JP2004062856A - Information processor, interface device, information managing method, information managing program, recording medium stored with the same program and ic card system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent leakage of personal information of a card owner recorded in an IC card under environment where various kinds of service are enjoyed by utilizing recorded information of the IC card by using an information processor. <P>SOLUTION: A control part 7 performs processing for recognizing attachment/detachment of an IC card 3 to a reader/writer 2 and processing for deleting all pieces of the personal information in the IC card 3 stored in a storage part (hard disk) 6 of the information processor 1 when the detachment of the IC card 3 from the reader/writer 2 is recognized. Thus, leakage of the personal information of a user to a third party is evaded. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention provides, for example, an information processing apparatus that provides services such as browsing, searching, and transmitting information to a plurality of users through the Internet, for example, between the information processing apparatus and a portable recording medium held by each user. , An information management method for managing user usage information left in an information processing apparatus, an information management program for executing the information management method, and a recording medium on which the program is recorded. TECHNICAL FIELD The present invention relates to an IC card system in which the security level is improved in the field of a system integration service using an IC card.
[0002]
[Prior art]
At present, installation of a common client terminal that can use, for example, a WWW (World Wide Web) browser has become widespread in schools, airports, banks, libraries, and Internet cafes, and a plurality of users share the client terminal. The machines used are increasing. However, when the client terminal is shared and used, the WWW browser usage information left in the storage unit of the client terminal (such as a display history of a website that is not desired to be known to others, an input history, and the like, is identified. Such personal information may leak to other users.
[0003]
Therefore, as one of the management methods of personal information when a plurality of users share and use a client terminal, an access right given by a user name or a password to a personal information file in a storage unit (for example, a hard disk) is provided. It is widely practiced to set such that each user can access only his / her own personal information file to which the access right has been given.
[0004]
However, if there is a person with administrator authority that can access all personal information files, it is easy to improperly use other people's personal information, and in fact this may cause personal information to be leaked. ing.
[0005]
In addition, user authentication based on a user name and password requires user registration to the client terminal for each user in advance, so considering the convenience of users, unspecified numbers of airports, banks, etc. It is difficult to apply to the environment where the users use irregularly.
[0006]
On the other hand, in the field of a system integration service (hereinafter, referred to as “SI”), development is progressing mainly on a server management type system. In recent years, many problems of information leakage have occurred, and the side that builds / manages the SI service requires more complicated and advanced security technology. In addition, security technology is not the end when it is built, and security technology is always required to advance technically to cope with hacking of server management information.
[0007]
The speed of response also matters. Depending on the OS (Operating System) to be used, a correction module for the OS is supplied as needed. There are many problems that can be solved by using them, so it is necessary to take immediate action. At present, it is recognized that a system that manages servers 24 hours a day is recognized as a trusted system in a situation where it is not known when hacking will occur.
[0008]
Among such conventional SI service systems, there are many systems using an IC card. The use case is a security use field, and is used for authentication of an access right to a server system and entry / exit management.
[0009]
Recently, IC cards have tended to have higher capacities. The purpose of many uses is to make various services available with one IC card. The service content is mainly the integration of multiple credit functions and financial settlement functions, and does not require much storage capacity yet. In the future, there is a demand for a method of utilizing the high-capacity feature of an IC card.
[0010]
Generally, in a flow centered on a server management type SI service system, a huge amount of data is managed by a server via a network and a dedicated line, and an IC card is used for personal authentication (access to the server). Encryption key, credit number, etc.) in many cases. Some card systems have an area for recording personal data in the card, but the personal data of the user is basically recorded and managed in a server. Some users are concerned about such a server management type SI service system, and improving the security of record management of personal data is an important issue.
[0011]
The following are cited as prior art documents relating to the invention of this application.
[0012]
[Patent Document 1]
JP-A-10-290285
[Patent Document 2]
JP-A-10-49596
[0013]
In Patent Document 1, for example, by using an IC card, one mobile phone can be commonly used by a plurality of users, and each user sets his or her own IC card in the mobile phone. Thus, a shared or public mobile phone can be used as a personal mobile phone. When the power is turned off, the information read from the IC card and stored in the storage unit (RAM) is automatically deleted. Thus, the personal information in the storage unit is erased every time the use of the client terminal is completed, so that the personal information of the user is not left in the client terminal.
[0014]
Further, Patent Document 2 discloses that a card containing a processor and an integrated circuit including a memory is issued to a consumer, and the consumer's headquarters registers personal information on the card, and provides the card in which the personal information is registered as a service. There is disclosed a personal information management system that is set on a terminal device of a providing system and automatically receives a service via an Internet network. In this system, at the time of registration, the consumer sets a disclosure flag only for information to be disclosed, so that in response to a request for personal information from the service providing system, the consumer provides personal information only when the disclosure flag is set, When the disclosure flag is reset, personal information is not provided to prevent leakage of personal information.
[0015]
[Problems to be solved by the invention]
However, the technology described in Patent Document 1 cannot be applied to a terminal device that is used while the power is always turned on. Unlike mobile phones, which are limited by the amount of battery storage when used, in general, stationary terminal devices are kept powered on, and more recently, optical fibers and asymmetric digital subscriber lines have been used. 2. Description of the Related Art Always-on terminal devices have become widespread, and in order to enable immediate use of the Internet at any time, power is always turned on so that a user cannot turn off the power. In addition, if there is a person who immediately uses the system, turning off the power and ending the use may impair convenience.
[0016]
Also, in the configuration described in Patent Document 2, since the personal information is disclosed to the other party via the Internet network, the personal information is stored in the server of the service providing system that is the other party. The risk of leaking personal information due to hacking by unspecified third parties is no different from before.
[0017]
Building an SI service system that can use a plurality of services in a high frequency range while maintaining and improving high security has various difficult problems, and the current situation is that each company struggles with system development.
[0018]
The present invention has been made in view of the above-described problems, and has as its object to allow personal information to be leaked to another person without impairing the convenience of the user in an environment where a plurality of users can freely use the Internet or the like. It is an object of the present invention to provide an information processing device, an interface device, an information management method, an information management program, and a recording medium on which the program is recorded.
[0019]
Another object of the present invention is to provide an IC card system capable of constructing an SI service system that can use a plurality of services in a high frequency range while maintaining and improving high security.
[0020]
[Means for Solving the Problems]
An information processing apparatus according to the present invention includes an information transfer unit, a storage unit storing use information of the information transfer unit, and recognition of attachment / detachment of a portable recording medium capable of reading and writing use information between the storage unit. And a control unit for executing a process of deleting the usage information from the storage unit when the removal of the portable recording medium is recognized.
[0021]
The information processing apparatus is placed in an environment where a plurality of users can use the information processing apparatus in common. When the information transfer means provided in the information processing device is used, the use information is stored in the storage unit. Then, when the user finishes the use and the portable recording medium mounted for use is detached (removal operation), the control unit automatically deletes the use information from the storage unit. As a result, there is no use information remaining in the storage unit of the information processing device after the use is completed, which leads to the identification of the individual user. Furthermore, when erasing the usage information from the storage unit at the end of use, the information processing apparatus can maintain the power-on state, so that the convenience of the next user is not impaired.
[0022]
The interface device of the present invention includes the control unit. That is, the interface device of the present invention is connected to an information processing device including an information transfer unit and a storage unit in which usage information of the information transfer unit is stored, and a portable recording medium is detachable. A control unit is provided which executes a process of deleting usage information from the storage unit when recognizing removal of the portable recording medium.
[0023]
An information management method according to the present invention includes a process for recognizing whether or not a portable recording medium is connected to a storage unit in which usage information of an information transfer unit is stored, and a process for recognizing whether or not the portable recording medium connected to the storage unit is connected. When the connection is recognized, the control unit is caused to execute a process of deleting the usage information from the storage unit.
[0024]
An information management program according to the present invention is a program for causing a control unit to execute the above information management method. For example, it is stored in a hard disk, a semiconductor memory, or the like, and is executed by a control unit such as a CPU (Central Processing Unit).
[0025]
A recording medium on which the information management program of the present invention is recorded has the above information management program recorded thereon. For example, a hard disk, a semiconductor memory, an IC card, an optical disk, a magneto-optical disk, or the like on which the information management program is recorded.
[0026]
In the present invention, the information processing device is not limited to a terminal device connected to a communication network or a system including a plurality of devices. For example, a standalone type information processing device that only stores information in a format such as a database may be used. Including.
The information transfer means has, for example, a function of browsing and searching for information through a communication network, and further transmitting information to another information processing device connected to the communication network. For example, there are a text browser and a WWW browser having a structure in which a pointer is provided in a document and a link is provided from the pointer to another document or figure. Other examples include e-mail software and database software.
[0027]
The following is an example of the usage information of the information transfer means.
-History of visited websites (URL; Uniform Resource Locators or page contents called cache).
・ File and e-mail transfer records.
A file created by the website, called a cookie. Information such as settings when accessing the site is stored in a storage unit (such as a hard disk) in the information processing apparatus. Some websites also store personal information, such as names, email addresses, home and work addresses, and phone numbers, that can be used to identify or contact you. .
Once the cookie is saved, the cookie remains even after the WWW browser is closed, and when the website from which the cookie was created is displayed again, the website can read the cookie saved in the storage unit (such as a hard disk).
・ Setting information such as WWW browser.
A bookmark list for registering URLs of favorite websites and frequently accessed specific pages using a WWW browser to facilitate magnetic field access.
・ The URL, search condition, user name (ID), and password entered previously stored in the storage unit (such as a hard disk) for the auto-complete function that reduces the trouble of re-entering the user at the next use. Such.
[0028]
Examples of the portable recording medium used in the present invention include an IC card, a magnetic card, a magnetic disk, a magnetic tape, an optical disk, a magneto-optical disk, a semiconductor memory, and a composite card in which a magnetic recording layer or an optical recording layer is combined with an IC card. , As an example.
[0029]
Among them, an IC card is preferably used as the portable recording medium of the present invention for the following reasons.
An IC card is a recording medium in which an IC (Integrated Circuit) is embedded in a plastic card, can store a larger amount of information than a magnetic recording medium such as a magnetic card, and is less susceptible to a computer virus than a magnetic card. It is also excellent in security such that it is difficult to decipher or falsify information written inside.
Further, some advanced ones store internal information in an encrypted form, and some have a security circuit for managing access to the inside.
In addition, since the time for using the shared information processing apparatus is often about several minutes, it is not practical to read and write the use information unless it is performed at high speed. The IC card is fully satisfied with this request.
Furthermore, compared to a disk-shaped recording medium such as an optical disk or a magneto-optical disk, it is thin and small, can be easily stored in a pocket or a wallet, and has excellent portability.
The types of IC cards include a contact type having an external terminal, a non-contact type having no external terminal and communicating with an interface device by radio waves, and a combination type having both functions of a contact type and a non-contact type. May be used.
[0030]
When an IC card is used as a portable recording medium, an IC card reader / writer (hereinafter referred to as a “reader / writer”) is used as an interface device that enables reading and writing of information between a storage unit of the information processing apparatus and the portable recording medium. In the case of a magnetic disk, it is a magnetic disk drive, and in the case of an optical disk, it is an optical disk drive. In short, an interface device suitable for each portable recording medium is used depending on the type of the portable recording medium.
[0031]
In the present invention, if the control unit described above further executes a process of sequentially writing the updated usage information on a portable recording medium each time the usage information is updated, the portability is always maintained during use of the information transfer unit. The latest usage information is written on the recording medium. Therefore, even if the portable storage medium is mistakenly removed during use and the usage information in the storage unit is erased, the latest usage information before the erasure is left in the portable storage medium, In the next use, the use information can be reflected.
[0032]
Alternatively, before erasing the usage information from the storage unit, the control unit may execute a process of determining whether to write the usage information before erasure on the portable recording medium. This allows the user to select the use information in the portable recording medium when he or she does not want to change it from the state before use.
More specifically, a determination is made as to whether or not the usage information before erasure is to be written to a portable recording medium by a display on a display, a sound from a speaker, or the like.
[0033]
Further, when the control unit recognizes the attachment of the portable recording medium to the interface device or the connection to the storage unit, it initializes the storage unit (deletes the usage information in the storage unit and restores the state before writing) to the control unit. By executing this, even if the use information of the previous user remains in the storage unit, it can be deleted, so that the use information of the previous user does not leak to the user who should use it now.
[0034]
Further, when the connection of the portable recording medium to the interface device or the connection to the storage unit is recognized, the process of writing the usage information obtained by the previous use written in the portable recording medium to the storage unit is controlled. If it is made to be executed by the section, it is possible to take over the previous use information as it is, and the convenience is further improved. For example, by taking over the bookmark list, any website registered in the bookmark list can be easily accessed without inputting a URL.
[0035]
On the other hand, the IC card system of the present invention includes the information processing device having the above-described configuration, an IC card, and a reader / writer as an interface device for connecting the IC cards.
[0036]
In this system, for example, personal information such as health management information and medical information is recorded on a user-owned IC card, and the IC card is directly brought to a health management institution or a medical institution, so that a specific relationship between a staff member in charge and a doctor or the like can be obtained. And disclose information only to those who receive the necessary services. As a result, an individual user can be a management source / source of information, and an information management system that can eliminate anxiety of information leakage can be constructed.
[0037]
In particular, in the present system, the card information written in the storage unit of the information processing device is erased in accordance with the removal operation of the IC card, so that unintended exchange or unauthorized use of personal information is avoided. And the security level can be further improved.
[0038]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[0039]
(First Embodiment)
FIG. 1 is a block diagram schematically showing a system configuration for realizing the information management method according to the first embodiment of the present invention.
[0040]
The information processing device 1 is a terminal device connected to the communication network 4, and can exchange information with a server or another terminal device. For example, it is a WWW client terminal that can use the Internet via a WWW server. A reader / writer 2 is connected via a USB cable 5 to a connector of the USB (Universal Serial Bus) standard provided in the information processing apparatus 1, for example. An IC card 3, which is a portable recording medium, is detachably attached to the reader / writer 2, and the reader / writer 2 functions as an interface device that enables exchange of information between the IC card 3 and the information processing device 1. .
It is assumed that the interface device includes a device that is connected to the information processing device wirelessly.
[0041]
The configuration of the information processing device 1 will be specifically described. The information processing device 1 mainly includes a control unit 7 and, for example, a hard disk 6 as a storage unit.
[0042]
The hard disk 6 stores an information management program 8 for executing the flow of FIG. Further, the usage information of the WWW browser A, which is an information transfer means for browsing, searching, and transmitting various information, and the usage information of another type of WWW browser B, respectively, are used information file groups F1, WWW for the WWW browser A, respectively. It is stored as a browser B usage information file group F2.
[0043]
Although not shown in the hard disk 6 in FIG. 1, the WWW browser A and the WWW browser B are also stored in the hard disk 6. Alternatively, it may be stored on a hard disk different from the hard disk 6. Of course, the information management program 8 may be stored in a hard disk different from the hard disk 6.
[0044]
The control unit 7 is a CPU that reads, decodes, and executes instructions of the information management program 8.
[0045]
In addition, although not shown, input means such as a keyboard and a mouse, and output means such as a display, a speaker, and a printer are connected to the information processing apparatus 1.
[0046]
The IC card 3 is, for example, a non-contact type IC card having no external terminal, and is placed and set on the reader / writer 2, and exchanges information with the reader / writer 2 by radio waves.
[0047]
Prior to use of the information processing apparatus 1, the administrator of the information processing apparatus 1 stores the information management program 8 in advance from, for example, a CD-ROM (Compact Disc Read Only Memory) in which the information management program 8 is stored. Install on the hard disk 6. After the installation, the administrator activates the information management program 8 and sets the operating system of the information processing apparatus 1 so as to be resident in the main memory (not shown). As a result, the information management program 8 is automatically started without a user's operation, triggered by a certain event (attachment of the IC card 3 to the reader / writer 2 as described later).
[0048]
Then, the administrator hands out the IC card 3 to the users, and each user attaches his / her own IC card 3 to the reader / writer 2 connected to the information processing apparatus 1 and performs the password setting function of the information management program 8. Is used to write the password 10 (see FIG. 1) in the IC card 3 of the user.
[0049]
Next, an execution process of the information management program 8 will be described with reference to a flowchart of FIG. The control unit 7 reads an instruction of the information management program 8 resident in the main memory and executes a process described below.
[0050]
After the process is started in step S1, in subsequent steps S2 and S3, whether the IC card 3 is mounted on the reader / writer 2 is automatically detected.
Specifically, the control unit 7 periodically outputs a polling signal via the reader / writer 2.
[0051]
If the IC card 3 is attached to the reader / writer 2 and is electrically connected to the information processing apparatus 1, the IC card 3 can receive the polling signal via the reader / writer 2 and control the communication enable signal. Reply to part 7. By receiving the communication enable signal, the control unit 7 authenticates that the IC card 3 is mounted on the reader / writer 2 and that a data link has been established between the IC card 3 and the hard disk 6.
[0052]
In the following step S4, the control unit 7 reads directories of all installed WWW browsers A and B based on the information in the registry 9 in the hard disk 6, and stores usage information of the WWW browsers A and B. Initialization is performed to delete the WWW browser A usage information file group F1 and the WWW browser B usage information file group F2 in the directory in which they are located.
[0053]
By this step S4, even if the use information of the previous user remains in the hard disk 6, the use information does not leak to the user who is going to use it now. An example in which the usage information of the previous user remains on the hard disk 6 is a case where the user uses the information processing apparatus 1 without using the IC card 3.
[0054]
In a succeeding step S5, it is checked whether or not the usage information is written in the semiconductor memory in the IC card 3. As shown in FIG. 1, if the use information (use information file group f1 for WWW browser A, use information file group f2 for WWW browser B) obtained by the previous use is written, the information is displayed on the display of the information processing apparatus 1. To display the password input screen.
[0055]
In subsequent step S6, the user inputs a password, and in subsequent step S7, control unit 7 compares the input password with password 10 recorded in IC card 3 in advance. If they match, the process proceeds to step S8. As a result, it is possible to confirm whether the user is a valid owner of the IC card 3, and it is possible to prevent, for example, improper use by impersonating the valid owner.
[0056]
In step S8, the control unit 7 reads the WWW browser A usage information file group f1 and the WWW browser B usage information file group f2 recorded in the IC card 3 from the IC card 3 via the reader / writer 2, and Write (copy) to the directory in the hard disk 6 in which the usage information of the browser A and the WWW browser B is stored.
[0057]
At this time, depending on the type of the WWW browser (that is, whether it is the WWW browser A or the WWW browser B), in which directory in the hard disk 6 the usage information of each of the WWW browsers A and B is written, the control unit 7 The setting information of the WWW browsers A and B is read from the registry 9, and the usage information file group f1 for the WWW browser A and the usage information file group f2 for the WWW browser B read from the IC card 3 are written in the respective directories. Thus, even when a plurality of WWW browsers are installed in the information processing apparatus 1, it is possible to flexibly cope with differences in types and specifications of each WWW browser.
[0058]
Through the above processing, when using the WWW browsers A and B, the user uses his / her own usage information (use information file group f1 for WWW browser A, WWW browser B) when he / she used WWW browsers A and B before. Each of the WWW browsers A and B can be used in a state in which the usage information file group f2) is taken over as it is, and can be used with good convenience. For example, it is possible to use the bookmark list registered for the user as it is, and to obtain the advantage that the trouble of inputting a URL can be omitted, and the re-input of previously input information can be omitted.
[0059]
If no use information is written in the IC card 3 at step S5 (for example, at the time of first use), the process from step S6 to step S8 is not performed, and the process proceeds to step S9. move on.
[0060]
When the user changes the usage information of the WWW browsers A and B using the WWW browsers A and B (for example, by communicating with the WWW server), the information of the WWW browsers A and B stored in the hard disk 6 is changed. Usage information is also changed. That is, the usage information (the usage information file group f1 for the WWW browser A and the usage information file group f2 for the WWW browser B) copied from the IC card 3 to the hard disk 6 is used as the new usage information (the usage information file group for the WWW browser A). F1 and the usage information file group for WWW browser B F2).
[0061]
In step S9, the use information (use information file group F1 for WWW browser A, use information file group F2 for WWW browser B) in the hard disk 6 is converted into the use information (use information file group f1 for WWW browser A f1) in the IC card 3. It is checked whether the information has been updated from the WWW browser B use information file group f2).
[0062]
If the information has been updated, in step S10, the updated usage information (the usage information file group F1 for WWW browser A and the usage information file group F2 for WWW browser B) is transmitted to the IC card via the reader / writer 2. 3 is written (copied). The writing of the update information to the IC card 3 is sequentially performed every time the usage information in the hard disk 6 is updated. Therefore, during use, the latest use information is always stored in the IC card 3 with the update of the use information in the hard disk 6.
[0063]
When the control unit 7 recognizes that the IC card 3 has been removed from the reader / writer 2 in step S11 after the user has finished using the information, the use information (for the WWW browser A The use information file group F1 and the use information file group F2 for WWW browser B are automatically deleted, and the process ends (step S13).
The control unit 7 periodically outputs the polling signal as described above, and the IC card 3 is detached from the reader / writer 2 (out of the communicable range with the reader / writer 2), and is output from the IC card 3. If the communication enable signal cannot be received within a predetermined time, the control unit 7 recognizes that the IC card 3 has been removed from the reader / writer 2.
[0064]
As described above, according to the present embodiment, in the information processing apparatus 1 that is shared and used by a plurality of users, before a certain user uses the information, the personal information of the previous user is identified. When the IC card 3 is removed from the reader / writer 2 after the use is completed, the use information stored in the hard disk 6 in the previous use is deleted. Personal information can be securely prevented from being leaked. Further, since it is not necessary to turn off the power of the information processing apparatus 1, convenience is not impaired.
[0065]
In addition, the user can centrally store and hold the use information obtained by the use up to now in the IC card 3, and if the information processing apparatus 1 can use the IC card 3, In any case, highly convenient usage reflecting the usage information obtained so far can be achieved. Further, by holding the usage information in the IC card 3, unauthorized reading or falsification becomes difficult, and furthermore, high-speed exchange of the usage information with the information processing apparatus 1 is enabled.
[0066]
Also, every time the usage information in the hard disk 6 is updated, the updated usage information is written to the IC card 3 sequentially, so that the IC card 3 is erroneously removed from the reader / writer 2 during use. Even if the usage information in the hard disk 6 is erased, the latest usage information before the erasure can be held in the IC card 3.
[0067]
Further, the above-described processing can be realized by merely installing the information management program 8, and the programs of the WWW browsers A and B do not need to be changed at all, so that they can be easily applied to existing information processing apparatuses.
[0068]
(Second embodiment)
Next, a second embodiment of the present invention will be described.
FIG. 3 shows a flowchart of the information management method according to the second embodiment.
The hardware configuration is the same as that of the first embodiment shown in FIG. 1, and the processing up to step S8 in the flowchart shown in FIG. 3 is the same as that of the first embodiment.
[0069]
In the present embodiment, the updated usage information is not written in the IC card 3 until before the determination of whether or not the IC card 3 has been removed in step S9 '.
[0070]
Then, when it is recognized in step S9 'that the IC card 3 has been detached, in the process of step S10', for example, a selection is made as to whether or not the usage information in the hard disk 6 is to be written on the display to the IC card 3. Give a display. Alternatively, the selection may be notified by voice. In response, if the user selects to write, the usage information in the hard disk 6 is written to the IC card 3 in step S11'A, and if the user selects not to write, the usage information in the hard disk 6 is determined in step S11'B. Is not written on the IC card 3.
[0071]
After the processing in step S11'A or S11'B, the use information in the hard disk 6 is automatically deleted in step S12, and the processing ends (step S13).
[0072]
In the first embodiment, if the usage information in the hard disk 6 is updated, the usage information in the IC card 3 is forcibly rewritten with the updated usage information. Therefore, for example, even if a certain website registered in the bookmark list is accidentally deleted, the usage information is determined to be updated, and the IC card 3 does not include the bookmark that does not include the accidentally deleted website. The list is written as the latest usage information. In the second embodiment, it is possible to give the user the option of writing the usage information in the hard disk 6 to the IC card 3 or not, and to have a degree of freedom in the user's usage.
[0073]
(Third embodiment)
Next, a third embodiment of the present invention will be described.
FIG. 4 shows a reader / writer 22 according to the third embodiment.
This embodiment is different from the first embodiment in that an information management program 8 and a control unit 7 for executing the information management program 8 are provided in a reader / writer 22. Other hardware configurations and processing flows are the same as those of the first embodiment. Alternatively, the processing flow of the second embodiment can be applied to the processing flow.
[0074]
(Fourth embodiment)
Next, a fourth embodiment of the present invention will be described.
FIG. 5 shows an IC card 23 according to the fourth embodiment.
This embodiment is different from the first embodiment in that an IC card 23 is provided with an information management program 8 and a control unit 7 for executing the information management program 8. The information management program 8 is stored in the semiconductor memory 11 in the IC card 3 together with the user authentication password 10 and the usage information f1 and f2 copied from the hard disk 6. Other hardware configurations and processing flows are the same as those of the first embodiment. Alternatively, the processing flow of the second embodiment can be applied to the processing flow.
[0075]
(Fifth embodiment)
Next, an embodiment of the IC card system of the present invention will be described.
[0076]
For example, with the increase in lifestyle-related diseases and the high interest in dieting, there are many opportunities to handle such information and the risk of information leakage is high. There is a high demand from users that only want to disclose In order to cope with such a flow, a system in which an individual manages information and transmits information from the individual while selecting a data disclosure partner and a quality / quantity of the information is required.
[0077]
In general, a general fitness club often writes basic values such as a user's physical strength measurement, weight, and blood pressure on a personal chart by hand. In recent years, the number of clubs in which fitness clubs manage personal information of users on a server has increased rapidly. The programs proposed at fitness clubs have been enriched, and in addition to the results and advice / suggestions for programs that have been exercised only within the fitness club as in the past, the idea of total health care has recently been incorporated into Many clubs consider exercise and advice / suggestions on their daily diet as a key point of differentiation.
[0078]
However, in a conventional server-managed SI service system in which the above services are provided using the Internet network, there is a danger of information being hacked because personal information management is based on a server. Leads to higher. In addition, in a situation where various troubles related to information leakage have occurred, more and more users are worried about this server management type SI service system.
[0079]
Therefore, in the present embodiment, the personal data of the user is recorded in one IC card, and the user carries the IC card himself / herself, for example, to store information such as a personal computer (PC) anywhere inside or outside the fitness club. If there is a processing device, it will be possible to read and write user information and bring the IC card to the exclusive counselor of the club or the doctor of the medical institution, and in the presence of the user, The card record data is disclosed so that necessary advice or consultation can be obtained.
[0080]
In the example shown in FIG. 6, the user owns an IC card 33 recording the user's own health management information, medical information, etc., directly to a fitness club 34, a hospital / medical institution 35, or the like. Various advices, suggestions, consultations, drug prescriptions, and the like are received based on the data recorded therein.
[0081]
FIG. 7 shows the configuration of the IC card 33 and the information processing apparatus 1 connected thereto via the reader / writer 2. In the drawings, parts corresponding to those in the above-described first embodiment are denoted by the same reference numerals, and detailed description thereof will be omitted.
[0082]
The IC card 33 according to the present embodiment includes a use information file group f1 for information system A and a use information file group f2 for information system B.
Here, the information system A corresponds to, for example, a service providing system relating to cardholder health management information, and the information system B corresponds to, for example, a service providing system relating to cardholder medical information.
In addition to the above, an information system use information file group used for another service providing system may be provided.
[0083]
(Usage example 1)
The IC card 33 also has a function as a membership card or a facility use certificate for the fitness club 34, and is also used for entry / exit management in the facility. The values measured by the physical strength measuring instrument used in the facility, the time of using the physical strength increasing instrument or equipment such as the pool, and daily meal intake data are recorded on the IC card 33. It should be noted that weakly confidential information such as facility entry / exit management data may be displayed on the card surface by rewrite printing.
[0084]
Referring to FIG. 6, when the user receives necessary advice from an exclusive counselor in fitness club 34, the user uses his / her own health management information recorded on IC card 33 via information processing device 1 used by the counselor. Disclose. Since the information is disclosed only to the counselor at hand, the information is not leaked to a third party.
[0085]
In addition, since the information management program 8 according to the present invention described in the above-described first embodiment is stored in the IC card 33 (FIG. 7), the information processing apparatus 1 reads out the card information. For example, the control unit 7 causes the control unit 7 to execute the processing procedure shown in the flowchart as shown in FIG. Therefore, when the consultation with the counselor is completed and the IC card 33 is removed from the reader / writer 2, all the user personal information copied to the hard disk 6 of the information processing device 1 is deleted from the hard disk 6. As a result, use of personal information that is not intended by the user can be avoided, and security of the card information can be ensured.
[0086]
(Usage example 2)
Next, a use case between a home of a lifestyle-related disease patient represented by diabetes and the like and a medical institution will be described.
The IC card 33 also has a function as a consultation ticket for the medical institution 35. The data to be recorded on the IC card 33 include various measured values (blood sugar level, blood pressure, body weight, etc.) at home until the next visit to the hospital, meal intake data, daily exercise calorie consumption, and the like. Then, bring the IC card 33 on which the data is recorded to the medical institution 35, and receive an appropriate diagnosis / advice based on the data while checking the data on the monitor of the information processing device 1 together with the doctor at the time of an inquiry. Becomes possible. At this time, if the recorded data can be displayed as a transition graph by year, month, etc., it is possible for a patient with a lifestyle-related disease requiring long-term treatment to easily recognize the progress of the treatment.
[0087]
What is recorded on the IC card 33 is medical information, and data that has been entered in a health handbook or the like is recorded on a highly secure IC card. Moreover, if the user removes the IC card 33 from the reader / writer 2 after receiving a doctor's consultation / advice, all the personal data in the information processing device 1 is erased, thereby ensuring the security of the user's personal information. can do.
[0088]
In this use example, it is also possible to record the doctor's diagnosis data and prescription data on the IC card 33. Therefore, in the present embodiment, a memory area in which only a doctor or a pharmacist can write information and a user can view only is provided separately in order to perform appropriate medical care. A specific example will be described with reference to FIG.
[0089]
8A to 8D show a memory area defined in a part of the memory space in the IC card 33. These memory areas can be read and written only by a user who is a patient and cannot be accessed by a doctor and a pharmacist, and a block A can be read and written by a user but can only be read by a doctor and cannot be accessed by a pharmacist. ), A block C (Block Set C) that only the doctor can read and write, and the user and the pharmacist can only read, and a block D (Block Set D) that the doctor and the pharmacist can read and write but the user can only read.
[0090]
In block A, data such as the user's daily blood sugar level and weight are recorded. When going out, the user selects data to be disclosed to the doctor in block A and writes it in block B. Block A and block B may be configured as a common block. Next, the doctor writes the diagnostic data in the block C while obtaining the information of the block B disclosed at the time of the examination. The pharmacist writes prescription data in block D while obtaining information in block C.
[0091]
In this way, by sharing or segregating information regarding medical data among doctors, pharmacists, and users, it is possible to ensure appropriate medical treatment. For example, a non-contact IC card “FeliCa” (trademark) manufactured by Sony Corporation can be configured as such a memory space.
[0092]
As described above, the IC card system according to the present embodiment constructs the SI service system in which the user himself / herself manages / transmits information, so that the following effects can be obtained.
-Individuals are responsible for managing data, but it is possible to configure an information management system that can eliminate the fear of information leakage for users.
-Compared with the conventional mainstream server management type system, the system can be constructed with low initial cost and low maintenance cost.
・ Compared with the server management type system, the information is distributed to each IC card and the high security function by the encryption specific to the IC card makes the system more secure / reliable against information leakage. Can be constructed.
-In a server management type system, there are many major obstacles in expanding the use range of the system. However, in a system that records and manages data in an IC card as in the present embodiment, the data recorded in the IC card is stored in the IC card. An environment for reading and writing information can be easily constructed.
[0093]
(Other usage examples)
Information about health / medical care is highly useful when the user carries such personal information.
For example, considering a case in which a transfer was made due to relocation, etc., a PC or reader / writer 2 that has data already recorded on the IC card at the medical institution before the transfer and allows the reader / writer 2 to be connected to the medical institution to which the transfer has been made. If you have a PC and download software for browsing from the web, or if the software is pre-installed in the IC card, you can easily browse the detailed medical information of the user in the IC card on the monitor It becomes possible.
In the future, if a PDA (Personal Digital Assistant) or a mobile phone has a built-in reader / writer unit, data can be browsed, updated / added at the transfer destination. As a result, the range of use can be further expanded.
[0094]
Although the embodiments of the present invention have been described above, the present invention is, of course, not limited to these, and various modifications can be made based on the technical idea of the present invention.
[0095]
In the second embodiment, when the IC card 3 is removed, the selection display and the selection of writing or not writing the usage information to the IC card 3 are performed. The selection may be performed each time the usage information in the hard disk 6 is updated while the IC card 3 is in the mounted state.
Alternatively, when recognizing the removal of the IC card 3, the control unit 7 compares the usage information in the hard disk 6 with the usage information in the IC card 3 and only uses the usage information in the IC card 3 when the usage information is different. A determination may be made as to whether to rewrite the usage information in the hard disk 6.
[0096]
In the IC card system described in the fifth embodiment, a system for a fitness club and a medical institution has been described. However, the present invention is not limited to this, and may be, for example, an insurance company or a health insurance union. For example, the use can be extended to various institutions or organizations that provide services corresponding to the user's personal information.
[0097]
【The invention's effect】
As described above, according to the present invention, the use information in the storage unit is automatically erased by recognizing the removal of the portable recording medium attached at the time of use, instead of the power-off operation. . Therefore, leakage of personal information can be prevented without impairing the convenience of the user, and the user can use the shared information processing device without any burden and with peace of mind.
Furthermore, by writing the usage information before erasure on a portable recording medium and retaining it, the next use can take over the previous usage information written on the portable recording medium and use it. Is even more convenient.
[0098]
On the other hand, according to the IC card system of the present invention, it is possible to construct an information management system in which an individual user can be a management source / source of information and an uneasiness of information leakage can be eliminated.
[Brief description of the drawings]
FIG. 1 is a block diagram schematically showing an overall system configuration for implementing an information management method according to a first embodiment of the present invention.
FIG. 2 is a flowchart of an information management method according to the first embodiment.
FIG. 3 is a flowchart of an information management method according to a second embodiment of the present invention.
FIG. 4 is a block diagram showing an internal configuration of an interface device (reader / writer) according to a third embodiment of the present invention.
FIG. 5 is a block diagram showing an internal configuration of a portable recording medium (IC card) according to a fourth embodiment of the present invention.
FIG. 6 is a conceptual diagram of an IC card system of the present invention described as a fifth embodiment of the present invention.
FIG. 7 is a system configuration diagram according to a fifth embodiment of the present invention.
FIG. 8 is a configuration diagram of a memory space of an IC card used in a fifth embodiment of the present invention.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 ... Information processing device, 2, 22 ... Interface device (reader writer), 3, 23, 33 ... Portable recording medium (IC card), 5 ... USB cable, 6 ... Storage part (hard disk), 7 ... Control part ( CPU), 8 ... information management program, 11 ... memory, A, B ... information transfer means (WWW browser), f1, f2, F1, F2 ... usage information.

Claims (31)

An information processing apparatus comprising: an information transfer unit; and a storage unit for storing use information of the information transfer unit, and capable of reading and writing the use information between a portable recording medium that is detachably connected and the storage unit. A device,
It is characterized by comprising a control unit capable of recognizing the attachment / detachment of the portable recording medium and executing a process of deleting the usage information from the storage unit when recognizing the removal of the portable recording medium. Information processing device. The information processing apparatus according to claim 1, wherein the control unit executes a process of writing the updated usage information to the portable recording medium each time the usage information is updated. The method according to claim 1, wherein the control unit executes a process of determining whether to write the usage information before erasure on the portable recording medium before erasing the usage information from the storage unit. An information processing apparatus according to claim 1. The information processing apparatus according to claim 1, wherein the control unit executes a process of initializing the storage unit when recognizing the mounting of the portable recording medium. The information according to claim 1, wherein the control unit executes a process of writing the usage information written on the portable recording medium to the storage unit when the control unit recognizes the attachment of the portable recording medium. Processing equipment. The information processing apparatus according to claim 1, wherein the portable recording medium is an IC card. Connected to an information processing apparatus including an information transfer unit and a storage unit in which usage information of the information transfer unit is stored;
A portable recording medium is detachable, an interface device that allows reading and writing of the usage information between the storage unit and the portable recording medium,
An interface device, comprising: a control unit that executes a process of deleting the usage information from the storage unit when the portable recording medium is removed. The interface device according to claim 7, wherein the control unit executes a process of writing the updated usage information to the portable recording medium each time the usage information is updated. The method according to claim 7, wherein the control unit executes a process of determining whether to write the usage information before erasure on the portable recording medium before erasing the usage information from the storage unit. The interface device as described. 8. The interface device according to claim 7, wherein the control unit executes a process of initializing the storage unit when recognizing the mounting of the portable recording medium. The interface device according to claim 7, wherein the control unit executes a process of writing usage information written on the portable recording medium to the storage unit when the control unit recognizes the attachment of the portable recording medium. . The interface device according to claim 7, wherein the portable recording medium is an IC card. A process of recognizing whether or not a portable recording medium is connected to a storage unit in which usage information of the information transfer unit is stored;
An information management method for causing a control unit to execute a process of deleting the usage information from the storage unit when recognizing a disconnection of the portable recording medium connected to the storage unit. 14. The information management method according to claim 13, further comprising causing the control unit to execute a process of sequentially writing the updated usage information to the portable recording medium every time the usage information is updated. The method according to claim 13, further comprising, before erasing the usage information from the storage unit, causing the control unit to execute a process of determining whether to write the usage information before erasure to the portable recording medium. Information management method described. 14. The information management method according to claim 13, wherein the control unit causes the control unit to execute a process of initializing the storage unit when recognizing that the portable recording medium is connected. 14. The control unit, when recognizing that the portable recording medium is connected, causes the control unit to execute a process of writing the user information written on the portable recording medium to the storage unit. Information management method described in. A process of recognizing whether or not a portable recording medium is connected to a storage unit in which usage information of the information transfer unit is stored;
An information management program for causing the control unit to execute a process of deleting the usage information from the storage unit when recognizing a disconnection of the portable recording medium connected to the storage unit. The information management program according to claim 18, wherein the control unit causes the control unit to execute a process of sequentially writing the updated usage information to the portable recording medium every time the usage information is updated. 19. The information management according to claim 18, wherein before the use information is erased from the storage unit, the control unit executes a process of determining whether to write the use information before erasure on the portable recording medium. program. 19. The information management program according to claim 18, wherein the information management program causes the control unit to execute processing for initializing the storage unit when recognizing that the portable recording medium is connected. 19. The information management according to claim 18, further comprising, upon recognizing that the portable recording medium is connected, causing the control unit to execute a process of writing the usage information written on the portable recording medium to the storage unit. program. A process of recognizing whether or not a portable recording medium is connected to a storage unit in which usage information of the information transfer unit is stored;
A recording medium storing an information management program for causing a control unit to execute a process of deleting the usage information from the storage unit when recognizing that the portable storage medium connected to the storage unit is disconnected. 24. The recording medium according to claim 23, wherein an information management program for causing the control unit to execute a process of sequentially writing the updated usage information to the portable recording medium every time the usage information is updated is recorded. Before erasing the usage information from the storage unit, an information management program for causing the control unit to execute a process of determining whether to write the usage information before erasure on the portable recording medium is recorded. 24. The recording medium according to 23. 24. The recording medium according to claim 23, wherein an information management program for causing the control unit to execute a process of initializing the storage unit when recognizing that the portable recording medium is connected is recorded. An information management program for causing the control unit to execute a process of writing the usage information written on the portable recording medium to the storage unit when recognizing that the portable recording medium is connected, is recorded. 24. The recording medium according to 23. An IC card system comprising: an IC card; an information processing device; and a reader / writer connected between the IC card and the information processing device for reading information recorded on the IC card or writing information to the IC card. And
The information processing device,
A storage unit for storing personal information read from the IC card;
A control unit that is capable of recognizing attachment / detachment of the IC card to / from the reader / writer and executing a process of deleting the personal information from the storage unit when recognizing removal of the IC card. IC card system. 29. The IC card, wherein an information management program for causing the control unit to execute a process of recognizing the removal of the IC card and deleting the personal information from the storage unit is stored in the IC card. 2. The IC card system according to 1. The IC card system according to claim 28, wherein the personal information is health management information of an owner of the IC card. 29. The IC card system according to claim 28, wherein the personal information is medical information on an owner of the IC card.

Images