JP5117177B2 - Attribute information distribution control system and attribute information distribution control method - Google Patents

Description

  The present invention relates to an attribute information distribution control system and an attribute information distribution control method.

  With the recent development of the Internet, users who connect to the Internet provide various services (for example, electronic bulletin boards, e-mails, blogs, shopping, auctions, etc.) from service providers that provide services via the Internet. It can be received. When receiving such service provision, the user must disclose attribute information (for example, information on the user or the user terminal) necessary for using the service to the service provider. For example, in services that deliver physical products to users, such as shopping, users who connect to the Internet attribute information about many users such as “name”, “age”, “address”, and “phone number”. It will be input to the terminal and disclosed to the service provider.

  By the way, the attribute information is generally managed individually by each service provider, and the user needs to perform an input operation to disclose the attribute information every time a new service is used. Such an input operation is troublesome for the user and is a factor that hinders the use of the service.

  In view of such service use obstruction factors, for example, Non-Patent Document 1 discloses a technique in which attribute information related to a service user is linked among a plurality of sites by an information management server arranged on a network. ing.

“OpenID.net”, [online], [searched on November 16, 2007], Internet <URL: http: //opened.net/> JP 2007-89196 A

  However, the above-described conventional technique has a problem that attribute information is distributed to an unauthorized service provider. In other words, the above-described conventional technology does not provide a mechanism for determining the reliability of the service provider in the information management server for managing the attribute information, and the attribute information is only based on the user's own judgment. Since the system is distributed, attribute information may be distributed to an unauthorized service provider triggered by a user's judgment error or operation error.

  Accordingly, the present invention has been made to solve the above-described problems of the prior art, and is attribute information that can be controlled to prevent the attribute information from being distributed to an unauthorized service provider. It is an object to provide a distribution control system and an attribute information distribution control method.

  In order to solve the above-described problems and achieve the object, the present invention is configured so that each of the disclosure main device, the disclosure mediation device, and the disclosure destination device is connected in a communicable state, and attribute information about the user of the disclosure main device is stored. An attribute information distribution control system for controlling transmission from the disclosure main apparatus to the disclosure destination apparatus, wherein the disclosure mediation apparatus receives the service request for the disclosure destination apparatus from the disclosure main apparatus when the disclosure request is received. Terminal disclosure information transmitting means for adding terminal identification information for identifying a main apparatus to a service request and transmitting the service request to the disclosure destination apparatus, the disclosure destination apparatus via the disclosure mediation apparatus Attribute information request transmission for transmitting an attribute information request to the disclosure main device together with the terminal identification information given to the service request when a service request is received from The disclosure main device controls transmission of the attribute information to the disclosure destination device that is the transmission source of the attribute information request based on the terminal identification information received from the disclosure destination device together with the attribute information request. Attribute information transmission control means is provided.

  Further, the present invention is the above invention, wherein the terminal identification information transmitting means assigns the terminal identification information to the service request according to a policy that determines whether the terminal identification information should be given to the service request. And transmitting to the disclosure destination apparatus.

  Further, the present invention provides the service according to the above invention, wherein the disclosure mediating apparatus receives the terminal identification information reply request for requesting the reply of the terminal identification information transmitted to the disclosure destination apparatus from the disclosure main apparatus. Terminal disclosure information reply means for returning the terminal identification information attached to the request and transmitted to the disclosure destination apparatus to the disclosure main apparatus that is the transmission source of the terminal identification information reply request, the disclosure main apparatus comprising the disclosure A terminal identification information receiving means for requesting a return of the terminal identification information transmitted to the disclosure destination apparatus from the disclosure mediating apparatus when receiving an attribute information request from the destination apparatus, and receiving the terminal identification information; The attribute information transmission control means includes terminal identification information received by the terminal identification information receiving means, and terminal identification received from the disclosure destination device together with the attribute information request Depending on the result of comparison between the distribution, and controlling the transmission of the attribute information to a sender of the attribute information request disclosure destination apparatus.

  Further, the present invention is the above invention, wherein the disclosure mediating apparatus further includes terminal identification information management means for managing the terminal identification information in advance for each main disclosure apparatus, and the terminal identification information transmitting means is the disclosure When transmitting a service request to a destination apparatus, terminal identification information corresponding to the disclosure main apparatus that is the transmission source of the service request is acquired from the terminal identification information managed by the terminal identification information management unit. The terminal corresponding to the disclosure main apparatus that is the transmission source of the terminal identification information return request from among the terminal identification information managed by the terminal information management means. The identification information is acquired and returned to the disclosure main apparatus that is the transmission source of the terminal identification information reply request.

  Also, in the present invention according to the above invention, the terminal identification information managing unit manages different terminal identification information in association with each disclosure destination apparatus identification information for identifying the disclosure destination apparatus, and the terminal identification When transmitting a service request to the disclosure destination apparatus, the information transmission means corresponds to the disclosure destination apparatus that is the transmission destination of the service request from the terminal identification information managed by the terminal identification information management means The terminal identification information is acquired and attached to the service request, and the terminal identification information reply means receives a terminal identification information reply request for requesting a reply of the terminal identification information transmitted to the disclosure destination apparatus from the disclosure main apparatus. A terminal corresponding to the disclosure main apparatus that is the transmission source of the terminal identification information return request from among the terminal identification information managed by the terminal identification information management means And get another information, characterized in that return the acquired terminal identification information to disclose main unit that is the transmission source of the terminal identification information reply request.

  Further, the present invention is the above invention, wherein the terminal identification information transmitting unit generates the service request for the disclosure destination device generated for each access session with the disclosure main device when receiving a service request for the disclosure target device. Terminal identification information is attached to the service request and transmitted to the disclosure destination apparatus.

  Further, the present invention, in the above invention, further comprises a response device connected in a communicable state with the disclosure mediation device, wherein the disclosure mediation device sends a service request to the disclosure destination device to the disclosure main device. A terminal identification information transmitting unit that, when received from a device, adds terminal identification information for identifying the disclosure main device to the service request and transmits the service request to the disclosure destination device; and a terminal transmitted to the disclosure destination device Terminal identification information return request transfer means for transferring a terminal identification information return request to which the terminal identification information is added to the response device when a terminal identification information return request for requesting a return of identification information is received from the main disclosure device; The response device, when receiving the terminal identification information return request transferred from the disclosed intermediary device, includes the terminal included in the terminal identification information return request. Characterized by comprising a terminal identification information returning means for returning the identification information to the disclosure main device.

  In the present invention, the disclosure main apparatus further includes terminal identification information storage means for storing the terminal identification information in advance, and the attribute information transmission control means includes the attribute information request and the disclosure destination. Transmission of the attribute information to the disclosure destination apparatus that is the transmission source of the attribute information request according to the comparison result between the terminal identification information received from the apparatus and the terminal identification information stored in the terminal identification information storage unit It is characterized by controlling.

  Further, the present invention is the above invention, wherein the terminal identification information storage unit stores different terminal identification information for each disclosure destination apparatus identification information for identifying the disclosure destination apparatus, and the attribute information transmission control The means obtains terminal identification information corresponding to the disclosure destination apparatus identification information of the disclosure destination apparatus that is the transmission source of the attribute information request from among the terminal identification information stored by the terminal identification information storage means. The attribute information to the disclosure destination device that is the transmission source of the attribute information request according to a comparison result between the acquired terminal identification information and the terminal identification information received from the disclosure destination device together with the attribute information request. The transmission is controlled.

  Further, the present invention provides a disclosure main device, a disclosure mediation device, and a disclosure destination device that are connected in a communicable state, and attribute information related to a user of the disclosure main device from the disclosure main device to the disclosure destination device. An attribute information distribution control method for controlling transmission, wherein the disclosure mediating apparatus, when receiving a service request for the disclosure destination apparatus from the disclosure main apparatus, includes terminal identification information for identifying the disclosure main apparatus. A terminal identification information transmission step for giving to a service request and transmitting it to the disclosure destination device, wherein the disclosure destination device receives the service request from the disclosure destination device via the disclosure mediation device; An attribute information request transmission step for transmitting an attribute information request to the main disclosure device together with the terminal identification information given to the service request; Including an attribute information transmission control step for controlling transmission of the attribute information to a disclosure destination apparatus that is a transmission source of the attribute information request, based on terminal identification information received from the disclosure destination apparatus together with the attribute information request. Features.

  According to the present invention, when the disclosure mediating apparatus receives a service request for the disclosure destination apparatus from the disclosure main apparatus, the disclosure intermediation apparatus assigns terminal identification information for identifying the disclosure main apparatus to the service request to the disclosure destination apparatus. When the disclosure destination device receives a service request from the disclosure destination device via the disclosure mediation device, the disclosure destination device sends an attribute information request to the disclosure main device together with the terminal identification information given to the service request. The disclosure main device controls the transmission of attribute information to the disclosure destination device that is the transmission source of the attribute information request based on the terminal identification information received from the disclosure destination device together with the attribute information request. It is possible to control the attribute information to be transmitted only to the disclosure destination device via the network, and to control the attribute information from being distributed to an unauthorized service provider. It is a function. That is, by using the terminal identification information of the disclosure main apparatus known only by the disclosure mediating apparatus, the user of the disclosure main apparatus confirms that the terminal identification information has reached the disclosure destination apparatus via the disclosure mediating apparatus. It is possible to control the attribute information to be transmitted only to the disclosure destination device via the disclosure mediation device, thereby preventing the attribute information from being distributed to an unauthorized service provider. be able to.

  Further, according to the present invention, according to the policy that determines whether or not the terminal identification information should be attached to the service request, the terminal identification information is attached to the service request and transmitted to the disclosure destination device. It is possible to control the attribute information to be transmitted only to the permitted disclosure destination apparatus.

  Further, according to the present invention, when the disclosure mediating apparatus receives a terminal identification information return request for requesting a reply of the terminal identification information transmitted to the disclosure destination apparatus from the disclosure main apparatus, the disclosure mediation apparatus assigns the disclosure request to the service request. The terminal identification information transmitted to the device is returned to the disclosure main device that is the transmission source of the terminal identification information reply request. When the disclosure main device receives the attribute information request from the disclosure destination device, it is disclosed to the disclosure mediation device Requesting and receiving a reply of terminal identification information transmitted to the destination device, according to the comparison result between the terminal identification information received from the disclosure mediating device and the terminal identification information received from the disclosure destination device together with the attribute information request, Since the transmission of attribute information to the disclosure destination apparatus that is the transmission source of the attribute information request is controlled, not only the attribute information is not distributed to an unauthorized service provider, but also, for example, the terminal identification information is changed. A case where it is it is possible to distribute also attribute information correctly. That is, it is possible to prevent (appropriately distribute) attribute information from being distributed to unauthorized service providers by utilizing the characteristic that the disclosure mediating apparatus passes the terminal identification information only to the correct disclosure destination apparatus. At the same time, by verifying the terminal identification information for each service request, the attribute information can be correctly distributed even when the terminal identification information is changed.

  According to the present invention, the disclosure mediating apparatus manages terminal identification information for each disclosure main apparatus in advance, and transmits a service request to the disclosure destination apparatus. The terminal identification information corresponding to the disclosure destination device that is the transmission source of the service request is acquired and given to the service request, and the terminal identification information reply request transmission source is selected from the previously managed terminal identification information. Terminal identification information corresponding to the disclosed main device is acquired and sent back to the disclosed main device that is the transmission source of the terminal identification information reply request. It is possible to guarantee that a service request has been transmitted to the disclosure destination device via the disclosure mediation device based on the terminal identification information that is present, and as a result, illegal service provision It is possible to prevent the attribute information flows against.

  Further, according to the present invention, different terminal identification information is managed in association with each disclosure destination apparatus identification information for identifying the disclosure destination apparatus, and is managed when a service request is transmitted to the disclosure destination apparatus. Terminal identification information corresponding to the disclosure destination apparatus that is the transmission source of the service request from among the terminal identification information that is provided, added to the service request, and requested to return the terminal identification information transmitted to the disclosure destination apparatus When an information reply request is received from the disclosure main device, terminal identification information corresponding to the disclosure main device that is the transmission source of the terminal identification information reply request is acquired from each managed terminal identification information, and acquired. Since the received terminal identification information is returned to the disclosure main apparatus that is the transmission source of the terminal identification information reply request, it is possible not only to prevent the attribute information from being distributed to an unauthorized service provider, but also to the disclosure destination apparatus. In the case of the cooperation of the terminal identification information, it is possible to prevent the information of the name identification or leakage. Furthermore, fraud to the terminal identification information can be detected for each disclosure destination device.

  Further, according to the present invention, when a service request for a disclosure destination apparatus is received from the disclosure main apparatus, the terminal identification information generated for each access session with the disclosure main apparatus is added to the service request to the disclosure destination apparatus. Therefore, without managing terminal identification information in advance, it can be guaranteed that the service request has been transmitted to the disclosure destination device via the disclosure mediation device. It is possible not only to prevent the distribution of attribute information, but also to prevent the disclosure destination device that is the transmission source of the service request from being specified.

  Further, according to the present invention, the disclosed mediation device is configured by a first mediation device and a second mediation device connected in a communicable state, and the first mediation device is a service for the disclosure destination device. When a request is received from the disclosure main device, terminal identification information for identifying this disclosure main device is attached to the service request and transmitted to the disclosure destination device, and a request is made to return the terminal identification information transmitted to the disclosure destination device When the terminal identification information reply request is received from the disclosure main device, the terminal identification information reply request with the terminal identification information transmitted to the disclosure destination device is transferred to the second mediation device, and the second mediation device is When the terminal identification information reply request transferred from the first intermediary device is received, the terminal identification information included in the terminal identification information reply request is returned to the disclosure main device. The first A response to an inquiry from the disclosure main device can be realized by the second mediation device without adding a function for responding to the inquiry from the disclosure main device to the intermediary device of Therefore, it is possible to prevent the attribute information from being distributed.

  Further, according to the present invention, the disclosure main apparatus stores terminal identification information in advance, and compares the terminal identification information received from the disclosure destination apparatus together with the attribute information request with the terminal identification information stored in advance. Depending on the result, transmission of attribute information to the disclosure destination apparatus that is the transmission source of the attribute information request is controlled, so that it is possible to detect fraud to the terminal identification information by the disclosure destination apparatus. It is possible to prevent the attribute information from being distributed to the service provider who has performed fraud.

Further, according to the present invention, different terminal identification information is stored for each disclosure destination device identification information for identifying a disclosure destination device, and the disclosure that is the transmission source of the attribute information request from among the terminal identification information The terminal identification information corresponding to the disclosure destination device identification information of the destination device is acquired, and the attribute is determined according to the comparison result between the acquired terminal identification information and the terminal identification information received from the disclosure destination device together with the attribute information request. Since the transmission of the attribute information to the disclosure destination device that is the transmission source of the information request is controlled, fraud to the terminal identification information can be detected for each disclosure destination device. It is possible to individually prevent the attribute information from being distributed to the service provider.

  Hereinafter, an embodiment for carrying out an attribute information distribution control system and an attribute information distribution control method according to the present invention will be described in detail with reference to the accompanying drawings. In the following description, after Example 1 is described as an embodiment for implementing the attribute information distribution system according to the present invention, the attribute information distribution control system and the attribute information distribution control method according to the present invention are implemented. Other examples will be described as other embodiments.

[Explanation of terms]
First, main terms used in the following examples will be described. “Attribute information” used in the following examples is, for example, basic information such as address, name, e-mail address, age, gender, etc., or company-related information such as employee number, job title, credit information such as credit payment status, etc. Or, various information recognized as attributes relating to a person, such as usage right information such as points. Such “attribute information” is disclosed between the parties even in normal transactions, but when transactions and various communications on networks such as electronic commerce (EC) are actively performed, The “attribute information” is disclosed between parties on the network. For example, when purchasing a product sold on the Internet by a service provider, basic information such as the purchaser's address and name is disclosed from the purchaser to the seller (service provider) via the network. Note that “attribute information” used in the following embodiments corresponds to “attribute information” described in the claims.

  In the following embodiments, a device that discloses “attribute information” on a network (for example, a mobile phone terminal that uses a service via a network) is referred to as a “disclosure main device”, and “disclosure main device” A device that receives disclosure of “attribute information” from “(information processing device such as a server providing a service via a network)” is called a “disclosure destination device” and is changed from “disclosure main device” to disclosure destination device. A device (for example, a gateway device operated by a communication carrier) that receives the service request and transfers it to the disclosure destination is referred to as a “disclosure mediating device”.

  In the following first embodiment, the outline and features of the attribute information distribution control system according to the first embodiment, the configuration and processing of the attribute information distribution system will be described in order, and finally the effects of the first embodiment will be described.

[Outline and Features of Attribute Information Distribution Control System (Example 1)]
First, the outline and characteristics of the attribute information distribution control system according to the first embodiment will be described with reference to FIG. FIG. 1 is a diagram for explaining the outline and features of the attribute information distribution control system according to the first embodiment.

  In the attribute information distribution control system according to the first embodiment, the disclosure main device, the disclosure mediation device, and the disclosure destination device are connected in a state where they can communicate with each other, and the attribute information related to the user of the disclosure main device is disclosed from the disclosure main device. The main feature is that the transmission is controlled to prevent transmission of attribute information to an unauthorized service provider.

  This main feature will be specifically described. As shown in FIG. 1, the disclosure main apparatus transmits a service request for requesting a service to the disclosure destination apparatus (see (1) in FIG. 1). Upon receiving the service request from the disclosure main apparatus, the disclosure mediating apparatus assigns user terminal information for identifying the disclosure main apparatus to the service request (see (2) in FIG. 1), and forwards it to the disclosure destination apparatus. (See (3) in FIG. 1).

  Upon receiving the service request transferred from the disclosure mediating apparatus, the disclosure destination apparatus requests attribute information from the disclosure main apparatus that is the transmission source of the service request together with the user terminal information given to the service request. The attribute information request is transmitted to the disclosure main apparatus (see (4) in FIG. 1).

  When the disclosure main apparatus receives the attribute information request from the disclosure destination apparatus, the disclosure main apparatus transmits a terminal information request for requesting the user terminal information that is given to the service request and transmitted to the disclosure destination apparatus to the disclosure mediation apparatus ( (See (5) in FIG. 1).

  When the disclosure mediating apparatus receives the terminal information request from the disclosure main apparatus, the disclosure intermediary apparatus returns the user terminal information given to the service request and transmitted to the disclosure destination apparatus to the disclosure main apparatus (see (6) in FIG. 1). .

  When the disclosure main device receives the user terminal information returned from the disclosure mediation device, the comparison is made between the user terminal information received from the disclosure mediation device and the user terminal information received from the disclosure destination device together with the attribute information request. It is determined whether or not attribute information is transmitted according to the result (see (7) in FIG. 1). For example, the disclosure main device transmits attribute information to the disclosure destination device when the user terminal information received from the disclosure mediation device matches the user terminal information received from the disclosure destination device together with the attribute information request. Judge to do. When the disclosure main apparatus determines to transmit the attribute information to the disclosure destination apparatus, the disclosure main apparatus transmits attribute information corresponding to the request from the disclosure destination apparatus to the disclosure destination apparatus ((8 in FIG. 1). )reference).

  For this reason, the attribute information distribution control system according to the first embodiment can be controlled to prevent the attribute information from being distributed to unauthorized service providers, as in the main feature described above. .

[Configuration of Attribute Information Distribution Control System (Example 1)]
Next, the configuration of the attribute information distribution control system according to the first embodiment will be described with reference to FIGS. FIG. 2 is a block diagram illustrating the configuration of the attribute information distribution control system according to the first embodiment. FIG. 3 is a diagram illustrating a configuration example of information stored in the disclosed main apparatus according to the first embodiment. FIG. 4 is a diagram illustrating a configuration example of information stored in the disclosure mediating apparatus according to the first embodiment.

  As illustrated in FIG. 2, the information distribution control system according to the first embodiment includes a disclosure main device 100, a disclosure mediation device 200, and a disclosure destination device 300 that are connected to each other via a network 1 so as to communicate with each other. Composed.

  First, the disclosed main apparatus 100 is an apparatus such as a mobile phone terminal, a personal digital assistant (PDA), a personal computer (PC), or a personal handyphone system (PHS). The closely related components include a communication unit 110, a storage unit 120, and a control unit 130.

  The communication unit 110 includes a general interface and library for IP (Internet Protocol) communication, and controls transmission / reception of information exchanged with the disclosure mediating apparatus 200 or the disclosure destination apparatus 300.

  The storage unit 120 is a storage unit that stores data and programs necessary for various processes performed by the control unit 130, and particularly includes an attribute information storage unit 121 that is closely related to the present invention. The attribute information storage unit 121 stores attribute information related to the user of the main disclosure device 100, and stores, for example, a user name, an address, user terminal identification information, and the like as shown in FIG. Note that the model information of the disclosed main apparatus 100, position information based on the GPS function, and the like may be stored together.

  The control unit 130 is a processing unit that has a predetermined control program, a program that defines various processing procedures, and an internal memory for storing necessary data, and executes various processes using these, and is particularly suitable for the present invention. As closely related, a service request unit 131, a terminal information request unit 132, an attribute information transmission control unit 133, and an attribute information transmission unit 134 are provided.

  The attribute information transmission control unit 133 corresponds to “attribute information transmission control unit” recited in the claims.

  The service request unit 131 transmits a service request for requesting service provision to the disclosure destination apparatus 300. More specifically, the service request unit 131 is uniquely given to the disclosure main apparatus 100 in advance by receiving an input of the URL of the disclosure destination apparatus 300 from a user who uses the disclosure main apparatus 100. A service request including user terminal identification information is transmitted.

  The terminal information request unit 132 makes a request to the disclosure mediating apparatus 200 that requests the user terminal information given to the service request in the disclosure mediating apparatus 200. More specifically, when receiving the attribute information request from the disclosure destination apparatus 300, the terminal information request unit 132 requests the user terminal information that has been given to the service and transmitted to the disclosure destination apparatus 300. A terminal information request including identification information is transmitted to the disclosure mediating apparatus 200. Further, when receiving the user terminal information from the disclosure mediating apparatus 200 as a response to the terminal information request, the terminal information request unit 132 passes the received user terminal information to the attribute information transmission control unit 133 described later.

  The attribute information transmission control unit 133 determines whether or not to transmit attribute information to the disclosure destination apparatus 300. Specifically, the attribute information transmission control unit 133 receives the user terminal information from the disclosure mediating apparatus 200 received from the terminal information request unit 132, and the user terminal information received from the disclosure destination apparatus 300 together with the attribute information request. As a result of the comparison, for example, when the user terminal information matches each other, it is determined to transmit the attribute information to the disclosure destination apparatus 300. When the attribute information transmission control unit 133 determines to transmit the attribute information to the disclosure destination apparatus 300, the attribute information transmission control unit 133 transmits an attribute information transmission instruction to the attribute information transmission unit 134 described later.

  The attribute information transmission unit 134 transmits attribute information to the disclosure destination apparatus 300. More specifically, when the attribute information transmission unit 134 receives an attribute information transmission instruction from the attribute information transmission control unit 133, the attribute information transmission unit 134 transmits the attribute information stored in the attribute information storage unit 121 from the disclosure destination device 300. The attribute information corresponding to the attribute information request is read to generate attribute information for transmission, and the attribute information is transmitted to the disclosure destination apparatus 300.

  Next, the disclosure mediating apparatus 200 is an apparatus such as a gateway (GW: Gate Way), a proxy server (Proxy server), or a web server (Web server) operated by a communication carrier, and is particularly closely related to the present invention. As what does, the communication part 210, the memory | storage part 220, and the control part 230 are provided.

  The communication unit 210 controls IP (Internet Protocol) communication between the disclosure main apparatus 100 and the disclosure destination apparatus 300.

  The storage unit 220 is a storage unit that stores data and programs necessary for various types of processing performed by the control unit 230. In particular, the storage unit 220 includes a terminal information storage unit 221 that is closely related to the present invention. For example, as illustrated in FIG. 4, the terminal information storage unit 221 includes user terminal identification information uniquely assigned to the main disclosure device 100 for each ID (for example, “1001”) assigned to each data. (For example, “ID 12341234”) and user terminal information (for example, “c444bcb92d8cc75a4843e6e353c8f97bdae5c”) for identifying the disclosure main apparatus 100 that is the transmission source of the service request are associated and stored. The user terminal information can adopt not only a random character string as described above but also line information given by a telecommunications carrier.

  The control unit 230 is a processing unit that has a predetermined control program, a program that defines various processing procedures, and an internal memory for storing required data, and executes various processes using these, and is particularly suitable for the present invention. As a closely related component, a terminal information adding unit 231 and a terminal information response unit 232 are provided.

  The terminal information giving unit 231 corresponds to the “terminal identification information transmitting unit” described in the claims, and the terminal information response unit 232 is also used as the “terminal identification information returning unit” described in the claims. Correspond.

  The terminal information addition unit 231 assigns user terminal information for identifying the disclosure main apparatus 100 to the service request and transfers the service request to the disclosure destination apparatus 300. More specifically, when receiving a service request from the main disclosure device 100, the terminal information adding unit 231 extracts user terminal identification information included in the service request and uses the information stored in the terminal information storage unit 221. The user terminal information corresponding to the user terminal identification information extracted from the service request is acquired from the user terminal information and attached to the service request. Then, the terminal information giving unit 231 transfers the service request to which the user terminal information is given to the disclosure destination apparatus 300.

  Further, the terminal information adding unit 231 determines whether or not to add user terminal information to the service request received from the disclosure destination apparatus 100 according to the policy held in advance, and provides the user terminal information. The request may be transferred. As an example of the policy, the disclosure main apparatus 100 and the disclosure destination apparatus 300 are in a contract relationship, the service request received from the disclosure main apparatus 100 includes a specific URL, It can be mentioned that it belongs to ISP (Internet Services Provider), the disclosure main device 100 and the disclosure destination device 300 are connected by a LAN (Local Area Network), etc., and according to these policies, It is determined whether or not to add user terminal information to the service request received from the disclosure destination apparatus 100, and the service request to which the user terminal information is added is transferred.

  The terminal information adding unit 231 automatically generates an arbitrary random character string as user terminal information in response to reception of a service request from the disclosure destination apparatus 100, adds the random character string to the service request, and extracts it from the service request. The user information may be stored in the terminal information storage unit 221 in association with the user terminal identification information. In addition, when automatically generating an arbitrary random character string as user terminal information, the terminal information adding unit 231 may generate a fixed character string once in response to reception of a service request from the disclosure destination apparatus 100. Alternatively, for each access session with the main disclosure device 100, a one-time character string may be generated each time.

  In addition, the terminal information adding unit 231 adds the user terminal information to the service request and transfers it only when the signal requesting the addition of the user terminal information is received from the disclosure main apparatus 100 together with the service request. Also good. For example, the user terminal information is included only when the URI (Uniform Resource Identifier) parameter received as a service request from the disclosure main apparatus 100 includes a signal requesting addition of user terminal information, for example, uid = IDREQUEST. Give it to the service request and forward it.

  The terminal information response unit 232 returns user terminal information to the main disclosure apparatus 100. More specifically, when the terminal information response unit 232 receives a terminal information request for requesting a return of user terminal information transmitted to the disclosure destination apparatus 300 from the disclosure main apparatus 100, the user included in the terminal information request Terminal identification information is extracted, user terminal information corresponding to the user terminal identification information extracted from the terminal information request is acquired from the user terminal information stored in the terminal information storage unit 221, and terminal information is acquired. A reply is sent to the disclosure main apparatus 100 that is the transmission source of the request.

  The disclosure destination apparatus 300 is an information processing apparatus such as a server that provides a service via a network to the disclosure main apparatus 100, and particularly includes a communication unit 310 and a control unit 320 that are closely related to the present invention.

  The communication unit 310 includes a general interface and library for IP (Internet Protocol) communication, and controls transmission / reception of information exchanged with the disclosure main apparatus 100 or the disclosure mediation apparatus 200.

  The control unit 320 is a processing unit that has a predetermined control program, a program that defines various processing procedures, and an internal memory for storing necessary data, and executes various processes using these, and is particularly suitable for the present invention. As closely related items, an attribute information request transmission unit 321 and an attribute information reception unit 322 are provided.

  The attribute information request transmission unit 321 corresponds to “attribute information request transmission unit” recited in the claims.

  The attribute information request transmission unit 321 transmits an attribute information request to the disclosure main apparatus 100 that is the transmission source of the service request. More specifically, when receiving the service request transferred from the disclosure mediating apparatus 200, the attribute information request transmitting unit 321 discloses the service request transmission source together with the user terminal information attached to the service request. An attribute information request for requesting attribute information is transmitted to the main apparatus 100.

  The attribute information receiving unit 322 receives attribute information corresponding to the attribute information request from the disclosure main apparatus 100. The disclosure destination apparatus 300 provides a service when the attribute information received from the disclosure main apparatus 100 is a legitimate user permitted to provide the service.

[Processing of attribute information distribution control system (first embodiment)]
Subsequently, processing of the attribute information distribution control system according to the first embodiment will be described with reference to FIG. FIG. 5 is a flowchart illustrating a process flow of the attribute information distribution system according to the first embodiment.

  As shown in the figure, the disclosure main apparatus 100 is uniquely assigned to the disclosure main apparatus 100 in advance by receiving an input of the URL of the disclosure destination apparatus 300 from a user who uses the disclosure main apparatus 100. A service request including the existing user terminal identification information is transmitted (step S501).

  When the disclosure mediating apparatus 200 receives a service request from the disclosure main apparatus 100, the disclosure mediating apparatus 200 extracts user terminal identification information included in the service request, and from the user terminal information stored in the terminal information storage unit 221, User terminal information corresponding to the user terminal identification information extracted from the service request is acquired and attached to the service request (step S502). Then, the disclosure mediating apparatus 200 transfers the service request with the user terminal information to the disclosure destination apparatus 300 (step S503).

  Upon receiving the service request transferred from the disclosure mediating apparatus 200, the disclosure destination apparatus 300, together with the user terminal information given to the service request, sends attribute information to the disclosure main apparatus 100 that is the transmission source of the service request. An attribute information request for requesting is sent (step S504).

  When receiving the attribute information request from the disclosure destination device 300, the main disclosure device 100 requests the terminal information including the user terminal identification information to request the user terminal information given to the service and transmitted to the disclosure destination device 300. The request is transmitted to the disclosure mediating apparatus 200 (step S505).

  When the disclosure mediating apparatus 200 receives a terminal information request for requesting a reply to the user terminal information transmitted to the disclosure destination apparatus 300 from the disclosure main apparatus 100, the disclosure mediating apparatus 200 extracts the user terminal identification information included in the terminal information request, Disclosure by acquiring user terminal information corresponding to user terminal identification information extracted from the terminal information request from the user terminal information stored in the terminal information storage unit 221 and transmitting the terminal information request A reply is sent to the main apparatus 100 (step S506).

  When the disclosure main device 100 receives the user terminal information from the disclosure mediation device 200 as a response to the terminal information request, the disclosure main device 100 determines whether or not to transmit attribute information to the disclosure destination device 300 (step S507). More specifically, the disclosure main apparatus 100 compares the user terminal information received from the disclosure mediating apparatus 200 as a response to the terminal information request and the user terminal information received from the disclosure destination apparatus 300 together with the attribute information request. As a result, for example, when the user terminal information matches each other, it is determined to transmit the attribute information to the disclosure destination apparatus 300.

  When the disclosure main apparatus 100 determines to transmit the attribute information to the disclosure destination apparatus 300, the attribute information from the disclosure destination apparatus 300 is selected from the attribute information stored in the attribute information storage unit 121. The attribute information corresponding to the request is read to generate attribute information for transmission, and the attribute information is transmitted to the disclosure destination apparatus 300 (step S508).

  The disclosure destination device 300 provides a service when the attribute information received from the disclosure main device 100 is an authorized user permitted to provide the service (step S509).

[Effects of Example 1 (Example 1)]
As described above, according to the first embodiment, when the disclosure mediating apparatus 200 receives a service request for the disclosure destination apparatus 300 from the disclosure main apparatus 100, the user terminal for identifying the disclosure main apparatus 100 Information is added to the service request and transmitted to the disclosure destination apparatus 300. When the disclosure destination apparatus 300 receives the service request from the disclosure destination apparatus 100 via the disclosure mediation apparatus 200, the use granted to the service request The attribute information request is transmitted to the disclosure main device 100 together with the user terminal information, and the disclosure main device 100 sends the attribute information request based on the user terminal information received from the disclosure destination device 300 together with the attribute information request. Since transmission of attribute information to the disclosure destination apparatus 300 that is the transmission source is controlled, attribute information is transmitted only to the disclosure destination apparatus 300 via the disclosure mediation apparatus 200. It can be controlled to, it is possible to control to prevent that the attribute information is circulated against unauthorized service provider. That is, by using the user terminal information of the disclosure main device 100 that only the disclosure mediating device 200 knows, the user of the disclosure main device 100 can send the user terminal information to the disclosure destination device 300 via the disclosure mediation device 200. The attribute information is distributed to an unauthorized service provider by controlling the attribute information to be transmitted only to the disclosure destination apparatus 300 via the disclosure mediating apparatus 200. It can be controlled to prevent this.

  Further, according to the first embodiment, according to the policy that determines whether or not the user terminal information should be given to the service request, the user terminal information is given to the service request and transmitted to the disclosure destination apparatus 300. It is possible to control the attribute information to be transmitted only to the disclosure destination apparatus 300 approved by the disclosure mediation apparatus 200.

  Further, according to the first embodiment, the disclosure mediating apparatus 200 gives a service request to a service request when receiving a terminal information request for requesting a reply of user terminal information transmitted to the disclosure destination apparatus 300 from the disclosure main apparatus 100. The user terminal information transmitted to the disclosure destination apparatus 300 is returned to the disclosure main apparatus 100 that is the transmission source of the terminal information request, and when the disclosure main apparatus 100 receives the attribute information request from the disclosure destination apparatus 300, the disclosure is performed. Requests and receives a reply of the user terminal information transmitted to the disclosure destination apparatus 300 from the mediation apparatus 200 and receives it from the disclosure destination apparatus 300 together with the user terminal information received from the disclosure mediation apparatus 200 and the attribute information request. Since the transmission of attribute information to the disclosure destination apparatus 300 that is the transmission source of the attribute information request is controlled according to the comparison result with the user terminal information that has been sent, With gender information is prevented from flowing, for example, it is possible to distribute also attribute information correctly even if the user terminal information is changed. That is, by utilizing the characteristic that the disclosure mediating apparatus 200 passes user terminal information only to the correct disclosure destination apparatus 300, the attribute information is prevented from being distributed to an unauthorized service provider (appropriately distributed). In addition, by verifying the user terminal information for each service request, the attribute information can be correctly distributed even when the user terminal information is changed.

  Further, according to the first embodiment, when a service request for the disclosure destination apparatus 300 is received from the disclosure main apparatus 100, the user terminal information generated for each access session with the disclosure main apparatus 100 is added to the service request. Therefore, it is possible to guarantee that the service request is transmitted to the disclosure destination device via the disclosure mediation device without managing the terminal identification information in advance, and as a result It is possible not only to prevent the distribution of attribute information to the service provider, but also to prevent the disclosure destination device that is the transmission source of the service request from being specified.

  In the first embodiment, the disclosure mediating apparatus 200 manages different user terminal information for each disclosure destination apparatus identification information for identifying the disclosure destination apparatus 300, and provides a service to the disclosure destination apparatus 300. When transmitting a request, user terminal information corresponding to the disclosure destination device identification information of the disclosure destination device 300 that is the destination of the service request is acquired from each managed terminal identification information and given to the service request When the terminal information request for requesting the reply of the user terminal information transmitted to the disclosure destination apparatus 300 is received from the disclosure main apparatus 100, the service request already transmitted from the managed terminal identification information The user terminal information corresponding to the disclosure destination device identification information of the disclosure destination device 300 that is the destination is acquired, and the acquired user terminal information is the disclosure source that is the transmission source of the terminal information request It may be returned to the location 100.

  This prevents not only attribute information from being distributed to unauthorized service providers, but also prevents name identification and leakage when terminal identification information is linked between disclosure target devices. Is possible. Furthermore, fraud to the terminal identification information can be detected for each disclosure destination device.

  In the first embodiment, the disclosure main device 100 receives the user terminal information received from the disclosure mediation device 200 as a response to the terminal information request, and the user terminal information received from the disclosure destination device 300 together with the attribute information request. As a result of comparison, for example, when the user terminal information matches each other, the case where it is determined that the attribute information is transmitted has been described. However, the present invention is not limited to this.

  For example, the same hash function is given to the disclosure main apparatus 100 and the disclosure mediation apparatus 200 in advance. The disclosure mediating apparatus 200 generates a hash value of user terminal information using a hash function, assigns it to the service request from the disclosure main apparatus 100, and transfers it to the disclosure destination apparatus 300. The disclosure destination device 300 transmits the attribute information request to the disclosure main device 100 together with the hash value included in the service request received from the disclosure mediation device 200. Then, as a response to the terminal information request received from disclosure main apparatus 100, disclosure mediating apparatus 200 transmits user terminal information that is the original data of the hash value transmitted to disclosure destination apparatus 300 to disclosure main apparatus 100. The main disclosure device 100 generates a hash value of the user terminal information received from the disclosure mediation device 200 using a hash function, compares the hash value received from the disclosure destination device 300 with the attribute information request, If the hash values match each other, it may be determined that the attribute information is transmitted.

  In addition, when employ | adopting the line | wire information etc. which the disclosure mediating apparatus 200 (for example, gateway) provided by the communication carrier manages beforehand as user terminal information, the main disclosure apparatus 100 (for example, a service user's terminal) ) Does not need to manage user terminal information by itself, and distributes attribute information by presenting line information that can be known via the disclosure mediating apparatus 200 only by a regular disclosure destination apparatus 300 (for example, a service provider apparatus). It is possible to prevent distribution of attribute information to an unauthorized disclosure destination apparatus 300.

  By the way, in the attribute information distribution control system according to the first embodiment, an apparatus having only a function of adding user terminal information to a service request from the disclosure main apparatus 100, and a terminal information request from the disclosure main apparatus 100 The disclosure mediating apparatus 200 may be configured to be distributed with an apparatus having only a function of responding. Therefore, in the following second embodiment, the configuration and processing of the attribute information distribution control system according to the second embodiment will be described with reference to the drawings.

[Configuration of attribute information distribution control system (second embodiment)]
First, the configuration of the attribute information distribution control system according to the second embodiment will be described with reference to FIG. FIG. 6 is a block diagram illustrating the configuration of the attribute information distribution control system according to the second embodiment. As shown in the figure, the configuration of the attribute information distribution control system according to the second embodiment is that the attribute information distribution according to the first embodiment is provided with a disclosure mediating apparatus 400 and a response apparatus 500 connected in a communicable state. Different from the system.

  The disclosure mediating apparatus 400 includes a communication unit 410, a storage unit 420, and a control unit 430, which are closely related to the present invention. Among these, the processing of the terminal information adding unit 431 of the control unit 430 is performed in the first embodiment. The point described below is different from the processing of the terminal information adding unit 231 of the disclosure mediating apparatus 200.

  In other words, when the terminal information requesting unit 431 receives a terminal information request for requesting a reply to the user terminal information transmitted to the disclosure destination apparatus 300 from the disclosure main apparatus 100, the terminal information adding unit 431 obtains the user terminal identification information included in the terminal information request. User terminal information corresponding to the user terminal identification information extracted from the terminal information request is extracted from the user terminal information extracted and stored in the terminal information storage unit 421, and the acquired user terminal information is acquired. Is transferred to the response device 500.

  The terminal information adding unit 431 corresponds to “terminal identification information reply request transfer unit” described in the claims.

  The response device 500 includes a communication unit 510 and a control unit 520 as closely related to the present invention. The communication unit 510 includes a general interface and library for IP (Internet Protocol) communication, and controls transmission / reception of information exchanged with the disclosure main apparatus 100 or the disclosure mediating apparatus 400.

  The terminal information response unit 521 of the control unit 510 has the same function as the terminal information response unit 232 of the disclosure mediating apparatus 200 described in the first embodiment, and is a terminal from the disclosure main apparatus 100 transferred from the disclosure mediating apparatus 400. When the information request is received, the user terminal information attached to the terminal information request is acquired and returned to the disclosure main apparatus 100 that is the transmission source of the terminal information request.

  The response device 500 corresponds to the “response device” described in the claims, and the terminal information response unit 521 described above also corresponds to the “terminal identification information return unit” described in the claims.

[Processing of attribute information distribution control system (second embodiment)]
Next, processing of the attribute information distribution control system according to the second embodiment will be described with reference to FIG. FIG. 7 is a flowchart illustrating a process flow of the attribute information distribution system according to the second embodiment. The processing of the attribute information distribution system according to the second embodiment is different from the processing of the attribute information distribution system according to the first embodiment (see FIG. 5) in the processing from step S706 to step S708 shown in FIG.

  That is, as illustrated in FIG. 7, when the disclosure mediating apparatus 400 receives a terminal information request for requesting a return of user terminal information transmitted to the disclosure destination apparatus 300 from the disclosure main apparatus 100, the disclosure mediating apparatus 400 is included in the terminal information request. User terminal identification information is extracted, and user terminal information corresponding to the user terminal identification information extracted from the terminal information request is acquired from the user terminal information stored in the terminal information storage unit 421. The acquired user terminal information is added to the terminal information request (step S706). Then, the disclosure mediating apparatus 400 transfers the terminal information request with the user terminal information added thereto to the response apparatus 500 (step S707).

  When the response device 500 receives the terminal information request from the disclosure main device 100 transferred from the disclosure mediation device 400, the response device 500 acquires the user terminal information attached to the terminal information request, and sends it to the transmission source of the terminal information request. A reply is sent to a certain main disclosure device 100 (step S708).

[Effects of Example 2]
As described above, according to the second embodiment, when the disclosure mediating apparatus 400 receives a service request for the disclosure destination apparatus 300 from the disclosed main apparatus 100 as in the first embodiment, this disclosure main apparatus. User terminal information for identifying 100 is attached to the service request and transmitted to the disclosure destination apparatus, while a terminal information request for requesting a reply to the user terminal information transmitted to the disclosure destination apparatus 300 is disclosed. , The terminal information request added with the user terminal information transmitted to the disclosure destination apparatus 300 is transferred to the response apparatus 500, and the response apparatus 500 receives the terminal information request transferred from the disclosure mediation apparatus 400. In this case, since the user terminal information included in the terminal information request is returned to the disclosure main apparatus 100, the disclosure intermediary apparatus 400 possessing only the user terminal information grant capability is sent to A response to the inquiry from the disclosure main apparatus 100 can be realized by the response apparatus 500 without adding a function for responding to the inquiry from the display main apparatus 100, and attribute information is provided to the unauthorized service provider. It is possible to prevent distribution.

  In the first embodiment, the case where the main disclosure device 100 acquires user terminal information from the disclosure mediation device 200 has been described. However, the present invention is not limited to this, and the disclosure mediation device 200 The user terminal information given to the service request may be stored in advance. Therefore, in the following third embodiment, the configuration and processing of the attribute information distribution control system according to the third embodiment will be described with reference to the drawings.

[Configuration of attribute information distribution control system (Example 3)]
First, the configuration of the attribute information distribution control system according to the third embodiment will be described with reference to FIGS. FIG. 8 is a block diagram illustrating the configuration of the attribute information distribution control system according to the third embodiment. FIG. 9 is a diagram illustrating a configuration example of information stored in the disclosed main apparatus according to the third embodiment. FIG. 10 is a diagram illustrating a configuration example of information stored in the disclosure mediating apparatus according to the third embodiment.

  As shown in FIG. 8, the configuration of the attribute information distribution control system according to the third embodiment is different from the attribute information distribution system according to the first embodiment in that the terminal information request unit 132 is not required in the main disclosure device 100. The intermediary device 200 is different in that the terminal information response unit 232 is unnecessary and the point described below.

  That is, the disclosed main apparatus 100 newly includes a terminal information storage unit 122 in the storage unit 120. The terminal information storage unit 122 stores in advance user terminal information given to a service request in the disclosure mediating apparatus 200. For example, as shown in FIG. 9, each disclosure destination device identification information for identifying the disclosure destination device 300 that is the destination of the service request (for example, “every user given to the service request in the disclosure mediating device 200” The terminal information is stored in advance, and the terminal information storage unit 122 corresponds to “terminal identification information storage unit” recited in the claims.

  For example, as illustrated in FIG. 10, the terminal information storage unit 221 of the disclosure mediating apparatus 200 is uniquely assigned to the disclosure main apparatus 100 for each ID (for example, “1001”) allocated to each data. User terminal identification information (for example, “ID12341234”) and each disclosure destination apparatus identification information for identifying the disclosure destination apparatus 300 that is the destination of the service request (for example, “http://www.example.com”) And user terminal information (for example, “38 diff6578 aabd37 ecc5 dacb30b5c22e311f”) for identifying the disclosure main apparatus 100 that is the transmission source of the service request. The terminal information storage unit 221 corresponds to “terminal identification information management unit” recited in the claims.

  Then, when transferring the service request received from the main disclosure device 100 to the disclosure destination device 300, the terminal information adding unit 231 of the disclosure mediating device 200 includes the terminal identification information stored in the terminal information storage unit 221. Then, user terminal information corresponding to the disclosure destination device identification information of the disclosure destination device 300 that is the destination of the service request is acquired and attached to the service request.

  When the attribute information transmission control unit 133 of the disclosure main device 100 receives the attribute information request from the disclosure destination device 300, the attribute information transmission control unit 133 transmits the attribute information request from the user terminal information stored in the terminal information storage unit 221. User terminal information corresponding to the disclosure destination apparatus identification information of the original disclosure destination apparatus 300 is acquired, the acquired user terminal information, and the user terminal information received from the disclosure destination apparatus 300 together with the attribute information request, For example, when the user terminal information matches each other, the attribute information is determined to be transmitted to the disclosure destination apparatus 300.

[Processing of attribute information distribution control system (third embodiment)]
Next, processing of the attribute information distribution control system according to the third embodiment will be described with reference to FIG. FIG. 11 is a flowchart illustrating the processing flow of the attribute information distribution system according to the third embodiment. The processing of the attribute information distribution system according to the third embodiment is different from the processing of the attribute information distribution system according to the first embodiment (see FIG. 5) in the processing of step S1102 and step S1105 shown in FIG.

  That is, as illustrated in FIG. 11, when receiving a service request from the main disclosure device 100, the terminal information adding unit 231 of the disclosure mediating device 200 receives from the terminal identification information stored in the terminal information storage unit 221. User terminal information corresponding to the disclosure destination device identification information of the disclosure destination device 300 that is the destination of the service request is acquired and attached to the service request (step S1102).

  When the disclosure main device 100 receives the attribute information request from the disclosure destination device 300, the disclosure destination device 300 that is the transmission source of the attribute information request from the user terminal information stored in the terminal information storage unit 221. According to the comparison result between the acquired user terminal information and the user terminal information received from the disclosure destination apparatus 300 together with the attribute information request. For example, when the user terminal information matches each other, it is determined to transmit the attribute information to the disclosure destination apparatus 300 (step S1105).

[Effects of Example 3]
As described above, according to the third embodiment, the main disclosure device 100 stores user terminal information in advance, and stores in advance the user terminal information received from the disclosure destination device 300 together with the attribute information request. The transmission of the attribute information to the disclosure destination apparatus 300 that is the transmission source of the attribute information request is controlled according to the comparison result with the user terminal information that has been stored, so that fraud to the terminal identification information by the disclosure destination apparatus is detected. Therefore, it is possible to prevent the attribute information from being distributed to an unauthorized service provider (who has made an unauthorized action on the terminal attribute information).

  Further, according to the third embodiment, the disclosure mediating apparatus 200 stores different user terminal information in association with each disclosure destination apparatus identification information for identifying the disclosure destination apparatus 300, and provides the service to the disclosure destination apparatus 300. When transferring the request, the user terminal information corresponding to the disclosure destination device identification information of the disclosure destination device 300 that is the destination of the service request is acquired from each terminal identification information and given to the service request. It is possible to detect fraud in terminal identification information for each disclosure destination device, and to prevent individual attribute information from being distributed to unauthorized (provided fraud on terminal attribute information) service providers. It is.

  Various embodiments have been described as one embodiment for carrying out the present invention, but the present invention may be implemented in various different forms other than the above-described embodiments. In the following, other embodiments included in the present invention will be described.

(1) Device Configuration, etc. Each component of the attribute information distribution control system shown in FIG. 2 is functionally conceptual and does not necessarily need to be physically configured as illustrated. That is, the specific form of distribution / integration of the attribute information distribution control system is not limited to the one shown in the figure. For example, an apparatus having only a function of adding user terminal information to a service request from the disclosure main apparatus 100, and disclosure All or part of the functions are distributed in a unit having only a function of responding to a terminal information request from the main apparatus 100, depending on various loads, usage conditions, etc. Can be distributed and integrated.

(2) Attribute Information Distribution Control Method The attribute information distribution control method as described below is realized by the attribute information distribution control system described in the above embodiment.

  That is, the disclosure main apparatus 100, the disclosure mediating apparatus 200, and the disclosure destination apparatus 300 are connected in a state where they can communicate with each other, and attribute information related to the user of the disclosure main apparatus 100 is transferred from the disclosure main apparatus 100 to the disclosure destination apparatus 300. In the attribute information distribution control system that controls transmission, the disclosure mediating apparatus 200 provides user terminal information for identifying the disclosure main apparatus 100 when receiving a service request for the disclosure destination apparatus 300 from the disclosure main apparatus 100. It includes a user terminal information transmission step (for example, see step S50 to step S503 in FIG. 5) that is given to a request and transmitted to the disclosure destination device 300. The disclosure destination device 300 is disclosed via the disclosure mediation device 200. When receiving a service request from the device 100, together with the user terminal information given to the service request The disclosure main apparatus 100 includes an attribute information request transmission step (for example, see step S504 in FIG. 5) for transmitting an attribute information request to the disclosure main apparatus 100. The disclosure main apparatus 100 receives the user from the disclosure destination apparatus 300 together with the attribute information request. Attribute information including an attribute information transmission control step (see, for example, step S505 to step S507 in FIG. 5) for controlling transmission of attribute information to the disclosure destination apparatus 300 that is the transmission source of the attribute information request based on the terminal information. Realize distribution control system.

  In the attribute information distribution control method described above, each processing function performed by each device can be realized by executing a program prepared in advance on a computer such as a personal computer or a workstation. This program can be distributed via a network such as the Internet. The program can also be executed by being recorded on a computer-readable recording medium such as a hard disk, a flexible disk (FD), a CD-ROM, an MO, and a DVD and being read from the recording medium by the computer.

  As described above, in the attribute information distribution control system and the attribute information distribution control method according to the present invention, the disclosure main apparatus, the disclosure mediation apparatus, and the disclosure destination apparatus are connected in a state where they can communicate with each other, and the use of the disclosure main apparatus This is useful when controlling transmission of attribute information related to a person from the disclosure main apparatus to the disclosure destination apparatus, and in particular, controlling so as to prevent the distribution of attribute information to an unauthorized service provider. Suitable for.

It is a figure for demonstrating the outline | summary and characteristic of the attribute information distribution control system which concern on Example 1. FIG. It is a block diagram which shows the structure of the attribute information distribution control system which concerns on Example 1. FIG. It is a figure which shows the structural example of the information memorize | stored in the disclosed main apparatus which concerns on Example 1. FIG. 6 is a diagram illustrating a configuration example of information stored in a disclosure mediating apparatus according to Embodiment 1. FIG. It is a flowchart which shows the flow of a process of the attribute information distribution system which concerns on Example 1. FIG. It is a block diagram which shows the structure of the attribute information distribution control system which concerns on Example 2. FIG. It is a flowchart which shows the flow of a process of the attribute information distribution system which concerns on Example 2. FIG. It is a block diagram which shows the structure of the attribute information distribution control system which concerns on Example 3. FIG. It is a figure which shows the structural example of the information memorize | stored in the main disclosed apparatus which concerns on Example 3. FIG. FIG. 10 is a diagram illustrating a configuration example of information stored in a disclosure mediating apparatus according to a third embodiment. It is a flowchart which shows the flow of a process of the attribute information distribution system which concerns on Example 3.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Network 100 Disclosure main apparatus 110 Communication part 120 Storage part 121 Attribute information storage part 130 Control part 131 Service request part 132 Terminal information request part 133 Attribute information transmission control part 134 Attribute information transmission part 200 Disclosure mediating apparatus 210 Communication part 220 Storage part 221 Terminal information storage unit 230 Control unit 231 Terminal information grant unit 232 Terminal information response unit 300 Disclosure destination device 310 Communication unit 320 Control unit 321 Attribute information request transmission unit 322 Attribute information reception unit 400 Disclosure mediation device 500 Response device

Claims (10)

Attribute information for controlling transmission of attribute information related to a user of the disclosure main apparatus from the disclosure main apparatus to the disclosure destination apparatus, wherein each of the disclosure main apparatus, the disclosure mediation apparatus, and the disclosure destination apparatus is connected in a communicable state. A distribution control system,
When the disclosure mediating apparatus receives a service request for the disclosure destination apparatus from the disclosure main apparatus, the disclosure mediation apparatus assigns terminal identification information for identifying the disclosure main apparatus to the service request and transmits the service request to the disclosure destination apparatus Terminal identification information transmitting means for
When the disclosure destination device receives a service request from the disclosure destination device via the disclosure mediation device, the disclosure destination device adds attribute information to the disclosure main device together with the terminal identification information given to the service request. Attribute information request transmission means for transmitting a request is provided,
The disclosure main device compares the terminal identification information received from the disclosure destination device together with the attribute information request with the terminal identification information managed by the disclosure mediation device, and the terminal identification information received from the disclosure destination device and the terminal identification information if the terminal identification information disclosure intermediary device manages match, characterized by comprising an attribute information transmission control means for transmitting the pre-Symbol attribute information to a sender of the attribute information request disclosee device Attribute information distribution control system.   The terminal identification information transmitting means adds the terminal identification information to the service request and transmits it to the disclosure destination device according to a policy that determines whether the terminal identification information should be added to the service request. The attribute information distribution control system according to claim 1. When the disclosure mediation apparatus receives a terminal identification information reply request for requesting a reply of the terminal identification information transmitted to the disclosure destination apparatus from the disclosure main apparatus, the disclosure mediation apparatus adds the service request and transmits the request to the disclosure destination apparatus Terminal identification information reply means for returning the terminal identification information to the disclosure main apparatus that is the transmission source of the terminal identification information reply request,
The disclosed main apparatus is:
When receiving an attribute information request from the disclosure destination device, a terminal identification information receiving unit that requests the return of the terminal identification information transmitted to the disclosure destination device to the disclosure mediation device and receives the terminal identification information Further comprising
The attribute information transmission control means compares the terminal identification information received by the terminal identification information receiving means with the terminal identification information received from the disclosure destination device together with the attribute information request, and the terminal identification information receiving means if the terminal identification information received received terminal identification information with the attribute information requested by the disclosed device have to match, it transmits the pre-Symbol attribute information to a sender of the attribute information request disclosee device The attribute information distribution control system according to claim 1 or 2. The disclosure mediating apparatus includes:
Terminal identification information management means for managing the terminal identification information in advance for each of the main disclosure devices,
The terminal identification information transmission means, when transmitting a service request to the disclosure destination apparatus, the disclosure main apparatus that is the transmission source of the service request from the terminal identification information managed by the terminal identification information management means To obtain the terminal identification information corresponding to the service request,
The terminal identification information reply means obtains terminal identification information corresponding to the disclosure main apparatus that is the transmission source of the terminal identification information reply request from the terminal identification information managed by the terminal identification information management means. 4. The attribute information distribution control system according to claim 3, wherein the attribute information distribution control system returns a response to a disclosure main apparatus that is a transmission source of the terminal identification information reply request. The terminal identification information management means manages different terminal identification information in association with each disclosure destination device identification information for identifying the disclosure destination device,
When the terminal identification information transmitting means transmits a service request to the disclosure destination apparatus, the disclosure destination apparatus which is the transmission destination of the service request from the terminal identification information managed by the terminal identification information management means To obtain the terminal identification information corresponding to the service request,
The terminal identification information return means is managed by the terminal identification information management means when a terminal identification information return request for requesting a reply of terminal identification information transmitted to the disclosure destination apparatus is received from the disclosure main apparatus. The terminal identification information corresponding to the disclosure main apparatus that is the transmission source of the terminal identification information reply request is acquired from each terminal identification information, and the acquired terminal identification information is transmitted as the transmission source of the terminal identification information reply request. 5. The attribute information distribution control system according to claim 4, wherein the attribute information distribution control system returns a response to the disclosed main apparatus.   The terminal identification information transmitting means, when receiving a service request for the disclosure destination device from the disclosure main device, gives the terminal identification information generated for each access session with the disclosure main device to the service request, The attribute information distribution control system according to claim 1, wherein the attribute information distribution control system transmits the information to the disclosure destination device. A response device connected in a communicable state with the disclosed mediation device;
The disclosure mediating apparatus includes:
When receiving a service request for the disclosure destination apparatus from the disclosure main apparatus, terminal identification information transmission for giving terminal identification information for identifying the disclosure main apparatus to the service request and transmitting the service request to the disclosure destination apparatus Means,
When a terminal identification information reply request for requesting a reply of the terminal identification information transmitted to the disclosure destination apparatus is received from the disclosure main apparatus, the terminal identification information reply request to which the terminal identification information is added is transferred to the response apparatus. A terminal identification information reply request transfer means,
The response device is:
When receiving the terminal identification information response request transferred from said open 示仲 through device, with terminal identification information response unit for returning the terminal identification information included in the terminal identification information response request to the disclosed main device The attribute information distribution control system according to claim 1 or 2. The disclosed main apparatus further includes terminal identification information storage means for storing the terminal identification information in advance,
The attribute information transmission control unit compares the terminal identification information received from the disclosure destination device together with the attribute information request with the terminal identification information stored in the terminal identification information storage unit, and receives the information from the disclosure destination device. It was when the terminal identification information and the terminal identification information stored in the terminal identification information storage means are matched, characterized by sending a pre-Symbol attribute information to a sender of the attribute information request disclosee device The attribute information distribution control system according to claim 1 or 2. The terminal identification information storage means stores different terminal identification information for each disclosure destination device identification information for identifying the disclosure destination device,
The attribute information transmission control means is a terminal identification corresponding to the disclosure destination apparatus identification information of the disclosure destination apparatus that is the transmission source of the attribute information request from among the terminal identification information stored in the terminal identification information storage means. Obtaining information , comparing the acquired terminal identification information with the terminal identification information received from the disclosure destination device together with the attribute information request, and the disclosure together with the acquired terminal identification information and the attribute information request if the terminal identification information received from the preceding apparatus are the same, the attribute information distribution of claim 8, wherein transmitting the pre Symbol attribute information to a sender of the attribute information request disclosee device Control system. Attribute information for controlling transmission of attribute information related to a user of the disclosure main apparatus from the disclosure main apparatus to the disclosure destination apparatus, wherein each of the disclosure main apparatus, the disclosure mediation apparatus, and the disclosure destination apparatus is connected in a communicable state. A distribution control method,
The disclosure mediating apparatus includes:
A terminal identification information transmission step of, when receiving a service request for the disclosure destination apparatus from the disclosure main apparatus, adding terminal identification information for identifying the disclosure main apparatus to the service request and transmitting the service request to the disclosure destination apparatus; Including
When the disclosure destination device receives a service request from the disclosure destination device via the disclosure mediation device, the disclosure destination device adds attribute information to the disclosure main device together with the terminal identification information given to the service request. Including an attribute information request sending step for sending a request,
The disclosure main device compares the terminal identification information received from the disclosure destination device together with the attribute information request with the terminal identification information managed by the disclosure mediation device, and the terminal identification information received from the disclosure destination device and the terminal identification information if the terminal identification information disclosure intermediary device manages match is characterized by including the attribute information transmission control step of transmitting the pre-Symbol attribute information to a sender of the attribute information request disclosee device Attribute information distribution control method.

Images