JP2002329143A - Deal support device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a deal support device which enables a deal while suppressing an outflow of personal information to the necessary minimum extent. SOLUTION: A deal support device is configured by connecting a telecommunication channel NET in a two-way communication state. The server computer 1 is made to function as a registration accepting means 11 which accepts the registration of personal information, a managing means 12 which manages the personal information by assigning identifiers and authenticators to each registered person, a notifying means 13 which notifies the registered persons of the assigned identifiers and authenticators, and an answering means 14 which answers an inquiry about the registered person based upon the identifier and the authenticator as a clue from a 3rd person that the registered person presents the identifier and authenticator to, when the 3rd person makes an inquiry.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a transaction support apparatus capable of minimizing leakage and diversion of personal information in various transaction phases relating to various services such as mail order and online sales. Things.

[0002]

2. Description of the Related Art At present, when it is desired to receive various services at mail order sales, online sales, providers, rental video stores, and the like, users are usually required to disclose personal information to service providers. In this case, it is customary to request disclosure under conditions such as "Personal information is used only for the provision of the service." Should not cross.

[0003]

However, in practice,
The leakage and dissemination of this type of personal information is enormous, and there are many problems such as sending unfamiliar direct mail. In the current transaction form, it is not possible to control the flow of information to the user. Therefore, it is urgently desired to establish a transaction form capable of avoiding such inconvenience and protecting personal privacy as much as possible.

[0004]

In order to solve the above-mentioned problems, the present invention takes the following measures.

That is, the transaction support apparatus of the present invention is realized by, for example, a server computer connected to a telecommunication line so as to be capable of two-way communication, and has a functional configuration such as an address, a name, and a telephone number. Registration receiving means for receiving registration of information, management means for managing personal information by assigning identifiers and authenticators for each registrant,
Notifying means for notifying the registrant of the identifier and the authenticator, and responding to inquiries about the registrant from the third party who received the identifier and the authenticator from the registrant based on the identifier and the authenticator. And a response means for responding to the request.

[0006] As the identifier, a user I consisting of a character string is used.
D, an IC card, and the like can be used. As the authenticator, a password, a password, a biometric authentication (fingerprint, retinal pattern, etc.) can be considered.

[0007] With this configuration, when the registrant wants to receive a service from a third party, for example, instead of presenting personal information, the registrant uses the identifier and the authenticator given when registered in the server computer. Present. The third party can make inquiries such as identity verification to the server computer using the identifier and the authenticator as clues. And the registrant's personal information only needs to be presented to the server computer, and it is not necessary to present it unnecessarily every time the service is provided. Can be reliably avoided. In addition, the registrant only needs to present the identifier and the authenticator when receiving the service, and there is no need to present the address, name, and the like. Becomes effective.

[0008] In this case, the response means may confirm the existence of the registrant who has presented the identifier and the authenticator, or may provide personal information on the registrant within a range obtained in advance from the registrant. It may be provided to a third party.

[0009] In some transactions, not only confirmation of the existence of the registrant but also specific provision of personal information is indispensable. Since the registrant himself can grasp and control, even if personal information is handled, the problem of unintended outflow can be effectively solved.

[0010] In addition, a third party does not need specific personal information in the course of a transaction, and it is sufficient that only a third party such as a delivery company entrusted by the third party obtains a part of the personal information. In such a case, the server computer gives the third party an authentication identifier associated with the registrant's personal information, and the third party receives the authentication identifier from the third party and uses the authentication identifier as a clue to the registrant. It is effective to take measures such as providing personal information only to this other person when an inquiry is made.

[0011] Further, when the server computer functions as an information providing center or the like, a registration receiving means for receiving registration of personal information, and accumulates personal information of the registrant within a range obtained in advance from the registrant. It is effective to have an information storage means and a browsing accepting means for accepting browsing by a third party of the personal information stored in the information storage means.

With this configuration, in response to a browsing request from a third party, only the personal information agreed by the registrant can be browsed, so that the registrant can grasp the browsing range and browsing status, and This makes it possible to effectively control the leakage of personal information contrary to the registrant's will.

[0013] In this case, instead of obtaining an agreement, it is also effective to view only information other than the information necessary for specifying the individual among the personal information.

Since the server computer stores personal information effectively as described above, the server computer executes request reception means for receiving a service request for a specific registrant from a third party who has viewed the server computer, and executes the received request. The provision of the execution processing means makes it possible to effectively utilize such information.

As a service requested by a third party, a direct mail delivery service or the like is effective.

[0016]

An embodiment of the present invention will be described below with reference to the drawings. <First Embodiment> A transaction support device according to this embodiment is shown in FIG.
As shown in FIG. 1, the information processing is realized by a server computer 1 owned by an information center that handles personal information. The server computer 1 is connected to a telecommunication line NET such as the Internet so as to be capable of two-way communication. A series of data exchange related to electronic commerce between the user computer 2 owned by the general user and the dealer computer 3 owned by the service provider, which is also connected to the telecommunication line NET so as to be capable of bidirectional communication. And so on.

Each computer, as shown in FIG.
The computer system mainly includes a PUa, a memory b, an external storage device c, a communication interface d, and the like.
Through which programs and data to be executed are stored. Then, while exchanging data via the communication interface d in accordance with these programs and data, the server computer 1 performs the functions of the registration accepting unit 11, the managing unit 12, the notifying unit 13 and the responding unit 14, as shown in FIG. The user computer 2 plays a role as a registration procedure means 21, a receiving means 22, and a request receiving means 23, and the dealer computer 3 plays a role as a service receiving means 31 and an inquiry means 32.

Hereinafter, the functional configuration will be specifically described.

First, in the server computer 1, the registration accepting means 11 accepts registration of personal information about a user in the procedure when a connection is made from a registrant who wants to register.

The management means 12 stores a user I for each registrant.
An identifier such as D and an authenticator such as a password are assigned to create a record, and personal information is associated with the record and managed.

The notifying means 13 is for notifying the registrant of the identifier and the authenticator. In this embodiment, the notification is made through the telecommunication line NET, but the notification itself is made by means other than communication, and the notification means 1
Reference numeral 3 may have a function of outputting a document for that purpose.

The responding means 14 is for responding to an inquiry about the registrant from a dealer as a third party who has received the identifier and the authenticator from the registrant based on the identifier and the authenticator. The response not only confirms the existence of the registrant who presented the identifier and the authenticator, but also provides personal information about the registrant to a third party to the extent that the registrant has agreed in advance. Is what you can do.

Next, on the user computer 2 side, the registration procedure means 21 is used for a procedure when a user accesses the registration receiving means 11 of the server computer 1 to register personal information. During this procedure, if some of the personal information is not desired to be leaked to the outside, the user can make a setting in advance to give consent only to information in a range that allows the leak. I have.

The receiving means 22 comprises the server computer 1
When the identifier and the authenticator are notified from the notification means 13 of the above, this is received.

The service requesting means 13 is used for making a request for receiving a service provided by the dealer, for example, applying for a mail order, renting a rental video, etc., and uses the identifier and the authenticator given by the server computer 1. Present and make a request.

Further, on the dealer computer 3 side, the request receiving means 31 is for receiving a service request from a user when the request is provided.

The inquiry means 32 accesses the server computer 1 and confirms whether or not the registrant is registered based on the identifier and the authenticator presented by the user at the time of the service request, and if necessary, checks if the registrant is registered. It is for receiving the provision of personal information. This personal information is considered within the scope of obtaining the consent of the registrant in advance, and the personal information for which the consent has not been obtained is excluded from the provisions.

FIG. 4 is a flow chart schematically showing a flow of a procedure when an electronic commerce is performed by the above configuration.
First, a user registers personal information in the server computer 1 using the user computer 2 (S1). At this time, the user can specify the range of information to be disclosed. In response to this, the server computer 1 assigns an identifier and an authenticator to the user, and notifies the user computer 2 of this (S2). The user accesses the dealer computer 3 owned by the service provider, presents the identifier and the authenticator, and requests service provision (S3). In response to this, the service provider accesses the server computer 1, confirms whether or not the registrant is registered based on the presented identifier and authenticator (S4), and receives a notification of the result (S5). . Thereby, the service provider provides the service to the user. If the service can be provided online, the dealer computer 3
, The service is provided to the user computer 1 (S6).

By constructing the system as described above, when the registrant tries to receive the service from the service provider, instead of presenting the personal information, the identifier and the identifier given at the time of registration in the server computer 1 are displayed. All you have to do is present the authenticator. Then, the service provider can make inquiries such as identity verification to the server computer 1 using the identifier and the authenticator as clues, and can perform credit settlement and the like without inconvenience without personal information. And the registrant's personal information is
It is only necessary to present the service to the server computer 1 and it is not necessary to present the service information to the service provider every time the service is provided. The inconvenience of spreading and rolling over more than necessary can be reliably avoided.

In this case, the response means 14 provides not only the function of confirming the existence of the registrant who has presented the identifier and the authenticator but also personal information on the registrant to a third party. With the above information provision, the registrant himself can grasp and control the provision range and provision status of personal information, so even if we handle personal information,
The problem of unintended outflow can be effectively solved. <Second Embodiment> Next, in the embodiment shown in FIG. 5, the server computer 1 receives a shipping request from the dealer computer 3 owned by the direct mail requester by adopting the configuration according to the above, and A system for transmitting direct mail to a user computer 2 owned by a registrant is constructed.

The server computer 1 has a functional configuration of a registration receiving unit 41, an information storing unit 42, a browsing receiving unit 43, a request receiving unit 44, and an execution processing unit 45.

The registration receiving means 41 is for receiving registration of personal information.

The information storage means 42 is for storing personal information of the registrant within a range obtained in advance from the registrant, and among these, stores information other than information necessary for identifying an individual. It has become.

The browsing accepting means 43 is for accepting browsing of personal information stored in the information storing means by a third party (direct mail sender).

The request receiving means 44 is for receiving a direct mail sending request to a specific registrant from a direct mail sender who is a third party who has viewed the request.

The execution processing means 45 is for performing processing for issuing the accepted direct mail dispatch request to the designated user.

On the other hand, the user computer 2 is provided with a registration procedure means 51 for presenting and registering personal information. Also, the dealer computer 3 side
A browsing means 61 for accessing the browsing accepting means 43 of the server computer 1 and browsing the personal information stored in the information storing means 42; Requesting means 62 for performing the following.

FIG. 6 is a flow chart schematically showing a flow of a procedure when electronic commerce is performed by the above configuration.
First, the user accesses the server computer 1 using the user computer 2 and registers various types of personal information. At this time, it is possible to specify a range to be disclosed, whether direct mail can be received, and the like (S11). The registered information is made into a database after deleting information that can identify an individual. Next, the sender of the direct mail accesses the server computer 1 by using the dealer computer 3, browses the database, determines an appropriate destination, and makes a shipping request (S1).
2). In response, the server computer 1 executes a direct mail sending process to the designated user (S13). At this time, it is also effective to return a part of the direct mail shipping fee to the user.

With this configuration, in response to a browsing request from a third party, only the personal information agreed by the registrant can be browsed, so that the registrant can grasp the browsing range and browsing status, and This makes it possible to effectively control the leakage of personal information contrary to the registrant's will.

Of course, such a configuration is also effective when the purpose is to provide a place for viewing the stored information exclusively by a third party. Even in such a case, the intended purpose of controlling browsing by a third party to a desired range is achieved. <Third Embodiment> Further, the embodiment shown in FIG.
The server computer 1 acts as a certification organization through mail-order sales and online sales, and the registrant uses the dealer computer owned by the dealer when making a purchase at the dealer. Authentication identifier (order ID
And the like, and a system for presenting personal information of a user required for delivery in response to an inquiry from a computer 7 held by a delivery person requested by a dealer.

The system configuration shown in FIG. 7 is basically the same as that of FIG. 3, except that a computer 7 owned by the delivery person is added as an additional configuration. This computer 7
An order receiving unit 71 for receiving an order from the sender, an inquiry unit 72 for accessing the server computer 1 to obtain personal information of the delivery destination by using the authentication identifier received from the sender as a clue, and based on the obtained personal information. And a delivery processing unit 73 for performing delivery processing. Also, in the procedure shown in FIG. 8, step S5 is a step of receiving an authentication identifier from the server computer 1, unlike FIG. Therefore, the seller who handles the dealer computer 3 is not notified of the personal information.

When there is an order from the seller to the distributor (S6), the computer 7 owned by the distributor makes an inquiry to the server computer 1 (S6).
7) In response, the server computer 1 sends information such as the address and name as the minimum personal information necessary for delivery to the computer 7 of the delivery person.

Even with such a configuration, the leakage of personal information is limited to only the deliverer and the minimum amount of information in addition to the server computer 1, so that it is possible to effectively prevent unreasonable spread of personal information. It becomes possible.

The specific configuration of each section is not limited to the above-described embodiment, and various modifications can be made without departing from the spirit of the present invention. <Escrow service for personal information> Recently, transactions between individuals, such as auctions on networks, have been increasing.
At that time, the problem is how to pay and how to manage personal information. With regard to payments, the escrow service can prevent risks to some extent, but it is currently difficult to deal with leakage of personal information. By interposing an information management server, it becomes possible for an individual to establish a transaction while knowing each other's personal information. <Membership service> Various stores and service providers offer member services such as a cumulative point system.
Inconveniences users. If a recordable IC card is used as the identifier, it becomes possible to combine such member service cards into one. Of course, there is no need to unnecessarily disclose personal information at the time of member registration.

[0045]

According to the present invention, it is possible to suppress the dissemination and diversion of personal information more than necessary as compared with the related art, and the individual can grasp the range of the leaked personal information. , Providing controllable means to effectively enhance privacy protection, transaction security, and the like.

[Brief description of the drawings]

FIG. 1 is a diagram schematically showing basic hardware resources used in carrying out the present invention.

FIG. 2 is an exemplary view specifically showing contents of hardware resources according to the embodiment;

FIG. 3 is a functional block diagram showing the first embodiment of the present invention.

FIG. 4 is a flowchart showing the contents of processing executed in the embodiment.

FIG. 5 is a functional block diagram showing a second embodiment of the present invention.

FIG. 6 is a flowchart showing the contents of processing executed in the embodiment.

FIG. 7 is a functional block diagram showing a third embodiment of the present invention.

FIG. 8 is a flowchart showing the contents of processing executed in the embodiment.

[Explanation of symbols]

 NET: Telecommunication line 1: Transaction support device (server computer) 11: Registration accepting means 12: Management means 13: Notifying means 14: Response means 41: Registration accepting means 42 ... Information storage means 43: Browsing accepting means 44: Request accepting Means 45 ... Execution processing means

Claims (9)

[Claims] 1. A personal communication system which is used by being connected to a telecommunication line so as to be capable of two-way communication, comprising: a registration receiving means for receiving registration of personal information; Management means for managing, a notifying means for notifying the registrant of the assigned identifier and authenticator, and a registrant using the identifier and authenticator from a third party who has received the identifier and authenticator from the registrant. And a response means for responding to an inquiry about the transaction. 2. The transaction support apparatus according to claim 1, wherein the response means confirms the existence of the registrant who has presented the identifier and the authenticator. 3. The transaction support apparatus according to claim 2, wherein the response means also provides personal information on the registrant to a third party within a range obtained in advance from the registrant. 4. A response means for assigning an authentication identifier associated with the registrant's personal information to a third party, wherein the response means receives an authentication identifier from another party. 2. The transaction support apparatus according to claim 1, wherein the apparatus also responds to an inquiry about a registrant based on the authentication identifier. 5. The transaction support device according to claim 1, wherein the third party is a person who provides a service to the registrant who has been presented with the identifier and the authenticator. 6. A registration receiving means for receiving registration of personal information, which is used by being connected to a telecommunication line so as to be capable of two-way communication, and a registrant's A transaction support device comprising: an information storage unit for storing personal information; and a browsing accepting unit for receiving browsing of personal information stored in the information storage unit by a third party. 7. A personal computer, which is used by being connected to a telecommunication line so as to be capable of two-way communication, comprising: a registration accepting means for accepting registration of personal information; A transaction support device comprising: an information storage unit that stores information except for information; and a browsing accepting unit that receives browsing of personal information stored in the information storage unit by a third party. 8. The transaction support apparatus according to claim 6, further comprising request accepting means for accepting a service request for a specific registrant from a browsed third party, and execution processing means for executing the accepted request. 9. The transaction support device according to claim 8, wherein the service requested by the third party is related to sending direct mail.