PROBLEM TO BE SOLVED: To realize privacy management for a principal in an identity network.SOLUTION: An identity network 10 is a computer network that includes an identity provider 14, a discovery service provider 16, and a service provider 18 for allowing a principal 20 to perform transaction. A control device 12 inquires of the discovery service provider 16 to obtain information associated with available identity resources and receives address information on an address attribute of the identity resource 14. Then, the control device 12 interacts with the service provider 18 to create, read, change, or delete a privacy attribute for administering a use of the identity resource 14 on the basis of the address information.