JP5850587B1 - Personal information account banking - Google Patents

Abstract

An operator manages information necessary for providing a service and information permitted to be disclosed by a customer, and avoids disclosing personal information more than necessary. When a customer accesses a web page of a business operator who wants to receive a service, a personal information disclosure button for disclosing personal information necessary for providing the service is displayed on the screen of the customer terminal. When the customer presses the personal information disclosure button, the business operator server transmits a customer personal information acquisition request stored in the personal information account management server. The personal information account management server that has received the acquisition request reads the personal information item necessary for the service from the business operator information DB, and extracts the personal information from the personal information DB based on the personal information item. Then, a disclosure information selection screen listing the items of the personal information is generated and transmitted to the customer terminal. The customer selects personal information whose disclosure is permitted from the displayed screen. The personal information account management server transmits the selected information to the business server. [Selection] Figure 1

Description

  The present invention relates to a method for disclosing personal information, and more particularly to a personal information account management server, a personal information management system, and a program for managing personal information.

  Conventionally, various services can be received on the Internet. In this case, a user who wants to receive a service inputs his / her personal information to the provider providing the service via the network, and authentication with the service provider is established. I can receive it.

  By the way, in recent years, with the advancement of hacking technology, there have been many incidents of leakage of information registered in Internet services, raising awareness of the danger of handling personal information. I can not say. Business operators have introduced their own authentication systems, but it cannot be said that advanced authentication technologies such as one-time passwords and two-factor authentication are adopted.

  Therefore, a technique is known in which a mediation server for managing personal information of users is provided and personal information is provided to each service provider via the mediation server.

  For example, in Patent Document 1, when a user specifies a service that the user wants to provide, the mediation server checks an item of personal information necessary for providing the service, and extracts personal information that needs to be disclosed from the attribute information database. A method for providing personal attribute information that determines whether or not a condition for providing a service is satisfied based on the extracted personal information and transmits the extracted personal information only when the condition is satisfied is disclosed. Further, Patent Document 2 describes a personal information providing apparatus that transmits personal information from a specific personal information holding organization determined based on the intention of the personal information to a specific third party.

JP 2008-046733 A JP 2010-152492 A

  According to the methods disclosed in Patent Documents 1 and 2 above, it is possible to prevent personal information from being disclosed even when it is unnecessary. In addition, the personal information holding organization can be determined based on the intention of the person. However, the information requested by the service provider may include information that the user does not want to disclose. In this case, there is a discrepancy between the required information on the provider side and the disclosed information on the user side. There is still a problem that personal information is disclosed more than necessary. In addition, it takes a lot of time and cost because it is necessary to construct a new system and provide an intermediary server, or to establish an organization for holding personal information. Furthermore, when a new business operator manages personal information, there is a possibility that the user may feel uneasy because the results and reliability of handling personal information are low. Therefore, it is conceivable that a financial institution that manages a lot of personal information with high robustness plays a role in security and provides a personal information management service to users (customers) and general businesses.

  The present invention has been made in view of such a situation, and manages information necessary for service provision and information that a customer permits disclosure, and discloses that personal information is disclosed more than necessary. An object is to provide a personal information management system by a financial institution for avoidance.

  In order to solve the above problems, the personal information account management server of the present invention provides the following solution.

  A personal information account management server of a financial institution connected via a network to a customer terminal and a provider server of a provider providing a service to the customer, the customer required for each service provided by the provider A personal information database in which items of personal information are registered in association with a network address of the business operator's website, a personal information database registered by the customer and storing the personal information of the customer, Upon receiving an acquisition request for personal information necessary for the service from a vendor server, the extracted information is extracted from the required information extraction unit that extracts the personal information necessary for the service by referring to the provider information database and the personal information database. Generating a disclosure information selection screen that prompts the customer to select items of personal information permitted to be disclosed from the personal information A personal information disclosure selection unit; and a control unit that reads out personal information permitted to be disclosed to the business by the customer and instructs the business server to make a request for transmission. To do.

  The business operator information database stores the necessary personal information for each type of service.

  In addition, the control unit is a disclosure information that prompts the customer terminal to select and input personal information that is permitted to be disclosed among the customer personal information necessary for each service registered in the business operator information database. A selection screen is transmitted, and based on the information selected and input by the customer terminal, the item permitted to be disclosed is specified from the personal information registered in the personal information database.

  Moreover, the said provider information database memorize | stores the access count counted for every use of the said service, and displays the said access count on the said disclosure information selection screen, It is characterized by the above-mentioned.

  Further, the personal information database stores a change history of the personal information, and displays the change history on the disclosure information selection screen.

  The personal information account management server further includes an account detail information database that stores account detail information that is a history of transmission of the personal information to the business operator, and the control unit is based on a request from the customer terminal. The account details information is transmitted.

  Further, the control unit, based on a request from the customer terminal, transmits a request for erasing the personal information stored in the account details information to a business server that provided the personal information. To do.

  In another aspect of the present invention, a customer terminal, a business server of a business providing a service to a customer, and a personal information account management of a financial institution connected to the customer terminal and the business server via a network A personal information management system comprising: a server, wherein the personal information account management server includes an item of the customer's personal information required for each service provided by the operator in a network address of the operator's website A provider information database stored in association with each other, and a personal information database registered by the customer and storing the customer's personal information, and a request for acquiring personal information necessary for the service from the provider server Is received, the operator information database and the personal information database are referred to, and the personal information necessary for the service is extracted. And generating a disclosure information selection screen that prompts the customer to select an item of personal information permitted to be disclosed from the extracted personal information, and allowing the customer to disclose the information to the operator Is transmitted to the provider server that has made the acquisition request.

  According to another aspect of the present invention, there is provided a program for a personal information account management server of a financial institution connected via a network to a customer terminal and a business server of a business providing a service to the customer. Means for storing an item of personal information of the customer necessary for each service provided by the customer in a business operator information database in association with a network address of the business operator's website, and the customer's personal registered in advance by the customer Means for storing information in a personal information database, and receiving a request for acquiring personal information necessary for the service from the provider server, referring to the provider information database and the personal information database, and A means for extracting personal information, and a section for personal information that a customer permits disclosure from among the extracted personal information A computer that functions as a means for generating a disclosure information selection screen that prompts the user to select, and a means for reading personal information permitted to be disclosed by the customer and transmitting it to the provider server that requested the acquisition. And

  According to the present invention, personal information management by a financial institution for managing information necessary for service provision by a business operator and information permitted by a customer to be disclosed and preventing personal information from being disclosed more than necessary. A system can be provided.

It is an image figure of the personal information management system concerning an embodiment of the invention. It is a functional block diagram of the personal information management system concerning an embodiment of the invention. It is an image figure of personal information DB shown in FIG. FIG. 3 is an image diagram of a business operator information DB shown in FIG. 2. It is a sequence diagram which shows the processing operation of the personal information management system which concerns on embodiment of this invention. It is an image figure of the approval screen of an information terminal. It is an image figure in which the usage status is described in the account details. It is a flowchart which shows the processing operation of the personal information account management server of the personal information management system which concerns on embodiment of this invention.

  DESCRIPTION OF EMBODIMENTS Hereinafter, a mode for carrying out the present invention (hereinafter referred to as this embodiment) will be described in detail with reference to the accompanying drawings. Note that the same numbers or symbols are assigned to the same elements throughout the description of the embodiment.

  FIG. 1 is an image diagram of a personal information management system according to the present embodiment. Hereinafter, the above system will be referred to as “the present system”.

  This system mediates a financial institution that manages personal information between the customer and the service provider, centralizes the personal information by the personal information account management server managed and operated by the financial institution, and the service provider needs to disclose In addition, only the personal information that the customer has permitted to disclose is provided to the service provider. For this reason, the customer inputs personal information into the personal information account management server by operating a terminal such as a PC or a smartphone owned by the customer in advance, or registers personal information from a financial institution or the like. Next, the personal information account management server that has received the personal information stores the personal information in a personal information database (hereinafter referred to as personal information DB).

  Next, the service provider (enterprise server) registers the operator information in the personal information account management server and receives the customer's personal information items necessary for the service in order to enjoy the personal information providing service by this system. Send. The company information here is information necessary to authenticate whether the registered company is a legitimate company and is a company that has a transaction with a financial institution. For example, the company name Address, phone number, capital information, electronic certificate, etc. are registered after examination by financial institutions.

  When authentication of the service provider is established, the personal information account management server stores each item of the customer's personal information necessary for each service provided by the service provider's network address (URL (Uniform Resource Locator)) of the service provider's website. ) And register. As a result, the usage environment for the system to provide personal information is established.

  In the following description, a case where a customer operates a customer terminal to access a service provider's site (EC: Electronic Commerce site), accesses a web page of the EC site, and uses a product purchase service is illustrated. The other services are basically the same.

  The customer operates his / her information terminal, accesses a web page (operator server) that receives the service, selects a product to purchase, and shifts to a payment screen (generally, a service application screen). At this time, if the business has been registered in the personal information account management server of the financial institution, a “personal information disclosure button” is displayed on this screen. When the customer presses the personal information disclosure button, the business server transmits a request for acquiring personal information of the customer to the personal information account management server that manages the personal information of the customer.

  The personal information account management server that has received the personal information acquisition request determines whether or not the transmission source is a registered regular service provider. When the login screen of the financial institution is displayed and the customer login is completed normally, the personal information necessary for the service provided by the operator (hereinafter referred to as the operator information DB) (from the operator information database) Hereinafter, the item of necessary information is read out, and the personal information of the customer is extracted from the personal information database (hereinafter referred to as personal information DB) based on the necessary information item. Then, a “disclosure information selection screen” for allowing the customer to selectively input the disclosure permission item of the personal information is generated and transmitted to the customer terminal.

  On the disclosure information selection screen displayed on the customer terminal, the customer selects and inputs items of personal information for which disclosure is permitted and items of personal information for which disclosure is not permitted by a check box or the like. Upon receiving the selection input by the customer, the personal information account management server extracts the items of personal information for which disclosure permission has been obtained, and transmits the information to the provider server. Then, the service provider provides a service to the customer based on the acquired personal information.

  In this way, financial institutions utilize the robust security system that has already been established, and store customer personal information as a “personal information account” in the same way as financial asset accounts. Based on the user's selection, it is possible to provide a new personal information management service that transmits only the personal information that the customer has permitted to disclose to the service provider.

  FIG. 2 is a functional block diagram of the personal information management system according to the present embodiment. This system is connected to a customer terminal 10, a business server 30 managed and operated by a business providing a service to the customer, and the customer terminal 10 and the business server 30 via a public line such as the Internet or a dedicated line network. Personal information account management server 20.

(Configuration of personal information account management server)
The personal information account management server 20 typically includes a communication unit 21, a necessary information extraction unit 22, a personal information disclosure selection unit 23, a control unit 24, a personal information DB 100, a business entity information DB 200, an account, It consists of detailed information DB300.

  The communication unit 21 serves as a communication interface for communication with the customer terminal 10 or the operator server 30 and is compliant with a protocol (for example, TCP / IP in the case of the Internet) adopted by the personal information account management server 20. I do.

  Upon receiving a request for acquiring personal information necessary for the service from the business server 30, the necessary information extraction unit 22 refers to the business information DB 200 and the personal information DB 100 to obtain personal information (necessary information) necessary for the service. Extract. Specifically, items of personal information necessary for each service stored in the provider information DB 200 are extracted, and the corresponding personal information is extracted from the personal information DB 100 based on the items of personal information. The necessary information includes essential information essential for providing the service and optional information that is not essential but is desirable for the service provider to disclose.

  The personal information disclosure selection unit 23 generates a disclosure information selection screen that prompts the customer to select items of personal information permitted to be disclosed from the extracted personal information by the necessary information extraction unit 22. A UI (User Interface) is provided that takes in items of personal information selected by operating. Details will be described later.

  When the control unit 24 receives an acquisition request for personal information necessary for the service from the business server 30, if the customer is properly authenticated on the login screen of the financial institution, the control unit 24 refers to the business information DB 200 and the personal information DB 100. The personal information that is necessary for the service and that is permitted to be disclosed to the operator by the customer is read out, and a transmission instruction is given to the operator server 30 that has requested acquisition. In addition, the control unit 24 manages personal information necessary for each “type” of service by using the provider information DB 200. The type of service is a type of service classified into categories. For example, there are various types such as a product purchase service, a delivery service, a loan contract service, a rental car reservation service, and an information distribution service.

  In addition, the control unit 24 transmits a disclosure information selection screen to the customer terminal 10 and discloses from the personal information registered based on the information selected and input by the customer terminal 10 among the personal information registered in advance. Control to identify the items that are allowed.

  In addition, it is preferable that the personal information account management server 20 is provided with the account details information which is the transmission history of the personal information to the service provider. The account details information is stored in the account details information DB300. In this case, the control unit 24 performs control to transmit the account details information based on the request from the customer terminal 10. Moreover, based on the request | requirement of the customer terminal 10, the control which transmits the deletion request | requirement of the personal information memorize | stored in account detailed information with respect to the provider server 30 which provided the said personal information is performed. Details of the account details will be described later.

  The personal information DB 100 stores customer personal information registered by the customer. For example, as shown in FIG. 3, the name, postal code, address, telephone number, date of birth, sex, occupation, annual income, etc. are registered as items of personal information. If the personal information stored in the personal information DB 100 is an existing customer of a financial institution (for example, if it is a bank, an account opener), the information registered when the account is opened may be used. Of course, the customer can also add or edit personal information after authenticating the user from the customer terminal or at the window of a financial institution.

  The personal information DB 100 may also store personal information change history. Specifically, for example, after the registration of personal information, when the customer moves, etc., and the address, telephone number, etc. are changed, the address etc. is changed, but the personal information before the change is also stored. . By storing the change history in this way, it is possible for the customer or service provider to check whether the information is the latest information, and a follow-up survey is also possible as necessary. In addition, service providers that require personal information before the change, such as product purchase sites, can provide customers with information about the area before and after the change by disclosing the address before the change, etc. This will also lead to product sales promotion. Of course, the customer can also select whether or not to disclose the address before the change. Note that it may be possible for the customer to select whether or not to disclose the personal information before the change. For example, when the surname is changed after marriage, the maiden name before the change may be disclosed for services other than those requiring a changed surname, such as a rental car service that requires a license.

  In the provider information DB 200, items of customer personal information necessary for each service provided by the service provider are registered in association with the network address (URL) of the provider's website. For example, as shown in FIG. 4A, the service provider information DB 200 includes a service type, a URL that discloses information on providing the service (a URL that the user accesses to receive the service), and is required for the service. The personal information item is registered in association with the URL. In addition, although illustration is abbreviate | omitted, the information of whether it is essential information or option information is added to each item of required information.

  The business operator information DB 200 may divide service businesses into types and register necessary information. As shown in FIG. 4B, personal information items (common items) required in common for each service type are registered in the required information, and other individuals required by individual service providers. Information items (individual items) are registered separately. The common item is information essential for the type of service provider, and the individual item may be essential information for a specific provider, but is usually optional information. In this case as well, although illustration is omitted, it is assumed that each item is added with information indicating whether it is essential or optional information.

  For example, in the example illustrated in FIG. 4B, when the service type is product purchase, two URLs are registered. The common items of personal information are “name, postal code, address, telephone number”. Yes, the service provider of URL 11 further needs “mail address” as an individual item of personal information. On the other hand, the service provider of URL 12 further needs “phone number 2” as an individual item of personal information.

  The functional block configuration of the above system is merely an example, and one functional block (database and functional processing unit) may be divided, or a plurality of functional blocks may be configured as one functional block. Good. Each function processing unit reads a computer program stored in a storage device such as a ROM (Read Only Memory), flash memory, SSD (Solid State Drive), or hard disk by a CPU (Central Processing Unit) built in the device This is realized by a computer program executed by the CPU. That is, each function processing unit reads and writes necessary data such as a table from a database (DB; Data Base) stored in a storage device or a storage area on a memory, and may be related in some cases. This is realized by controlling hardware (for example, an input / output device, a display device, and a communication interface device). In addition, the database in the embodiment of the present invention may be a commercial database, but it simply means a collection of tables and files, and the internal structure of the database itself does not matter.

(Processing of personal information management system)
FIG. 5 is a sequence diagram showing processing operations of the personal information management system according to the present embodiment. Here, it is assumed that customer personal information and business operator information are registered in advance in the database of the personal information account management server 20 (personal information DB 100, business operator information DB 200). Hereinafter, a case where the business site is an EC site will be described.

  The customer operates the customer terminal 10 to access the business server 30 of the business site that receives the service, selects a product desired to be purchased, and requests a product purchase settlement (step S11). Information for accessing the personal information account management server 20 is linked to the settlement screen displayed at this time. When the customer presses the personal information disclosure button from the payment screen, the business server 30 that has received the merchandise purchase payment request links to the personal information account management server 20 in order to obtain the personal information of the requested customer. (Step S12), using the user ID of the requested customer as an index, personal information is acquired.

  The personal information account management server 20 authenticates the URL of the link service provider based on the service provider URL (step S13). The authentication of the service provider is determined based on whether or not the provider information is registered (the provider information DB registered separately with the financial institution). When the authentication of the service provider is established (step S13 “YES”), the personal information account management server 20 displays a login screen on the customer terminal 10 (step S14). Subsequently, the customer inputs and transmits login information (login ID, password, etc.) registered in advance on the login screen displayed on the customer terminal 10 (step S15). On the other hand, if the URL of the service provider is not registered (step S13 “NO”), the personal information account management server 20 transmits an error screen indicating that the service provider is not registered to the provider server 30, and the customer It is displayed on the terminal 10 (step S16).

  Next, the personal information account management server 20 authenticates the login information input by the customer terminal 10 (step S17). When the authentication of the customer terminal 10 is established (step S17 “YES”), the personal information account management server 20 stores an access counter that stores the number of accesses to the business operator's website via the personal information account management server 20. Update (step S18). Subsequently, the personal information account management server 20 refers to the business information DB 200 in which items of personal information required by the business server 30 are registered, and based on the items, the corresponding personal information from the personal information DB 100 is obtained. The disclosure information selection screen listing the personal information is generated and displayed on the customer terminal 10 to prompt the customer to make a selection input (step S19). If authentication of the customer terminal 10 is not established (step S17 “NO”), an error screen indicating that the authentication has failed is displayed on the customer terminal 10 to prompt the user to input login information again (step S17). S20).

  After the authentication is established, the customer terminal 10 selects an item for which disclosure is permitted from the personal information listed on the disclosure information selection screen (step S21). On the disclosure information selection screen, for example, as shown in FIG. 6, items of personal information necessary for each service are displayed in a list. In the personal information item list, items essential for service provision by the service provider are highlighted with a star, for example. The customer who has confirmed the disclosure information selection screen adds a check mark to the item of personal information permitted to be disclosed, and presses the enter button to transmit the disclosure information to the personal information account management server 20. However, the check mark of essential items cannot be removed. In addition, the customer confirms whether the request for disclosure of personal information from the business operator requires an extra personal information item (compared to a common item) as compared to a general peer. can do. The reason for requesting disclosure of items other than the common items (for example, if a request for disclosure is granted, a privilege is granted) is registered in the provider DB and displayed on the disclosure information selection screen. Also good. By doing in this way, the customer can also select whether or not to disclose the personal information of the item according to the reason for the disclosure request.

  In addition, when the customer changes personal information after receiving proper identity verification separately, and the information before the change is also stored in the personal information DB, on the disclosure information selection screen, the item “Changed” "Button is displayed. When the customer presses the “changed” button, information before the change of the item is displayed. For example, if a change history such as a change in surname associated with marriage or an address associated with moving is stored (can be limited to changes within a predetermined period), the name and address fields are displayed. “Changed” button is displayed. Further, when the customer checks disclosure permission for the information before the change displayed after the “changed” button is pressed, the information before the change of the checked item is also transmitted to the provider server.

  By controlling in this way, personal information that the customer does not permit to be disclosed is not transmitted to the operator server 30, so that the personal information that reflects the customer's will can be disclosed. Moreover, it is possible to prevent personal information from being disclosed more than necessary by managing information necessary for service provision by a business operator and information that a customer permits disclosure. It should be noted that information useful for service provision of the service provider may be displayed as option information in the personal information item list on the disclosure information selection screen. For example, by providing a hobby column and selecting a hobby list with a radio button or the like, the business server 30 can know the customer's hobbies, and is useful for providing subsequent services.

  The access counter storing the number of accesses described above may be displayed as the number of users on the disclosure information selection screen in FIG. The access counter is a counter that counts up each time the service is used through the personal information account management server 20 and indicates the cumulative number of accesses to the website. By referring to the access counter, the customer can estimate that a service provider with a large number of accesses is a highly reliable company. Note that the service provider evaluation information may be displayed based on the number of accesses.

  Returning to FIG. The personal information account management server 20 transmits the disclosure information of the personal information received from the customer terminal 10 to the business server 30 (step S22), and the individual including “changed” information and “change date and time information” for each item. The information disclosure history is recorded in the account details information DB 300 for storing for each customer (step S23). By using the account details information DB 300, the transmission history (disclosure history) of personal information to the service provider can be displayed in time series like a bank account passbook. The account details information can be displayed on the screen of the customer terminal 10, and on this account details information screen, as shown in FIG. 7, information of transmission date, service type, and disclosure destination is displayed as a disclosure history.

  Customers may feel anxious about leaving their personal information on a service provider's server that they do not plan to use in the future because of the risk of information leaking. Therefore, an “erase request button” is provided for each disclosure history on the account details information screen shown in FIG. 7, and the personal information is deleted from the personal information account management server 20 to the business server 30 when the customer presses the button. A request may be sent. Actually, the business operator may execute the erasure request and send an erasure completion notice to the financial institution to display it on the account details information screen.

  Returning to FIG. 5, the business server 30 receives the disclosure information of the customer from the personal information account management server 20 (step S <b> 24), performs necessary authentication for product sales based on the disclosure information, and sends it to the customer terminal 10. Notification is made (step S25). Then, the customer terminal 10 receives the merchandise sales approval notice (settlement completion) (step S26), and thus the series of merchandise purchase services is completed.

(Processing of personal information account management server)
FIG. 8 is a flowchart showing the processing operation of the personal information account management server of the personal information management system according to the embodiment of the present invention.

  As described above, the customer accesses the business server 30 of the business site that receives the service by operating the customer terminal 10, and the product desired to be purchased from the product list on the web page (dedicated screen). Select to request payment for product purchase. Then, the business server 30 makes an acquisition request from the personal information account management server 20 for the personal information of the requested customer.

  When the control unit 24 of the personal information account management server 20 receives the personal information disclosure request from the business server 30 (step S31), it authenticates the service business based on the URL of the service business (step S32). The authentication of the service provider is determined based on the presence / absence of registration of the provider information.

  When the link source (enterprise server 30) URL is registered (step S32 “YES”), the control unit 24 displays a login screen for providing a personal information disclosure selection screen on the customer terminal 10 (step S33). ). On the other hand, if the link source URL is not registered (step S32 “NO”), an error screen display indicating an authentication error indicating that it is not registered on the screen of the business server 30 is transmitted (step S40).

  Subsequently, when receiving the login information (for example, login ID, password) input by the customer terminal 10, the control unit 24, based on a customer information DB (not shown) in which login information for each customer is stored, The login information is determined (step S34). Note that the processing order of step S32 and steps S33 and S34 may be reversed.

  When the authentication of the login information of the customer terminal 10 is established (step S34 “YES”), the control unit 24 updates the access counter storing the number of users of the service (step S35). Then, the necessary information extraction unit 22 extracts items of personal information required by the service provider from the provider information DB 200 from the provider server 30 that provides the service (step S36). Then, based on the item, the corresponding personal information is read from the personal information DB 100 (step S37) and sent to the personal information disclosure selection unit 23.

  On the other hand, when the authentication of the login information of the customer terminal 10 is not established (step S34 “NO”), an error screen indicating that the authentication is not established is displayed on the screen of the customer terminal 10 to prompt the input of the recognition login information. (Step S41).

  Then, the personal information disclosure selection unit 23 that has received the relevant personal information generates a disclosure information selection screen in which items of the personal information are listed, displays them on the screen of the customer terminal 10, and the personal information that the customer permits to disclose. Is selected (step S38). Next, the disclosure information selected by the customer is read, and the disclosure information is transmitted to the business server 30 (step S39).

(Effects and Modifications of Embodiment)
As described above, according to the present system, the personal information account management server centrally stores the personal information, the service provider registers the personal information necessary for service provision in the personal information account management server, and the customer When receiving the provision of the service provider, by allowing the customer to select the personal information that is allowed to be disclosed to the service provider, the required information of the service provider and the disclosed information of the customer are managed, and more personal information is disclosed. It can be avoided to increase security. In addition, the management of personal information is performed by a financial institution that builds a highly robust system, which increases the sense of security for customers who disclose personal information.

  In addition, since the provider information database can store necessary personal information for each service type, the personal information account management server can manage the provider information for each service type. It is possible to register separately for each common item and individual item for each business. That is, since the common items are combined into one, the capacity of the provider information database can be saved, and the time for extracting necessary information can be shortened. In addition, if a business operator can select common items for each service type when registering necessary information, the procedure for registration can be simplified.

  In addition, the personal information account management server transmits a disclosure information selection screen that prompts the customer terminal to select and input personal information that is permitted to be disclosed among the registered personal information. And by specifying the item which permits disclosure from the personal information registered in the personal information database based on the customer's selection, it is possible to avoid disclosing personal information more than necessary. In addition, in the case of a method in which the customer designates an operator that can disclose personal information in advance, the service of this system cannot be received for an operator that has not been designated in advance. In some cases, it may not be possible to respond to a decrease in the reliability of the business operator or a change in the disclosure policy of the customer's personal information. In this system, by confirming the personal information to be disclosed every time the customer actually wants to receive the service of the operator, the convenience is improved and the customer's disclosure policy can be flexibly changed.

  Further, the business entity information database stores the number of accesses counted for each use of the service and displays it on the disclosure information selection screen. The customer can estimate the reliability of the service provider by referring to the number of accesses. In addition, even a business operator who does not know whether to continue to use the service or a business business that is not highly known can determine whether to provide personal information with peace of mind.

  In addition, the personal information database stores the change history of personal information, and the change history is displayed on the disclosure information selection screen so that the customer or service provider can check whether the personal information is the latest information. it can. In addition, when personal information is changed, each business operator is not notified of the change, but once the change procedure is made in this service, the personal information disclosed to each business operator is changed and the service is used. Increase the convenience of customers.

  The personal information account management server further includes an account detail information database that stores account detail information that is a history of transmission of personal information to a business operator, and transmits account detail information based on a request from a customer terminal. By doing so, the customer can display personal information to the service provider in a chronological order, such as a bank account passbook. Can be easily checked. Also, it is necessary to distinguish between businesses that require confirmation of disclosure of personal information each time and businesses that do not need to request confirmation each time (businesses that can be judged to be able to check the transmission history of personal information at any time). It may be possible for the customer to select and set management. By doing in this way, a reliable business person (for example, a local government, a bank, etc.) can save the trouble of checking personal information disclosed to a customer each time.

  In addition, the personal information account management server transmits a request for erasing the personal information stored in the account details information to the provider server that provided the personal information based on a request from the customer terminal. By doing so, the customer can prevent his / her personal information from remaining indefinitely on a server of a service provider that is not scheduled to be used in the future.

  As mentioned above, although this invention was demonstrated using embodiment, it cannot be overemphasized that the technical scope of this invention is not limited to the range as described in the said embodiment. It will be apparent to those skilled in the art that various modifications or improvements can be added to the above-described embodiments. Further, it is apparent from the scope of the claims that the embodiments added with such changes or improvements can be included in the technical scope of the present invention.

DESCRIPTION OF SYMBOLS 10 Customer terminal 20 Personal information account management server 21 Communication part 22 Required information extraction part 23 Personal information disclosure selection part 24 Control part 30 Provider server 100 Personal information database (personal information DB)
200 Business Information Database (Business Information DB)
300 Account details information database (Account details information DB)

Claims (9)

A personal information account management server of a financial institution connected via a network to a customer terminal and a business server of a business providing a service to a customer,
An operator information database in which items of personal information of the customer necessary for each service provided by the operator are registered in association with a network address of the website of the operator;
A personal information database registered by the customer and storing personal information of the customer;
Upon receiving an acquisition request for personal information necessary for the service from the provider server, a necessary information extraction unit that extracts the personal information necessary for the service with reference to the provider information database and the personal information database;
A personal information disclosure selection unit that generates a disclosure information selection screen that prompts a customer to select an item of personal information that is permitted to be disclosed from the extracted personal information;
A control unit that reads out personal information permitted to be disclosed to the operator by the customer, and instructs the transmission to the operator server that requested the acquisition;
A personal information account management server comprising:   The personal information account management server according to claim 1, wherein the business operator information database stores the necessary personal information for each type of service. The control unit is a disclosure information selection screen that prompts the customer terminal to select and input personal information that permits disclosure among the customer personal information necessary for each of the services registered in the provider information database. Send
The item permitted to be disclosed is specified from personal information registered in the personal information database based on the information selected and input by the customer terminal. Personal information account management server.   4. The personal information account management server according to claim 3, wherein the provider information database stores the number of accesses counted for each use of the service, and displays the number of accesses on the disclosure information selection screen.   5. The personal information account management server according to claim 3, wherein the personal information database stores a change history of the personal information, and displays the change history on the disclosure information selection screen. The personal information account management server further includes an account detail information database that stores account detail information that is a history of transmission of the personal information to the business operator,
The controller is
6. The personal information account management server according to claim 1, wherein the account details information is transmitted based on a request from the customer terminal. The controller is
The request for erasing the personal information stored in the account details information is transmitted to a business server that provided the personal information based on a request from the customer terminal. Personal information account management server. A personal information management system comprising a customer terminal, a business server of a business providing a service to a customer, and a personal information account management server of a financial institution connected to the customer terminal and the business server via a network. There,
The personal information account management server
An operator information database in which items of personal information of the customer necessary for each service provided by the operator are stored in association with a network address of the website of the operator;
A personal information database registered by the customer and storing personal information of the customer;
Upon receiving a request for acquiring personal information necessary for the service from the provider server, the personal information necessary for the service is extracted by referring to the provider information database and the personal information database, and the extracted Generate a disclosure information selection screen that prompts the customer to select items of personal information permitted to be disclosed from personal information, read out personal information permitted to be disclosed to the operator by the customer, and A personal information management system, wherein the personal information management system transmits the information to the business server. A program for a personal information account management server of a financial institution connected via a network with a customer terminal and a business server of a business providing a service to a customer,
Means for storing the customer's personal information items necessary for each service provided by the business operator in the business operator information database in association with the network address of the business operator's website;
Means for storing in the customer's personal information or personal information database pre-registered by the customer;
Means for receiving personal information necessary for the service from the provider server, referring to the provider information database and the personal information database, and extracting personal information necessary for the service;
Means for generating a disclosure information selection screen that prompts the customer to select items of personal information permitted to be disclosed from the extracted personal information;
A program that causes a computer to function as means for reading personal information permitted to be disclosed by the customer and transmitting the information to the provider server that requested the acquisition.

Images