To provide a service management system and method that can provide a proper service to legitimate registration users.

A management apparatus generates a private key and public key in pairs with each customer, generates a certificate of each customer as to the public key by using the private key, issues the certificate to each customer, and stores the created contents by each customer as customer information, a terminal transmits an authentication information request corresponding to the customer of the terminal 1 to the management apparatus at an access request to a service apparatus, the management apparatus transmits authentication information including the private key encrypted by a password of one customer depending on the customer information in response to the authentication request and a random number to the terminal, the terminal decodes the random number depending on the encrypted private key to obtain decoded data and transmits the decoded data and the certificate of the one customer to the management apparatus, and the management apparatus discriminates whether or not the decoded data and the certificate of the one customer are legitimate and permits the terminal to access the service apparatus according to the result of discrimination.