JP6760904B2 - Information processing equipment, information processing methods, and information processing programs - Google Patents

Description

The present invention relates to an information processing device, an information processing method, and an information processing program.

The provision of services using networks is becoming active. In recent years, various service providers have provided various services.

Japanese Unexamined Patent Publication No. 2013-257793

In order to provide better services to users, it is desirable to share user data among a plurality of service providers. However, the user identification information (hereinafter referred to as user ID) is different for each service provider, and data sharing is not easy. If the user IDs are unified, it is easy to share user data. However, unifying user IDs is not easy. It is conceivable to exchange user IDs between service providers, but in this case, it cannot be denied that the user IDs may be illegally used by other service providers.

The present application has been made in view of the above, and an object of the present application is to make it easy to use data held by another service provider.

The information processing device according to the present application manages an acquisition unit that acquires an encrypted ID that encrypts user identification information held by a plurality of systems, and a management information that associates a plurality of encrypted IDs indicating the same user. It has a department.

According to one aspect of the embodiment, data held by another service provider can be easily used.

FIG. 1 is a diagram showing the operation of the information processing system according to the embodiment. FIG. 2 is a diagram showing a data structure of a user information database. FIG. 3 is a diagram showing a configuration example of management information. FIG. 4 is a diagram showing an example in which an encryption ID is added to the management information shown in FIG. FIG. 5 is a diagram showing another configuration example of management information. FIG. 6 is a diagram showing a configuration example of the terminal device according to the embodiment. FIG. 7 is a diagram showing a configuration example of the service providing server according to the embodiment. FIG. 8 is a diagram showing an example of user information stored in the user information database. FIG. 9 is a diagram showing a configuration example of the information processing device according to the embodiment. FIG. 10 is a diagram showing an example of information stored in the management information database. FIG. 11 is a flowchart showing an example of the registration process. FIG. 12 is a flowchart showing an example of the management process. FIG. 13 is a hardware configuration diagram showing an example of a computer that realizes the functions of the information processing device.

Hereinafter, the information processing apparatus, the information processing method, and the mode for carrying out the information processing program (hereinafter referred to as “the embodiment”) according to the present application will be described in detail with reference to the drawings. The information processing apparatus, information processing method, and information processing program according to the present application are not limited by the following embodiments. Further, in each of the following embodiments, the same parts are designated by the same reference numerals, and duplicate description is omitted.

[1. Operation of information processing device]
First, the operation of the information processing device will be described by taking the information processing system 1 including the information processing device 30 of the present embodiment as an example.

FIG. 1 is a diagram showing the operation of the information processing system 1 according to the embodiment. The information processing system 1 is a system that enables sharing of user data among a plurality of service providers. The "service" referred to in this embodiment is a service provided via the Internet. For example, services include online shopping, advertisement distribution, email, games, news, auctions, bulletin boards, blogs, weather forecasts, finance, route search, maps, travel, job offers, real estate, restaurant introductions, data downloads, etc. .. The service may be a cloud service related to medical information (for example, medical records).

The information processing system 1 includes a terminal apparatus _{10 1,} 10 2, 10 _3, the service providing server _{20 1,} 20 2, 20 _3, the information processing apparatus 30, the. In the example of FIG. 1, three terminal devices are shown, but the number of terminal devices may be less than three or more than three. In the following description, the terminal devices 10 ₁ , 10 ₂ , 10 _{3 and the} like may be collectively referred to as the terminal device 10. Further, in the example of FIG. 1, three service providing servers are shown, but the number of service providing servers may be less than three or more than three. In the following description, it is possible to collectively service providing server _{20 1,} 20 2, 20 ₃ etc. to as service providing server 20.

The terminal device 10 is, for example, a user terminal of a smart device (smartphone or tablet), a mobile phone, a personal computer, or the like. The terminal device 10 ₁ is a terminal used by the user U1, the terminal device 10 ₂ is a terminal used by the user U ₂ , and the terminal device 10 ₃ is a terminal used by the user U ₃ . The terminal device 10 communicates with the service providing server 20 via the network.

The service providing server 20 is a server host computer that provides various services to a client terminal or a user who operates the client terminal. For example, the service providing server 20 is a service providing system that provides various services to a user who operates the terminal device 10. The service providing system may be composed of one device or may be composed of a plurality of devices. The services provided by the service providing server 20 include, for example, online shopping, advertisement distribution, mail, games, news, auctions, bulletin boards, blogs, weather forecasts, finance, route search, maps, travel, job offers, real estate, restaurant introductions, etc. Services such as data download. When the service providing server 20 functions as a system for providing an online shopping service, the service providing server 20 may also have a function as an online mall.

For example in FIG 1, the service providing server 20 ₁ is a system structure A is operated, the service providing server 20 ₂ is a system for operating the organization B, the service providing server 20 ₃ in a system organization C is operated is there. Organization A, organization B, and organization C are service providers that provide predetermined services, respectively. The organization A, the organization B, and the organization C are, for example, a company (company). The service provider is not limited to the company (company). The service provider may be an organization other than a company (company), for example, an organization such as a non-profit corporation or a public organization. Of course, the service provider may be an individual rather than an organization. Further, the service provider may be a predetermined department in the organization (for example, a department that provides the first service). In this case, another department within the same organization (eg, a department that provides a second service) is another service provider. The "organization" appearing in the following description can be replaced with "company", "individual", and "department" as appropriate.

Each of the plurality of organizations (for example, organization A, organization B, organization C) attaches user identification information (hereinafter, referred to as user ID) to the user. The user ID may be, for example, a user name, a login ID, or an account for the user to access a predetermined site. The predetermined site may be a portal site or an SNS (Social Networking Service) site. The user ID may be a telephone number or an e-mail address as long as the user can be identified. Further, the user ID may be biological information based on human physical characteristics (for example, fingerprint, iris, vein pattern) or behavioral characteristics (for example, handwriting, walking). Of course, the user ID may be an internal ID held internally by the service providing system.

The information processing device 30 is a server host computer that provides various services to the service providing server 20. The information processing device 30 performs processing for enabling sharing of data accumulated by the service providing server 20 when providing the service between the service providing servers 20. For example, the information processing device 30 manages user identification information (hereinafter referred to as a user ID) possessed by each of the service providing servers 20. The information processing device 30 can communicate with each of the service providing servers 20.

A plurality of service providers (for example, organization A, organization B, and organization C) that operate the service providing server 20 are in a collaborative relationship. However, the user IDs are not unified, and it is not easy to share user data between service providers. In addition, considering after the collaborative relationship with other service providers is broken, it is extremely risky to pass all of the user IDs owned by the user to other service providers. The information processing device 30 securely manages the user IDs held by each organization while enabling mutual use of the user data held by each organization. It is assumed that a plurality of service providers such as Organization A and Organization B are under a contract for exchanging user data. In the following description, a group under a contract for exchanging user data is simply referred to as a group.

Hereinafter, the operation of the information processing system 1 including the information processing device 30 of the present embodiment will be described with reference to FIG.

First, the service providing server 20 communicates with the terminal device 10 operated by the user regarding the service in order to provide the service to the user (steps S1a to S1e). For example, the service providing server 20 _{1, 1} a service terminal 10 by the user U1 operates (e.g., Internet shopping) communicates regarding (step S1a). The service providing server 20 ₂ communicates about ₁ and service terminal 10 by the user U1 operates (e.g., ad delivery) (Step S 1 b).

Then, the service providing server 20 stores the user data acquired when providing the service in the user information database (steps S2a to S2c). The user information database is not limited to RDB (Relational Database). In order to handle a large amount of data at high speed, the database may be a database using a NoSQL (Not Only SQL) hyperscale database information processing system (scale-out type system). At this time, NoSQL may be KVS (Key-Value Store).

FIG. 2 is a diagram showing a data structure of a user information database. In the example of FIG. 2 shows a data structure of the user information database with each service providing server _{20 1,} 20 2, 20 _3. The service providing server 20 ₁ of the user information database, D11 to D13 are stored as user data. Further, the service providing server 20 ₂ of the user information database, D21～D23 are stored as user data. Further, the service providing server 20 ₃ in the user information database, D31～D33 are stored as user data. A user ID is attached to each user data. In the following description, the pair of the user ID and the user data is referred to as a record.

As can be seen from FIG. 2, U1A to U3A are attached to the user data D11 to D13 as user IDs. U1A~U3A is a user ID that organization A is subjected to each user a service providing server 20 ₁ operators. U1A is the user ID of user U1, U2A is the user ID of user U2, and U3A is the user ID of user U3. Note that P11 to P13 on the left side of each record indicate the storage position of each record in the database. P11 is a storage position of a record in which user data D11 is stored, P12 is a storage position of a record in which user data D12 is stored, and P13 is a storage position of a record in which user data D13 is stored. ..

Further, U1B to U3B are attached to the user data D21 to D23 as user IDs. U1B~U3B is a user ID that organization B was subjected to each user a service providing server 20 ₂ operators. U1B is the user ID of the user U1, U2B is the user ID of the user U2, and U3B is the user ID of the user U3. Note that P21 to P23 on the left side of each record indicate the storage position of each record in the database. P21 is a storage position of a record in which user data D21 is stored, P22 is a storage position of a record in which user data D22 is stored, and P23 is a storage position of a record in which user data D23 is stored. ..

Further, U1C to U3C are attached to the user data D31 to D33 as user IDs. U1C~U3C is a user ID that tissue C is subjected to each user is a manager of the service providing server 20 _3. U1C is the user ID of the user U1, U2C is the user ID of the user U2, and U3C is the user ID of the user U3. Note that P31 to P33 on the left side of each record indicate the storage position of each record in the database. P31 is a storage position of a record in which user data D31 is stored, P32 is a storage position of a record in which user data D32 is stored, and P33 is a storage position of a record in which user data D33 is stored. ..

Each of the plurality of service providing servers 20 encrypts the user ID held by the plurality of service providing servers 20 so that other organizations cannot decrypt the user ID. The encryption includes not only reversible encryption using common key cryptography (for example, AES (Advanced Encryption Standard)) or public key cryptography (for example, RSA (Rivest-Shamir-Adleman cryptosystem)), but also MD5 (Message Digest). It also includes irreversible encryption (hashing) using Algorithm 5) and SHA (Secure Hash Algorithm).

Then, the information processing device 30 acquires the user ID (hereinafter, referred to as the encrypted ID) encrypted by the service providing server 20 (steps S3a to S3c). In the following description, "E-" is prefixed to the code indicating the encryption ID. For example, the encryption IDs of the user IDs U1A, U1B, and U1C of the user U1 are E-U1A, E-U1B, and E-U1C, respectively. The encryption IDs of U2A, U2B, and U2C, which are the user IDs of the user U2, are E-U2A, E-U2B, and E-U2C, respectively. The encryption IDs of U3A, U3B, and U3C, which are the user IDs of the user U3, are E-U3A, E-U3B, and E-U3C, respectively.

After acquiring the encryption ID from each service providing server 20, the information processing device 30 associates a plurality of encryption IDs indicating the same user (step S4). For example, as shown in FIG. 1, the information processing apparatus 30 associates E-U1A, E-U1B, and E-U1C indicating the encryption ID of the user U1. Further, the information processing device 30 associates E-U2A, E-U2B, and E-U2C indicating the encryption ID of the user U2. Further, the information processing device 30 associates E-U3A, E-U3B, and E-U3C indicating the encryption ID of the user U3. Various association methods can be used. For example, the information processing device 30 acquires user data specified by an encryption ID from each service providing server 20. Then, the information processing device 30 associates the user data with the encryption ID and identifies which encryption ID and which encryption ID belongs to the same user based on the user data. For example, the information processing device 30 may be identified as the same user when any two of the telephone number, the name, and the date of birth match. Of course, the method of association is not limited to this method. Further, after the association is completed, the information processing apparatus 30 may discard the user data so that the information is not leaked. Then, the information processing device 30 stores the information associated with the encryption ID as the management information for managing the user ID.

FIG. 3 is a diagram showing a configuration example of management information. FIG. 3 shows a configuration example of management information when the user information database owned by each organization is regarded as one relational database and managed. In the example of FIG. 3, an example in which the information processing apparatus 30 manages the user ID of the organization A and the user ID of the organization B is shown. In the example of FIG. 3, the internal IDs of the users U1 to U3 are encrypted with the user IDs held by the organization A, E-U1A, E-U2A, and E-U3A, and the user IDs held by the organization B. E-U1B, E-U2B, and E-U3B are associated with each other. The internal ID is a user ID held by the information processing device 30. Further, the encryption ID 1 indicates the encryption ID of the user ID held by the organization A, and the encryption ID 2 indicates the encryption ID of the user ID held by the organization B.

For relational databases, indexes are created to speed up searches. In the example of FIG. 3, an index 1 for searching user data using the encryption ID 1 as a key and an index 2 for searching user data using the encryption ID 2 as a key are created. Each encryption ID is associated with a record position indicating a record position of user data. In the example of FIG. 3, the indexes are all index tables, but the indexes are not limited to the index table. For example, the index may be a B-tree.

FIG. 4 is a diagram showing an example in which an encryption ID is added to the management information shown in FIG. Specifically, FIG. 4 is an example in which the encryption ID 3 is added to the management information shown in FIG. The encryption ID 3 is an encryption ID of the user ID held by the organization C. Since the organization C is newly added, the information processing apparatus 30 newly creates the index 3 for the organization C. The index 3 is an index for searching user data using the encryption ID 3 as a key. Further, the information processing apparatus 30 updates the index 1 and the index 2 so that the organization A and the organization B can search the user data held by the organization C at high speed. In the example of FIG. 3, record positions P31 to P33 are added to the index 1 and the index 2, respectively. In this way, when a relational database is used to manage user data, all indexes are updated every time an organization joins a new group. It is good as long as there are few organizations that join the group, but if there are many organizations that join the group (for example, when the number of organizations that join the group is 1000 or 2000), the index update time becomes non-negligible. If this happens, each time a new organization joins a group, a long index update time will occur, resulting in a service interruption.

Therefore, the information processing device 30 has a structure different from the structure shown in FIGS. 3 and 4 so that a large service interruption does not occur even if the encryption ID increases. FIG. 5 is a diagram showing another configuration example of management information. As shown in FIG. 5, the information processing device 30 uses each of the plurality of encryption IDs as an identifier, and associates each of the plurality of identifiers with the encryption IDs of a plurality of other systems indicating the same user. The identifier is information for identifying predetermined information (record) in the database. The identifier can be paraphrased as a search ID, a key, or the like. In the case of the example of FIG. 5, the information processing apparatus 30 encrypts the user ID held by the organization A, E-U1A, E-U2A, E-U3A, and the user ID held by the organization B, E-U1B. , E-U2B, E-U3B, and E-U1C, E-U2C, and E-U3C, which are encrypted user IDs held by the organization C, are used as identifiers, respectively. Then, each identifier is associated with an encryption ID of another service provider indicating the same user. For example, E-U1A, which is the encryption ID of the user U1 held by the organization A, includes E-U1B, which is the encryption ID of the user U1 held by the organization B, and the encryption ID of the user U1 held by the organization C. Is associated with E-U1C. An ID (internal ID) for the information processing apparatus 30 to manage the user internally may be associated with the identifier. For example, the information processing device 30 may be associated with the internal ID U1 of the identifier E-U1A.

In the example of FIG. 5, the management information is in a tabular format, but the management information is not limited to the tabular format. The management information may be in JSON (JavaScript (registered trademark) Object Notation) format. For example, the management information is in the format of "encryption ID1: {internal ID, encryption ID2, encryption ID3, ...}", "encryption ID2: {internal ID, encryption ID1, encryption ID3, ...}". You may. Here, the internal ID is a member indicating a user ID held by the information processing apparatus 30 (for example, a name / value pair), and the encryption ID 1 is a member indicating the encryption ID of the user ID held by the organization A. The encryption ID 2 is a member indicating the encryption ID of the user ID held by the organization B, and the encryption ID 3 is a member indicating the encryption ID of the user ID held by the organization C. By making the management information a structure as shown in FIG. 5, it is possible to greatly exceed the limit of the relational database by using hyperscale middleware such as NoSQL and KVS.

When the information processing device 30 receives the encryption ID from one of the plurality of systems (step S5), the information processing apparatus 30 identifies the encryption ID of another system corresponding to the encryption ID based on the management information (step S6). ). For example, the information processing apparatus 30, to the service providing server 20 _second tissue B that it has received the E-U2B as an encrypted ID. In this case, the information processing apparatus 30 identifies E-U2A and E-U2C associated with the identifier E-U2B from the management information shown in FIG.

Then, the information processing device 30 transmits information regarding the encryption ID of another system to the system that has received the encryption ID (step S7). For example, the information processing apparatus 30, to the service providing server 20 _second tissue B that it has received the E-U2B is encrypted ID of the user ID of the user U2. In this case, the information processing apparatus 30 transmits to the service providing server 20 _2, a corresponding encrypted ID E-U2A, an E-U2C. Information for identifying which system's encryption ID may be attached to the encryption ID. For example, the E-U2A, identification information indicating a service providing server 20 ₁ of tissue A may be attached. In addition, the E-U2C, identification information indicating a service providing server 20 ₃ tissue C may be attached. The information regarding the encryption ID of the other system may be user data specified by the encryption ID.

After acquiring the encryption ID of the other system, the service providing server 20 acquires the user data from the other system by using the acquired encryption ID. For example, the service providing server 20 ₂ and obtains the E-U2A and E-U2C from the information processing apparatus 30. The service providing server 20 ₂ operators (tissue B) is a user data of the user U2 are trying to get from the tissue C. In this case, the service providing server 20 ₂ to request the transmission of the user data together with the E-U2C to the service providing server 20 _3. The service providing server 20 ₃ receives the request, (in this embodiment, U2C) user ID corresponding to the E-U2C encrypted ID with identifying a relevant user data (in the example of FIG. 2, D32) is acquired from the user information database. Then, the service providing server 20 ₃ transmits the user data acquired to the service providing server 20 _2.

The information processing device 30 may transmit the user data. For example, the information processing apparatus 30, one of a plurality of systems (e.g., the service providing server 20 ₂₎ receives the encrypted ID from. At this time, the information processing apparatus 30, a user data other system holds the user data specified by the encrypted ID of the other system, the system that sent the encrypted ID (e.g., the service providing server 20 ₂ ) May be sent. For example, the information processing apparatus 30, and receives the E-U2B is encrypted ID in the transmission request both the user data of the user U2 from the service providing server 20 _2. The information processing apparatus 30, E-U2B encrypted ID of another system corresponding to the (E-U2A, E-U2C ) as well as identifying to the service providing server 20 ₁ and the service providing server 20 _3, E- Requests the transmission of user data specified by U2A or E-U2C. When the service providing server 20 ₁ and the service providing server 20 ₃ acquires user data, the information processing apparatus 30 transmits the user data acquired to the service providing server 20 _2.

As mentioned above, multiple organizations are in a collaborative relationship. However, it is possible that the collaborative relationship may be broken, such as one of multiple organizations receiving a hostile takeover. In this case, the information processing device 30 needs to perform processing for managing management information so that information leakage does not occur. Specifically, the information processing apparatus 30 needs to prevent a hostile acquired organization from acquiring user data of another organization.

Therefore, when the information processing device 30 is instructed by the operator of the information processing device 30 to exclude a predetermined system selected from a plurality of systems, the information processing device 30 deletes the encryption ID of the predetermined system from the management information. (Step S8). For example, receiving the tissue C is hostile takeover which operates the service providing server 20 _3, the operator of the information processing apparatus 30 instructs the processing for elimination from the group of systems (service providing server 20 ₃₎ of the tissue C And. In this case, the information processing apparatus 30 deletes the encryption ID (E-U1C, E-U2C, E-U3C, etc.) of the organization C from the management information shown in FIG. 5, and thereafter, the organization C is the other organization. Prevents acquisition of encrypted ID. There is a possibility that the number of organizations joining the group will increase due to the acquisition of a company. In this case, the information processing device 30 may add the encryption ID of the system newly added to the group to the management information.

The organization excluded from the group may already have a part of the encrypted IDs of other organizations in the group. The information processing apparatus 30 may change the encryption ID stored in the management information to another encryption ID so that the information of the other organization is not leaked through the excluded organization. At this time, the other encryption ID may be an encryption ID generated from the same user ID as the user indicated by the encryption ID before the change. For example, suppose that the operator of the information processing apparatus 30 excludes the system of the organization C. At this time, the information processing apparatus 30 requests transmission of new encrypted ID to the service providing server 20 ₂ of the service providing server 20 ₁ and organization B organization A. If you get the newly encrypted ID from the service providing server 20 ₁ and the service providing server 20 _2, the information processing apparatus 30, of the management information shown in FIG. 5, the encryption ID1, the encrypted ID2, and an identifier Replace with a new encrypted ID.

According to the present embodiment, the information processing apparatus 30 acquires an encryption ID that encrypts a user ID held by each of the plurality of service providing systems (service providing server 20), and also obtains a plurality of encryptions indicating the same user. Manage the management information associated with the ID. As a result, the information processing device 30 can provide the same effect as the unified user ID to the plurality of service providers without unifying the user IDs. Moreover, since the associated user ID is encrypted, the service provider (for example, the operator of the service providing server 20) does not have to worry about the leakage of the user ID owned by the service provider.

[2. Information processing system configuration example]
The operation of the information processing device of the present embodiment has been described above by taking the information processing system 1 including the information processing device 30 of the present embodiment as an example. Hereinafter, the configuration of the information processing system 1 will be described. As described above, the information processing system 1 includes a terminal device 10, a service providing server 20, and an information processing device 30. The terminal device 10, the service providing server 20, and the information processing device 30 are connected via a network. The network is a communication network such as LAN (Local Area Network), WAN (Wide Area Network), telephone network (mobile telephone network, fixed telephone network, etc.), regional IP (Internet Protocol) network, and the Internet. The network may include a wired network or may include a wireless network.

[3. Configuration example of terminal device]
FIG. 6 is a diagram showing a configuration example of the terminal device 10 according to the embodiment. The terminal device 10 is an information display device (information processing device) used by the user to browse pages. The terminal device 10 is, for example, a communication terminal such as a smartphone, a tablet, or a mobile phone. As long as it has a communication function, the terminal device 10 may be an information processing terminal such as a personal computer (notebook PC, desktop PC) or a PDA (Personal Digital Assistant). In this case, the information processing terminal is also a kind of communication terminal. The terminal device 10 connects to the information processing device 30 via a network. As shown in FIG. 6, the terminal device 10 includes a communication unit 11, an input unit 12, a storage unit 13, an output unit 14, and a control unit 15. The configuration shown in FIG. 6 is a functional configuration, and the hardware configuration may be different from this.

The communication unit 11 is a communication interface that communicates with an external device. The communication unit 11 may be a network interface or a device connection interface. For example, the communication unit 11 may be a LAN interface such as a NIC (Network Interface Card), or may be a USB interface composed of a USB (Universal Serial Bus) host controller, a USB port, or the like. Further, the communication unit 11 may be a wired interface or a wireless interface. The communication unit 11 functions as a communication means of the terminal device 10. The communication unit 11 communicates with the information processing device 30 under the control of the control unit 15.

The input unit 12 is an input device that receives various inputs from the outside. For example, the input unit 12 is an operation device for the user to perform various operations such as a keyboard, a mouse, and operation keys. The input unit 12 functions as an input means of the terminal device 10. When a touch panel is adopted in the terminal device 10, the touch panel is also included in the input unit 12. In this case, the user performs various operations by touching the screen with a finger or a stylus.

The storage unit 13 is a data readable / writable storage device such as a DRAM (Dynamic Random Access Memory), a SRAM (Static Random Access Memory), a flash memory, and a hard disk. The storage unit 13 functions as a storage means for the terminal device 10. The storage unit 13 stores data of application software such as a web browser. The user communicates with the information processing device 30 via application software.

The output unit 14 is a device that outputs various outputs such as sound, light, vibration, and an image to the outside. The output unit 14 functions as an output means of the terminal device 10. The output unit 14 includes a display device that displays various types of information. The display device is, for example, a liquid crystal display or an organic EL (Electro Luminescence) display. When a touch panel is adopted for the terminal device 10, the display device may be integrated with the input unit 12. The output unit 14 displays an image on the screen according to the control of the control unit 15.

The control unit 15 is a controller, and for example, various programs stored in a storage device inside the terminal device 10 by a processor such as a CPU (Central Processing Unit) or an MPU (Micro Processing Unit) store a RAM or the like. It is realized by being executed as a work area. Further, the control unit 15 is a controller, and may be realized by, for example, an integrated circuit such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array).

[4. Service provision server configuration example]
Next, the configuration of the service providing server 20 will be described in detail. The service providing server 20 is a server host computer (hereinafter, simply referred to as “server”) that processes a request from a client computer such as a terminal device 10. The service providing server 20 may be a PC server, a midrange server, or a mainframe server. Further, the service providing server 20 may be configured by one server, or may be configured by a plurality of servers that perform processing in cooperation with each other. When the service providing server 20 is composed of a plurality of servers, the installation locations of these servers may be separated. Even if the installation locations are far apart, these servers can be regarded as one service providing server if the processes are executed in cooperation with each other.

FIG. 7 is a diagram showing a configuration example of the service providing server 20 according to the embodiment. The service providing server 20 includes a communication unit 21, a storage unit 22, and a control unit 23. The configuration shown in FIG. 7 is a functional configuration, and the hardware configuration may be different from this.

The communication unit 21 is a communication interface that communicates with an external device. The communication unit 21 may be a network interface or a device connection interface. For example, the communication unit 21 may be a LAN interface such as a NIC, or may be a USB interface composed of a USB host controller, a USB port, and the like. Further, the communication unit 21 may be a wired interface or a wireless interface. The communication unit 21 functions as a communication means of the service providing server 20. The communication unit 21 communicates with the terminal device 10 and the information processing device 30 under the control of the control unit 23.

The storage unit 22 is a data-readable / writable storage device such as a DRAM, SRAM, flash memory, and hard disk. The storage unit 22 functions as a storage means for the service providing server 20. The storage unit 22 stores the user information database 221.

The user information database 221 is a database that stores user data acquired when the service providing server 20 provides a service to a user. The user information database 221 may be an RDB, or may be a database using a hyperscale database information processing system (scale-out type system) such as NoSQL. At this time, NoSQL may be KVS.

FIG. 8 is a diagram showing an example of user information stored in the user information database 221. In the example shown in FIG. 8, the user information database 221 has items such as a user ID, a user name, a gender, an age, and a purchased product. The "user ID" is user identification information. The "user name" is the name of the user indicated by the user ID. The "gender" is the gender of the user indicated by the user ID. The "age" is the age of the user indicated by the user ID. The "purchased product" is information on a product purchased by a user indicated by a user ID using an online shopping service or the like. The user information shown in FIG. 8 is just an example. The user information can be appropriately changed according to the service provided by the service providing server 20.

The control unit 23 is a controller, and is realized by, for example, a processor such as a CPU or MPU executing various programs stored in a storage device inside the service providing server 20 using RAM or the like as a work area. Further, the control unit 23 is a controller, and may be realized by an integrated circuit such as an ASIC or FPGA.

[5. Configuration example of information processing device]
Next, the configuration of the information processing device 30 will be described in detail. The information processing device 30 is a server host computer (hereinafter, simply referred to as “server”) that processes a request from a client computer such as a terminal device 10. The information processing device 30 may be a PC server, a midrange server, or a mainframe server. Further, the information processing apparatus 30 may be composed of one server, or may be composed of a plurality of servers that perform processing in cooperation with each other. When the information processing device 30 is composed of a plurality of servers, the installation locations of these servers may be separated. Even if the installation locations are far apart, these servers can be regarded as one information processing device if the processes are executed in cooperation with each other.

FIG. 9 is a diagram showing a configuration example of the information processing device 30 according to the embodiment. The information processing device 30 includes a communication unit 31, a storage unit 32, and a control unit 33. The configuration shown in FIG. 9 is a functional configuration, and the hardware configuration may be different from this.

The communication unit 31 is a communication interface that communicates with an external device. The communication unit 31 may be a network interface or a device connection interface. For example, the communication unit 31 may be a LAN interface such as a NIC, or may be a USB interface composed of a USB host controller, a USB port, and the like. Further, the communication unit 31 may be a wired interface or a wireless interface. The communication unit 31 functions as a communication means of the information processing device 30. The communication unit 31 communicates with the service providing server 20 according to the control of the control unit 33.

The storage unit 32 is a data readable / writable storage device such as a DRAM, SRAM, flash memory, and hard disk. The storage unit 32 functions as a storage means for the information processing device 30. The storage unit 32 stores the management information database 321.

The management information database 321 is a database that stores management information for managing the user ID held by the service providing server 20. The management information database 321 may be an RDB (Relational Database) or a database using a hyperscale database information processing system. FIG. 10 is a diagram showing an example of management information stored in the management information database 321. In the example shown in FIG. 10, the management information database 321 has items such as an identifier, an internal ID, an encryption ID 1, an encryption ID 2, and an encryption ID 3.

The "identifier" is information that is a primary key of a record in which a plurality of encryption IDs indicating the same user are stored. Values such as E-U1A, E-U2A, E-U3A, E-U1B, E-U2B, E-U3B, E-U1C, E-U2C, and E-U3C are stored in the identifier. E-U1A, E-U2A, and E-U3A are encrypted IDs of user IDs held by the organization A. E-U1B, E-U2B, and E-U3B are encrypted IDs of user IDs held by organization B. E-U1C, E-U2C, and E-U3C are encrypted IDs of user IDs held by the organization C. In the identifier, all the encryption IDs provided by all the plurality of service providing servers 20 are stored as identifiers.

The "internal ID" indicates a user ID held by the information processing apparatus 30. Values such as U1, U2, and U3 are stored in the internal ID.

“Encryption ID 1” indicates the encryption ID of the user ID held by the organization A. Values such as E-U1A, E-U2A, and E-U3A are stored in the encryption ID1.

“Encryption ID 2” indicates the encryption ID of the user ID held by the organization B. Values such as E-U1B, E-U2B, and E-U3B are stored in the encryption ID2.

“Encryption ID 3” indicates the encryption ID of the user ID held by the organization C. Values such as E-U1C, E-U2C, and E-U3C are stored in the encryption ID3.

Returning to FIG. 9, the control unit 33 is a controller, and for example, various programs stored in the storage device inside the information processing device 30 are executed by a processor such as a CPU or MPU with the RAM or the like as a work area. Is realized by. Further, the control unit 33 is a controller, and may be realized by an integrated circuit such as an ASIC or FPGA.

As shown in FIG. 9, the control unit 33 includes an acquisition unit 331, a management unit 332, a specific unit 333, and a transmission unit 334. The blocks (acquisition units 331 to transmission units 334) constituting the control unit 33 are functional blocks indicating the functions of the control unit 33, respectively. These functional blocks may be software blocks or hardware blocks. For example, each of the above-mentioned functional blocks may be one software module realized by software (including a microprogram), or may be one circuit block on a semiconductor chip (die). Of course, each functional block may be one processor or one integrated circuit. The method of configuring the functional block is arbitrary. The control unit 33 may be configured in a functional unit different from the above-mentioned functional block.

The acquisition unit 331 acquires an encrypted ID that encrypts the user ID held by each of the plurality of service providing systems (plurality of service providing servers 20).

The management unit 332 manages management information associated with a plurality of encryption IDs indicating the same user. For example, the management unit 332 uses each of the plurality of encryption IDs as an identifier, and the information associated with the encryption IDs of another plurality of service providing systems (plurality of service providing servers 20) indicating the same user is provided for each of the plurality of identifiers. Manage the management information included.

Specifically, the management unit 332 deletes the encryption ID of the system selected from the plurality of service providing systems from the management information. In addition, the management unit 332 adds the encryption ID of the system newly added to the plurality of service providing systems to the management information. In addition, the management unit 332 changes the encryption ID stored in the management information to another encryption ID generated from the same user identification information.

First system specification unit 333 is one of a plurality of service providing systems (e.g., the service providing server 20 ₂₎ the first encrypted ID from (e.g., E-U2B is encrypted ID of the user U2) Is received, the encryption ID of another system corresponding to the first encryption ID (for example, E-U2A, E-U2C shown in FIG. 10) is specified based on the management information.

Transmitting section 334, other systems (e.g., the service providing server 20 ₁ and the service providing server 20 ₃₎ transmits the information about the encrypted ID of the first system (e.g., the service providing server 20 _2). For example, the transmission unit 334 transmits the encryption ID (for example, E-U2A, E-U2C) of another system to the first system. Further, the transmission unit 334 transmits the user data held by the other system and the user data specified by the encryption ID of the other system (for example, D12 and D32 shown in FIG. 2) to the first system. Send.

[6. Information processing device processing flow]
Next, the procedure of the processing executed by the information processing apparatus 30 will be described. The information processing device 30 executes a generation process and a management process. The information processing device 30 includes a multitasking OS, and these processes can be executed in parallel.

[6-1. registration process〕
First, the registration process will be described. FIG. 11 is a flowchart showing an example of the registration process. The registration process is a process of registering management information in the management information database 321. The information processing device 30 executes the registration process when the operator of the information processing device 30 orders the start of the process.

First, the information processing device 30 requests each of the service providing servers 20 to transmit the encryption ID (step S11). Then, the information processing device 30 determines whether or not the encryption ID has been received from all the service providing servers 20 that have made the request (step S12). When there is at least one service providing server 20 that does not transmit the encryption ID (step S12: No), the information processing apparatus 30 repeats step S12 until the encryption ID is received from all the service providing servers 20.

When the encryption IDs are received from all the service providing servers 20 (step S12: Yes), the information processing apparatus 30 executes the association of the encryption IDs (step S13). For example, as shown in FIG. 1, the information processing apparatus 30 associates E-U1A, E-U1B, and E-U1C indicating the encryption ID of the user U1. Further, the information processing device 30 associates E-U2A, E-U2B, and E-U2C indicating the encryption ID of the user U2. Further, the information processing device 30 associates E-U3A, E-U3B, and E-U3C indicating the encryption ID of the user U3.

Then, the information processing apparatus 30 registers the associated information in the management information database 321 (step S14). When the registration is completed, the information processing device 30 ends the registration process.

[6-2. Management process]
First, the management process will be described. FIG. 12 is a flowchart showing an example of the management process. The management process is a process related to management of management information. The information processing device 30 starts the management process when the power is turned on.

First, the information processing device 30 determines whether a request (processing request) has been received from the service providing server 20 or the terminal of the operator of the information processing device 30 (step S21). If the request has not been received (step S21: No), the information processing apparatus 30 repeats step S21 until the request is received.

When the request is received (step S21: Yes), it is determined whether the request is a data transmission request with an encryption ID from the service providing server 20 (step S22). If it is not a data transmission request (step S22: No), the information processing apparatus 30 proceeds to step S26.

When the request is a data transmission request from the service providing server 20 (step S22: Yes), the information processing apparatus 30 is transmitted together with the data transmission request based on the management information registered in the management information database 321. The encryption ID of another system corresponding to the encryption ID is specified (step S23).

Then, the information processing apparatus 30 acquires user data from the corresponding service providing server 20 by using the specified encryption ID (step S24). Then, the information processing device 30 transmits the acquired user data to the service providing server 20 that has transmitted the request (step S25). When the transmission is completed, the information processing apparatus 30 returns the process to step S21.

Returning to step S22, when the request is not a data transmission request from the service providing server 20 (step S22: No), a process for managing management information is executed (step S26). For example, when the information processing device 30 is instructed by the operator of the information processing device 30 to perform a process for excluding a predetermined service provider from the group, the information processing device 30 uses an encryption ID provided by the predetermined service provider. Delete from management information. In this case, the encryption ID proposed by the service provider remaining in the group may be changed to another encryption ID generated from the same user ID. Further, when a service provider is newly added to the group, the information processing device 30 adds the encryption ID provided by the newly added service provider to the management information.

When the processing is completed, the information processing apparatus 30 returns the processing to step S21 and waits for the reception of the request.

[7. Modification example]
The above-described embodiment shows an example, and various modifications and applications are possible.

For example, in the above-described embodiment, the service provided by the service providing server 20 is a service provided via the net, but the service is not limited to the service provided via the net. The service may be a service that does not use the net. For example, the service may be face-to-face sales at a retail store.

The control device that controls the information processing device 30 of the present embodiment may be realized by a dedicated computer system or a normal computer system. For example, a program for executing the above operation is stored and distributed in a computer-readable recording medium such as an optical disk, a semiconductor memory, a magnetic tape, or a flexible disk, and the program is installed in the computer to perform the above processing. The control device may be configured by executing. The control device may be an external device (for example, a personal computer) of the information processing device 30, or an internal device (for example, a control unit 33). Further, the above program may be stored in a disk device provided in a server device on a network such as the Internet so that it can be downloaded to a computer or the like. Further, the above-mentioned functions may be realized by cooperation between the OS (Operating System) and the application software. In this case, the part other than the OS may be stored in a medium and distributed, or the part other than the OS may be stored in the server device so that it can be downloaded to a computer or the like.

Further, among the processes described in each of the above embodiments, all or part of the processes described as being automatically performed can be manually performed, or the processes described as being manually performed. It is also possible to automatically perform all or part of the above by a known method. In addition, the processing procedure, specific name, and information including various data and parameters shown in the above document and drawings can be arbitrarily changed unless otherwise specified. For example, the various information shown in each figure is not limited to the illustrated information.

Further, each component of each of the illustrated devices is a functional concept, and does not necessarily have to be physically configured as shown in the figure. That is, the specific form of distribution / integration of each device is not limited to the one shown in the figure, and all or part of the device is functionally or physically distributed / physically in arbitrary units according to various loads and usage conditions. It can be integrated and configured.

In addition, the above-described embodiments can be appropriately combined as long as the processing contents do not contradict each other.

[8. Hardware configuration]
The information processing device 30 according to the embodiment and the modified example can also be realized by, for example, a computer 1000 having a configuration as shown in FIG. FIG. 13 is a hardware configuration diagram showing an example of a computer that realizes the functions of the information processing device 30. The computer 1000 includes a CPU (Central Processing Unit) 1100, a RAM 1200, a ROM 1300, an HDD (Hard Disk Drive) 1400, a communication interface (I / F) 1500, an input / output interface (I / F) 1600, and a media interface (I / F). ) Has 1700.

The CPU 1100 operates based on a program stored in the ROM 1300 or the HDD 1400, and controls each part. The ROM 1300 stores a boot program executed by the CPU 1100 when the computer 1000 is started, a program that depends on the hardware of the computer 1000, and the like.

The HDD 1400 stores a program executed by the CPU 1100, data used by such a program, and the like. The communication interface 1500 receives data from another device via the network N and sends it to the CPU 1100, and transmits the data generated by the CPU 1100 to the other device via the network N.

The CPU 1100 controls an output device such as a display or a printer, and an input device such as a keyboard or a mouse via the input / output interface 1600. The CPU 1100 acquires data from the input device via the input / output interface 1600. Further, the CPU 1100 outputs the generated data to the output device via the input / output interface 1600.

The media interface 1700 reads a program or data stored in the recording medium 1800 and provides the program or data to the CPU 1100 via the RAM 1200. The CPU 1100 loads the program from the recording medium 1800 onto the RAM 1200 via the media interface 1700, and executes the loaded program. The recording medium 1800 is, for example, an optical recording medium such as a DVD (Digital Versatile Disc) or PD (Phase change rewritable Disk), a magneto-optical recording medium such as MO (Magneto-Optical disk), a tape medium, a magnetic recording medium, or a semiconductor memory. And so on.

For example, when the computer 1000 functions as the information processing device 30 according to the embodiment, the CPU 1100 of the computer 1000 realizes the control unit 33 by executing the program loaded on the RAM 1200. The CPU 1100 of the computer 1000 reads and executes these programs from the recording medium 1800, but as another example, these programs may be acquired from another device via the network N.

Although some of the embodiments of the present application have been described in detail with reference to the drawings, these are examples, and various modifications are made based on the knowledge of those skilled in the art, including the embodiments described in the disclosure line of the invention. It is possible to carry out the present invention in other improved forms.

[9. effect〕
According to the present embodiment, the information processing apparatus 30 acquires an encryption ID that encrypts the user identification information held by each of the plurality of systems. Then, the information processing device 30 manages management information associated with a plurality of encryption IDs indicating the same user. As a result, the information processing apparatus 30 can provide the service provider with the same effect as when the user IDs are unified, without unifying the user IDs held by the plurality of service providers. Moreover, since the associated user ID is encrypted, the service provider does not have to worry about the user ID owned by the service provider being acquired by another service provider. As a result, the encrypted ID is smoothly provided, so that the service provider can easily use the data held by the other service provider via the encrypted ID.

Further, when the information processing apparatus 30 receives the first encryption ID from the first system which is one of a plurality of systems, the information processing device 30 corresponds to the other encryption ID based on the management information. Identify the encryption ID of the system. Then, the information processing device 30 transmits information regarding the encryption ID of the other system to the first system. For example, the information processing device 30 transmits the encryption ID of another system to the first system. As a result, the service provider can easily use the data held by the other service provider via the other encrypted ID.

Further, the information processing device 30 transmits the user data held by the other system and specified by the encryption ID of the other system to the first system. As a result, the service provider who operates the first system can easily acquire the data held by the other service providers. The user ID held by the other service providers is not known to the service provider who operates the first system.

Further, the information processing apparatus 30 manages management information including information in which each of the plurality of encryption IDs is used as an identifier and the encryption IDs of a plurality of other systems indicating the same user are associated with each of the plurality of identifiers. As a result, the information processing apparatus 30 facilitates the use of a hyperscale database information processing system (scale-out type system) such as NoSQL, so that the scale of the database (particularly, the horizontal scale) can be increased.

Further, the information processing device 30 deletes the encryption ID of the system selected from the plurality of systems from the management information. As a result, the information processing device 30 can reduce the possibility of information leakage through the service providing entity that has left the collaborative relationship.

In addition, the information processing device 30 adds the encryption ID of the system newly added to the plurality of systems to the management information. As a result, the information processing device 30 can easily incorporate a new service provider into the information sharing relationship. As a result, the information processing apparatus 30 can promote the sharing of information between the new service provider and the existing service provider.

The management unit changes the encryption ID stored in the management information to another encryption ID generated from the same user identification information. As a result, the information processing device 30 can reduce the possibility of information leakage to the service provider who has withdrawn from the collaborative relationship due to hostile acquisition or the like.

Although some of the embodiments of the present application have been described in detail with reference to the drawings, these are examples, and various modifications are made based on the knowledge of those skilled in the art, including the embodiments described in the disclosure column of the invention. It is possible to carry out the present invention in other improved forms.

Further, the above-mentioned "section, module, unit" can be read as "means" or "circuit". For example, the notification unit can be read as a notification means or a notification circuit.

1 ... Information processing system 10, 10 ₁ , 10 ₂ , 10 ₃ ... Terminal device 11, 21, 31 ... Communication unit 12 ... Input unit 13, 22, 32 ... Storage unit 14 ... Output unit 15, 23, 33 ... Control unit 20, 20 _{1, 20} 2, 20 3 _... service providing server 221 ... user information database 30 ... information processing apparatus 321 ... management information database 331 ... acquiring unit 332 ... management section 333 ... particular 334 ... transmission unit

Claims (8)

An acquisition unit that acquires an encrypted ID that encrypts user identification information held by multiple systems,
A management unit that manages management information including information related to association of a plurality of the encrypted IDs indicating the same user, and a management unit.
When the first encryption ID is received from the first system, which is one of the plurality of systems, the encryption ID of the other system corresponding to the first encryption ID is based on the management information. With a specific part that identifies
A transmission unit that transmits information about the encryption ID of the other system to the first system is provided.
The transmission unit acquires the user data held by the other system and specified by the encryption ID of the other system from the other system, and obtains the acquired user data from the first. Send to the system of
The information processing apparatus according to claim and this. The transmitter transmits the encryption ID of the other system to the first system.
The information processing apparatus according to claim 1. The management unit manages the management information including information associated with the encryption IDs of a plurality of other systems indicating the same user for each of the plurality of encryption IDs as identifiers.
The information processing apparatus according to claim 1 or 2 . The management unit deletes the encryption ID of the system selected from the plurality of systems from the management information.
The information processing apparatus according to any one of claims 1 to 3 , wherein the information processing device is characterized by the above. The management unit adds the encryption ID of the system newly added to the plurality of systems to the management information.
The information processing apparatus according to any one of claims 1 to 4 , wherein the information processing device is characterized by the above. The management unit changes the encryption ID stored in the management information to another encryption ID generated from the same user identification information.
The information processing apparatus according to any one of claims 1 to 5 , characterized in that. It is an information processing method executed by an information processing device.
The acquisition process of acquiring the encrypted ID that encrypts the user identification information held by each of the multiple systems,
A management process for managing management information including information related to association of a plurality of the encrypted IDs indicating the same user, and
When the first encryption ID is received from the first system, which is one of the plurality of systems, the encryption ID of another system corresponding to the first encryption ID is based on the management information. And the specific process to identify
A transmission step of transmitting information about the encryption ID of the other system to the first system is included.
In the transmission step, the user data held by the other system and specified by the encryption ID of the other system is acquired from the other system, and the acquired user data is obtained from the first. Send to the system of
Information processing method, wherein a call. An acquisition procedure for acquiring an encrypted ID that encrypts user identification information held by multiple systems, and
A management procedure for managing management information including information related to the association of a plurality of the encrypted IDs indicating the same user, and
When the first encryption ID is received from the first system, which is one of the plurality of systems, the encryption ID of the other system corresponding to the first encryption ID is based on the management information. With specific steps to identify
The computer is made to execute the transmission procedure of transmitting the information regarding the encryption ID of the other system to the first system .
In the transmission procedure, the user data held by the other system and specified by the encryption ID of the other system is acquired from the other system, and the acquired user data is obtained from the first. Send to the system of
Information processing program.

Images