DATA PROCESSING SYSTEM, DATA PROCESSING DEVICE, DATA PROCESSING METHOD, AND COMPUTER PROGRAM

摘要

A privilege management system enabling effective privilege management, such as confirmation processing of service receiving privileges and so forth, is realized. A group attribute certificate which has, as stored information, group identification information corresponding to a group which is a set of certain devices or certain users, and also has affixed an electronic signature of an issuer, is issued to a service reception entity, and verification is performed by means of signature verification for of the group attribute certificate presented from the user device regarding whether or not there has been tampering, screening is performed regarding whether or not this is a service-permitted group based on group identification information stored in the group attribute certificate by using a group information database, and determination is made regarding whether or not service can be provided, based on the screening. Centralized privilege confirmation corresponding to various user sets or device sets can be made, so management of individual privilege information can be omitted, thereby enabling effective privilege management.