| CPC G07C 9/00309 (2013.01) [H04L 9/0894 (2013.01); H04L 9/3247 (2013.01); H04L 9/3263 (2013.01); G07C 2009/00412 (2013.01)] | 15 Claims |

|
4. An information processing system that is used to lift a restriction imposed by a first device which restricts entry or exit of a product or a person to or from a first space, the information processing system comprising:
an information terminal; a first management device; a second management device; and a control device, wherein
the second management device includes:
a second storage in which a third private key and a third public key are stored; and
a second communicator that transmits the third public key to the first management device,
the first management device includes:
a first storage in which a second private key and a second public key are stored;
a first communicator that receives the third public key from the second management device; and
a first information processor that generates a first signature for the third public key received, using the second private key, and causes the first communicator to transmit an intermediate certificate including the third public key and the first signature to the second management device,
the second communicator receives the intermediate certificate from the first management device,
the information terminal includes:
a terminal storage in which a first private key and a first public key are stored; and
a terminal communicator that transmits the first public key to the second management device,
the second communicator receives the first public key from the information terminal,
the second management device includes a second information processor that generates a second signature for the first public key received, using the third private key, and causes the second communicator to transmit: a server certificate including the first public key and the second signature; and the intermediate certificate received, to the information terminal,
the terminal communicator receives the server certificate and the intermediate certificate from the second management device, and transmits the server certificate received and the intermediate certificate received, to the control device, and
the control device includes:
a storage in which a root certificate including the second public key is stored;
a communicator that receives the server certificate and the intermediate certificate from the information terminal; and
a controller that (i) verifies the first signature included in the intermediate certificate received, using the second public key included in the root certificate, (ii) verifies the second signature included in the server certificate received, using the third public key included in the intermediate certificate, and (iii) lifts the restriction imposed by the first device when each of the first signature and the second signature is successfully verified.
|