the original right holder.

However, if a malicious user does not request execution of this smart contract, there is a problem that this user can continue to illegally use the home delivery box. In addition, there is also the problem that even a user with no malice can forget to pick up a parcel, or if the parcel cannot be taken out, the delivery box cannot be used for a long period of time. be.

Therefore, the present disclosure has been made in view of the circumstances described above, and provides a management system, server, management method, and program that can prevent inappropriate use of a box device having one or more storage units. for the purpose.

In order to achieve the above object, a management system or the like according to one embodiment of the present disclosure includes one or more boxes with keys that are opened and closed by electronic processing and capable of physically storing physical objects. A right holder information storage unit that stores right holder information related to the right of the one box, including a first user who is a right holder who can use the one box of the box device, and a block chain including a processing instruction a consensus building unit that creates a block and stores it in a block storage unit; A process of updating the current right holder included in the right holder information from the first user to the second user when the transmission terminal device and the transfer processing instruction are acquired as one of the processing instructions included in the block. an execution unit and a return processing instruction for checking whether the transfer condition is satisfied and, if it is determined that the transfer condition is not satisfied, returning the right from the second user to the first user; and a condition confirmation unit that transmits the return processing instruction to the consensus building unit, and the processing execution unit acquires the return processing instruction as one of the processing instructions included in the block, the The second user included in the right holder information is updated to the first user.

It should be noted that these general or specific aspects may be realized by an apparatus, method, integrated circuit, computer program, or a recording medium such as a computer-readable CD-ROM. Any combination of programs and recording media may be used.

According to the management system and the like of the present disclosure, it is possible to prevent inappropriate use of a box device having one or more storage units.

It is a figure which shows the whole image of the management system in embodiment. It is a figure which shows an example of the whole structure of the management system in embodiment. 1 is a configuration diagram showing an example of a detailed configuration of a user terminal device according to an embodiment; FIG. It is a figure which shows an example of the transfer processing command which the user terminal device in embodiment produces. It is a figure which shows an example of the transfer processing command which the user terminal device in embodiment produces. It is a figure which shows an example of the right exercise order which the user terminal device in embodiment produces. It is a figure which shows an example of the right exercise order which the user terminal device in embodiment produces. It is a figure which shows an example of the return processing instruction which the user terminal device in embodiment produces. It is a figure which shows an example of the return processing instruction which the user terminal device in embodiment produces. It is a figure which shows an example of the return processing instruction which the user terminal device in embodiment produces. It is a figure which shows an example of the return processing instruction which the user terminal device in embodiment produces. 1 is a configuration diagram showing an example of a detailed configuration of a home delivery box control device according to an embodiment; FIG. 1 is a configuration diagram showing an example of a detailed configuration of a delivery box device according to an embodiment; FIG. 3 is a configuration diagram showing an example of a detailed configuration of an authentication server device according to an embodiment; FIG. FIG. 3 is a diagram showing an example of right holder information stored in a right holder information storage unit according to the embodiment; FIG. FIG. 3 is a diagram showing an example of right holder information stored in a right holder information storage unit according to the embodiment; FIG. FIG. 3 is a diagram showing an example of right holder information stored in a right holder information storage unit according to the embodiment; FIG. FIG. 10 is a sequence diagram showing an example of operations in a right exercising phase in the embodiment; FIG. 10 is a sequence diagram showing an example of operations in a rights return phase in the embodiment; FIG. 10 is a sequence diagram showing an example of operations in a right transfer phase in the embodiment; FIG. 11 is a sequence diagram showing an example of operations in a transfer condition confirmation phase in the embodiment; FIG. 11 is a configuration diagram showing an example of a detailed configuration of a delivery box device in Modification 1; FIG. 21 is a sequence diagram showing an example of the operation of a transfer condition confirmation phase in modification 3; FIG. 14 is a configuration diagram showing an example of a detailed configuration of a home delivery box control device in Modification 4; FIG. 14 is a configuration diagram showing an example of a detailed configuration of an authentication server device in modification 4; FIG. 21 is a sequence diagram showing an example of operations in a rights transfer phase in Modification 4; FIG. 21 is a sequence diagram showing an example of the operation of a transfer condition confirmation phase in Modification 4; FIG. 22 is a sequence diagram showing an example of the operation of a transfer condition confirmation phase in Modification 6;

(Findings on which this disclosure is based)
In a delivery box system using a blockchain, it is conceivable to manage the right to use a delivery box by writing right holder information indicating the right holder who can use the delivery box on the blockchain. It is In addition, in such a home delivery box system, rights are managed and exercised by means of a mechanism called smart contract that can execute arbitrary programs.

In such a home delivery box system, when the user receives the parcel, the user requests execution of the receipt completion smart contract, and the right to use the home delivery box is returned to the original right holder.

However, if a malicious user does not request execution of this smart contract, this user can continue to use the delivery box illegally. Also, even if the user does not have any malicious intent, if the user forgets to pick up the package or is in a situation where the package cannot be taken out, the delivery box cannot be used for a long period of time.

Here, for example, in order to solve the problem that the right is not returned for a long time and the delivery box cannot be used for a long time, by assigning an expiration date when the right is transferred, Rights can be returned at any time. However, when rights are managed by smart contracts, smart contracts are not automatically executed, so rights are not automatically returned even after the expiration date.

Therefore, when blockchain is used in a home delivery box system, it is considered necessary to detect inappropriate use by the user and automatically return the usage rights held by the user to the original right holder.

Therefore, a management system according to an embodiment of the present disclosure is a box device having one or more boxes that can be electronically opened and closed and that can physically store physical objects. A right holder information storage unit that stores right holder information related to the right of the first box, including a first user who is a right holder who can use the box, and creates and blocks a block in the block chain that includes a processing instruction. a consensus building unit stored in a storage unit; a terminal device that transmits, as one of the processing commands, a transfer processing command including user information indicating a second user to whom the right is to be transferred and conditions for the transfer of the right; a processing execution unit that updates a current right holder included in the right holder information from the first user to the second user when the transfer processing command is acquired as one of the processing commands included in the block; confirming whether a condition is satisfied, and if it is determined that the transfer condition is not satisfied, creating a return processing instruction for returning the right from the second user to the first user; a condition confirmation unit that transmits a processing instruction to the consensus building unit, and the processing execution unit, when acquiring the return processing instruction as one of the processing instructions included in the block, is included in the right holder information. updating the second user to the first user;

According to this configuration, when transferring rights such as the right to use, by managing the transfer conditions such as the expiration date together with the person to be transferred, if the transfer condition such as the expiration date has passed, the rights can be returned to the original rights holders. As a result, inappropriate use of a box device having one or more storage units can be suppressed.

Here, for example, the transfer condition is the expiration date, the number of times of use, or the number of times that the item can be reassigned.

Further, for example, the transfer condition may be set by being input to the terminal device.

Here, for example, the management system includes the terminal device, the box device, and a server device, and the server device includes the right holder information storage unit, the consensus building unit, the processing execution unit, and the condition confirmation unit. The condition confirmation unit confirms whether the transfer condition is satisfied at regular time intervals.

Further, for example, the management system includes the terminal device, the box device, a server device, and a box control device that controls the box device, and the server device has the consensus building unit and controls the box control device. The device has the right holder information storage unit, the processing execution unit, and the condition confirmation unit, and the condition confirmation unit confirms whether the transfer condition is satisfied at regular time intervals. good.

Further, for example, the terminal device further transmits a request to update the right holder information, and the condition confirmation unit further confirms whether or not the transfer condition is satisfied upon receiving the update request. may be

In addition, the server according to one aspect of the present disclosure is a box device having one or more boxes that are attached with keys that can be opened and closed by electronic processing and that can physically store physical objects. a right holder information storage unit for storing right holder information related to the right of the one box, including a first user who is a right holder who can use the box; obtaining a consensus building unit stored in a unit, and a transfer processing command including, as one of the processing commands contained in the block, user information indicating the second user to whom the right is to be transferred and conditions for the transfer of the right; a processing execution unit for updating the current right holder included in the right holder information from the first user to the second user; a condition confirmation unit that creates a return processing instruction for returning the right from the second user to the first user and transmits the return processing instruction to the consensus building unit if it is determined that the The processing execution unit, upon acquiring the return processing command as one of the processing commands included in the block, updates the second user included in the right holder information to the first user.

In addition, a management method according to an aspect of the present disclosure is a box device having one or more boxes that are electronically opened and closed with a key and that can physically store a physical object. A right holder information storing step of storing right holder information related to the right of the one box, including a first user who is a right holder who can use the box; Acquisition of a consensus building step stored in a storage unit, and a transfer processing command including user information indicating a second user to whom the right is to be transferred and conditions for the transfer of the right as one of the processing commands included in the block. Then, a processing execution step of updating the current right holder included in the right holder information from the first user to the second user, and confirming whether or not the transfer condition is satisfied, and confirming whether the transfer condition is satisfied. a condition confirmation step of creating a return processing instruction for returning the right from the second user to the first user and transmitting the return processing instruction to the consensus building step, In the process execution step, when the return process instruction is obtained as one of the process instructions included in the block, the second user included in the right holder information is updated to the first user.

It should be noted that each of the embodiments described below is a specific example of the present disclosure. Numerical values, shapes, components, steps, order of steps, and the like shown in the following embodiments are examples and are not intended to limit the present disclosure. In addition, among the constituent elements in the following embodiments, constituent elements that are not described in independent claims representing the highest concept will be described as arbitrary constituent elements. Moreover, each content can also be combined in all the embodiments.

(Embodiment)
A management system according to an embodiment will be described below with reference to the drawings.

[1. Embodiment]
Here, as an embodiment of the present disclosure, a delivery box management system related to the present disclosure will be described with reference to the drawings.

[1.1 Overall configuration of management system]
FIG. 1 is a diagram showing an overview of a management system 10 according to an embodiment. FIG. 2 is a diagram showing an example of the overall configuration of the management system 10 according to the embodiment. The management system 10 according to the embodiment uses blockchain to manage rights such as usage rights for one or more boxes of a box device having one or more storage units, thereby preventing inappropriate use of the one or more boxes. discourage the use of In the example shown in FIG. 1, the management system 10 uses blockchain to manage rights such as usage rights for one or more home delivery boxes of a home delivery box device having one or more home delivery boxes that are one or more storage units. do. More specifically, the management system 10 stores the same contents of the ledger built on the block chain platform stored in the respective storage units of the authentication server devices 400, 410, and 420. Rights are managed by accumulating transaction history such as rights transfer.

In this embodiment, as shown in FIG. 2, the management system 10 includes user terminal devices 100 and 110, a delivery box control device 200, a delivery box device 300, and three authentication server devices 400, 410, and 420. Prepare. The form of connection between each device may be any of a wired internet line, wireless communication, dedicated communication, and the like. Note that FIG. 2 shows an example in which the management system 10 includes two user terminal devices 100 and 110, but the number is not limited to this and may be two or more. Similarly, an example in which the management system 10 includes one home delivery box control device 200 is shown, but one or more may be provided. Also, although the management system 10 is shown as having three authentication server devices 400, 410, and 420, the present invention is not limited to this, and the number of authentication server devices may be two or more. In addition, the home delivery box control device 200 and the home delivery box device 300 may be arranged at physically different locations, or the home delivery box device 300 may include the home delivery box control device 200 .

[1.2 User Terminal Device]
FIG. 3 is a configuration diagram showing an example of a detailed configuration of the user terminal device 100 according to the embodiment. Since the user terminal device 110 also has the same configuration as the user terminal device 100, the description thereof will be omitted.

The user terminal device 100 is an example of a terminal device, and as one of the processing instructions, user information indicating a second user to whom the right of one box of a box device having one or more boxes is to be transferred and the transfer of the right. Send transfer processing instructions including terms and conditions. Here, the transfer condition is the expiration date, the number of times of use, or the number of times that the item can be reassigned. Transfer conditions are set by being input to the terminal device. In this embodiment, the user terminal device 100 includes a transfer condition determination unit 101, a rights transfer unit 102, a rights exercise unit 103, a rights return unit 104, and a communication unit 105, as shown in FIG. consists of The user terminal device 100 is implemented by, for example, a computer including a processor (microprocessor), memory, sensor, communication interface, and the like. The user terminal device 100 is, for example, a mobile terminal such as a smart phone or tablet. In the following, the right to use one home delivery box of the home delivery box device 300 will be described as an example of the right of one box in the box device.

[1.2.1 Transfer condition determination part]
The transfer condition determination unit 101 determines transfer conditions to be given when the right to use the home delivery box is transferred to another user. For example, when the expiration date is used as the transfer condition, the expiration date of the usage right possessed by the user may be inquired of the authentication server device 400 or the like, and the expiration date may be set so as not to exceed the obtained expiration date. It should be noted that the transfer condition may be not only the expiration date but also the number of reassignable times (number of reassignable times), the number of times of use, and the like. In either case, the user may inquire of the authentication server device 400 or the like about the conditions of use given to the rights that the user possesses, and set transfer conditions that do not exceed the obtained conditions of use.

Further, the transfer condition determining unit 101 may be provided with an interface device for receiving input from the user so that the user himself/herself can input the transfer condition to be given when transferring to another user. Also, assuming that the usage conditions are determined in advance for each delivery box, the transfer condition determination unit 101 may set the transfer conditions according to the determined usage conditions.

[1.2.2 Rights Transfer Department]
The right transfer unit 102 creates a transfer processing command indicating a processing command for transferring the right to another user. More specifically, the right transfer unit 102 acquires the transferee user information indicating the user to be transferred, that is, the transferee, and combines the acquired transferee user information, the transfer conditions determined by the transfer condition determination unit 101, Create a transfer processing order that includes the user's signature. Rights transfer unit 102 transmits the created transfer processing command to authentication server devices 400 , 410 , and 420 via communication unit 105 .

As a method of acquiring the transferee user information, for example, the transferee user information may be acquired by selecting the transferee user from a user list stored in the user terminal device 100 . In addition, the user terminal device 100 is provided with an interface device that reads, for example, a bar code or QR code (registered trademark). may be obtained. Alternatively, the rights transfer unit 102 may include a device for receiving input from the user, and the user himself/herself may input the transfer destination user information.

4A and 4B are diagrams showing an example of a transfer processing command created by the user terminal device 100 according to the embodiment. FIGS. 4A and 4B show that when one or more rights owned by a user (for example, Mr. A) using the user terminal device 100 are transferred to another same user (for example, Mr. B), rights An example of a transfer processing command created by the transfer unit 102 is shown.

In other words, the rights transfer unit 102 may transmit, for example, the transfer processing commands as shown in FIG. In FIG. 4A, the command type is transfer, the delivery box number (box number in the figure) to which the right is to be transferred is 001, the transfer destination user is Mr. B, and the transfer condition is the expiration date of 2018/01/01. 25 and an example of a signed transfer processing order is shown. Further, the rights transfer unit 102 may transmit a transfer processing command including a plurality of rights transfer targets to the authentication server devices 400, 410, and 420 as shown in FIG. 4B. In FIG. 4B, the command type is transfer, the box numbers to which rights are to be transferred are 001, 003, and 011, the transfer destination user is Mr. B, and the expiration date, which is the transfer condition, is 2018/01/25. is shown.

[1.2.3 Rights Enforcement Department]
The right exercising unit 103 creates a right exercising command indicating a processing command for exercising a right such as unlocking or locking the delivery box. This processing instruction is also signed by the user. The right exercising unit 103 transmits the created right exercising command to the authentication server devices 400 , 410 and 420 via the communication unit 105 .

5A and 5B are diagrams showing an example of a right exercise command created by the user terminal device 100 according to the embodiment. 5A and 5B show an example of a right exercise command created by the right exercising unit 103 when exercising a right based on the right owned by the user using the user terminal device 100. FIG. FIG. 5A shows an example of a right exercise command in which the command type is unlocking, the box number to be exercised is 001, and a signature is added. Also, FIG. 5B shows an example of a right exercise command in which the command type is locked, the box number to be exercised is 001, and a signature is added.

[1.2.4 Rights Return Unit]
The right return unit 104 creates a return processing command indicating a processing command for returning the right possessed by the user to the original right holder. A return processing command is created after the user receives the package or the like stored in the delivery box. More specifically, the right return unit 104 inquires of any of the authentication server devices 400, 410, and 420 about the right holder information including the original right holder, and the original right holder included in the acquired right holder information, Create a return processing instruction, including the user's signature. Rights return unit 104 transmits the created return processing command to authentication server devices 400 , 410 , and 420 via communication unit 105 .

6A, 6B, 6C, and 6D are diagrams showing examples of return processing instructions created by the user terminal device 100 according to the embodiment. 6A to 6D show rights created by the rights returning unit 104 when one or more rights owned by a user (for example, Mr. B) using the user terminal device 100 are returned to the same original user. An example return processing instruction is shown.

In other words, the rights return unit 104 may transmit, for example, the return processing commands as shown in FIGS. FIG. 6A shows an example of a return processing command in which the type of the command is return, the number of the delivery box to which the rights are to be returned (the box number in the figure) is 001, the return destination user is Mr. A, and the signature is added. It is shown. Also, FIG. 6B shows an example of a return processing command in which the command type is return, the box number to which rights are to be returned is 002, the return destination user is the administrator, and a signature is added.

Further, the rights return unit 104 may transmit a return processing command including a plurality of rights return targets to the authentication server devices 400, 410, and 420, as shown in FIG. 6C. FIG. 6C shows an example of a return processing command in which the command type is return, the box numbers to which rights are to be returned are 001, 003, and 011, the return destination user is Mr. A, and a signature is added. there is

For example, assume that the administrator has transferred the rights to Mr. A, who is one of the users, and Mr. A has further transferred the rights to Mr. B, who is one of the users. In this case, after the return processing command shown in FIG. 6A is created and the right is returned to Mr. A, Mr. A may create the return processing command shown in FIG. 6B and return the right to the administrator. . Alternatively, as shown in FIG. 6D, a return processing command may be created to directly return the rights to the administrator, and the rights may be returned to the administrator. In other words, the right return unit 104 may transmit a return processing command including a plurality of return destination users to the authentication server devices 400, 410, and 420, as shown in FIG. 6D. FIG. 6D shows an example of a return processing command in which the command type is return, the box number to which rights are to be returned is 005, the return destination user is Mr. A, the administrator, and Mr. B's signature is added. It is shown.

[1.2.5 Communication unit]
The communication unit 105 is implemented by a processor, a communication I/F, and the like, and communicates with the authentication server devices 400 , 410 , and 420 . More specifically, the communication unit 105 transmits the processing instructions created by the rights transfer unit 102, the rights exercise unit 103, and the rights return unit 104 to the authentication server devices 400, 410, and 420, and confirms rights or performs processing. Request execution.

Also, the communication unit 105 may receive the result of confirmation of rights or the result of processing, and send it to the rights transfer unit 102 , the rights exercise unit 103 , or the rights return unit 104 .

[1.3 Delivery box control device]
FIG. 7 is a configuration diagram showing an example of a detailed configuration of delivery box control device 200 in the embodiment. The home delivery box control device 200 is an example of a box control device, and controls a box device. In this embodiment, home delivery box control device 200 acquires a processing command sent from user terminal devices 100 and 110 to authentication server device, and sends a command for executing processing to home delivery box device 300. . The delivery box control device 200 includes a communication section 201, a process analysis section 202, and a delivery box control section 203, as shown in FIG. The home delivery box control device 200 is implemented by a computer including, for example, a processor (microprocessor), memory, sensor, communication interface, and the like.

[1.3.1 Communication unit]
The communication unit 201 is implemented by a processor, a communication I/F, and the like, and receives processing instructions transmitted from the user terminal devices 100 and 110 to the authentication server devices 400, 410, and 420. FIG. The communication unit 201 transmits the received processing instruction to the processing analysis unit 202 .

After the authentication server devices 400, 410, and 420 create a new block, the communication unit 201 may receive the processing instructions included in the block transmitted to the delivery box control device. In addition, the communication unit 201 requests the authentication server device 400 or the like to transmit new processing commands if there are any at regular time intervals, and receives the processing commands transmitted from the authentication server device 400 or the like in response to this request. good too.

Note that the communication unit 201 may receive all the processing commands that have been transmitted so far from the user terminal devices 100 and 110 from the authentication server device 400 or the like. Further, the communication unit 201 may receive only the processing commands newly transmitted from the user terminal devices 100 and 110 after the previous request to the authentication server device 400 or the like to transmit any new processing commands.

Further, the communication unit 201 may receive processing commands one by one from the authentication server device 400 or the like, or may receive a plurality of processing commands collectively. When receiving a plurality of processing instructions collectively, the communication unit 201 may transmit them to the processing analysis unit 202 one by one, or may collectively transmit a plurality of them.

[1.3.2 Processing Analysis Unit]
The processing analysis unit 202 analyzes the processing instructions transmitted from the communication unit 201 . More specifically, the processing analysis unit 202 analyzes the type of processing instruction received and the type of processing to exercise.

In addition, the processing analysis unit 202 transmits to the home delivery box control unit 203 a command for performing the analyzed right exercise processing. The processing analysis unit 202 transmits to the home delivery box control unit 203 a command obtained by analysis, for example, a command for unlocking or locking the home delivery box to be exercised.

[1.3.3 Delivery Box Control Unit]
Home delivery box control unit 203 transmits to home delivery box device 300 the command for the home delivery box whose right is to be exercised, which is transmitted from process analysis unit 202 .

[1.4 Delivery box device]
FIG. 8 is a configuration diagram showing an example of a detailed configuration of the delivery box device 300 according to the embodiment. The home delivery box device 300 is an example of a box device having one or more boxes that can be electronically locked and unlocked and can physically store physical objects. In other words, the one or more boxes may be one or more storage units that can be electronically opened and closed with a key and can physically store physical objects, and one or more delivery boxes. is not limited to Also, the box device is not limited to the delivery box device, and may have one or more storage units.

In the present embodiment, delivery box device 300 includes communication section 301 and process execution section 302 . The home delivery box device 300 is a device including one or more home delivery boxes, and receives a command for unlocking or locking, etc., transmitted from the home delivery box control device 200 . Delivery box device 300 unlocks or locks the target delivery box according to the received command.

[1.4.1 Communication unit]
Communication unit 301 is implemented by a processor, a communication I/F, and the like, receives a command for unlocking or locking, etc. transmitted from delivery box control device 200 , and transmits the command to processing execution unit 302 . The communication here may be communication between networks such as HTTP (Hypertext Transfer Protocol), or serial communication using a serial port or USB (Universal Serial Bus).

[1.4.2 Processing Execution Unit]
The processing execution unit 302 executes, for example, unlocking or locking the target delivery box according to the command received from the communication unit 301 .

[1.5 Authentication Server Device]
FIG. 9 is a configuration diagram showing an example of the detailed configuration of the authentication server device 400 according to the embodiment. Each of the authentication server devices 400, 410, and 420 has a ledger with the same content built on a block chain platform, and manages rights by accumulating usage right transaction histories such as rights transfer. Since the authentication server devices 410 and 420 have the same configuration as the authentication server device 400, the description thereof will be omitted, and the authentication server device 400 will be described in detail.

In this embodiment, the authentication server device 400 includes a processing storage unit 401, a consensus building unit 402, a processing execution unit 403, a condition confirmation unit 404, a right holder information storage unit 405, a block storage unit 406, a communication 407. Authentication server device 400 is implemented by a computer including, for example, a processor (microprocessor), memory, sensor, communication interface, and the like. The authentication server device 400 receives processing commands from the user terminal devices 100 and 110, verifies the signatures, and then executes processing as necessary.

[1.5.1 Processing Storage Unit]
The processing storage unit 401 stores processing commands received from the user terminal devices 100 and 110 . In this embodiment, the processing storage unit 401 stores right exercise commands, return processing commands, or transfer processing commands received from the user terminal devices 100 and 110 . The processing storage unit 401 also stores a return processing command shared with the other authentication server devices 410 and 420 .

[1.5.2 Consensus Building Department]
The consensus building unit 402 creates a block in the blockchain containing processing instructions and stores it in the block storage unit 406 .

More specifically, the consensus building unit 402 communicates with the consensus building units of the other authentication server devices 410 and 420 via the communication unit 407, and the processing instructions contained in the processing instructions stored in the processing storage unit 401. verify the signature of the user As a result of the verification, if the consensus building unit 402 can confirm that the signature of the user included in the processing instruction is a valid signature, the consensus building unit 402 creates a block by a predetermined blockchain method and stores it in the block storage unit 406. Send. Also, the consensus building unit 402 transmits the processing instruction included in the created block to the processing execution unit 403 .

An example of how to create a block in a blockchain will now be described. For example, the hash value of the latest block currently being created is calculated, and data is created by combining the hash value and the processing instruction. Next, data called a nonce is added to the end of the combined data, and a hash value is calculated. In this embodiment, the consensus building unit 402 changes the value of this nonce, for example, and finds a nonce whose hash value is equal to or less than a certain value. Next, the consensus building unit 402 transmits data obtained by combining the latest block hash value, processing command, and nonce as a block to (the consensus building units of) the other authentication server devices 410 and 420 . Then, the consensus building units of the received authentication server devices 410 and 420 confirm that the hash value of the block is equal to or less than a certain value, and determine it as a block.

Further, the consensus building unit 402 may, if necessary, transmit the processing instructions included in the created block to the delivery box control device 200 that is the target of the processing.

[1.5.3 Processing Execution Unit]
When the processing execution unit 403 acquires a transfer processing command as one of the processing commands included in the block of the created blockchain, processing to update the current right holder included in the right holder information from the first user to the second user. to run. Further, when the processing execution unit 403 acquires the return processing instruction as one of the processing instructions included in the created block chain block, the processing execution unit 403 updates the second user included in the right holder information to the first user.

In this embodiment, the processing execution unit 403 executes processing instructions transmitted from the user terminal device 100 or the like. For example, when the transmitted processing command is a transfer processing command, the processing execution unit 403 transmits the given transfer condition and the user information of the transferee to the right holder information storage unit 405, and newly establishes the right. Update the rights holder information to include it as the owner information. Further, for example, when the transmitted processing command is a return processing command, the processing execution unit 403 updates the right holder information stored in the right holder information storage unit 405 and updates the right holder information to be included in the right holder information. Change the current rights holder to the rights holder of the return destination, that is, the original rights holder.

[1.5.4 Condition check part]
The condition confirmation unit 404 confirms whether or not the transfer condition is satisfied, and if it determines that the transfer condition is not satisfied, creates a return processing instruction for returning the right from the second user to the first user. and transmits a return processing command to the consensus building unit 402 . Here, the condition confirmation unit 404 confirms whether or not the transfer condition is satisfied at regular time intervals.

In this embodiment, the condition confirmation unit 404 acquires the right holder information stored in the right holder information storage unit 405 at regular time intervals, and determines whether or not the transfer condition is satisfied. For example, if the transfer condition is an expiration date, the condition confirmation unit 404 acquires the right holder information stored in the right holder information storage unit 405 at regular intervals, compares it with the current time, and determines whether the expiration date has expired. determine whether or not there is Then, if the expiration date of a certain home delivery box has expired, the condition confirmation unit 404 creates a return processing command and sends it to the processing storage unit 401 and consensus building to share it among all the authentication server devices 400 , 410 , and 420 . 402.

As for the sharing method, a predetermined authentication server device 400 or the like may create a return processing command and transmit it to another authentication server device 410 or the like. Alternatively, a method may be used in which all authentication server devices 400, 410, and 420 share the same return processing instruction by creating a return processing instruction according to a predetermined rule.

[1.5.5 Right holder information storage]
The right holder information storage unit 405 stores right holder information relating to the right of one box, including the first user who is the right holder who can use the one box of the box device.

In this embodiment, the right holder information storage unit 405 stores right holder information relating to the right of the home delivery box. For example, when the processing execution unit 403 executes a right transfer process transmitted from the user, the right holder information storage unit 405 updates the right holder information and stores the user information indicating the right holder and the transfer conditions in the right holder information. and are added. Further, for example, the right holder information storage unit 405 executes right return processing sent from the user by the processing execution unit 403, or determines that the transfer condition of the condition confirmation unit 404 is not satisfied. , the right holder information is updated so that the original right holder user becomes the right holder.

10, 11, and 12 are diagrams showing examples of right holder information stored in the right holder information storage unit 405 according to the embodiment. FIG. 10 shows an example of right holder information stored in the right holder information storage unit 405 at a certain point in time. The arrows shown in FIG. 10 indicate that the rights have been transferred. The right holder written at the bottom is the transfer source (that is, the original right holder), and the right holder at the end of the arrow is the transfer destination ( In other words, it indicates that it is the right holder of the transferee).

FIG. 11 shows an example of right holder information after user Mr. F, who is the right holder of box number 003 shown in FIG. 10, has transferred the right to another user, Mr. G. In the example shown in FIG. 11, it can be seen that the right is transferred by updating the right holder information by adding the user Mr. G, who is the right holder of the transfer destination, and the expiration date, which is the transfer condition, to the right holder information. .

12 shows an example of the right holder information after the user Mr. C, who is the right holder of the box number 001 shown in FIG. 10, has returned the right to the original right holder Mr. B. FIG. In the example shown in FIG. 12, it can be seen that the right is returned by updating the right holder information to delete the user Mr. C, who is the right holder of the transfer destination, and the expiration date, which is the transfer condition. .

[1.5.6 Block storage part]
Block store 406 stores blocks in the blockchain that contain processing instructions.

More specifically, the block storage unit 406 stores blocks created by the consensus building unit 402 by accumulating them in a ledger with the same content built on the foundation of the blockchain. to store

Note that usage conditions assigned to rights may be written in advance in the ledger of the block storage unit 406 . The usage conditions may be different for each delivery box, or may be the same.

[1.5.7 Communication unit]
The communication unit 407 is realized by a processor, communication I/F, etc., and communicates with the user terminal devices 100 and 110 and/or the delivery box control device 200 . In the present embodiment, the communication unit 407 receives a processing command from the user terminal devices 100 and 110, for example, and stores it in the processing storage unit 401. FIG. Communication unit 407 also transmits processing instructions stored in processing storage unit 401 to home delivery box control device 200 . Note that the communication unit 407 may transmit all processing commands or all processing after a certain point in response to a request from the home delivery box control device 200 .

In addition, when the communication unit 407 receives an inquiry about the usage conditions attached to the rights from the user terminal devices 100 and 110, it transmits the usage conditions stored in the block storage unit 406 or the storage unit (not shown).

[1.6 Operation of management system]
Next, the operation of the management system 10 configured as above will be described. The operation of the management system 10 includes a rights exercise phase for exercising rights, a rights return phase for returning rights, a rights transfer phase for transferring rights, and a transfer conditions confirmation phase for checking whether the transfer conditions are satisfied. It consists of four. Each phase will be described below.

[1.6.1 Rights exercise phase]
FIG. 13 is a sequence diagram showing an example of operations in the right exercise phase according to the embodiment.

The operation of the right exercise phase of the management system 10 will be described below with reference to FIG.

First, when the user selects a process for exercising the right, such as unlocking or locking, the user terminal device 100 prepares a corresponding right exercise command, and the authentication server device 400 , 410 and 420 (step S101).

Next, the authentication server devices 400, 410, and 420 store the right exercise command received from the user terminal device 100 in the processing storage unit 401 (step S102).

Next, all authentication server devices 400, 410, and 420 confirm the signature included in the received right exercise order and form a consensus (step S103). All authentication server devices 400, 410, and 420 create a block in the blockchain including the received right exercise order (step S104). The created block is stored in the block storage unit 406 .

Next, all authentication server devices 400, 410, and 420 transmit the processing instructions included in the created block to the home delivery box control device 200 that controls the home delivery box device to be processed (step S105). Here, a right exercise command is sent to home delivery box control device 200 as a processing command included in the created block.

Next, upon receiving the processing command, the home delivery box control device 200 analyzes the type of processing command received and the type of processing to exercise (step S106). Here, the home delivery box control device 200 analyzes that it is a process of exercising the right, such as unlocking or locking the home delivery box to which the user owns the right.

Next, the home delivery box control device 200 transmits a command such as a message for controlling the home delivery box device to the home delivery box device 300 as a command for executing the parsed right exercise processing (step S107). ).

Finally, delivery box device 300 executes the received command, such as unlocking or locking (step S108).

[1.6.2 Rights return phase]
FIG. 14 is a sequence diagram illustrating an example of operations in a right return phase according to the embodiment.

The operation of the right return phase of the management system 10 will be described below with reference to FIG.

First, the user terminal device 100 creates a return processing command for returning the right owned by the user, and transmits it to the authentication server devices 400, 410, and 420 (step S201).

Next, the authentication server devices 400, 410, and 420 store the return processing command received from the user terminal device 100 in the processing storage unit 401 (step S202).

Next, all authentication server devices 400, 410, and 420 confirm the signature included in the received return processing instruction and form a consensus (step S203). Then, all authentication server devices 400, 410, and 420 create a block in the blockchain including the received return processing instruction (step S204). The created block is stored in the block storage unit 406 .

Finally, all of the authentication server devices 400, 410, and 420 respectively update the right holder information stored in the right holder information storage unit 405 (step S205), and update the current right holder included in the right holder information to the relevant right holder. Change from the user to the return destination, that is, the original right holder.

[1.6.3 Right transfer phase]
FIG. 15 is a sequence diagram showing an example of operations in the rights transfer phase in the embodiment.

The operation of the rights transfer phase of the management system 10 will be described below with reference to FIG.

First, the user terminal device 100 inquires of the authentication server devices 400, 410, and 420 about the conditions of use attached to the right owned by the user and scheduled to be transferred to another user (step S301). .

Next, when the authentication server devices 400, 410, and 420 receive the inquiry, they transmit the usage conditions for the right of the target delivery box to the user terminal device 100 (step S302).

Next, the user terminal device 100 selects (that is, decides) the transfer destination user (step S303), and decides transfer conditions that do not exceed the usage conditions received from the authentication server devices 400, 410, and 420 (step S304). .

Next, the user terminal device 100 creates a transfer processing command including the delivery box number of the right transfer target, the transfer destination user information, and the determined transfer conditions, and its signature, and includes the signature in the transfer processing command. to the authentication server devices 400, 410, and 420 (step S305).

Next, the authentication server devices 400, 410, and 420 store the transfer processing command received from the user terminal device 100 in the processing storage unit 401 (step S306).

Next, all authentication server devices 400, 410, and 420 confirm the signature included in the received transfer processing command and form a consensus (step S307). All authentication server devices 400, 410, and 420 create a block in the blockchain including the received transfer processing command (step S308). The created block is stored in the block storage unit 406 .

Finally, all authentication server devices 400, 410, and 420 respectively update the right holder information stored in the right holder information storage unit 405 according to the transfer processing command (step S309), and update the current rights included in the right holder information. to the transferee user.

[1.6.4 Transfer conditions confirmation phase]
FIG. 16 is a sequence diagram showing an example of the operation of the transfer condition confirmation phase in the embodiment.

The transfer condition confirmation phase of the management system 10 will be described below with reference to FIG. Also, here, it is assumed that one predetermined authentication server device 400 confirms transfer conditions such as the expiration date.

First, the authentication server device 400 waits for a certain period of time to determine whether or not the transfer condition is satisfied (step S401).

Next, after a certain period of time has elapsed, authentication server device 400 determines whether or not there is a right to a home delivery box that does not satisfy the transfer conditions among all the rights to home delivery boxes (step S402). For example, if the transfer condition is the expiration date, authentication server device 400 acquires the current time and determines whether or not there is a right for a delivery box whose expiration date has expired among all the rights for delivery boxes.

In step S402, if there is no home delivery box right that does not satisfy the transfer conditions (NO in step S402), the process returns to step S401 and waits again for a certain period of time. For example, if the transfer condition is the expiration date, and if there is no right to a delivery box whose expiration date has not expired, the user will have to wait again for a certain period of time.

On the other hand, in step S402, if there is a home delivery box right that does not satisfy the transfer conditions (in step S402), a return processing command for the home delivery box right is created and transmitted to all authentication server devices 410 and 420. (Step S403). For example, if the transfer condition is the expiration date, and if there is a right to use a delivery box whose expiration date has expired, a return processing command is created and sent to the other authentication server devices 410 and 420 . As a result, all the authentication server devices 400, 410, and 420 share the return processing instruction for the right of the home delivery box.

Next, authentication server devices 400, 410, and 420 store the shared return processing command in processing storage unit 401 (step S404).

Next, all authentication server devices 400, 410, and 420 confirm the signature included in the shared return processing instruction and form a consensus (step S405). Then, all authentication server devices 400, 410, 420 create a block in the blockchain including the shared return processing instruction (step S406). The created block is stored in the block storage unit 406 .

Finally, all authentication server devices 400, 410, and 420 respectively update the right holder information stored in the right holder information storage unit 405 (step S407), and update the current right holder included in the right holder information to the relevant right holder. Change from the user to the return destination, that is, the original right holder.

[1.7 Effect of Embodiment 1]
As described above, the management system 10 of the present embodiment manages the transfer conditions such as the expiration date together with the person to be transferred when transferring the rights such as the right of use. If the conditions are no longer met, the rights can be automatically returned to the original right holders. As a result, inappropriate use of a box device having one or more storage units can be suppressed.

More specifically, when a user transfers a right to another user, transfer conditions such as an expiration date are given. In addition, when rights are managed by a blockchain smart contract, rights do not automatically return to the original right holder even if the transfer conditions such as the expiration date are no longer met, preventing unauthorized use by users as they are. It is not possible. Therefore, in the management system 10, the authentication server device confirms whether there is a box right that does not satisfy the transfer condition among the rights of all the boxes, and returns the box right that does not satisfy the transfer condition to the original right holder. Execute the process. As a result, a malicious user continues to use the box illegally without returning the right, and even a non-malicious user forgets to remove the object stored in the box, thereby preventing the box from being used for a long time. Inappropriate use such as being in a missing state can be suppressed.

In this way, it is possible to implement a management system that safely manages the right to use a home delivery box and prevents inappropriate use such as unauthorized use of the home delivery box by a user or the like.

(Other modifications)
Although the present disclosure has been described based on the above embodiments, the present disclosure is of course not limited to the above embodiments. Modifications 1 to 8 below are also included in the present disclosure.

(Modification 1)
In the above-described embodiment, the delivery box device 300 only receives a command from the delivery box control device 200 and executes the command, but the present invention is not limited to this. The home delivery box device may be equipped with sensing, and may transmit the situation inside the home delivery box and/or the open/closed state of the door, etc. to the home delivery box control device.

FIG. 17 is a configuration diagram showing an example of a detailed configuration of the home delivery box device 500 in Modification 1. As shown in FIG.

Delivery box device 500 includes communication section 301 , process execution section 302 , and sensing section 503 . Elements similar to those in FIG. 8 are denoted by the same reference numerals, and detailed description thereof will be omitted.

Delivery box device 500 in modification 1 differs from delivery box device 300 shown in FIG. 8 in that it further includes sensing unit 503 .

The sensing unit 503 can sense the condition inside the delivery box and/or the opening/closing condition of the door of the delivery box, which is attached with a key that can be opened and closed by electronic processing and can physically store physical objects. can.

As a result, the home delivery box device 500 can determine whether or not the target home delivery box is in use by using the sensing unit 503 to sense whether there is, for example, a package in the target home delivery box. In addition, delivery box device 500 uses sensing unit 503 to sense the opening/closing status of the door of the target delivery box, thereby confirming whether the unlock command transmitted by delivery box control device 200 has been correctly executed. can.

(Modification 2)
In the above embodiment, one predetermined authentication server device 400 determines whether or not the box right transfer condition is satisfied, but the present invention is not limited to this. All authentication server devices 400, 410, and 420 may perform the processing of steps S401 and S402 shown in FIG. 16 to determine whether or not the transfer conditions are satisfied.

(Modification 3)
In the above-described embodiment, authentication server device 400 regularly determines whether the conditions for transferring the box rights are satisfied, but the present invention is not limited to this. Before the user performs any of the exercise of rights, the return of rights, and the transfer of rights, an authentication server device that receives a request to update the right holder of the target parcel delivery box to any of the authentication server devices. may determine whether it satisfies the transfer conditions.

FIG. 18 is a sequence diagram showing an example of the operation of the transfer condition confirmation phase in Modification 3. As shown in FIG. Elements similar to those in FIG. 16 are denoted by the same reference numerals, and detailed description thereof is omitted.

First, the authentication server devices 400, 410, and 420 wait until the user sends the right holder update request to determine whether or not the transfer condition is satisfied when the user sends the right holder update request. (Step S501). 13, before step S201 shown in FIG. 14, and before step S301 shown in FIG. 15, or at the same time as the inquiry in step S301 shown in FIG. Assume that an update request is sent to authentication server devices 400 , 410 , and 420 . Assume that authentication server device 400 receives a right holder update request from the user.

Next, in step S402, authentication server device 400 determines whether or not there is a right to a home delivery box that does not satisfy transfer conditions among all the rights to home delivery boxes (step S402). For example, if the transfer condition is the expiration date, authentication server device 400 acquires the current time and determines whether or not there is a right for a delivery box whose expiration date has expired among all the rights for delivery boxes. Since the rest is as described in the above embodiment, the description is omitted.

Thus, in this modification, the user terminal device 100 further transmits a right holder update request, which is a right holder information update request, and the condition confirmation unit 404 further receives the right holder update request. Check if the conditions are met.

As a result, the authentication server device 400 can determine whether or not the transfer condition is satisfied at the same timing as the processing command transmitted by the user terminal device 100. , the determination can be made. As a result, the authentication server device 400 can determine whether or not the transfer condition is satisfied more frequently at an appropriate timing, so that the inappropriate use period can be shortened.

(Modification 4)
In the above embodiment, authentication server device 400 determines whether or not the conditions for transferring the box right are satisfied, but the present invention is not limited to this. It may be determined whether or not the delivery box control device satisfies the transfer condition.

FIG. 19 is a diagram showing an example of the detailed configuration of the delivery box control device 600 in Modification 4. As shown in FIG. Elements similar to those in FIGS. 7 and 9 are denoted by the same reference numerals, and detailed description thereof will be omitted.

7, the delivery box control device 600 in Modification 4 further includes a processing execution unit 403, a right holder information storage unit 405, and a condition confirmation unit 604. Different configuration.

The communication unit 606 is realized by a processor, a communication I/F, and the like, and receives right exercise commands transmitted from the user terminal devices 100 and 110 to the authentication server devices 400 , 410 and 420 . The communication unit 606 transmits the received right exercise command to the processing analysis unit 601 . In modification 4, communication unit 606 receives blocks created by consensus building by authentication server devices 700 , 710 , and 720 in modification 4, and transmits the received blocks to process analysis unit 601 .

The processing analysis unit 601 receives blocks transmitted from the communication unit 606 . The processing analysis unit 601 analyzes and extracts processing instructions included in the received block. At this time, only the processing instructions for the home delivery boxes to be controlled by home delivery box control device 600 itself may be retrieved. The processing analysis unit 601 transmits the fetched processing command to the processing execution unit 403 and the delivery box control unit 203 . Others are the same as those of the processing analysis unit 202 in the embodiment, so description thereof will be omitted.

A condition confirmation unit 604 confirms whether or not the transfer condition is satisfied at regular time intervals. If the condition confirmation unit 604 determines that the transfer condition is not satisfied, it creates a return processing command for returning the right and transmits the return processing command to at least one of the authentication server devices 700 , 710 and 720 . Others are the same as those of the condition confirmation unit 404 in the embodiment, so description thereof will be omitted.

FIG. 20 is a diagram showing an example of the detailed configuration of the authentication server device 700 in Modification 4. As shown in FIG. Elements similar to those in FIG. 9 are denoted by the same reference numerals, and detailed description thereof will be omitted. Also, the authentication server devices 710 and 720 have the same configuration as the authentication server device 700, so the description thereof is omitted.

The authentication server device 700 in Modification 4 does not include the right holder information storage unit 405 and the condition confirmation unit 404, and the configuration of the processing execution unit 703 is different from that of the authentication server device 400 shown in FIG.

If the processing command transmitted from the consensus building unit 402 is a transfer processing command included in the block created by the consensus building unit 402, the processing execution unit 703 acquires the created block from the block storage unit 406. , to the delivery box control device 600 . Further, when the processing command transmitted from the consensus building unit 402 is a return processing command included in the block created by the consensus building unit 402, the processing execution unit 703 acquires the created block from the block storage unit 406. and transmits it to the delivery box control device 600 .

Next, the operation of the management system 10 of this modified example configured as described above will be described. The right transfer phase and the transfer condition confirmation phase will be described below with reference to the drawings.

FIG. 21 is a sequence diagram showing an example of the operation of the rights transfer phase in Modification 4. As shown in FIG. Elements similar to those in FIG. 15 are denoted by the same reference numerals, and detailed description thereof will be omitted. That is, the description of steps S301 to S308 is omitted.

In step S609, at least one of authentication server devices 700, 710, and 720 transmits the created block to home delivery box control device 600. FIG.

Next, delivery box control device 600 updates the right holder information stored in right holder information storage unit 405 in accordance with the transfer processing instruction, which is the processing instruction included in the received block (step S610), and changes the right holder information to Change the included current rights holder to the transferee user.

FIG. 22 is a sequence diagram showing an example of the operation of the transfer condition confirmation phase in Modification 4. As shown in FIG. Elements similar to those in FIG. 16 are denoted by the same reference numerals, and detailed description thereof is omitted.

First, the home delivery box control device 600 waits for a certain period of time to determine whether or not the transfer condition is satisfied (step S701).

Next, after a certain period of time has elapsed, the home delivery box control device 600 determines whether or not there is a right of a home delivery box that does not satisfy the transfer conditions among all the rights of the home delivery boxes (step S702).

In step S702, if there is no home delivery box right that does not satisfy the transfer conditions (NO in step S702), the process returns to step S701 and waits again for a certain period of time. On the other hand, in step S702, if there is a right of a home delivery box that does not satisfy the transfer conditions (in step S702), a return processing instruction for the right of the home delivery box is created, and Send (step S703).

Description of steps S401 to S407 will be omitted.

In step S 707 , at least one of authentication server devices 700 , 710 , 720 transmits the created block to home delivery box control device 600 .

Finally, the delivery box control device 600 updates the right holder information stored in the right holder information storage unit 405 in accordance with the return processing instruction, which is the processing instruction included in the received block (step S708). Note that the right holder information is updated, and the current right holder included in the right holder information is changed from the user to the return destination, that is, the original right holder.

(Modification 5)
In the above-described embodiment, authentication server device 400 determines (confirms) whether or not the conditions for transferring the right of the box are satisfied at regular intervals, but the present invention is not limited to this. Authentication server device 400 may perform interrupt processing for returning the right when the conditions for transferring the right to the home delivery box are not satisfied.

(Modification 6)
In the above embodiment, authentication server devices 400, 410, and 420 share a return processing instruction and then update right holder information when there is a right to a delivery box that does not meet the transfer conditions. , but not limited to this. The operation of the transfer condition confirmation phase of Modification 6 will be described below.

FIG. 23 is a sequence diagram showing the operation of the transfer condition confirmation phase in Modification 6. As shown in FIG.

First, the authentication server devices 400, 410, and 420 wait for a certain period of time to determine whether or not the transfer condition is satisfied (step S801).

After a certain period of time, authentication server devices 400, 410, and 420 determine whether or not there is a right to a home delivery box that does not satisfy the transfer conditions among all the rights to home delivery boxes (step S802).

In step S802, if there is no home delivery box right that does not satisfy the transfer conditions (NO in step S802), the process returns to step S801 and waits for a predetermined time again. On the other hand, in step S802, if there is a right to a home delivery box that does not satisfy the transfer conditions (in step S802), authentication server devices 400, 410, and 420 each transfer right holder information stored in right holder information storage unit 405. is updated (step S803). As a result, the right holder information is updated, and the current right holder included in the right holder information is changed to the original right holder.

In this way, the authentication server devices 400, 410, and 420 may update the right holder information stored in the right holder information storage unit 405 without forming a consensus. It can be used when there is no need to write and accumulate evidence that the transfer conditions are no longer met in the blockchain.

(Modification 7)
In the above embodiment, only the right is returned when the transfer condition for the right of a delivery box is no longer satisfied. In addition, the following operation may be performed.

That is, the authentication server device adds one point to the user who has the right when the transfer condition is no longer satisfied. Then, the user who has the points is restricted to not be able to use the home delivery box for a certain period of time. At this time, the restriction may be tightened according to the number of points, or may be imposed when a certain number of points is accumulated.

(Modification 8)
If the transfer condition is the expiration date or the like, the expiration date or the like may be extended upon request from the user.

(Modification 9)
In the above embodiments and modifications, the management system 10 manages the transfer conditions such as the expiration date together with the person to be transferred when transferring the rights such as the usage right, and satisfies the transfer conditions such as the expiration date. It has been explained that the right is automatically returned to the original right holder when it is lost, but this is not the only option.

For example, if the transferee returns the rights to the original right holder before the expiration date, the management system 10 may issue a reward token to the transferee.

Here, if the person to be transferred returns the right to the original right holder before the expiration date, the management system 10 issues tokens to the person to be transferred in an amount corresponding to the time or period until the expiration date. may The amount of tokens to be issued per day if there are several days until the expiration date, or the amount of tokens to be issued per hour if there are several hours until the expiration date is up to the original rights holder. You can decide. Then, the transfer conditions may include the amount of tokens to be issued when the right is returned before the expiration date, together with the expiration date, the number of times of use, or the number of times that the right can be reassigned. This makes it possible to write on the blockchain the conditions for the amount of tokens to be issued if the right is returned before the expiration date.

If the transferee returns the right before the expiration date, the management system 10 may issue a fixed token to the transferee regardless of the time or period until the expiration date.

(Modification 10)
In the above embodiments and modifications, the management system 10 manages the transfer conditions such as the expiration date together with the person to be transferred when transferring the rights such as the usage right, and satisfies the transfer conditions such as the expiration date. It has been explained that the right is automatically returned to the original right holder when it is lost, but this is not the only option.

For example, the transferee may be able to extend the usage period included in the transfer conditions by paying the original rights holder the tokens. Then, if the transferee wishes to extend the usage period, the transferee may extend the usage period by voluntarily paying the token to the original right holder. In addition, the Transferee may extend the expiration date by paying the tokens to the original rights holder when notified that the expiration date or the expiration date is approaching. good.

(Modification 11)
In the above embodiments and modifications, the management system 10 uses blockchain to manage the right of the home delivery box device, thereby preventing inappropriate use of the box. do not have. The management system 10 may prevent inappropriate use by managing the rights of other devices such as sharing bikes using blockchain. In other words, the management system and the like of the present disclosure may be applied to other devices such as sharing bikes to suppress inappropriate use of other devices.

(Possibility of other embodiments)
Although the management system and the like of the present disclosure have been described above in the embodiments, there are no particular limitations on the subject or device that executes each process. It may also be processed by a processor (discussed below) or the like embedded within a locally located specific device. It may also be processed by a cloud server or the like located at a location different from the local device.

Note that the present disclosure is not limited to the above embodiments. For example, another embodiment realized by arbitrarily combining the constituent elements described in this specification or omitting some of the constituent elements may be an embodiment of the present disclosure. In addition, the present disclosure includes modifications obtained by making various modifications that a person skilled in the art can think of without departing from the gist of the present disclosure, that is, the meaning indicated by the words described in the claims, with respect to the above-described embodiment. be

In addition, the present disclosure further includes the following cases.

(1) The above device is specifically a computer system comprising a microprocessor, ROM, RAM, hard disk unit, display unit, keyboard, mouse and the like. A computer program is stored in the RAM or hard disk unit. Each device achieves its function by the microprocessor operating according to the computer program. Here, the computer program is constructed by combining a plurality of instruction codes indicating instructions to the computer in order to achieve a predetermined function.

(2) A part or all of the components constituting the above device may be configured from one system LSI (Large Scale Integration). A system LSI is an ultra-multifunctional LSI manufactured by integrating multiple components on a single chip. Specifically, it is a computer system that includes a microprocessor, ROM, RAM, etc. . A computer program is stored in the RAM. The system LSI achieves its functions by the microprocessor operating according to the computer program.

(3) A part or all of the constituent elements constituting the above devices may be composed of a detachable IC card or a single module. The IC card or module is a computer system composed of a microprocessor, ROM, RAM and the like. The IC card or the module may include the super multifunctional LSI. The IC card or the module achieves its function by the microprocessor operating according to the computer program. This IC card or this module may be tamper-resistant.

(4) Further, the present disclosure may be the method shown above. Moreover, it may be a computer program for realizing these methods by a computer, or it may be a digital signal composed of the computer program.

(5) In addition, the present disclosure includes a computer-readable recording medium for the computer program or the digital signal, such as a flexible disk, hard disk, CD-ROM, MO, DVD, DVD-ROM, DVD-RAM, BD ( Blu-ray (registered trademark) Disc), a semiconductor memory, or the like may be recorded. Moreover, it may be the digital signal recorded on these recording media.

Further, according to the present disclosure, the computer program or the digital signal may be transmitted via an electric communication line, a wireless or wired communication line, a network represented by the Internet, data broadcasting, or the like.

The present disclosure may also be a computer system comprising a microprocessor and memory, the memory storing the computer program, and the microprocessor operating according to the computer program.

Also, by recording the program or the digital signal on the recording medium and transferring it, or by transferring the program or the digital signal via the network or the like, it can be implemented by another independent computer system. You can do it.

INDUSTRIAL APPLICABILITY The present disclosure can be used for a management system, a server, a management method, and a program that safely manage the right to use a home delivery box and prevent inappropriate use of the home delivery box such as unauthorized use by a user or the like.

100, 110 user terminal device 101 transfer condition determination unit 102 right transfer unit 103 right exercise unit 104 right return unit 105, 201, 301, 407, 501, 606 communication unit 200, 600 home delivery box control device 202, 601 processing analysis unit 203 Delivery box control unit 300, 500 Delivery box device 302, 403, 502, 703 Processing execution unit 400, 410, 420, 700, 710, 720 Authentication server device 401 Processing storage unit 402 Consensus formation unit 404, 504, 604 Condition confirmation unit 405 Right holder information storage unit 406 Block storage unit 503 Sensing unit

Claims (9)

A first right holder who can use one box of a box device having one or more boxes to which a key that can be opened and closed by electronic processing and which can physically store a physical object. a right holder information storage unit that stores right holder information related to the right of the one box, including the user;
a consensus building unit that creates a block in the blockchain containing processing instructions and stores it in the block storage unit;
a terminal device that transmits, as one of the processing commands, a transfer processing command that includes user information indicating a second user to whom the rights are to be transferred and conditions for the transfer of the rights;
a processing execution unit that updates the current right holder included in the right holder information from the first user to the second user when the transfer processing instruction is acquired as one of the processing instructions included in the block;
confirming whether the transfer condition is satisfied, and if it is determined that the transfer condition is not satisfied, creating a return processing instruction for returning the right from the second user to the first user; a condition confirmation unit that transmits the return processing instruction to the consensus building unit;
When the processing execution unit acquires the return processing instruction as one of the processing instructions included in the block, the processing execution unit updates the second user included in the right holder information to the first user.
management system. The transfer condition is the expiration date, the number of times of use, or the number of times that can be reassigned,
The management system of Claim 1. The transfer condition is set by being input to the terminal device,
The management system of Claim 1. The management system comprises the terminal device, the box device and the server device,
The server device has the right holder information storage unit, the consensus building unit, the processing execution unit, and the condition confirmation unit,
The condition confirmation unit confirms at regular intervals whether the transfer condition is satisfied.
4. Management system according to claim 2 or 3. The management system includes the terminal device, the box device, a server device, and a box control device that controls the box device,
The server device has the consensus building unit,
The box control device has the right holder information storage unit, the processing execution unit, and the condition confirmation unit,
The condition confirmation unit confirms at regular intervals whether the transfer condition is satisfied.
4. Management system according to claim 2 or 3. The terminal device further transmits a request to update the right holder information,
Further, when the condition confirmation unit receives the update request, the condition confirmation unit confirms whether the transfer condition is satisfied.
Management system according to any one of claims 1-5. A first right holder who can use one box of a box device having one or more boxes to which a key that can be opened and closed by electronic processing and which can physically store a physical object. a right holder information storage unit that stores right holder information related to the right of the one box, including the user;
a consensus building unit that creates a block in the blockchain containing processing instructions and stores it in the block storage unit;
As one of the processing commands included in the block, when a transfer processing command including user information indicating the second user to whom the right is to be transferred and the right transfer condition is acquired, the current a processing execution unit that updates the right holder from the first user to the second user;
confirming whether the transfer condition is satisfied, and if it is determined that the transfer condition is not satisfied, creating a return processing instruction for returning the right from the second user to the first user; a condition confirmation unit that transmits the return processing instruction to the consensus building unit;
When the processing execution unit acquires the return processing instruction as one of the processing instructions included in the block, the processing execution unit updates the second user included in the right holder information to the first user.
server. A computer-implemented management method comprising:
A first right holder who can use one box of a box device having one or more boxes to which a key that can be opened and closed by electronic processing and which can physically store a physical object. a right holder information storing step of storing right holder information relating to the right of the one box, including the user;
a consensus building step of creating a block in the blockchain containing processing instructions and storing it in a block store;
As one of the processing commands included in the block, when a transfer processing command including user information indicating the second user to whom the right is to be transferred and the right transfer condition is acquired, the current a processing execution step of updating the right holder from the first user to the second user;
confirming whether the transfer condition is satisfied, and if it is determined that the transfer condition is not satisfied, creating a return processing instruction for returning the right from the second user to the first user; a condition confirmation step of sending the return processing instruction to the consensus building step;
In the processing execution step, when the return processing instruction is acquired as one of the processing instructions included in the block, the second user included in the right holder information is updated to the first user;
Management method. A first right holder who can use one box of a box device having one or more boxes to which a key that can be opened and closed by electronic processing and which can physically store a physical object. a right holder information storing step of storing right holder information relating to the right of the one box, including the user;
a consensus building step of creating a block in the blockchain containing processing instructions and storing it in a block store;
As one of the processing commands included in the block, when a transfer processing command including user information indicating the second user to whom the right is to be transferred and the right transfer condition is acquired, the current a processing execution step of updating the right holder from the first user to the second user;
confirming whether the transfer condition is satisfied, and if it is determined that the transfer condition is not satisfied, creating a return processing instruction for returning the right from the second user to the first user; a condition confirmation step of sending the return processing instruction to the consensus building step;
In the processing execution step, when the return processing instruction is obtained as one of the processing instructions included in the block, updating the second user included in the right holder information to the first user;
A program that makes a computer run.

Images