An information terminal of a user B who permits a user A to search the person B calculates a calculation result G(Pa′, Pb) by using information Pa′ related to the user A and information Pb of the user B, both Pa′ and Pb being stored in the information terminal of the user B and transmits to a server the calculation result G(Pa′, Pb). Further, the information terminal of the user B receives trust information expressing that Pb is authenticated and calculates a calculation result F(Pb) and transmits to the server. The information terminal of the user A calculates G(Pa, Pb′) and transmits it to the server. When the server receives G(Pa, Pb′) from the information terminal of the user A, the server searches G(Pa′, Pb) which matches G(Pa, Pb′) and the search result with F(Pb) to the information terminal of the user A. The information terminal of the user A calculates F(Pb′) and compares it with F(Pb) which is sent by the server.