JP2016122441A - Information processing apparatus, processing method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a mechanism for preventing the convenience of a user from being reduced, while reducing the risk of user information leakage.SOLUTION: An information processing apparatus 101 transmits user information to a server 102 managing user information, and makes a request to use a service to be provided by the server 102 by use of the user information accepted. The information processing apparatus outputs a registration screen for accepting registration of the user information, to receive an input of an encryption key to be used for encrypting the user information registered on the registration screen. The information processing apparatus encrypts the user information with the encryption key, transmits the encrypted user information to the server 102, to be registered on a user master, requests the server for the user information registered on the user master, receives an input of a decryption key to be used for decrypting the received encrypted user information, decrypts the encrypted user information with the decryption key, and requests the server 102 to use the service by use of the decrypted user information.SELECTED DRAWING: Figure 4

Description

  The present invention relates to an information processing apparatus, a processing method, and a program for registering information.

  In recent years, products and services can be easily purchased using the Internet. Usually, a customer who wants to purchase a product or service accesses and purchases a company site of the manufacturer or service provider of the product or a general site that handles products and services of a plurality of companies such as department stores.

  In any case, at the time of purchase, the purchaser's name, address, telephone number, gender, age, credit card number, and other user information, purchase specifications such as the number and size of the product or service desired to be purchased, the number of items purchased Such as order information must be provided to the operator of the site.

  In addition, since the above user information is registered in the site and it is possible to save the trouble of inputting again when purchasing a product or service repeatedly, there is an advantage that the user information is registered for the customer. On the other hand, for the site operator, saving the trouble of re-entering user information can reach the completion of purchase with a simple click of the mouse, lowering the psychological hurdle for purchase, customer information and purchase history information There is a merit of conducting marketing analysis based on.

  However, customer information leakage accidents from site operators are continually occurring, and there are not only crimes caused by unauthorized access from outside, but also crimes by internal parties, so hesitates to purchase products and services using the Internet Not a few users.

  In other words, the customer's personal information exists semi-permanently under the management of the site operator, and the personal information is leaked or used illegally. This is thought to be due to the fact that there is always a risk of being lost.

  Patent Document 1 describes a system that, when a customer applies for purchase, encrypts personal information such as the desired article name and the customer's name and address, and prevents information leakage during Internet transmission. Yes.

JP 2002-334245 A

  However, in the system of Patent Document 1, only a limited person in charge of the site operator can decrypt the encrypted customer information. If this person infringes, There arises a problem that personal information such as a card number is leaked.

In addition, in the system of Patent Document 1, when a product or service is repeatedly purchased, a site operation such as a merit for the customer that saves the trouble of re-inputting user information and a marketing analysis based on the customer information and purchase history information are performed. There is also a problem that the merit for the person is lost.
In recent years, information registered by the user is often used as big data, but the user cannot specify items that can be used / not used for big data among the information registered by the user. There is also.

  Accordingly, an object of the present invention is to provide a mechanism that does not impair user convenience while reducing the risk of leakage of user information.

  An information processing apparatus that transmits user information that has received registration to a server that manages user information, and that uses the user information that has received the registration to make a use request for a service provided by the server. A registration screen output means for outputting a registration screen for accepting registration of information, an encryption key acceptance means for accepting an input of an encryption key used for encrypting user information registered in the registration screen output by the registration screen output means, An encryption unit that encrypts the user information using the encryption key received by the encryption key reception unit, and the user information encrypted by the encryption unit is stored in the user master in an encrypted state. Therefore, the encrypted user information transmitting means to be transmitted to the server and the encrypted user information transmitting means are already transmitted by the user master. Encrypted user information requesting means for requesting the stored encrypted user information to the server, and the encrypted user information received from the server in response to a request by the encrypted user information requesting means Decryption key accepting means for accepting input of a decryption key used for decryption, decryption means for decrypting the encrypted user information using the decryption key accepted by the decryption key accepting means, and the decryption An information processing apparatus comprising: display means for displaying the decrypted user information in order to make a use request for the service to the server using the user information decrypted by the means.

  According to the present invention, it is possible to provide a mechanism that does not impair user convenience while reducing the risk of leakage of user information.

The figure which shows an example of a structure of the information processing system 100 of this embodiment. The figure which shows an example of the hardware constitutions of the information processing apparatus 101 of this embodiment, and the server 102 2 is a block diagram illustrating an example of functional configurations of an information processing apparatus 101 and a server 102 according to the present embodiment. A flowchart showing an example of user registration processing of the present embodiment 8 is a diagram illustrating an example of a user registration screen 501 and a user registration confirmation screen 520 that are output to the information processing apparatus 101 according to the present embodiment. A flowchart showing an example of authentication processing of the present embodiment The flowchart which shows an example of the goods order processing of this embodiment The figure which shows an example of the goods order screen 801 output to the information processing apparatus 101 of this embodiment. The flowchart which shows an example of the user information decoding process of this embodiment The figure which shows an example of the user information decoding screen 1001 output to the information processing apparatus 101 of this embodiment. An example of a table in the server 102 of this embodiment The flowchart which shows an example of the user registration screen display process which concerns on 2nd Embodiment The flowchart which shows an example of the user registration confirmation screen display process which concerns on 2nd Embodiment The figure which shows an example of the user registration screen output to the information processing apparatus 101 which concerns on 2nd Embodiment, and a user registration confirmation screen. An example of a table in the server 102 according to the second embodiment

[First Embodiment]
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
FIG. 1 is a diagram illustrating an example of a configuration of an information processing system 100 according to the present embodiment.

  As shown in FIG. 1, the information processing system 100 has a configuration in which an information processing apparatus 101 and a server 102 are communicably connected via a network 103. The information processing apparatus 101 is a terminal such as a desktop PC, a mobile phone, a smartphone, a tablet terminal, a notebook PC, and a PDA terminal, and has a browser installed therein, and can communicate with the server 102 via the network 103. .

  The user of the information processing system 100 registers information with the server 102, acquires information registered in the server 102, and uses the acquired information via a web browser or client software installed in the information processing apparatus 101. Process.

  In response to a request from the information processing apparatus 101, the server 102 performs registration of information, acquisition of registered information, transmission of acquired information, and the like. The communication between the information processing apparatus 101 and the server 102 may be an HTTP request / response or a request / response used for a web service using SOAP or the like.

In this embodiment, the information processing system 100 is a net shopping system that purchases goods and services using the Internet. However, the present invention is not limited to this, and the server 102 is transmitted from the information processing apparatus 101. Any system that registers information may be used.
Hereinafter, an example of a hardware configuration applicable to the information processing apparatus 101 and the server 102 illustrated in FIG. 1 will be described with reference to FIG.

  In FIG. 2, reference numeral 201 denotes a CPU that comprehensively controls each device and controller connected to the system bus 204. Further, the ROM 203 or the external memory 211 is necessary to realize a BIOS (Basic Input / Output System) or an operating system program (hereinafter referred to as an OS), which is a control program of the CPU 201, or a function executed by each server or each PC. Various programs are stored.

  A RAM 202 functions as a main memory, work area, and the like for the CPU 201. The CPU 201 implements various operations by loading a program necessary for execution of processing from the ROM 203 or the external memory 211 into the RAM 202 and executing the loaded program.

  An input controller 205 controls input from the input device 209 or the like. A video controller 206 controls display on a display device 210 such as a liquid crystal display. The display device is not limited to a liquid crystal display, and may be a CRT display or the like. These are used by clients as needed.

  A memory controller 207 is connected to the hard disk (HD), flexible disk (FD), or PCMCIA card slot for storing a boot program, various applications, font data, user files, editing files, various data, etc. via an adapter. The access to the external memory 211 such as a compact flash (registered trademark) memory is controlled.

  A communication I / F controller 208 is connected to and communicates with an external device via the network 103, and executes communication control processing on the network. For example, communication using TCP / IP is possible.

  Note that the CPU 201 enables display on the display device 210 by executing outline font rasterization processing on a display information area in the RAM 202, for example. Further, the CPU 201 enables a user instruction with a mouse cursor (not shown) on the display device 210.

Various programs that operate on the hardware are recorded in the external memory 211 and are executed by the CPU 201 by being loaded into the RAM 202 as necessary.
It should be noted that not all devices have these configurations, and it is only necessary to provide necessary devices.

FIG. 3 is a block diagram illustrating an example of a functional configuration of the information processing apparatus 101.
The registration screen output unit 301 is a functional unit that outputs a registration screen that accepts registration of user information.
The determination unit 302 determines data that can be used for data analysis after registration of user information and data that cannot be used in accordance with the user's operation among user information registered on the registration screen output by the registration screen output unit 301. It is a functional part to do.

The determination unit 302 is a functional unit that determines user information to be encrypted in accordance with a user operation among user information registered on the registration screen output by the registration screen output unit 301.
The encryption key receiving unit 303 is a functional unit that receives an input of an encryption key used for encrypting user information registered on the registration screen.
The encryption unit 304 is a functional unit that encrypts data that cannot be used, using the encryption key received by the encryption key reception unit 303.
The encryption unit 304 is a functional unit that encrypts user information using the encryption key received by the encryption key reception unit 303.

The encryption unit 304 is a functional unit that encrypts user information determined to be encrypted by the determination unit 302 and does not encrypt user information other than the user information determined to be encrypted by the determination unit 302.
The user information transmission unit 305 is a functional unit that transmits data usable for data analysis and data encrypted by the encryption unit 304 to the server.
The user information transmission unit 305 is a functional unit that transmits encrypted user information to the server.
The form output unit 306 is a functional unit that outputs the usable form of the usable data determined by the determining unit 302 and the unusable form of the data that cannot be used.

The form output unit 306 outputs the user information determined to be encrypted by the determination unit 302 in an encrypted form, and outputs user information other than the user information determined to be encrypted by the determination unit 302 in an unencrypted form Part.
The form output unit 306 is a functional unit that changes the output of data that cannot be used from the unusable form to the usable form in accordance with a user operation or the passage of a predetermined time.

The form output unit 306 is a functional unit that changes the output of the user information determined to be encrypted by the determination unit 302 from an encrypted form to an unencrypted form according to a user operation or a predetermined time.
The decryption key receiving unit 307 is a functional unit that receives an input of a decryption key used for decrypting data encrypted by the encryption unit 304.
The decryption unit 308 is a functional unit that decrypts the encrypted data using the decryption key received by the decryption key reception unit 307.
The encryption method determination unit 309 is a functional unit that determines an encryption method used for encryption by the encryption unit 304 in accordance with a user operation.
The encryption unit 304 is a functional unit that encrypts data that cannot be used by the encryption method determined by the encryption method determination unit 309.

The encryption unit 304 is a functional unit that encrypts user information determined to be encrypted by the determination unit 302 using the encryption method determined by the encryption method determination unit 309.
The encrypted user information transmission unit 310 is a functional unit that transmits the user information encrypted by the encryption unit 304 to the server so as to be stored in the user master in an encrypted state.
The encrypted user information request unit 311 is a functional unit that requests the server for encrypted user information transmitted from the encrypted user information transmission unit 310 and already stored in the user master.
The decryption key receiving unit 307 is a functional unit that receives an input of a decryption key used for decrypting encrypted user information received from the server in response to a request from the encrypted user information requesting unit 311.
The display unit 312 is a functional unit that displays the decrypted user information in order to make a request to use the service to the server, using the user information decrypted by the decryption unit 308.
The transmission control unit 313 controls the transmission of the encrypted user information to the server by the encrypted user information transmission unit 310 when the form output unit 306 outputs in the encrypted form, The function output unit 306 is a functional unit that controls transmission of the encrypted user information to the server by the encrypted user information transmission unit 310 when it is output in an unencrypted form.
The definition acquisition unit 314 is a functional unit that acquires the definition of the item of user information to be encrypted from the server among the user information registered on the registration screen.
The encryption unit 304 is a functional unit that encrypts user information in accordance with the definition of the item of user information to be encrypted acquired by the definition acquisition unit 314.

FIG. 4 is a flowchart illustrating an example of a user registration process according to the present embodiment. The user registration process in FIG. 4 is a process in which the information processing system 100 accepts registration of user information by a user who uses the information processing system 100. FIG. 5 is a diagram illustrating an example of a user registration screen 501 and a user registration confirmation screen 520 that are output to the information processing apparatus 101 according to the present embodiment. FIG. 10 is an example of a table in the server 102 of this embodiment.
In step S <b> 401, the CPU 201 of the information processing apparatus 101 transmits a request for screen information on the user registration screen to the server 102.
In step S <b> 402, the CPU 201 of the server 102 receives a request for screen information on the user registration screen from the information processing apparatus 101.
In step S <b> 403, the CPU 201 of the server 102 acquires user registration screen information from the RAM 202 or the external memory 211.
In step S <b> 404, the CPU 201 of the server 102 transmits the acquired user registration screen information to the information processing apparatus 101.
In step S <b> 405, the CPU 201 of the information processing apparatus 101 receives user registration screen information from the server 102.

  In step S406, the CPU 201 of the information processing apparatus 101 displays the user registration screen 501 (FIG. 5) on the display device 210 using the received user registration screen information. That is, step S406 is a step showing an example of a process for outputting a registration screen for accepting registration of user information.

  In step S407, the CPU 201 of the information processing apparatus 101 receives input of the login password 502, user information items 503 to 509, and encryption selection check boxes 510 to 516.

  That is, step S407 is an example of a process of determining data that can be used for data analysis after registration of user information and data that cannot be used in accordance with the user's operation among user information registered on the output registration screen. It is the step shown. Step S407 is a step showing an example of processing for determining user information to be encrypted in accordance with a user operation among user information registered on the registration screen.

  In step S <b> 408, the CPU 201 of the information processing apparatus 101 receives input of the encryption method 517 and the encryption key 518. That is, step S408 is a step showing an example of processing for accepting an input of an encryption key used for encrypting user information registered on the registration screen. Step S408 is a step showing an example of processing for determining an encryption method used for encryption in accordance with a user operation.

  In step S409, the CPU 201 of the information processing apparatus 101 sets the values of the user information items 503 to 509 corresponding to the encryption selection check boxes 510 to 516 selected in step S407 to the encryption method 517 selected in step S408. Is encrypted using the input encryption key 518 and stored in the RAM 202.

That is, step S409 is a step showing an example of a process of encrypting the data that cannot be used, using the received encryption key. Step S409 is a step showing an example of processing for encrypting the data that cannot be used by the determined encryption method.
That is, step S409 is a step showing an example of a process for encrypting user information using the accepted encryption key.

  Step S409 is a step showing an example of processing for encrypting user information determined to be encrypted and not encrypting user information other than the user information determined to be encrypted. Step S409 is a step showing an example of a process for encrypting user information determined to be encrypted using the determined encryption method.

  In addition, the item names corresponding to the encryption selection check boxes 510 to 516 selected in step S407, specifically, in the case of FIG. 5, “name”, “address”, and “phone number” in which the check boxes are checked. The item name is stored in the RAM 202 as an item obtained by encrypting the “credit card number”.

  Note that the encryption processing in step S409 is performed by the CPU 201 of the information processing apparatus 101 using a JavaScript (registered trademark) library or the like. As a result, data that the user desires to be unavailable for data analysis after registration of user information (input values to the items checked in the encryption selection check boxes 510 to 516) is encrypted in the information processing apparatus 101. There is no leakage outside the network 103 in an unencrypted state.

  In step S410, the CPU 201 of the information processing apparatus 101 uses the user information encrypted in step S409 (hereinafter referred to as “encrypted information”) and unencrypted user information (hereinafter referred to as “non-encrypted information”). The user registration confirmation screen 520 (FIG. 5) is displayed on the display device 210. It should be noted that the encrypted information and the unencrypted information are identified and displayed by changing the font, color, character background, etc. so that the user can easily identify the encrypted information and the unencrypted information.

  That is, step S410 is a step showing an example of a process of outputting the usable form of usable data and the unusable form of unusable data. Step S410 is a step showing an example of a process of outputting the user information determined to be encrypted in an encrypted form and outputting user information other than the user information determined to be encrypted in an unencrypted form.

  Specifically, on the user registration confirmation screen 520 (FIG. 5), “name”, “address”, and “phone number” are encrypted information, and “sex”, “date of birth”, and “mail” are unencrypted information. It is. The entire user information including “encrypted information” and “non-encrypted information” is referred to as “partially encrypted user information”. As a result, among the personal information input by the user, the data that can be used for data analysis and the data that cannot be used can be identified and displayed. It is possible to reduce the risk of being

  In the user registration confirmation screen 520 (FIG. 5), “encrypted information” is displayed in an encrypted state, and data that cannot be used for data analysis is identified and displayed. The value entered on the user registration screen 501 (FIG. 5) cannot be confirmed. Therefore, when the user registration confirmation screen 520 accepts that the mouse is held over the “encrypted information” (on-mouse operation), the unencrypted value can be confirmed (not shown).

  As an example of the method for confirming the unencrypted value of “encrypted information”, an on-mouse operation is given as an example. However, the present invention is not limited to this method. Encryption of “encrypted information” such as switching the encryption state or changing the display from the encrypted state to the unencrypted state by an animation effect (eg, after a predetermined time has passed) regardless of user operation Other methods may be used as long as the user can confirm the values that are not.

  That is, step S410 is a step showing an example of a process of changing the output of data that cannot be used from the unusable form to the usable form according to a user operation or the passage of a predetermined time. Step S410 is a step showing an example of processing for changing the output of user information determined to be encrypted from an encrypted form to an unencrypted form in accordance with a user operation or the passage of a predetermined time.

  In this embodiment, the information processing apparatus 101 sends “encrypted information” and “unencrypted information”, that is, “partially encrypted user information” of the screen information on the user registration confirmation screen 520 to the server 102. The information processing apparatus 101 generates the information without transmitting it. However, the present invention is not limited to this method. The “partially encrypted user information” is transmitted to the server 102 and the user registration confirmation generated by the server 102 is transmitted. The screen information on the screen 520 may be received and displayed on the information processing apparatus 101. However, in this case as well, as described in the description of step S409, data (encrypted information) that the user desires to be unavailable for data analysis after registration of user information is transmitted to the server 102 in an encrypted state. Therefore, it is not leaked to the outside through the network 103 in an unencrypted state.

In step S <b> 411, the CPU 201 of the information processing apparatus 101 transmits the partially encrypted user information to the server 102. In step S409, the encrypted item name stored in the RAM 202 is also transmitted. That is, step S411 is a step showing an example of processing for transmitting data usable for data analysis and encrypted data to the server. Step S411 is a step showing an example of a process for transmitting the encrypted user information to the server so as to be stored in the user master in an encrypted state.
In step S <b> 412, the CPU 201 of the server 102 receives the partially encrypted user information and the encrypted item name from the information processing apparatus 101.

In step S413, the CPU 201 of the server 102 registers the received partially encrypted user information and the encrypted item name in the partially encrypted user master 1110 (FIG. 11).
In step S <b> 414, the CPU 201 of the server 102 transmits a registration completion notification of partially encrypted user information to the information processing apparatus 101.
In step S <b> 415, the CPU 201 of the information processing apparatus 101 receives a registration completion notification of partially encrypted user information from the server 102.

In step S416, the CPU 201 of the information processing apparatus 101 abstracts the value of the unencrypted information and generates marketing information that can be used for data analysis. Specifically, in FIG. 5, marketing information that can be used for data analysis from input values to items “gender”, “date of birth”, and “mail” that are not checked in the encryption selection check boxes 510 to 516. Is generated. For example, as an example of marketing information, marketing information is generated by converting a date of birth (1982/01/02) into a value that can be used for data analysis such as “early 30s”.
In step S <b> 417, the CPU 201 of the information processing apparatus 101 transmits the generated marketing information to the server 102.
In step S <b> 418, the CPU 201 of the server 102 receives marketing information from the information processing apparatus 101.

  In step S419, the CPU 201 of the server 102 registers the received marketing information in the marketing information master 1120 (FIG. 11). In this embodiment, the transmission process to the server 102 is divided into two processes, such as transmission of partially encrypted user information in step S411 and transmission of marketing information in step S417. It is not limited, and it may be sent in one batch, or it may be divided into three times such as “encrypted information”, “non-encrypted information”, “marketing information”, or may be divided for each input item .

  The partially encrypted user master 1110 and the marketing information master 1120 have substantially the same columns, but are columns that exist in the partially encrypted user master 1110 and are not clearly used as marketing information (for example, “password” "" Credit card number ") is not held in the marketing information master 1120.

The marketing information master 1120 does not register data (encrypted information) that the user desires to be unavailable for data analysis. At the time of data analysis, by using the marketing information master 1120 instead of the partially encrypted user master 1110, data that is desired by the user to be usable for data analysis (unencrypted information) is used. It becomes possible to analyze.
In step S <b> 420, the CPU 201 of the server 102 transmits a marketing information registration completion notification to the information processing apparatus 101.
In step S <b> 421, the CPU 201 of the information processing apparatus 101 receives a marketing information registration completion notification from the server 102.
In step S <b> 422, the CPU 201 of the information processing apparatus 101 displays a processing completion screen on the display apparatus 210.
Above, description of the user registration process of FIG. 4 is complete | finished.

FIG. 6 is a flowchart illustrating an example of the authentication process according to the present embodiment. The authentication process of FIG. 6 is an authentication process accompanying a login request to the information processing system 100 by the user who performed the user information registration process in FIG.
In step S <b> 601, the CPU 201 of the information processing apparatus 101 transmits a user authentication screen request to the server 102 in accordance with a user operation.
In step S <b> 602, the CPU 201 of the server 102 receives a user authentication screen request from the information processing apparatus 101.
In step S <b> 603, the CPU 201 of the server 102 acquires user authentication screen information from the RAM 202 or the external memory 211.
In step S <b> 604, the CPU 201 of the server 102 transmits the acquired user authentication screen information to the information processing apparatus 101.
In step S <b> 605, the CPU 201 of the information processing apparatus 101 receives user authentication screen information from the server 102.

In step S <b> 606, the CPU 201 of the information processing apparatus 101 displays a user authentication screen (not shown) on the display device 210 using the received user authentication screen information. The user authentication screen is a so-called login screen and is a screen that accepts input of a user ID and a password.
In step S607, the CPU 201 of the information processing apparatus 101 receives an input of a user ID and a password as authentication information.
In step S <b> 608, the CPU 201 of the information processing apparatus 101 transmits authentication information (user ID and password) to the server 102.
In step S <b> 609, the CPU 201 of the server 102 receives authentication information from the information processing apparatus 101.
In step S610, the CPU 201 of the server 102 searches the partially encrypted user master 1110 using the received authentication information as a search key.

In step S611, the CPU 201 of the server 102 acquires authentication completion screen information from the RAM 202 or the external memory 211 when the user information is hit in step S610.
In step S <b> 612, the CPU 201 of the server 102 transmits the acquired authentication completion screen information to the information processing apparatus 101.
In step S <b> 613, the CPU 201 of the information processing apparatus 101 receives authentication completion screen information from the server 102.

In step S614, the CPU 201 of the information processing apparatus 101 displays an authentication completion screen (not shown) on the display device 210 using the received authentication completion screen information. The authentication completion screen is a so-called login success screen, and refers to a screen for notifying the user that login is successful, a menu screen displayed immediately after login, and the like.
Above, description of the authentication process of FIG. 6 is complete | finished.

FIG. 7 is a flowchart illustrating an example of a product order process according to the present embodiment. The product order process in FIG. 7 is a process for accepting the use of the user information registered in FIG. 4 by the user who has logged into the information processing system 100 in FIG. FIG. 8 is a diagram illustrating an example of a product order screen 801 output to the information processing apparatus 101 according to the present embodiment.
In step S <b> 701, the CPU 201 of the information processing apparatus 101 transmits a product order start request to the server 102.
In step S <b> 702, the CPU 201 of the server 102 receives a product order start request from the information processing apparatus 101.
In step S <b> 703, the CPU 201 of the server 102 acquires product order screen information from the RAM 202 or the external memory 211.
In step S <b> 704, the CPU 201 of the server 102 transmits the acquired product order screen information to the information processing apparatus 101.
In step S <b> 705, the CPU 201 of the information processing apparatus 101 receives product order screen information from the server 102.

  In step S706, the CPU 201 of the information processing apparatus 101 displays a product order screen 801 (FIG. 8) on the display device 210 using the received product order screen information.

In step S <b> 707, the CPU 201 of the information processing apparatus 101 receives input of information on products 807 to 808 to be purchased. A value may be input by the user, or information on the product selected by the user on the product introduction page (not shown) may be set in the products 807 to 808 to be purchased.
In step S <b> 708, the CPU 201 of the information processing apparatus 101 accepts pressing of the automatic input button 802 by the user.

  If the pressing of the automatic input button 802 has not been accepted, the CPU 201 of the information processing apparatus 101 accepts input of merchandise delivery destination information 803 to 805 in step S709.

  If the pressing of the automatic input button 802 is accepted, the CPU 201 of the information processing apparatus 101 determines whether user information has been acquired from the server 102 in step S710. Whether or not user information has been acquired is determined based on whether or not user information is stored in the RAM 202. That is, when the user repeatedly performs the product ordering process of FIG. 7, it is determined that the user information has been acquired because the user information is stored in the RAM 202 by the process of step S715 described later.

If it is determined that the user information has not been acquired, in step S711, the CPU 201 of the information processing apparatus 101 transmits a request for partially encrypted user information together with the user ID to the server 102. That is, step S711 is a step showing an example of processing for requesting the server for encrypted user information that has been transmitted and already stored in the user master.
In step S <b> 712, the CPU 201 of the server 102 receives a request for a user ID and partially encrypted user information from the information processing apparatus 101.

  In step S713, the CPU 201 of the server 102 acquires partially encrypted user information from the partially encrypted user master 1110 using the user ID as a search key. Further, the CPU 201 of the server 102 acquires user information decoding screen information from the RAM 202 or the external memory 211.

  In step S <b> 714, the CPU 201 of the server 102 transmits the acquired partially encrypted user information and user information decryption screen information to the information processing apparatus 101.

In step S <b> 715, the CPU 201 of the information processing apparatus 101 receives partially encrypted user information and user information decryption screen information from the server 102. That is, step S715 is a step showing an example of processing for receiving the encrypted user information transmitted from the server.
In step S716, the CPU 201 of the information processing apparatus 101 executes a process for decrypting the partially encrypted user information (FIG. 9).

  In step S717, the CPU 201 of the information processing apparatus 101 uses the decrypted user information to automatically input the product delivery destination and the payment method values. That is, step S717 is a step showing an example of a process of displaying the decrypted user information in order to make a service use request to the server using the decrypted user information. Specifically, the decrypted values of “name”, “address”, “phone”, and “credit card number” are output as the values of name 803, address 804, phone 805, and credit card number 806 on the product order screen 801. (1005 in FIG. 10).

In step S <b> 718, the CPU 201 of the information processing apparatus 101 accepts pressing of the order button 809 and transmits a product order request including product delivery destination, payment method, and information on the product to be purchased to the server 102.
In step S <b> 719, the CPU 201 of the server 102 receives a product order request from the information processing apparatus 101.

  In step S <b> 720, the CPU 201 of the server 102 acquires information on the product delivery destination, payment method, and product to be purchased from the product order request, and registers the information in the order transaction 1130 and the delivery transaction 1140. Specifically, a delivery record is generated using the newly issued delivery number and the “name”, “address”, and “telephone” of the product delivery destination, and registered in the delivery transaction 1140. An order record is generated using the delivery number and information about the product to be purchased, and is registered in the order transaction 1130.

  The “credit card number” of the payment method is deleted from the RAM 202 when the settlement is completed, and is not stored in a table such as the order transaction 1130. The delivery transaction 1140 includes personal information such as “name”, “address”, and “telephone”, and is partially encrypted user master by combining the table with the partially encrypted user master 1110 and the order transaction 1130. The personal information of the user registered in 1110 becomes clear. For this reason, the partially encrypted user master 1110 and the order transaction 1130 can be stored in a separate database or stored in a separate database user's own table so that not only unauthorized access from the outside but also internal operation of the site The partial encrypted user master 1110 and the delivery transaction 1140 are managed so as not to be able to join tables even if they are operations by related parties.

Thereby, it is possible to reduce a risk that personal information of a user who uses the information processing system 100 is leaked or illegally used due to unauthorized access from outside or a crime by an internal party of site management.
In step S <b> 721, the CPU 201 of the server 102 acquires product order completion screen information from the RAM 202 or the external memory 211.
In step S <b> 722, the CPU 201 of the server 102 transmits the acquired product order completion screen information to the information processing apparatus 101.
In step S <b> 723, the CPU 201 of the information processing apparatus 101 receives product order completion screen information from the server 102.

In step S724, the CPU 201 of the information processing apparatus 101 displays a product order completion screen (not shown) on the display device 210 using the received product order completion screen information.
The description of the product order process in FIG.

  FIG. 9 is a flowchart illustrating an example of the user information decoding process according to the present embodiment. The user information decryption process of FIG. 9 is a process of decrypting the partially encrypted user information related to the user who intends to use the user information in FIG. FIG. 10 is a diagram illustrating an example of a user information decoding screen 1001 output to the information processing apparatus 101 according to this embodiment.

  In step S901, the CPU 201 of the information processing apparatus 101 displays the user information decoding screen 1001 (FIG. 10) on the display device 210 using the user information decoding screen information received in step S715.

  In step S <b> 902, the CPU 201 of the information processing apparatus 101 receives input of the encryption method 1002 and the encryption key 1003 used for the decryption process. That is, step S902 is a step showing an example of processing for receiving an input of a decryption key used for decrypting encrypted data received from the server.

  In step S903, when the decryption button 1004 accepts pressing, the CPU 201 of the information processing apparatus 101 acquires “encrypted item” from the partially encrypted user information received in step S715, and partially encrypted user information. Of these, the item corresponding to “encrypted item” is decrypted using the encryption method 1002 and the encryption key 1003 received in step S902.

That is, step S903 is a step showing an example of a process for decrypting encrypted user information using a decryption key. Specifically, when “encrypted item” = {name / address / phone / credit card number}, the value of the item {name / address / phone / credit card number} in the partially encrypted user information is set. Decrypt.
Above, description of the user information decoding process of FIG. 9 is complete | finished.

  As described above, it is possible to provide a mechanism for reducing the risk of information leakage in a manner desired by the user. That is, since the information desired by the user is managed in the system in an encrypted state, the risk of unauthorized use of information input by the customer can be reduced.

In addition, as described above, since the encrypted information (encrypted information) is decrypted by the user when it is reused, the user can save the trouble of re-entering the user information when purchasing a product or service repeatedly. The benefits for are not compromised. That is, it is possible to reduce the risk of user information leakage and not impair user convenience.
In addition, as described above, unencrypted information (unencrypted information) can be used as marketing information, so it is advantageous for publishers to conduct marketing analysis based on customer information and purchase history information. Will not be damaged.

  In this embodiment, the information registered by the user is the personal information of the user. However, the information is not limited to the personal information, and may not be personal information as long as the information is registered by the user. That is, of the information registered in the system, information that can be used / not used for data analysis after information registration can be determined according to the user's operation. Thereby, the user himself / herself can determine information usable / unusable for data analysis such as big data among the information registered in the system.

  Also, the present invention differs from SSL (Secure Sockets Layer), which is a communication data encryption technology from the browser of the client terminal to the server, to the server without changing the information encrypted at the client terminal. Since it is stored, the server does not perform the decryption process. In the present invention, when the user uses a service such as purchase processing using the encrypted information, the encrypted information is received by the client terminal and decrypted by the client terminal. As a result, it is possible to reduce the risk of leakage of user information due to unauthorized access from the outside and crimes of internal parties such as site operators, while not impairing user convenience.

[Second Embodiment]
The first embodiment is a mechanism for determining data to be encrypted and data to be unencrypted according to a user's operation, and the second embodiment is not only a determination by a user's operation, but also data to be encrypted and encryption. This is a mechanism that defines the data that is not to be defined as a system and decides it according to the definition.

  The first embodiment is a mechanism for switching between an encrypted state and an unencrypted state on the user registration confirmation screen, and the second embodiment transmits to the server according to the switching of the display. This is a mechanism for controlling whether or not a button can be pressed.

  FIG. 12 is a flowchart showing an example of a user registration screen display process according to the second embodiment, which replaces step S406 (user registration screen display) of FIG. 4 in the first embodiment.

FIG. 13 is a flowchart showing an example of a user registration confirmation screen display process according to the second embodiment, which replaces step S410 (user registration confirmation screen display) of FIG. 4 in the first embodiment.
FIG. 14 is a diagram illustrating an example of a user registration screen and a user registration confirmation screen output to the information processing apparatus 101 according to the second embodiment.

1401 is a screen obtained by replacing 501 (user registration screen) in FIG. 5 in the first embodiment, and 1420 and 1430 are screens obtained by replacing 520 (user registration confirmation screen) in FIG. 5 in the first embodiment. It is. In FIG. 14, the description of the same parts as in FIG. 5 is omitted.
FIG. 15 is an example of a table in the server 102 according to the second embodiment.

The user registration screen display process according to the second embodiment will be described with reference to FIG.
In step S1201, the CPU 201 of the information processing apparatus 101 displays the user registration screen 1401 (FIG. 14) on the display device 210 using the user registration screen information received in step S405. That is, step S1201 is a step showing an example of processing for outputting a registration screen for accepting registration of user information.
In step S1202, the CPU 201 of the information processing apparatus 101 repeats steps S1203 to S1207 by the number of input items.

  In step S1203, the CPU 201 of the information processing apparatus 101 determines the value of the default encryption master of the input item. In the second embodiment, the server 102 acquires the value of the default encryption master 1500 in step S403, and transmits the value of the default encryption master 1500 included in the user registration screen information in step S403. Therefore, the information processing apparatus 101 receives the value of the default encryption master 1500 included in the user registration screen information in step S405. That is, step S405 is a step showing an example of processing for acquiring the definition of the item of user information to be encrypted from the server among the user information registered on the registration screen.

  Here, the default encryption master 1500 in FIG. 15 will be described. The default encryption master 1500 is a table that defines default values for whether or not to encrypt input items on the user registration screen 1401 and whether the user can change whether or not to encrypt.

  A setting value for each input item will be described. In (3), encryption is performed by default, and the user can change whether encryption is performed. □ is not encrypted by default, and the user can change whether or not to encrypt. ▲ is encrypted by default, and the user cannot change whether to encrypt or not. Δ is not encrypted by default, and the user cannot change whether or not to encrypt. It means that.

  Therefore, in the case of the default encryption master 1500 of FIG. 15, “sex” and “birth date” are not necessarily encrypted (for use in marketing analysis). “Name” and “Credit card number” mean that they must be encrypted (because they are not used for marketing analysis). As a result, not only the decision by the user's operation but also the data to be encrypted and the data to be encrypted can be defined as the system and determined according to the definition, so the site that performs marketing analysis based on customer information The benefits for operators are not compromised. In addition, as described above, unencrypted information (unencrypted information) can be used as marketing information, so it is advantageous for publishers to conduct marketing analysis based on customer information and purchase history information. Will not be damaged.

In the present embodiment, only one record is registered in the default encryption master 1500, but the number is not limited to one. For example, authority such as a role is set in the user ID column and each authority is registered. It is also possible to register a record in and to change the range of encryption availability depending on the authority. Further, the range of encryption propriety may be changed depending on the age, sex, etc. of the user.
Returning to the description of FIG.

  If the determination result of the default encryption master value of the input item in step S1203 is ■, the process proceeds to step S1204. If it is □, the process returns to step S1202. If it is ▲, the process proceeds to step S1206. move on.

  In step S1204, the CPU 201 of the information processing apparatus 101 adds a checked attribute to the HTML tag that displays the check box of the target input item. Thereby, when the user registration screen information is displayed (default), the check box is ON, and the user can change ON / OFF (1412 and 1413 in FIG. 14).

  In step S1205, the CPU 201 of the information processing apparatus 101 adds the disabled attribute to the HTML tag that displays the check box of the target input item. In step S1206, the CPU 201 of the information processing apparatus 101 adds a checked attribute to the HTML tag that displays the check box of the target input item. Thereby, when the user registration screen information is displayed (default), the check box is in the ON state, and the user cannot change the ON state (1410 and 1416 in FIG. 14).

  In step S <b> 1207, the CPU 201 of the information processing apparatus 101 adds the disabled attribute to the HTML tag that displays the check box of the target input item. Thereby, when the user registration screen information is displayed (default), the check box = OFF state, and the user cannot change the OFF state (1411 and 1414 in FIG. 14).

In FIG. 14, 1401 and FIG. 15 are marked with ■ □ ▲ △ for easy understanding of the drawings and setting values, but the present invention is not limited to this, and other display methods and setting values may be used. Good.
This is the end of the description of the user registration screen display process in FIG.

  Therefore, after that, in step S409, the user information is encrypted using the received encryption key. However, in order to encrypt the user information according to the value of the default encryption master 1500 acquired in step S1203, step S409 is FIG. 11 is a step showing an example of a process for encrypting user information in accordance with the definition of the acquired item of user information to be encrypted.

Next, a user registration confirmation screen display process according to the second embodiment will be described with reference to FIG.
In step S1301, the CPU 201 of the information processing apparatus 101 displays a user registration confirmation screen 1420 (FIG. 14) on the display apparatus 210 using the user information encrypted in step S409 (information corresponding to the check box being ON). indicate. That is, step S1301 is a step showing an example of a process of outputting the usable form of usable data and the unusable form of unusable data.

  In step S1301, the CPU 201 of the information processing apparatus 101 accepts switching of the encryption switch and determines the value of the encryption switch. Specifically, the encryption switch has “input value” and “encryption” states, which can be switched by a user operation such as clicking on the encryption switch. 14 is the state of “encryption”, and 1431 of FIG. 14 is the state of “input value”.

  If the determination result of the encryption switch value in step S1301 is “input value”, the process proceeds to step S1303, and if it is “encryption”, the process proceeds to step S1305.

  In step S1303, the CPU 201 of the information processing apparatus 101 decrypts and displays the input value of the user information whose check box is ON (1432 in FIG. 14). Step S1303 is a step showing an example of processing for changing the output of user information determined to be encrypted from an encrypted form to an unencrypted form in accordance with a user operation or the passage of a predetermined time. For example, in the user registration screen 1401 of FIG. 14, the check boxes in the ON state are 1410, 1412, 1413, and 1416, and the input values of the name 1403, address 1405, telephone number 1406, and credit card number 1409 corresponding to the check boxes are respectively. Decrypt and display as 1432.

  In step S1304, the CPU 201 of the information processing apparatus 101 adds a disabled attribute to the HTML tag that displays the send button. This prevents the user from pressing the send button 1433 on the user registration confirmation screen 1430 of FIG. That is, step S1304 is a step showing an example of a process for controlling transmission of encrypted user information to the server in a case where the encrypted user information is output in a non-encrypted form.

  In step S1305, the CPU 201 of the information processing apparatus 101 encrypts and displays the input value of the user information whose check box is ON (1422 in FIG. 14). That is, step S410 is a step showing an example of a process of outputting the user information determined to be encrypted in an encrypted form and outputting user information other than the user information determined to be encrypted in an unencrypted form. For example, in the user registration screen 1401 of FIG. 14, the check boxes in the ON state are 1410, 1412, 1413, and 1416, and the input values of the name 1403, address 1405, telephone number 1406, and credit card number 1409 corresponding to the check boxes are respectively. It is encrypted and displayed as 1422.

  In step S1306, the CPU 201 of the information processing apparatus 101 deletes the disabled attribute from the HTML tag that displays the send button. Thus, the user can press the send button 1423 on the user registration confirmation screen 1420 of FIG. That is, step S1306 is a step showing an example of a process for controlling transmission of encrypted user information to a server when the encrypted user information is output.

  In step S1307, the CPU 201 of the information processing apparatus 101 accepts pressing of the transmission button. If it is determined that the button is pressed, the user registration confirmation screen display processing in FIG. 13 ends, and the server 102 is partially encrypted in step S411. Send user information. If it is determined that the button has not been pressed, the process returns to step S1302.

In this embodiment, HTML is given as an example of the script language displayed on the screen. However, the present invention is not limited to this, and other display languages and display methods may be used.
Above, description of the user registration confirmation screen display process of FIG. 13 is complete | finished.

  As a result, when the partially encrypted user information is transmitted to the server 102, the input value of the user information whose check box is ON is encrypted and displayed on the user registration confirmation screen, so the user information is encrypted. Since the user can identify that the data has been transmitted to the server in the registered state, the user information can be registered with peace of mind. In other words, you can lower the psychological hurdle to use the system,

  As described above, a recording medium that records a program that implements the functions of the above-described embodiments is supplied to a system or apparatus, and a computer (or CPU or MPU) of the system or apparatus stores the program stored in the recording medium. It goes without saying that the object of the present invention can also be achieved by reading and executing.

  In this case, the program itself read from the recording medium realizes the novel function of the present invention, and the recording medium recording the program constitutes the present invention.

  As a recording medium for supplying the program, for example, a flexible disk, hard disk, optical disk, magneto-optical disk, CD-ROM, CD-R, DVD-ROM, magnetic tape, nonvolatile memory card, ROM, EEPROM, silicon A disk or the like can be used.

  Further, by executing the program read by the computer, not only the functions of the above-described embodiments are realized, but also an OS (operating system) operating on the computer based on an instruction of the program is actually It goes without saying that a case where the function of the above-described embodiment is realized by performing part or all of the processing and the processing is included.

  Furthermore, after the program read from the recording medium is written to the memory provided in the function expansion board inserted into the computer or the function expansion unit connected to the computer, the function expansion board is based on the instructions of the program code. It goes without saying that the case where the CPU or the like provided in the function expansion unit performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.

  The present invention may be applied to a system constituted by a plurality of devices or an apparatus constituted by a single device. Needless to say, the present invention can be applied to a case where the present invention is achieved by supplying a program to a system or apparatus. In this case, by reading a recording medium storing a program for achieving the present invention into the system or apparatus, the system or apparatus can enjoy the effects of the present invention.

  The form of the program may be in the form of object code, program code executed by an interpreter, script data supplied to an OS (operating system), and the like.

  Furthermore, by downloading and reading a program for achieving the present invention from a server, database, etc. on a network using a communication program, the system or apparatus can enjoy the effects of the present invention. In addition, all the structures which combined each embodiment mentioned above and its modification are also included in this invention.

DESCRIPTION OF SYMBOLS 100 Information processing system 101 Information processing apparatus 102 Server 103 Network

Claims (9)

An information processing apparatus that transmits user information that has been registered to a server that manages user information, and that uses the user information that has received the registration to make a use request for a service provided by the server,
Registration screen output means for outputting a registration screen for accepting registration of the user information;
An encryption key receiving means for receiving an input of an encryption key used for encrypting user information registered in the registration screen output by the registration screen output means;
An encryption means for encrypting the user information using the encryption key received by the encryption key receiving means;
Encrypted user information transmitting means for transmitting the user information encrypted by the encryption means to the server so as to be stored in the user master in an encrypted state;
Encrypted user information requesting means for requesting the encrypted user information transmitted from the encrypted user information transmitting means and already stored in the user master to a server;
Decryption key accepting means for accepting an input of a decryption key used for decrypting the encrypted user information received from the server in response to a request by the encrypted user information requesting means;
Decryption means for decrypting the encrypted user information using the decryption key received by the decryption key reception means;
In order to make a request to use the service to the server using the user information decrypted by the decryption means, the information processing comprises: display means for displaying the decrypted user information apparatus. Of the user information registered on the registration screen, a determination unit that determines user information to be encrypted according to a user operation;
The encryption means includes
The information processing apparatus according to claim 1, wherein user information determined to be encrypted by the determining unit is encrypted, and user information other than the user information determined to be encrypted by the determining unit is not encrypted. It further comprises a form output means for outputting the user information determined to be encrypted by the determining means in an encrypted form and outputting user information other than the user information determined to be encrypted by the determining means in an unencrypted form. The information processing apparatus according to claim 2. The form output means includes:
4. The information processing apparatus according to claim 3, wherein the output of user information determined to be encrypted by the determining means is changed from an encrypted form to an unencrypted form in accordance with a user operation or a predetermined time. When outputting in the encrypted form by the form output means, the encrypted user information sending means controls to allow transmission of the encrypted user information to the server, while the form output Means for further controlling transmission of the encrypted user information to the server by the encrypted user information transmission means when the encrypted user information transmission means is outputting in the form not encrypted. The information processing apparatus according to claim 4. Of the user information registered on the registration screen, further comprising a definition acquisition means for acquiring the definition of the user information item to be encrypted from the server,
The encryption means includes
6. The information processing apparatus according to claim 2, wherein the user information is encrypted in accordance with a definition of an item of user information to be encrypted acquired by the definition acquisition unit. An encryption method determining means for determining an encryption method used for encryption by the encryption means in accordance with a user operation;
The encryption means includes
7. The information processing according to claim 1, wherein the user information determined to be encrypted by the determining unit is encrypted using the encryption method determined by the encryption method determining unit. apparatus. A processing method in an information processing apparatus that transmits user information accepted for registration to a server that manages user information, and uses the user information accepted for the registration to make a use request for a service provided by the server. ,
The information processing apparatus is
A registration screen output step for outputting a registration screen for accepting registration of the user information;
An encryption key receiving step for receiving an input of an encryption key used for encryption of user information registered in the registration screen output by the registration screen output step;
An encryption step for encrypting the user information using the encryption key received by the encryption key reception step;
Transmitting the user information encrypted by the encryption step to the server so as to be stored in the user master in an encrypted state; and
An encrypted user information requesting step for requesting the encrypted user information transmitted from the encrypted user information transmitting step and already stored in the user master to a server;
A decryption key receiving step for receiving an input of a decryption key used for decrypting the encrypted user information received from a server in response to a request by the encrypted user information request step;
A decryption step of decrypting the encrypted user information using the decryption key received in the decryption key reception step;
And a display step for displaying the decrypted user information in order to make a request to use the service to the server using the user information decrypted in the decryption step. Method. A program that can be executed by an information processing apparatus that transmits user information for which registration has been received to a server that manages user information, and uses the user information for which the registration has been received to request use of a service provided by the server There,
The information processing apparatus;
Registration screen output means for outputting a registration screen for accepting registration of the user information;
An encryption key receiving means for receiving an input of an encryption key used for encrypting user information registered in the registration screen output by the registration screen output means;
An encryption means for encrypting the user information using the encryption key received by the encryption key receiving means;
Encrypted user information transmitting means for transmitting the user information encrypted by the encryption means to the server so as to be stored in the user master in an encrypted state;
Encrypted user information requesting means for requesting the encrypted user information transmitted from the encrypted user information transmitting means and already stored in the user master to a server;
Decryption key accepting means for accepting an input of a decryption key used for decrypting the encrypted user information received from the server in response to a request by the encrypted user information requesting means;
Decryption means for decrypting the encrypted user information using the decryption key received by the decryption key reception means;
A program that functions as display means for displaying the decrypted user information in order to make a request to use the service to the server using the user information decrypted by the decryption means.

Images