JP2001357019A - Synthetic habitant supporting system utilizing ic card and ic card to be used therefor - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system or the like for synthetically supporting habitants by opening a personal portal site for the providers of the synthetic habitant supporting system. SOLUTION: Concerning this synthetic habitant supporting system, a personal portal site 21A of a habitant 1 connectable to the home pages of plural service providers 30 is opened for the server of a synthetic habitant supporting system provider 20 (1), the relevant personal portal site is opened by authenticating a habitant while utilizing a secret code stored on the IC card peculiar to the relevant habitant or generated successively, and normally ending the procedure of authentication (2), the respective home pages of plural service providers opened inside the relevant personal portal site can be switched by the simple terminal operation of the habitant (3), and the habitant can receive the provision of a service required for himself/herself even from the home page of any service provider by accessing this personal portal site (4).

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a personal portal site for assisting a consumer using an IC card. In more detail, by providing a new interface that intervenes between consumers and the network (a contact, mediation, and means that intervenes between consumers and the network to obtain living information), The aim is to provide comprehensive support and to make life more convenient. More specifically, the purpose is to enable consumers to easily check living information, such as bills, usage details, news, images, music data, tickets, coupons, etc., required by oneself through a single interface. A personal portal site is assigned to each consumer, and the consumer is authenticated by an IC card inserted into or embedded in the access terminal so that consumers can easily browse their own information. Things.

[0002] According to the system of the present invention, consumers (sometimes referred to as users and subscribers) can issue tickets, commuter passes, resident certificates, etc. through their own personal portal sites.
It is possible to apply for various services such as a credit card and a point card, and electronic value such as electronic money, prepaid balance, electronic ticket, and electronic coupon can be directly downloaded to an IC card from a network. In the present invention, the “personal portal site” refers to a homepage that serves as an entrance (portal) to a personal homepage for a consumer of each service applied by the consumer. This personal portal site is provided by a provider of a comprehensive consumer support system. Also, simply "personal homepage" or "homepage"
In that case, the consumer who has accessed the ID number,
It refers to a homepage that provides a screen or information corresponding to the individual, based on information such as a password, a cookie, an electronic certificate, and an electronic signature. The personal homepage is provided by each service provider individually.

[0003] In addition, between a consumer and a service provider, a consumer integrated support system provider (a base or service provider that performs the intermediary function of the Internet communication of the present invention is hereinafter referred to as "claims" We call it "consumer integrated support system provider.")
By establishing a personal portal site for subscribers to the provider of the comprehensive consumer support system, consumers will be able to receive various services, and the system will be provided with a filtering function so that consumers can directly contact the service provider. This prevents unnecessary disclosure of personal information to a service provider due to access, and also prevents leakage of personal information.

[0004]

2. Description of the Related Art The use of electronic commerce (EC) is rapidly increasing, and consumers access a service provider's homepage to obtain a ticket, book a movie or concert ticket, and book a travel pack. Have already been done. Some institutions are also issuing issuance of resident certificates and checking the prepaid balance. But,
In these systems, since service providers individually develop services, consumers manage a plurality of ID numbers and passwords, and access a plurality of homepages through personal computers and mobile phones.

[0005] Ticketing and banking services through the current Internet and mobile networks are:
It remains at the reference level for reservations and information provision, and has not yet realized a service for downloading electronic value such as ticket information itself or electronic money. After booking,
It is necessary to have a procedure of mailing and delivery at the service counter. Similarly, when a new service is applied through the Internet or a mobile network, a membership card, a credit card, a mileage card, and the like are sent separately by mail. In addition, there are no services such as commuter passes and resident cards that issue through a network, and there are many services that require you to go to the counter when applying.

Conventionally, when a consumer accesses a homepage of a service provider A, the user inputs an ID number and a password to connect to the homepage of the company A. Similarly, when accessing Company B, the user enters the ID number and password in the same manner and connects to Company B's homepage. As described above, according to the conventional method, each time an access is made, the ID
There is a problem that a procedure for inputting a number and a password is required, and it takes time, time and communication cost to receive a plurality of services.

[0007] As another conventional example, when a consumer accesses Company C in order to obtain a cheap ticket of an air ticket, after connecting in the same manner, he or she inputs personal information such as an e-mail address. Enter the price and ticket type. Company C (often operated by an individual) filters (selects) a partner company and inquires whether a ticket can be obtained. If there is a ticket that meets the conditions, we will send it to the consumer, but we will not be responsible for the trouble
Is usually stated. Company C has a system to get kickbacks (introduction fees) from partner companies. In such a system, there is a problem that personal information is leaked at the time of access, and there is also a problem that there is no guarantee that a service provider accessing the system is a trusted trader.

[0008] On the other hand, as means of settlement in EC, there are bank transfer, postal transfer, cash registration, cash on delivery for exchanging money at the time of product delivery, convenience store settlement, prepayment, postpaid settlement, instant payment settlement, and the like. In the case of cash on delivery, there is a problem that cash must be provided. In Japan, where people often do not stay on weekdays, convenience store payments may occupy a large weight.
On the other hand, as a prepaid settlement, there is a prepaid card system, but it is limited to small transactions. As postpay, a credit card is used. Electronic money and debit cards are similar to instant payments, but they are also prepayments in view of purchasing electronic money in advance. Current debit cards are magnetic cards, and there are concerns about storage capacity and security.

[0009] Although electronic money is in an experimental stage, it has been considered that the issuing method is to issue it in exchange for cash by a distribution handling organization or to issue it in the same way by a financial institution. Electronic money is realized by writing data in an "electronic wallet" on an IC card or a personal computer. When a store or the like converts electronic money into cash, the electronic money is brought to a distribution institution or a financial institution, which is the issuing entity, and exchanged for cash. However, in each case, there is a problem of bringing cash and cashing, and convenience for consumers has not been established.

[0010]

Therefore, in the present invention,
To solve the above-mentioned various problems by establishing a comprehensive consumer support system provider that intervenes between consumers and service providers and establishing individual personal portal sites for individual consumers there It is.

[0011]

Means for Solving the Problems First, the gist of the present invention for solving the above-mentioned problems is as follows. (1) A server of a general consumer support system provider can be connected to a homepage of a plurality of service providers. A personal portal site of a unique consumer is established according to the number of subscribers. (2) The personal portal site uses a secret code stored in an IC card unique to the consumer or generated at any time. It is opened when the authentication of the consumer is completed and the authentication procedure is completed normally. (3) Each homepage of a plurality of service providers opened in the personal portal site is operated by a simple terminal operation of the consumer. (4) When a consumer accesses this personal portal site, the homepage of any service provider Et al. Also, it is possible to receive the provision of services required for the self, life's comprehensive support system using the IC card, characterized in that, in the.

The second aspect of the present invention for solving the above-mentioned problems is as follows. When a consumer applies for a subscription to a provider of a comprehensive consumer support system, (1) an IC card equipped with necessary functions is issued. (2) The individual personal portal site of the consumer who can access the homepage of the desired service provider is provided on the server of the comprehensive consumer support system provider. , An integrated consumer support system using an IC card.

A third aspect of the present invention for solving the above-mentioned problems is as follows: (1) A consumer who can establish a connection to a homepage of a plurality of service providers and is set up on a server of the provider of the comprehensive consumer support system. A personal portal site,
(2) A unique IC card having a secret code for a consumer to open the personal portal site through a terminal, and (3) homepages of a plurality of service providers registered in the personal portal site,
(4) consumers receive the services they need
A comprehensive consumer support system using an IC card.

A fourth aspect of the present invention for solving the above-mentioned problems is as follows: (1) A personal portal of a consumer who can connect to homepages of a plurality of service providers is provided on a server of a consumer comprehensive support system provider. The site is opened according to the number of subscribers. (2) The personal portal site uses a secret code stored on an IC card unique to the consumer or generated at any time to authenticate the consumer. (3) Each home page of a plurality of service providers opened in the personal portal site can be switched by a simple terminal operation of a consumer. ,
(4) An integrated consumer support system using an IC card, wherein a consumer can download an electronic value to his / her own IC card by accessing the personal portal site.

[0015] A fifth aspect of the present invention for solving the above problems is that when a consumer applies for an additional service of a service provider and the service provider is accepted,
(1) The information and functions required for additional services are added to the consumer's personal portal site via the network on the IC card held by the consumer,
(2) The general consumer support system is characterized in that the consumer can enjoy information and functions necessary for the service without going to the service counter thereafter.

A sixth aspect of the present invention for solving the above problems is an IC card for accessing the personal portal site, which includes a consumer ID number, a password, a URL, a secret key, various electronic certificates. (Public key) is stored in the IC card.

A seventh aspect of the present invention for solving the above problems is an IC card used for accessing a personal portal site established by a provider of a comprehensive consumer support system, and includes an ID number of a consumer, A function to store at least one of a password, an e-mail address, a URL, a secret key, and various digital certificates (public keys), and to download electronic value such as electronic money and electronic tickets from a personal portal site. An IC card.

[0018]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS A general consumer support system using an IC card according to the present invention will be described with reference to the drawings. FIG. 1 is an explanatory diagram of the integrated consumer support system of the present invention using an IC card. The central part of FIG. 1 is a consumer comprehensive support system provider 20. 1A,
1B is a consumer who uses the present system. For convenience of illustration, only two persons 1A and 1B are shown, but a large number of consumers participate. Reference numeral 30 denotes a service provider that provides various services to consumers. There are other various services other than the illustrated ones.
Consumer comprehensive support system provider 20 includes consumers 1A and 1
.., And the service provider 30, the management of the consumer 1 as a subscriber and the service provider 30 and the control of Internet communication are performed.

A plurality of personal portal sites 21A, 21B,... Corresponding to the number of subscribers are set up on the server of the general consumer support system provider 20. When the consumer 1A accesses the personal portal site 21A, communication is performed by inserting the IC card 11A into the reader / writer 121 of the personal computer 12 or attaching or incorporating the IC card to the mobile phone 13. "Secret code" contains I
Static information such as D number, password, e-mail address, URL (uniform resource locator), various digital certificates (public key), random data (random number, date, time, etc.), electronic signature, etc. Some are recorded dynamically, and some are dynamically generated at any time. A predetermined authentication procedure is performed using the information, and when the authentication procedure is completed normally, the personal home page 21A established by the general consumer support system provider 20 is connected.

The personal computer 12 is equipped with an IC card reader / writer 121, into which an IC card is inserted or embedded. In the case of the mobile phone 13, the IC card may be mounted on a mobile phone having an insertion slot, or may be of an embedded type such as a plug-in SIM. The predetermined authentication procedure is, for example, to encrypt (electronically sign) random data such as date and time and an ID number using a private key of an individual, transmit the encrypted data together with an electronic certificate to a server,
There is a method of verifying the electronic signature on the server side. A password or fingerprint data input through the terminal at the time of access can be used together to enhance the security of personal identification.

Various menus are provided in the personal portal sites 21A, 21B,... Of the provider of the comprehensive consumer support system. For example, regarding [Telecom], services such as answering machine information, a mailbox, and a telephone directory are provided. In [financial institutions], [CDs / videos / books] and [travel agencies], there are announcements and advertisements corresponding to each.
In other words, the personal portal site serves as an interface to the society of consumers. [System provider service] has a content search service first. In this case, the content that the user wants to receive is registered. The setting items to be registered include a genre, a price range, a date and time, a response time limit, and the like.

According to the service applied by the subscriber, a personal homepage of the service provider is opened on the personal portal site of the subscriber. It is also possible to set a trigger for automatically received content, which enables consumers to set content they need through a portal site. Statements of use, invoices, direct mail,
Advertisements, event guides, etc. will be sent to this personal portal site.

The general consumer support system provider 20 includes:
As shown in FIG. 1, service providers in various fields connect. Financial institutions such as Bank A and Insurance Company B; airlines such as C Airlines and D Airlines; E music stores and F bookstores; department stores such as G and H; travel agents such as I agents and J agents. The service provider 30 is a registered trader in a contract relationship with the general consumer support system provider 20, and the communication between the service provider and the general consumer support system provider 20 is performed using an SSL (secure socket) using a dedicated line or encrypted communication.・ Depends on the layer).

Electronic money can be downloaded from a bank to the IC card 11A of the consumer 1A.
Electronic tickets can also be downloaded from the ticket sales site. Consumer 1A downloads the I
Using the C card 11A or the portable terminal 13, the user can purchase goods at the vending machine 2, the POS terminal 3, the kiosk terminal 4, or the like, or pass through the entrance gate 5.

A filtering system 22 is provided between the consumer support system provider 20 and the service provider 30.
Works. In other words, the content (request information) submitted by the consumer 1A is not changed by the service provider 3 as it is.
Does not flow to 0. Content (request information)
This is because the information such as the type, time, price, and the like of the discount coupon and the coupon are distributed to the service provider, but the service provider 30 has a function of blocking the personal information of the consumer that is not particularly required. This filtering function also functions when the service provider 30 distributes information to the consumers 1A, 1B,. When the service provider 30 prepares the distribution content, the service provider 30
, Where you live, your gender, age group, type of application,
Pass the content along with target information such as. The consumer comprehensive support system provider 20 distributes the content based on the received target information.

When the consumer 1A selects a service required for himself and applies to the consumer comprehensive support system provider 20, the homepage is opened on the personal portal site 21A of the applicant. The consumer 1A can apply to the consumer comprehensive support system provider 20 for the hook information of the content automatically received by the desired service provider. The hook information of the automatically received content indicates information such as a service type and a handled product. By comparing the hook information with the target information set by the service provider, the content to be distributed is filtered.

The general consumer support system using an IC card according to the present invention has the above-mentioned main configuration. By utilizing this system, the general consumer support system provides various conveniences as follows. Will be brought to you. (1) Unification of consumer interface (point of contact on network). (2) Easy connection to a network using an IC card. (3) Prevent leakage of personal information by using a network. (4) Realization of bidirectional filtering between service providers and consumers. (5) Secure network transactions. (6) Downloading electronic value to an IC card. (7) Realization of online enrollment procedure. (8) Validity confirmation service when using a service digital certificate. (9) Online statement delivery. (10) Mediation of successive distribution of electronic coupons and tickets. (11) Interactive advertisement distribution. (12) Secure storage of personal information related to life. (13) Log storage. Hereinafter, the details of each of the above conveniences will be sequentially described together with specific means for achieving them.

(1) Unification of consumer interface (contact on network). The personal portal site 21 established in such a general consumer support system provider 20 serves as a unified interface (contact point on a network) between the general consumer and the service provider 30 in society in general. Solve the current situation where you have to access multiple homepages one by one. That is, as shown in FIG.
Through the personal portal site 21A opened to the general consumer support system provider 20, any number of homepages of many service providers 30 registered in the general consumer support system provider 20 can be connected as needed. On the personal portal site, the service provider can be switched by a simple operation. As described above, the personal portal site 21 functions as an interface (portal site) of the consumer 1 to the society.

FIG. 2 is a diagram showing service contents of the personal portal site. FIG. 2 (A) is [Telecom]
FIG. 2B shows the service obtained from the service and the service content obtained from the [consumer comprehensive support system provider].
Shows an example of a service obtained from each service provider. All are the contents displayed on the personal portal site screen. The services obtained by [Telecom] are the same as the current homepage, and include answering machine information, mailboxes, telephone directory (address book), my menu, bookmark list, online statement, etc. The services obtained by the [Consumer Total Support System Provider] include online membership of the service, link to the service page, hook setting of automatic reception information, list of new information, To Do
Alarm, schedule management table, data storage,
Secure storage of personal information related to life. In the case of, for example, password, license number, account number,
Etc. can be stored.

In the service page obtained from each service provider (FIG. 2B), in the case of [bank],
Online details, balance details, account transfer request, electronic value download, balance alarm setting, etc. are displayed. In the case of [CD / book / video], notices, advertisements, a list of sample MP3 data, ticket reservation, electronic ticket download, and the like are displayed.
In the case of [Travel Agent], notices, advertisements, recommended coupons, online reservations, electronic ticket downloads, package searches, etc. are displayed. In the case of [system provider], it is possible to register contents that consumers want to obtain. The setting items include a genre of use, a price range, a date and time (time), a response deadline, and the like.

When the consumer wants to register the content he wants to obtain in the consumer support system provider 20, the registered information is distributed to the service provider 30 of the partner. However, as described above, information regarding the individual consumer is not distributed. This is to prevent information leakage of consumers. The consumer comprehensive support system provider 20 selects content that meets the conditions, collects it by proxy by a set time limit, and distributes it to consumers. On the other hand, the service provider 30 transmits the content to be distributed to the consumer comprehensive support system provider 20 together with the target information, and the consumer comprehensive support system provider provides the hook information and the subscription service set by the consumer. In light of this, this information can be filtered and distributed to consumers.

(2) Simple connection to a network using an IC card. The IC card 11 is issued to each individual consumer, and the access to the personal portal site 21 is managed by the IC card, so that access is limited to the individual. It is preferable to issue it on an individual basis, not on a family basis. Consumers can easily access the network from the personal computer 12 or the portable terminal 13 using the IC card. The consumer 1 connects to the personal portal site by using the secret code stored in the IC card or generated at any time by inserting the IC card 11 or using the IC card incorporated in the portable terminal. After connecting to the personal portal site 21, the service page of the personal portal site dedicated to the user can be switched with a simple button operation of the terminal, and the user can browse immediately.

(3) Prevention of leakage of personal information by using a network. According to the system of the present invention, since personal transaction conditions and the like are presented to the other party (service provider) via the filtering system 22 of the general consumer support system provider 20, a mechanism for preventing leakage of personal information is provided. Provided. The personal information that the resident 1 entrusts to the holistic consumer support system provider 20 is strictly managed, and is not disclosed to the service provider 30 unless the resident permits. for that reason,
Information such as name, address, telephone number, e-mail address, age, etc. can also be deposited. It is well known that when an individual accesses a service provider directly as in the conventional method, such personal information is known to the other party, so that unnecessary junk mail may arrive or be misused thereafter. I have.

(4) A two-way filtering relationship between the service provider and the consumer is realized. By integrating the personal portal site 21 and the filtering system 22, a two-way relationship between the service provider 30 and the consumer 1 is realized. That is, as described above, when the consumer 1 receives a service from the service provider 30, the information to be delivered to the service provider can be filtered, and when the service provider performs an advertising activity or the like to the consumer. Can be filtered (selected) according to a certain target criterion.

FIG. 3 is a diagram illustrating a filtering system. When the consumer 1 reserves a travel schedule, for example, he opens a personal portal site and accesses a home page of a travel agency. Accordingly, the consumer support system provider 20 distributes the user's requested content information (budget, schedule, destination, etc.) to the service provider by e-mail or the like, but personal information is provided by the consumer support system. Filtering system 2
2 and is not distributed to the travel agency.

The travel agency makes a schedule and an estimate from the applied content information, and responds to the consumer comprehensive support system provider 20. The provider of the comprehensive consumer support system processes the corresponding content (travel package, various tickets, etc.) into an e-mail, and distributes the content to the consumer who has requested the content by the distribution processing system 28 by the set time limit. . Consumers do not need to go to the service counter. In addition, the consumer can automatically receive the set information by registering the genre to be automatically received as hook information.

A similar relationship is useful when filtering the information provided by the service provider 30 to the consumer 1. For example, target information of a content from a certain service provider 30 (service type, gender, age group,
Based on the area of residence, etc.), the content can be automatically distributed only to the relevant person. The conventional individual access Internet communication cannot extract a wide range, but in the system of the present invention, the general consumer support system provider 20 can easily create a corresponding list from the registrant list.

(5) Security of network transactions. By making the service provider a “registration system”, it is possible to give a sense of security to consumers and to avoid various troubles in network transactions. In the case of direct access from the consumer 1 to the service provider 30 as in the current system, the consumer may be connected to an untrusted company. They may not be available, or they may be inferior even if sent. In the system of the present invention, by making the service provider 30 a “registration system”, the service provider that hurt the credibility is eliminated, so that the consumer 1 can conduct transactions with confidence and avoid troubles in network transactions.

(6) Downloading electronic value to an IC card. By using the IC card 11 to download electronic value and information from a network, it is possible to develop a virtual (virtual world) transaction into a real world transaction that does not remain in the network. That is, a transaction on the network may end up in a virtual transaction if there is no movement of goods or cash, but the electronic value (electronic value) is downloaded to the IC card and the value (cash) is transferred. , Real world transactions can be realized.

Electronic money, electronic tickets, discount coupons, shop information, and the like loaded through the personal portal site 21 are stored in the IC card 11 to enhance security and portability, and are used in the real world. The train's digital express ticket can be downloaded to an IC card and used, and electronic money can be downloaded and used at a station kiosk. In the kiosk terminal 4, the vending machine 2, and the entrance gate 5 using electronic money, a reading terminal having a means capable of communicating with the IC card 11 and the portable terminal 13 is installed. That is, the IC card can function as an intermediary medium for moving electronic value between real and virtual. An example will be described below.

In the case of conducting a transaction on a network, when the consumer 1 accesses the network and purchases a product, the service provider 30 delivers the product, and at the same time as the delivery of the product,
Usually, cash payment is made by "cash on delivery" or cash payment is made in exchange for goods at a convenience store. In the system of the present invention,
By downloading the cash value as electronic money to the IC card 11 of the consumer 1, cash settlement using the IC card becomes possible. If the consumer 1 downloads a certain amount of cash from his / her bank or the like registered in the consumer comprehensive support system provider 20 to his IC card 11, the cash value is downloaded to the IC card. ,
Payment can be made to the service provider by electronic money. At this time, what supports the bank to download the cash value to the IC card 11 of the consumer 1 is the bank deposit of the consumer 1 or the like.

Acquisition of tickets, tickets, reserved seats, etc. Similarly, purchase of tickets for movies, plays, concerts, etc., transportation tickets, reserved seats, boarding passes, commuter passes, etc. via the network. Can and pay. The value of a ticket or the like can be downloaded to the IC card 11 as an electronic ticket, and a ticket, an express ticket, or the like can be downloaded to a digital card or an express card and used. Since the electronic ticket, the digital ticket, and the express ticket are recorded on the IC card, the user can use the IC card or the communication terminal such as the mobile phone 13 in which the IC card is incorporated by actually carrying it when traveling. .

Acquisition of store information, etc. Store information, newspaper information, stock information, etc. are stored on the IC card 11.
Available for download. Information that is only displayed on the network screen is easy to forget when the screen disappears. If such information is downloaded to the IC card, it can be stored reliably and the information can be used effectively. If there is bargain information on the store, the store name, bargain period, and the content of the product can be accurately stored, and there is no need to take notes. The same applies to information on newspapers and stocks, so that information advantageous to consumers can be reliably used.

When the IC card 11 is mounted on or incorporated in the mobile phone 13, the downloaded value is used by holding the mobile phone over the mobile phone. Mobile phones include contactless communication antennas, IrD
A (Infrared data communication standard established by the Infrared Data Association),
It is equipped with local wireless technology such as Bluetooth and communicates with terminals. Information inside the IC card can be confirmed through a liquid crystal display screen of the mobile phone 13 or the like. In other words, downloading commuter pass information or an electronic ticket to the IC card 11 inside the mobile phone means converting the mobile phone itself into a commuter pass or an electronic ticket.

(7) Realization of online enrollment procedure. The enrollment procedure of the additional service of the system of the present invention is performed by a dynamic loading service of electronic certificate for service. In the system of the present invention,
PKI (Public Key Infrastructure) information for performing identity verification on the network is stored. The PKI refers to an infrastructure for widely using a technology based on a public key. Specifically, the PKI is an infrastructure for performing services including creation, storage, issuance, and disposal of a public key.

Here, the PKI information refers to information such as a private key assigned to an individual, an electronic certificate, and an electronic certificate of a card issuer or a service provider. In advance, I
Based on the card-specific PKI information stored in the C-card, the user is identified and, after that, the service PKI information (card-specific private key or digital certificate) used in the applied service is obtained. Generated and distributed (downloaded) to the IC card via the network. The card-specific PKI information stored in the IC card in advance is generated by the certificate authority of the card issuer. In the case of the system of the present invention, it is a certificate authority of a communication carrier. The service PKI information assigned to each service that a consumer subscribes to later is generated by a certification authority entrusted to each service provider. The details will be described below.

FIG. 4 is a diagram for explaining the online enrollment procedure. The contents of the secret key and the digital certificate in FIG. 4 should be referred to the description of FIG. 6 described later. However, the following description describes an example of the enrollment procedure, and is not limited to this example, and a simpler procedure can be performed. First, the consumer 1A is the consumer comprehensive support system provider 20
When you apply for membership, the PKI assigned to each card
Information (Card individual private key K3, Card individual digital certificate K
4. The IC cards 11A and 131 on which the PKI application for storing the digital certificate K2 of the card issuer (communications carrier) is distributed.

When the service is applied to the mobile phone service, the PKI application including the PKI information is stored in the IC card 131 incorporated in the mobile phone in advance. The PKI information at that time is the carrier 4
0 generates and manages the certificate authority 41. Consumer 1A
When the user accesses the personal portal site 21A through various networks (wired or wireless) of the communication carrier 40 through terminals such as the mobile phone 13 and the personal computer 12, the personal portal site 21A is stored in the consumer-specific IC cards 11A and 131 or generated at any time. After confirming the identity of the resident using the secret code, the personal portal site 21A of the already established resident is opened.

The server of the comprehensive consumer support system provider 20 and the homepage 31 of the individual service provider 30
Are connected by SSL or a dedicated line in order to secure a secure communication line. In order for consumer 1A to join a new service, homepage 31 of service provider 30
When you visit, advertisements and guidance information are posted,
From that site, it is possible to move to a member registration / service reception site 23 for performing an actual enrollment procedure.

Since the member registration and service reception site 23 of the comprehensive consumer support system provider 20 holds personal information in advance, known information such as name and address can be automatically filled in in advance. Therefore, the input operation can be simplified. After completing the required information,
The validity of the individual certificate of the applicant is confirmed by means such as expiration date confirmation, signature verification of a certificate authority, and reference to a revocation list. When it is confirmed that the card is valid, the reception process is terminated. After the reception processing, the IC card service application 25 and the service provider digital certificate 26, which have been received from the service provider 30, are transferred to the communication carrier 40 together with the applicant's digital certificate.

The communication carrier 40 attaches an electronic signature to the data to be distributed and distributes the data to the IC cards 11A and 131 through the communication network. The distributed data is validated after the signature is verified in the IC card, and the loading is completed. On the other hand, the personal information received at the member registration and service reception site 23 is transferred to the service provider 30. The service provider generates a member number, a service individual secret key K7, a service individual digital certificate K8, and the like necessary for the service based on the information as required, and uses the service provider private key K5. A signature is given to the general consumer support system provider 20. These service data are provided by the consumer support system provider 20 and the telecommunications carrier 4
0, it is delivered to the IC cards 11A and 131.

(8) A service for confirming validity when using a service digital certificate. When the consumer 1 accesses the service provider 30, the consumer comprehensive support system provider 20 checks the validity of the electronic certificate used by the consumer 1 on behalf of the service provider. I do.

FIG. 5 is a diagram for explaining the validity confirmation agency service at the time of using the service. However, the following explanation
This is merely an example, and the present invention is not limited to this example, and a simpler procedure such as simply sending a password or ID information in an IC card can be adopted. In the IC card 11A, 131 for the network access of the consumer 1A, an electronic certificate of the communication carrier 40 (company A, company B) and an electronic certificate for service of the service provider (ticket sales) are provided. Company, bank).

When the consumer 1A accesses the personal portal site 21A using the digital certificate of the company A, the identity of the consumer 1A is first confirmed. Next, in the case where the consumer 1A accesses the service personal homepage 321 of the ticket sales company 32 and makes a purchase by credit or direct debit payment using a credit card number or a bank card number stored in the IC card. , The certificate authority of the ticket sales company 5
2 or the electronic certificate storage server 5 of the certificate authority 53 of the bank
Based on the revocation list server 29 obtained from 21, 211, the consumer's comprehensive support system provider 20 performs the validity check on whether the service electronic certificate of the consumer 1A is not a revocation target. Can be.

In the above description, the revocation list refers to a list of digital certificates that are valid as data but have to be discarded in operation, and these are stored in the revocation list server 29. ing. As an example,
This includes a theft report, loss report, certificate of a credit card that has been misused, certificate of a withdrawn member, and a certificate that has been replaced with a new certificate due to changes in the information (name, etc.) in the certificate. Applicable. The validity of a digital certificate is determined by whether it has been issued by a trusted certificate authority, whether the certificate itself has expired, whether the certificate has been revoked (invalid), etc. Can be confirmed by

The reason for the necessity of confirming the validity in the revocation list server is that, for example, a certain service provider 30A needs to confirm the validity of an electronic certificate issued by another service provider 30B in providing the service. And so on. As a specific example, there is a case where an individual digital certificate of a bank or a credit company is used as a settlement means in ticket sales.

(9) Online statement delivery. The usage details, bills, direct mail, etc. relating to the applied service are delivered to the personal portal site. Reports on credit card statements are usually mailed to users.
In the system of the present invention, the mailing of a similar thing to a specification or the like is stopped and attached to the portal site display. As a result, the service provider can stop the mailing of the statement and save the mail bill. In addition, the consumer can check the monthly data transition on the display without receiving unnecessary mail. Further, the received data can be used as it is as input data for household account book software and asset management software. The statement currently received by mail can be changed to an online statement via the personal portal site 21 or a telephone center connected to the personal portal site.

(10) Mediation of successive distribution of electronic coupons / tickets. The current problem with electronic coupons and electronic tickets is that when the coupons and tickets are actually downloaded to the IC cards 11 and 131 of the consumers, the consumers 1
There is a problem in that if there is a problem that the person cannot go to the venue, and if an alternative person goes, the IC card must be given to the person. According to the system of the present invention, the consumer 1A
This means that the information passed by the (ticket purchaser) to the consumer 1B (substitute) should be delivered to the service provider. That is, the consumer 1A downloads data such as a ticket ID obtained from the service provider to the consumer 1B,
The service for feeding back the content of the processing to the service provider may be performed by the consumer support system provider 20 on behalf of the service provider. This solves the above problem.

(11) Distribution of interactive advertisement. CS / BS / terrestrial broadcasting, movies, travel packs, advertising images such as CDs, and moving image images (10 to 20 seconds), and if you are interested, this service can directly take the next action . After watching an advertisement moving image of a television broadcast, a video at home is remotely controlled to make a reservation. After watching the movie preview movie, an electronic ticket is reserved. Thereafter, the electronic ticket is automatically distributed to the IC card 11 or 131 of the consumer. After viewing the content sent from the travel agency and the advertisement image of the travel pack, the user makes a reservation for the travel pack. afterwards,
An electronic ticket, a digital ticket, and the like are automatically distributed to the IC card of the consumer.

(12) Storage of personal information relating to life. Licenses, passports, employee cards, credit cards, various membership cards, various financial services (insurance, securities, banks, etc.)
Personal information related to life such as D number, account number, expiration date, emergency contact information, address book, telephone directory, e-mail address list, etc. can be safely stored and referenced when necessary. As a method of securely storing, for example, there is a method in which an authentication code is created using an encryption key owned only by the user, and the contents cannot be viewed unless the authentication code is verified. With this service, if the memory area of the personal portal site is regularly backed up, such as in a memorandum, the telephone directory of the mobile phone is convenient when the terminal breaks down.

(13) Log storage. The history of accessing the personal portal site 21 and the shopping history can be stored in the personal portal site and referenced. Thus, if there is a third party intervention,
It is possible to know that, and to check the history such as the date of shopping.

FIG. 6 is a diagram for explaining the types of secret keys and digital certificates. K1 is a secret key of a card issuer (communications carrier), and is a digital signature of an electronic signature attached when the card issuer downloads an electronic certificate of an application or a service provider to an IC card issued by the card issuer. Use for generation. K2 is an electronic certificate of the card issuer (telecommunications carrier), and is used to confirm whether the IC card received by the card issuer is a digital certificate of the received application or service provider. Used to verify digital signatures.

K3 is a card private key generated by the card issuer / communications carrier, and is mainly attached to the electronic certificate when the user's IC card confirms the identity when accessing the personal portal site. It is used to generate a digital signature to be created. K4 is a card-specific electronic certificate generated by the card issuer / communications carrier, and is mainly used for identification when the user's IC card accesses the personal portal site.

K5 is the secret key of the service provider,
The service provider provides service data (individual key related data,
(Signature number, electronic ticket, etc.). K6 is an electronic certificate of the service provider, which is used when the IC card of the user who applied for the service verifies the electronic signature of the service provider attached to the data on the service received from the service provider. I do.

K7 is a service individual secret key generated by each service provider for the service, and is used as needed at the service level. Electronically sign transaction data,
It can be used for encrypted communication with service providers. K
Reference numeral 8 denotes a service individual digital certificate for a service generated by each service provider, and plays a role as a membership card when using the service. It corresponds to a virtual world credit card, cash card, commuter pass, passport, membership card, employee ID card, etc. It is also used to authenticate access to the personal homepage for each service.

Next, an IC card used in the system of the present invention will be described. The IC cards 11 and 131 have IDs for accessing the personal portal site 21.
A number, a password, an e-mail address, a URL, a card individual secret key, a card individual electronic certificate, and the like are stored. Further, authentication information (private key, digital certificate) for each service is also stored, and can be used for personal authentication when accessing various service pages.

FIG. 7 is a view for explaining the file structure of the IC cards 11 and 131 used in the system of the present invention.
The IC card has a file area 111 for a personal portal site and an information storage file 1 for each service field.
12 are provided. The personal portal site file area 111 is provided with a personal attribute information storage file 111A that can be used in common.

In the personal attribute information storage file 111A,
The name, date of birth, gender, area of residence (address), biometrics information, etc. are stored, and individual URLs, ID numbers, card individual secret keys, card individual electronic certificates, etc. are used as information for accessing the personal portal site. It is memorized.
On the other hand, the information storage file 112 for each service field includes
A user ID number, an expiration date of the ID, user information (private key for service, electronic certificate for service), an electronic certificate of a service provider, and the like are recorded.

The IC card may be mounted on a mobile phone as a UICC (universal IC card) 131, and may be used in a vending machine 2, a ticket gate 5, a bank automatic teller machine, or the like. Can be used as well. UICC is the mobile phone 13
Means a plug-in SIM. The memory capacity of the IC card is E
EPROM 16K, 32K, 64K, 128K, etc. can be used according to the purpose.

[0070]

As described above, in the system of the present invention,
Various effects can be produced by interposing a consumer support system provider between the consumer and the service provider and accessing the service provider's homepage via this. The effect (1) is that, through a personal portal site allocated to consumers, it is possible to access various life-related information contents that match their hobbies and preferences through a single interface, and access different homepages for each service. Labor, time and cost can be saved.

The effect (2) is that simple access using an IC card becomes possible. A personal portal site can be accessed with a button operation by inserting an IC card into the terminal. Thereafter, switching to the homepage of various service providers can be arbitrarily performed by a simple operation of the terminal.
The effect (3) is that leakage of personal information can be prevented. Consumers do not disclose personal information to service providers by directly accessing service providers, thereby preventing leakage of personal information and, as a result, reducing the likelihood of receiving unsolicited advertisement emails. Occurs.

The effect (4) is that a reliable service can be provided. By making the service provider a "registration system", it is possible to give a sense of security to consumers and also to prevent troubles on the network. The effect (5) is that it can be extended to transactions in the real world (real world) that does not stay within the network. By using an IC card, electronic values and information can be downloaded from a personal portal site to the IC card and used in the real world. As a result, fields of use such as electronic tickets and electronic money are expanded.

Since the IC card of the present invention has the above-described configuration and functions, it can be suitably used for the system of the present invention. Further, the IC card of the present invention can exert the same effect when it is mounted on a mobile phone.

[Brief description of the drawings]

FIG. 1 is an explanatory diagram of a general consumer support system using an IC card according to the present invention.

FIG. 2 is a diagram showing service contents of a personal portal site.

FIG. 3 is a diagram illustrating a filtering system.

FIG. 4 is a diagram illustrating an online enrollment procedure.

FIG. 5 is a diagram illustrating a validity confirmation agency service when using a service.

FIG. 6 is a diagram illustrating types of a private key and an electronic certificate.

FIG. 7 is a diagram illustrating a file configuration of an IC card used in the system of the present invention.

[Explanation of symbols]

1, 1A, 1B Consumer or user 2 Vending machine 3 POS terminal 4 Kiosk terminal 5 Entrance gate 11, 11A, 11B IC card 12 PC 13 Mobile phone 20 Consumer comprehensive support system provider 21, 21A, 21B Personal portal Site 22 Filtering system 23 Member registration and service reception site 24 Distribution data generation system 25 Service application 25d Service application database 26 Service provider electronic certificate 26d Service provider electronic certificate database 28 Distribution processing system 29 Revocation list server 30 Service Provider 31 Service Provider Homepage 32 Ticket Sales Company 40 Telecommunications Provider 41 Telecommunications Provider Certification Authority 42 Distribution System 50 Service Provider Certification Authority 52 Certificate Authority of Ticket Sales Company 53 Certificate Authority of Bank 121 Reader / Writer 131 IC Card (UICC) Attached or Installed in Mobile Phone

 ────────────────────────────────────────────────── ─── Continuing on the front page (72) Inventor Masaki Hashimoto 1-1-1 Ichigaya-Kagacho, Shinjuku-ku, Tokyo F-term in Dai Nippon Printing Co., Ltd. (reference) 2C005 MA04 MA05 MB01 MB04 MB07 5B035 AA13 BB09 BC00 BC02 5B058 KA12 KA33 KA35 KA38 5B085 AE12 AE23 BG07

Claims (21)

[Claims] (1) A personal portal site of a consumer that can connect to homepages of a plurality of service providers is established on a server of a consumer comprehensive support system provider according to the number of subscribers. (2) The personal portal site is used to authenticate the consumer using a secret code stored on the consumer's unique IC card or generated at any time, and is opened when the authentication procedure ends normally. Yes, (3) The homepages of multiple service providers that open in the personal portal site are
The service can be switched by a simple terminal operation of a consumer. (4) When the consumer accesses the personal portal site, the service required for himself / herself is provided from the homepage of any service provider. An integrated consumer support system using an IC card, which is capable of: 2. When a consumer applies for a subscription to a provider of a comprehensive consumer support system, (1) an I with necessary functions is installed.
A C card is issued and provided to consumers who are subscription applicants, and (2) an individual personal portal site for consumers who can access the homepage of the desired service provider is provided by the comprehensive consumer support system. An integrated consumer support system using an IC card, which is set up on a provider server. 3. When a consumer applies for an additional service of a service provider to a provider of a comprehensive consumer support system, (1) a function required for the additional service is added to an IC card held by the consumer. And (2) the homepage is added to a consumer's personal portal site, or a function required for the service is added to an existing homepage. An integrated consumer support system using the described IC card. 4. The IC card according to claim 1, wherein an application for a consumer to a provider of a comprehensive consumer support system and an application for an additional service can be made online. Consumer comprehensive support system using 5. When a consumer opens a personal portal site to access a service provider's homepage, personal information such as a secret code, a name, an address, and a telephone number of the consumer is provided by a comprehensive consumer support system. 3. The integrated consumer support system using an IC card according to claim 1, wherein the system is cut off by a filtering system of a person and does not flow to a service provider. 6. A personal portal site of a consumer that can be connected to homepages of a plurality of service providers, which is set up on a server of a provider of a comprehensive consumer support system, and (2) the personal portal site, Unique IC with secret code for consumers to open through terminal
The card and (3) the homepages of a plurality of service providers registered on the personal portal site,
(4) consumers receive the services they need
A general consumer support system using an IC card. (1) A personal portal site of a consumer that can connect to a plurality of service provider homepages is established on the server of the consumer comprehensive support system provider according to the number of subscribers. (2) The personal portal site is used to authenticate the consumer using a secret code stored on the consumer's unique IC card or generated at any time, and is opened when the authentication procedure ends normally. Yes, (3) The homepages of multiple service providers that open in the personal portal site are
(4) The consumer can download the electronic value to his / her own IC card by accessing this personal portal site. I
Consumer comprehensive support system using C card. 8. The secret code includes one of an ID number, a password, an e-mail address, a URL, various electronic certificates, random data (random number, date, time, etc.), and an electronic signature. 8. A comprehensive consumer support system using an IC card according to claim 1, claim 5, claim 6, or claim 7. 9. The IC according to claim 1, wherein the services provided include a mobile banking service, a loyalty card service, and a ticketing service. Consumer comprehensive support system using cards. 10. A service that a consumer needs for himself includes downloading of electronic money, downloading of an electronic ticket, and downloading of a digital ticket.
7. An integrated consumer support system using an IC card according to claim 1. 11. The method according to claim 1, wherein online statement delivery can be performed.
A general consumer support system using the IC card according to claim 7. 12. An integrated consumer support system using an IC card according to claim 1, which can mediate the successive distribution of electronic coupons and tickets. 13. An integrated consumer support system using an IC card according to claim 1, wherein an interactive advertisement can be distributed. 14. A license, passport, employee card, credit card, number of various membership cards, ID number of various financial services (insurance, securities, bank, etc.), account number, expiration date,
The personal information relating to life, such as emergency contact information, address book, telephone directory, e-mail address list, etc., can be securely stored and referred to when necessary. A general consumer support system using the IC card according to claim 7. 15. A general consumer using an IC card according to claim 1, wherein log storage for storing a record of processing performed through a personal portal site can be performed. Support system. 16. When a consumer applies for an additional service of the service provider and the service provider is accepted, (1) information necessary for the additional service is stored in an IC card held by the consumer. And functions are added to consumers' personal portal sites through the network,
(2) A general consumer support system, wherein the consumer can enjoy information and functions necessary for the service without going to the service counter. 17. The general consumer support system according to claim 1, wherein the IC card is mounted on or incorporated in a mobile phone. 18. An IC card for accessing a personal portal site according to claim 1, claim 2, claim 6, claim 7, or claim 16, wherein the consumer ID number, password, URL, An IC card storing at least one of a secret key and various electronic certificates (public keys). 19. The IC card according to claim 18, wherein the IC card is used for downloading electronic value such as electronic money, electronic ticket, electronic coupon, and prepaid value from a personal portal site. 20. An IC card used for accessing a personal portal site established by a provider of a general consumer support system, comprising: a consumer ID number, a password,
It has a function of storing at least one of an e-mail address, a URL, a secret key, and various electronic certificates (public keys), and a function of downloading electronic values such as electronic money and electronic tickets from a personal portal site. An IC card, characterized in that: 21. The IC card according to claim 18, wherein the IC card is mounted on or incorporated in a mobile phone.