JP2005038089A - Personal information management system and method, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To reduce a user's labor of entering or writing personal information at registration. <P>SOLUTION: Personal information is stored in advance in a center device 10. At a registration to a service provider, the center device 10 is requested to issue an access code for necessary attribute information, and the user of a user terminal 20 verbally notifies the access code to the service provider. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a personal information management system, method, and program for managing personal attribute information registered at a site or a real-world registration window.
[0002]
[Prior art]
In recent years, with the spread of Web technology, users have more opportunities to apply for service provision to service providers online. Here, the user registers personal information for each service site via the network. However, at the time of registration, it is necessary for the user to input individual attribute information and teach it to the service site, and it takes time to input each service site.
[0003]
Depending on the application, a paper application form may be submitted at the store, and an offline application is still required. When applying for service at the service provider's counter, it is necessary to fill in the application form. It is. In addition, an expensive OCR (Optical Character Reader) needs to be installed on the storefront side in order to input the description content of the application form into the registration system.
[0004]
Regardless of whether the registration is online or offline, it is troublesome for the user to input or fill in personal information, and this troublesomeness becomes a barrier to acquiring new customers for the service provider.
[0005]
Further, when providing a service to a user at a service site on a network or a store in the real world, the service provider may have to confirm attribute information such as the user's age and gender. In a normal confirmation operation, an attribute is confirmed by first authenticating the individual and referring to the attribute information of the individual after the authentication.
[0006]
In such a step, the attribute information necessary for the service provider side is only limited contents such as age and gender. However, since the service provider side needs to receive personal information necessary for personal authentication in addition to directly necessary attribute information, personal information may be leaked when management is inappropriate.
[0007]
On the other hand, as another means, when a user terminal accesses a service site via a connection provider to the Internet, there is a form in which an authentication service is provided to the service site at the gateway of the connection provider. In this case, the connection provider provides an authentication by anonymous ID and a charging / commodity shipping mechanism, but there is no mechanism for providing anonymous attribute information to the service site.
[0008]
In addition, there exist the following patent documents 1-3 in the prior art document information relevant to the above prior arts. Patent Document 1 describes a technique for matching an anonymous user with a service based on user attribute information registered in advance and a user selection condition on the service side in a mediation service (paragraph). [0012]). Patent Document 2 discloses a technique in which a user issues a ticket that guarantees an attribute to a third-party organization, an anonymous user transmits the ticket to a server, and the server performs access control (paragraph). [0006] and [0007]). Patent Document 3 performs settlement and product shipment for an anonymous virtual person, and discloses a technique in which a third party manages correspondence management between a virtual person and a real person (see paragraph [0009]). .
[0009]
[Patent Document 1]
JP 2002-169986 A
[0010]
[Patent Document 2]
JP 2002-132730 A
[0011]
[Patent Document 3]
JP 2002-123633 A
[0012]
[Problems to be solved by the invention]
As described above, in the conventional personal information management system, at the time of registration, the user has to input or fill in for each service provider. On the other hand, on the service provider side, such trouble becomes a barrier to acquiring new customers, and when offline, it is necessary to install an expensive OCR device for registration.
[0013]
On the service provider side, after registration, it is necessary to strengthen management more than necessary to prevent leakage of personal information.
[0014]
Further, as another means, there is no mechanism for providing anonymous attribute information to the service site even when a connection provider is used.
[0015]
The technologies described in Patent Documents 1 to 3 described above are in the following situations. The technique described in Patent Document 1 is in a situation where a matching user discloses unnecessary attribute information when unnecessary contents are set in the user selection condition on the service side. The technique described in Patent Document 2 is in a situation where the user places a heavy burden because the user makes a ticket issuance request or transmission. Although the technique described in Patent Document 3 is a virtual person, cookie data that can more accurately identify one individual is collected on the site side (see paragraph [0091]), so unnecessary direct mail is transferred to the virtual person. There is a risk of receiving the same disadvantage as when the attribute information of a real person is collected, such as receiving it at an IC terminal.
[0016]
According to the inventor's examination based on the above, it is possible to register the attribute information with less effort such as exchanging a simple code between the service provider and the user, particularly in the registration work in the real world. Is desirable. In particular, it is only necessary to obtain the minimum attribute information of the user when viewed from the service provider, and provide the minimum attribute information when viewed from the user, but provide personal information that can identify the individual. You just have to do it.
[0017]
The present invention has been made in view of the above circumstances, and an object of the present invention is to provide a personal information management system, method, and program that can reduce the trouble of inputting or filling in personal information by a user at the time of registration.
[0018]
Another object of the present invention is to provide a personal information management system, method, and program capable of preventing unnecessary attribute information from being provided to a service provider.
[0019]
Still another object of the present invention is to provide a personal information management system, method and program that can reduce the burden of managing personal information on the service provider side.
[0020]
Another object of the present invention is to provide a personal information management system, method, and program capable of providing anonymous attribute information to a service provider in a connection provider.
[0021]
[Means for Solving the Problems]
1st invention is the personal information management system which consists of a center apparatus, a user terminal, and a registration system. The center device issues a personal information storage means for storing a plurality of attribute information for each personal ID, and an access code related to attribute information permitted to be provided by setting from the user terminal. Access code issuing means for notifying the user terminal of the received access code, and attribute information providing means for providing the corresponding attribute information to the registration system based on the access code received from the registration system. . The user terminal includes provision attribute information setting means for setting attribute information permitting the provision in the center apparatus, and access code output means for outputting an access code notified from the center apparatus. The registration system includes an access code transmission unit that transmits an input access code to the center device, and a registration unit that registers attribute information provided from the center device.
[0022]
The second invention is a personal information management system comprising a gateway device, a user terminal and a site device. The gateway device includes a personal information storage unit that stores a plurality of attribute information for each personal ID, and a provision attribute table that indicates whether or not provision is possible for each attribute information related to the personal ID by setting from the user terminal. Provided attribute table storage means, ID table storage means for storing an ID table that associates an arbitrary ID with the personal ID by access from the user terminal, and from the user terminal to the site When accessing an apparatus, an ID table including an arbitrary ID and an individual ID is written in the ID table storage means, and an ID transmitting means for transmitting the arbitrary ID to the site apparatus, and an optional presented from the site apparatus And attribute information providing means for referring to the ID table and the provided attribute table based on the ID and providing the corresponding attribute information to the site device. When receiving an arbitrary ID from the gateway device, the site device includes attribute information requesting means for presenting the arbitrary ID to the gateway device and requesting the gateway device for attribute information that can be provided.
[0023]
(Function)
In the first invention, by taking the above-mentioned means, personal information is stored in the center device in advance, and an access code to necessary attribute information is issued to the center device when registering with the service provider. Since the user of the user terminal verbally notifies the service provider of the access code, it is possible to reduce the trouble of inputting or filling in the personal information by the user at the time of registration. Further, since the access code is issued in association with the attribute information permitted to be provided by the user, provision of unnecessary attribute information to the service providing side can be prevented. Furthermore, since the personal information is managed by the center device, the burden of managing personal information on the service providing side can be reduced.
[0024]
In the second invention, personal information is stored in the gateway device in advance, and when registering with the service provider, the gateway device issues an access code to the required attribute information and notifies the service provider. A trader can provide anonymous attribute information to the service provider.
[0025]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings, but before that, an outline of the present invention will be described. As shown in FIG. 1, a center apparatus 10 that performs user authentication and provision of attribute information is provided. The portable terminal 20 registers attribute information in the center device 10 by a user operation. Thereafter, at the time of registration at the site or the store, the mobile terminal 20 is authenticated by the center device 10 and then sets the center device 10 to permit the provision of desired attribute information to the site or store. .
[0026]
As a result of the setting, the center apparatus 10 notifies an access code for accessing the permitted attribute information or an anonymous ID. As a notification method, there are a case of notifying the site directly from the center apparatus 10 and a case of displaying a code on the user's mobile terminal 30 and verbally notifying the store. Sites and stores can acquire attribute information with access codes, but cannot acquire information that identifies individuals.
[0027]
When the site or store registration system 30 requires attribute information, the site or store registration system 30 presents an access code to the center apparatus 10 and acquires necessary attribute information. The setting of the attribute information that is permitted to be provided is not limited to registration at a site or the like, but may be performed at any time before registration.
[0028]
In any case, the site or the store can acquire the attribute information permitted by the user from the center device 10. Thereby, since the site and the store can provide an appropriate service to an appropriate user, the quality of the service is improved. In addition, when a registration procedure is required, the user can save the trouble of inputting or filling in the attribute information because the site or the store acquires the attribute information instead. As a result, barriers to use registration are reduced, so an increase in users can be expected.
[0029]
Next, each embodiment having the above outline will be described.
(First embodiment)
FIG. 2 is a schematic diagram showing the configuration of the personal information management system according to the first embodiment of the present invention. In this personal information management system, the center apparatus 10 can be accessed from both the mobile terminal 20 of the user (applicant) and the registration system 30 of the storefront. The center device 10, the mobile terminal 20, and the registration system 30 can be realized by a combination configuration of hardware and software. However, the portion configured by software is each for realizing the corresponding function. A program for each of the devices 10, 20, and 30 is implemented by being installed in advance from the storage medium or the network to the computers of the devices 10, 20, and 30. The same applies to the following embodiments.
[0030]
Here, the center device 10 includes a personal information storage device 11, an access code table storage device 12, an access code issuing unit 13, and an attribute information providing unit 14.
[0031]
As shown in FIG. 3, the personal information storage device 11 has a personal information table in which attribute information (name, address, work place, work address, etc. in the example of FIG. 3) is associated with each user ID (personal ID). t1 is recorded. Note that the attribute information is not limited to the example of FIG. 3, and for example, a gender, age, native language, an anonymous ID of a representative user for indicating the same family can be used as appropriate.
[0032]
As shown in FIG. 4, the access code table storage device 12 stores an access code table t2 in which an access code and its expiration date are associated with the contents of the personal information table t1. An entry in the access code table t2 is added when the applicant sets an attribute provided from the mobile terminal 20. In the entry, an access code necessary for access by the store registration system 30 and an expiration date of the access code are recorded. When the registration system 30 accesses after the expiration date, the attribute information is not provided. That is, even if an access code issued at a certain point is leaked, it cannot be used if the expiration date has passed. The expiration date is at most several minutes after issuance. In addition to this, a user ID for linking to personal attribute information and a flag indicating whether to provide (true) or not (false) are recorded for each attribute item.
[0033]
The access code issuing unit 13 has a function of issuing an access code related to attribute information permitted to be provided by a setting from the mobile terminal 20 and a function of notifying the mobile terminal 20 of the obtained access code. The setting contents and the access code are recorded in the access code table t2.
[0034]
The attribute information providing unit 14 refers to the access code table t2 based on the access code received from the registration system 30 and checks the access code and the attributes that can be provided. It has a function of taking out from the storage device 11 and providing it to the registration system 30.
[0035]
The portable terminal (user terminal) 20 includes a provision attribute information setting unit 21 and an access code display unit 22 in addition to a normal computer function.
[0036]
The provided attribute information setting unit 21 has a function for setting attribute information permitting provision to the access code issuing unit 13 and having the access code issued. As shown in FIG. 5, the setting screen 21g1 displayed on the mobile terminal 20 displays attribute information registered for each individual and a check box for designating attribute information permitted to be provided. When setting is performed and the “provide” button is pressed, a setting completion screen 21g2 is displayed and an access code is displayed. The access code is an alphanumeric code of at most about 10 characters so that the applicant can easily communicate verbally to the store counter.
[0037]
The access code display unit 22 has a function for outputting the access code notified from the center device 10 to the display screen of the mobile terminal 20.
[0038]
The registration system 30 includes an access code input unit 31, a registration unit 32, and an application form printing unit 33.
[0039]
The access code input unit 31 has a function for inputting an access code that is transmitted verbally by the applicant.
[0040]
The registration unit 32 has a function of requesting attribute information by transmitting the access code input from the access code input unit 31 to the center device 10 and a function of registering attribute information provided from the center device.
[0041]
The application form printing unit 33 has a function of printing an application form in which necessary items (attribute information) are already written on the form based on the attribute information registered in the registration unit 32. The printed application form has only to be signed or stamped by the applicant.
[0042]
Next, the operation of the personal information management system configured as described above will be described with reference to the activity diagram of FIG.
In step S1, the shop counter tells the applicant who wishes to register the attribute information (for example, name, address, office, etc.) necessary for registration verbally (or in writing).
[0043]
In step S <b> 2, the applicant accesses the access code issuing unit 13 of the center apparatus 10 from the provided attribute information setting unit 21 on the portable terminal 20. Here, the center apparatus 10 authenticates that the accessing person is a user who has been registered in the center by a predetermined authentication technique. As the authentication technique here, a well-known authentication method such as password input can be used as appropriate. When the user ID of the accessor is acquired by the authentication, the access code issuing unit 13 of the center device 10 reads the attribute information corresponding to the user ID from the personal information storage device 11 and sets the provided attribute information on the portable terminal 20 Reply to part 21. The provided attribute information setting unit 21 displays the setting screen 21g1 of FIG. 5 on the screen of the mobile terminal 20 based on the returned attribute information.
[0044]
In step S3, the applicant selects attribute information to be provided on the setting screen 21g1, based on the attribute information necessary for registration, and presses the “provide” button. As a result, the setting result is transmitted to the access code issuing unit 13 of the center apparatus 10.
[0045]
In step S4, the access code issuing unit 13 issues a random and unique access code, and records the setting result in the access code table t2 in association with the access code. In the expiration date of the access code table t2, the date and time after a certain time (a few minutes to 10 minutes at most) is recorded as the expiration date. The access code issuing unit 13 returns the access code to the provided attribute information setting unit 21 on the mobile terminal 20.
[0046]
In step S5, the access code received from the center apparatus 10 is displayed on the access code display unit 22 on the portable terminal 20 as shown in the design completion screen 21g2 in FIG. The applicant transmits the access code to the employee at the registration window.
[0047]
In step S <b> 6, the employee inputs an access code to the access code input unit 31 of the registration system 30.
In step S <b> 7, the access code input unit 31 accesses the attribute information providing unit 14 of the center apparatus 10 via the registration unit 32. At this time, mutual authentication is performed between the center apparatus 10 and the registration system 30 using a known technique.
[0048]
In step S8, after authentication, the registration unit 32 presents an access code to the attribute information providing unit 14 and requests attribute information.
[0049]
In step S9, the attribute information providing unit 14 verifies that the access code is valid by comparing the presented access code with the access code table t2. The confirmation contents are that the access code exists in the access code table t2, that it is within the expiration date, and the like. If it is valid, the attribute information permitted to be presented is read from the personal information storage device 11 and returned to the registration unit 32 based on the recorded contents of the access code table t2.
[0050]
In step S10, the registration unit 32 performs provisional registration of the applicant based on the attribute information. Here, since not all information necessary for registration is transmitted from the center apparatus 10, the shortage information is left blank.
[0051]
In step S11, the application form printing unit 33 embeds information in the registration form based on the registered contents, and prints out the application form. The application form is delivered from the employee to the applicant.
[0052]
In step S12, the applicant confirms the contents of the printed registration form, fills in if necessary, fills it, and submits it to the window with a seal (in some cases, a self-signed signature). .
[0053]
In step S13, if there is additional information to be input, the employee inputs it to the registration unit 32, confirms that the seal has been made, and confirms the registration content. The registration form is managed separately as application documentation.
[0054]
As described above, according to the present embodiment, personal information is stored in the center device 10 in advance, and when registering with the service provider, the center device 10 issues an access code to necessary attribute information, Since this access code is displayed on the mobile terminal 20 and notified from the applicant to the employee at the storefront, it is possible to reduce the trouble of inputting or filling in the personal information by the applicant at the time of registration.
[0055]
Further, since the access code is notified from the applicant to the employee, there is no need to provide a special interface for the portable terminal 20 and the registration system 30 to exchange, and a general-purpose portable terminal 20, such as a cellular phone, can be used. It is simple.
[0056]
Furthermore, since an access code is issued in association with attribute information permitted to be provided by the applicant, provision of unnecessary attribute information to the service providing side can be prevented. In other words, the applicant can freely set personal information to be provided to the storefront using the provided attribute information setting unit 21 when listening to the attribute information necessary for registration at the window.
[0057]
The access code exchange between the portable terminal 20 and the registration system 30 may be performed via a communication interface such as infrared or wireless.
Further, since the access code issuing unit 13 issues an access code for the setting contents, different settings can be made for each registration system 30. That is, it is possible to set so that only the minimum necessary personal information is provided for each storefront.
[0058]
Furthermore, by setting an expiration date in the access code, after the registration in the registration system 30, the access code can be invalidated to prevent unauthorized acquisition of attribute information.
[0059]
A technique similar to the technique of setting an expiration date for an access code in the present embodiment is a single sign-on authentication system. As shown in FIG. 7, the single sign-on generally includes an authentication server 1, a client terminal (Web browser) 2, and a Web server 3. The user accesses the authentication server 1 using the client terminal 2 and acquires the authentication code. The authentication code is a timed code and is valid only for a certain period after issuance. When the client terminal 2 accesses the server device 3, the authentication code is presented, and the server device 3 presents the authentication code to the authentication server 1 to acquire user attribute information. The above is the mechanism of single sign-on.
[0060]
The single sign-on and this embodiment have a relationship in which the center device 10 corresponds to the authentication server 1, the registration system 30 corresponds to the server device 3, and the mobile terminal 20 corresponds to the client terminal 2. . However, the known single sign-on and this embodiment are different in the following points (1) and (2).
[0061]
(1) Single sign-on assumes that the exchange between the client terminal 2 and the server device 3 is online. In this embodiment, this part can be performed off-line and is performed verbally between the applicant and the window.
[0062]
(2) If the server device 3 acquires the authentication code, the attribute information can be freely acquired from the authentication server 1. In the present embodiment, the applicant can set attribute information that can be acquired from the center apparatus 10 by the shop front desk at that time.
[0063]
As described above, the well-known single sign-on and this embodiment are greatly different particularly in the point (2). This embodiment is superior to single sign-on because it is not necessary to provide unnecessary attribute information to the service provider according to (2) above.
In addition, since the registration system 30 includes the application form printing unit 33, it is possible to print the application form in which information to be entered has already been entered, and to save the user from having to fill in the application form.
[0064]
Furthermore, since the center apparatus 10 manages personal information, the burden of managing personal information on the service providing side can be reduced.
[0065]
(Second Embodiment)
Next, a personal information management system according to the second embodiment of the present invention will be described with reference to FIG. 1, but redundant description in the same configuration as described above will be omitted.
[0066]
This embodiment is a modification of the first embodiment, and has a configuration in which a user's attribute can be confirmed in a store.
Specifically, in the present embodiment, in the same configuration as the first embodiment, the personal information storage device 11 of the center device 10 includes the personal information table t1 including the information self-reported by the user. In addition, as shown in FIG. 8, a guarantee attribute table t3 is stored that includes information that the center (the manager or the center apparatus 10) has confirmed the validity of the information.
[0067]
Here, the guarantee attribute table t3 records a flag for each personal attribute item of the personal information table t1, and the true item indicates that the center has confirmed the attribute value separately. The False item is based on the self-report information of the user and indicates that the information is not guaranteed by the center. The center device 10 registers the attribute information, such as whether or not the child is a minor, in the personal information storage device 11 after confirming the attribute information by another means when the center user is registered.
[0068]
In the example of FIG. 8, for example, it is assumed that a user discloses work and age attributes to a store. In this case, when the store requests attribute information from the center device 10, in step S9 in FIG. 6, the attribute information providing unit 14 refers to the personal information table t1 and the guaranteed attribute table t3 in the personal information storage device 11, and the center device. Return with flag only for age guaranteed by 10 and return with no flag for occupation.
[0069]
In addition, since it is only necessary to confirm the attribute of the applicant on the store side, the registration unit 32 only needs to have a function for inquiring the attribute to the center apparatus 10, and the application form printing unit 33 is not necessary. As a result, the registration system 30 in FIG. 2 can be operated on the portable terminal 20 of the store clerk.
[0070]
As described above, according to the present embodiment, in addition to the effects of the first embodiment, the store can obtain correct attribute information guaranteed by the center apparatus 10 by the inquiry function.
[0071]
Supplementally, for example, when the user's age is to be confirmed at a restaurant or the like, the necessary attribute information can be confirmed by an access code (anonymous ID) as described above. Since the contents of the information are guaranteed, the store can know accurate attribute information.
[0072]
Note that if this embodiment is performed by the conventional technique, application of a conventional method such as storing attribute information in an IC card or the like and presenting the attribute information may be considered. However, the prior art is not preferable because personal information is disclosed when confirming that the IC card itself is the subject. On the other hand, since this embodiment uses an access code when confirming that the mobile terminal 20 is the person's own, the attribute information can be provided to the store without disclosing personal information.
[0073]
Further, according to the present embodiment, the store acquires only the attribute information by the inquiry function and does not need to know the personal information of the user, so there is no need to take the risk of leakage of personal information. Further, in the case of attribute confirmation, the registration system 30 on the store side only needs to have an inquiry function, and can be realized by a simple device such as a mobile phone.
[0074]
(Third embodiment)
FIG. 9 is a schematic diagram showing a configuration of a personal information management system according to the third embodiment of the present invention. The same parts as those in the above-mentioned drawings are denoted by the same reference numerals, detailed description thereof is omitted, and different here. The part is mainly described. In the following embodiments, the same description is omitted.
[0075]
This embodiment is a modification of the first or second embodiment, and is configured to provide the minimum necessary attribute information at a service site on the network (online), not at an actual store (offline). ing.
[0076]
Specifically, instead of the center device 10 described above, as shown in FIG. 9, a gateway device 10b similar to the center device 10 is used.
[0077]
Here, the gateway device 10b is managed by a provider connected to the Internet, and includes an attribute information storage device 11b, an access code table storage device 12b, a provision attribute information setting unit 13b, an attribute information provision unit 14, and an authentication unit 15. And an access relay unit 16.
[0078]
As shown in FIGS. 3 and 8, the attribute information storage device 11b stores a personal information table t1 and a guarantee attribute table t3. In the personal information table t1, attribute information self-reported by the user is registered for each user ID at the time of applying for the gateway service. In the guaranteed attribute table t3, true is set for an attribute item confirmed by the gateway company among registered attribute items, and false is set for an unconfirmed attribute item.
[0079]
The access code table storage device 12b stores an access code table for the service site 30b to access attribute information. Unlike the table t2 of FIG. 4 described above, the access code table is a general term for two tables, a provision attribute table t4 and an anonymous ID table, as shown in FIGS. 10 (a) and 10 (b).
[0080]
The provision attribute table t4 records the availability of provision to the service site 30b for each attribute item related to the user ID. In the anonymous ID table t5, the expiration date of the anonymous ID, the user ID, and the site name are recorded for each anonymous ID that is issued when accessing the service site 30b. The anonymous ID may be an arbitrary ID that cannot identify the user ID. For example, an access code, a random number code, a session ID, and the like can be applied. Unlike the access code described above, the anonymous ID is not transmitted verbally. Therefore, it may be a long code that is difficult for humans to speak.
[0081]
The provided attribute information setting unit 13b provides the service site 30b with the function of setting the personal information table t1 in the attribute information storage device 11b in advance and the attribute information of the personal information table t1 according to the setting from the user terminal 20b. A provision attribute table t4 indicating availability is stored in the access code table storage device 12b.
[0082]
The attribute information providing unit 14 refers to the anonymous ID table t5 and the provided attribute table t4 based on the anonymous ID presented from the service site 30b, and sets the attribute information that can be provided in the user ID related to the anonymous ID as attribute information. It has a function of inquiring the storage device 11b and providing corresponding attribute information to the service site 30b. The provided attribute information is based on the guaranteed attribute table t3 of the attribute information storage device 11b, and the information guaranteed by the gateway device 10b is flagged, so that the service site 30b side has objectively valid attribute information. Can be distinguished from attribute information by self-reporting by the user.
[0083]
The authentication unit 15 has a function of authenticating the user terminal 20 b under the control of the access relay unit 16 and notifying the access relay unit 16 of the authentication result.
[0084]
The access relay unit 16 relays access from the user terminal 20b to the service site 30b and a response from the service site 30b to the user terminal 20b. When the authentication unit 15 authenticates the user terminal 20b, A function of generating an anonymous ID for access, a function of recording the anonymous ID in a pair with the user ID in the anonymous ID table t5 via the authentication unit 15, and a function of presenting the anonymous ID and accessing the gateway device 10b I have.
[0085]
The user terminal 20b is equipped with a general-purpose browser function 23. When applying for a service of the gateway device 10b, the user terminal 20b sets personal attribute information to the gateway device 10b via the browser function 23 by a user operation. Has function.
[0086]
The browser function 23 has a function of displaying the setting screen data received from the provision attribute information setting unit 13b when the personal attribute information is set by accessing the provision attribute information setting unit 13b. FIG. 11 shows the layout of the setting screen 23g1. Already registered attribute information is displayed on the setting screen 23g1, and unregistered information can be input. In the example of FIG. 11, registered information is displayed for attribute information from name to age, and attribute information such as personal preference and hobby is an input field for the user to input. For each attribute information, there is a check box for setting availability / non-availability to the service site 30b. When the user registers and presses the provision button, the setting content is transmitted to the provision attribute information setting unit 13b and recorded in the provision attribute table t4.
[0087]
The service site 30b is realized by a server device (site device) that operates the site, and includes an attribute information acquisition unit 34 and a service provision unit 35.
[0088]
The service providing unit 35 has the same function as a server application in an existing Web service site, and accesses the attribute information providing unit 14 of the gateway device 10b using the attribute information acquiring unit 34 when user attribute information is required. And has the function of presenting the user's anonymous ID and the type of attribute requested.
[0089]
Next, the operation of the personal information management system configured as described above will be described with reference to the activity diagram of FIG.
After setting the provided attributes, the user accesses the service site 30b from the browser function 23 in step S20. At this time, the browser function 23 is connected to the access relay unit 16 of the gateway device 10b.
[0090]
In step S <b> 21, the access relay unit 16 authenticates the user using the authentication unit 15. The user authentication here can be realized with existing technology. Generally, a user's terminal device is authenticated. If the user's usage ID is acquired as a result of the authentication, an anonymous ID is issued and recorded in the anonymous ID table t5 in step S22 when accessing the service site 30b.
[0091]
Here, the anonymous ID may be one ID for the user or may be different for each service site 30b. Different IDs may be used for each access. In the case of one ID for the user, the anonymous ID table t5 is searched before ID numbering, and if there is an anonymous ID corresponding to the user ID, the anonymous ID is used. Similarly, in the case of each service site, the anonymous ID table t5 is searched by limiting the user and the service site, and if there is an anonymous ID, the anonymous ID is used. In the case of each access, a new ID is issued regardless of the search result of the anonymous ID table t5.
[0092]
In step S23, the access relay unit 16 presents the anonymous ID, connects to the service providing unit 35 of the service site 30b, and requests a predetermined service. The service providing unit 35 is a normal Web application and provides a service to the browser function 23.
[0093]
If the service site 30b needs user attribute information, the attribute information is requested from the attribute information acquisition unit 34 in step S24. In step S25, the attribute information acquisition unit 34 presents the anonymous ID presented from the gateway device 10b, and requests an attribute value from the attribute information providing unit 14 of the gateway device 10b.
[0094]
In step S26, the attribute information providing unit 14 compares the anonymous ID table t5 with the presented anonymous ID and confirms that the anonymous ID is valid. After confirmation, the anonymous ID is converted to the user ID, and in step S27, the requested attribute values are extracted from the personal information table t1 and the guaranteed attribute table t3 of the personal information storage device 11b, and the guaranteed attribute value of the gateway device 10b is obtained. Reply with a flag.
[0095]
As a result, the service providing unit 35 can obtain a necessary attribute value through the attribute information acquiring unit 34 in step S28.
[0096]
As described above, according to the present embodiment, in addition to the effects of the first or second embodiment, personal information is stored in advance in the gateway device 10b, and the necessary attribute information is obtained when registering in the service site 30b. Since the gateway device 10b issues an anonymous ID as an access code and notifies the service site 30b, anonymous attribute information can be provided to the service provider in the connection provider.
[0097]
On the other hand, the service site 30b only needs to add an attribute acquisition function to an existing service site when acquiring attribute information from the gateway device 10b. At this time, the service site 30b does not unilaterally acquire individual attribute information, but can only acquire attributes that the user has permitted by the provided attribute information setting unit 13b.
[0098]
Further, on the service site 30b side, the attribute information guaranteed by the gateway contractor can be confirmed when the attribute information such as age and gender is confirmed. As a result, the service site 30b automatically selects an anonymous or real name user's attribute (eg, age-restricted service site, female-only chat service site, page corresponding to the user's native language). The service site that is displayed in) can be operated smoothly. Further, it is preferable that the usage fee of the service site 30b varies depending on the attribute information of the user (for example, family discount) because accurate attribute information can be grasped.
[0099]
Supplementally, the conventional service site has a disadvantage that it is not possible to confirm whether or not the attribute information included in the personal information is correct because the user can easily register attribute information such as false age and sex. In addition, in a service such as a conventional mobile phone, the user's anonymous ID is taught to a service site that provides content, and the usage fee is settled. Such a conventional service site cannot be operated using attribute information because there is no means for knowing individual attribute information and no means for grasping a parent-child relationship between users. In addition, as a method of knowing attribute information in the prior art, there is the single sign-on described above, but the configuration of data exchange is complicated as shown in FIG.
[0100]
On the other hand, since this embodiment is a configuration in which the gateway device 10b that also functions as a center device (authentication server) relays access as shown in FIG. 13, it is possible to simplify the system configuration compared to single sign-on. Further, since the attribute information is guaranteed, the reliability of the attribute information can be improved.
[0101]
In this embodiment, the user terminal 20b can use the general-purpose browser function 23 as it is. For this reason, it is possible to ensure compatibility with conventional user terminals and service sites.
[0102]
(Fourth embodiment)
FIG. 14 is a schematic diagram showing the configuration of a personal information management system according to the fourth embodiment of the present invention.
This embodiment is a modification of the third embodiment, and is configured such that the user terminal 20b can set a combination of attribute information that is permitted to be provided and the service site 30b that is the provision destination. Specifically, the service site is divided into groups, and attribute information for which provision is permitted is set for each group. As the grouping, the gateway device 10c may allocate the service site in advance, or the user may sequentially allocate the site to the group. That is, grouping is performed in accordance with the degree of reliability of the service provided by the service site and the quality of the service. The user sets in advance which attribute information is provided for each group. A user may be able to disclose attribute information that can identify an individual to a service site of a highly reliable group in some cases.
[0103]
Here, in the personal information management system shown in FIG. 14, in addition to the system configuration of the third embodiment, the gateway device 10c includes a newly provided site group table storage device 17 and a partially modified access code table storage device. 12c, a partially modified provision attribute information setting unit 13c, and a partially modified attribute information provision unit 14c.
[0104]
As shown in FIG. 15, the site group table storage device 17 records a site group table t6 indicating the correspondence between service sites and groups.
[0105]
In addition to the above-described anonymous ID table t5, the access code table storage device 12c stores a provision attribute table t4c to which group items are added as shown in FIG.
[0106]
The provided attribute information setting unit 13b has a function of setting the attribute information provided for each group in the provided attribute table t4c using the setting screen 23g2 shown in FIG. 17 according to the setting from the user terminal 20b.
[0107]
The attribute information providing unit 14c can provide the attribute information requested by the service site 30b to the group to which the service site 30b belongs based on the site group table t6 and the provided attribute table t4c in addition to the function of the unit 14 described above. Only the attribute information is provided to the service site 30b.
[0108]
Specifically, the attribute information providing unit 14c has a function of examining a group to which the service site 30b belongs based on the site group table t6 after authentication of the service site 30b when there is an inquiry of attribute information from the service site 30b. This group has a function of checking that the anonymous ID is valid by collating the anonymous ID presented from the service site 30b with the user ID known from the anonymous ID table t5 against the provided attribute table t4c. The processing after confirmation is the same as in the third embodiment.
[0109]
According to the configuration described above, in addition to the effects of the third embodiment, the user can set the attribute information to be disclosed for each group, not for each service site, by the provided attribute information setting unit 13c. It is. Thereby, the setting for providing the minimum required information for each service site can be simplified.
[0110]
The gateway device 10c can provide attribute information by distinguishing between a reliable service site and a low-reliability service site by using the attribute information providing unit 14c and the site group table t6. For example, even if you say “service site”, the official service site guaranteed by the Internet service provider and other official service sites have different reliability for service site operation, but you can provide attribute information by distinguishing such sites. .
[0111]
Further, on the user side, more information may be provided depending on the reliability of the service site 30b. In this case, the user terminal 20b can also provide information for specifying an individual only for a service site of a specific group by changing the disclosed attribute information for each group. As a result, for example, it is possible to save the trouble of inputting the name and address in the user registration of a highly reliable service site. In addition, in the case of a limited user interface such as a mobile device, it is desirable that settings for each service site be completed in advance, and access can be made without setting when accessing the service site. It is also suitable when the mobile device is the mobile terminal 20b.
[0112]
(Fifth embodiment)
FIG. 18 is a schematic diagram showing the configuration of a personal information management system according to the fifth embodiment of the present invention.
This embodiment is a modification of the third or fourth embodiment, and is configured such that the user side can confirm the provided attribute information and the service site of the providing destination as a log.
Specifically, by using the attribute information providing unit 14d that has been partially changed, the log function unit 18d2 records which attribute information is provided to which service site in the attribute providing log storage device 18d1, and provides the provided attribute. The information confirmation unit 19 allows the user to confirm. In the case where only attribute information that cannot identify an individual is provided, it is not always necessary to record in a log. Therefore, a certain standard may be set by the gateway device 10b, and a logic such as logging may be realized only when the name, address, etc. are included in the provided attribute information.
[0113]
Note that FIG. 18 shows only functions related to log management. Actually, this is realized by providing the elements 14d, 18d1, 18d2, and 19 in the gateway apparatus 10d of FIG. 18 as the elements in the gateway apparatuses 10b and 10c of the third or fourth embodiment. Because of the high nature, only the functions related to logs are shown in FIG.
[0114]
The attribute information providing unit 14d logs the attribute information provided by executing the log function 18d2 when returning the attribute information to the service site 30d in addition to the same functions as the above-described units 14b and 15c. The log function 18d2 records log information in the attribute providing log storage device 18d1.
[0115]
As shown in FIG. 19, in the attribute providing log storage device 18d1, log information including a user ID, a site name (site ID), a providing date, and a provided attribute value is recorded by the log function 18d2.
[0116]
Upon receiving a log confirmation request from the user terminal 20d, the provided attribute information confirmation unit 19 authenticates the user terminal 20b using, for example, an existing authentication technique, and when the authentication is completed, the user acquired from the log confirmation request A user log is acquired from the attribute providing log storage device 18d1 using the ID as a search key, and a confirmation screen 23g3 in FIG. 20 is displayed on the browser function 23.
[0117]
The confirmation screen 23g3 displays a provision date, provided attribute items, and attribute values as a list for each service site. Note that attribute values are not necessarily required. However, when attribute values are changed, the attribute values provided for each service site may differ, and may be displayed on the screen.
[0118]
According to the above configuration, in addition to the effects of the third or fourth embodiment, the user can easily grasp what attribute information is provided to which service site. Thereby, it becomes easy to change or delete personal information.
[0119]
Further, since the log information of the attribute information is managed by the gateway device 10b, the service site does not need to add any new functions.
[0120]
In addition, conventionally, when using a service site on the network, user registration may be required. As a result, you will be registering your attribute information on various service sites, but over time, you often forget what you registered on which service site. . For this reason, conventionally, there arises a problem that even if it is desired to delete personal information from the service site or there is a change in the attribute content, it cannot be deleted or changed. Conventionally, means for managing registered personal information is not provided for service sites distributed on a network, and the above problem cannot be solved.
[0121]
However, according to the present embodiment, the log information can be confirmed, and the registered attribute information can be deleted / changed for each service site.
[0122]
The method described in each of the above embodiments is a program that can be executed by a computer, such as a magnetic disk (floppy (registered trademark) disk, hard disk, etc.), an optical disk (CD-ROM, DVD, etc.), a magneto-optical disk ( MO), and can be stored and distributed in a storage medium such as a semiconductor memory.
[0123]
In addition, as long as the storage medium can store a program and can be read by a computer, the storage format may be any form.
[0124]
In addition, an OS (operating system) operating on the computer based on an instruction of a program installed in the computer from the storage medium, MW (middleware) such as database management software, network software, and the like implement the present embodiment. A part of each process may be executed.
[0125]
Further, the storage medium in the present invention is not limited to a medium independent of a computer, but also includes a storage medium in which a program transmitted via a LAN, the Internet, or the like is downloaded and stored or temporarily stored.
[0126]
Further, the number of storage media is not limited to one, and the case where the processing in the present embodiment is executed from a plurality of media is also included in the storage media in the present invention, and the media configuration may be any configuration.
[0127]
The computer according to the present invention executes each process according to the present embodiment based on a program stored in a storage medium, and includes a single device such as a personal computer or a system in which a plurality of devices are connected to a network. Any configuration may be used.
[0128]
In addition, the computer in the present invention is not limited to a personal computer, but includes an arithmetic processing device, a microcomputer, and the like included in an information processing device, and is a generic term for devices and devices that can realize the functions of the present invention by a program. .
[0129]
Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. Moreover, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, constituent elements over different embodiments may be appropriately combined.
[0130]
【The invention's effect】
As described above, according to the present invention, it is possible to reduce the trouble of inputting or filling in personal information by a user during registration. Also, unnecessary attribute information can be prevented from being provided to the service provider. Furthermore, the burden of managing personal information on the service provider side can be reduced. In addition, in the connection provider, anonymous attribute information can be provided to the service provider side.
[Brief description of the drawings]
FIG. 1 is a schematic diagram for explaining an outline of the present invention.
FIG. 2 is a schematic diagram showing a configuration of a personal information management system according to the first embodiment of the present invention.
FIG. 3 is a schematic diagram showing a configuration of a personal information table in the embodiment.
FIG. 4 is a schematic diagram showing a configuration of an access code table in the embodiment.
FIG. 5 is a schematic diagram for explaining a setting screen in the embodiment.
FIG. 6 is an activity diagram for explaining an operation in the embodiment;
FIG. 7 is a schematic diagram of a general single sign-on for comparing and describing the effects of the embodiment.
FIG. 8 is a schematic diagram showing a configuration of a guarantee attribute table in the second exemplary embodiment of the present invention.
FIG. 9 is a schematic diagram showing a configuration of a personal information management system according to a third embodiment of the present invention.
FIG. 10 is a schematic diagram showing a configuration of a provided attribute table and an anonymous ID table in the embodiment.
FIG. 11 is a schematic diagram for explaining a setting screen in the embodiment.
FIG. 12 is an activity diagram for explaining an operation in the same embodiment;
13 is a schematic diagram of the present embodiment for describing the effects of the embodiment in comparison with FIG. 7. FIG.
FIG. 14 is a schematic diagram showing a configuration of a personal information management system according to a fourth embodiment of the present invention.
FIG. 15 is a schematic diagram showing a configuration of a site group table in the same embodiment.
FIG. 16 is a schematic diagram showing a configuration of a provision attribute table in the same embodiment;
FIG. 17 is a schematic diagram for explaining a setting screen in the embodiment;
FIG. 18 is a schematic diagram showing a configuration of a personal information management system according to a fifth embodiment of the present invention.
FIG. 19 is a schematic diagram for explaining log information in the attribute provision log storage device according to the embodiment;
FIG. 20 is a schematic diagram for explaining a confirmation screen in the embodiment.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 10 ... Center apparatus, 11, 11b ... Personal information storage device, 12, 12b, 12c ... Access code table storage device, 13, 13b, 13c ... Access code issuing part, 14, 14c ... Attribute information provision part, 15 ... Authentication part , 16 ... Access relay unit, 17 ... Site group table storage device, 18 d 1 ... Attribute provision log storage device, 18 d 2 ... Log function, 19 ... Provision attribute information confirmation unit, 20, 20b ... Mobile terminal, 21 ... Provision attribute information setting unit , 22 ... access code display part, 23 ... browser function, 30, 30b, 30d ... registration system, 31 ... access code input part, 32 ... registration part, 33 ... application form printing part, 34 ... attribute information acquisition part, 35 ... Service providing unit, t1 ... personal information table, t2 ... access code table, t3 ... guarantee attribute table, t4, t4c ... provided attribute table, t5 ... anonymous ID table, 6 ... site group table.

Claims (24)

A personal information management system comprising a center device, a user terminal and a registration system,
The center device is
Personal information storage means for storing a plurality of attribute information for each personal ID;
An access code issuing means for issuing an access code related to attribute information permitted to be provided by setting from the user terminal, and notifying the obtained access code to the user terminal;
Based on an access code received from the registration system, attribute information providing means for providing the corresponding attribute information to the registration system,
The user terminal is
Providing attribute information setting means for setting attribute information permitting the provision in the center device;
Access code output means for outputting the access code notified from the center device,
The registration system includes:
Access code transmitting means for transmitting the input access code to the center device;
Registration means for registering attribute information provided from the center device;
A personal information management system characterized by comprising: In the personal information management system according to claim 1,
The registration system includes:
Based on the attribute information provided from the center device, printing means for creating and printing an application form in which the attribute information is entered,
A registration confirmation means for confirming the registration based on a signature or seal applied to the printed application;
A personal information management system characterized by comprising: In the personal information management system according to claim 1 or claim 2,
The center device is
A guarantee attribute table storage means for storing a guarantee attribute table indicating whether or not there is a guarantee for each attribute information related to the personal ID;
The access code is an anonymous ID;
The attribute information providing means, when providing the attribute information to a registration system, based on the guaranteed attribute table, a means for giving a flag to the attribute information with a guarantee;
A personal information management system characterized by comprising: A personal information management system comprising a gateway device, a user terminal and a site device,
The gateway device is
Personal information storage means for storing a plurality of attribute information for each personal ID;
A provision attribute table storage means for storing a provision attribute table indicating whether or not provision is possible for each attribute information related to the personal ID by setting from the user terminal;
An ID table storage means for storing an ID table associating an arbitrary ID with the personal ID by access from the user terminal;
When accessing the site device from the user terminal, an ID table including an arbitrary ID and an individual ID is written in the ID table storage unit, and an ID transmitting unit transmits the arbitrary ID to the site device;
Attribute information providing means for referring to the ID table and the provided attribute table based on an arbitrary ID presented from the site device, and providing the corresponding attribute information to the site device;
The site device is
Upon receiving an arbitrary ID from the gateway device, the arbitrary ID is presented to the gateway device, and attribute information requesting means for requesting the gateway device for attribute information that can be provided;
A personal information management system characterized by comprising: In the personal information management system according to claim 4,
The gateway device is
A guarantee attribute table storage means for storing a guarantee attribute table indicating whether or not there is a guarantee for each attribute information related to the personal ID;
The arbitrary ID is an anonymous ID,
The attribute information providing means, when providing the attribute information to a site device, based on the guarantee attribute table, a means for giving a flag to the attribute information with guarantee,
A personal information management system characterized by comprising: In the personal information management system according to claim 4 or claim 5,
The gateway device is
Site group table storage means for storing a site group table associating the site device with the group;
A group provision attribute table storage means for storing a group provision attribute table associated with the provision attribute table for each group according to the setting from the user terminal;
Attribute information group providing means for referring to the ID table and the group providing attribute table based on an arbitrary ID presented from the site device and providing the corresponding attribute information to the site device;
A personal information management system characterized by comprising: In the personal information management system according to any one of claims 4 to 6,
The gateway device is
Log storage means for storing an attribute providing log including a site ID, a personal ID, and provided attribute information when providing attribute information to the site device;
Log providing means for providing an attribute providing log to the user terminal based on a personal ID corresponding to the user terminal in response to an inquiry from the user terminal;
A personal information management system characterized by comprising: A personal information management method between a center device, a user terminal and a registration system,
The center device storing a plurality of attribute information for each personal ID in advance;
The user terminal setting attribute information permitting the provision in the center device;
The center device issuing an access code related to the attribute information permitted to be provided by setting from the user terminal, and notifying the obtained access code to the user terminal;
The user terminal outputting the access code notified from the center device;
The registration system transmitting the input access code to the center device;
The center device providing relevant attribute information to the registration system based on an access code received from the registration system;
The registration system registering attribute information provided from the center device;
A personal information management method characterized by comprising: In the personal information management method according to claim 8,
The registration system, based on the attribute information provided from the center device, to create and print an application form filled with the attribute information;
The registration system confirming the registration based on a signature or seal applied to the printed application;
A personal information management method characterized by comprising: In the personal information management method according to claim 8 or 9,
The center device storing a guarantee attribute table indicating whether or not there is a guarantee for each attribute information related to the personal ID;
When the center device provides the attribute information to the registration system, a step of providing a flag to the guaranteed attribute information based on the guaranteed attribute table;
A personal information management method characterized by comprising: A personal information management method between a gateway device, a user terminal and a site device,
The gateway device stores a plurality of attribute information for each personal ID in advance,
The gateway device stores a provision attribute table indicating whether or not provision is possible for each attribute information related to the personal ID according to the setting from the user terminal;
The gateway device stores an ID table that associates an arbitrary ID with the personal ID when accessing the site device from the user terminal;
ID transmission means for the gateway device to transmit an arbitrary ID in the ID table to the site device;
When the site device receives an arbitrary ID from the gateway device, presenting the arbitrary ID to the gateway device, and requesting the gateway device for attribute information that can be provided;
The gateway device refers to the ID table and the provided attribute table based on an arbitrary ID presented from the site device, and provides corresponding attribute information to the site device;
A personal information management method characterized by comprising: The personal information management method according to claim 11,
The gateway device storing a guarantee attribute table indicating whether or not there is a guarantee for each attribute information related to the personal ID;
When the gateway device provides the attribute information to the site device, a step of adding a flag to the guaranteed attribute information based on the guaranteed attribute table;
A personal information management method characterized by comprising: In the personal information management method according to claim 11 or 12,
The gateway device storing a site group table associating the site device with a group;
The gateway device stores a group provision attribute table associated with the provision attribute table for each group according to the setting from the user terminal;
The gateway device refers to the ID table and the group provided attribute table based on an arbitrary ID presented from the site device, and provides the corresponding attribute information to the site device;
A personal information management method characterized by comprising: The personal information management method according to any one of claims 11 to 13,
When the gateway device provides attribute information to the site device, storing an attribute providing log including site information, a personal ID, and provided attribute information;
In response to the inquiry from the user terminal, the gateway device provides an attribute providing log to the user terminal based on a personal ID corresponding to the user terminal;
A personal information management method characterized by comprising: A program for operating a computer of the center device used in a personal information management system comprising a center device, a user terminal and a registration system,
The program is
Personal information writing means for writing a plurality of attribute information to the storage device for each personal ID;
An access code issuing means for issuing an access code related to attribute information permitted to be provided by setting from the user terminal, and notifying the obtained access code to the user terminal;
Attribute information providing means for providing the registration system with corresponding attribute information in the storage device based on the access code received from the registration system;
Function the computer as
The access code notified by the access code issuing means is output by the user terminal, and the attribute information provided by the attribute information providing means is registered by the registration system. The program according to claim 15, wherein
Guarantee attribute table writing means for writing a guarantee attribute table indicating whether or not there is a guarantee for each attribute information related to the personal ID in a storage device;
Means for providing a flag to the attribute information with guarantee based on the guarantee attribute table in the storage device when providing the attribute information to the registration system;
A program for causing the computer to function as A program for operating a computer of the user terminal used in a personal information management system comprising a center device, a user terminal and a registration system,
The program is
Providing attribute information setting means for setting attribute information permitting the provision in a storage device of the center device;
An access code output means for outputting an access code notified from the center device;
Function the computer as
The access code notified from the center device is issued by the center device in association with the attribute information set by the provided attribute information setting means, and is used for accessing the center device by the registration system. Program. A program for operating a computer of the registration system used in a personal information management system comprising a center device, a user terminal and a registration system,
The program is
Access code transmitting means for transmitting the input access code to the center device;
Registration means for registering the attribute information provided from the center device in a storage device;
Function the computer as
The access code transmitted by the access code transmitting means is issued by the center device in association with attribute information permitted to be provided in advance from the user terminal. The program according to claim 18, wherein
Print processing means for creating an application form filled with the attribute information and executing print processing based on the attribute information provided from the center device;
Registration confirmation means for confirming registration in the storage device based on a signature or seal applied to the application form that has undergone the printing process;
A program for causing the computer to function as A program for operating a computer of the gateway device used in a personal information management system including a gateway device, a user terminal, and a site device,
The program is
Personal information writing means for writing a plurality of attribute information to the storage device for each personal ID;
A provision attribute table writing means for writing a provision attribute table indicating whether or not provision is possible for each attribute information related to the personal ID to a storage device by setting from the user terminal;
ID table writing means for writing an ID table associating an arbitrary ID with the personal ID into a storage device when accessing the site device from the user terminal;
ID transmitting means for transmitting an arbitrary ID in the ID table to the site device;
Attribute information providing means for referring to an ID table and a provided attribute table in the storage device based on an arbitrary ID presented from the site device, and providing corresponding attribute information in the storage device to the site device;
Function the computer as
The attribute information provided by the attribute information providing means is registered in association with the arbitrary ID in the site device. The program according to claim 20,
Guarantee attribute table writing means for writing a guarantee attribute table indicating whether or not there is a guarantee for each attribute information related to the personal ID in a storage device;
Means for providing a flag to the attribute information with guarantee based on the guarantee attribute table in the storage device when providing the attribute information to the site device;
A program for causing the computer to function as In the program according to claim 20 or claim 21,
Site group table writing means for writing a site group table associating the site device with the group into a storage device;
Group provision attribute table writing means for writing a group provision attribute table in association with the provision attribute table for each group to a storage device by setting from the user terminal;
Attribute information group providing means for referring to an ID table and a group providing attribute table in the storage device based on an arbitrary ID presented from the site device and providing corresponding attribute information in the storage device to the site device;
A program for causing the computer to function as The program according to any one of claims 20 to 22,
The program is
Log writing means for writing an attribute providing log including site information, personal ID and provided attribute information to a storage device when providing attribute information to the site device;
Log providing means for providing an attribute providing log in the storage device to the user terminal based on a personal ID corresponding to the user terminal in response to an inquiry from the user terminal;
A program for causing the computer to function as A program for operating a computer of the site device used in a personal information management system comprising a gateway device, a user terminal and a site device,
The program is
Attribute information requesting means for temporarily storing an arbitrary ID received from the gateway device in a storage device, presenting the arbitrary ID in the storage device to the gateway device, and requesting attribute information that can be provided to the gateway device;
Function the computer as
An arbitrary ID received from the gateway device is set in the gateway device in advance in association with the personal ID of the user terminal and the attribute information that can be provided.

Images