KR102140772B1 - System for integrated manaegement of personal information for commerce, method of integrated management of personal information for commerce and apparatus for the same - Google Patents

Abstract

Disclosed is an integrated personal information management system for commerce, an integrated personal information management method for commerce, and an apparatus therefor. The integrated personal information management system comprehensively manages personal information such as a shipping address for a plurality of users, and provides personal information of the user only when an authenticated commerce device transmits a request for personal information including a valid customer key. Therefore, it is possible to minimize the security concerns such as leakage of personal information while maximizing efficiency by managing the personal information in an integrated manner.

Description

Integrated personal information management system for commerce, integrated personal information management method for commerce, and device therefor {SYSTEM FOR INTEGRATED MANAEGEMENT OF PERSONAL INFORMATION FOR COMMERCE, METHOD OF INTEGRATED MANAGEMENT OF PERSONAL INFORMATION FOR COMMERCE AND APPARATUS FOR THE SAME}

The present invention relates to an integrated management system for personal information for commerce, an integrated management method for personal information for commerce, and a device therefor. In particular, an integrated personal information management system for personal management of personal information for commerce based on API, personal information It relates to an integrated management method and a device therefor.

Commerce is an important activity in our lives. Commerce includes not only transactions between individuals, but also B2B, B2C, etc. In the case of commerce, personal information is accumulated and utilized.

At this time, personal information for commerce may include basic information of a buyer, a delivery address, and a phone number.

Personal information for commerce must be continuously managed. For example, if the shipping address is changed due to the buyer moving, the shipping information must be updated before the purchase product is delivered to the buyer.

Whenever a buyer's address or phone number changes, it is very cumbersome for the buyer to update personal information for all transactions one by one. For example, when a buyer uses 10 online commerce sites, in order to change the shipping address, the buyer must access the 10 online commerce sites individually and change the shipping address one by one.

Furthermore, when personal information for commerce is individually managed, the delivery address of some online commerce sites is set to A, and the delivery address of other online commerce sites is set to B, which causes user confusion.

In addition, if multiple online sites individually manage personal information for commerce, even if only one of the multiple online sites is exposed to hacking, it can cause serious problems in which the personal information of the buyer is exposed. The limited number of personal information lists, such as possible shipping address information, also causes inconvenience to users.

Korean Patent Publication No. 2004-0003804 relates to an automatic address change registration and service method of a mobile communication system. When an address is updated on one server in order to manage the delivery address of an invoice, the address of another server is automatically updated. However, it is difficult to apply to e-commerce, etc., since it is not basically about personal information management for commerce.

Therefore, the necessity of a new technology that can manage personal information for commerce in an integrated manner is desperately needed.

An object of the present invention is to eliminate the hassle of modifying personal information by accessing a plurality of commerce devices when the personal information is changed by integrally managing the personal information such as an address or phone number by the personal information integrated management device.

In addition, it is an object of the present invention to prevent problems such as delivery accidents or delivery delays due to misinputation of personal information, etc. by integrally managing changes in address or telephone number.

In addition, the object of the present invention is to prevent the leakage of personal information even when individual commerce sites are exposed to security threats by allowing integrated managed personal information to be provided only to authorized commerce sites.

Also, the object of the present invention is to prevent the user's personal information from being leaked to the corresponding commerce device if the user does not consent to the use of personal information on the commerce device (site) even when the commerce site is authenticated. It is to enhance the security of personal information.

In addition, an object of the present invention is to prevent the use of an unnecessary database due to redundant information storage by allowing individual commerce sites to store personal information only and not the personal information of users, respectively.

The personal information integrated management apparatus according to the present invention for achieving the above object comprises: a personal information request receiving unit for receiving a personal information request including an authentication key and a customer key from a commerce device; An authentication key verification unit that verifies the validity of the personal information request using the authentication key; And a personal information request processing unit that searches for personal information of a user who wishes to conduct commerce through the commerce device using the customer key when the verification is successful and provides it in response to the personal information request.

At this time, the request for personal information is performed based on a predefined API (Application Programming Interface), and the authentication key may be issued corresponding to the registration of the commerce device.

At this time, the customer key may be transmitted from the integrated personal information management device to the commerce device only when the user's personal information is authorized to be used by the commerce device by the user.

At this time, the customer key may be transmitted from the integrated personal information management device to the commerce device through the callback URL of the commerce device only when the authorization is performed through the commerce device.

At this time, when the commerce is completed and the personal information corresponding to the commerce is different from the personal information of the user, the personal information integrated management device may update the personal information of the user by using the personal information corresponding to the commerce. have.

At this time, the commerce device provides the user with a menu for selecting whether to update the personal information of the user using personal information corresponding to the commerce, and the personal information integrated management device provides the user with the menu. The user's personal information can be updated only when the user's personal information update using the personal information corresponding to the transaction is agreed.

In addition, the commerce device according to the present invention includes: an integrated management registration unit that performs registration processing for a personal information integrated management device and receives an authentication key from the personal information integrated management device; A personal information requesting unit that generates a personal information request and transmits it to the personal information integrated management device, including the authentication key and a customer key corresponding to a user attempting commerce; And a commerce execution unit that receives the user's personal information corresponding to the customer key from the personal information integrated management device and enables the commerce to be performed using the user's personal information.

In addition, the method for managing personal information integrated according to the present invention comprises: receiving a request for personal information including an authentication key and a customer key from a commerce device; Verifying the validity of the personal information request from the commerce device using the authentication key; If the verification is successful, searching for personal information of a user who wishes to conduct commerce through the commerce device using the customer key; And providing the retrieved personal information of the user in response to the personal information request.

In addition, the commerce method according to the present invention comprises: receiving an authentication key corresponding to completion of registration for the personal information integrated management device from the personal information integrated management device; Generating a personal information request, including the authentication key and a customer key corresponding to a user attempting commerce, and transmitting the personal information request to the integrated personal information management device; Receiving personal information of the user corresponding to the customer key from the personal information integrated management device; And processing the transaction using the received personal information of the user.

In addition, the integrated personal information management system according to the present invention transmits a personal information request including an authentication key and a user's customer key for commerce, and receives personal information corresponding to the user in response to the personal information request. A commerce device to perform the commerce by; And personal information that authenticates the commerce device to provide the authentication key to the commerce device, authenticates the user to provide the customer key to the commerce device, and provides personal information corresponding to the user to the commerce device. Includes integrated management devices.

According to the present invention, by managing the personal information, such as an address or a phone number, by the integrated personal information management device, it is possible to eliminate the hassle of modifying personal information by accessing a plurality of commerce devices when the personal information is changed.

In addition, the present invention can prevent problems such as delivery accidents or delivery delays due to misinputation of personal information by integrally managing changes in addresses or phone numbers.

In addition, the present invention can prevent personal information leakage even when an individual commerce site is exposed to a security threat by allowing the integrated managed personal information to be provided only to an authorized commerce device (site).

In addition, in the present invention, even when the commerce site is authenticated, if the user does not consent to the use of personal information on the commerce device (site), the personal information of the user is basically prevented from being leaked to the commerce device to protect the personal information Security can be enhanced.

In addition, the present invention can prevent the use of an unnecessary database due to redundant information storage by allowing the individual commerce site to store personal information only without the personal information of users, and only the personal information integrated management device.

1 is a block diagram showing an integrated personal information management system according to an embodiment of the present invention.
2 is a diagram showing a database configuration when personal information is individually managed for each commerce device.
3 is a diagram showing a database configuration when personal information is integrated and managed through the personal information integrated management device.
4 is a block diagram showing an integrated personal information management device according to an embodiment of the present invention.
5 is a block diagram showing a commerce device according to an embodiment of the present invention.
6 is an operation flowchart showing a method for managing personal information integration according to an embodiment of the present invention.
7 is an operation flowchart showing a commerce method according to an embodiment of the present invention.
8 is an operation flowchart showing an example of a customer key receiving step shown in FIG. 7.
9 is a flowchart illustrating an overall method of managing personal information according to an embodiment of the present invention.
10 is a diagram illustrating an example of an interface screen to which a method for managing personal information integration according to an embodiment of the present invention is applied.
11 is a diagram showing an example of a personal information integrated management system authentication interface screen.
12 is a diagram showing an example of an integrated managed personal information list providing interface screen.

If described in detail with reference to the accompanying drawings the present invention. Here, repeated descriptions, well-known functions that may unnecessarily obscure the subject matter of the present invention, and detailed description of the configuration will be omitted. Embodiments of the present invention are provided to more fully describe the present invention to those skilled in the art. Therefore, the shape and size of elements in the drawings may be exaggerated for a clearer explanation.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram showing an integrated personal information management system according to an embodiment of the present invention.

1, the personal information integrated management system according to an embodiment of the present invention includes a commerce device 110, a personal information integrated management device 120, a terminal device 130 and the network 140.

The commerce device 110 is a device used by a user for commerce such as product purchase, and may provide online and/or offline commerce. For example, the commerce device 110 may correspond to an online shopping mall site (server).

The commerce device 110 provides a personal information request including the authentication key and the user's customer key to the personal information integrated management device 120 for commerce, and receives personal information corresponding to the user in response to the personal information request To conduct commerce.

The personal information integrated management device 120 integrally manages user personal information such as a shipping address or a telephone number corresponding to a plurality of commerce devices.

The personal information integrated management device 120 may perform authentication for the commerce device 110 and provide an authentication key to the commerce device 110 that is successfully authenticated.

The personal information integrated management device 120 provides a customer key to the commerce device 110 based on the user's consent. At this time, the customer key may correspond to an authenticated user.

The personal information integrated management device 120 may provide personal information corresponding to a user to the commerce device 110 in response to a request for personal information from the commerce device 110.

The terminal device 130 is used for a user to access the commerce device 110 through the network 140 and perform user authentication and commerce input for commerce. Furthermore, the terminal device 130 may be used for a user to access the personal information management device 120 through the network 140 and perform user authentication and personal information registration.

At this time, the terminal device 130 is a personal computer (PC), a laptop computer, a mobile phone (mobile phone), a tablet PC, navigation (navigation), a smart phone (smart phone), PDA (Personal Digital Assistants), PMP (Portable Multimedia) Player) or a digital broadcast receiver such as Digital Video Broadcasting (DVB).

The network 140 provides a path for transferring information between the commerce device 110, the integrated personal information management device 120, and the terminal device 130, and includes both existing and future networks that can be developed. It is a concept. For example, the network 140 is an IP network that provides a large data transmission/reception service and a data service without disconnection through an Internet protocol (IP), and an IP network structure that integrates different networks based on IP. (All IP) network, wired network, Wibro (Wireless Broadband) network, 3G mobile communication network including WCDMA, HSDPA (High Speed Downlink Packet Access) network and 3.5G mobile communication network including LTE network, LTE advanced It can be made by combining one or more of the included 4G mobile communication network, satellite communication network and Wi-Fi (Wi-Fi) network. In addition, in FIG. 1, the network used between the commerce device 110 and the integrated personal information management device 120 is the commerce device 110 and the terminal device 130 or the personal information integrated management device 120 and the terminal device 130. ) May be different from the network used, or may be the same.

2 is a diagram showing a database configuration when personal information is individually managed for each commerce device.

Referring to FIG. 2, it can be seen that the commerce devices 210-1, ..., 210-N separately store personal information such as a delivery address or contact information in a separate database.

That is, the commerce device 210-1 stores the personal information 215-1 such as the default shipping address and the default shipping address in the customer information database 211-1, and the shipping address in the shipping information database 213-1 And personal information 217-1, such as a delivery address.

In addition, the commerce device 210-N stores the personal information 215-N such as the default shipping address and the default shipping address in the customer information database 211-N, and the shipping address in the shipping information database 213-N And personal information 217-N, such as a contact information of a shipping address.

3 is a diagram showing a database configuration when personal information is integrated and managed through the personal information integrated management device.

Referring to FIG. 3, the commerce sites 310-1, ..., 310-N do not access the personal information managed by the corresponding store, but always through the centralized personal information integrated management device 320 It can be seen that the updated list of personal information is provided.

That is, the commerce device 310-1 receives the personal information 315-1 corresponding to the customer information database 311-1 through the personal information integrated management device 320, and the delivery information database 313-1. Personal information 317-1 corresponding to the information is provided.

In addition, the commerce device 310-N receives personal information 315-N corresponding to the customer information database 311-N through the personal information integrated management device 320 and receives the delivery information database 313-N. Personal information corresponding to (317-N) is provided.

As shown in FIG. 3, since the commerce devices 310-1, ..., 310-N are all provided with personal information through the personal information integrated management device 320, the user can manage the personal information integrated management device If the personal information is updated at 320, it is not necessary to access multiple commerce devices 310-1, ..., 310-N, and update the personal information.

In the example shown in FIG. 3, the member ID_SIMS corresponds to the customer key, and the personal information integrated management device 320 may be used to identify the user, and the shipping destination ID is the personal information integrated management device 320 of the corresponding user. It may be used to identify the shipping address.

4 is a block diagram showing an integrated personal information management device according to an embodiment of the present invention.

4, the personal information management unit according to an embodiment of the present invention includes a personal information request receiving unit 410, an authentication key verification unit 420, a personal information request processing unit 430, personal information update processing unit 440 ), a store registration processing unit 450, a personal registration processing unit 460 and a database 470.

The personal information request receiving unit 410 receives a personal information request including an authentication key and a customer key from a commerce device.

At this time, the request for personal information is performed based on a predefined application programming interface (API), and the authentication key may be issued corresponding to the registration of the commerce device.

At this time, the customer key may be transmitted from the personal information integrated management device to the commerce device only when the user's personal information is approved by the user to be used by the commerce device. Furthermore, the customer key can be transmitted from the integrated personal information management device to the commerce device through the callback URL of the commerce device only when the authorization is performed through the commerce device.

At this time, the callback URL may be an address that identifies the reverse direction of the path where the user's approval is delivered to the integrated personal information management device, and various address systems for server identification such as an IP address and a beer yard may be used. As described above, when the user's approval is delivered to the personal information integrated management device through the corresponding commerce device, the personal information integrated management device simply provides the user key of the user to the commerce device corresponding to the source that provided the approval. The user's customer key can be delivered to a legitimate commerce device.

The authentication key verification unit 420 verifies the validity of the personal information request using the authentication key.

If validation is successful, the personal information request processing unit 430 searches for personal information of a user who wishes to perform the commerce through a commerce device using a customer key included in the personal information request and responds to the request for personal information To provide.

The personal information update processing unit 440 updates the personal information of the user by using the personal information corresponding to the commerce transaction when the commerce is completed and the personal information corresponding to the commerce transaction is different from the personal information of the user.

At this time, the personal information update processing unit 440 provides a menu for the commerce device to select whether to update the user's personal information using the personal information corresponding to the commerce, and the personal information integrated management device May update the user's personal information only when the user agrees to update the user's personal information using personal information corresponding to the transaction through the menu.

The store registration processing unit 450 performs a registration procedure for the commerce device, performs authentication for the commerce device, issues an authentication key, and provides it to the commerce device.

The personal registration processing unit 460 performs a user registration procedure and performs authentication for the user to issue a customer key. At this time, the issued customer key may be provided to a commerce site to which the user has consented to use the information.

The personal registration processing unit 460 may allow an authenticated user to register his personal information. At this time, the registered personal information may include a number of personal information items set by the user. As such, by allowing a sufficient number of personal information items set by the user to be registered, it is possible to overcome the limitation of providing only a limited number of destination lists in an online shopping mall site or the like.

The database 470 stores commerce site registration information, user registration information, issued authentication key and customer key, and a list of personal information registered by the user.

According to an embodiment, the integrated personal information management device shown in FIG. 4 may provide only a predetermined number of personal information within a predetermined period for each commerce device, thereby preventing personal information leakage through hacking or security attacks.

5 is a block diagram showing a commerce device according to an embodiment of the present invention.

Referring to FIG. 5, the commerce device according to an embodiment of the present invention includes an integrated management registration unit 510, a personal information request unit 520, and a commerce execution unit 530.

The integrated management registration unit 510 performs registration processing for the integrated personal information management device, and receives an authentication key from the integrated personal information management device.

At this time, the personal information request may be generated based on a predefined API (Application Programming Interface).

The personal information requesting unit 520 generates a personal information request including the authentication key and a customer key corresponding to a user who attempts commerce, and transmits the request to the personal information integrated management device.

At this time, the customer key may be transmitted from the integrated personal information management device to the commerce device only when the user's personal information is authorized to be used by the commerce device by the user.

The commerce execution unit 530 receives the personal information of the user corresponding to the customer key from the personal information integrated management device, and allows commerce to be performed using the personal information of the user.

According to an embodiment, the commerce device illustrated in FIG. 5 uses the personal information corresponding to the commerce transaction when the commerce is completed and the personal information corresponding to the commerce transaction is different from the personal information of the user. An update request for updating may be generated and provided to the personal information integrated management device. At this time, the update request may be generated based on a predefined API (Application Programming Interface).

According to an embodiment, the commerce device illustrated in FIG. 5 may receive only a predetermined number of personal information within a predetermined period of time for the corresponding commerce device from the personal information integrated management device.

6 is an operation flowchart showing a method for managing personal information integration according to an embodiment of the present invention.

Referring to Figure 6, in the personal information integrated management method according to an embodiment of the present invention, the corresponding commerce device is registered at the request of the commerce device (S610).

At this time, the registration procedure can be performed online, and when the commerce device submits the form, the personal information integrated management device can issue an authentication key at the same time as registration. The authentication key may be in an inactive state at the time of initial issuance, and thereafter, when an operator designates it as an activated state through an administrator screen, it may become available. In addition, the authentication key may be activated when authentication for the commerce device is performed through another authentication method.

When calling the API (Application Programming Interface) of the commerce device for the integrated personal information management device, the call processing is normally performed only when the corresponding authentication key is activated, and a failure response is always returned for the API call using the authentication key that is inactive. Can be.

In addition, in the personal information integrated management method according to an embodiment of the present invention, the user is registered at the request of the user (S620).

At this time, the registration procedure may be performed online, and when the user accesses the personal information management device through the terminal device and completes user registration and user authentication, a customer key of the corresponding user may be generated. At this time, the generated customer key is not provided to the user, but may be issued to a commerce site where the user agrees to use the information. That is, the customer key can be transmitted to the commerce device only when the user's personal information is authorized to be used by the commerce device by the user.

User registration may be a concept including registering a personal information list of a corresponding user.

In addition, the personal information integrated management method according to an embodiment of the present invention receives a personal information request including an authentication key and a customer key from a commerce device (S630).

At this time, the request for personal information may be performed using a predefined API (Application Programming Interface). Further, in addition to requesting personal information, requests for registering, modifying, deleting, and inquiring personal information may be performed using the API. At this time, the request using the API may include an authentication key and a customer key as essential parameters, the authentication key may be used to determine the validity of the API call, and the customer key may be used to determine the scope of application of the API.

At this time, the request for personal information may further include auxiliary information for easily finding the personal information desired by the user in the database. For example, when the requested personal information is address information of a product delivery address, a keyword “company” may be included as auxiliary information. In this case, the integrated personal information management device can extract only the personal information corresponding to the auxiliary information "company" among the personal information of the user corresponding to the customer key and provide it to the commerce device.

In addition, in the personal information integrated management method according to an embodiment of the present invention, the validity of the request for the personal information from the commerce device is verified using the authentication key (S640).

If the verification in step S640 is successful, the personal information integrated management method according to an embodiment of the present invention searches for personal information of a user who wishes to conduct commerce through the commerce device using the customer key ( S650).

In addition, the integrated personal information management method according to an embodiment of the present invention provides the retrieved personal information of the user to the commerce device in response to the personal information request (S660).

According to an embodiment, the method for managing personal information integrated in FIG. 6 uses the personal information corresponding to the transaction when the transaction is completed and the personal information corresponding to the transaction is different from the personal information of the user. The method may further include updating personal information.

7 is an operation flowchart showing a commerce method according to an embodiment of the present invention.

Referring to FIG. 7, in the commerce method according to an embodiment of the present invention, an authentication key corresponding to completion of registration is received from the personal information integrated management device by performing a registration procedure for the personal information integrated management device (S710 ).

In addition, the commerce method according to an embodiment of the present invention acquires a customer key corresponding to a user who attempts commerce (S720).

At this time, if the commerce device previously obtained the customer key and stored it in the database, step S720 may be a step of reading the corresponding customer key from the database.

If the commerce device does not have the customer key of the user, step S720 provides the user with an interface to authorize the commerce device to use his or her personal information through the integrated personal information management device. Based on the approval, it may be a step of allowing the corresponding commerce device to receive a customer key from the integrated personal information management device.

When the customer key is obtained, the commerce method according to an embodiment of the present invention generates a personal information request including the authentication key and the customer key and transmits it to the personal information integrated management device (S730).

In addition, the commerce method according to an embodiment of the present invention receives the personal information of the user corresponding to the customer key from the personal information integrated management device (S740).

In addition, the commerce method according to an embodiment of the present invention processes the commerce using the received personal information of the user (S750).

In step S750, personal information received from the personal information integrated management device may be displayed separately from the personal information held by the commerce device itself. For example, when the name of the online shopping mall is "11st Street", the commerce device may display the user's personal information in a radio button, divided into "11th Street Delivery List" and "Delivery Information Management System List".

When the user selects "11th Street Shipping List", the commerce device provides a list of personal information (delivery address) received from the integrated personal information management device, and when the user selects one of the lists, the web page for product payment In, the text box for entering the shipping address can be automatically filled with information corresponding to the selected shipping address.

At this time, the commerce device may provide a check box for updating the personal information database of the commerce device or the database of the integrated personal information management device by reflecting the modified contents when personal information such as a delivery address is modified. For example, the check box may be a "Save modified shipping address and contact information" check box. When the user checks such a check box, the commerce device may generate an API call for updating the modified personal information and transmit it to the personal information integrated management device.

According to an embodiment, the commerce device may provide a radio button "new address" to allow the user to enter a new shipping address, and at this time, provide a check box of "save new shipping address to the integrated management device" After entering the new address, the newly entered new address can be registered in the integrated personal information management device through an API call.

In addition, the commerce method according to an embodiment of the present invention determines whether the commerce is completed and the personal information corresponding to the commerce is different from the personal information of the user (S760).

As a result of the determination in step S760, if it is determined that the personal information used in the commerce is different from the personal information registered in the DB, the commerce method according to an embodiment of the present invention requests an update to update the personal information of the user. It is generated and provided as an integrated personal information management device (S770).

As a result of the determination in step S760, if the personal information used in the commerce is the same as the personal information registered in the DB and there is no need to update the personal information, the commerce device ends the operation.

8 is an operation flowchart showing an example of a customer key receiving step shown in FIG. 7.

In particular, the example shown in FIG. 8 corresponds to the case where the commerce device does not store the customer key of the user who wishes to conduct commerce.

Referring to FIG. 8, the customer key receiving step illustrated in FIG. 7 moves to a payment page of an item (product, product or service, etc.) for which the user wishes to perform a commerce transaction (S810 ).

At this time, step S810 may correspond to the user moving the item to the payment page after placing the item in the shopping cart.

In addition, the customer key receiving step provides a button for integrated personal information management authentication, and determines whether the user has selected this button (S820).

As a result of the determination in step S820, if the user does not select this button, the user input may be continuously waiting.

As a result of the determination in step S820, when the user selects this button, the customer key receiving step performs a user authentication/registration procedure for the integrated personal information management device through providing an authentication screen (S830).

In this case, step S830 provides a personal information integrated management authentication pop-up window, and the personal information integrated management authentication pop-up window may indicate that the delivery information of the user is shared in the corresponding commerce device upon completion of authentication.

In addition, the customer key receiving step receives the customer key from the personal information integrated management device (S840).

At this time, step S840 may receive a customer key using a callback URL corresponding to the commerce device.

At this time, step S840 may refresh the payment page.

9 is a flowchart illustrating an overall method of managing personal information according to an embodiment of the present invention.

Referring to FIG. 9, a terminal device 130 corresponding to a user requests user registration and personal information registration to the personal information integrated management device 120 (S911).

The personal information integrated management device 120 performs personal registration processing in response to the request (S931).

At this time, step S931 may perform user registration and personal information registration corresponding to the registered user, and issue a customer key in correspondence with the personal registration processing.

The commerce device 110 requests store registration with the personal information integrated management device 120 (S921).

The personal information integrated management device 120 performs store registration processing in response to the request (S932), and issues an authentication key for the corresponding commerce device in response to the registration completion (S933).

The terminal device 130 accesses the commerce device 110 to perform member authentication (S912), and requests the integrated personal information management commerce from the commerce device 110 (S913).

The commerce device 110 determines whether the customer key of the corresponding user is held in response to the request of step S913 (S922).

As a result of the determination in step S922, if the customer key of the user is not retained, the commerce device 110 provides a personal information integrated management authentication screen to the terminal device 130 (S923). At this time, the authentication screen may indicate that the delivery information of the user is shared in the commerce device 110 when authentication is completed.

As a result of the determination in step S922, if the customer key of the user is held, the commerce device 110 proceeds directly to step S924 to generate a personal information request.

The terminal device 130 requests user authentication through the commerce device 110 to the personal information integrated management device 120 in response to providing the authentication screen in step S923 (S914).

The personal information integrated management apparatus 120 performs user authentication to determine whether authentication is successful (S934).

If it is determined in step S934 that the authentication is successful, the personal information integrated management device 120 provides the user's customer key to the commerce device 110 (S935).

If it is determined in step S934 that the authentication has failed, the personal information integrated management device 120 ends the operation.

The commerce device 110 generates a personal information request using its authentication key and a customer key of a user who wishes to commerce (S924), and transmits the generated personal information request to the personal information integrated management device 120 ( S925).

The personal information integrated management device 120 provides personal information of the corresponding user in response to the request of step S925 (S936).

The commerce device 110 processes commerce using the personal information provided in step S936 (S926).

10 is a diagram illustrating an example of an interface screen to which a method for managing personal information integration according to an embodiment of the present invention is applied.

Referring to FIG. 10, it can be seen that an interface screen is provided for a user to input shipping address information for commerce.

In particular, in the example shown in FIG. 10, in selecting a delivery destination, a button 1010 for requesting a list of destinations of a commerce device and a button 1020 for requesting a list of destinations for an integrated personal information management device are displayed.

When the user selects a button 1010 to request a list of shipping destinations of the commerce device, a list of shipping destinations of the user stored in the database of the commerce device is provided through a pop-up window.

When the user selects a button 1020 for requesting a list of shipping destinations of the integrated personal information management device, a list of shipping destinations of the user, which is managed by the integrated personal information management device through a pop-up window, is provided.

Although not shown in FIG. 10, a check box may be provided on the interface screen for inputting shipping address information to check whether the modified shipping address is stored, or whether the new address is newly stored in the integrated personal information management device. A checkbox may be provided for checking.

11 is a diagram showing an example of a personal information integrated management system authentication interface screen.

Referring to FIG. 11, on the interface screen for personal information integrated management authentication, it is displayed that personal information integrated and managed by the personal information integrated management device is shared on the commerce device (11th Street) corresponding to the commerce that the user intends to perform. It can be seen that the user's confirmation is received.

As described above, when the user receives the personal key of the user to the corresponding commerce device, the integrated personal information management device receives the user key of the corresponding user through the interface screen. The outflow is blocked by nature.

12 is a diagram showing an example of an integrated managed personal information list providing interface screen.

Referring to FIG. 12, it can be seen that personal information (delivery information) that is integrated and managed through the integrated personal information management device is provided through an interface screen.

The user is provided with a list of personal information (delivery information) managed in this way, and by selecting one of them, it is possible to efficiently receive the purchased product to the correct destination.

In FIG. 12, when deleting or modifying an address on the delivery destination list, a pop-up window is provided asking whether to reflect it in the database of the integrated personal information management device, and the database of the integrated personal information management device is updated in response to a user response to the pop-up window. Can.

Furthermore, when a user adds a delivery address, the added delivery address may be updated in the personal information integrated management device or the database of the commerce site.

The personal information integrated management method and the commercial transaction method according to the present invention may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, or the like alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the present invention or may be known and usable by those skilled in computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs, DVDs, and magnetic media such as floptical disks. Includes all types of hardware devices specifically configured to store and execute program instructions such as magneto-optical media, and ROM, RAM, flash memory, and the like. Examples of program instructions may include high-level language code that can be executed by a computer using an interpreter, etc., as well as machine language codes made by a compiler. Such a hardware device may be configured to operate as one or more software modules to perform the operation of the present invention, and vice versa.

As described above, the personal information integrated management system according to the present invention, the personal information integrated management method for commerce, and the apparatus for the same are not limited to the configuration and method of the embodiments described above, but the above embodiment The examples may be configured by selectively combining all or part of each embodiment so that various modifications can be made.

According to the present invention, the server for online/offline commerce does not need to directly store the personal information of subscribers, and the personal information such as the delivery address or the phone number is requested and answered based on the API (Application Programming Interface) with the integrated personal information management server. Can be provided through. Furthermore, the authentication key and the customer key are used to authenticate the commerce device (site) and the user, and only when the user agrees to use the information on the commerce device, the integrated managed personal information is provided to the commerce device. By preventing the risk of personal information leakage, it can contribute to the activation of e-commerce.

110: commerce device
120: personal information integrated management device
130: terminal device
140: network
410: personal information request receiver
420: authentication key verification unit
430: personal information request processing unit
440: personal information update processing unit
450: store registration processing unit
460: personal registration processing unit
470: database

Claims (16)

A personal information request receiving unit for receiving a personal information request including an authentication key and a customer key from a commerce device;
An authentication key verification unit that verifies the validity of the personal information request using the authentication key;
A personal information request processing unit that searches for personal information of a user who wishes to conduct commerce through the commerce device using the customer key when the verification is successful and provides it in response to the personal information request; And
When the commerce is completed and the personal information corresponding to the commerce is different from the personal information of the user, the personal information of the user is updated using the personal information corresponding to the commerce, but the user selects whether to update the personal information A personal information update processing unit that provides the information and updates the personal information of the user only when the user consents; Including,
The commerce device,
It corresponds to an online shopping mall site or an online shopping mall server,
The personal information,
Personal information integrated management device for commerce, characterized in that at least one or more of the user's address, name or phone number corresponding to the commerce. The method according to claim 1,
The personal information request is performed based on a predefined API (Application Programming Interface), and the authentication key is a personal information integrated management device for commerce characterized in that it is issued corresponding to the registration of the commerce device. The method according to claim 1,
The customer key is transmitted by the user, only when the user's personal information is authorized to be used by the commerce device, the personal information integrated management device, characterized in that transmitted from the personal information integrated management device to the commerce device. delete delete delete delete delete delete delete delete delete delete delete delete delete

Images