JP2002207895A - Method for using ic card, information providing method with privilege, information providing method and pay information providing method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To securely preserve policies regarding the transmission and reception of information and to enable an information owner himself/herself to quickly and finely register/change the policies in the system of providing the information through a network. SOLUTION: An individual information owner 29 registers the policies regarding the transmission and reception of the information to an IC card 20' beforehand by using terminal equipment 22. At the time of receiving an information transmission request, an IC card program provided inside the terminal equipment 22 authenticates an individual information acquirer 38, then decides whether the transmission is allowed according to a decision program inside the IC card 20' and transmits a result to an IC card management program inside the terminal equipment 22. In the case that the transmission is allowed and the information specified by the individual information acquirer 38 is the information regarding the individual information owner 29, the IC card management program requests the acquisition of the information to an information acquisition device 24'.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a method for providing information via a network.

[0002]

2. Description of the Related Art Conventionally, in order to provide personal information such as location information and information related to personal information, a location information service provider contracts with an information owner and obtains information automatically obtained from a PHS base station. The location information service provider mediates the location information of the owner and provides it to the information provision target, or the location information service provider automatically obtains information related to the information owner's location information automatically obtained from the PHS base station. Provide to the information owner,
The information owner directly provides the manually provided location information by explicitly specifying the information provision target, or the information owner by explicitly specifying the information provision target by automatically acquiring position information such as GPS There are known methods of providing.

[0003]

With the spread of mobile terminals such as mobile phones and mobile communication services, information unique to individuals, such as positional information, and information such as electronic files owned by individuals is changing. There is an increasing need for services that are transmitted and received via a network and services that provide information related to personally-specific information such as information on the current location and surroundings for location information.

[0004] On the other hand, such information is highly important privacy information, and therefore (1) highly secure handling is required. (2) In addition, it is necessary to easily set and change a policy regarding transmission and reception of information in accordance with the situation and requirements of the information owner who owns the information. The policy regarding transmission / reception of information defines contents and conditions of information transmitted / received. For example, information transmission / reception partner, transmission / reception day of week, transmission / reception time, presence / absence of confirmation at the time of information transmission, and the like.

However, at present, such information transmission and
The policy regarding reception is collectively managed by a third party such as a service provider, and registration or change must be performed via a third party such as a service provider. Therefore, there is a problem that the degree of freedom in registration and change is low, and it is not possible to expect a quick response.In addition, when changing service providers etc., it is necessary to re-register In order to use the services of the service provider, there is also a problem in that each service service provider must be notified of personal information that can identify the information owner, such as a policy regarding transmission and reception of information, a name, and contact information.

[0006] In addition, since the management of information having extremely high privacy, which is a policy regarding transmission and reception of information, is entrusted to a third party such as a service provider, the privacy of the information owner is kept out of reach of the information owner. You will always be at risk of exposure.

[0007] An object of the present invention is to provide a method for providing information with a privilege and an information providing method, in which an information transmission / reception policy can be securely stored, and an information transmission / reception policy can be set quickly and finely by an information owner himself. An object of the present invention is to provide a providing method and a paid information providing method.

[0008]

In order to achieve the above object, according to the present invention, a policy relating to transmission and reception of information via a network is stored in an information owner's IC card, and transmission and reception of this information is performed. Transmission and reception of information are controlled by determining whether transmission and reception are possible in accordance with a policy regarding information.

The use of the IC card owned by the information owner enables quick and detailed setting of information transmission and reception policies, and secure management of the information.

[0010]

Next, embodiments of the present invention will be described with reference to the drawings.

FIG. 1 is a diagram showing a configuration of a personal information disclosure policy IC card according to an embodiment of the present invention.

The IC card 20 has an input / output interface 12, a card management function 13, a security function 14, and a disclosure permission / inhibition determination function 15, and security data 16, personal information disclosure policy data 18, The disclosure permission / non-permission judgment data 17 is stored in the memory 11.

The security data 16 includes personal authentication data such as a secret key, a public key certificate, PIN and fingerprint information,
Card expiration date, IC card issuance date, IC card issuing company, etc. The disclosure permission / non-permission data 17 includes postal code data for converting a postal code into an address or latitude / longitude information, landmark data for converting a landmark into an address or latitude / longitude information, and converting an address into latitude / longitude information. Address data, calendar, etc. The personal information policy data 18 handles policies regarding physical information relating to the current location of the personal information owner, such as a position information disclosure policy, a temperature information disclosure policy, a humidity information disclosure policy, and information regarding the body of the personal information owner. There are policies, for example, a blood glucose information disclosure policy, a pulse information disclosure policy, a blood pressure information disclosure policy, and the like. In the personal information disclosure policy, information necessary for disclosure of personal information is recorded as a combination of an attribute and an attribute value.

FIG. 2 shows a first storage example of a personal information disclosure policy IC card (for an information providing system with a privilege).

FIG. 3 shows a second storage example (for a personal information providing system) of a personal information disclosure policy IC card.

FIG. 4 shows a third storage example of a personal information disclosure policy IC card (for a pay information providing system).

FIG. 5 is a block diagram of a privileged information providing system according to an embodiment of the present invention. Here, the information with privilege is advertisement information of a company or the like, and personal information is position information.

[0018] This information providing system with privilege is the IC shown in FIG.
It provides information with benefits by using a card. The IC card 20, the RW device 21, the terminal device 22, the position information acquisition device 24, the network 25, the personal information management server 26, the network 27, and the advertisement information management server 28 It is configured. The terminal device 22 has a communication unit 23.

Here, it is assumed that the personal information management server 26 is not required to determine whether or not the position information can be disclosed. Terminal device 22
Is, for example, a PC, PDA, mobile phone, PHS or the like. The position information acquisition device 24 is, for example, a GPS, a PHS, or the like. <Communication> Information is transmitted and received between the terminal device 22, the personal information management server 26, and the advertisement information management server 28 via the networks 25 and 27 using a communication function. <Security>-In communication between the networks 25 and 27, the sender always encrypts and transmits the communication contents using a public key method, a common key method, and the like, and the receiver decrypts the received contents and proceeds with each work. Shall be. The advertisement information mediated by the personal information management server 26 is encrypted by the personal information owner 2 without being decrypted by the personal information management server 26 if the advertisement information sender 30 desires.
9 can be sent. <Authentication>-When sending information, be sure to attach the electronic signature of the sender or information creator. When receiving information, the sender or the information creator must be authenticated. Authentication of the personal information owner 29, the personal information management server 26, the advertisement information sender 30, and the position information acquisition device 24 is performed using an electronic signature. <Access to IC Card> Access from the terminal device 22 to the IC card 20 is performed by an IC card program in the terminal device 22 via an IC card management program in the IC card 20. <Timing of updating personal information> ・ Personal information is stored at the start of communication while using IC card 20 and the IC
It is always updated when the use of the card 20 ends or the communication is cut off while the use of the IC card 20 is continued. During communication during use of the IC card 20, only when the position information periodically acquired by the position information acquisition device 24 is different from the previously acquired position information, the personal information owner list in the personal information management server 26 is displayed. It shall be updated. <Update Contents of Personal Information> There are two types of update contents of the personal information owner list in the personal information management server 26. When the communication is started while the IC card 20 is being used, the location information, the acquisition time, and the access ID are set to the changed values. When the use of the IC card 20 is terminated or the communication is interrupted while the use of the IC card 20 is continued, the location information and the access ID are set to nil.
Is set to a value that changes the acquisition time. Access ID
Is fixed such as a telephone number or an IP address, only the position information is set to nil, and the access ID is not changed.

Next, the flow of processing in this embodiment will be described.

The personal information owner 29 registers the advertisement information sender 30 in advance in the position information disclosure policy in the IC card 20.

The IC card 20 and the terminal device 22 are connected to the terminal device 2
After inserting the IC card 20 into the RW device 21 connected to
Perform mutual authentication.

After the mutual authentication, the IC in the terminal device 22
The card program requests the IC card management program in the IC card 20 to authenticate the personal information owner 29 using a body characteristic such as a fingerprint or a password.

The IC card management program in the IC card 20 requests the authentication program in the IC card 20 to authenticate the personal information owner 29.

The authentication program in the IC card 20 authenticates the personal information owner 29 using the personal authentication data in the IC card 20.・ When authentication of personal information owner 29 is completed, IC card 2
A notification of authentication end is sent to the IC card management program in 0.

The IC card management program in the IC card 20 notifies the IC card program in the terminal device 22 that the authentication of the personal information owner 29 has been completed.

The IC card program in the terminal device 22 is as follows: After the authentication of the personal information owner 29 is completed, the position information acquisition device 24 that prompts the personal information owner 29 to input the position information is transmitted to the PHS or GPS or the personal information owner 29. Request acquisition. Transmit the acquired location information, acquisition time, and access ID (IP address, telephone number, etc.) to the personal information owner 29 to the personal information management server 26 set in the location information disclosure policy in the IC card 20.

The personal information management server 26 authenticates the position information acquisition device 24 and updates the corresponding part of the personal information owner list in the personal information management server 26 based on the received information.

The advertisement information sender 30 manages, via the advertisement information management server 28, the conditions of the personal information owner who wants to send an advertisement and the advertisement information that he wants to send on the advertisement information management server 28 via the advertisement information management server 28. The information is transmitted to the server 26, and at the same time, the advertisement information is requested to be transmitted.

Upon receiving a request from the advertisement information sender 30, the personal information management server 26 creates a target person list based on the conditions specified by the advertisement information sender 30. -For the personal information owner 29 who was on the target person list,
The information of the advertisement information sender 30 necessary for the determination of the disclosure is transmitted, and the determination of the disclosure of the position information is requested.

When the IC card program in the terminal device 22 receives the request for disclosure permission / inhibition, the IC card management program in the IC card 20 requests the personal information management server 26 and the advertisement information sender 30 to authenticate and disclose the information. Ask for a decision.

The IC card management program in the IC card 20 requests the authentication program in the IC card 20 to authenticate both the personal information management server 26 and the advertisement information sender 30.

The authentication program in the IC card 20 authenticates the personal information management server 26 and the advertisement information sender 30 using each public key in the location information disclosure policy in the IC card 20. When the authentication of both the personal information management server 26 and the advertisement information sender 30 is completed, an authentication completion notification is issued to the IC card management program in the IC card 20.

After receiving the authentication end notification from the authentication program in the IC card 20, the IC card management program in the IC card 20 requests the disclosure determination program in the IC card 20 to determine whether or not disclosure is possible.

The disclosure determination program in the IC card 20 determines whether or not disclosure is possible in accordance with the location information disclosure policy in the IC card 20, and transmits the determination result to the terminal device via the IC card management program in the IC card 20. 22 to the IC card program. If there is a condition that cannot be determined due to the limitation of the processing capacity or the lack of a DB, etc., the IC card program in the terminal device 22 is transferred to the IC card program in the terminal device 22 via the IC card management program in the IC card 20. Submit the required parts of the disclosure policy and outsource some judgment instead. IC in terminal device 22
The card program determines whether or not the contract has been accepted, and
The information is transmitted to the disclosure determination program in the IC card 20 via the IC card management program in the IC card 20. The disclosure determination program in the IC card 20 determines whether or not to disclose the position information, including the determination result from the IC card program in the terminal device 22, and determines the determination result via the IC card management program in the IC card 20, It transmits to the IC card program in the terminal device 22. Alternatively, the IC in the terminal device 22
Make all disclosure decisions in the card program.

The IC card program in the terminal device 22 is
The disclosure result is transmitted to the personal information management server 26.

The personal information management server 26 transmits the advertising information to the personal information owner 29 only when the result of the determination is acceptable.

The terminal device 22 receives the advertisement information from the personal information management server 26 and displays it on the screen.

FIG. 6 is a block diagram of a privileged information providing system according to a second embodiment of the present invention. Here, the information with privilege is advertisement information of a company or the like, and personal information is position information. In the present embodiment, it is assumed that the disclosure of the position information is determined only by the personal information management server 26.

The communication, security, authentication, access to the IC card, timing for updating the personal information, and the content of the updated personal information are the same as those in the embodiment shown in FIG.

Next, the flow of processing in this embodiment will be described.

The personal information owner 29 registers the advertisement information sender 30 in advance in the position information disclosure policy in the IC card 20.

The IC card 20 and the terminal device 22 are connected to the terminal device 2
After inserting the IC card 20 into the RW device 21 connected to
Perform mutual authentication.

After the mutual authentication, the IC in the terminal device 22
The card program requests the IC card management program in the IC card 20 to authenticate the personal information owner 29 using a body characteristic such as a fingerprint or a password.

The IC card management program in the IC card 20 requests the authentication program in the IC card 20 to authenticate the personal information owner 29.

The authentication program in the IC card 20 authenticates the personal information owner 29 using the personal authentication data in the IC card 20.・ When authentication of personal information owner 29 is completed, IC card 2
A notification of authentication end is sent to the IC card management program in 0.

The IC card management program in the IC card 20 notifies the IC card program in the terminal device 22 that the authentication of the personal information owner 29 has been completed.

The IC card program in the terminal device 22 is as follows: After the authentication of the personal information owner 29 is completed, the PHS, GPS, or the position information acquisition device 24 that prompts the personal information owner 29 to input the position information is sent to the terminal information acquisition device 24. Request acquisition. Transmit the acquired location information, acquisition time, and access ID (IP address, telephone number, etc.) to the personal information owner 29 to the personal information management server 26 set in the location information disclosure policy in the IC card 20.

The personal information management server 26 authenticates the position information acquisition device 24 and updates the corresponding part of the personal information owner list in the personal information management server 26 based on the received information.

The advertisement information sender 30 manages, via the advertisement information management server 28, the conditions of the personal information owner who wants the advertisement to be transmitted and the advertisement information desired to be transmitted on the advertisement information management server 28 via the advertisement information management server 28. The information is transmitted to the server 26, and at the same time, the advertisement information is requested.

Upon receiving a request from the advertisement information sender 30, the personal information management server 26 creates a target person list based on the conditions specified by the advertisement information sender 30. -For the personal information owner 29 who was on the target person list,
A request is made to determine whether to disclose location information based on the access ID to the personal information owner.

When the IC card program in the terminal device 22 receives the request to judge whether or not disclosure is possible, the IC card program in the IC card 20
It requests the IC card management program to authenticate both the personal information management server 26 and the advertisement information sender 30.

The IC card management program in the IC card 20 requests the authentication program in the IC card 20 to authenticate the personal information management server 26 and the advertisement information sender 30.

The authentication program in the IC card 20 authenticates both the personal information management server 26 and the advertisement information sender 30 using each public key in the location information disclosure policy in the IC card 20. When the authentication of both the personal information management server 26 and the advertisement information sender 30 is completed, an authentication completion notification is issued to the IC card management program in the IC card 20.

After receiving the authentication end notification from the authentication program in the IC card 20, the IC card management program in the IC card 20 determines whether or not to permit disclosure in the location information disclosure policy for the corresponding advertisement information sender 30. The necessary part is transmitted to the personal information management server 26 via the IC card program in the terminal device 22.

The personal information management server 26 determines whether or not disclosure is possible based on the location information disclosure policy, and transmits the advertisement information to the personal information owner 29 only when the disclosure is possible.

The terminal device 22 receives the advertisement information from the personal information management server 26 and displays it on the screen.

FIG. 7 is a block diagram of a privileged information providing system according to a third embodiment of the present invention. Here, the information with privilege is advertisement information of a company or the like, and personal information is position information. In the present embodiment, the determination as to whether or not to disclose the position information requires the personal information management server 26 as a part thereof.

The communication, security, authentication, access to the IC card, the timing of updating the personal information, and the updated content of the personal information are the same as those in the embodiment shown in FIGS.
Next, the flow of processing in this embodiment will be described.

The personal information owner 29 registers the advertisement information sender 30 in advance in the position information disclosure policy in the IC card 20.

The IC card 20 and the terminal device 22 are connected to the terminal device 2
After inserting the IC card 20 into the RW device 21 connected to
Perform mutual authentication.

After the mutual authentication, the IC in the terminal device 22
The card program requests the IC card management program in the IC card 20 to authenticate the personal information owner 29 using a body characteristic such as a fingerprint or a password.

The IC card management program in the IC card 20 requests the authentication program in the IC card 20 to authenticate the personal information owner 29.

The authentication program in the IC card 20 authenticates the personal information owner 29 using the personal authentication data in the IC card 20.・ When authentication of personal information owner 29 is completed, IC card 2
A notification of authentication end is sent to the IC card management program in 0.

The IC card management program in the IC card 20 notifies the IC card program in the terminal device 22 that the authentication of the personal information owner 29 has been completed.

The IC card program in the terminal device 22 is as follows: After the authentication of the personal information owner 29 is completed, the PHS, GPS, or the position information acquisition device 24 that prompts the personal information owner 29 to input the position information is sent to the IC card program. Request acquisition. Transmit the acquired location information, acquisition time, and access ID (IP address, telephone number, etc.) to the personal information owner 29 to the personal information management server 26 set in the location information disclosure policy in the IC card 20.

The personal information management server 26 authenticates the position information acquisition device 24 and updates the corresponding part of the personal information owner list in the personal information management server 26 based on the received information.

The advertisement information sender 30 manages, via the advertisement information management server 28, the conditions of the personal information owner who wants the advertisement to be transmitted and the advertisement information desired to be transmitted on the advertisement information management server 28 via the advertisement information management server 28. The information is transmitted to the server 26, and at the same time, the advertisement information is requested to be transmitted.

Upon receiving a request from the advertisement information sender 30, the personal information management server 26 creates a target person list based on the conditions specified by the advertisement information sender 30. -For the personal information owner 29 who was on the target person list,
The information of the advertisement information sender 30 necessary for the determination of the disclosure is transmitted, and the determination of the disclosure of the position information is requested.

When the IC card program in the terminal device 22 receives the request to judge whether or not to permit disclosure, the IC card program in the IC card 20
It requests the IC card management program to authenticate both the personal information management server 26 and the advertisement information sender 30.

The IC card management program in the IC card 20 requests the authentication program in the IC card 20 to authenticate the personal information management server 26 and the advertisement information sender 30.

The authentication program in the IC card 20 authenticates both the personal information management server 26 and the advertisement information sender 30 using each public key in the location information disclosure policy in the IC card 20. When the authentication of both the personal information management server 26 and the advertisement information sender 30 is completed, an authentication completion notification is issued to the IC card management program in the IC card 20.

After receiving the authentication end notification from the authentication program in the IC card 20, the IC card management program in the IC card 20 requests the disclosure determination program in the IC card 20 to determine whether or not disclosure is possible.

The disclosure determination program in the IC card 20 is as follows:
Judgment of whether or not to disclose is performed according to the location information disclosure policy in the IC card 20, and conditions that cannot be judged due to limitations in processing capacity, lack of a DB, etc. To management server 26
The necessary part of the location information disclosure policy in the IC card 20 is transmitted, and instead, a part of the judgment is entrusted.

[0086] The personal information management server 26 determines whether or not the entrustment has been made, and transmits the result to the terminal device 22.

The IC card program in the terminal device 22 transmits the result from the personal information management server 26 to the IC card management program in the IC card 20.

The program for judging the availability in the IC card 20 is as follows.
A determination is made as to whether or not position information can be disclosed, including a result from the personal information management server 26 received via the IC card management program in the IC card 20.
Via the IC card management program in the terminal device 22.

The IC card program in the terminal device 22 is
The disclosure result is transmitted to the personal information management server 26.

The personal information management server 26 transmits the advertisement information to the personal information owner 29 only when the result of the propriety judgment is “OK”.

The terminal device 22 receives the advertisement information from the personal information management server 26 and displays it on the screen.

The determination as to whether or not to disclose may be partially made by the personal information management server 26, and the terminal device 22 may also make the determination including the determination result from the personal information management server 26.

FIG. 8 is a diagram showing the timing and subject of issuing a registered privilege in the information providing system with privilege of the first, second, and third embodiments.

The personal information management server 26 determines a registered privilege with the personal information owner 29. The personal information management server 26 issues a registration privilege to the personal information owner 29 who has registered the position information.

FIG. 9 is a diagram showing the timing and subject of issuing a registered privilege in the information system with privilege of the first, second and third embodiments. The advertisement information sender 30 determines a privilege with the personal information owner 29. -An intermediary fee is determined with the personal information management server 26.

The personal information owner 29 registers the position information in the personal information management server 26. The personal information management server 26 gives a privilege to the personal information owner 29 who has registered the position information.

The advertisement information sender 30 requests the personal information management server 26 to transmit advertisement information.

The personal information management server 26 receives an advertisement information transmission request from the advertisement information transmitter 30, and transmits the advertisement information to the personal information owner 29 if the disclosure is possible. In accordance with the number of personal information owners who have transmitted the advertisement information, the advertisement information transmitter 30 is billed as an advertisement information transmission fee for the sum of the total cost of the privilege and the brokerage fee.

The advertisement information sender 30 receives a request for an advertisement information transmission fee from the personal information management server 26. Pay the advertisement information transmission fee to the personal information management server 26.

FIG. 10 is a diagram showing the timing and subject of issuing a registered privilege in the information system with privilege of the first, second and third embodiments.

In the present example, the timing at which the personal information management server 26 issues a privilege to the personal information owner 29 in the example of FIG. 9 is not after registration of position information but at the same time as advertisement information.

FIG. 11 is a diagram showing the timing and subject of issuing a registered privilege in the information system with privilege of the first, second and third embodiments.

In this example, the personal information management server 26 transmits the advertisement information to the personal information owner 29 in the example of FIG. 10, and then confirms that the personal information owner 29 has browsed and gives a privilege. It is.

FIG. 12 is a diagram showing the timing and subject of issuing a registered privilege in the information system with privilege of the first, second and third embodiments.

The advertisement information sender 30 decides a privilege with the personal information owner 29. -An intermediary fee is determined with the personal information management server 26.

The personal information owner 29 registers the position information in the personal information management server 26.

The personal information management server 26 provides a part of the privilege to the personal information owner 29 who has registered the position information.

The advertisement information sender 30 requests the personal information management server 26 to transmit advertisement information.

The personal information management server 26 receives an advertisement information transmission request from the advertisement information transmitter 30 and, if the disclosure is possible, transmits the advertisement information to the personal information owner 29 and at the same time, Put out. In accordance with the number of personal information owners who have transmitted the advertisement information, the advertisement information transmitter 30 is billed as an advertisement information transmission fee for the sum of the total cost of the privilege and the brokerage fee.

The advertisement information sender 30 receives a request for an advertisement information transmission fee from the personal information management server 26. Pay the advertisement information transmission fee to the personal information management server 26.

FIG. 13 is a diagram showing the timing and subject of issuing a registered privilege in the information system with privilege of the first, second and third embodiments.

In the present example, the personal information management server 26 transmits the advertisement information to the personal information owner 29 in the example of FIG. It is something to put out.

FIG. 14 is a diagram showing the timing and subject of issuing a registered privilege in the information system with privilege of the first, second and third embodiments.

In this example, the timing at which the personal information management server 26 gives out a part of the privilege to the personal information owner 29 in the example of FIG. 13 is not after the registration of the position information but at the same time as the advertisement information.

In the above description of FIG. 8 to FIG. 14, the benefits are cash, electronic cash, discount coupons, points that can be exchanged for merchandise, etc. The communication fee can be used for the payment of the communication fee of the personal information management server 26, and can also be used for payment when using other services mediated by the personal information management server 26.

[0105] The benefits can be received sequentially, periodically, or at any time. The billing and payment of the advertisement information transmission fee is performed sequentially or periodically.

FIG. 15 is a block diagram of a personal information providing system according to the first embodiment of the present invention. The provided personal information is assumed to be position information.

This personal information providing system provides personal information using the IC card shown in FIG.
RW device 21, terminal device 22, position information acquisition device 24, networks 25 and 27, personal information management server 26, and position information management device 31. The terminal device 22 has a communication unit 23. The position information management device 31 has a communication unit 32. Here, the personal information management server 26 is not required to determine whether or not the position information can be disclosed.
Is not fixed. The access ID means an ID itself for accessing the personal information owner 29 and an access method. <Communication> Information transmission and reception between the terminal device 22, the personal information management server 26, and the position information management device 31 are performed via the networks 25 and 27 using a communication function. <Security>-In the communication between the networks 25 and 27, the sender always encrypts and transmits the communication contents using a public key system, a common key system, and the like, and the receiver decrypts the received contents and proceeds with each work. Shall be. The position information mediated by the personal information management server 26 is not decrypted by the personal information management server 26 if desired by the personal information owner 29 and the position information acquirer 33, and is transmitted to the position information acquirer 33 in an encrypted state. Can be sent. <Authentication>-When sending information, be sure to attach the electronic signature of the sender or information creator. When receiving information, the sender or the information creator must be authenticated. Authentication of the personal information owner 29, the personal information management server 26, the position information acquirer 33, and the position information acquisition device 24 is performed using an electronic signature. <Access to IC card> From terminal device 22 to IC card 2
The access to 0 is performed by the IC card program in the terminal device 22 via the IC card management program in the IC card 20. <Timing for updating the access ID>-The access ID is used when the communication is started while the IC card 20 is being used.
It shall be updated whenever the use of the IC card 20 is completed or the communication is disconnected while the use of the IC card 20 is continued. <Update Contents of Personal Information> There are two types of update contents of the personal information owner list in the personal information management server 26. At the start of communication during use of the IC card 20, the location information, the acquisition time, and the access ID are set to the changed values. When the use of the IC card 20 is completed or the communication is interrupted while the use of the IC card 20 is continued, nil is set to the access ID and a value with a changed acquisition time is set.

Next, the flow of processing in this embodiment will be described.

The personal information owner 29 registers the position information management device 31 in advance in the position information disclosure policy in the IC card 20.

The IC card 20 and the terminal device 22 are connected to the terminal device 2
After inserting the IC card 20 into the RW device 21 connected to
Perform mutual authentication.

After the mutual authentication, the IC in the terminal device 22
The card program requests the IC card management program in the IC card 20 to authenticate the personal information owner 29 using a body characteristic such as a fingerprint or a password.

The IC card management program in the IC card 20 requests the authentication program in the IC card 20 to authenticate the personal information owner 29.

The authentication program in the IC card 20 authenticates the personal information owner 29 using the personal authentication data in the IC card 20.・ If authentication of personal information owner 29 is completed, IC card 2
Send an authentication end notification to the IC card management program in 0.

The IC card management program in the IC card 20 notifies the IC card program in the terminal device 22 that the authentication of the personal information owner 29 has been completed.

After the authentication of the personal information owner 29 is completed, the IC card program stored in the terminal device 22 becomes the personal information owner 2
The access ID (IP address, telephone number, etc.) to 9 and the acquisition time are transmitted to the personal information management server 26 set in the location information disclosure policy in the IC card 20.

The personal information management server 26 authenticates the position information acquisition device 24 and updates the corresponding part of the personal information owner list in the personal information management server 26 based on the received information.

The location information acquirer 33 has the ID or name of the personal information owner 29 whose location information is to be acquired,
Alternatively, both are designated, and the personal information management server 26 is requested to acquire the position information via the position information management device 31.

Upon receiving the request from the position information acquirer 33, the personal information management server 26 sends the position information acquirer 33 necessary for determining whether or not disclosure is possible to the target personal information owner 29 designated by the position information acquirer 33. And requests the disclosure of location information.

When the IC card program in the terminal device 22 receives the position information disclosure request, the IC card management program in the IC card 20 authenticates and discloses both the personal information management server 26 and the position information acquirer 33. Ask for a decision.

The IC card management program in the IC card 20 requests the authentication program in the IC card 20 to authenticate the personal information management server 26 and the location information acquirer 33.

The authentication program in the IC card 20 authenticates both the personal information management server 26 and the location information acquirer 33 using each public key in the location information disclosure policy in the IC card 20. When the authentication of the personal information management server 26 and the position information acquirer 33 is completed, an authentication completion notification is issued to the IC card management program in the IC card 20.

After receiving the authentication end notification from the authentication program in the IC card 20, the IC card management program in the IC card 20 requests the disclosure determination program in the IC card 20 to determine whether or not disclosure is possible.

The disclosure determination program in the IC card 20 determines whether or not disclosure is possible according to the location information disclosure policy in the IC card 20. -The judgment result is transmitted to the IC card program in the terminal device 22 via the IC card management program in the IC card 20. If there is a condition that cannot be determined due to the limitation of the processing capacity or the lack of a DB, etc., a necessary part of the disclosure policy to the IC card program in the terminal device 22 via the IC card management program in the IC card 20 And commission some judgment instead. The IC card program in the terminal device 22 determines whether or not entrusted, and the result is stored in the IC card 20.
The information is transmitted to the disclosure determination program in the IC card 20 via the IC card management program. The disclosure determination program in the IC card 20 determines whether or not to disclose the position information, including the determination result from the IC card program in the terminal device 22,
The judgment result is transmitted to the IC card program in the terminal device 22 via the IC card management program in the IC card 20.

[0124] The IC card program in the terminal device 22 is as follows: Only when the determination is acceptable, the position information acquisition device 24 that prompts the PHS, GPS, or personal information owner 29 to input the position information acquires the position information. Request. -The acquired position information and acquisition time are transmitted to the personal information management server 26 set in the position information disclosure policy in the IC card 20.

The personal information management server 26 transmits the received position information and acquisition time of the target personal information owner 29 to the position information acquirer 33. -If additional information is set in the location information disclosure policy, the location information is transmitted, for example, in a format in which the location information is plotted on a map.

The position information management device 31 receives the position information and the acquisition time of the target personal information owner 29 from the personal information management server 26 and displays them on the screen.

It should be noted that the determination as to whether or not to disclose personal information may be made by an IC card management program in the terminal device 22.

FIG. 16 is a configuration diagram of a personal information providing system according to the second embodiment of the present invention. Here, the provided personal information is assumed to be position information. In the present embodiment, it is assumed that the determination as to whether or not the position information can be disclosed is made only by the personal information management server 26, and the access ID is not fixed. Access ID
Means the ID itself for accessing the personal information owner 29 and the access method.

Communication, security, authentication, access to the IC card, access ID update timing, and personal information update content are the same as those in the embodiment shown in FIG.

Next, the flow of processing in this embodiment will be described.

The personal information owner 29 registers the position information acquirer 33 in advance in the position information disclosure policy in the IC card 20.

The IC card 20 and the terminal device 22 are connected to the terminal device 2
After inserting the IC card 20 into the RW device 21 connected to
Perform mutual authentication.

After the mutual authentication is completed, the IC in the terminal device 22
The card program requests the IC card management program in the IC card 20 to authenticate the personal information owner 29 using a body characteristic such as a fingerprint or a password.

The IC card management program in the IC card 20 requests the authentication program in the IC card 20 to authenticate the personal information owner 29.

The authentication program in the IC card 20 authenticates the personal information owner 29 using the personal authentication data in the IC card 20.・ When authentication of personal information owner 29 is completed, IC card 2
A notification of authentication end is sent to the IC card management program in 0.

The IC card management program in the IC card 20 notifies the IC card program in the terminal device 22 that the authentication of the personal information owner 29 has been completed.

After the authentication of the personal information owner 29 is completed, the IC card program in
The access ID (IP address, telephone number, etc.) to 9 and the acquisition time are transmitted to the personal information management server 26 set in the location information disclosure policy in the IC card 20.

The personal information management server 26 authenticates the position information acquisition device 24, and updates the corresponding part of the personal information owner list in the personal information management server 26 based on the received information.

The position information acquirer 33 designates the ID and / or name of the personal information owner 29 whose position information is to be obtained, and obtains the position information from the personal information management server 26 via the position information management device 31. Ask for.

Upon receiving the request from the position information acquirer 33, the personal information management server 26 requests the target personal information owner 29 designated by the position information acquirer 33 to disclose the position information. When the IC card program in the terminal device 22 receives the position information disclosure request, it requests the IC card management program in the IC card 20 to authenticate both the personal information management server 26 and the position information acquirer 33 and determine whether disclosure is possible. I do.

The IC card management program in the IC card 20 requests the authentication program in the IC card 20 to authenticate the personal information management server 26 and the location information acquirer 33.

The authentication program in the IC card 20 authenticates both the personal information management server 26 and the location information acquirer 33 using each public key in the location information disclosure policy in the IC card 20. When the authentication of the personal information management server 26 and the position information acquirer 33 is completed, an authentication completion notification is issued to the IC card management program in the IC card 20.

After receiving the authentication end notification from the authentication program in the IC card 20, the IC card management program in the IC card 20 is required to determine whether or not the location information disclosure policy can be disclosed to the location information acquirer 33. The portion is transmitted to the personal information management server 26 via the IC card program in the terminal device 22.

The personal information management server 26 determines whether or not disclosure is possible based on the location information disclosure policy, and requests the personal information owner 29 to transmit location information only when the disclosure is possible.

The IC card program in the terminal device 22 is as follows: When a position information transmission request is received, the position information acquisition device 24 that prompts the PHS, GPS, or personal information owner 29 to input the position information acquires the position information. Request. -The acquired position information and acquisition time are transmitted to the personal information management server 26 set in the position information disclosure policy in the IC card 20.

The personal information management server 26 transmits the received position information and acquisition time of the target personal information owner 29 to the position information acquirer 33. -If additional information is set in the location information disclosure policy, the location information is transmitted, for example, in a format in which the location information is plotted on a map.

The position information management device 31 receives the position information and the acquisition time of the target personal information owner 29 from the personal information management server 26 and displays them on the screen.

FIG. 17 is a configuration diagram of a personal information providing system according to the third embodiment of the present invention. Here, the provided personal information is assumed to be position information. In the present embodiment, it is assumed that the personal information management server 26 is required as a part of the determination as to whether or not to disclose personal information, and the access ID is not fixed. access
The ID means an ID itself for accessing the personal information owner 29 and an access method.

Communication, security, authentication, access to the IC card, access ID update timing, and personal information update content are the same as those in the embodiment shown in FIGS.

Next, the flow of processing in this embodiment will be described.

The personal information owner 29 registers the position information acquirer 33 in advance in the position information disclosure policy in the IC card 20.

The IC card 20 and the terminal device 22 are connected to the terminal device 2
After inserting the IC card 20 into the RW device 21 connected to
Perform mutual authentication.

After the mutual authentication, the IC in the terminal device 22
The card program requests the IC card management program in the IC card 20 to authenticate the personal information owner 29 using a body characteristic such as a fingerprint or a password.

The IC card management program in the IC card 20 requests the authentication program in the IC card 20 to authenticate the personal information owner 29.

The authentication program in the IC card 20 authenticates the personal information owner 29 using the personal authentication data in the IC card 20.・ When authentication of personal information owner 29 is completed, IC card 2
A notification of authentication end is sent to the IC card management program in 0.

The IC card management program in the IC card 20 informs the IC card program in the terminal device 22 that the personal information owner 29 has been authenticated.

After the authentication of the personal information owner 29 is completed, the IC card program in
The access ID (IP address, telephone number, etc.) to 9 and the acquisition time are transmitted to the personal information management server 26 set in the location information disclosure policy in the IC card 20.

The personal information management server 26 authenticates the position information acquisition device 24 and updates the corresponding part of the personal information owner list in the personal information management server 26 based on the received information.

The position information acquirer 33 specifies the ID or the name of the personal information owner 29 from which the position information is to be obtained, or both, and obtains the position information from the personal information management server 26 via the position information management device 31. Ask for.

When the personal information management server 26 receives a request from the position information acquirer 33, the personal information management server 26 sends the position information acquirer 33 necessary for the target personal information owner 29 designated by the position information acquirer 33 to determine whether or not disclosure is possible. And requests the disclosure of location information.

When the IC card program in the terminal device 22 receives the position information disclosure request, the IC card management program in the IC card 20 authenticates the personal information management server 26 and the position information acquirer 33, and determines whether or not the information can be disclosed. Ask for a decision.

The IC card management program in the IC card 20 requests the authentication program in the IC card 20 to authenticate the personal information management server 26 and the location information acquirer 33.

The authentication program in the IC card 20 authenticates both the personal information management server 26 and the location information acquirer 33 using each public key in the location information disclosure policy in the IC card 20. When the authentication of the personal information management server 26 and the position information acquirer 33 is completed, an authentication completion notification is issued to the IC card management program in the IC card 20.

After receiving the authentication end notification from the authentication program in the IC card 20, the IC card management program in the IC card 20 requests the disclosure determination program in the IC card 20 to determine whether or not disclosure is possible.

The disclosure determination program in the IC card 20 is as follows.
Judgment of whether or not to disclose is performed according to the location information disclosure policy in the IC card 20, and conditions that cannot be judged due to the limitation of processing capacity or lack of a DB, etc. The necessary part of the disclosure policy is transmitted to the management server 26, and a partial judgment is entrusted instead.

[0166] The personal information management server 26 determines whether or not the entrustment has been made, and transmits the result to the terminal device 22.

The IC card program in the terminal device 22 transmits the result from the personal information management server 26 to the IC card management program in the IC card 20.

The program for judging the availability in the IC card 20 is as follows.
It determines whether or not to disclose the position information, including the result from the personal information management server 26 received via the IC card management program in the IC card 20.

The IC card program in the terminal device 22 is as follows: Only when the determination result is acceptable, is the PHS, GPS, or the position information acquisition device 24 that prompts the personal information owner 29 to input the position information to acquire the position information. Request. -The acquired position information and acquisition time are transmitted to the personal information management server 26 set in the position information disclosure policy in the IC card 20.

The personal information management server 26 transmits the received position information and acquisition time of the target personal information owner 29 to the position information acquirer 33. -If additional information is set in the location information disclosure policy, the location information is transmitted, for example, in a format in which the location information is plotted on a map.

The location information management device 31 receives the location information and the acquisition time of the target personal information owner 29 from the personal information management server 26, and displays them on the screen.

Note that a part of the determination as to whether or not to disclose personal information may be performed by the personal information management server 26, and the terminal device 22 may make a determination including the determination result from the personal information management server 26.

FIG. 18 is a configuration diagram of a personal information providing system according to the fourth embodiment of the present invention. Here, the provided personal information is assumed to be position information. In the present embodiment, it is assumed that the personal information management server 26 is not required for determining whether or not the position information can be disclosed, and the access ID is fixed. The access ID means an ID itself for accessing the personal information owner 29 and an access method.

Communication, security, authentication, access to the IC card, access ID update timing, and personal information update content are the same as those in the embodiments shown in FIGS. 15, 16 and 17.

Next, the flow of processing in this embodiment will be described.

The personal information owner 29 registers the position information acquirer 33 in advance in the position information disclosure policy in the IC card 20.

The IC card 20 and the terminal device 22 are connected to the terminal device 2
After inserting the IC card 20 into the RW device 21 connected to
Perform mutual authentication.

After the mutual authentication is completed, the IC in the terminal device 22
The card program requests the IC card management program in the IC card 20 to authenticate the personal information owner 29 using a body characteristic such as a fingerprint or a password.

The IC card management program in the IC card 20 requests the authentication program in the IC card 20 to authenticate the personal information owner 29.

The authentication program in the IC card 20 authenticates the personal information owner 29 using the personal authentication data in the IC card 20.・ When authentication of personal information owner 29 is completed, IC card 2
A notification of authentication end is sent to the IC card management program in 0.

The IC card management program in the IC card 20 notifies the IC card program in the terminal device 22 that the authentication of the personal information owner 29 has been completed.

[0182] The location information acquirer 33 has the ID or name of the personal information owner 29 whose location information is to be acquired.
Alternatively, an access ID (telephone number, fixed IP address, etc.) is specified, and the personal information management server 26 is requested to acquire position information via the position information management device 31.

Upon receiving a request from the position information acquirer 33, the personal information management server 26 sends the position information acquirer 33 necessary for the target personal information owner 29 designated by the position information acquirer 33 to determine whether or not disclosure is possible. And requests the disclosure of location information.

When the IC card program in the terminal device 22 receives the position information disclosure request, the IC card management program in the IC card 20 authenticates the personal information management server 26 and the position information acquirer 33 and authenticates or discloses the information. Ask for a decision.

The IC card management program in the IC card 20 requests the authentication program in the IC card 20 to authenticate the personal information management server 26 and the location information acquirer 33.

The authentication program in the IC card 20 authenticates both the personal information management server 26 and the location information acquirer 33 using each public key in the location information disclosure policy in the IC card 20. When the authentication of the personal information management server 26 and the position information acquirer 33 is completed, an authentication completion notification is issued to the IC card management program in the IC card 20.

After receiving the authentication end notification from the authentication program in the IC card 20, the IC card management program in the IC card 20 requests the disclosure determination program in the IC card 20 to determine whether or not to permit disclosure.

The disclosure determination program in the IC card 20 determines whether or not disclosure is possible according to the location information disclosure policy in the IC card 20. -The judgment result is transmitted to the IC card program in the terminal device 22 via the IC card management program in the IC card 20. If there is a condition that cannot be determined due to the limitation of the processing capacity or the lack of a DB, etc., a necessary part of the disclosure policy to the IC card program in the terminal device 22 via the IC card management program in the IC card 20 And commission some judgment instead. The IC card program in the terminal device 22 determines whether or not entrusted, and the result is stored in the IC card 20.
The information is transmitted to the disclosure determination program in the IC card 20 via the IC card management program. The disclosure determination program in the IC card 20 determines whether or not to disclose the position information, including the determination result from the IC card program in the terminal device 22,
The judgment result is transmitted to the IC card program in the terminal device 22 via the IC card management program in the IC card 20.

[0189] The IC card program in the terminal device 22 is as follows: Only when it is possible to determine whether or not the position information is acquired, the position information acquisition device 24 that prompts the personal information owner 29 to enter the position information is acquired. Request. -The acquired position information and acquisition time are transmitted to the personal information management server 26 set in the position information disclosure policy in the IC card 20.

The personal information management server 26 transmits the received position information and acquisition time of the target personal information owner 29 to the position information acquirer 33. -If additional information is set in the location information disclosure policy, the location information is transmitted, for example, in a format in which the location information is plotted on a map.

The position information management device 31 receives the position information and the acquisition time of the target personal information owner 29 from the personal information management server 26 and displays them on the screen.

[0192] The personal information disclosure determination is made by the terminal device 22.
It may be performed by the IC card management program in the inside.

FIG. 19 is a configuration diagram of a personal information providing system according to the fifth embodiment of the present invention. Here, the provided personal information is assumed to be position information. In the present embodiment, it is assumed that the determination as to whether or not to disclose personal information is made only by the personal information management server 26, and the access ID is fixed. The access ID means an ID itself for accessing the personal information owner 29 and an access method.

Communication, security, authentication, access to the IC card, access ID update timing, and personal information update content are the same as those in the embodiments shown in FIGS.

Next, the flow of processing in this embodiment will be described.

The personal information owner 29 registers the position information acquirer 33 in advance in the position information disclosure policy in the IC card 20.

The IC card 20 and the terminal device 22 are connected to the terminal device 2
After inserting the IC card 20 into the RW device 21 connected to
Perform mutual authentication.

After the mutual authentication, the IC in the terminal device 22
The card program requests the IC card management program in the IC card 20 to authenticate the personal information owner 29 using a body characteristic such as a fingerprint or a password.

The IC card management program in the IC card 20 requests the authentication program in the IC card 20 to authenticate the personal information owner 29.

The authentication program in the IC card 20 authenticates the personal information owner 29 using the personal authentication data in the IC card 20.・ When authentication of personal information owner 29 is completed, IC card 2
A notification of authentication end is sent to the IC card management program in 0.

The IC card management program in the IC card 20 notifies the IC card program in the terminal device 22 that the personal information owner 29 has been authenticated.

[0202] The location information acquirer 33 has the access ID (telephone number, fixed IP address, etc.) of the ID or name of the personal information owner 29 from which the location information is to be acquired, or both.
Is designated, and the personal information management server 26 is requested to acquire position information via the position information management device 31.

Upon receiving the request from the position information acquirer 33, the personal information management server 26 requests the target personal information owner 29 designated by the position information acquirer 33 to disclose the position information.

When the IC card program in the terminal device 22 receives the position information disclosure request, the IC card program in the IC card 20
It requests the card management program to authenticate both the personal information management server 26 and the location information acquirer 33 and determine whether or not disclosure is possible.

The IC card management program in the IC card 20 requests the authentication program in the IC card 20 to authenticate the personal information management server 26 and the location information acquirer 33.

The authentication program in the IC card 20 authenticates both the personal information management server 26 and the location information acquirer 33 using each public key in the location information disclosure policy in the IC card 20. When the authentication of the personal information management server 26 and the position information acquirer 33 is completed, an authentication completion notification is issued to the IC card management program in the IC card 20.

After receiving the authentication end notification from the authentication program in the IC card 20, the IC card management program in the IC card 20 is necessary to determine whether or not the location information disclosure policy can be disclosed to the corresponding location information acquirer 33. The portion is transmitted to the personal information management server 26 via the IC card program in the terminal device 22.

[0208] The personal information management server 26 determines whether or not disclosure is possible based on the location information disclosure policy, and requests the personal information owner 29 to transmit location information only when the disclosure is possible.

[0209] The IC card program in the terminal device 22 is as follows: Upon receiving a position information transmission request, the position information acquisition device 24 that prompts the PHS, GPS, or personal information owner 29 to input the position information acquires the position information. Request. -The acquired position information and acquisition time are transmitted to the personal information management server 26 set in the position information disclosure policy in the IC card 20.

[0210] The personal information management server 26 transmits the received position information and acquisition time of the target personal information owner 29 to the position information acquirer 33. -If additional information is set in the location information disclosure policy, the location information is transmitted, for example, in a format in which the location information is plotted on a map.

[0211] The position information management device 31 receives the position information and the acquisition time of the target personal information owner 29 from the personal information management server 26, and displays them on the screen.

FIG. 20 is a configuration diagram of a personal information providing system according to the sixth embodiment of the present invention. Here, the provided personal information is assumed to be position information. In the present embodiment, it is assumed that the personal information management server 26 is required as a part of the determination as to whether or not to disclose personal information, and that the access ID is fixed. access
The ID means an ID itself for accessing the personal information owner 29 and an access method.

Communication, security, authentication, access to the IC card, access ID update timing, and personal information update content are the same as those in the embodiments shown in FIGS.

Next, the flow of processing in this embodiment will be described.

[0215] The personal information owner 29 registers the position information acquirer 33 in advance in the position information disclosure policy in the IC card 20.

The IC card 20 and the terminal device 22 are connected to the terminal device 2
After inserting the IC card 20 into the RW device 21 connected to
Perform mutual authentication.

After the mutual authentication is completed, the IC in the terminal device 22
The card program requests the IC card management program in the IC card 20 to authenticate the personal information owner 29 using a body characteristic such as a fingerprint or a password.

The IC card management program in the IC card 20 requests the authentication program in the IC card 20 to authenticate the personal information owner 29.

The authentication program in the IC card 20 authenticates the personal information owner 29 using the personal authentication data in the IC card 20.・ When authentication of personal information owner 29 is completed, IC card 2
A notification of authentication end is sent to the IC card management program in 0.

[0220] The IC card management program in the IC card 20 notifies the IC card program in the terminal device 22 of the end of authentication of the personal information owner 29.

The location information acquirer 33 specifies the ID and / or name of the personal information owner 29 whose location information is to be acquired and the access ID (telephone number, fixed IP address, etc.), It requests the personal information management server 26 to acquire position information via the interface 31.

Upon receiving the request from the position information acquirer 33, the personal information management server 26 sends the position information acquirer 33 necessary for the target personal information owner 29 designated by the position information acquirer 33 to determine whether or not disclosure is possible. And requests the disclosure of location information.

When the IC card program in the terminal device 22 receives the position information disclosure request, the IC card program in the IC card 20
It requests the card management program to authenticate both the personal information management server 26 and the location information acquirer 33 and determine whether or not disclosure is possible.

[0224] The IC card management program in the IC card 20 requests the authentication program in the IC card 20 to authenticate the personal information management server 26 and the location information acquirer 33.

The authentication program in the IC card 20 authenticates both the personal information management server 26 and the location information acquirer 33 using each public key in the location information disclosure policy in the IC card 20. When the authentication of the personal information management server 26 and the position information acquirer 33 is completed, an authentication completion notification is issued to the IC card management program in the IC card 20.

After receiving the authentication end notification from the authentication program in the IC card 20, the IC card management program in the IC card 20 requests the disclosure determination program in the IC card 20 to determine whether or not disclosure is possible.

The disclosure judgment program in the IC card 20 is as follows.
Judgment of whether or not to disclose is performed according to the location information disclosure policy in the IC card 20. For conditions that cannot be judged due to limitations in processing capacity, lack of a DB, etc., personal information is determined via the IC card management program in the IC card 20. The necessary part of the disclosure policy is transmitted to the management server 26, and a partial judgment is entrusted instead.

[0228] The personal information management server 26 determines whether or not the entrustment is permitted, and transmits the result to the terminal device 22.

The IC card program in the terminal device 22 transmits the result from the personal information management server 26 to the IC card management program in the IC card 20.

[0230] The availability determination program in the IC card 20 is as follows.
It determines whether or not to disclose the position information, including the result from the personal information management server 26 received via the IC card management program in the IC card 20.

[0231] The IC card program in the terminal device 22 is as follows: Only when the determination result is acceptable, is the PHS or GPS, or the location information acquisition device 24 that prompts the personal information owner 29 to input the location information to acquire the location information. Request. -The acquired position information and acquisition time are transmitted to the personal information management server 26 set in the position information disclosure policy in the IC card 20.

The personal information management server 26 transmits the received position information and acquisition time of the target personal information owner 29 to the position information acquirer 33. -If additional information is set in the location information disclosure policy, the location information is transmitted, for example, in a format in which the location information is plotted on a map.

The position information management device 31 receives the position information and the acquisition time of the target personal information owner 29 from the personal information management server 26 and displays them on the screen.

Note that a part of the determination as to whether or not to disclose personal information may be performed by the personal information management server 26, and the terminal device 22 may make a determination including the determination result from the personal information management server 26.

FIG. 21 is a configuration diagram of a personal information providing system according to the seventh embodiment of the present invention. Here, the provided personal information is assumed to be position information.

The communication, security, authentication, access to the IC card, the timing of updating the access ID, and the content of the update of the personal information are the same as those in the embodiments shown in FIGS.

Next, the flow of processing in this embodiment will be described.

The personal information owner 29 registers the position information acquirer 33 in advance in the position information disclosure policy in the IC card 20.

The IC card 20 and the terminal device 22 are connected to the terminal device 2
After inserting the IC card 20 into the RW device 21 connected to
Perform mutual authentication.

After the mutual authentication is completed, the IC in the terminal device 22
The card program requests the IC card management program in the IC card 20 to authenticate the personal information owner 29 using a body characteristic such as a fingerprint or a password.

The IC card management program in the IC card 20 requests the authentication program in the IC card 20 to authenticate the personal information owner 29.

The authentication program in the IC card 20 authenticates the personal information owner 29 using the personal authentication data in the IC card 20.・ When authentication of personal information owner 29 is completed, IC card 2
A notification of authentication end is sent to the IC card management program in 0.

The IC card management program in the IC card 20 informs the IC card program in the terminal device 22 that the authentication of the personal information owner 29 has been completed.

The personal information owner 29 is the personal information owner 29
After the authentication is completed, a position information transmission request to the specific position information acquirer 33 set in the position information disclosure policy in the IC card 20 is input to the terminal device 22.

[0245] The IC card program in the terminal device 22 is as follows.
S or requests the personal information owner 29 to acquire positional information from the positional information acquiring device 24 that prompts the user to enter positional information. -Acquired location information, acquisition time, and corresponding location information acquirer 3
The access ID (IP address, telephone number, etc.) of No. 3 is transmitted to the personal information management server 26 set in the location information disclosure policy in the IC card 20.

The personal information management server 26 authenticates the position information acquisition device 24 and transmits the position information of the personal information owner 29 and the acquisition time to the position information acquirer 33. -If additional information is set in the location information disclosure policy, the location information is transmitted, for example, in a format in which the location information is plotted on a map.

The position information management device 31 receives the position information and the acquisition time of the target personal information owner 29 from the personal information management server 26 and displays them on the screen.

FIG. 22 is a diagram showing the exchange of information between the personal information management server 26 and the position information acquirer 33 when the position information acquirer 33 pays an intermediary fee in the embodiment of FIGS. is there.

An intermediary fee is determined between the personal information management server 26 and the location information acquirer 33. The position information acquirer 33 requests the personal information management server 26 to acquire position information. The personal information management server 26 receives the position information acquisition request from the position information acquirer 33, and transmits the position information to the position information acquirer 33 if the disclosure is possible.

Also, an intermediary fee is charged to the position information acquirer 33. The position information acquirer 33 receives the position information and the brokerage fee request from the personal information management server 26, and pays the brokerage fee to the personal information management server 26. The billing and payment of the brokerage fee is performed sequentially or periodically.

FIG. 23 is a diagram showing the exchange of information between the personal information owner 29 and the personal information management server 26 when the personal information owner 29 pays the mediation fee in the embodiment of FIGS. is there.

An intermediary fee is determined between the personal information management server 26 and the personal information owner 29. The personal information owner 29 requests the personal information management server 26 to transmit position information. The personal information management server 26 receives the position information transmission request from the personal information owner 29, and transmits the position information to the position information acquirer 33 if the disclosure is possible. In addition, an intermediary fee is charged to the personal information owner 29.

The personal information owner 29 receives the intermediary fee request from the personal information management server 26, and
Pay the brokerage fee to 6. The billing and payment of the brokerage fee is performed sequentially or periodically.

FIG. 24 is a configuration diagram of a pay information providing system according to an embodiment of the present invention. Personal information is assumed to be position information, and paid information is assumed to be information around the current location.

The pay information providing system of this embodiment comprises an IC card 20, an RW device 21, a terminal device 22, a position information acquiring device 24, networks 25 and 27, a personal information management server 26, and a current location surrounding information management server 34. Then, the personal information owner 29 acquires pay information by using his / her position information. The terminal device 22 has a communication unit 23. <Communication> Information transmission and reception between the terminal device 22, the personal information management server 26, and the current location peripheral information management server 34 are performed via the networks 25 and 27 using communication functions. <Security>-In the communication between the networks 25 and 27, the sender always encrypts and transmits the communication contents using a public key system, a common key system, and the like, and the receiver decrypts the received contents and proceeds with each work. Shall be. The position information mediated by the personal information management server 26 is not decrypted by the personal information management server 26 if desired by the personal information owner 29 and the current location surrounding information sender 35, and is encrypted without being encrypted by the current location surrounding information sender. 35. <Authentication>-When sending information, be sure to attach the electronic signature of the sender or information creator. When receiving information, the sender or the information creator must be authenticated. Authentication of the personal information owner 29, the personal information management server 26, the current location surrounding information transmitter 35, and the position information acquisition device 24 is performed using an electronic signature. <Access to IC card> From terminal device 22 to IC card 2
The access to 0 is performed by the IC card program in the terminal device 22 via the IC card management program in the IC card 20.

Next, the flow of processing in this embodiment will be described.

[0257] The personal information owner 29 registers the current location peripheral information transmitter 35 in the location information disclosure policy in the IC card 20 in advance.

The IC card 20 and the terminal device 22 are connected to the terminal device 2
After inserting the IC card 20 into the RW device 21 connected to
Perform mutual authentication.

After the mutual authentication is completed, the IC in the terminal device 22
The card program requests the IC card management program in the IC card 20 to authenticate the personal information owner 29 using a body characteristic such as a fingerprint or a password.

The IC card management program in the IC card 20 requests the authentication program in the IC card 20 to authenticate the personal information owner 29.

The authentication program in the IC card 20 authenticates the personal information owner 29 using the personal authentication data in the IC card 20.・ When authentication of personal information owner 29 is completed, IC card 2
A notification of authentication end is sent to the IC card management program in 0.

The IC card management program in the IC card 20 notifies the IC card program in the terminal device 22 that the authentication of the personal information owner 29 has been completed.

The personal information owner 29 is the personal information owner 29
After the end of the authentication, the terminal device 22 inputs a request for obtaining the current location surrounding information to the specific current location surrounding information sender 35 set in the location information disclosure policy in the IC card 20 to the terminal device 22.

The IC card program in the terminal device 22 includes: a position information acquisition device which receives a request from the personal information owner 29 to acquire information on the vicinity of the current location and prompts the personal information owner 29 to input position information. 24 to request the acquisition of the position information. -The acquired location information, the acquisition time, and the access ID (IP address, telephone number, etc.) of the current location surrounding information sender 35
The information is transmitted to the personal information management server 26 set in the location information disclosure policy in the IC card 20.

The personal information management server 26 authenticates the position information acquisition device 24 and, if necessary, converts the representation format of the position information, and then sends it to the current location peripheral information management server 34, whereupon the position information of the personal information owner 29 is obtained. And send the acquisition time.

The current location surrounding information management server 34 includes: the personal information management server 26 or the personal information owner 2
8 is performed. After the end of the authentication, based on the position information sent from the personal information management server 26, the current location surrounding information is searched from the database, and the result is transmitted to the personal information management server 26.

The personal information management server 26 transmits the received current location information peripheral information to the personal information owner 29. When the personal information owner 29 requests additional information, the position information is transmitted in a format in which the position information is plotted on a map, for example.

The terminal device 22 receives the current location surrounding information and the acquisition time from the personal information management server 26, and displays them on the screen.

FIG. 25 shows the personal information owner 29, the personal information management server 26, and the current location surrounding information sender 35 when the personal information owner 29 has contracted with the current location surrounding information sender 35 in the embodiment of FIG. It is a figure showing information exchanged between.

An information fee is determined between the personal information owner 29 and the current location peripheral information transmitter 35. An intermediary fee is determined between the personal information owner 29 and the personal information management server 26. The personal information owner 29 requests the personal information management server 26 to obtain a current location surrounding information. The personal information management server 26 receives the request for acquiring the current location surrounding information from the personal information owner 29 and requests the current location surrounding information transmitter 35 to transmit the current location surrounding information. The current location peripheral information sender 35 transmits the current location peripheral information to the personal information management server 26 and charges the personal information management server 26 for an information fee. Personal information management server 26
Sends the information about the current location to the personal information owner 29 and determines the total amount of the brokerage fee and the information fee as a fee.
And pays the information fee to the current location peripheral information transmitter 35. The personal information owner 29 receives the charge from the personal information management server 26 and pays the charge to the personal information management server 26. Charges and payments are made sequentially or periodically.

FIG. 26 shows the personal information management server 26, the personal information owner 29, and the personal information management server 2 in the embodiment of FIG.
FIG. 6 is a diagram showing information exchanged between current location surrounding information transmitters 35.

An information fee is determined between the personal information management server 26 and the current location peripheral information transmitter 35. Personal Information Owner 29
And the personal information management server 26 determine an intermediary fee. The personal information owner 29 requests the personal information management server 26 to obtain a current location surrounding information. Personal information management server 26
Accepts a request from the personal information owner 29 to acquire the current location surrounding information, and requests the current location surrounding information sender 35 to transmit the current location surrounding information. The current location peripheral information sender 35 transmits the current location peripheral information to the personal information management server 26 and charges the personal information management server 26 for an information fee. The personal information management server 26 transmits the current location peripheral information to the personal information owner 29, bills the personal information owner 29 as a total fee of the mediation fee and the information fee, and pays the information fee to the current location peripheral information transmitter 35. . The personal information owner 29 receives the charge from the personal information management server 26 and pays the charge to the personal information management server 26. Charges and payments are made sequentially or periodically.

In the embodiments shown in FIGS. 2 to 26, the personal information owner 29 can also request the personal information management server 26 to support the setting of the personal information disclosure policy.

[0274] In this case, the personal information management server 26 determines from the large number of personal information disclosure policy registration requests sent from the information sender with privilege, the personal information acquirer, and the pay information sender to the personal information owner. Age, occupation,
Considering gender, address, hobbies, etc., select a highly useful personal information disclosure policy registration request, and request personal information owner 29 to register a personal information disclosure policy, or obtain permission from personal information owner 29 Automatically register for personal information disclosure policy.

For example, if you want more cash, if you do not register a personal information disclosure policy that is socially reliable, you want to be actively introduced, or if you want to find a person who has not registered a personal information disclosure policy in a specific field. In consideration of the request of the personal information owner, selection of personal information disclosure policy registration request from the information sender with privilege, personal information acquirer, paid information sender who meets the conditions, and information sender with privilege that meets the conditions It searches for a personal information acquirer and a pay information sender, and requests the personal information owner to register a personal information disclosure policy, or automatically registers with the personal information owner's permission with the personal information disclosure policy.

[0276] Fig. 27 shows charges and benefits, intermediary charges, etc. generated in the embodiment shown in Fig. 2 to Fig. 26 in the purchase and sale of personal information, transmission and reception of personal information, purchase and sale of paid information, support for setting personal information disclosure policy, and the like. FIG. 2 is a diagram showing a mechanism for exchanging data with electronic cash. <Communication> Transmission and reception of information between the electronic cash management program loading devices 41 and 45 are performed via the network 43 using the communication devices 42 and 44. <Security>-In the communication between the communication devices 42 and 44 via the network 43, the sender always encrypts and transmits the communication contents using a public key method, a common key method, and the like, and the receiver decrypts the received contents. , Each work shall proceed. <Authentication>-When sending information, be sure to attach the digital signature of the sender or information creator. When receiving information, the sender or the information creator must be authenticated. Payer 46, payee 47
Authentication is performed using a digital signature. <Access to IC card>-When the electronic cash management program loading devices 41 and 45 are composed of the IC card 20, the RW device 21, and the terminal device 22, the access to the IC card 20 is performed by the IC card in the terminal device 22. The program is executed via an IC card management program in the IC card 20.

Next, the flow of processing in this embodiment will be described.

The payer 46 pays the electronic cash using the electronic cash management program loading device 41. The payee 47 receives the electronic cash using the electronic cash management program loading device 45.

[0279] Fig. 28 shows the embodiment shown in Figs. 2 to 26, in which the purchase of personal information, the transmission and reception of personal information, the purchase of pay information, the support of setting of personal information disclosure policy, and the payment of fees and intermediary charges. Is performed using a payment ID specifying a credit card. <Communication> Transmission and reception of information between the computers 51 and 53 are performed via the network 52 using a communication function. <Security>-In communication via a network, the sender must encrypt and transmit the communication contents using a public key method, a common key method, etc., and the receiver must decrypt the received contents and proceed with each work. I do. <Authentication>-When sending information, be sure to attach the digital signature of the sender or information creator. When receiving information, the sender or the information creator must be authenticated. Payer 57, Payee 5
8. The authentication of the credit card company 55 is performed using an electronic signature.

Next, the flow of processing in this embodiment will be described.

The payer 57 uses the computer 51 to transmit a payment ID for specifying the credit card to the payee 58.

The payee 58 transmits the payment ID received from the payer 57 via the computer 53 to the credit card company 55 as a credit card number.

The credit card company 55 pays the payee 58 a fee or an intermediary fee.

The bill is transmitted to the computer 51 of the payer 57 via the network 54, or
Mail to

[0285] Fig. 29 shows charges and benefits, intermediary charges, etc. generated in the embodiment shown in Figs. 2 to 26, such as sales of personal information, transmission and reception of personal information, sales of paid information, support for setting personal information disclosure policies, and the like. FIG. 6 is a diagram showing a mechanism for receiving a credit transfer using a transfer ID specifying an account of a financial institution. <Communication> Transmission and reception of information between the computers 51 and 53 are performed via the network 52 using a communication function. <Security>-In communication via a network, the sender must encrypt and transmit the communication contents using a public key method, a common key method, etc., and the receiver must decrypt the received contents and proceed with each work. I do. <Authentication>-When sending information, be sure to attach the electronic signature of the sender or information creator. When receiving information, the sender or the information creator must be authenticated. Payer 57, payee 58,
Authentication of the financial institution 59 is performed using an electronic signature.

Next, the flow of processing in this embodiment will be described.

[0287] The payee 58 transmits the transfer ID specifying the account number to the payer 57 via the computer 53.
The payer 57 uses the transfer ID received from the payee 58 via the computer 51 as the account number of the financial institution 59 via the network 54 or to a counter,
Request the financial institution 59 to transfer a fee, a privilege, or an intermediary fee.

FIG. 30 shows registration / registration of a personal information disclosure policy.
FIG. 9 is a diagram showing a case where a change is made at the request of a personal information sender 29.

The IC card 20 and the terminal device 22 are connected to the terminal device 2
After inserting the IC card 20 into the RW device 21 connected to
Perform mutual authentication.

After the mutual authentication, the IC in the terminal device 22
The card program 61 requests the IC card management program in the IC card 20 to authenticate the personal information owner 29 using a personal characteristic such as a fingerprint or a password.

The IC card management program in the IC card 20 requests the authentication program in the IC card 20 to authenticate the personal information owner 29.

The authentication program in the IC card 20 authenticates the personal information owner 29 using the personal authentication data in the IC card 20.・ When authentication of personal information owner 29 is completed, IC card 2
A notification of authentication end is sent to the IC card management program in 0.

The IC card management program in the IC card 20 notifies the IC card program in the terminal device 22 of the end of the authentication of the personal information owner 29.

The personal information owner 29 is the personal information owner 29
After the authentication is completed, the personal information is registered / changed / deleted using the disclosure policy registration / change program 62 in the terminal device 22.

FIG. 31 shows the registration and registration of the personal information disclosure policy.
FIG. 14 is a diagram illustrating a case where a change is made at the request of another person. <Communication> The personal information disclosure policy registration request is transmitted via the network 70. <Security> The IC card program 61 in the terminal device 22 decrypts the received content and proceeds with the work. <Authentication> The IC card program 61 in the terminal device 22 authenticates the transmission source of the personal information disclosure policy registration request using the electronic signature.

Next, the flow of processing in this embodiment will be described.

[0297] The personal information disclosure policy registration requester creates a policy desired to be registered / changed in accordance with the format of the personal information disclosure policy, and transmits it to the terminal device 22 via the network 70. When the IC card program 61 in the terminal device 22 receives a request for registration / change of the personal information disclosure policy from another person or a request for disclosure of personal information from another person who is not registered in the personal information disclosure policy Is anonymous defined in the disclosure policy
Perform processing according to the handling of (anonymous). Confirmation program 6
3 asks the personal information owner 29 if registration is possible, if necessary. The disclosure policy automatic registration / change program 62 determines that registration to the personal information disclosure policy is possible,
Register the personal information disclosure policy registration requester's disclosure policy.

FIG. 32 is a configuration diagram of an information transmission policy IC card according to one embodiment of the present invention.

The IC card 20 'includes an input / output interface 12, a card management function 13, a security function 14,
It has an outgoing / possible decision function 15 ′, and security data 16, information outgoing policy data 18 ′, outgoing propriety determining data 17 ′, and information sender possession data 19 are stored in the memory 11 as data called from the function. . Here, the personal information disclosure policy IC card 20 (FIG. 1) stores information about the individual such as position information, temperature, and pulse, whereas the information transmission policy IC card 20 ′ owns the stored data. Document data,
This is enlarged to image data or the like.

The security data 16 includes secret key, public key certificate, personal authentication data such as PIN and fingerprint information, IC
Card expiration date, IC card issuance date, IC card issuing company, etc. The transmission permission / non-permission data 17 'includes postal code data for converting a postal code into an address or latitude / longitude information, landmark data for converting a landmark into an address or latitude / longitude information, and converting an address into latitude / longitude information. There are address data, calendar, etc. for conversion. In the information transmission policy data 18 ', information necessary for judging whether or not each information is transmitted is recorded as a combination of an attribute and an attribute value.

FIG. 33 shows an example of storing an information transmission policy IC card.

FIG. 34 is a block diagram of a personal information providing system according to the eighth embodiment of the present invention.

This personal information providing system provides personal information using the IC card shown in FIG. 32. The personal information providing system uses an IC card 20 ', RW device 21, terminal device 22, information acquisition device 24', and network 25. It has a terminal device 36 and provides information from a personal information owner 29 to a personal information acquirer 38. The terminal devices 22 and 36 have communication units 23 and 37, respectively. Here, the access ID (IP address, telephone number, etc.) to the personal information owner 29 is the personal information acquirer 38
Shall know in advance.

Here, the information means personal information relating to the personal information owner 29, for example, physical information relating to the current position such as position information, temperature information, noise information, and information relating to the body such as blood pressure and heart rate. Refers to information such as document data, image data, audio data, music data, and HTML data owned by the personal information owner 29.

The terminal devices 22 and 26 are, for example, PCs, PDAs, mobile phones, PHSs and the like. The information acquisition device 24 'is, for example, a GPS, PHS, a system that prompts the personal information owner 29 to input information and obtains information from the input content, a blood pressure measurement device, a heart rate measurement device, and the like.

<Communication> Information transmission and reception between the terminal devices 22 and 36 are performed by the communication unit 2.
3 and 37 via the network 25.

<Security> In communication via the network 25, the sender always encrypts and transmits the communication contents using a public key method or a common key method, and the receiver decrypts the received contents to perform each operation. Shall proceed.

<Authentication> When sending information, a digital signature of the sender or the information creator is always attached. When receiving information, the sender or the information creator must be authenticated. Authentication of the personal information owner 29, the personal information acquirer 38, and the information acquisition device 24 'is performed using an electronic signature.

<Access to IC Card> Access from the terminal device 22 to the IC card 20 ′
The card program is executed via the IC card management program in the IC card 20 '.

Next, the flow of processing in this embodiment will be described.

[0311] The personal information owner 29 is the personal information acquirer 38.
Is registered in advance in the information transmission policy in the IC card 20 '.

[0312] After inserting the IC card 20 'into the RW device 21 connected to the terminal device 22, the IC card 20' and the terminal device 22 perform mutual authentication.

After the mutual authentication is completed, the IC in the terminal device 22
The card program requests the IC card management program in the IC card 20 'to authenticate the personal information owner 29 using a personal characteristic such as a fingerprint or a personal identification number. IC in IC card 20 '
The card management program requests the authentication program in the IC card 20 'to authenticate the personal information owner 29. The authentication program in the IC card 20 'authenticates the personal information owner 29 using the personal authentication data in the IC card 20', and when the authentication of the personal information owner 29 ends, the IC in the IC card 20 ' Sends an authentication end notification to the card management program. The IC card management program in the IC card 20 ′ transfers the personal information owner 2 to the IC card program in the terminal device 22.
9 is notified of the end of authentication.

[0314] The personal information acquirer 38 specifies the ID and / or name of the personal information owner 29 from whom the information is to be obtained, and sends the information to the terminal device 22 via the terminal device 36 to the terminal device 22. Specify the format and language of the request. At this time, personal information acquirer information (ID, name, position information, request time, etc.) necessary for the determination of propriety is also transmitted.

[0315] Upon receiving the information transmission request, the IC card program in the terminal device 22 requests the IC card management program in the IC card 20 'to authenticate the personal information acquirer 38 and determine whether or not information transmission is possible.

[0316] The IC card management program in the IC card 20 'requests the authentication program in the IC card 20' to authenticate the personal information acquirer 38.

[0317] The authentication program in the IC card 20 'is IC
The personal information acquirer 38 is authenticated by using the public key in the information transmission policy in the card 20 ', and when the authentication of the personal information acquirer 38 is completed, the authentication to the IC card management program in the IC card 20' is completed. Issue a notification.

[0318] The IC card management program in the IC card 20 ', after receiving the authentication end notification from the authentication program in the IC card 20', requests the transmission permission / inhibition determination program in the IC card 20 'to determine whether transmission is possible. I do.

[0319] The transmission permission / inhibition determination program in the IC card 20 'determines whether transmission is permitted in accordance with the information transmission policy in the IC card 20', and determines the determination result in the IC card 20 '.
Via the IC card management program, the IC in the terminal device 22
Send to card program. If the processing capacity is limited,
If it is not possible to judge whether or not a part is possible due to lack of a DB or the like, the necessary part of the information transmission policy is transmitted to the IC card program in the terminal device 22 via the IC card management program in the IC card 20 ', and Outsourcing departmental judgment. The IC card program in the terminal device 22 determines whether or not it is entrusted, and transmits the result to the callability determination program in the IC card 20 'via the IC card management program in the IC card 20'. The transmission permission / non-permission determination program in the IC card 20 'determines whether transmission of information is possible, including the determination result from the IC card program in the terminal device 22, and transmits the determination result via the IC card management program in the IC card 20'. To the IC card program in the terminal device 22.

[0320] The IC card program in the terminal device 22 can determine whether or not it is possible. If the information specified by the personal information acquirer 38 is information on the personal information owner 29 such as position information, for example, PHS or A request for information acquisition is made to the information acquisition device 24 ′ which prompts the GPS or the personal information owner 29 to input information, and it is possible to judge whether or not the information can be acquired. Owner of personal information such as data, music data, HTML data 2
9 is owned by the IC card 20 '.
Request information acquisition from the IC card management program. The IC card program in the IC card 20 ′ searches the personal information owner-owned data 19 on the IC card 20 ′, converts the specified data into a specified format and language,
To the IC card program inside. At this time, the acquired information and income time are transmitted to the personal information acquirer 38. The access ID (IP address, telephone number, etc.) of the personal information acquirer 38 uses the access ID of the personal information acquirer 38 set in the information transmission policy unless there is a special request from the personal information acquirer 38. . Personal information acquirer 38
If the additional information has been requested from, for example, if the information is positional information, the positional information is transmitted in a format in which the positional information is plotted on a map.

[0321] The terminal device 36 receives the information and the acquisition time from the terminal device 22, and displays them on the screen.

FIG. 35 is a block diagram of a personal information providing system according to the ninth embodiment of the present invention.

This embodiment is different from the ninth embodiment in that a personal information list is transmitted from the terminal device 22 to the terminal device 36, and personal information acquirer information and an information transmission request are transmitted from the terminal device 36 to the terminal device 22. The only difference.

The communication, security, authentication, and access to the IC card are the same as those in the embodiment shown in FIG.

Next, the flow of processing in this embodiment will be described.

The personal information owner 29 is the personal information acquirer 38
Is registered in advance in the information transmission policy in the IC card 20 '.

[0327] The IC card 20 'and the terminal device 22 perform mutual authentication after inserting the IC card 20' into the RW device 21 connected to the terminal device 22.

After the mutual authentication is completed, the IC in the terminal device 22
The card program requests the IC card management program in the IC card 20 'to authenticate the personal information owner 29 using a personal characteristic such as a fingerprint or a personal identification number. IC in IC card 20 '
The card management program requests the authentication program in the IC card 20 'to authenticate the personal information owner 29. The authentication program in the IC card 20 'authenticates the personal information owner 29 using the personal authentication data in the IC card 20', and when the authentication of the personal information owner 29 ends, the IC in the IC card 20 ' Sends an authentication end notification to the card management program. The IC card management program in the IC card 20 ′ transfers the personal information owner 2 to the IC card program in the terminal device 22.
9 is notified of the end of authentication.

The personal information acquirer 38 designates the ID or the name of the personal information owner 29 from which the information is to be acquired, or both, and sends the information to the terminal device 22 via the terminal device 36.
Request to send the owned information list that you want to obtain. At that time, the personal information acquirer information (ID, name,
Location information, request time, etc.).

When the IC card program in the terminal device 22 receives the request for transmitting the possession information list, the IC card program
To the IC card management program in 0 '
Request for authentication and information transmission.

[0331] The IC card management program in the IC card 20 'requests the authentication program in the IC card 20' to authenticate the personal information acquirer 38.

[0332] The authentication program in the IC card 20 'is IC
The personal information acquirer 28 is authenticated by using the public key in the information transmission policy in the card 20 ', and when the authentication of the personal information acquirer 38 is completed, the authentication is completed to the IC card management program in the IC card 20'. Issue a notification.

[0333] The IC card management program in the IC card 20 ', after receiving the authentication end notification from the authentication program in the IC card 20', requests the transmission permission / inhibition determination program in the IC card 20 'to determine whether transmission is possible. I do.

The transmission permission / non-permission judgment program in the IC card 20 'determines the transmission permission / prohibition in accordance with the information transmission policy in the IC card 20'.
It transmits to the IC card program in the terminal device 22 via the IC card management program in the card 20 '. if,
If it is not possible to judge whether or not a part is possible due to the limitation of the processing capacity or lack of a DB, the necessary part of the information transmission policy is transmitted to the IC card program in the terminal device 22 via the IC card management program in the IC card 20 '. And outsource some judgment instead. The IC card program in the terminal device 22 determines whether or not it is entrusted, and transmits the result to the callability determination program in the IC card 20 'via the IC card management program in the IC card 20'. The transmission permission / non-permission judgment program in the IC card 20 'determines whether transmission of information is possible, including the result of the judgment from the IC card program in the terminal device 22, and in the case of permission, the possession information list is stored in the IC card 20'.
The data is transmitted to the IC card program in the terminal device 22 via the card management program.

The personal information acquirer 38 receives the possession information list, selects the information, its data format and language from the possession information list, and obtains 29 IDs or names of the personal information owners whose information is to be acquired. By specifying both, the terminal device 22 is requested to transmit the information to be acquired to the terminal device 22 via the terminal device 36. At this time, personal information acquirer information (ID, name, position information, request time, etc.) necessary for the determination of propriety is also transmitted.

Upon receiving the information transmission request, the IC card program in the terminal device 22 requests the IC card management program in the IC card 20 'to authenticate the personal information acquirer 38 and determine whether or not information transmission is possible.

The IC card management program in the IC card 20 'requests the authentication program in the IC card 20' to authenticate the personal information acquirer 38.

The authentication program in the IC card 20 'is IC
The personal information acquirer 38 is authenticated by using the public key in the information transmission policy in the card 20 ', and when the authentication of the personal information acquirer 38 is completed, the authentication to the IC card management program in the IC card 20' is completed. Issue a notification.

After receiving the authentication end notification from the authentication program in the IC card 20 ', the IC card management program in the IC card 20' requests the transmission permission / non-permission judgment program in the IC card 20 'to determine whether transmission is possible. I do.

The transmission permission / inhibition determination program in the IC card 20 'determines whether transmission is permitted in accordance with the information transmission policy in the IC card 20', and determines the determination result in the IC card 20 '.
Via the IC card management program, the IC in the terminal device 22
Send to card program. If the processing capacity is limited,
If it is not possible to judge whether or not a part is possible due to lack of a DB or the like, the necessary part of the information transmission policy is transmitted to the IC card program in the terminal device 22 via the IC card management program in the IC card 20 ', and Outsourcing departmental judgment. The IC card program in the terminal device 22 determines whether or not it is entrusted, and transmits the result to the callability determination program in the IC card 20 'via the IC card management program in the IC card 20'. The transmission permission / non-permission determination program in the IC card 20 'determines whether transmission of information is possible, including the determination result from the IC card program in the terminal device 22, and transmits the determination result via the IC card management program in the IC card 20'. To the IC card program in the terminal device 22.

The IC card program in the terminal device 22 can determine whether or not the IC card program is valid. If the information specified by the personal information acquirer 38 is information on the personal information owner 29 such as position information, for example, PHS or A request for information acquisition is made to the information acquisition device 24 ′ which prompts the GPS or the personal information owner 29 to input information, and it is possible to judge whether or not the information can be acquired. Owner of personal information such as data, music data, HTML data 2
9 is owned by the IC card 20 '.
Requests the IC card management program to acquire information. The IC card program in the IC card 20 'searches the personal information owner's possession data 19 on the IC card 20', and converts the specified data into the specified format and language. And sends it to the IC card program in the terminal device 22. At this time, the acquired information and income time are transmitted to the personal information acquirer 38. The access ID (IP address, telephone number, etc.) of the personal information acquirer 38 uses the access ID of the personal information acquirer 38 set in the information transmission policy unless there is a special request from the personal information acquirer 38. . Personal information acquirer 38
If the additional information has been requested from, for example, if the information is positional information, the positional information is transmitted in a format in which the positional information is plotted on a map.

The terminal device 26 receives the information and the acquisition time from the terminal device 22 and displays them on the screen.

FIG. 36 is a configuration diagram of a personal information providing system according to the tenth embodiment of the present invention. This embodiment is shown in FIG.
In the embodiment, access to the personal information owner 29
If the personal information acquirer 38 does not know the ID in advance,
While the personal information owner 29 has registered the access ID in the access ID management server 39 in advance, the personal information acquirer 38 connects the access ID management server 39 to the network 40.
Inquiry via, access to personal information owner 29
After knowing the ID, the personal information owner 29 is requested to transmit information.

FIG. 37 is a block diagram of a personal information providing system according to the eleventh embodiment of the present invention. This embodiment is shown in FIG.
In the embodiment, access to the personal information owner 29
If the personal information acquirer 38 does not know the ID in advance,
After the personal information owner 29 has registered the access ID in the access ID management server 39 in advance, the personal information acquirer 38 inquires the access ID management server 39 and knows the access ID to the personal information owner 29. , Requesting the personal information owner 29 to transmit a possession information list.

The information transmission policy IC shown in FIG.
The card 20 'can be applied to the embodiments shown in FIGS. 5 to 31.
Can be obtained.

[0346]

As described above, according to the present invention,
In the information providing system with benefits, the information providing system, and the paid information providing system, the information transmission and reception policies can be set quickly, finely, and securely managed by the information owner himself.

[Brief description of the drawings]

FIG. 1 is a personal information disclosure policy IC according to an embodiment of the present invention.
It is a block diagram of a card.

FIG. 2 is a diagram illustrating an example of data stored in an IC card for an information providing system with a privilege.

FIG. 3 is a diagram showing an example of data stored in an IC card for a personal information providing system.

FIG. 4 is a diagram showing an example of data stored in an IC card for a pay information providing system.

FIG. 5 is a configuration diagram of an information providing system with a privilege according to the first embodiment.

FIG. 6 is a configuration diagram of a privileged information providing system according to a second embodiment.

FIG. 7 is a configuration diagram of an information providing system with a privilege according to a third embodiment.

FIG. 8 is a diagram illustrating the timing and subject of issuing a registered privilege in the information providing system with privilege according to the first to third embodiments.

FIG. 9 is a diagram showing the timing and subject of issuing a registered privilege in the information providing system with privilege according to the first to third embodiments.

FIG. 10 is a diagram showing the timing and subject of issuing a registered privilege in the information providing system with privilege of the first to third embodiments.

FIG. 11 is a diagram showing the timing and subject of issuing a registered privilege in the information providing system with privilege of the first to third embodiments.

FIG. 12 is a diagram showing the timing and subject of issuing a registered privilege in the information providing system with privilege of the first to third embodiments.

FIG. 13 is a diagram illustrating the timing and subject of issuing a registered privilege in the information providing system with privilege according to the first to third embodiments.

FIG. 14 is a diagram showing the timing and subject of issuing a registered privilege in the information providing system with privilege of the first to third embodiments.

FIG. 15 is a configuration diagram of a personal information providing system according to the first embodiment.

FIG. 16 is a configuration diagram of a personal information providing system according to a second embodiment.

FIG. 17 is a configuration diagram of a personal information providing system according to a third embodiment.

FIG. 18 is a configuration diagram of a personal information providing system according to a fourth embodiment.

FIG. 19 is a configuration diagram of a personal information providing system according to a fifth embodiment.

FIG. 20 is a configuration diagram of a personal information providing system according to a sixth embodiment.

FIG. 21 is a configuration diagram of a personal information providing system according to a seventh embodiment.

FIG. 22 is a diagram showing exchange of information with the personal information management server when the personal information acquirer pays an intermediary fee in the personal information providing systems of the first to seventh embodiments.

FIG. 23 is a diagram showing exchange of information with the personal information management server 26 when the personal information owner 29 pays an intermediary fee in the personal information providing systems of the first to seventh embodiments.

FIG. 24 is a configuration diagram of a pay information providing system according to an embodiment.

25 is information exchanged among the personal information owner 29, the personal information management server 26, and the current location peripheral information transmitter 35 when the personal information owner 29 has contracted in the paid information providing system of FIG. FIG.

26 is information exchanged among the personal information owner 29, the personal information management server 26, and the current location peripheral information transmitter 35 when the personal information management server 26 has a contract in the pay information providing system of FIG. FIG.

FIG. 27 is a diagram showing a mechanism for exchanging various charges, benefits, and intermediary charges by electronic cash in the information providing system with benefits, the personal information providing system, and the pay information providing system.

FIG. 28 is a diagram showing a mechanism for paying various fees and an intermediary fee by using a payment ID specifying a credit card in an information providing system with a privilege, a personal information providing system, and a pay information providing system.

FIG. 29. Transfer ID specifying the account of the financial institution to receive various charges, benefits, and intermediary charges in the information providing system with benefits, the personal information providing system, and the paid information providing system.
It is a figure which shows the mechanism performed using.

Fig. 30 Registration of personal information disclosure policy to IC card
FIG. 7 is a diagram showing a configuration of a terminal device 22 when a change is made at the request of a personal information owner 29.

FIG. 31 Registration of personal information disclosure policy to IC card
FIG. 9 is a diagram illustrating a configuration of a terminal device 22 when a change is performed by a request from another person.

FIG. 32 is a configuration diagram of an information transmission policy IC card according to an embodiment of the present invention.

FIG. 33 is a diagram showing a storage example of an information transmission policy IC card.

FIG. 34 is a configuration diagram of a personal information providing system according to an eighth embodiment.

FIG. 35 is a configuration diagram of a personal information providing system according to a ninth embodiment.

FIG. 36 is a configuration diagram of a personal information providing system according to a tenth embodiment.

FIG. 37 is a configuration diagram of a personal information providing system according to an eleventh embodiment.

[Description of Signs] 11 memory 12 input / output interface 13 card management function 14 security function 15 availability determination function 15 ′ transmission availability determination function 16 security data 17 disclosure availability determination data 18 personal information disclosure policy data 18 ′ information transmission policy data 19 Information sender owned data 20 IC card 21 RW device 22 Terminal device 23, 32 Communication unit 24 Location information acquisition device 24 'Information acquisition device 25, 27 Network 26 Personal information management server 28 Advertising information management server 29 Personal information owner 30 Advertising Information sender 31 Location information management device 33 Location information acquirer 34 Current location surrounding information management server 35 Current location surrounding information sender 36 Terminal device 37 Communication unit 38 Personal information acquirer 39 Access ID management server 40 Network 41, 45 Cash management program loading device 42, 44 Communication device 43 Network 46 Payer 47 Payee 51, 53 Computer 52, 54, 56 Network 55 Credit card company 57 Payer 58 Payee 59 Financial institution 61 IC card program 62 Disclosure policy registration / Change program 63 Confirmation program 70 Network

Claims (38)

[Claims] Claims: 1. An information owner's policy concerning transmission and reception of information via a network is stored in an IC card.
A method of using an IC card that controls transmission and reception of information by determining whether transmission and reception of information is possible according to the policy. 2. A privileged information providing method for providing privileged information from an information sender to an information owner via a network, wherein the information owner transmits information via the network.
It is determined whether or not information can be received in accordance with the policy of the IC card storing the policy on reception, and only when it is determined that the information can be received, the information with the privilege is transmitted to the information owner. Information provision method. 3. The method according to claim 2, wherein said determination is made by software on said IC card. 4. The method according to claim 2, wherein said determination is made by an information management server. 5. The method according to claim 2, wherein the determination is performed by a terminal device connected to a read / write device of the IC card. 6. The method according to claim 2, wherein a part of the determination is performed by an information management server, and the software on the IC card makes the determination including a determination result from the information management server. 7. A part of the determination is performed by an information management server, and the terminal device to which the R / W device of the IC card is connected makes the determination including a determination result from the information management server. Item 3. The method according to Item 2. 8. A part of the determination is performed by a terminal device connected to the R / W device of the IC card, and software on the IC card is connected to a terminal device connected to the R / W device of the IC card. 3. The method according to claim 2, wherein the determination is performed including a determination result from the device. 9. The information management server according to claim 2, wherein the information management server determines a registration privilege with the information owner terminal, and issues a registration privilege to the information owner terminal that has registered the information. Or the method of claim 1. 10. The terminal of the information sender determines a privilege with the terminal of the information owner, and the information management server mediates the privilege and transmits the information to the terminal of the information owner who has registered the information. 9. The method according to any one of claims 2 to 8, wherein the reward is issued. 11. The terminal of the information sender determines a privilege with the terminal of the information owner, and the information management server mediates a part of the privilege to the terminal of the information owner who has registered the information. 9. The method according to any one of claims 2 to 8, wherein a part of the privilege is issued. 12. The terminal of the information sender determines a privilege with the terminal of the information owner, determines a mediation fee with the information management server, requests transmission of information with the privilege, The information management server accepts the information transmission request with privilege from the terminal of the information sender, and transmits a privileged information to the terminal of the information owner, and issues a privilege at the same time, when it is possible to determine whether the information is transmitted. The method according to any one of claims 2 to 8. 13. The terminal of the information sender determines a privilege with the terminal of the information owner, determines a mediation fee with the information management server, requests transmission of information with the privilege, The information management server accepts the information transmission request with the benefit from the information sender, and if it is possible to determine whether the information is available, the information management server transmits the information with the benefit to the terminal of the information owner, confirms the viewing of the information with the benefit, and 9. The method according to claim 2, wherein the method comprises: 14. An information providing method for receiving an information acquisition request from an information acquirer and providing information of the information owner to the information acquirer via a network, the information providing method comprising: A policy relating to transmission and reception is stored in an IC card, it is determined whether personal information can be received according to the policy, and only when it is determined that the personal information can be received, the information is transmitted to the information acquirer terminal. Personal information provision method. 15. The method according to claim 14, wherein the access ID to the information owner is not fixed, and the determination is made by software on the IC card. 16. The information management server according to claim 1, wherein the access ID to the information owner is not fixed, and the determination is made by an information management server.
4. The method according to 4. 17. The method according to claim 14, wherein the access ID to the information owner is not fixed, and the determination is made by a terminal device connected to the R / W device of the IC card. 18. The method according to claim 18, wherein the access ID to the information owner is not fixed, and part of the determination is performed by an information management server, and the software on the IC card includes the determination result including the determination result from the information management server. 15. The method of claim 14, wherein the method is performed. 19. The method according to claim 19, wherein the access ID of the information owner is not fixed, and a part of the determination is performed by an information management server.
The terminal device to which the R / W device of the IC card is connected makes the determination including the determination result from the information management server,
The method according to claim 14. 20. The access ID to the information owner is not fixed, and a part of the judgment is made by a terminal device connected to the R / W device of the IC card, and the software on the IC card is The method according to claim 14, wherein the determination is performed including a determination result from a terminal device to which the R / W device of the IC card is connected. 21. An access ID to the information owner is fixed, and the determination is made by software on the IC card.
The method according to claim 14. 22. The method according to claim 14, wherein the access ID to the information owner is fixed, and the determination is performed by an information management server. 23. The method according to claim 14, wherein the access ID to the information owner is fixed, and the determination is made by a terminal device connected to the R / W device of the IC card. 24. An access ID to the information owner is fixed, and a part of the determination is performed by an information management server, and software on the IC card performs the determination including a determination result from the information management server. 15. The method of claim 14, wherein said method is performed. 25. An information management server, wherein the access ID to the information owner is fixed, and part of the determination is performed by the information management server, and the terminal device to which the R / W device of the IC card is connected is transmitted from the information management server. The method according to claim 14, wherein the determination is performed including a result of the determination. 26. The information owner's access ID is fixed, and a part of the determination is performed by a terminal device connected to a R / W device of the IC card, and software on the IC card is the IC card. The method according to claim 14, wherein the determination is performed including a determination result from a terminal device to which the R / W device is connected. 27. An information providing method for providing information of an information owner to an information acquirer via a network, comprising: transmitting the information of the information owner via a network;
A personal information providing method, wherein a policy relating to reception is stored in an IC card, and information is transmitted to an information management server set in the policy. 28. An intermediary fee is determined between the information management server and the terminal of the information acquirer, the terminal of the information acquirer requests the information management server to acquire personal information, and the information management server 28. The method according to any one of claims 14 to 27, wherein a request for acquiring the information is received, and if the determination is acceptable, the information is transmitted to a terminal of the information acquirer. 29. An intermediary fee is determined between the information management server and the terminal of the information owner, the terminal of the information owner requests the information management server to transmit information, and the information management server requests the information transmission. 28. The method according to any one of claims 14 to 27, further comprising accepting the information and transmitting information to a terminal of the information acquirer. 30. A pay information providing method in which a pay information sender provides information related to information of an information owner for a fee through a network, wherein the information owner transmits information via a network;
The information is transmitted to the information management server set in the policy of the IC card storing the policy regarding reception, and the information management server converts the information into an expression that can be recognized by the relevant information server managing the relevant information. And transmits the information to the related information server. The related information server searches for the pay information related to the information of the information owner, and transmits the searched pay information to the information management server. A method for providing pay information, comprising transmitting pay information to a pay service. 31. An information fee is determined between the information owner terminal and the pay information sender terminal, an intermediary fee is determined between the information owner terminal and an information management server, and the information owner The terminal requests the pay information acquisition request to the information management server, the information management server accepts the pay information acquisition request, requests transmission of the pay information to the pay information sender terminal, the pay information sender terminal 32. The method of claim 31, further comprising: transmitting paid information to the information management server, charging the information management server for an information fee, and the information management server transmitting paid information to the information owner's terminal. 32. An information fee is determined between the information management server and the terminal of the pay information sender, a mediation fee is determined between the terminal of the information owner and the information management server, and the terminal of the information owner is determined. Requests the pay information acquisition request to the information management server, the information management server accepts the pay information acquisition request, requests transmission of the pay information to the terminal of the pay information sender, the terminal of the pay information sender is 32. The method according to claim 31, wherein pay information is transmitted to the information management server, an information fee is charged to the information management server, and the information management server transmits the pay information to the information owner's terminal. 33. The information management server according to claim 2, wherein the information management server, upon receiving a request from the information owner, supports the setting of the policy in consideration of the usefulness and security of the information owner. The described method. 34. The method according to claim 2, wherein the exchange of various charges is performed by electronic cash. 35. The method according to claim 2, wherein payment of various charges is performed using a payment ID specifying a credit card.
The method according to any one of the preceding claims. 36. The method according to claim 2, wherein receipt of various charges is performed using a transfer ID specifying an account of a financial institution.
The method according to any one of claims 3 to 3. 37. The method according to any one of claims 2 to 36, wherein said policy allows said information owner to register / change / delete by himself. 38. The method according to any one of claims 2 to 36, wherein when the registration, change, or deletion of the policy is requested by another person via a network, the work is automatically executed after confirming the information owner. The method described in the section.