JP2005051671A - Method and system for providing service with subscriber personal information hidden, and telecommunications carrier device and server device used in the system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To protect subscriber personal information while effectively utilizing the personal information stored/managed by a telecommunications carrier for service providing of other carriers. <P>SOLUTION: A system is provided with a telecommunications carrier device 3 for managing subscriber identification information for a telecommunications carrier to uniquely identify a subscriber and personal information about the subscriber, and a server device 7 for providing a subscriber terminal 1 with a specific service. The telecommunications carrier device 3 provides the server device 7 with temporary identification information by which the subscriber can be temporarily identified when the server device 7 provides the subscriber terminal 1 with a service. The server device 7 uses the temporary identification information to receive the providing of corresponding personal information from the telecommunications carrier device 3 and provides the subscriber terminal 1 with a service corresponding to the personal information. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a service providing method and a service providing system that conceal a subscriber's personal information, and a telecommunications carrier device and a server device used in the system, and in particular, the telecommunications carrier relates to its own subscribers to other companies. The present invention relates to a technique suitable for use in a service form in which information is provided to provide an additional service to a subscriber.

  In recent years, with the enhancement of data communication functions for mobile terminals and landline telephones, carriers have provided subscribers' location information and personal information (profile information) such as age, gender, preferences, etc. On the other hand, business models have been rapidly increasing, such as providing information providing services and collecting charges (service usage fees) for services provided by other companies on behalf of other companies. At this time, in order to identify the subscriber's terminal, it is necessary to notify the other company of the identification number corresponding to the telephone number and the telephone number, but for the subscriber who uses the service, the telephone number and Since subscribers are concerned that the service usage history is known to other companies and may be used for other purposes, a mechanism to protect privacy is required.

In the past, telcos have of course signed contracts with providers that provide services so that subscribers' information is not misused, or not directly notified of phone numbers, but also of corresponding identification information. So, measures were taken to prevent leakage of individual subscriber information.
Further, for example, there is a technique as proposed in Patent Document 1 below. That is, in this technology, the provider issues an ID number to the member at the time of contracting, manages ID _P for accessing a virtual store on the Internet in association with the ID number, and manages the member's personal information. The member accesses the virtual store on the Internet using the ID _P issued by the provider by accessing using the ID number.

  In this way, the member's personal information can be protected by using the ID owned by the provider when the member accesses the Internet. In addition, when a member purchases data or goods at the above virtual store, the provider guarantees the identity of the member and guarantees the ability to pay the price, thereby realizing a safe transaction for both the member and the virtual store. it can.

Furthermore, as another technique for maintaining the anonymity of the moving body, there is a technique disclosed in Patent Document 2 below, for example. This technology enables an unauthorized user (an attacker) to identify and track a user of a mobile object when a “permanent ID (mobile object identifier)” is used in mobile communication. For this reason, communication is normally performed using a temporary mobile object identifier (temporary ID) that is updated as needed on the network side. However, a part of communication is blocked by an unauthorized user, and the mobile object side and the network side If the mobile body identifiers do not match and an asynchronous state occurs, the mobile body eventually has to use the “permanent ID” to establish communication. By managing the use of the ID, the anonymity of the moving object can be maintained.
JP 2002-82840 A JP 2000-92572 A

  However, even if the telephone number is not directly notified to other contractors, if the individual subscriber notifies personal information such as the phone number once to other contractors in the process of using the service, the subscriber uses another service. In this case, the other company can identify the use from the same terminal. Therefore, the other company can know the usage history of the service of the individual subscriber. Therefore, other companies can also establish a mechanism for identifying a subscriber of a telecommunications carrier and managing personal information such as the age, gender, preference, action range, service, and past service usage history of the subscriber. There is a problem.

For this reason, the service form in which other companies effectively use the subscriber's personal information held and managed by the telecommunications carrier and provide the subscriber with detailed services according to the personal information is the subscriber and other The threshold is high for both companies, and in contrast to the dissemination and promotion of information technology, the dissemination is not promoted.
Further, in the technique described in Patent Document 1, since the member accesses the virtual store on the Internet using the ID _P owned by the provider, the personal information of the member is not provided to the virtual store, and the personal information is Although protected, the virtual store cannot provide a flexible service using the personal information (for example, age group, gender, hobby, etc.). In other words, this technology is not based on the premise that a provider provides a service by using a member's personal information in a virtual store.

  On the other hand, the technique described in Patent Document 2 uses a temporary ID as a mobile identifier necessary for mobile communication, and manages the use of the temporary ID, thereby generating an asynchronous state with respect to the mobile identifier with the network side. Even so, it is possible to maintain the anonymity of the moving body without using a “permanent ID”, and it is not premised on the provision of services using the personal information of the user of the moving body. The confidentiality of the personal information with respect to a third party (other companies other than the telecommunications carrier that manages the personal information) is not a problem.

  The present invention was devised in view of the above-described problems, and is a service provider other than a telecommunications carrier that manages personal information (profile information) such as subscriber location information, age, gender, and hobbies (other traders). ), However, in a service form in which the personal information is used to provide the subscriber with the service, even if the subscriber receives a service from the other contractor, the other contractor receives a pair of the personal information of the subscriber. To make it possible to protect the personal information while effectively using the personal information of the subscribers owned and managed by the telecommunications carrier for the provision of services of other contractors so that the personal information cannot be managed in association with 1. Objective.

  In order to achieve the above object, a service providing method (Claim 1) for concealing subscriber's personal information according to the present invention comprises a subscriber identification information for uniquely identifying a subscriber by a communication carrier and the subscription. In a service providing system comprising a telecommunications carrier device that manages personal information about a subscriber and a server device that provides a specific service to the subscriber's terminal, the telecommunications carrier device is Temporary identification information for temporarily identifying the subscriber when the service is provided to the terminal of the subscriber is provided to the server device, and the server device is provided with the temporary information provided from the communication carrier device. A service according to the personal information is provided to the terminal of the subscriber upon receiving provision of corresponding personal information from the communication carrier device using the identification information.

  Further, the service providing method for concealing personal information of a subscriber according to the present invention (Claim 2) manages subscriber identification information for uniquely identifying a subscriber by a telecommunications carrier and personal information related to the subscriber. In a service providing system comprising a telecommunications carrier device and a server device that provides a specific service to the subscriber terminal, the server device provides the service to the subscriber terminal. The telecommunications carrier device generates temporary identification information capable of temporarily identifying the subscriber when the server device provides the service to the terminal of the subscriber, and the temporary identification information and the subscriber identification information And the server device is notified of the temporary identification information, and the server device responds from the telecommunications carrier device using the temporary identification information notified from the telecommunications carrier device. Do Receiving a supply of human information is characterized by providing a service corresponding to said individual information to the terminal of the subscriber.

  Furthermore, the service providing system that conceals the personal information of the subscriber of the present invention (Claim 3) manages the subscriber identification information for uniquely identifying the subscriber by the telecommunications carrier and the personal information related to the subscriber. And a server device that provides a specific service to the subscriber's terminal, wherein the carrier device is connected to the subscriber's terminal by the server device. Temporary identification information generating means for generating temporary identification information capable of temporarily identifying the subscriber when providing a service, and the temporary identification information generated by the temporary identification information generating means to the server device And providing temporary identification information providing means to be provided, and the server device receives provision of corresponding personal information from the telecommunications carrier device using the temporary identification information provided from the telecommunications carrier device. It is characterized in that is provided with a service providing means for providing a service corresponding to said individual information to the terminal of the subscriber.

  In addition, a telecommunications carrier apparatus (claim 4) used in a service providing system that conceals the subscriber's personal information according to the present invention includes the subscriber identification information for the telecommunications carrier to uniquely identify the subscriber and the subscription. A device used in a service providing system comprising a telecommunications carrier device that manages personal information relating to a subscriber and a server device that provides a specific service to the subscriber's terminal, the server device comprising: Temporary identification information generating means for generating temporary identification information capable of temporarily identifying the subscriber when the service is provided to the subscriber terminal, and the temporary identification information generated by the temporary identification information generating means Is provided with temporary identification information providing means for providing the information to the server device.

  Furthermore, the server device used in the service providing system concealing the personal information of the subscriber according to the present invention (claim 5) relates to the subscriber identification information for uniquely identifying the subscriber of the communication carrier and the subscriber. A device used in a service providing system comprising a telecommunications carrier device that manages personal information and a server device that provides a specific service to the subscriber's terminal, and is generated by the telecommunications carrier device Temporary identification information receiving means for receiving temporary identification information from the telecommunications carrier device that can temporarily identify the subscriber when the server device provides the subscriber terminal with the service; Using the temporary identification information received by the local identification information receiving means, the corresponding personal information is provided from the communication carrier device, and a service corresponding to the personal information is provided to the subscriber's terminal. Is characterized in that a service providing means for.

  According to the present invention described above, subscriber identification is necessary as information necessary to specify a subscriber when another provider provides a service using personal information managed by the carrier to the subscriber of the carrier. Since temporary identification information is provided to other companies rather than the information itself, other companies can subscribe to what kind of service they previously tried to use when a subscriber of the network operator tried to use the service. Although it is impossible to know identification information such as a telephone number of a user, it is possible to provide a service using personal information managed by a communication carrier.

  Therefore, the telecommunications carrier subscriber does not know the personal information such as the telephone number and identification information of his / her own terminal and the usage history of the past service to other companies (server devices) who operate the server device. Since a service using personal information can be used, the service can be used with peace of mind, and the use of the service is promoted, which contributes to an increase in the revenues of telecommunications carriers and other companies.

  In addition, other companies cannot manage the personal information of the telecommunications carrier subscribers on a one-to-one basis, so it is possible to expect the relaxation of contracts for protecting personal information with telecommunications carriers. Greatly contributes to the popularization and promotion of service forms in which other companies effectively use the personal information of subscribers owned and managed by other companies and provide services to the subscribers.

Embodiments of the present invention will be described below with reference to the drawings.
[A] Description of an Embodiment FIG. 1 is a block diagram showing an example of a service providing system as an embodiment of the present invention. The system shown in FIG. 1 communicates with a terminal 1 of a telecommunications carrier subscriber. A gateway system 2 that connects between a business operator and another service provider (service provider), a service provider device (communication service provider device) 3 that is managed and operated by a communication service provider, and that is operated and managed by another service provider. A service providing server 7 for the subscriber's terminal 1 and a billing system 8 in which a communication carrier collects a service usage fee on behalf of another provider are configured. Reference numeral 9 represents the access network of the subscriber terminal 1. The terminal 1 may be a mobile terminal such as a mobile phone, a notebook personal computer (PC), or a PDA (Personal Digital Assistance), or a fixed terminal such as a desktop PC.

  Here, the gateway system 2 uses a specific URL (Uniform Resource Locator) when a terminal 1 of a telecommunications carrier subscriber tries to use a service of another provider (a website operated and managed by the service provider server 7 for another provider). , Etc., to identify an access request (packet) issued to a service provider server for other vendors (hereinafter simply referred to as “other vendor server”) 7 and forward the access request to the telecommunications carrier apparatus 3. It is equipped with the function to do.

  When the communication carrier device 3 receives the access request, the carrier server 7 sends the subscriber 1 to the subscriber's terminal 1 (hereinafter also referred to as subscriber 1). Information necessary for providing services according to the personal information of the subscriber 1 (information on the location information of the terminal 1, age (layer), gender, hobbies, etc. that cannot be identified by the information alone) In this embodiment, the information (subscriber identification information) that can uniquely identify the subscriber 1 is not provided (notified) to the other vendor server 7, but instead the other vendor server 7 When the service is provided to 1 (when the service of the subscriber 1 is used), the other contractor server 7 generates temporarily valid identification information (temporary ID) that can identify the subscriber 1 and uses this information. 7 to notify

  For this reason, as shown in FIG. 1, the telecommunications carrier apparatus 3 of the present embodiment includes an identification information (ID) management database (DB) 4, an identification information (ID) history database (DB) 5, and profile information (individual Information) A database (DB) 6 is provided, and a subscriber ID conversion unit 31, a temporary ID provision unit 32, and a profile information provision unit 33 are configured as shown in FIG. As shown in FIG. 1, the system includes a temporary ID receiving unit 71 and a service providing unit 72.

  Here, in the telecommunications carrier apparatus 3, the ID management DB 4 records and manages the correspondence between the subscriber ID such as a telephone number and the temporary ID notified to other contractors as shown in FIG. 3, for example. For example, as shown in FIG. 4, the ID history DB 5 is for recording and managing the history of the correspondence relationship between the subscriber ID and the temporary ID assigned in the past by the ID management DB 4. For example, as shown in FIG. 5, the profile information DB 6 includes the subscriber 1's personal information (location information, age (layer), gender, hobbies, etc.) obtained when the subscriber 1 and the communication carrier contract. Information is recorded and managed for each contract telephone number and the like. These DBs 4 to 6 are realized using a recording device such as a hard disk. 3 and 4, information on “payout time”, “expiration date”, and “expiration time” is recorded and managed together with the correspondence between the subscriber ID and the temporary ID. It will be described later.

  Next, the subscriber ID conversion unit (temporary identification information generating means) 31 converts the subscriber ID into a temporary ID that can temporarily identify the subscriber 1 when the other company server 7 provides the service to the subscriber 1. The temporary ID providing unit 32 provides (notifies) the temporary ID to the other vendor server 7, and the profile information (personal information) providing unit 33 receives the temporary ID from the other vendor server 7. In response to a request for personal information, the personal information of the subscriber 1 corresponding to the temporary ID is retrieved from the profile information DB 6 and provided (notified) to the other vendor server 7. Therefore, as shown in FIG. 2, the subscriber ID conversion unit 31 further includes a temporary ID generation unit 31a, an ID association unit 31b, a history recording unit 31c, a service usage fee collection processing unit 31d, and the like. Configured.

  Here, the temporary ID generation unit 31a generates a temporary ID that can temporarily identify the subscriber 1 when the other company server 7 provides the service to the subscriber 1, and the ID association unit 31b , For associating the temporary ID with a subscriber ID (telephone number or the like) (assigning a temporary ID to the subscriber ID), and the corresponding relationship is sequentially stored in the ID management DB 4 as shown in FIG. The temporary ID providing unit 32 notifies only the temporary ID to the other vendor server 7. As the temporary ID, a different ID is generated and assigned to each subscriber 1. The association between the temporary ID and the subscriber ID is later released. For example, (a) when a predetermined period (expiration date) has expired, (b) when the subscriber 1 requests cancellation of the correspondence, (c) the other company server 7 provides the service to the subscriber 1 Can be canceled when completed.

Therefore, as shown in FIG. 2, the ID association unit 31b has the following functions as an ID release unit (association release unit) 311 that releases the association between the temporary ID and the subscriber ID. .
(1) An expiration date is set for the correspondence between the subscriber ID and the temporary ID (the information is recorded and managed in the ID management DB 4 together with the correspondence between the subscriber ID and the temporary ID as shown in FIG. 3, for example) A function as an expiration date ID cancellation unit (expiration date trigger association cancellation unit) 312 that automatically cancels the association upon expiration of the expiration date
(2) Function as a subscriber request ID releasing unit (subscriber request opportunity association releasing unit) 313 for releasing the association between the subscriber ID and the temporary ID in response to a request from the subscriber 1
(3) Function as a service completion detection unit 314 that detects that the provision of service by the other supplier server 7 is completed
(4) Upon completion of service provision detection by the service completion detection unit 314, a service completion ID cancellation unit (service completion trigger association cancellation unit) 315 that cancels the association between the subscriber ID and the temporary ID As the ID canceling unit 311 cancels the association between the subscriber ID and the temporary ID triggered by any of the above, the correspondence between the subscriber ID and the temporary ID, for example, as shown in FIG. The history recording unit 31c is notified of the time (payout time) information to which the relationship is given and the time information for which the relationship has been canceled (expired), and is recorded in the ID history DB 5. Therefore, by referring to the recorded contents of the DB 5, it is possible to specify the subscriber 1 who uses the service of another contractor even after the temporary ID assignment is canceled. The telecommunications carrier can be charged for this.

  Next, for example, as illustrated in FIG. 4, the history recording unit 31 c includes time (payout time) information when the ID association unit 31 a associates a subscriber ID and a temporary ID, and an ID association release unit. The time (expiration time) information when 311 cancels the association is recorded in the ID history DB 5 as history information in association with the subscriber ID and the temporary ID. Note that since the “payout time (information)” is also the starting time of the “expiration date”, for example, by the history recording unit 31b, as shown in FIG. Recorded and managed together with the correspondence with the target ID.

  When the service usage fee collection processing unit 31d receives a service usage fee collection request based on the service usage history of the subscriber 1 from the other company server 7, the service usage fee collection processing unit 31d subscribes based on the recorded contents (history information) of the ID history DB5. For example, when a charge request message including a temporary ID, a service usage period, a service usage fee, etc. is received from another vendor server 7, the temporary ID and A record (subscriber ID) that matches (is searched for) the ID history DB 5 using the service usage period as a key and matches the service usage period specified from the temporary ID and the information of the “payout time” and “expiration time” described above. And billing information necessary for billing (subscriber ID, service usage period, service usage fee, etc.) is sent to the billing system 8 to perform billing processing. It has become way.

The billing system 8 may be a system that collects together with the usage fee of the service provided by the telecommunications carrier to the subscriber 1 (issuance of service usage details, etc.), or is dedicated to collect on behalf of the individual It may be a system.
On the other hand, in the other vendor server 7, the temporary ID receiving unit 71 shown in FIG. 1 receives the temporary ID generated by the communication carrier device 3 from the communication carrier device 3. Reference numeral 72 is a provision for receiving a corresponding personal information from the telecommunications carrier apparatus 3 using the temporary ID received by the temporary ID receiver 71 and providing a service corresponding to the personal information to the subscriber 1. In the present embodiment, a personal information request including the temporary ID received from the communication carrier device 3 is issued to the communication carrier device 3, and the communication carrier device 3 responds to the personal information request. It also has a function as a personal information request / reception unit 721 for receiving transmitted personal information. The other vendor server 7 also has a function of requesting the telecommunications carrier apparatus 3 to collect a service usage fee on behalf of the temporary ID.

The operation of the service providing system of the present embodiment configured as described above (service providing method in which the subscriber's personal information is concealed) will be described in detail with reference to FIGS.
First, as shown in FIG. 6, a telecommunications carrier subscriber uses the terminal 1 to try to connect to the other vendor server 7 in order to access, for example, an information providing site operated by another vendor (other vendor). A connection request addressed to the server 7 is issued). The connection request is received by the gateway system 2, and when the gateway system 2 detects that the connection request is directed to the other vendor server 7 from the destination information (connection destination ID) of the received connection request, the gateway system 2 sends it to the other vendor server 7. Is suspended and the control is left to the communication carrier device 3 (step S1). That is, the gateway system 2 transmits the telephone number of the calling subscriber 1 and the connection destination ID (the IP address and port number of the other vendor server 7 or information for identifying them) to the communication carrier device 3.

  As shown in FIG. 7, when receiving the telephone number and the connection destination ID from the gateway system 2 (step A1), the communication carrier device 3 first refers to the ID management DB 4 and receives the telephone number received in the DB 4 If the telephone number entry does not exist (NO in step A2), a temporary ID is newly generated by the temporary ID generation unit 31a and the ID association unit 31b Corresponding to the telephone number, the history recording unit 31c records the time (payout time) in the ID management DB 4 and the ID history DB 5 (see FIGS. 3 and 4) (step A3).

  Thereafter, the telecommunications carrier apparatus 3 notifies the other vendor server 7 of only the temporary ID through the gateway system 2 by the temporary ID providing unit 32 (step A4). As a result of the search of the ID management DB 4, when the entry of the telephone number received from the gateway system 2 already exists in the ID management DB 4, the communication carrier device 3 selects the temporary ID associated with the telephone number. This is notified to the other vendor server 7 via the gateway system 2 (from the YES route of step A2 to step A4).

  On the other hand, as shown in FIG. 6, when the other vendor server 7 receives the temporary ID by the temporary ID receiving unit 71, the other vendor server 7 uses the function of the personal information request / reception unit 721 of the service providing unit 72 to If there is personal information necessary for providing service to 1, the telecommunications carrier device 3 is requested from the telecommunications carrier device 3 to request the personal information of the subscriber 1 necessary for providing the service using the temporary ID as a key. Receive information (step S2).

  That is, the other company server 7 generates a personal information request message addressed to the telecommunications carrier apparatus 3 by the personal information request / reception unit 721, adds the temporary ID to the message, and transmits the message to the telecommunications carrier apparatus 3. To do. As shown in FIG. 8, when receiving the personal information request message from the other vendor server 7 (step B1), the communication carrier device 3 searches the ID management DB 4 using the temporary ID added to the message as a key. Then, the telephone number of the corresponding subscriber 1 is extracted (step B2), the personal information in the personal information DB 6 specified by the telephone number is extracted and sent to the other vendor server 7 (step B3).

As a result, as shown in FIG. 6, the other company server 7 (service providing unit 72) provides the subscriber 1 with a service corresponding to the personal information of the subscriber 1 received from the telecommunications carrier device 3 (step). S3).
At this time, in the telecommunications carrier apparatus 3, for example, as shown in FIG. 9, has received a request for deleting the correspondence between the temporary ID and the subscriber ID (phone number) from the subscriber 1 (step C 1), It is monitored whether a service provision end notification has been received from another vendor server (step C2), or whether there is a record whose “expiration date” has passed in the ID management DB 4 (step C3). When the service provision by the service provider ends and the other vendor server 7 notifies the communication provider device 3 of the end of the service provision, this is detected by the service completion detection unit 314, and the ID association release unit 311 (service completion opportunity association) The canceling unit 315) cancels the correspondence between the temporary ID and the subscriber telephone number, and the history recording unit 31c records the history information (see FIG. 4) in the ID history DB5. From YES route at Step C2 Step C4).

  Even if the other company server 7 does not notify the completion of the service, the communication carrier device 3 receives the cancellation request from the subscriber 1 (in the case of YES in step C1) or the “expiration date” has passed. In the same manner as described above, the correspondence relationship between the temporary ID and the subscriber telephone number is canceled, and the history information is recorded in the ID history DB 5 (step S3). C4).

  Now, the other company server 7 is used when, for example, using the service of the subscriber 1 with respect to the telecommunications carrier apparatus 3 in order to charge the subscriber 1 for the service usage fee of the telecommunications carrier subscriber 1. A charge request message including a temporary ID, a service use period, a service use fee, and the like is transmitted to the communication carrier device 3 (step S4 in FIG. 6). As shown in FIG. 10, upon receiving this billing message (step D1), the telecommunications carrier apparatus 3 confirms whether or not the service is currently being serviced by the service usage fee collection processing unit 31d (step D2). If it is in the middle (if YES in step D2), the ID management DB 4 is searched using the temporary ID included in the received billing message as a key, and the subscriber telephone number corresponding to the temporary ID is ID managed. The information is extracted from the DB 4 (step D3), and billing information (subscriber telephone number, service usage period, service usage fee, etc.) for the subscriber 1 is transmitted to the charging system 8 (step D5, step S5 in FIG. 6).

  On the other hand, if the service is not in progress (NO in step D2), the telecommunications carrier apparatus 3 (service usage fee collection processing unit 31d) searches the ID history DB 5 using the temporary ID and the service usage period as a key. Then, the corresponding subscriber telephone number is extracted (step D4), and billing information is sent to the charging system 8 (step D5, step S5 in FIG. 6). As a result, a charge for subscriber 1 is made by the communication carrier.

  As described above, according to the present embodiment, it is necessary for another provider to specify the subscriber 1 when providing the service using the personal information managed by the telecommunications carrier to the telecommunications carrier subscriber 1. Since only a temporary ID, which is later released from the corresponding relationship with the subscriber ID, is provided to the other company as a piece of information, when the carrier 1 tries to use the service, Despite being unable to know what service you are trying to use or the ID of subscriber 1, such as the telephone number, you can provide services using personal information managed by the carrier or use the service by the carrier It is possible to collect surcharges.

  Accordingly, the subscriber 1 of the telecommunications carrier uses the service of the other company without paying the other company's service or pays the use fee without knowing the personal information such as the telephone number and identification information of the terminal, the past service use history. Therefore, the service can be used with peace of mind, the use of the service is promoted, and it greatly contributes to an increase in the revenues of telecommunications carriers and other companies. In addition, since it is not possible for other operators to manage the personal information of subscriber 1 of the telecommunications carrier on a one-to-one basis, it is possible to expect the relaxation of contracts for protecting personal information with the telecommunications carrier. It greatly contributes to the spread and promotion of the service form in which other companies effectively use the subscriber's personal information held and managed by the subscriber and provide the subscriber with the service.

[B] Appendix (Appendix 1)
A telecommunications carrier device that manages subscriber identification information for uniquely identifying a subscriber by a telecommunications carrier and personal information related to the subscriber, and a server device that provides a specific service to the terminal of the subscriber In the service providing system with
The network operator device provides the server device with temporary identification information capable of temporarily identifying the subscriber when the server device provides the service to the terminal of the subscriber;
The server device receives provision of corresponding personal information from the telecommunications carrier device using the temporary identification information provided from the telecommunications carrier device, and a service corresponding to the personal information to the terminal of the subscriber A service providing method that conceals subscriber personal information.

(Appendix 2)
A telecommunications carrier device that manages subscriber identification information for uniquely identifying a subscriber by a telecommunications carrier and personal information related to the subscriber, and a server device that provides a specific service to the terminal of the subscriber In the service providing system with
When the server device provides the service to the subscriber's terminal, the telecommunications carrier device
Generating temporary identification information capable of temporarily identifying the subscriber when the server device provides the service to the terminal of the subscriber;
Corresponding the temporary identification information and the subscriber identification information,
Notifying the server device of the temporary identification information,
The server device receives provision of corresponding personal information from the telecommunications carrier device using the temporary identification information notified from the telecommunications carrier device, and provides a service corresponding to the personal information to the terminal of the subscriber A service providing method that conceals subscriber personal information.

(Appendix 3)
The communication carrier device sets an expiration date for the association between the subscriber identification information and the temporary identification information, and automatically cancels the association when the expiration date expires, A service providing method that conceals the personal information of the subscriber.
(Appendix 4)
The subscriber according to appendix 2 or 3, wherein the telecommunications carrier device releases the association between the subscriber identification information and the temporary identification information in response to a request from the terminal of the subscriber Service provision method that conceals personal information.

(Appendix 5)
Supplementary notes 2 to 2, wherein when the communication carrier device detects that the provision of the service by the server device is completed, the association between the subscriber identification information and the temporary identification information is canceled. 5. A service providing method in which the subscriber's personal information according to any one of 4 is concealed.
(Appendix 6)
The carrier device is
History information in which the time information when the subscriber identification information is associated with the temporary identification information and the time information when the association is canceled are associated with the subscriber identification information and the temporary identification information. Recorded in the storage device as
When a service usage fee collection request based on the service usage history of the subscriber terminal is received from the server device, the service usage fee collection processing of the subscriber terminal is performed on the basis of the history information. The service provision method which concealed the subscriber's personal information of any one of appendices 1-5.

(Appendix 7)
A telecommunications carrier device that manages subscriber identification information for uniquely identifying a subscriber by a telecommunications carrier and personal information related to the subscriber, and a server device that provides a specific service to the terminal of the subscriber A service providing system with
The carrier device is
Temporary identification information generating means for generating temporary identification information capable of temporarily identifying the subscriber when the server device provides the service to the terminal of the subscriber;
A temporary identification information providing means for providing the temporary identification information generated by the temporary identification information generating means to the server device;
The server device is
Providing a service corresponding to the personal information to the terminal of the subscriber by receiving provision of corresponding personal information from the telecommunications carrier device using the temporary identification information provided from the telecommunications carrier device A service providing system that conceals subscriber's personal information, characterized by having means.

(Appendix 8)
A telecommunications carrier device that manages subscriber identification information for uniquely identifying a subscriber by a telecommunications carrier and personal information related to the subscriber, and a server device that provides a specific service to the terminal of the subscriber The carrier device used in a service providing system comprising:
Temporary identification information generating means for generating temporary identification information capable of temporarily identifying the subscriber when the server device provides the service to the terminal of the subscriber;
A service providing system for concealing subscriber's personal information, comprising: temporary identification information providing means for providing the temporary identification information generated by the temporary identification information generating means to the server device. Carrier equipment used in

(Appendix 9)
The temporary identification information generating means
A service providing system for concealing subscriber's personal information according to appendix 8, characterized by comprising an identification information association unit for associating the generated temporary identification information with the subscriber identification information Telecom equipment used.

(Appendix 10)
The identification information association unit
An expiration date was provided for the association between the subscriber identification information and the temporary identification information, and an expiration date opportunity association cancellation unit was provided for automatically releasing the association upon expiration of the expiration date. A telecommunications carrier apparatus used for a service providing system that conceals subscriber personal information according to appendix 9.

(Appendix 11)
The identification information association unit
Supplementary note 9 or 7, further comprising a subscriber request trigger association canceling unit that cancels the correspondence between the subscriber identification information and the temporary identification information in response to a request from the subscriber's terminal. 10. A telecommunications carrier apparatus used in a service providing system that conceals the subscriber's personal information according to 10.

(Appendix 12)
The identification information association unit
A service completion detection unit for detecting that the provision of the service by the server device has been completed; and detection of completion of the provision of the service by the service completion detection unit, the subscriber identification information and the temporary identification information A communication carrier used in a service providing system for concealing subscriber's personal information according to any one of appendices 9 to 11, further comprising a service completion opportunity association releasing unit for releasing association apparatus.

(Appendix 13)
The temporary identification information generating means
History information in which the time information when the subscriber identification information is associated with the temporary identification information and the time information when the association is canceled are associated with the subscriber identification information and the temporary identification information. A history recording unit for recording in the storage device as
When a service usage fee collection request based on the service usage history of the subscriber's terminal is received from the server device, the service usage fee of the subscriber's terminal is collected based on the history information recorded by the history recording unit. A service provider device used for a service providing system that conceals subscriber personal information according to any one of appendices 10 to 12, further comprising a service usage fee collection processing unit that performs processing .

(Appendix 14)
A telecommunications carrier device that manages subscriber identification information for uniquely identifying a telecommunications carrier subscriber and personal information about the subscriber, and a server device that provides a specific service to the terminal of the subscriber The server device used in a service providing system comprising:
Temporarily receiving from the telecommunications carrier device temporary identification information generated in the telecommunications carrier device that can temporarily identify the subscriber when the server device provides the service to the subscriber's terminal. Identification information receiving means;
A service for providing a service corresponding to the personal information to the terminal of the subscriber by receiving provision of corresponding personal information from the telecommunications carrier device using the temporary identification information received by the temporary identification information receiving means The server apparatus used for the service provision system which kept the private information of the subscriber concealed, provided with the provision means.

(Appendix 15)
The service providing means is
A personal information request including the temporary identification information received from the communication carrier device is issued to the communication carrier device, and the personal information request is transmitted from the communication carrier device in response to the personal information request. A server device used for a service providing system that conceals subscriber's personal information according to appendix 14, characterized by comprising a personal information request / reception unit for receiving personal information.

  As described above in detail, according to the present invention, it is necessary for another provider to specify a subscriber when providing a service using personal information managed by the carrier to the subscriber of the carrier. Since temporary identification information is provided to other companies as information rather than the subscriber identification information itself, it is possible to provide services by other companies using the personal information while protecting the personal information managed by the telecommunications carrier. . Therefore, it is possible for telecommunications carrier subscribers to use the service with peace of mind, and for other carriers to expect relaxation of contracts to protect personal information with telecommunications carriers. It is considered that its usefulness is extremely high because it contributes greatly to the spread and promotion of service forms in which other companies effectively use the personal information of the subscribers to provide services corresponding to the personal information to the subscribers.

It is a block diagram which shows an example of the service provision system as one Embodiment of this invention. It is a block diagram which shows the structural example of the principal part of the service provision apparatus (communications provider apparatus) for other traders shown in FIG. It is a figure which shows an example of the information content of ID management DB shown in FIG. It is a figure which shows an example of the information content of ID log | history DB shown in FIG. It is a figure which shows an example of the information content of profile information DB shown in FIG. It is a figure for demonstrating operation | movement (service provision method which concealed subscriber ID) of the service provision system shown in FIG. It is a flowchart for demonstrating operation | movement (at the time of service use registration) of the service provision system shown in FIG. It is a flowchart for demonstrating operation | movement (at the time of service provision) of the service provision system shown in FIG. It is a flowchart for demonstrating operation | movement (at the time of ID cancellation | release) of the service provision system shown in FIG. It is a flowchart for demonstrating operation | movement (at the time of service usage fee charge) of the service provision system shown in FIG.

Explanation of symbols

1 Subscriber's terminal 2 Gateway system 3 Service provider device for other companies (telecom carrier device)
31 Subscriber ID conversion unit 31a Temporary ID generation unit 31b ID association unit 311 ID release unit (association release unit)
312 Expiration date ID cancellation unit (expiration date opportunity association cancellation unit)
313 Subscriber request ID release unit (subscriber request opportunity association release unit)
314 Service Completion Detection Unit 315 Service Completion ID Cancellation Unit (Service Completion Trigger Association Cancellation Unit)
31c History recording unit 31d Service usage fee collection processing unit 32 Temporary ID providing unit 33 Profile information (personal information) providing unit 4 Identification information (ID) management database (DB)
5 Identification information (ID) history database (DB)
6 Profile information (personal information) database (DB)
7 Other vendor service providing server (server device)
71 Temporary ID receiver 72 Service provider 721 Personal information request / receiver 8 Billing system 9 Access network

Claims (5)

A telecommunications carrier device that manages subscriber identification information for uniquely identifying a subscriber by a telecommunications carrier and personal information related to the subscriber, and a server device that provides a specific service to the terminal of the subscriber In the service providing system with
The network operator device provides the server device with temporary identification information capable of temporarily identifying the subscriber when the server device provides the service to the terminal of the subscriber;
The server device receives provision of corresponding personal information from the telecommunications carrier device using the temporary identification information provided from the telecommunications carrier device, and a service corresponding to the personal information to the terminal of the subscriber A service providing method that conceals subscriber personal information. A telecommunications carrier device that manages subscriber identification information for uniquely identifying a subscriber by a telecommunications carrier and personal information related to the subscriber, and a server device that provides a specific service to the terminal of the subscriber In the service providing system with
When the server device provides the service to the subscriber's terminal, the telecommunications carrier device
Generating temporary identification information capable of temporarily identifying the subscriber when the server device provides the service to the terminal of the subscriber;
Corresponding the temporary identification information and the subscriber identification information,
Notifying the server device of the temporary identification information,
The server device receives provision of corresponding personal information from the telecommunications carrier device using the temporary identification information notified from the telecommunications carrier device, and provides a service corresponding to the personal information to the terminal of the subscriber A service providing method that conceals subscriber personal information. A telecommunications carrier device that manages subscriber identification information for uniquely identifying a subscriber by a telecommunications carrier and personal information related to the subscriber, and a server device that provides a specific service to the terminal of the subscriber A service providing system with
The carrier device is
Temporary identification information generating means for generating temporary identification information capable of temporarily identifying the subscriber when the server device provides the service to the terminal of the subscriber;
A temporary identification information providing means for providing the temporary identification information generated by the temporary identification information generating means to the server device;
The server device is
Providing a service corresponding to the personal information to the terminal of the subscriber by receiving provision of corresponding personal information from the telecommunications carrier device using the temporary identification information provided from the telecommunications carrier device A service providing system that conceals subscriber's personal information, characterized by having means. A telecommunications carrier device that manages subscriber identification information for uniquely identifying a subscriber by a telecommunications carrier and personal information related to the subscriber, and a server device that provides a specific service to the terminal of the subscriber The carrier device used in a service providing system comprising:
Temporary identification information generating means for generating temporary identification information capable of temporarily identifying the subscriber when the server device provides the service to the terminal of the subscriber;
A service providing system for concealing subscriber's personal information, comprising: temporary identification information providing means for providing the temporary identification information generated by the temporary identification information generating means to the server device. Carrier equipment used in A telecommunications carrier device that manages subscriber identification information for uniquely identifying a telecommunications carrier subscriber and personal information about the subscriber, and a server device that provides a specific service to the terminal of the subscriber The server device used in a service providing system comprising:
Temporarily receiving from the telecommunications carrier device temporary identification information generated in the telecommunications carrier device that can temporarily identify the subscriber when the server device provides the service to the subscriber's terminal. Identification information receiving means;
A service for providing a service corresponding to the personal information to the terminal of the subscriber by receiving provision of corresponding personal information from the telecommunications carrier device using the temporary identification information received by the temporary identification information receiving means The server apparatus used for the service provision system which kept the private information of the subscriber concealed, provided with the provision means.

Images