KR20050074608A - Personal information control system, mediation system, and terminal unit - Google Patents

Abstract

A personal information control system comprises a terminal unit having a personal information storage means for storing personal information on one item or more items of users, a personal authenticating means, and a personal information transmitting means for transmitting personal information of users according to the instruction from an mediation system, a service company system having a personal information requesting means for requesting the personal information of users on the items necessary for a service company to provide their service to the mediation system, and a personal information receiving means, and a mediation system having a terminal acceptance- rejection determining means and a transmission instructing means for instructing the terminal unit to transmit the personal information of users on the necessary items requested from the service company system to the service company system.

Description

PERSONAL INFORMATION CONTROL SYSTEM, MEDIATION SYSTEM, AND TERMINAL UNIT}

The present invention relates to a system for managing personal information of a user.

Background Art Conventionally, a technology for providing a service such as online shopping for a user through a network such as the Internet has been proposed. Before using the service, the user must inform the service provider who performs the service of his / her personal information such as his / her name, address, contact number and credit card number.

However, even personal information unrelated to a service may be required from a service provider. In addition, once personal information deviates from the user, there is a possibility that the personal information is leaked or spread thereafter.

In such a situation, in recent years, many users have become conscious that they want to manage their own personal information as much as possible and give only the minimum necessary information to the service provider.

On the other hand, a service provider has conventionally requested input of a user ID and password when determining whether a user to be serviced is a regular user, and authenticates that the user is a regular user if these inputs are correct.

In order to manage personal information, the following techniques have been proposed. The invention described in Japanese Patent Laid-Open No. 2002-99829 provides a server for managing personal information between a terminal of a user connected to a network and a service providing server that requests a user's personal information for service provision. . In addition, the invention described in Japanese Patent Laid-Open No. 2002-7894 unifies customer information (personal information) in a database of a customer management system.

According to the invention described in Japanese Patent Laid-Open No. 2001-350721, the user discloses the title of the information to be provided to the information broker. The person (service provider) who wants to acquire the information is made to display the title on the web browser of the terminal and designates this. In doing so, the user's terminal transmits the information to the information intermediary terminal upon notification of the designation. The information relay terminal maintains the terminal of the service provider so as to acquire the information.

By the way, according to each invention described in JP-A-2002-99829 and JP-A-2002-7894, since personal information is placed in a system which is disclosed on a network away from user's management, personal information may be leaked. There is anxiety for the user. In addition, according to the invention disclosed in Japanese Patent Laid-Open No. 2001-350721, although the time for placing personal information in a system on a network is short, it is also unstable for the user.

On the other hand, if the service provider authenticates that the user ID and password are all correct users, the service provider may allow illegal use of the service and lose the trust of the user. A fraudulent user will also suffer damages.

In view of the above problems, an object of the present invention is to provide a service provider with personal information necessary to receive a service while managing personal information of a user himself, so that a reliable service can be achieved.

1 is a diagram showing an example of the overall configuration of a personal information management system according to the present invention.

2 is a diagram illustrating an example of a hardware configuration of an intermediate system.

3 is a diagram illustrating an example of a functional configuration of a mediation system.

4 is a diagram illustrating an example of a functional configuration of a service providing system.

5 is a diagram illustrating an example of a functional configuration of a terminal device.

6 is a diagram illustrating an example of personal information.

7 is a diagram illustrating an example of personal information.

8 is a flowchart illustrating an example of a processing flow of preparation required for a service provider.

9 is a flowchart for explaining an example of a processing flow of preparation required for a user.

10 is a flowchart for explaining an example of a service providing process flow in a personal information management system.

11 is a flowchart for explaining an example of the authentication processing flow.

12 is a flowchart for explaining an example of the availability decision processing flow.

13 is a flowchart for explaining an example of a secondary business operator selection processing flow.

14 is a flowchart for explaining an example of a required information collection process flow.

The personal information management system according to the present invention includes a service provider system of a service provider, a terminal device of a user who wants to receive a service provided by the service provider, and a broker for providing personal information of the user to the service provider. It is made with an intermediary system.

The terminal apparatus of the user includes personal information storage means for storing personal information relating to one or a plurality of items of the user, and personal authentication means for authenticating whether the user is a person having authority to use the terminal apparatus. And personal information transmitting means for transmitting the personal information of the user in accordance with the instruction from the mediation system.

The service provider system of the service provider includes personal information requesting means for requesting the intermediary system the personal information of the user regarding items necessary for the service provider to provide the service, and the requested personal information of the user. Personal information receiving means for receiving from the terminal device of the user is provided.

The intermediary system includes: terminal suitability discrimination means for determining whether the terminal apparatus of the user is suitable for use for receiving the provision of the service, and required by the personal information requesting means of the service provider system of the service provider; The personal information of the user relating to a necessary item is authenticated by the personal authentication means of the user's terminal device as the user having the authority, and the terminal device provides the service by the terminal suitability determining means. When it is determined that the device is suitable for use for receiving, transmission command means for instructing the terminal device to transmit to the service provider system is provided.

Preferably, the intermediate system is provided with item storage means for storing item information indicating an item of personal information necessary for the service provider to provide the service before starting the reception of the service. Then, the transmission command means instructs to transmit the personal information of the user related to the item indicated in the item information.

Alternatively, the item storage means may include, as the item information, first item information indicating an item of personal information directly required by the service provider and an item of personal information required by a secondary company on behalf of the service provider. Storing the item information, and the transmitting command means transmits the personal information of the user relating to the item indicated in the first item information to the service provider, and the individual of the user relating to the item indicated by the second item information. Instruct information to be sent to the secondary operator.

Alternatively, the personal information transmitting means encrypts and transmits the personal information of the user by a public key cryptography method using a public key different for each destination. Alternatively, the personal information storage means stores, as personal information of the user, personal information which is recognized as correct by a person other than the user.

Alternatively, the terminal device of the user is provided with feature information storage means for storing feature information representing the physical feature of the user, and feature input means for inputting the physical feature of the user. The personal authentication means performs the authentication based on the input physical feature of the user and the feature information stored in the feature information storage means.

Alternatively, in the terminal device, when the user is authenticated as the person having the authority, service requesting means for requesting the service provider to provide the service to the user is provided.

According to the accompanying drawings, the present invention will be described in more detail. 1 is a diagram showing an example of the overall configuration of a personal information management system 1 according to the present invention.

As shown in FIG. 1, the personal information management system 1 according to the present invention is constituted by an intermediary system 10, a service providing system 2, a terminal device 3, a network 4, and the like. The intermediary system 10, the service providing system 2 and the terminal device 3 can be interconnected via the network 4. As the network 4, the Internet, a public line, a leased line, or the like is used.

As the terminal device 3, a workstation in which a web browser and an e-mail program are installed, a personal computer, a personal digital assistant (PDA), a cellular phone device, or the like is used.

The service providing system 2 is provided for each service provider (eg, an Internet service provider or a financial institution) that provides services such as online shopping, ticket reservation, auction or online banking to the user of the terminal device 3, The main task is to provide these services.

The service provider may need personal information of the user in order to provide the service to the user. For example, a service provider performing online shopping services may receive personal information about items such as a shipping address of a product, a telephone number or e-mail address for contacting a trouble, etc., or a card number of a credit card used for payment. Need. In the present embodiment, the personal information of the user is managed by the user's own terminal device 3. The service provider can acquire, from the terminal device 3 of the user, personal information about the minimum required item at the time the need arises.

However, at this time, the service provider does not directly request the terminal device 3 of the user for necessary personal information, but requests the mediation system 10. The intermediary system 10 instructs the terminal device 3 to transmit personal information on request to the service providing system 2 of the service provider. In other words, the mediation system 10 performs mediation processing of transmitting the request of the service providing system 2 to the terminal device 3. This mediation system 10 is operated by a trusted organization that does not illegally use personal information, such as a public institution such as a government or a government office, or an institution recognized by a public institution. Hereinafter, the group which operates the mediation system 10 is described as "the middle country."

In addition, the Chinese country examines whether the contents of the user's personal information is correct, and electronically signs the personal information that has passed the examination. The user cannot receive the service from the service provider unless the user passes the examination and relies on the personally signed personal information.

In addition, when a user receives a service provided by a service provider, the user must be authenticated by the terminal apparatus 3 used by the user that he or she is the person (that is, not the other person who has been designed as the user). In addition, it must be authenticated to the intermediary system 10 whether the terminal device 3 is a terminal device which may be used when receiving a service. The user can be provided with the service when both the user's authentication and the terminal device's authentication can be obtained.

As the mediation system 10 and the service providing system 2, for example, a server device having functions such as an electronic mail server, a Common Gateway Interface (CGI), a web server, and the like is used. As shown in FIG. 1, the mediation system 10 may be comprised by one server machine, or may be comprised combining several server machine and several apparatuses.

2 is a diagram showing an example of a hardware configuration of the mediation system 10, FIG. 3 is a diagram showing an example of a functional configuration of the mediation system 10, and FIG. 4 is a diagram showing an example of a functional configuration of the service providing system 2. 5 is a diagram illustrating an example of a functional configuration of the terminal device 3, FIG. 6 is a diagram illustrating an example of the personal information 700, and FIG. 7 is a diagram illustrating an example of the personal information 77.

As shown in FIG. 2, the intermediary system 10 includes an input device such as a CPU 10a, a RAM 10b, a ROM 10c, a magnetic memory device 10d, a display device 10e, a mouse or a keyboard, and the like. 10f), a removable disk drive 10g such as a floppy disk drive or a CD-R drive, and various interfaces. In the magnetic storage device 10d, an operating system OS, a program for realizing each of the above functions, a program for realizing each function shown in FIG. 3, data, and the like are installed. These programs and data are loaded into the RAM 10b as needed, and the program is executed by the CPU 10a.

The hardware configurations of the service providing system 2 and the terminal device 3 are also substantially the same as those of the mediation system 10 shown in FIG. 2. In each of the magnetic storage devices of the service providing system 2 and the terminal device 3, programs, data, and the like for implementing the respective functions shown in Figs. 4 and 5 are installed. A fingerprint input device, a microphone, a digital camera, or the like is connected to the terminal device 3 as necessary.

However, when a PDA or a portable terminal device is used as the terminal device 3, necessary programs and the like are recorded in the ROM 10c. The removable disk drive 10g, such as a floppy disk, is externally attached as needed.

Next, each function shown in FIG. 3, FIG. 4, and FIG. 5 is divided into functions for obtaining reliability of personal information, functions for obtaining security and reliability of transactions, and functions for nostalgia and provision of services. do.

[Function to get reliability of personal information]

As described above, the Chinese country examines whether the contents of the user's personal information are correct. For example, the user submits his / her personal information 700 relating to a predetermined item as shown in FIG. 6 to a Chinese country, and applies for examination. Submission of the personal information 700 is performed by mailing a sheet on which these items are written or a removable disk such as a recorded floppy disk or CD-ROM to a Chinese country. At this time, a copy of the identification card of the user is enclosed. On the other hand, if a Chinese country wants to examine the user's identity more reliably, an application may be required to present a photo identification card such as a receipt, license or passport at a window of the Chinese country. If it is possible to confirm that the user is the user, the application may be accepted by another method.

Examination of the contents of personal information 700 is basically made to the staff working in China. However, about the personal information examination of the item regarding a bank account or a credit card, a Chinese country may ask a bank or a card company. Alternatively, the user may apply for the examination of these items directly to a bank or a card company without going through a Chinese country. In this case, the bank or card company becomes one of the "China". In addition, various organizations may have judging depending on the items.

In the intermediary system 10, the signature personal information output unit 101 shown in FIG. 3 electronically signs personal information 700 that has passed the examination among the personal information 700 submitted by the user, and signs personal information ( 70s). The signature personal information 70s is then output to the terminal device 3 of the user who is the submitter. If the examination fails, the user is notified of the reason and the reason.

The signature personal information 70s can be output by sending an electronic mail to which the signature personal information 70s is attached to the e-mail address of the user who is the submitter. Alternatively, the signature personal information 70s may be recorded on a removable disk. In this case, the removable disk is sent to the user's address by registered mail or the like.

In the terminal device 3, the personal information input unit 301 shown in FIG. 5 inputs the electronically signed personal information, that is, the signature personal information 70s, output from the intermediary system 10 into the terminal device 3. Process to do it. The input signature personal information 70s is stored and managed in the personal information storage unit 302.

As long as all information and programs transmitted from the intermediary system 10 to the terminal device 3 are to be accessed with personal information, it is preferable that signature processing is performed in the sense that there is no forgery.

[Functions for Obtaining Security and Reliability of Transactions]

The feature information storage unit 303 stores the bioinformation 71 for each user who has the authority to use the terminal device 3. The bio information 71 is information representing the physical characteristics of a human. As the bioinformation 71, for example, one having different characteristics for each human being, such as a fingerprint, a gate, a iris of a pupil, or a handwriting, is used.

The personal authentication unit 304 compares the physical characteristics (for example, the fingerprint of the user input by the fingerprint input device) of the input user with the bioinformation 71 stored in the characteristic information storage unit 303, and thereby the user. It is determined whether the user has the authority to use the terminal device 3. That is, the user authentication process is performed by a method of bio authentication (also called biometrics or biometric identification).

A user authenticated as authorized by the personal authentication unit 304 may be provided with a service provided by a service provider. The terminal device 3 also functions as a terminal device of the user. For example, when the user who inputs the fingerprint is authenticated as user A, the terminal device 3 functions as the user A terminal device. On the other hand, user authentication may be performed when starting the terminal device 3, or may be performed immediately before receiving the service.

The individual information storage unit 102 shown in FIG. 3 stores the individual information 72 representing the characteristics of the terminal device 3 in correspondence with the terminal identification code 73 for each terminal device 3. In this embodiment, an "individual" means a terminal device used for receiving a service of a service provider. As the object information 72, for example, information on a hardware configuration of the terminal device 3, an IP address or MAC address given to the terminal device 3, information on a model of the terminal device 3, or the terminal device 3 Is a mobile phone device, a serial number, a serial number, or a mobile phone number given to the mobile phone device is used.

In the service providing system 2, the individual suitability determination requesting unit 201 shown in FIG. 4 is configured to determine whether or not the terminal device 3 currently used by the user is suitable for use when receiving the service of the service provider. , The processing required by the intermediary system 10 is performed. At this time, the individual suitability determination requesting unit 201 transmits the terminal identification code 73 obtained from the terminal apparatus 3 to the intermediary system 10.

The individual suitability discrimination part 103 shown in FIG. 3 determines whether the terminal apparatus 3 shown by the terminal identification code 73 transmitted from the service provision system 2 is suitable for receiving the service provider's service. Determine. This determination is made, for example, by comparing the state of the terminal device 3 currently used by the user with the individual information 72 stored in the individual information storage 102 corresponding to the terminal identification code 73. . If they match, it is determined that the terminal device 3 currently being used by the user is suitable for use for receiving the service. If it does not match, it is determined that it is not suitable because another person may try to receive the service by decorating as if it is the user using another terminal device 3. The result of the determination is transmitted to the requested service providing system 2 as the individual suitability information 74 indicating "suitable" or "not suitable".

Alternatively, when the terminal apparatus 3 conforms to the specification defined by the Trusted Computing Platform Alliance (TCPA), that is, the Trusted Computing Platform Specifications (TCPS), the terminal device 3 may discriminate by the method proposed by the TCPA. For example, when the terminal device 3 has a security circuit (security chip) of the TCPA specification, it may be discriminated using this security circuit.

[Fragrance and Features for Service]

In the terminal device 3, a user accesses a web site of a service provider that provides a desired service, for example, by specifying a URL in a web browser. Hereinafter, a case where user A accesses a web site of service provider X that performs online shopping will be described as an example. The user A selects a product (service to be offered) to be purchased by referring to the description or image, etc., on the web site, and designates the product A by clicking on the product name or image of the product. Accordingly, one service of selling the product is selected.

Then, the service ordering part 307 shown in FIG. 5 executes the order (request of service) of the goods with respect to the service provision system 2 of the service provider X. As shown in FIG. In the service providing system 2, when the order is received by the order receiving unit 207, the service providing availability determining unit 202 determines whether or not the product may be sold to the user A. FIG. For example, if the product is alcohol, it is determined that the user A may be sold if it is 20 years old or older. If the product is a sales area limited product, it is determined that the user A may be sold if the address of the user A is in the area. The discrimination process is performed in the following order.

The service provision determination unit 202 requests the mediation system 10 to transmit the personal information necessary for the determination. However, the service provider X must notify the middle country in advance of the sale of the product (provision of the service) and register it in the intermediary system 10 as to which item personal information is required. For example, if you want to determine whether or not you can sell alcohol, you can register an item indicating whether you are 20 or older, and if you want to determine whether you can sell limited edition items, whether your address is within the area. An item indicating whether or not should be registered. These items are reviewed by a Chinese country and registered when deemed necessary when providing a service. Therefore, registration is rejected when items which are not related to the provision of the service are included. On the other hand, these items are stored (registered) in the item designation information storage unit 104 of the mediation system 10 as the item designation information 75.

The response information transmission command part 105 shown in FIG. 3 transmits the personal information of the item requested from the service provision availability determination part 202 to the service provision system 2 of the service provider X, The terminal apparatus 3 of user A (3). ) Is issued. This instruction is made based on the item designation information 75 registered in advance in the item designation information storage 104. On the other hand, the instruction may be made by transmitting a program for extracting the personal information of the requested item to the terminal device 3. The program in this case is described by a language such as Java applet or JavaScript.

The response information transmitter 305 shown in FIG. 5 responds to the instruction from the response information transmission command unit 105 or by executing the program transmitted, so that the personal information of the user A stored in the personal information storage unit 302. The necessary personal information is extracted from 700, and response information 76 is generated based on this, and transmitted to the service provision system 2 of service provider X. For example, when personal information indicating whether user A is 20 years old or older is requested, age information is extracted from user A's personal information 700. And when it is 20 years old or more, the response information 76 which shows "Yes" is produced and transmitted, and when it is less than 20 years old, the response information 76 which shows "No" is produced and transmitted. However, this reply information 76 is encrypted and transmitted in order to prevent leakage of information.

Then, the service provision availability determining unit 202 of FIG. 4 receives the response information 76 as the requested personal information, and determines whether or not the product may be sold to the user A based on this. If it is determined that the product cannot be sold, the user A's terminal device 3 is notified of the effect.

On the other hand, encryption of the response information 76 is performed under a public key infrastructure (PKI). That is, it is made by public key cryptography. The service provider X discloses the public key Kx to all users, and manages the secret key Fx corresponding to the public key Kx so that no one is known. In Fig. 5, the terminal device 3 encrypts the reply information 76 using this public key Kx. The service providing system 2 of the service company X decrypts the encrypted reply information 76 using the secret key Fx. Hereinafter, transmission of data such as personal information from the terminal device 3 to the service providing system 2 is made by such a public key cryptography method.

The secondary business operator selection unit 203 shown in FIG. 4 performs a process for selecting a secondary business operator who delivers goods or collects goods on behalf of the service provider. This processing is performed in the following order.

For example, suppose that service provider X is a secondary operator and has a business alliance with a carrier U1 delivering to an East Japanese home, a carrier U2 delivering to a Western Japanese home and a credit card company T1 or T2. In this case, the secondary business operator selecting unit 203 selects one of the carriers for the goods delivery and the credit card companies for the collection, respectively, whether the user A's address is in the East or the West, and the user A has the credit. The mediation system 10 asks for the personal information regarding two items, which of the credit card companies, T1 and T2, is subscribed to. On the other hand, as described above, in order to make these requests, the service provider X must register the item designation information 75 representing these items with the intermediary system 10 in advance.

At this time, the reply information transmission command part 105 shown in FIG. 3 and the reply information transmitter 305 shown in FIG. 5 perform the process similar to the process demonstrated previously. That is, the response information transmission command unit 105 transmits the personal information about the item in accordance with the request from the secondary operator selection unit 203 to the service provider system 2 of the service provider X. Give an order to In addition, the reply information transmitter 305 extracts the requested personal information from the personal information 700 of the user A according to the instruction, generates the reply information 76 and transmits it to the service provider system 2 of the service provider X. do. For example, when the personal information 700 of the user A is the content as shown in Fig. 6, the response information 76 indicating the contents of "address = west Japan" and "credit card company = T1" is a service providing system. Send to (2).

Then, the secondary business operator selecting unit 203 shown in FIG. 4 selects, for example, the carrier U2 and the credit card company T1 as the secondary carriers, respectively, based on the answer information 76.

The personal information requesting unit 204 requests the intermediary system 10 to send the user A's personal information regarding the items necessary for finally selling the product to the user A to the service provider X and each secondary business operator. For example, if there is a problem, the service provider X is required to send personal information about an e-mail for contacting user A, and personal information about the name, address and telephone indicating the delivery location of the goods is sent to the carrier U2. Request to send, and to the credit card company T1, personal information about the credit card for collecting money. However, as described above, the item designation information 75 indicating these necessary items must be registered in advance in the mediation system 10. This item designation information 75 includes the first item information and the second item information described in claim 3.

The personal information transmission command unit 106 shown in FIG. 3 transmits the personal information requested from the personal information requesting unit 204 to the service provider X and the location of each secondary operator. Give an order. At this time, as in the case of the response information transmission command unit 105, a program for extracting information about the request may be transmitted to the terminal device 3.

The personal information transmitting unit 306 shown in FIG. 5 extracts the requested personal information from the personal information 700 of the user A based on the command from the personal information transmitting command unit 106, encrypts them, and predetermined service providers. And to the secondary operator. For example, from the personal information 700 shown in FIG. 6, personal information 77 (77a-77c) as shown to (a)-(c) of FIG. 7 is extracted. Then, the personal information 77a is transmitted to the service company X, the personal information 77b is transmitted to the carrier U2, and the personal information 77c is transmitted to the credit card company T1. Since the personal information 77 is extracted and transmitted for each secondary carrier, even if the encryption method described later is weakened, leakage of personal information due to unfair decryption during transmission can be avoided. On the other hand, in order to associate these personal information 77a-77c with each other, the same order identification code is attached | subjected. First, the personal information 77a to 77c may be integrated and transmitted to the service providing system 2 of the service provider X.

On the other hand, encryption of personal information 77a-77c is performed using a different public key, respectively. For example, the personal information 77a is encrypted using the public key Kx of the service provider X which is the sender. Similarly, the personal information 77b and 77c are encrypted using the public key Ku2 of the carrier U2 and the public key Kt1 of the credit card company T1, respectively. Secret keys Fx, Fu2 and Ft1 corresponding to these public keys Kx, Ku2, and Kt1 are owned only by service provider X, carrier U2 and credit card company T1, respectively. Thus, these third parties cannot see the contents of the personal information 77 sent to anyone else except themselves. That is, each service provider cannot read personal information that does not need to know for his service.

The personal information 77 is received by the service providing system 2 by the personal information receiving unit 205 shown in FIG. 4. When personal information 77b, 77c is received, it is transmitted by the personal information distribution part 206 to the carrier U2 and the credit card company T1, respectively. Then, the service provider X and each secondary operator perform processing for the provision of services such as product dispatch or bill collection, based on the personal information 77 of the user A obtained.

8 is a flowchart for explaining an example of a preparation process flow required by a service provider, FIG. 9 is a flowchart for explaining an example of a preparation process flow required for a user, and FIG. 10 is a process for providing a service in the personal information management system 1. Flow chart for explaining an example of the flow, FIG. 11 is a flowchart for explaining the example of the authentication processing flow, FIG. 12 is a flowchart for explaining the example of the availability decision processing flow, and FIG. 13 for explaining an example of the selection processing flow of the secondary operator. 14 is a flowchart for explaining an example of a processing flow for collecting necessary information.

Next, the flow of the process in the personal information management system 1 is demonstrated with reference to a flowchart.

The service provider must prepare as shown in Fig. 8 before providing the service to the user. That is, the service provider asks the middle country to permit the use of the intermediary system 10, and provides information about the service provider (e.g., the name of the service provider, the name of the representative, the address, the contact number, the name of the person in charge and the e-mail address). URL of a web site, etc.) is registered in the mediation system 10 (# 81). On the other hand, the Chinese country examines the service provider, and as a result, refuses registration if it is recognized as an unreliable service provider who does not fulfill the duty of keeping personal information confidential.

Then, item designation information 75 indicating what item of personal information is required at the time of providing the service is registered in the mediation system 10 (# 82). On the other hand, when it is desired to start providing a new service such as starting a new product sale, there is a case where the item designation information 75 is newly registered.

On the other hand, the user must prepare as shown in Fig. 9 before receiving the service from the service provider. That is, information about the terminal device 3 (object) to be used when receiving the service is registered in the intermediary system 10 (# 91). The user's personal information is presented to the Chinese country, where the content is checked for correctness (# 92). When the examination passes, the personal information is stored in the terminal device 3 (# 93). Then, the user's fingerprint or voiceprint is registered in the terminal device 3 as the bioinformation 71 (# 94). In addition, each process of # 91, # 92-# 93, and # 94 may be performed in parallel, or may be reversed.

After these preparations are completed, a service is provided from the service provider to the user, for example, in the order shown in FIG. First, authentication processing is performed on the user who is provided with the service and the terminal device 3 of the user (# 1). Specifically, as shown in Fig. 11, in the terminal apparatus 3, the user's own fingerprint or the like is input and compared with the bioinformation 71 registered in advance, and whether the user is the correct user. Authenticate (# 11). In other words, bio certification.

If the correct user is not authenticated (No in # 11), the user is treated as a person who cannot receive the service (# 15). If the user is authenticated as the correct user (Yes in # 11), the service providing system 2 is made to determine (authentication) as to whether or not the terminal device 3 of the user is suitable for use for receiving the service. Request is made to the intermediary system 10 via (# 12, # 13).

If the terminal device 3 is authenticated as being suitable for use (Yes in # 14), it is determined that the user can receive the service from the service provider by the terminal device 3 currently being used. Then, the process after step # 2 of FIG. 10 is performed. Otherwise, it is determined that the user cannot receive the service by the terminal apparatus 3, and the process for the service is terminated (# 15).

10, in the service providing system 2, it is determined whether or not the service may be provided to the user as needed (# 2). Specifically, first, as shown in FIG. 12, the mediation system 10 is requested to transmit the personal information necessary for this determination to the service providing system 2 (# 21). For example, if the user wants to sell alcoholic beverages, personal information on items indicating whether the user is 20 or older is required.

The intermediary system 10 instructs the terminal device 3 of the user to extract personal information on request and transmit it to the service providing system 2 (# 22). In doing so, the terminal device 3 generates the response information 76 based on the user's personal information 700 and transmits it to the service providing system 2 which has made a request (# 23). For example, when the personal information 700 is the content as shown in FIG. 6, the response information 76 of the content "20 years old or more = Yes" can be obtained based on the birth date and the present date. That is, the user can determine that the user is 20 years old or older. In addition, the instruction | command by the mediation system 10 may be performed by sending the program (discrimination program) for extracting the personal information according to a request.

History information indicating that the response information 76 has been sent may be recorded in a log file (# 24). As a result, it is possible to obtain data for investigating whether or not the service provider illegally attempts to acquire the user's personal information. The storage location of the log file may be the intermediate system 10 or the terminal device 3. On the other hand, in the case of the service which does not ask the partner to provide, the process of steps # 21 to # 24, that is, the process of step # 2 of FIG. 10 is unnecessary.

Returning to FIG. 10, in the service providing system 2, selection of a secondary operator is performed as needed (# 3). The personal information of the user regarding the items necessary for the selection is obtained from the terminal device 3 of the user, and the selection is made based on this. This personal information acquisition process is performed in the procedure shown in FIG. First, necessary personal information is requested to the intermediary system 10 (# 31). For example, if one wants to select a carrier, personal information about the area where the user lives is required.

As in the case of step # 22 of FIG. 12, the mediation system 10 instructs the user's terminal device 3 to extract personal information according to a request and transmit it to the service providing system 2 (# 32). As in the case of step # 23, the terminal device 3 generates the response information 76 based on the extracted personal information, and transmits it to the requested service providing system 2 (# 33). At this time, the history information of the transmission is recorded in a log file (# 34).

Returning to FIG. 10, if the user is able to confirm whether the user is suitable for receiving the service (# 1, # 2), and if the secondary business can be selected (# 3), the individual required to finally provide the service to the user Processing for giving information (for example, the address of the goods transfer destination and the credit card number for the collection of the charges, etc.) from the terminal device 3 to the service providing system 2 (# 4).

That is, as shown in FIG. 14, the service providing system 2 requests the intermediary system 10 to transmit necessary personal information (# 41). The intermediary system 10 instructs the user's terminal device 3 to transmit the requested personal information to the service providing system 2 (# 42). Such instruction may be performed by transmitting a program for extracting information.

The terminal device 3 collects (extracts) the requested personal information from the user's personal information 700 and transmits it to the requested service providing system 2 (# 43). At this time, as in the case of step # 24 of FIG. 12, the history information of the transmission is recorded in the log file (# 44). The service providing system 2 transmits the received personal information to the secondary operator as needed (# 45).

10, the service provider and each secondary operator perform processing for providing the service to the user based on the received personal information, respectively (# 5).

According to the present embodiment, the user can manage the personal information of the user himself, and can provide the service provider with only the personal information that is at least necessary to receive the service. Accordingly, leakage and scattering of personal information can be prevented.

In addition, by performing personal authentication and individual authentication, it is possible to prevent the use of the service by an unauthorized third party. Since personal information and the like are encrypted by using different public keys for different transmission destinations, leakage and scattering of information can be prevented more effectively. By electronically signing personal information, it is possible to prevent unauthorized rewriting of personal information.

Therefore, the user can receive the service of the service provider with confidence. On the other hand, the service provider can trust the contents of the personal information, and can take an order with confidence.

In this embodiment, although encryption of personal information etc. was performed by the public key cryptography system, a common key cryptography system may be sufficient and a combination of both may be sufficient.

The terminal device 3 may check whether the content of the personal information is correct before transmitting the personal information of the user to the service providing system 2. For example, before sending personal information about a credit card, a credit card company may be requested to check whether the credit card has expired, or whether the credit limit has been exceeded. . Similarly, the city hall or the like may be checked whether or not there is no change in the user's address or the like due to the moving. The program for requesting these checks may be distributed from the mediation system 10 to the terminal device 3.

Before transmitting the personal information or the like to the service providing system 2, the terminal device 3 may inform the user of what kind of item to be specifically transmitted to the service providing system 2. The transmission may be performed when there is an operation such as clicking a button displayed on the web browser. Alternatively, the message may be notified after the transmission.

In addition, the configuration of the whole or each part of the personal information management system 1, the mediation system 10, the service providing system 2, the terminal device 3, the contents of the personal information, the processing contents, the processing sequence, etc. It can change suitably according to the intention.

As described above, the personal information management system, the intermediary system, and the terminal apparatus according to the present invention safely provide the service provider with the personal information necessary to receive the service while the user himself manages the personal information of the user, thereby providing a reliable service. This is useful in that it can be done.

Claims (13)

A personal information management system comprising a service provider system of a service provider, a terminal device of a user who wants to receive a service provided by the service provider, and an intermediary system for mediating the user's personal information to the service provider. , In the terminal device of the user, Personal information storage means for storing personal information about one or a plurality of items of the user; Personal authentication means for authenticating whether or not the user has authority to use the terminal apparatus; Personal information transmission means for transmitting the personal information of the user in accordance with the instruction from the intermediary system is provided, In the service provider system of the service provider, Personal information requesting means for requesting, to the intermediary system, the personal information of the user regarding an item necessary for the service provider to provide the service; Personal information receiving means for receiving the requested personal information of the user from the terminal device of the user is provided. In the intermediary system, Terminal suitability determining means for determining whether the terminal apparatus of the user is suitable for use for receiving the service; The personal information of the user relating to the necessary item, which is requested from the personal information requesting means of the service provider system of the service provider, is authenticated by the personal authentication means of the user's terminal device as the user having the authority. And a transmission command means for instructing the terminal apparatus to transmit to the service provider system when the terminal apparatus discriminating means determines that the terminal apparatus is suitable for use for receiving the provision of the service. Personal information management system, characterized in that made. The said mediation system is provided with the item storage means of Claim 1 which stores the item information which shows the item of the personal information which the said service provider needs in order to provide the said service before starting reception of the said service, And said transmission command means instructs to transmit personal information of said user relating to the item indicated in said item information. The said item storage means is said item information, Comprising: 1st item information which shows the item of personal information which is directly needed by the said service provider, and personal information required by the secondary company which acts on behalf of the said service provider. Storing second item information indicating the item, The transmitting command means transmits personal information of the user regarding the item indicated in the first item information to the service provider and transmits personal information of the user regarding the item indicated by the second item information to the secondary operator. Personal information management system characterized in that the instruction to. The personal information management system according to claim 3, wherein the personal information transmitting means encrypts and transmits the personal information of the user by a public key encryption method using a different public key for each destination. The personal information storage means according to any one of claims 1 to 4, wherein the personal information storage means stores personal information of the user, which is recognized as correct by a person other than the user. Personal Information Management System. The terminal device of any one of claims 1 to 5, wherein Characteristic information storage means for storing characteristic information representing the physical characteristics of the user; Characteristic input means for inputting the physical characteristics of the user is provided, And the personal authentication means performs the authentication based on the input physical feature of the user and the feature information stored in the feature information storage means. A mediation system for intermediary to give personal information of a user who wants to receive a service provided by a service provider from the user to the service provider, Terminal suitability determining means for determining whether the terminal apparatus of the user is suitable for use for receiving the service; The personal information of the user regarding the items required by the service provider to provide the service is authenticated as a person having authority to use the terminal device in the terminal device of the user. And if the terminal apparatus judges that the terminal apparatus is suitable for use for receiving the service, the terminal acknowledgment means is provided with transmission command means for instructing the terminal apparatus to transmit to the service provider. An intermediary system characterized by the above. 8. The method according to claim 7, wherein the service provider has item storage means for storing in advance item information indicating an item of personal information necessary for providing the service, before starting the reception of the service, And said transmission command means instructs to transmit the personal information of said user relating to the item indicated in said item information. A terminal device used to receive a service provided by a service provider, Personal information storage means for storing personal information about one or a plurality of items of a user who wants to receive the service; Personal authentication means for authenticating whether or not the user has authority to use the terminal device; Service requesting means for making a request to the service provider to provide the service to the user when the user is authenticated as the authorized person; And a personal information transmitting means for transmitting, to the service provider, the personal information of the user relating to an item necessary for the service provider in order to provide the service according to the request. The personal information transmission means according to claim 9, wherein the personal information necessary for only the secondary company acting on behalf of the service company among the personal information of the user regarding the necessary items is sent to the secondary company instead of the service company. A terminal device, characterized in that for transmitting. The personal information transmitting means encrypts and transmits the personal information sent to the service provider and the personal information sent to the secondary provider using a public key cryptography method using different public keys. Terminal device. 12. The personal information storage means according to any one of claims 9 to 11, wherein the personal information storage means stores, as personal information of the user, personal information that is recognized as correct by a person other than the user. Terminal device. The apparatus according to any one of claims 9 to 12, further comprising: characteristic information storage means for storing characteristic information representing a physical characteristic of the user; Having a feature input means for inputting a physical feature of the user, And the personal authentication means performs the authentication based on the input physical feature of the user and the feature information stored in the feature information storage means.