JP2001265771A - Device and method for managing personal information and recording medium recording program for executing the device or method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To solve the problem that is a hand to protect privacy and there is the danger of leak to a third person in personal information provision on a network through a managing center. SOLUTION: Personal information on personal information provider terminal equipment 101 to provide personal information to the other person is registered in a personal information managing center device 102 after being divided into partial personal information, which can not be related with a specified individual respectively singly and is meaningless, and by holding the relation of such information only on the terminal of a personal information provider, the privacy of the personal information provider can not be grasped in the personal information managing center. Besides, the set of the identifier of the partial personal information registered in the personal information managing center and personal information acquisition agreement conditions is provided to a personal information user and only in the case of matching to the acquisition agreement conditions, personal information is provided.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a personal information management method and a personal information management method for enabling a user to control his / her personal information usage method when collecting personal information such as user preferences through a network. The present invention relates to an information management device.

[0002]

2. Description of the Related Art In recent years, with the development of networks such as the Internet, information providing means using two-way communication has become available, and personal information such as personal preferences provided by users has been collected. Information providing services that provide information and advertisements suitable for individual tastes have been actively used.

[0003] For example, information that is likely to be of interest to a user according to the user's preference is delivered to the user through e-mail, or an advertisement suitable for the user when the user browses WWW (World Wide Web) content. Is displayed. In addition, a trader who sells goods through a network can perform efficient business transactions if personal information such as a delivery destination necessary for providing goods at the time of selling goods can be collected.

[0004]

As described above, there is an increasing number of opportunities for network users to provide personal information. When such personal information is provided, the personal information must be manually input one by one. Because providing is not convenient,
It is conceivable to collect personal information in a personal information management center and use it. However, there is a problem that the privacy of the user is grasped by the personal information management center.

[0005] Further, once a user gives personal information collected for such a purpose to an information provider, the user can no longer control how to use the information. In other words, the personal information collected by the information provider may be used in a manner other than the method agreed by the user,
May be provided to third parties.

As a method for solving such a problem, Japanese Patent Application Laid-Open Nos. 9-91358 and 11-14 are disclosed.
There is a technique disclosed in Japanese Unexamined Patent Publication No. 9504 and Japanese Unexamined Patent Application Publication No. 11-273681.

The technique disclosed in Japanese Patent Application Laid-Open No. 9-91358 communicates transmission / reception requirements between an information provider and a receiver.
Generate a distribution list that satisfies both wishes. However, since this does not limit the disclosure of the transmitted / received information to the third party, personal information may be provided to the third party.

[0008] The technique disclosed in Japanese Patent Application Laid-Open No. H11-149504 allows only a designated referrer to obtain personal information. After confirming the match, pass the personal information to the referrer. However, since this does not make the transmitted / received information unreadable, there is a risk of information leakage.

[0009] The technique disclosed in Japanese Patent Application Laid-Open No. 11-273681 aims to make it impossible for an unauthorized reference person to read personal information even if it is read. For this purpose, personal information is divided into a basic information file and an attribute information file, and are associated with each other by an encryption code. However, there is a possibility that information leaks along the transmission path or storage location of the division information (encryption code).

[0010] An object of the present invention is to provide a personal information management center that mediates the provision of personal information, for example, so that the privacy of the provider of the personal information cannot be grasped by a person other than the person who has permitted the provision of the personal information. An object of the present invention is to provide an information management device and a personal information management method.

Another object of the present invention relates to a method of using personal information when providing personal information to the user, so that the provider of the personal information can flexibly control the personal information. An object of the present invention is to provide a personal information management device and a personal information management method that allow only statistical use of personal information without passing information in a identifiable form.

[0012]

According to the present invention, the personal information relating to a personal information provider who intends to provide personal information to another person is not individually associated with a specific individual, and therefore, does not make sense. By dividing the information into personal information and registering it in the personal information management center, and maintaining the relationship between them only on the terminal of the personal information provider, the personal information management center cannot grasp the privacy of the personal information provider I do.

In addition, a personal information provider who wishes to use the personal information of the personal information provider from the personal information provider receives an identifier of the partial personal information registered in the personal information management center and a personal information acquisition license. Provide a set of conditions,
The personal information management center provides the partial personal information to the personal information user only when the acquisition permission condition is met, so that the user controls the method of using the personal information.

Further, the personal information management center collectively accepts a plurality of acquisition requests from personal information users, and randomly changes the order of partial personal information to be responded to the requests, and transmits the information. To obtain the license.

From the above, the present invention is characterized by the following personal information management method, personal information management device, and recording medium for recording a program for executing the personal information management device or method.

(Personal information provider terminal device) Personal information provided by the personal information provider terminal device is registered in the personal information management center device via communication means, and the personal information user terminal device transmits the personal information to the communication means. Personal information management device that is obtained and used via the personal information provider terminal device, wherein the personal information provider terminal device is not able to associate the input personal information with a specific individual by itself and makes partial personal information meaningless Means for dividing personal information to the personal information management center device, and receiving a partial personal information identifier generated for the partial personal information by the personal information management center device Means, partial personal information related storage means for storing in association with the content of the partial personal information represented by the received partial personal information identifier, and a partial individual to be provided Personal information management apparatus characterized by comprising a means for transmitting to obtain the partial personal information identifier corresponding to the distribution of the partial personal information associated storage means in the personal information user terminal device.

Further, the personal information provider terminal device retrieves the partial personal information identifier from the partial personal information related storage means and transmits the partial personal information identifier to the personal information management center device. A personal information management apparatus comprising: means for receiving partial personal information corresponding to an information identifier; and means for outputting the received partial personal information.

Further, the personal information provider terminal device includes a means for inputting personal information to be changed, and a partial personal information identifier corresponding to the content of the partial personal information divided by the personal information dividing means. A personal information management apparatus comprising: means for retrieving from personal information related storage means; and means for transmitting the partial personal information and its identifier to the personal information management center device in pairs.

The personal information provider terminal device may include means for extracting a partial personal information identifier corresponding to the partial personal information to be provided from the partial personal information related storage means; Means for generating partial personal information use permission information indicating under what conditions partial personal information is provided; and means for transmitting the partial personal information use permission information to the personal information user terminal device. Personal information management device characterized by the above-mentioned.

Further, the personal information provider terminal device generates a cryptographic key for encrypting partial personal information obtained by dividing the personal information to be provided by the personal information dividing means,
Means for encrypting each partial personal information using the encryption key, means for separately transmitting the encrypted partial personal information to the personal information management center device, and means for generating and receiving the personal information management center device. Partial personal information identifier,
A personal information management device comprising: means for storing the partial personal information represented thereby and the encryption key used for encryption in the partial personal information related storage means.

(Personal Information Management Center Device) Personal information provided by the personal information provider terminal device is registered in the personal information management center device via communication means, and the personal information user terminal device transmits the personal information to the communication means. A personal information management device that is obtained and used via the personal information management center device, wherein the personal information management center device is configured to divide personal information into partial personal information that cannot be associated with a specific individual and has no meaning. Means for receiving personal information from the personal information provider terminal device, identifier generating means for generating an identifier for the received partial personal information, and storing the generated partial personal information identifier in correspondence with the partial personal information Means for transmitting the partial personal information identifier to the personal information provider terminal device, and partial personal information received from the personal information user terminal device. Personal information, comprising: means for searching the partial personal information storage means for partial personal information corresponding to an identifier; and means for transmitting the searched partial personal information to the personal information provider terminal device. Management device.

Further, the personal information management center device receives the partial personal information to be changed by the personal information provider terminal device and a partial personal information identifier corresponding to the content of the partial personal information, Means for retrieving the partial personal information using the received partial personal information identifier and changing the value to the value of the received partial personal information.

[0023] The personal information management center device may include means for receiving partial personal information license information corresponding to the partial personal information to be used by the personal information user terminal device; Use condition determining means for verifying whether or not the information permits use of the designated partial personal information to the personal information user terminal device; and, if the verification is successful, the partial personal information use license Means for searching the partial personal information storage means for partial personal information corresponding to the partial personal information identifier specified in the information, and means for transmitting the searched partial personal information to the personal information user terminal device. Personal information management device characterized by the above-mentioned.

Further, the personal information management center apparatus, when confirming that the received partial personal information use permission information satisfies the condition, sets the partial personal information identifier specified in the partial personal information use permission information. Means for retrieving the corresponding partial personal information from the partial personal information storage device, partial personal information order changing means for randomly changing the order of the searched partial personal information column, and partial personal information with the changed order A means for transmitting the column of (1) to the personal information user terminal device.

The personal information management center device may further comprise: means for receiving the partial personal information obtained by encrypting the partial personal information by the personal information provider terminal device using an encryption key; A partial personal information identifier generating means for generating a partial personal information identifier corresponding to, and a means for associating the generated partial personal information identifier with the provider-encrypted partial personal information in the partial personal information storage means, Means for transmitting the partial personal information identifier to the personal information provider terminal device.

Further, the personal information management center device includes: means for receiving partial personal information use permission information corresponding to partial personal information to be used by the personal information user terminal device; Use condition determining means for verifying whether or not the license information permits use of the designated partial personal information to the personal information user terminal device; and, if the verification is successful, the use of the partial personal information Means for searching the partial personal information storage means for partial personal information corresponding to the partial personal information identifier specified in the license information; and means for transmitting the searched partial personal information to the personal information user terminal device. Personal information management device characterized by the above-mentioned.

The personal information management center device includes means for searching the partial personal information storage device for partial personal information corresponding to the partial personal information identifier designated in the partial personal information use permission information, Means for encrypting the encrypted partial personal information using a key known only to the personal information management center device to obtain a center encryption provider encrypted partial personal information column and transmitting the column to the personal information user terminal device; Means for decrypting, using a key, each of the user encryption center encrypted partial personal information included in the user encrypted center encrypted partial personal information column received from the personal information user terminal device, and the decrypted use Means for randomly changing the order of a sequence of user-encrypted partial personal information, and a means for changing the sequence of the exchanged user-encrypted partial personal information to the personal information user. Personal information management apparatus characterized by comprising a means for transmitting to the end device.

(Personal information user terminal device) Personal information provided by the personal information provider terminal device is registered in the personal information management center device via the communication means, and the personal information user terminal device transmits the personal information to the communication means. A personal information management device obtained and used via the personal information user terminal device, wherein the personal information user terminal device receives a partial personal information identifier corresponding to the partial personal information to be provided from the personal information provider terminal device; Means for storing the received personal information identifier in the partial personal information identifier storage device; means for transmitting the stored partial personal information identifier to the personal information management center device; Means for receiving partial personal information corresponding to the partial personal information identifier from the device, and means for outputting the received partial personal information. Person information management apparatus.

In addition, the personal information user terminal device may provide a partial personal information license indicating what kind of partial personal information is provided from the personal information provider terminal device and under what conditions. A personal information management apparatus, comprising: means for receiving information; and storing the received partial personal information license information in a partial personal information license information storage means.

The personal information user terminal device may include means for extracting partial personal information license information corresponding to the partial personal information desired to be used from the partial personal information license information storage means, Means for transmitting the license information to the personal information management center device, and verifying that the partial personal information use license information is permitted to use the partial personal information designated by the personal information management center device report, A personal information management device comprising: means for receiving partial personal information corresponding to a partial personal information identifier specified in partial personal information use permission information; and means for outputting the received partial personal information.

Further, the personal information user terminal device receives, from the personal information management center device, one obtained by randomly changing the order of the partial personal information column searched for the partial personal information use permission information. And a means for outputting a column of the received partial personal information.

[0032] The personal information user terminal device may include means for acquiring partial personal information use permission information corresponding to the partial personal information to be used, and a means for managing the acquired partial personal information use permission information to the personal information management. Means for transmitting to the center device, means for the personal information management center device to verify the partial personal information use permission information and to receive personal information specified in the partial personal information use permission information, A personal information management device comprising: means for decoding information; and means for outputting the decrypted partial personal information.

In the personal information user terminal device, the personal information management center device verifies the partial personal information use permission information and converts the personal information designated in the partial personal information use permission information into the personal information use permission information. Means for receiving a sequence of provider-encrypted partial personal information encrypted using a key known only to the management center device; means for decrypting the received provider-encrypted partial personal information; Means for encrypting using a key known only to the information user terminal device;
Means for transmitting the sequence of the encrypted partial personal information to the personal information management center device; and a user encryption center wherein the personal information management center device is included in the user encryption center encrypted partial personal information sequence. Means for decrypting the encrypted partial personal information using a key and receiving a sequence of user-encrypted partial personal information in which the sequence of the partial personal information is replaced, and decrypting the received user-encrypted partial personal information And a means for outputting the decrypted partial personal information.

(Personal Information Management Method) The personal information provided by the personal information provider terminal device is registered in the personal information management center device via communication means, and the personal information user terminal device stores the personal information via communication means. Personal information management method, wherein the personal information provider terminal device divides the input personal information into partial personal information that cannot be associated with a specific individual by itself and does not make sense. And transmitting the partial personal information to the personal information management center device, receiving the partial personal information identifier generated for the partial personal information by the personal information management center device, and expressing the partial personal information identifier by the received partial personal information identifier. A partial personal information identifier corresponding to the partial personal information to be provided is stored in association with the contents of the partial personal information, Personal information management method and transmits the information the user terminal device.

The personal information provided by the personal information provider terminal device is registered in the personal information management center device via the communication means, and the personal information user terminal device acquires and uses the personal information via the communication means. Personal information management method,
The personal information management center device receives, from the personal information provider terminal device, partial personal information obtained by dividing personal information into partial personal information that cannot be associated with a specific individual and makes no sense. Generating an identifier for the received partial personal information, storing the generated partial personal information identifier in correspondence with the partial personal information, transmitting the partial personal information identifier to a personal information provider terminal device, Searching for partial personal information corresponding to the partial personal information identifier received from the user terminal device from the partial personal information storage means, and transmitting the searched partial personal information to the personal information provider terminal device. Personal information management method.

The personal information provided by the personal information provider terminal device is registered in the personal information management center device via the communication means, and the personal information user terminal device obtains and uses the personal information via the communication means. Personal information management method,
The personal information user terminal device receives a partial personal information identifier corresponding to the partial personal information to be provided from the personal information provider terminal device, and stores the received personal information identifier in the partial personal information identifier storage device, Transmitting the stored partial personal information identifier to the personal information management center device, receiving partial personal information corresponding to the partial personal information identifier from the personal information management center device for the transmission,
Outputting the received partial personal information.

(Recording Medium) A program for executing a personal information management apparatus or method, wherein a program for causing a computer to execute the processing in the above apparatus or method is recorded on a recording medium readable by the computer. Recording medium on which is recorded.

[0038]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS (Embodiment 1) Management commission of personal information This embodiment is carried out as follows, so that the privacy of a personal information provider can be obtained without knowing the privacy of the personal information provider. By leaving the management of information to the personal information management center, it is possible to refer to the personal information of the personal information provider using a personal information provider terminal device that does not have sufficient capacity to store personal information. This will be described in detail below.

(System Configuration) FIG. 1 is a system configuration diagram showing the present embodiment. The system includes a personal information provider terminal device 10 used by a user who provides personal information.
1 and a personal information management center device 1 for managing personal information received from the personal information provider terminal device 101 and transmitting personal information as needed by the personal information provider terminal device 101
02. Each device communicates with each other through a network.

The communication between the personal information provider terminal device 101 and the personal information management center device 102 cannot identify the personal information provider terminal device 101 that is communicating with the personal information management center device 102 when viewed from the personal information management center device 102. Such an anonymous communication path may be used.

(Configuration of Each Device) FIG. 2 shows the configuration of the personal information provider terminal device 101. Personal information provider terminal device 1
01 is a communication function 201 for communicating with the personal information management center device 102, a personal information input function 202 for inputting personal information, and a personal information dividing function 203 for dividing personal information into individual parts. A partial personal information association DB (database) 204 for storing the relation and meaning of the personal information transmitted to the personal information management center device 102 divided into parts, and outputting the personal information sent from the personal information management center device 102 And a personal information output function 205.

FIG. 3 shows the configuration of the personal information management center device 102. The personal information management center device 102 has a communication function 301 for communicating with the personal information provider terminal device 101.
And a partial personal information identifier generating function 302 for generating a partial personal information identifier, and a partial personal information DB 303 for storing the divided individual personal information.

(Outline of Processing) In the processing of this embodiment, the personal information provider terminal device 101
02, personal information registration processing for registering personal information,
The personal information provider terminal device 101 comprises a personal information acquisition process for acquiring registered personal information from the personal information management center device 102.

(Personal Information Registration) FIG. 4 shows a flow of a personal information registration process. First, in step 401, the personal information provider terminal device 101 inputs personal information of a person who provides personal information. Here, the personal information is, for example, the name, zip code, address, age, gender, etc. of the provider, hobbies, favorite music genre, hair color, height, weight, etc.
Any information representing the characteristics of the provider may be used. Here, it is assumed that information as shown in FIG. 17 is input as one example.

In step 402, the personal information division function 703 divides the inputted personal information into partial personal information which cannot be associated with a specific individual and has no meaning. As such a dividing method, for example, as shown in FIG. 18, the information from the name to the hobby may be divided so as to be individual partial personal information. In this case, "Alice", "111"
Even if partial personal information such as is given alone, it is not possible to know what kind of person Alice is. The partial personal information includes the fact that “Alice” is the name of the person, “111” is the postal code of the person's address, “1-1 Southern Ave” is the person's address, and so on. That is, it does not make sense to know the relationship between the partial personal information that these partial personal information are linked by the specific person.

Alternatively, as shown in FIG. 19, a character may be finely divided into units. In this case, "A" is the first letter of the person's name, "l" is the second letter of the person's name, and "Alice" The word is not even known.

Further, the personal information may be represented by a bit string, and the personal information may be cut out from the front by an appropriate number of bits and used as partial personal information. For example, "Alice ..."
000,00101,10100,10110,00110,11001,01 ...

However, these division methods do not limit the scope of the present invention, and each of the input personal information cannot be individually associated with a specific individual.
If it ’s a way to split it into pieces that do n’t make sense,
Any method may be used.

In step 403, personal information provider terminal apparatus 101 transmits the partial personal information to personal information management center apparatus 102 separately. For example, "A
license "has been transmitted.

In step 404, personal information management center apparatus 102 generates partial personal information identifier generation function 802.
Generates an identifier (partial personal information identifier) corresponding to the received partial personal information. Here, when a plurality of personal information management center devices 102 exist in the system,
The personal information management center identifier that specifies the personal information management center device 102 may be included in the partial personal information identifier.

In step 405, the generated partial personal information identifier and the partial personal information are stored in the partial personal information DB 303 in association with each other. FIG. 10 shows a configuration example of the partial personal information DB. However, FIG. 10 does not limit the configuration of the partial personal information DB, and may have any configuration as long as the correspondence between the partial personal information identifier and the partial personal information can be held.

In step 406, the personal information management center device 102 transmits the partial personal information identifier to the personal information provider.

In step 407, the personal information provider terminal stores the partial personal information identifier in the partial personal information related DB 204 in association with the content of the partial personal information represented thereby. At this time, the information may be stored in association with the value of the partial personal information transmitted to the personal information management center apparatus 102. FIG. 11 shows the partial personal information related DB 20.
4 shows a configuration example. However, FIG. 11 does not limit the configuration of the partial personal information related DB 204, and may have any configuration as long as the correspondence between the partial personal information identifier and the content of the partial personal information can be held.

The processing from step 403 to step 406 is repeated for all the partial personal information divided in step 402. When there are a plurality of personal information management center devices, each partial personal information may be transmitted to a different personal information management center device.

When communication between the personal information provider terminal device 101 and the personal information management center device 102 is performed via an anonymous communication channel, the personal information management center device 102 Since it is not known that the information is provided by the information provider, the personal information management center device 102 does not know the privacy of the personal information provider. In order to prevent the personal information management center apparatus 102 from inferring that the individual partial personal information is related, the personal information management center apparatus 102 does not continuously perform the processing from step 403 to step 406 for each partial personal information. Processing may be performed at appropriate time intervals.

As described above, for example, information as shown in FIG. 20 is stored in the partial personal information related DB 303. Here, id ₁ ~id ₆ is a partial personal information identifier. In addition, for example, FIG.
1 is stored.

(Acquisition of Personal Information) FIG. 5 shows a flow of a personal information acquisition process. First, in step 501, the personal information provider terminal device 101 extracts a partial personal information identifier corresponding to the content of the partial personal information to be used from the partial personal information related DB 204.

In step 502, the personal information user terminal device 101 transmits the partial personal information identifier to the personal information management center device 102. When there are a plurality of personal information management center devices, the personal information management center device is specified using the personal information management center identifier included in the partial personal information identifier.

At step 503, personal information management center apparatus 102 searches partial personal information DB 303 for partial personal information corresponding to the received partial personal information identifier.

In step 504, the retrieved partial personal information is transmitted from the personal information management center device 102 to the personal information provider terminal device 101.

In step 505, the personal information provider terminal device 101 outputs the received partial personal information.

(Summary of Embodiment 1) The personal information of the personal information provider is managed in the personal information management center device by using the above procedure, so that the information stored in the personal information management center device can be managed. Since the relationship between the respective pieces of partial personal information cannot be known even when viewed, even if the data of the DB leaks from the personal information management center device, the privacy of the personal information provider is protected.

Further, if the communication between the personal information provider terminal device and the personal information management center device is performed through an anonymous communication path, the personal information management center device can also know the relationship between the partial personal information. It becomes impossible and is suitable for protecting the privacy of the personal information provider.

(Embodiment 2) Basic Form of Providing Personal Information In this embodiment, partial personal information obtained by dividing personal information of a personal information provider is individually stored in personal information management center device 102, and the personal information is stored in user terminal device. This is for storing association between personal information, and will be described in detail below.

(System Configuration) FIG. 6 is a system configuration diagram showing an embodiment of the present invention. The system receives personal information provider terminal device 601 used by a user who provides personal information, personal information user terminal device 602 that uses personal information, and personal information provider terminal device 601. A personal information management center device 603 for managing personal information and providing the personal information to the personal information user terminal device 602 as needed.

Each device communicates with each other through a network. In the system, there may be a plurality of personal information provider terminal devices and a plurality of personal information user terminal devices corresponding to individual personal information providers and personal information users, respectively. Alternatively, there may be a plurality of personal information management center devices.

Specifically, for example, the personal information user terminal device 602 sells contents on a network,
It is used by content sellers who want to aggregate preference information of content purchasers and use it for product marketing. On the other hand, personal information provider terminal device 601
May be used by a user who purchases content from the content seller. However, this specific example does not limit the claims of the present invention.

The communication between the personal information provider terminal device 601 and the personal information management center device 603 cannot identify the personal information provider terminal device 601 communicating with the personal information management center device 603. Such an anonymous communication path may be used.

(Structure of Each Device) FIG. 7 shows the structure of the personal information provider terminal device 601. Personal information provider terminal device 6
01 is a communication function 701 for communicating with the personal information management center device 603 and the personal information user terminal device 602.
And personal information input function 702 for inputting personal information
A personal information division function 703 for dividing personal information into individual parts, and a partial personal information relation DB 704 for storing the relation and meaning of personal information divided into parts and transmitted to the personal information management center device 603. Be composed.

FIG. 8 shows the configuration of the personal information management center device 603. The personal information management center device 603 includes a personal information provider terminal device 601 and a personal information user terminal device 6.
02 and a partial personal information identifier generating function 802 for generating a partial personal information identifier.
And a partial personal information DB 803 that stores the divided individual personal information.

FIG. 9 shows the configuration of the personal information user terminal device 602. The personal information user terminal device 602 includes a personal information provider terminal device 601 and a personal information management center device 6.
03, a personal information output function 902 for outputting personal information sent from the personal information management center device, and a personal information management center device 603 sent from the personal information provider terminal device 601. And a partial personal information identifier DB 903 that stores a partial personal information identifier used when inquiring personal information about the personal information.

(Overview of Processing) FIG. 13 shows an overall overview of processing performed in the system. First, step 13
In step 01, the personal information provider terminal device 601 transmits the personal information of the personal information provider to the personal information management center device 603, and registers the personal information in the personal information management center device 603.

Next, in step 1302, the personal information provider terminal device 601 provides the personal information user terminal device 602 with information for identifying personal information registered in the personal information management center device 603.

Finally, in step 1303, the personal information user terminal device 602 acquires the registered personal information from the personal information management center device 603.

(Personal Information Registration) FIG. 14 shows the flow of the personal information registration process. First, in step 1401,
The personal information provider terminal device 601 inputs personal information of a person who provides personal information. Here, the personal information means, for example, the provider's characteristics such as the name, zip code, address, age, and sex of the provider, hobbies, favorite music genre, hair color, height, and weight. Whatever information is represented. Here, it is assumed that information as shown in FIG. 17 is input as one example.

At step 1402, the personal information division function 703 divides the inputted personal information into partial personal information that cannot be associated with a specific individual and has no meaning. As such a dividing method, for example, as shown in FIG. 18, the information from the name to the hobby is divided into individual partial personal information, or as shown in FIG. For example, the division may be the same as the division in step 402 described above.

In step 1403, personal information provider terminal device 601 transmits the partial personal information to personal information management center device 603 separately. For example, assume that “AIice” is transmitted.

In step 1404, personal information management center apparatus 603 sets partial personal information identifier generation function 80
2 generates an identifier (partial personal information identifier) corresponding to the received partial personal information. Here, when a plurality of personal information management center devices exist in the system, a personal information management center identifier for specifying the personal information management center device may be included in the partial personal information identifier.

In step 1405, the generated partial personal information identifier and the partial personal information are stored in the partial personal information DB 803 in association with each other. FIG. 10 shows a configuration example of the partial personal information DB. However, FIG. 10 does not limit the configuration of the partial personal information DB, and may have any configuration as long as the correspondence between the partial personal information identifier and the partial personal information can be held.

In step 1406, personal information management center apparatus 603 transmits the partial personal information identifier to the personal information provider.

In step 1407, the personal information provider associates the partial personal information identifier with the contents of the partial personal information represented by the partial personal information
To save. At this time, the personal information management center device 603
May be stored in association with the value of the partial personal information transmitted to the user. FIG. 11 shows a configuration example of the partial personal information related DB.
However, FIG. 11 does not limit the configuration of the partial personal information DB, and may have any configuration as long as the correspondence between the partial personal information identifier and the content of the partial personal information can be held.

Step 1403 to step 140 are applied to all the partial personal information divided in step 1402.
The processing up to 6 is repeated.

When there are a plurality of personal information management center devices, the respective partial personal information may be transmitted to different personal information management center devices. When the communication between the personal information provider terminal device and the personal information management center device is performed via an anonymous communication channel, the personal information management center device sets the individual partial personal information. Is not known to be provided by the same personal information provider, the personal information management center apparatus does not know the privacy of the personal information provider. Further, in order to prevent the personal information management center apparatus from inferring that the individual partial personal information is related, the personal information management center apparatus does not continuously perform the processing from step 1403 to step 1406 for each partial personal information. The processing may be performed at appropriate time intervals.

Thus, for example, the partial personal information D
Information such as shown in FIG. 20 is stored in B803. Here, id ₁ ~id ₆ is a partial personal information identifier.

Also, for example, a partial personal information related DB 704
Stores information as shown in FIG.

(Provision of Personal Information) FIG. 15 shows the flow of a process of providing personal information. Such processing of providing personal information
More specifically, for example, when a content distributor wants to acquire a purchaser's preference from a content purchaser when selling the content, the personal information user terminal used by the content distributor uses the purchaser This is performed, for example, when a request for personal information is requested from the personal information provider terminal used by the user. However, this specific example does not limit the claims of the present invention.

First, in step 1501, the personal information provider terminal device 601 sets the partial personal information related DB 70
4 to extract a partial personal information identifier corresponding to the partial personal information to be provided.

In step 1502, the personal information provider terminal 601 transmits the personal information identifier to the personal information user terminal 602.

In step 1503, personal information user terminal device 602 stores the received personal information identifier in partial personal information identifier DB 903. At this time, the personal information identifier is replaced with the personal information provider terminal device 601.
May be stored in association with the personal information provider that uses.

In step 1502, partial personal information identifiers corresponding to a plurality of partial personal information to be provided by the personal information provider are simultaneously transmitted, and in step 1503, the partial personal information identifiers may be stored in association with each other. . Alternatively, steps 1502 to 1503 may be repeated for each of a plurality of partial personal information to be provided by the personal information provider.

FIG. 12 shows a configuration example of the partial personal information identifier DB. However, FIG. 12 is not intended to limit the configuration of the partial personal information identifier DB, as long as the relationship between the partial personal information identifier and the personal information provider is appropriately maintained as needed by the user of the personal information. Any configuration may be used.

(Acquisition of Personal Information) FIG. 16 shows a flow of a process of acquiring personal information. First, in step 1601,
The personal information user terminal device 602 extracts a partial personal information identifier corresponding to the partial personal information to be used from the partial personal information identifier DB 903.

In step 1602, the personal information user terminal device 602 transmits the partial personal information identifier to the personal information management center device. When there are a plurality of personal information management center devices, the personal information management center device is specified using the personal information management center identifier included in the partial personal information identifier.

In step 1603, personal information management center apparatus 603 searches partial personal information DB 803 for partial personal information corresponding to the received partial personal information identifier.

In step 1604, the personal information management center apparatus 603 transmits the retrieved partial personal information to the personal information user terminal apparatus 602.

In step 1605, personal information user terminal device 602 outputs the received partial personal information.

(Summary of Embodiment 2) By providing personal information from a personal information provider to a personal information user using the procedure described above, the information stored in the personal information management center device Therefore, the privacy of the personal information provider can be maintained even if the data of the DB is leaked from the personal information management center device because the relation between the respective pieces of partial personal information cannot be understood even by looking at the information.

Further, if the communication between the personal information provider terminal device and the personal information management center device is performed through an anonymous communication path, the personal information management center device can also know the relationship between the partial personal information. It becomes impossible and privacy of the personal information provider is protected.

(Embodiment 3) Change of personal information This embodiment is different from the system shown in Embodiment 2 in that
This is for changing the personal information once registered in the personal information management center device by the personal information provider, and will be described in detail below.

(Change of Personal Information) FIG. 22 shows a flow of a process of changing personal information. First, in step 2201, the personal information provider terminal device inputs personal information to be changed.

At step 2202, the personal information division function divides the inputted personal information into partial personal information which cannot be associated with a specific individual and has no meaning. This division is the same as step 1402 in the second embodiment.

In step 2203, a partial personal information identifier corresponding to the content of each of the divided partial personal information is retrieved from the partial personal information related DB 704.

At step 2204, the personal information provider terminal device 601 transmits the input and divided partial individual and the retrieved partial personal information identifier to the personal information management center device 603 as a pair. .

In step 2205, personal information management center apparatus 603 searches using the partial personal information identifier received from partial personal information DB 803, and replaces the value of the corresponding partial personal information with the value of the received partial personal information.

Here, from step 2201 to step 2
By transmitting the partial personal information identifier to the personal information management center device 603 together with an instruction to delete the partial personal information instead of newly inputting and transmitting the personal information in 204, the personal information management center device 603 is transmitted to the personal information management center device 603. It is also possible to delete the registered partial personal information so as not to respond to a personal information acquisition request from the personal information user terminal device 602 thereafter.

Further, it is determined whether the personal information provider terminal device for changing the partial personal information is a personal information provider terminal device in which the partial personal information corresponding to the specified partial personal information identifier is registered. You may do it. For example,
In the process of registering personal information, an anonymous public key may be generated for each individual piece of personal information, and authentication may be performed by using the corresponding private key at the time of changing personal information. In this case, for example, an anonymous public key term is added for each entry of the partial personal information DB 803, and the partial personal information related DB 7 is added.
04, an anonymous public key and private key pair term is added for each entry.

FIGS. 23 and 24 show the partial personal information DB 803 and the partial personal information related DB 7 in this case, respectively.
04 shows a configuration example. However, FIGS. 23 and 24 do not limit the configurations of the partial personal information DB and the partial personal information related DB.

This authentication confirms that the personal information provider terminal device that changes the partial personal information is a personal information provider terminal device that has registered the partial personal information corresponding to the specified partial personal information identifier. Any method may be used as long as the authentication method can be used. In addition, the personal information management center device individually authenticates individual partial personal information so that it cannot know that a plurality of partial personal information is registered from the same personal information provider terminal device. May be performed. For example, a password may be set every time a partial personal information identifier is issued, and authentication may be performed using the password.

(Summary of Third Embodiment) By changing or deleting the personal information registered in the personal information management center device by using the procedure described above, the personal information user terminal device obtains the personal information acquisition request. Thus, the personal information provider can control the personal information to be obtained as needed.

Specifically, for example, in the specific example shown in the second embodiment, when Alice moves and the address is changed, in step 2204 (c, “2-2
NorthernAve. "), The address information of the personal information acquired by the personal information user terminal device thereafter can be changed.

(Embodiment 4) Partial personal information use permission information In this embodiment, when a personal information provider provides a partial personal information identifier to a personal information user, restrictions on the use of the partial personal information Is imposed.

In the present embodiment, the personal information management center device 603 according to the second embodiment is configured as shown in FIG. Here, the personal information management center device 603 includes a communication function 2501 for communicating with the personal information provider terminal device 601 and the personal information user terminal device 602, and a partial personal information identifier generation function 2502 for generating a partial personal information identifier. And a partial personal information DB 2504 for storing the divided individual personal information, and a use condition determining function 2503 for determining a use condition for the partial personal information.

On the other hand, the personal information user terminal device 602
It has a partial personal information use permission information DB instead of the partial personal information identifier DB 903 in FIG.

(Provision of Personal Information) FIG.
Instead of the personal information providing process shown in FIG. 5, the process shown in FIG. 26 is performed.

In step 2601 of FIG. 26, personal information provider terminal device 601 stores a partial personal information related DB.
From 704, a partial personal information identifier corresponding to the partial personal information to be provided is extracted.

At step 2602, partial personal information use permission information indicating what kind of partial personal information is provided to personal information user terminal device 602 and under what conditions is generated. As such partial personal information use permission information, for example, information having a configuration as shown in FIG. 28 may be used.

This partial personal information license information is shown in FIG.
The personal information user indicated by the personal information user identifier 2801 can transfer the partial personal information indicated by the partial personal information identifier 2803 from the partial personal information management center under the use condition indicated by the personal information use condition 2802. Indicates that it can be acquired and used.

Here, the partial personal information identifier 2803 is
It may be a single partial personal information identifier or a sequence of a plurality of partial personal information identifiers. The latter case indicates that the personal information use condition is applied to the entire partial personal information corresponding to each partial personal information identifier included in the partial personal information identifier column.

In step 2603, the personal information provider terminal device 601 transmits the partial personal information use permission information to the personal information user terminal device 602.

In step 2604, personal information user terminal device 602 stores the received partial personal information license information in the partial personal information license information DB.

(Acquisition of Personal Information) FIG.
The processing shown in FIG. 27 is performed instead of the personal information acquisition processing shown in FIG.

First, in step 2701, personal information user terminal device 602 extracts partial personal information use permission information corresponding to the desired partial personal information from partial personal information use permission information DB.

In step 2702, the personal information user license information is transmitted from the personal information user terminal device 602 to the personal information management center device 603.

In step 2703, the personal information management center device 603 uses the use condition judging function to designate the received partial personal information use permission information to the personal information user terminal device 602 with which communication is indeed in communication. It verifies whether the use of the partial personal information has been permitted.

If the verification is successful, step 270
4, the personal information management center apparatus 603 stores the partial personal information corresponding to the partial personal information identifier designated in the partial personal information use permission information in the partial personal information DB 803.
Search from.

In step 2705, the retrieved partial personal information is transmitted from the personal information management center device 603 to the personal information user terminal device 601.

At step 2706, personal information user terminal device 602 outputs the received partial personal information.

The verification in the above step 2703 may be any method that can surely verify the license according to the structure of the partial personal information license information. For example, when the partial personal information use permission information is configured as shown in FIG. 28, first, is the personal information user terminal device communicating with the personal information user terminal device indicated by the personal information user identifier 2801? Verify whether. Further, it verifies whether the personal information use condition 2802 is satisfied.

(Definition of Personal Information Use Condition) As the personal information use condition 2802 in FIG. 28, for example, a time limit for obtaining partial personal information may be set. Further, the purpose of using the partial personal information may be limited. Furthermore, it may be necessary to simultaneously acquire a certain number or more of partial personal information. Further, a form of provision of the partial personal information, such as a condition that the partial personal information is transmitted to the personal information user terminal device from the personal information management center device after some operation is added to the partial personal information May be set. Alternatively, when transmitting the partial personal information from the personal information management center device to the personal information user terminal device, conditions for the method of providing the partial personal information, such as transmitting once through some other device, are defined. Is also good.

However, these examples do not limit the contents of the personal information use conditions, but are conditions relating to provision and use of personal information, and any conditions that can be verified by the personal information management center. It may be.

(Indirect Provision of Partial Personal Information Use License Information) The personal information provider terminal device 601
In 3, it is not necessary to directly transmit the partial personal information use permission information to the personal information user terminal indicated by the personal information user identifier 2801.

More specifically, for example, partial personal information use permission information designating a personal information user identifier of a distributor that delivers contents and a partial personal information identifier corresponding to partial personal information indicating a delivery destination of contents is The content purchase request is sent to the seller who sells the content, and the seller sends the partial personal information license information together with the requested content to the delivery company, so that only the delivery company can send the content. It may be possible to obtain personal information necessary for delivery of the information. However, this specific example does not limit the embodiment of the indirect provision of the partial personal information use permission information as described above.

(Signature on Partial Personal Information Use Permission Information) Partial information use permission information is certainly generated by the personal information provider terminal device in step 2602,
The personal information management center confirms that the personal information user terminal device or the other person has not forged it.
The verification may be performed at 703.

For example, in the registration process of personal information, an anonymous public key is generated for each individual personal information, and the corresponding private key is used to add the electronic signature of the partial personal information provider terminal device to the partial personal information use permission information. May be added. In this case, an anonymous public key term is added for each entry of the partial personal information DB 2504, and an anonymous public key / private key pair term is added for each entry of the partial personal information related DB 704. When determining the personal information use conditions in step 2703,
By examining the corresponding anonymous public key from the partial personal information identifier and using this to verify the signature, it may be verified that it is correctly generated by the personal information provider terminal device. Alternatively, the above verification may be performed using other methods.

(Embodiment 5) Statistical Use This embodiment is a case where a condition of "statistical use as a whole of n or more partial personal information" is used as a personal information use condition.

In this embodiment, the personal information management center device 603 in Embodiment 4 is configured as shown in FIG. Here, the personal information management center device 603 includes a communication function 2901 for communicating with the personal information provider terminal device 601 and the personal information user terminal device 602, and a partial personal information identifier generating function 2902 for generating a partial personal information identifier. In addition to the partial personal information DB 2905 for storing the divided individual personal information and the use condition determining function 2503 for determining the use condition regarding the partial personal information, a column of the partial personal information is transmitted to the personal information user terminal device. And a partial personal information order change function 2904 for changing the order before performing.

(Personal Information Acquisition) FIG. 30 shows the flow of personal information acquisition processing. First, in step 3001,
The personal information user terminal device 602 extracts the partial personal information use permission information corresponding to the partial personal information to be used from the partial personal information identifier DB 903. At this time, in order to satisfy the personal information use condition, a necessary number n or more of the partial personal information use permission information is taken out, and is used as a column of the partial personal information use permission information.

In step 3002, the personal information user terminal device 602 transmits the partial personal information use permission information column to the personal information management center device 603.

In step 3003, the personal information management center device 603 uses the use condition judging function to specify the received partial personal information use permission information to the personal information user terminal device with which communication is indeed being performed. Verify whether the use of the partial personal information is permitted. In this process, the number n of partial personal information to be acquired at the same time is also verified. At this time, it is confirmed that all the partial personal information license information included in the partial personal information license information column satisfies the condition.

If the above verification is successful, step 300
4, the personal information management center apparatus 603 stores the partial personal information corresponding to the partial personal information identifier designated in the partial personal information use permission information in the partial personal information DB 803.
, And a column of partial personal information.

In step 3005, the order of the partial personal information column is randomly changed by using the partial personal information order changing function 2904.

In step 3006, the personal information management center apparatus 603 transmits the sequence of the partial personal information rearranged to the personal information user terminal apparatus 602.

At step 3007, personal information user terminal device 602 outputs the received sequence of the partial personal information.

Since the personal information user terminal device 602 obtains the partial personal information whose order has been changed, the personal information user terminal device 602 does not know which partial personal information corresponds to each partial personal information use permission information. , No information about a particular individual is available. On the other hand, the whole of the plurality of pieces of partial personal information can be used for statistical processing such as calculating an average value or a distribution of the values of the partial personal information.

More specifically, the content distributor uses the personal information user terminal device according to the present embodiment to obtain the content purchaser's individual preference information without obtaining the individual preference information of the content purchaser. Preference trends can be obtained statistically. However, this specific example does not limit the applicable range of the present invention.

(Embodiment 6) Encryption of partial personal information In this embodiment, the personal information management center apparatus 603 encrypts the partial personal information to be registered in the personal information management center apparatus 603 with the personal information provider terminal apparatus 601. To send to.

In this embodiment, the personal information provider terminal device 601 has an encryption function for encrypting partial personal information in addition to the configuration shown in FIG. 7 in the second embodiment.

The personal information user terminal 602 is
It has a decryption function for decrypting the encrypted partial personal information in addition to the configuration of the personal information user terminal in the second embodiment shown in FIG. 9 or the fourth embodiment.

(Personal Information Registration) FIG. 31 shows the flow of personal information registration processing. First, in step 3101,
The personal information provider terminal device 602 inputs personal information of a person who provides personal information. Here, the personal information represents the characteristics of the provider, such as the name, zip code, address, age, and gender of the provider, hobbies, favorite music genre, hair color, height, and weight, for example. Any information may be used. Here, it is assumed that information as shown in FIG. 17 is input as one example.

In step 3102, the personal information division function 703 divides the input personal information into partial personal information that cannot be associated with a specific individual and has no meaning. As such a dividing method, for example, as shown in FIG. 18, the information from the name to the hobby may be divided so as to be individual partial personal information. Alternatively, as shown in FIG. 19, characters may be divided into units.

In step 3103, personal information provider terminal device 601 generates an encryption key for encrypting the partial personal information. Although a common encryption key may be used for the entire partial personal information to be registered, a different encryption key may be generated for each partial personal information.

In step 3104, each partial personal information is encrypted using an encryption key. For example, FIG.
Get provider encrypted part personal information like Where E
_k1 to E _k6 each represent encryption functions by the cryptographic key k ₁ to k _6.

In step 3105, the personal information provider terminal device 601 separately transmits the provider encrypted partial personal information to the personal information management center device 603. For example, _{assume that} “E _k1 (Alice)” has been transmitted.

In step 3106, personal information management center apparatus 603 sets partial personal information identifier generation function 80
2 generates an identifier (partial personal information identifier) corresponding to the encrypted partial personal information received.

In step 3107, the generated partial personal information identifier is stored in the partial personal information DB 803 in association with the provider-encrypted partial personal information. The partial personal information DB may have the same configuration as the partial personal information DB of the second embodiment.

At step 3108, personal information management center apparatus 603 transmits the partial personal information identifier to the personal information provider.

In step 3109, the personal information provider stores the partial personal information identifier in the partial personal information related DB 704 in association with the contents of the partial personal information represented thereby and the encryption key used for encryption. I do. At this time, it may be stored in association with the value of the partial personal information transmitted to the personal information management center.

Steps 3105 to 140 correspond to all the partial personal information divided in step 3102.
The processing up to 6 is repeated.

Therefore, since the partial personal information is encrypted and transmitted, even if the communication between personal information provider terminal device 601 and personal information management center device 603 is not performed via an anonymous communication path, the personal information provider terminal device 601 does not transmit the personal information. The privacy of the provider does not need to be known.

(Provision of Personal Information) When providing personal information,
In addition to the partial personal information use permission information, the encryption key used for encrypting the partial personal information is transmitted to the personal information provider terminal device 60.
1 to the personal information user terminal device 602. The personal information user terminal device 602 associates the received partial personal information use permission information with the above-mentioned encryption key and stores it in the partial personal information use permission information DB.

(Personal Information Acquisition) FIG. 32 shows the flow of personal information acquisition processing. In this process, in the personal information acquisition process of the fourth embodiment shown in FIG. 27, instead of the partial personal information, the provider-encrypted partial personal information is transmitted from the personal information management center device to the personal information user terminal device. In addition, a step 3206 in which the personal information user terminal device decrypts the provider encrypted partial personal information is added.

(Embodiment 7) Encrypting and obtaining personal information by changing the order In this embodiment, after encrypting the partial personal information of the sixth embodiment, the same order of the partial personal information as in the fifth embodiment is obtained. The replacement is performed.

In the present embodiment, the personal information management center device 603 has an encryption / decryption function for partial personal information in addition to the configuration of the fifth embodiment shown in FIG. The personal information user terminal device 602 has a function of encrypting partial personal information in addition to the configuration of the personal information user terminal device of the sixth embodiment.

Further, the encryption function of personal information provider terminal device 601, personal information management center device 603 and personal information user terminal device 602 can be decrypted even if decrypted in a different order from the encryption. It is assumed that the order is exchangeable.

FIG. 34 shows the flow of the personal information acquisition process. Steps 3401 to 3404 are the same as steps 3001 to 3004 in FIG. 30 except that the partial personal information is encrypted to become provider-encrypted partial personal information.

In step 3405, personal information management center apparatus 603 encrypts each provider-encrypted partial personal information using a key known only to personal information management center apparatus, and encrypts the center-encrypted provider-encrypted partial personal information. Get a column.

In step 3406, the personal information management center device 603 transmits the above-mentioned center encryption provider encrypted partial personal information column to the personal information user terminal device 602.

In step 3407, the personal information user terminal device 602 converts the center encryption provider encrypted partial personal information included in the center encrypted provider encrypted partial personal information column into the partial personal information license information. Is decrypted with the encryption key associated with, and a sequence of center-encrypted partial personal information is obtained.

In step 3408, personal information user terminal device 602 encrypts the center-encrypted partial personal information included in the above-described center-encrypted partial personal information column using a key known only to the personal information user terminal device. Thus, a column of the user encryption center encrypted partial personal information is obtained.

In step 3409, the personal information user terminal device 602 transmits the above-mentioned user encryption center encrypted partial personal information column to the personal information management center device 603.

In step 3410, the personal information management center device 603 transmits the user encryption center encrypted partial personal information included in the user encrypted center encrypted partial personal information column to the personal information management center device alone. By using the key known to obtain a sequence of user-encrypted partial personal information.

In step 3411, the sequence of the above-mentioned user-encrypted partial personal information is randomly changed using the partial personal information order changing function.

In step 3412, the personal information management center device 603 transmits the sequence of the user encrypted partial personal information whose order has been changed to the personal information user terminal device 602.

In step 3413, the personal information user terminal device 602 decrypts the received sequence of the user encrypted partial personal information using a key known only to the personal information user terminal device, and obtains the partial personal information sequence. Get.

In step 3414, personal information user terminal device 602 outputs the partial personal information column.

As the key known only to the personal information management center device 603, the same key may be always used, or a different key may be used each time. The key known only to the personal information user terminal device may be the same key or a different key each time as long as the same key is used for the entire column of partial personal information acquired at the same time. .

It should be noted that the computer reads a program for causing a computer or the like to execute the processing procedure or calculation algorithm in each embodiment shown in the procedure diagram of FIG. 4 or the like in the personal information management apparatus or method of the present invention. It is possible to record and distribute on a possible recording medium, for example, a floppy (registered trademark) disk, a memory card, an MO, a CD, a DVD, and the like.

[0178]

As described above, according to the present invention, the following effects can be obtained.

(1) (Division of Personal Information) The present invention provides a method for registering personal information even if the contents of a database of a personal information management center device for registering personal information of a personal information provider leak to the outside. The privacy of the provider is never known.

(2) (Register Anonymously) In the present invention, the privacy of the personal information provider is not known even in the personal information management center device for registering the personal information of the personal information provider.

(3) (Passing an Identifier) The present invention can provide personal information users only with necessary personal information while maintaining the privacy of the personal information provider. Further, the personal information provider can change the content of the personal information obtained by the personal information user later.

(4) (Use of Personal Information Acquisition Permission Condition) The present invention restricts the use of personal information of a personal information provider by an illegal user or by an unjust method,
The use of personal information can be controlled by the personal information provider.

(5) (Statistical Use Only) According to the present invention, a personal information user uses personal information only by a statistical use method, and personal information of a specific personal information provider can be grasped. Absent.

(6) (Encryption of Partial Personal Information) The present invention also provides a personal information management center device for registering personal information of a personal information provider without using an anonymous communication channel. Privacy is never known.

(7) (Overall) The present invention relates to a method in which the privacy of a personal information provider is known to a personal information management center device for registering personal information of the personal information provider. Without knowing the privacy of the provider, the personal information user licensed by the personal information provider,
The personal information provider can control the personal information to be used in a method permitted by the personal information provider. Further, the personal information provider can permit only the statistical use of the personal information to the personal information user.

[Brief description of the drawings]

FIG. 1 shows the overall configuration of a system.

FIG. 2 shows a configuration of a personal information provider terminal device.

FIG. 3 shows a configuration of a personal information management center device.

FIG. 4 shows a flow of a personal information registration process.

FIG. 5 shows a flow of a personal information acquisition process.

FIG. 6 shows an overall configuration of a system.

FIG. 7 shows a configuration of a personal information provider terminal device.

FIG. 8 shows a configuration of a personal information management center device.

FIG. 9 shows a configuration of a personal information user terminal device.

FIG. 10 illustrates a configuration example of a partial personal information DB.

FIG. 11 shows a configuration example of a partial personal information related DB.

FIG. 12 shows a configuration example of a partial personal information identifier DB.

FIG. 13 shows an outline of the overall processing.

FIG. 14 shows a flow of a personal information registration process.

FIG. 15 shows a flow of a personal information providing process.

FIG. 16 shows a flow of a personal information acquisition process.

FIG. 17 shows an example of input personal information.

FIG. 18 illustrates a first example of division into partial personal information.

FIG. 19 illustrates a second example of division into partial personal information.

FIG. 20 illustrates an example of data stored in a partial personal information DB.

FIG. 21 illustrates an example of data stored in a partial personal information related DB.

FIG. 22 illustrates a flow of a personal information change process.

FIG. 23 illustrates a configuration example of a partial personal information DB.

FIG. 24 illustrates a configuration example of a partial personal information related DB.

FIG. 25 shows a configuration of a personal information management center device.

FIG. 26 shows a flow of a personal information providing process.

FIG. 27 shows a flow of a personal information acquisition process.

FIG. 28 illustrates a configuration example of partial personal information use permission information.

FIG. 29 shows a configuration of a personal information management center device.

FIG. 30 shows a flow of a personal information acquisition process.

FIG. 31 shows a flow of a personal information registration process.

FIG. 32 shows a flow of a personal information acquisition process.

FIG. 33 shows an example of encrypted partial personal information.

FIG. 34 shows a flow of a personal information acquisition process.

[Explanation of symbols]

101, 601: personal information provider terminal device 102, 603: personal information management center device 602: personal information user terminal device 202: personal information input function 203, 703: personal information division function 204, 704: partial personal information related DB 302, 802, 2502, 2902 ... partial personal information identifier generation function 303, 803, 2504, 2905 ... partial personal information D
B 903: partial personal information identifier DB 2503: use condition determining function 2904: partial personal information order replacement function

Continued on the front page (51) Int.Cl. ⁷ Identification FI FI Theme Court II (Reference) G06F 17/60 512 G06F 17/60 512 (72) Inventor Yoichi Takashima 2-3-1 Otemachi, Chiyoda-ku, Tokyo Date Sun F-term (Reference) in Honshin Telephone Co., Ltd. 5B017 AA07 BA07 BA10 BB02 CA16 5B049 AA01 AA06 CC01 EE05 5B075 KK54 KK63 ND20 UU08

Claims (22)

[Claims] The personal information provided by a personal information provider terminal device is registered in a personal information management center device through a communication means, and the personal information user terminal device acquires the personal information through the communication means. A personal information management device to be used, wherein the personal information provider terminal device is used to divide the input personal information into partial personal information that cannot be associated with a specific individual and has no meaning. Information dividing means, means for transmitting the partial personal information to the personal information management center device, means for receiving the partial personal information identifier generated for the partial personal information by the personal information management center device, Partial personal information related storage means for storing in association with the content of the partial personal information represented by the partial personal information identifier, and partial personal information corresponding to the partial personal information to be provided Personal information management apparatus characterized by comprising a means for transmitting to obtain the identifier from the partial personal information associated storage means in the personal information user terminal device. 2. The personal information management device according to claim 1, wherein the personal information provider terminal device extracts the partial personal information identifier from a partial personal information related storage unit and transmits the partial personal information identifier to the personal information management center device. A personal information management device comprising: means for receiving partial personal information corresponding to a partial personal information identifier from the personal information management center device; and means for outputting the received partial personal information. 3. The personal information management device according to claim 1, wherein the personal information provider terminal device inputs a personal information to be changed, and a content of the partial personal information divided by the personal information dividing device. Means for retrieving a partial personal information identifier corresponding to the partial personal information related storage means, and means for transmitting the partial personal information and the identifier to the personal information management center device in pairs. Personal information management device. 4. The personal information management device according to claim 1, wherein the personal information provider terminal device extracts a partial personal information identifier corresponding to the partial personal information to be provided from the partial personal information related storage means, Means for generating partial personal information use permission information indicating what kind of partial personal information is provided to the personal information user terminal device and under what conditions, and providing the partial personal information to the personal information user terminal device Means for transmitting license information. 5. The personal information management device according to claim 3, wherein the personal information provider terminal device generates an encryption key for encrypting partial personal information obtained by dividing the personal information to be provided by the personal information dividing means. Means for encrypting each partial personal information using the encryption key, means for separately transmitting the encrypted partial personal information to the personal information management center device, and Means for storing the generated and received partial personal information identifier in the partial personal information related storage means in association with the content of the partial personal information represented thereby and the encryption key used for encryption. Personal information management device characterized by the above-mentioned. 6. The personal information provided by the personal information provider terminal device is registered in the personal information management center device via communication means, and the personal information user terminal device obtains the personal information via communication means. The personal information management device to be used, wherein the personal information management center device divides the personal information into partial personal information that cannot be associated with a specific individual by itself and has no meaning. Means for receiving from the information provider terminal device, identifier generating means for generating an identifier for the received partial personal information, and partial personal information storage for storing the generated partial personal information identifier and the partial personal information in association with each other Means, means for transmitting the partial personal information identifier to the personal information provider terminal device, and partial information corresponding to the partial personal information identifier received from the personal information user terminal device Means for retrieving information from the partial personal information storage unit, the personal information management apparatus, characterized in that said retrieved partial personal information and means for transmitting to the personal information provider terminal device. 7. The personal information management device according to claim 6, wherein the personal information management center device includes the partial personal information to be changed by the personal information provider terminal device and a portion corresponding to the content of the partial personal information. Means for receiving a personal information identifier, and means for retrieving the partial personal information using the received partial personal information identifier and changing the value to the value of the received partial personal information. Personal information management device. 8. The personal information management apparatus according to claim 6, wherein said personal information management center device receives partial personal information use permission information corresponding to partial personal information to be used by a personal information user terminal device. Use condition determining means for verifying whether or not the received partial personal information use permission information has permitted use of the specified partial personal information to the personal information user terminal device; Means for retrieving the partial personal information corresponding to the partial personal information identifier specified in the partial personal information use permission information from the partial personal information storage means when succeeding, and retrieving the retrieved partial personal information from the personal information user Means for transmitting to a terminal device. 9. The personal information management device according to claim 8, wherein the personal information management center device confirms that the received partial personal information use license information satisfies a condition, Means for searching the partial personal information storage device for partial personal information corresponding to the partial personal information identifier specified in the information, and partial personal information order changing means for randomly changing the order of the column of the searched partial personal information. Means for transmitting the sequence of the partial personal information whose order has been changed to the personal information user terminal device. 10. The personal information management device according to claim 7, wherein the personal information management center device receives the partial personal information in which the personal information provider terminal device has encrypted the partial personal information using an encryption key. And a partial personal information identifier generating means for generating a partial personal information identifier corresponding to the received encrypted partial personal information, and associating the generated partial personal information identifier with the provider encrypted partial personal information. A personal information management device comprising: means for storing in a partial personal information storage means; and means for transmitting the partial personal information identifier to the personal information provider terminal device. 11. The personal information management device according to claim 9, wherein the personal information management center device receives partial personal information use permission information corresponding to partial personal information to be used by the personal information user terminal device. Means for verifying whether or not the received partial personal information use permission information permits use of the specified partial personal information with respect to the personal information user terminal device; Means for retrieving partial personal information corresponding to the partial personal information identifier specified in the partial personal information use permission information from the partial personal information storage means when the partial personal information use permission information is successful; Means for transmitting to a user terminal device. 12. The personal information management device according to claim 11, wherein the personal information management center device stores the partial personal information corresponding to the partial personal information identifier specified in the partial personal information use permission information in the partial personal information storage. Means for retrieving from the device, and encrypting each provider-encrypted partial personal information using a key known only to the personal information management center device to obtain a column of center-encrypted provider-encrypted partial personal information and use the personal information. Means for transmitting to the user terminal device, and using the user encryption center encrypted partial personal information included in the column of the user encrypted center encrypted partial personal information received from the personal information user terminal device using a key. Means for changing the order of the sequence of the decrypted user-encrypted partial personal information at random, and means for changing the order of the partial personal information order at random, and the changed user encryption Personal information management apparatus characterized by comprising a means for transmitting a sequence of partial personal information to the personal information user terminal device. 13. The personal information provided by the personal information provider terminal device is registered in the personal information management center device via communication means, and the personal information user terminal device obtains the personal information via communication means. A personal information management device to be used, wherein the personal information user terminal receives a partial personal information identifier corresponding to partial personal information to be provided from the personal information provider terminal, and the received personal information Means for storing the identifier in the partial personal information identifier storage device;
Means for transmitting the stored partial personal information identifier to the personal information management center device; means for receiving partial personal information corresponding to the partial personal information identifier from the personal information management center device in response to the transmission; Means for outputting selected partial personal information. 14. The personal information management device according to claim 13, wherein the personal information user terminal device determines what kind of partial personal information is to be provided from the personal information provider terminal device under what conditions. A personal information management apparatus, comprising: means for receiving partial personal information use permission information indicating whether the information is to be provided; and storing the received partial personal information use permission information in partial personal information use permission information storage means. 15. The personal information management device according to claim 13, wherein the personal information user terminal device extracts partial personal information use permission information corresponding to partial personal information to be used from the partial personal information use permission information storage means. Means for transmitting the extracted partial personal information use permission information to the personal information management center device; and means for transmitting partial personal information designated by the personal information management center device report to the partial personal information use permission information. Means for verifying that the use has been permitted and receiving partial personal information corresponding to the partial personal information identifier specified in the partial personal information use permission information, and means for outputting the received partial personal information Personal information management device characterized by the above-mentioned. 16. The personal information management device according to claim 15, wherein the personal information user terminal device is arranged in a sequence of partial personal information columns searched for the partial personal information use permission information from the personal information management center device. Personal information management device, comprising: means for receiving a random exchange of the information; and means for outputting a column of the received partial personal information. 17. The personal information management device according to claim 16, wherein the personal information user terminal device obtains partial personal information use permission information corresponding to the partial personal information to be used, Means for transmitting the personal information use permission information to the personal information management center device, the personal information management center device verifies the partial personal information use permission information, and specifies the personal information specified in the partial personal information use permission information A personal information management apparatus, comprising: means for receiving the received personal information; means for decoding the received personal information; and means for outputting the decoded partial personal information. 18. The personal information management apparatus according to claim 17, wherein said personal information user terminal device verifies said partial personal information use permission information and checks said partial personal information use permission information. Means for receiving a sequence of provider-encrypted partial personal information obtained by encrypting the personal information designated by using only a key known only to the personal information management center device, and decrypting the received provider-encrypted partial personal information Means for encrypting the encrypted portion using a key known only to the personal information user terminal device, and means for transmitting a sequence of the encrypted partial personal information to the personal information management center device, The personal information management center device decrypts, using a key, the user encrypted center encrypted partial personal information included in the user encrypted center encrypted partial personal information column using a key, and outputs the partial personal information column. Means for receiving a sequence of the user-encrypted partial personal information whose order has been changed, means for decoding the received user-encrypted partial personal information, and means for outputting the decrypted partial personal information Personal information management device characterized by the above-mentioned. 19. The personal information provided by the personal information provider terminal device is registered in the personal information management center device via communication means, and the personal information user terminal device acquires the personal information via communication means. A personal information management method to be used, wherein the personal information provider terminal device divides the input personal information into partial personal information that cannot be associated with a specific individual by itself and has no meaning. Transmitting the personal information to the personal information management center device, receiving the partial personal information identifier generated for the partial personal information by the personal information management center device, and receiving the partial personal information represented by the received partial personal information identifier The personal information user terminal is obtained by acquiring a partial personal information identifier corresponding to the partial personal information to be provided from the personal information related storage means, in association with the content of the personal information to be provided. Personal information management method and transmits to the location. 20. The personal information provided by the personal information provider terminal device is registered in the personal information management center device via the communication means, and the personal information user terminal device obtains the personal information via the communication means. A personal information management method to be used, wherein the personal information management center device divides personal information into partial personal information that cannot be associated with a specific individual by itself and is meaningless. The partial personal information received from the information provider terminal device, an identifier is generated for the received partial personal information, the generated partial personal information identifier is stored in association with the partial personal information, and the partial personal information identifier is provided to the personal information. The partial personal information corresponding to the partial personal information identifier transmitted from the personal information user terminal device and transmitted from the personal information user terminal device is retrieved from the partial personal information storage means. Personal information management method and transmitting the partial personal information to the personal information provider terminal device. 21. Registering personal information provided by a personal information provider terminal device in a personal information management center device via a communication means, and a personal information user terminal device acquiring said personal information via a communication means. A personal information management method to be used, wherein the personal information user terminal device receives a partial personal information identifier corresponding to partial personal information to be provided from the personal information provider terminal device, and stores the received personal information identifier. Storing the partial personal information identifier in the partial personal information identifier storage device, transmitting the stored partial personal information identifier to the personal information management center device, and transmitting the partial personal information corresponding to the partial personal information identifier from the personal information management center device; And receive
Outputting the received partial personal information. 22. A computer readable program for causing a computer to execute the processing in the apparatus or method according to any one of claims 1 to 5, 13 to 18, 19 and 21. A recording medium on which a program for executing a personal information management apparatus or method is recorded.