JP2002359618A - Personal information protection system and personal information protecting method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system that can optionally designate contents of protec tion that is for personal information sent/received between a client terminal and a WWW server via the Internet, and can eliminate the need for a facility such as a dedicated server for management of the personal information. SOLUTION: A client terminal divides personal information, gives an access ID to each of information divisions, and transmits them to the WWW server by means of the CGI (Common Gateway Interface) processing and mail. The WWW server receiving the divided personal information stores the divided personal information to one database based on the access IDs.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a client device for transmitting personal information of a user and a personal information protection system for securely transferring the user information in a server for managing the user information.

[0002]

2. Description of the Related Art In recent years, the Internet has rapidly spread due to the development of network infrastructure.
There are increasing opportunities to input personal information in situations such as online shopping on the Internet. However, on the other hand, the danger of eavesdropping and theft of credit card numbers on the Internet is increasing.

Hitherto, Japanese Patent Application Laid-Open No. H11-145 discloses a method for transmitting personal information of a user securely on the Internet.
No. 949, which relates to questionnaire collection. This is the World from the user terminal
When sending a questionnaire response to a Wide Web (hereinafter referred to as WWW) server, a provider with which the user has contracted encrypts and transmits the user's personal information to a WWW server that collects the questionnaire using an encryption key, and encrypts it. The WWW server that receives the received personal information decrypts the user's personal information using the decryption key and obtains the personal information corresponding to the questionnaire sent from the user terminal.

FIG. 11 is a schematic configuration diagram showing a conventional system for protecting personal information. In the figure, reference numeral 81 denotes a client computer used by a user, 4 denotes the Internet as a public communication network, 82 denotes a provider terminal provided in a provider that provides an Internet connection service to the user, and 83 denotes a user to the user via the Internet 4. It is a WWW server that provides services.

Next, the operation will be described. The protection of personal information performed on the Internet 4 configured as described above will be described by exemplifying a case in which a user returns a response to a questionnaire provided by the WWW server 83. First, the user inputs personal information to the provider terminal 82 in advance at the time of provider contract or the like. Thereafter, the user connects the client computer 81 to the provider terminal 82. The provider terminal 82 performs login information and password authentication, and notifies the user (client computer 81) of path establishment. The user answers the questionnaire sent from the accessed WWW server 83, and returns his / her ID (information for personal identification given by the contracted provider) to the WWW server 83 together with the answer.

[0006] WWW server 83 responds to the questionnaire response and ID.
Is received, the ID is encrypted based on the encryption key and transmitted to the provider terminal 82. The provider terminal 82 that has received the ID-encrypted data decrypts the ID based on the decryption key paired with the encryption key, extracts personal information corresponding to the ID, and encrypts the personal information based on the encryption key. Send it to WWW server 83. WW that received the encrypted personal information
W server 83 decrypts the personal information based on the decryption key,
It associates it with the questionnaire response previously sent from the client computer 81 (based on the ID) and performs each process. As described above, the personal information of the user is encrypted and handled to protect the personal information regarding the questionnaire response.

[0007]

Since the conventional personal information protection system is configured as described above, a storage means for storing the user's personal information in the provider terminal 82 is required. Information must be registered (input) in the provider terminal 82. Furthermore, when adding or changing personal information that has been registered once, the provider needs a server or the like that separately manages the personal information. Alternatively, there is a problem that the provider needs to notify the provider of the added / changed content by telephone or the like.

[0008] The present invention has been made to solve the above-mentioned problem, and eliminates the need for managing personal information by a provider terminal, and protects personal information while allowing confidential personal information to be arbitrarily specified. The purpose is to obtain a personal information protection system.

[0009]

A personal information protection system according to the present invention divides personal information into a client terminal, attaches an access ID sent from a WWW server in advance, and divides the divided personal information into WWW by CGI processing. A WWW client program to be transmitted to the server;
A control unit for performing control based on a mail client program to be transmitted to the WWW server is provided.
A WWW server program for receiving the divided personal information transmitted by the CGI processing from the client terminal, a server mail client program for receiving the remaining divided personal information transmitted as mail from the client terminal, and a divided personal information A control unit is provided for performing control based on a database operation program that stores information and the remaining divided personal information in the same database based on an access ID.

[0010] The personal information protection system according to the present invention comprises:
Access ID to WWW server and client terminal in advance
And a WWW server program for receiving, by CGI processing, the divided personal information to which the access ID has been assigned by the client terminal, and the divided remainder transmitted with the access ID as mail from the client terminal. For controlling based on a server mail client program for receiving personal information of the same and a database operation program for storing the divided personal information and the remaining divided personal information in the same database based on the access ID. Part is provided.

[0011] The personal information protection system according to the present invention comprises:
A decryption program for decrypting the divided and encrypted personal information received by the CGI processing from the client terminal in the WWW server, and the remaining divided and encrypted personal information received as mail from the client terminal And a control unit for performing control based on a decoding program for decoding.

[0012] The personal information protection system according to the present invention comprises:
The IP address of the client terminal is obtained from the WWW server, and a unique access ID for identifying the client terminal is generated by combining the IP address, the WWW page name accessed by the client terminal, and the access time. A control unit for performing control based on a WWW server program to be sent is provided.

[0013] The personal information protection system according to the present invention comprises:
The WWW server acquires a personal identifier input from the client terminal, generates a unique access ID for identifying the client terminal by combining the personal identifier, the WWW page name accessed by the client terminal, and the access time, A control unit for performing control based on a WWW server program sent to the client terminal is provided.

[0014] The personal information protection system according to the present invention comprises:
A WWW client program that divides personal information into client terminals, attaches an access ID sent from the WWW server in advance, and transmits the divided personal information to the WWW server by CGI processing, and the remaining individual divided with the access ID A control unit for performing control based on a mail client program for transmitting information as a mail to a WWW server is provided.

[0015] The personal information protection system according to the present invention comprises:
A control unit is provided in the client terminal for performing control based on an encryption program for encrypting the divided personal information transmitted by the CGI process and an encryption program for encrypting the remaining divided personal information to be transmitted as mail. It is a thing.

[0016] The personal information protection system according to the present invention comprises:
The client terminal has a personal information plug-in program that encrypts and divides personal information and attaches an access ID sent from a WWW server in advance, and a personal information plug-in program that encrypts and divides the personal information by the WWW by CGI processing. A control unit that performs control based on a WWW client program to be transmitted to the server and a mail client program that transmits the remaining personal information encrypted and divided by the personal information plug-in program to the WWW server as e-mail, A WWW server program for receiving encrypted and divided personal information transmitted from a client terminal by CGI processing, and a server mail client for receiving encrypted and divided remaining personal information transmitted as mail from a client terminal Program A decryption program for integrating and decrypting the encrypted and divided personal information based on the access ID and the remaining encrypted and divided personal information, and a database for storing the decrypted personal information in a database A control unit that performs control based on the operation program is provided.

The personal information protection system according to the present invention comprises:
Access ID to WWW server and client terminal in advance
And a WWW server program for receiving the personal information encrypted and divided by the client terminal and the access ID attached thereto by CGI processing, and a cipher transmitted as e-mail by the client terminal. And the remaining personal information that was split
A server mail client program for receiving the access ID attached thereto, and integrating the encrypted and divided personal information encrypted based on the access ID with the encrypted and divided remaining personal information. And a control unit for performing control based on a decryption program for decrypting personal information and a database operation program for storing decrypted personal information in a database.

The personal information protection system according to the present invention comprises:
A personal information plug-in program for encrypting and dividing personal information and attaching an access ID previously sent from the WWW server to the client terminal, and a WWW server for encrypting and dividing the personal information encrypted by the personal information plug-in program by CGI processing. And a control unit for performing control based on a WWW client program to be transmitted to the WWW server and a mail client program for transmitting the remaining personal information encrypted and divided by the personal information plug-in program as a mail to the WWW server.

[0019] The personal information protection method according to the present invention comprises:
The WWW accessing the personal identifier by the W server
Generating an access ID from the page name and the access time, transmitting the access ID to the client terminal, and receiving the access ID, the client terminal divides the personal information and divides the divided personal information from the WWW server. Affixing the sent access ID and transmitting it to the WWW server by the CGI process, and the WWW server receiving the access ID and the divided personal information transmitted by the CGI process from the client terminal and storing it in the database Then, the client terminal attaches the access ID to the remaining divided personal information, and
Transmitting to the WW server, the WWW server receiving the access ID transmitted as an e-mail from the client terminal and the remaining personal information divided, and dividing the remaining personal information into a database storing the same access ID. Is added and stored.

[0020] The personal information protection method according to the present invention comprises:
The process of generating an access ID from the personal identifier, the name of the WWW page accessed by the W server, and the access time, the process of transmitting the access ID to the client terminal, and the client terminal receiving the access ID include:
A step of dividing the personal information, a step of encrypting the divided personal information, and a step of
Attaching the access ID sent from the server and transmitting it to the WWW server by the CGI process, and the WWW server receiving the access ID transmitted from the client terminal by the CGI process and the personal information encrypted after being divided. And decrypting the divided personal information;
Storing the decrypted personal information together with the access ID in a database, encrypting the remaining personal information divided by the client terminal, and adding the divided personal information to the remaining encrypted personal information. Access I
Attaching D to the WWW server as e-mail, the WWW server receives the access ID transmitted as e-mail from the client terminal and the remaining encrypted personal information after being divided, and Decrypting the remaining personal information and adding and storing the decrypted remaining personal information in a database storing the same access ID.

[0021] The personal information protection method according to the present invention comprises:
The WWW accessing the personal identifier by the W server
A step of generating an access ID from the page name and the access time, a step of transmitting the access ID to the client terminal, a step of encrypting the personal information receiving the access ID, a step of encrypting the personal information, and a step of encrypting the encrypted personal information. Information is divided, and the encrypted and divided personal information is
Attaching the access ID sent from the W server and transmitting the access ID to the WWW server by the CGI process, and the WWW server transmits the access ID transmitted by the CGI process from the client terminal to the encrypted and divided personal information. And the client terminal attaches the access ID to the encrypted and divided remaining personal information and transmits the same to the WWW server as e-mail. The WWW server transmits the personal information as e-mail from the client terminal. After receiving the access ID and the encrypted and then divided remaining personal information, and receiving the encrypted and divided remaining personal information in the CGI process with the same access ID as the encrypted and then received encrypted personal information, A process of integrating and decrypting the divided personal information, and a process of decrypting the decrypted personal information together with the access ID. Those having a process of storing the over scan.

[0022]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS One embodiment of the present invention will be described below. Here, protection of personal information when purchasing a product using the Internet or when using a credit card for payment of a service fee will be described. Embodiment 1 FIG. FIG. 1 is a schematic configuration diagram showing a personal information protection system according to Embodiment 1 of the present invention. In FIG. 1, reference numeral 1 denotes a display unit such as a CRT and an LCD for displaying a WWW screen, and an input unit such as a keyboard and a mouse, and controls various processes based on a WWW client program, a mail client program, and the like, which will be described later. A client computer (client terminal) such as a personal computer (used by a user) provided with a control unit (not shown). 2 is a WWW installed on the client computer 1 and transmitted from a WWW server described later.
The data is received, a predetermined process is performed, and an access ID, division information and other information are transmitted to the WWW server (WW
WWW client program (having functions such as browsing of W). 3 is a client computer 1
And a mail client program 4 for transmitting mail to a WWW server with predetermined contents (access ID, divided personal information, etc.), and 4 is the Internet which is a public communication network.

Reference numeral 5 is provided with a control unit (not shown) for controlling each processing based on a WWW server program, a server mail client program, etc., which will be described later.
It is a WWW server that distributes sites. Reference numeral 6 denotes a WWW server program installed on the WWW server 5, and reference numeral 7 denotes a WWW server program 6 which constitutes a CGI (C
The CGI engine 8 performs an Ommon Gateway Interface process. The database operation program 8 constitutes a WWW server program 6 and inputs and outputs data from a database described later. Reference numeral 9 denotes a server mail client program for transmitting and receiving mail via the Internet 4 by the WWW server 5; 10 a mail analysis program for configuring the server mail client program 9 and analyzing the structure and content of the received mail;
Is a database operation program which constitutes the server mail client program 9 and performs data input / output of a database described later. Reference numeral 12 denotes a database provided in the WWW server 5 and collectively accumulating an access ID, personal information, and other related information for each individual.

FIG. 2 is an explanatory diagram showing an example of an access ID by which the WWW server 5 confirms a user when the user accesses the WWW server 5 from the client computer 1. In the figure, 21 is a personal identifier, 22 is WW
The W page name and 23 are access times. The access ID exemplified here is the personal identifier 21 and the WWW page name 2
2 and the access time 23. 24 is an IP address of a user (client computer 1) which is a specific example of the personal identifier 21, 25 is a WWW page name 22
The WWW page number 26, which is a specific example of, is the access time 23 and is specifically described as "2001.03.01.12.00". Reference numeral 27 denotes a user's mail address shown as a specific example of the personal identifier 21 input by the user.

FIG. 3 is an explanatory diagram showing an example of a user input screen displayed on the client computer 1. In the figure, reference numeral 31 denotes a user input screen distributed from the WWW server 5 to the client computer 1 via the Internet 4; 32, an input box for inputting the first five digits of a credit card number provided on the user input screen 31; An input field for inputting the last five digits of the card number, 34 is an amount field for inputting the upper four digits of the price of the product purchased by the user, and 35 is an amount field for displaying the last four digits of the price of the product purchased by the user. , 36 are product name fields for inputting product names (service names) purchased by the user.

FIG. 4 is a diagram showing W from the client computer 1.
FIG. 4 is an explanatory diagram showing the contents of a mail transmitted to the WW server 5. In the figure, reference numeral 41 denotes a client computer 1
Is a header of the mail 41 composed of the mail address of the WWW server 5 (WWW page provider) to which the mail 41 is transmitted and the mail address of the user who is the source of the mail 41. is there. 43 is the body of the mail 41 to which the access ID is attached, 45 is the divided personal information (1) constituting the body 43, and 46 is the divided personal information (2).

FIG. 5 shows the database 12 of the WWW server 5.
FIG. 4 is an explanatory diagram showing an example of contents constructed in FIG. 52 is data indicating the access ID of the user, 53 is data indicating the first five digits of the credit card number, 54 is data indicating the last five digits of the credit card number, 55 is data indicating the first four digits of the money amount, and 56 is the money amount Is the data indicating the last four digits, and 57 is the data indicating the product name.

Data 53 indicating the first five digits of the credit card number and data 5 indicating the last five digits of the credit card
4. The data 55 indicating the first four digits of the amount of money and the data 56 indicating the last four digits of the amount of money are "personal information" which is particularly required to be kept confidential.
And the data 57 indicating the product name is “other information” that is not so highly necessary to be kept confidential.

Next, the operation will be described. The operation of the client computer 1 and the WWW server 5 will be described with reference to the flowchart of FIG. The operation described in the following description is a content controlled by each control unit provided in the client computer 1 and the WWW server 5 based on each program provided in each.

When the client computer 1 accesses the WWW server 5, the WWW server 5
D is generated by a predetermined method (step ST1).

Here, generation of the access ID will be described. The access ID is the personal identifier 2 as described above.
1, WWW page name 22, access time 23,
For example, WWW server 5 (WWW server program 6)
Automatically generates an access ID, for example, in order to use the IP address 24 of the client computer 1 as the personal identifier 21,
Makes an inquiry to the WWW client program 2 running on the client computer 1 for the IP address and acquires it. In addition, WWW page name 22
The server program 6 uses the page number 25 accessed by the client computer 1. The access time uses an arbitrary time (including date and time) 26 accessed by the client computer 1 and the WWW server 5. Thus, the WWW server 5 sets the IP address 24, the page number 25, and the access time (“2001.03.01.12.0
An access ID is generated from 26).

Also, the WWW server 5 may acquire the content input by the user from the client computer 1 (WWW client program 2) and generate an access ID. The content to be input by the user is information uniquely indicating an individual. For example, the input of the mail address 27 by the user is obtained by the WWW client program 2 and the WWW server 5 obtains the input by using the CGI engine 7 to access. It is used as the personal identifier 21 constituting the ID. Also at this time, the WWW server 5 sends the mail address 27 (corresponding to the personal identifier 21), the page number 25 (corresponding to the WWW page name 22), and the access time "2001.03.01.12.00" 26 (corresponding to the access time 23). To generate an access ID.

The access ID generated as described above is transmitted from the WWW server 5 to the client computer 1.
Sent to Next, the user enters the user input screen 31 (shown in FIG. 3) displayed on the client computer 1.
A predetermined content is input in each of the input fields provided in. In addition,
The user input screen 31 is a screen provided on the WWW.
The user inputs the first five digits of the credit card number in the input field 32, the last five digits of the credit card number in the input field 33, the first four digits of the product price in the price field 34, and the price field 35 When the last four digits of the price of the product are entered in the product name field and the product name is entered in the product name field 36, the WWW client program 2 enters the input field 32 (the top five digits of the credit card number) and the price field 34 (the top The contents of (four digits) are used as divided personal information (step ST2), and a predetermined process is performed by adding a product name column 36 (product name) and an access ID acquired in advance to the CGI engine 7 (CGI process). And sends it to WWW server 5 (WWW server program 6) (step ST3).

The WWW server 5 operates in the input field 3 obtained from the client computer 1 by the CGI engine 7.
2 (the first five digits of the credit card number), the money amount column 34 (the first four digits of the money amount), and the contents of the product name column 36 (product name), together with the access ID assigned thereto, to the database 12 by the database operation program 8. It is stored (step ST4).

The contents of the remaining input fields 33 (the last five digits of the credit card number) and the money amount field 35 (the last four digits of the money amount), which have not been transmitted in the above description, are divided by the mail client program 3 into individual information. (1) 45 and divided personal information (2) 46, to which the access ID is attached to form a main body 43 and a header 42 is attached to the mail 41 (shown in FIG. 4), the WWW server 5 (server) It is transmitted to the mail client program 9) (step ST5).

The server mail client program 9 that has received the mail 41 uses the mail analysis program 10 to extract the access ID from the body 43 of the mail 41.
The contents of the divided personal information (1) 45 and the divided personal information (2) 46 are extracted, and these are extracted by the database operation program 11 into the database 12.
Having the same access ID above (eg, frame)
To be stored additionally. In this way, the personal information of the user is put together. More specifically, the content of the database 12 shown in FIG. 5 will be described as an example.
Data 52 indicating the access ID, data 53 indicating the first five digits of the credit card (personal information), data 55 indicating the first four digits of the amount of money (personal information), and data 57 indicating the product name
It is configured as one frame (or one file) as (other information) and stored in the database 12.

Thereafter, the database operation program 11
Is a frame (or a file or the like) containing the data 52 indicating the same access ID as the access ID extracted from the mail 41 and the data extracted from the mail 41 and the data indicating the lower five digits of the credit card. 54 (personal information), data 56 indicating the last four digits of the amount (personal information)
As additional storage. Thus, an access I
A series of personal information relating to D is stored in the database 12.

As described above, according to the first embodiment, the user's personal information is divided into transmission by CGI processing and transmission by e-mail and transmitted to the WWW server. Alternatively, if only one of the contents transmitted by e-mail is eavesdropped, all the personal information is not eavesdropped, and the effect of effectively protecting the personal information on the Internet can be obtained.

Embodiment 2 In the second embodiment, in the personal information protection system of the first embodiment, a signal transmitted and received between a client computer and a WWW server is encrypted and performed. The basic system configuration is the same. The same or corresponding parts are denoted by the same reference numerals, and the description thereof will be omitted. Differences will be described.

FIG. 7 is a schematic configuration diagram showing a personal information protection system according to the second embodiment. In the figure, reference numeral 61 is used by a control unit provided in the client computer 1 and processed by the WWW client program 2 to save W
An encryption key (encryption program) for encrypting the content transmitted to the WW server 5. Reference numeral 62 denotes an encryption key (encryption program) that is used in the control unit of the client computer 1 and encrypts the content of the email transmitted from the email client program 3 to the WWW server 5. 63 is provided in the WWW server program 6 used in the control unit of the WWW server 5, and the WWW client program 2
Is a decryption key (decryption program) for decrypting the content processed by the encryption key 61 and encrypted by the encryption key 61. 64 is provided in the server mail client program 9 used in the control unit of the WWW server 5, and the mail client program 3
This is a decryption key for decrypting the contents of the mail (encrypted by the encryption key 62) transmitted from.

Next, the operation will be described. The operation of the client computer 1 and the WWW server 5 will be described with reference to the flowchart of FIG. The operation described in the following description is a content controlled based on each program provided in each control unit of the client computer 1 and the WWW server 5.

As in the first embodiment, the WWW server 5
Generates an access ID (step ST1), the access ID is transmitted to the client computer 1, and the personal information input by the user to the client computer 1 is divided (step ST2). Thereafter, the “divided personal information” is encrypted with the encryption key 61 (step S
T10), the CGI process is performed with the other information and the access ID added thereto (step ST11), and transmitted to the WWW server 5 by the WWW client program 2.

The access I is performed by the CGI engine 7.
D and other information and encrypted "divided personal information"
The WWW server 5 that has received the “decrypted personal information” encrypted with the decryption key 63 decrypts the “divided personal information” (step S
T12) The access ID and other information and the “divided personal information” decrypted by the database operation program 8 are stored in the database 12 as in the first embodiment (step ST4).

Next, the client computer 1 encrypts the remaining divided personal information with the encryption key 62 (step ST13), attaches the access ID to the encrypted personal information, and forms the body of the mail by the WW by the mail client program 3.
It transmits to W server 5 (step ST14).

The WWW server 5 which has received the mail transmitted from the client computer 1 extracts the contents of the mail into the access ID and the encrypted “remaining divided personal information” by the mail analysis program 10, respectively. The encrypted “remaining divided personal information” is decrypted using the decryption key 64 (step ST15). After this,
The decrypted "remaining divided personal information" is additionally stored in a database 12 having the same access ID as the access ID given to the mail by the database operation program 11 (specifically, a frame constituting the database 12). (Step ST6).

As described above, according to the second embodiment, the user's personal information is divided into CGI processing and mail, and is encrypted and transmitted to the WWW server, so that either CGI processing or mail is performed. On the other hand, since it is difficult to decipher the confidential personal information even if one or both are eavesdropped, the effect of protecting the personal information is obtained.

Embodiment 3 FIG. 9 is a schematic configuration diagram showing a personal information protection system according to the third embodiment. The same or equivalent parts as those described in the first embodiment are denoted by the same reference numerals, and description thereof is omitted. In the figure, 71
Is W used in the control unit of the client computer 1.
This is a personal information input plug-in (personal information plug-in program) provided in the WW client program 2 and for causing the control unit to perform control for prompting the user to input personal information. Numeral 72 is provided in the personal information plug-in 71, and the client computer 1 sends the WWW server 5
This is an encryption key (encryption program) for encrypting personal information transmitted to.

Reference numeral 73 denotes a personal information decryption program used in the control unit of the WWW server 5; 74, a decryption key (decryption program) provided in the personal information decryption program 73;
Reference numeral 5 denotes a database operation program for storing contents output from the personal information decryption program 73 in the database 12.

Next, the operation will be described. The operation of the client computer 1 and the WWW server 5 will be described with reference to the flowchart of FIG. The operation described in the following description is performed by the client computer 1 and the WWW
This is the content controlled by each control unit of the server 5 based on each program provided. WWW server 5 generates an access ID as in the first embodiment (step ST).
1) Send to client computer 1.

After that, the client computer 1
Using the personal information plug-in 71, the user is prompted to input personal information and the like (step ST20). When the user inputs personal information, the contents are converted to a personal information plug-in 7.
1 is encrypted using the encryption key 72 (step ST2).
1). The personal information plug-in 71
(Step ST22), send an access ID to the WWW client program 2 together with other information (such as a product name), and perform CGI processing.
It transmits to W server 5 (step ST23). The remaining encryption (personal information) divided by the personal information plug-in 71 is sent to the mail client program 3 with an access ID added thereto, and is converted into a mail text by the mail client program 3. This mail is sent to the WWW server 5.
(Step ST24).

The WWW server 5 converts the contents (access ID, divided encryption (personal information), and other information) received using the CGI engine 7 into a personal information decryption program 73.
Enter Further, the server mail client program 9 which has received the mail from the client computer 1 divides the contents of the mail into an access ID by the mail analysis program 10 and obtains the remaining encryption (personal information).
And input to the personal information decryption program 73. The personal information decryption program 73 into which these are input
Integrates the divided encryption (personal information) (received in the CGI processing) with the same access ID using the decryption key 74 and the remaining divided encryption (personal information) received as the mail content And decrypt (step ST2)
5). The decrypted personal information, other information, and the access ID assigned thereto are stored in the database 12 as one (for example) frame by the database operation program 75 (step ST26).

As described above, according to the third embodiment, the encrypted personal information is divided and transmitted, so that the decryption key is stolen and the CGI processing or the contents of the mail are eavesdropped. Even in this case, it is impossible to partially decrypt the personal information (because the encryption is divided), so that the personal information cannot be restored so that it can be decrypted, and the effect of protecting the personal information can be obtained.

[0053]

As described above, according to the present invention, a client terminal is provided with a WWW for transmitting divided personal information with an access ID to a WWW server by CGI processing.
A control unit is provided for performing control based on a client program and a mail client program for sending the remaining personal information divided with the access ID to a WWW server as mail, and the WWW server is provided with a CGI process from the client terminal by CGI processing. A WWW server program for receiving the transmitted divided personal information, a server mail client program for receiving the divided remaining personal information transmitted as e-mail from the client terminal, the divided personal information and the divided remaining And a database operation program that stores the personal information in the same database based on the access ID. Therefore, in addition to the client terminal and the WWW server, the personal information provided in the provider or the like is provided. Equipment such as servers to manage In short, the management of confidential personal information becomes easy, the confidential content can be arbitrarily specified and changed, and even if CGI processing or e-mail content is eavesdropped, the personal information will be incomplete. Since only personal information can be obtained, there is an effect that personal information can be effectively protected.

According to the present invention, a WWW server program for receiving, by CGI processing, divided personal information to which an access ID is assigned by a client terminal to a WWW server, and transmitting the access ID as a mail from the client terminal with the access ID A server mail client program for receiving the remaining divided personal information;
Since a control unit for controlling the divided personal information and the remaining divided personal information in the same database based on the access ID is provided, a control unit for controlling the CGI processing or the mail content is provided. Even if eavesdropping, personal information can only be obtained incompletely, so that there is an effect that personal information can be effectively protected.

According to the present invention, the WWW server is provided with a decryption program for decrypting the personal information that has been received from the client terminal by the CGI processing and then encrypted, and the divided program received as mail from the client terminal. And a decryption program for decrypting the remaining personal information encrypted from, the control unit is provided, so that even if the CGI processing or the e-mail content is eavesdropped,
Further, even when the decryption program is stolen, only partial personal information can be obtained, and the personal information can be effectively protected.

According to the present invention, the WWW server acquires the IP address of the client terminal, and combines this IP address with the WWW page name accessed by the client terminal and the access time to uniquely identify the client terminal. Since a control unit for generating an access ID and performing control based on a WWW server program sent to the client terminal is provided, a unique access ID is automatically generated during access between the client terminal and the WWW server. The use of the access ID has an effect that personal information can be effectively protected.

According to the present invention, the WWW server acquires the personal identifier input from the client terminal, and the personal identifier and the WW accessed by the client terminal are obtained.
Since a unique access ID for identifying a client terminal is generated by combining a W page name and an access time, and a control unit for performing control based on a WWW server program sent to the client terminal is provided, the access ID is used. This effectively protects personal information.

According to the present invention, the client terminal
A WWW client program that divides personal information, attaches an access ID sent from the WWW server in advance, and transmits the divided personal information to the WWW server by CGI processing, and sends the remaining personal information attached with the access ID as mail. Since a control unit for performing control based on the mail client program to be transmitted to the WWW server is provided,
Even if CGI processing or eavesdropping on the contents of a mail are performed, personal information can only be obtained incompletely, so that there is an effect that personal information can be effectively protected.

According to the present invention, the client terminal
Since a control unit for controlling based on an encryption program for encrypting the divided personal information transmitted by the CGI process and an encryption program for encrypting the remaining divided personal information to be transmitted as mail is provided, the CGI Even if the processing or e-mail content is eavesdropped, or even if the decryption program is stolen, only partial personal information can be obtained, and the personal information can be effectively protected.

According to the present invention, the personal information is encrypted by the personal information plug-in program which encrypts the personal information, divides the personal information, and attaches the access ID sent from the WWW server in advance, and the personal information plug-in program. Control is performed based on a WWW client program for transmitting the divided personal information to the WWW server by CGI processing, and a mail client program for transmitting the remaining divided personal information encrypted by the personal information plug-in program to the WWW server as mail. Provide a control unit,
The WWW server receives the encrypted and divided personal information transmitted from the client terminal by CGI processing and receives the encrypted and divided remaining personal information transmitted as e-mail from the client terminal. A server mail client program, a decryption program for integrating and decrypting the encrypted and divided personal information based on the access ID and the remaining encrypted and divided personal information, and a decrypted personal information. Since a control unit for performing control based on a database operation program stored in a database is provided, even if CGI processing or e-mail contents are eavesdropped, the contents are encrypted and cannot be decrypted. Even if is stolen, the personal information is encrypted and divided, so the CGI Or simply by eavesdropping one of mail content is effective which can be protected effectively personal information can not be decrypted partial personal information.

According to the present invention, the access ID is sent to the client terminal in advance to the WWW server, and the personal information encrypted and divided by the client terminal and the access ID attached thereto are transmitted to the WWW server. A WWW server program received by the CGI processing, a server mail client program for receiving the encrypted and divided remaining personal information transmitted as mail by the client terminal, and the access ID attached thereto; A decryption program that integrates and decrypts the encrypted and divided personal information based on the access ID and the encrypted and divided remaining personal information, and stores the decrypted personal information in a database. Since a control unit for performing control based on the stored database operation program is provided, the CGI Content for be eavesdropping on physical or e-mail content is encrypted is unbreakable, also,
Even if the decryption program is stolen, the personal information is encrypted and divided, so partial personal information cannot be decrypted only by eavesdropping on either the CGI processing or the e-mail contents, so that the personal information can be effectively recovered. There is an effect that can be protected.

According to the present invention, the client terminal
A personal information plug-in program which encrypts and divides personal information and attaches an access ID previously sent from the WWW server, and a WWW which transmits the personal information encrypted and divided by the personal information plug-in program to the WWW server by CGI processing. Since a control unit is provided based on a client program and a mail client program for transmitting the remaining personal information encrypted and divided by the personal information plug-in program to the WWW server as mail, the CGI processing or eavesdropping of mail contents are provided. Even if it is encrypted, its contents cannot be decrypted, and even if the decryption program is stolen, the personal information is encrypted and divided. Since only partial eavesdropping cannot decrypt partial personal information, There is an effect capable of protecting the information.

According to the present invention, the WWW server
A step of generating an access ID from the personal identifier, the name of the WWW page being accessed and the access time, a step of transmitting the access ID to the client terminal, and a step of dividing the personal information by the client terminal having received the access ID. A process of attaching the access ID sent from the WWW server to the divided personal information and transmitting the divided personal information to the WWW server by the CGI process. The WWW server compares the access ID transmitted from the client terminal by the CGI process with the divided personal information. Receiving and storing in a database;
A step in which the client terminal attaches the access ID to the remaining divided personal information and transmits the same to the WWW server as an e-mail, and the WWW server transmits the access ID transmitted from the client terminal as the e-mail and the remaining divided personal information to the WWW server. Receiving and storing the remaining divided personal information in a database storing the same access ID. Therefore, in addition to the client terminal and the WWW server, an individual provided in a provider or the like is provided. Eliminates the need for equipment such as a server to manage information, facilitates the management of confidential personal information, allows the user to arbitrarily designate and change the confidential content, and also performs CGI processing or eavesdropping on mail content However, since personal information can only be obtained incompletely, there is an effect that personal information can be effectively protected.

According to the present invention, the step of generating an access ID from the personal identifier, the name of the WWW page being accessed and the access time by the WWW server, the step of transmitting the access ID to the client terminal, and the step of The client terminal that has received the process of dividing the personal information, the process of encrypting the divided personal information,
The process of attaching the access ID sent from the WWW server to the divided and encrypted personal information and transmitting it to the WWW server by CGI processing, and the WWW server being divided into the access ID transmitted from the client terminal by CGI processing. Receiving the encrypted personal information and then decrypting the divided personal information; storing the decrypted personal information in the database together with the access ID; and Encrypting the remaining personal information that has been divided, attaching the access ID to the divided and encrypted remaining personal information, transmitting the access ID as a mail to a WWW server,
Receiving the access ID transmitted as e-mail from the client terminal and the remaining encrypted personal information after being divided, decrypts the divided remaining personal information, and decrypts the same into the database storing the same access ID. And adding and storing the remaining divided personal information even if the CGI processing or the e-mail content is eavesdropped, or even if the decryption program is stolen. Only information can be obtained, and there is an effect that personal information can be protected effectively.

According to the present invention, the WWW server
A process of generating an access ID from the personal identifier, the name of the WWW page being accessed, and the access time, a process of transmitting the access ID to the client terminal, and the client terminal receiving the access ID encrypts the personal information. A step of dividing the encrypted personal information, attaching the access ID sent from the WWW server to the encrypted and divided personal information, and transmitting the access ID to the WWW server by CGI processing; Receiving the access ID transmitted from the terminal by the CGI process and the encrypted and divided personal information, and the client terminal attaches the access ID to the encrypted and divided remaining personal information and sends the access information as mail. Sending to a WWW server, and the WWW server The received access ID and the encrypted and divided remaining personal information are received, and the encryption is received in the CGI process with the same access ID as the encrypted and divided remaining personal information. Since it has a step of integrating and decrypting the divided and divided personal information and a step of storing the decrypted personal information in the database together with the access ID, the CGI processing or the e-mail content is intercepted. Even if the decryption program is stolen, the personal information is encrypted and divided, so that either the CGI processing or the e-mail content is intercepted even if the decryption program is stolen. Only by doing so, it is not possible to decrypt partial personal information, so that there is an effect that personal information can be effectively protected.

[Brief description of the drawings]

FIG. 1 is a schematic configuration diagram showing a personal information protection system according to a first embodiment of the present invention.

FIG. 2 is an explanatory diagram showing an example of an access ID according to the first embodiment.

FIG. 3 is an explanatory diagram illustrating an example of a user input screen according to the first embodiment.

FIG. 4 is an explanatory diagram showing the contents of a mail according to the first embodiment.

FIG. 5 is an explanatory diagram showing the contents of a database according to the first embodiment.

FIG. 6 is a flowchart showing operations of a client computer and a WWW server according to the first embodiment.

FIG. 7 is a schematic configuration diagram showing a personal information protection system according to a second embodiment of the present invention.

FIG. 8 is a flowchart showing operations of a client computer and a WWW server according to the second embodiment.

FIG. 9 is a schematic configuration diagram showing a personal information protection system according to Embodiment 3 of the present invention.

FIG. 10 is a flowchart showing operations of a client computer and a WWW server according to the third embodiment.

FIG. 11 is a schematic configuration diagram showing a conventional system for protecting personal information.

[Explanation of symbols]

1 client computer (client terminal),
2 WWW client program, 3 mail client program, 4 Internet, 5 WWW server, 6 WWW server program, 7 CGI engine, 8 database operation program, 9 server mail client program, 10 mail analysis program, 11 database operation program, 12 database, 21 Personal identifier, 22 WWW page name, 2
3 access time, 24 IP address, 25 page number, 26 access time, 27 email address, 3
1 user input screen, 32 above credit card number 5
Input box for digits, 33 input box for lower 5 digits of credit card number, 34 input box for upper 4 digits of money amount, 35 lower 4 for money amount
Digit input field, 36 Product name field, 41 mail, 42 mail header, 43 mail text, 45 divided personal information (1), 46 divided personal information (2), 5
2 Data indicating access ID, 53 Data indicating upper 5 digits of credit card number, 54 Data indicating lower 5 digits of credit card number, 55 Data indicating upper 4 digits of money amount, 56 Data indicating lower 4 digits of money amount , 57 Data indicating the product name, 61 Encryption key (encryption program), 6
2 encryption key (encryption program), 63 decryption key (decryption program), 64 decryption key (decryption program),
71 personal information plug-in (personal information plug-in program), 72 encryption key (encryption program), 73 personal information decryption program, 74 decryption key (decryption program), 75 database operation program, 81 client computer, 82 provider terminal, 83
WWW server.

Claims (13)

[Claims] 1. A personal information protection system for protecting personal information transmitted and received between a client terminal and a WWW server via the Internet, wherein the client terminal divides personal information and pre-divides the W
A WWW client program for attaching the access ID sent from the WW server and transmitting the divided personal information to the WWW server by CGI processing; and the WWW server for attaching the access ID and dividing the remaining personal information as mail. And a control unit for performing control based on a mail client program to be transmitted to the WWW server.
A WWW server program for receiving the divided personal information transmitted by processing, a server mail client program for receiving the divided remaining personal information transmitted as mail from the client terminal, and the divided personal information A personal information protection system, comprising: a control unit that performs control based on a database operation program that stores information and the divided remaining personal information in the same database based on the access ID. 2. A personal information protection system comprising a WWW server that keeps personal information transmitted and received between a client terminal and the client terminal via the Internet, wherein the WWW server sends an access ID to the client terminal in advance. In advance, the client terminal assigns the access ID to the divided personal information by CG.
I WWW server program received by I processing and the access ID as mail from the client terminal
A server mail client program that receives the divided remaining personal information transmitted with the same, and the same database based on the access ID, the divided personal information and the divided remaining personal information. A personal information protection system comprising a control unit for performing control based on a database operation program stored in a personal computer. 3. A WWW server, comprising: a decryption program for decrypting personal information encrypted by being divided and received from a client terminal by CGI processing; and encrypting the divided and received personal information by e-mail from the client terminal. 3. The personal information protection system according to claim 1, further comprising a control unit for performing control based on a decryption program for decrypting the remaining personal information. 4. A WWW server acquires an Internet Protocol (IP) address of a client terminal, and uniquely identifies the client terminal by combining the IP address with a WWW page name accessed by the client terminal and an access time. The personal information protection according to any one of claims 1 to 3, further comprising a control unit that generates an access ID of the user and performs control based on a WWW server program transmitted to the client terminal. system. 5. A WWW server obtains a personal identifier input from a client terminal, and combines the personal identifier with a WWW page name accessed by the client terminal and an access time to uniquely identify the client terminal. 4. The personal information protection system according to claim 1, further comprising a control unit configured to generate an access ID and perform control based on a WWW server program transmitted to the client terminal. . 6. A personal information protection system comprising a client terminal for keeping personal information transmitted and received between the WWW server and the WWW server via the Internet, wherein the client terminal divides personal information, and And a WWW client program for transmitting the divided personal information to the WWW server by CGI processing with the access ID sent from the client, and transmitting the divided personal information to the WWW server as the mail with the access ID divided. A personal information protection system comprising a control unit for performing control based on a mail client program. 7. The client terminal performs control based on an encryption program for encrypting the divided personal information transmitted by CGI processing and an encryption program for encrypting the remaining divided personal information transmitted as mail. 7. The personal information protection system according to claim 1, further comprising a control unit for performing the operation. 8. A personal information protection system for protecting personal information transmitted and received between a client terminal and a WWW server via the Internet, wherein the client terminal encrypts the personal information, divides the encrypted personal information, and predivides the WWW. A personal information plug-in program to which an access ID is sent from the server, and personal information encrypted and divided by the personal information plug-in program
A control unit that performs control based on a WWW client program that transmits to the WWW server by the I processing and a mail client program that transmits the remaining personal information encrypted and divided by the personal information plug-in program to the WWW server as e-mail. The WWW server receives a CGI from the client terminal.
A WWW server program for receiving the encrypted and divided personal information transmitted by processing, and a server mail client program for receiving the encrypted and divided remaining personal information transmitted as mail from the client terminal. A decryption program for integrating and decrypting the encrypted and divided personal information based on the access ID and the encrypted and divided remaining personal information, and storing the decrypted personal information in a database. A personal information protection system comprising a control unit for performing control based on a database operation program. 9. A WWW which keeps personal information transmitted and received between a client terminal and the Internet via the Internet.
In a personal information protection system including a server, the WWW server sends an access ID to the client terminal in advance, and encrypts and divides the personal information after being encrypted by the client terminal. W receiving access ID and CGI process
A WW server program; a server mail client program for receiving the encrypted and divided remaining personal information transmitted as mail by the client terminal and the access ID attached thereto; A decryption program for integrating and decrypting the encrypted and divided personal information and the encrypted and divided remaining personal information based on the encrypted personal information, and a database for storing the decrypted personal information in a database A personal information protection system comprising a control unit for performing control based on an operation program. 10. A personal information protection system including a client terminal for protecting personal information transmitted and received between the WWW server and the WWW server via the Internet, wherein the client terminal encrypts the personal information and divides the encrypted personal information. A personal information plug-in program to which an access ID previously sent from the WWW server is attached, and personal information encrypted and divided by the personal information plug-in program to CG
A control unit that performs control based on a WWW client program that transmits to the WWW server by the I processing and a mail client program that transmits the remaining personal information encrypted and divided by the personal information plug-in program to the WWW server as e-mail. Personal information protection system characterized by the provision of. 11. A personal information protection method for protecting personal information transmitted and received between a client terminal and a WWW server via the Internet, wherein the WWW server uses a personal identifier, a WWW page name being accessed, and an access time. Generating an access ID from the above, transmitting the access ID to the client terminal, and receiving the access ID, the client terminal divides the personal information, and transmits the divided personal information to the divided personal information from the WWW server. An access ID is attached, and the W
Transmitting to a WWW server, wherein the WWW server transmits a CGI from the client terminal;
Receiving the access ID transmitted by the processing and the divided personal information, and storing the divided personal information in a database; and the client terminal attaches the access ID to the remaining divided personal information and transmits the same to the WWW server as mail. And the WWW server receives the access ID transmitted as e-mail from the client terminal and the divided remaining personal information, and stores the divided remaining personal information in a database storing the same access ID. Storing the personal information. 12. A personal information protection method for protecting personal information transmitted and received between a client terminal and a WWW server via the Internet, wherein the WWW server uses a personal identifier, a WWW page name being accessed, and an access time. Generating an access ID from the above, transmitting the access ID to the client terminal, dividing the personal information by receiving the access ID, and encrypting the divided personal information. Adding the access ID sent from the WWW server to the divided and encrypted personal information, and transmitting the personal information to the WWW server by CGI processing.
Receiving the access ID transmitted by the processing and the encrypted personal information after being divided, and decrypting the divided personal information; and transmitting the decrypted divided personal information together with the access ID. Storing the information in a database; encrypting the remaining personal information divided by the client terminal; attaching the access ID to the divided and encrypted remaining personal information;
Transmitting to the W server, the WWW server receives the access ID transmitted as mail from the client terminal and the remaining encrypted personal information after being divided, and Decrypting and storing the decrypted and divided remaining personal information in a database in which the same access ID is stored. 13. A personal information protection method for protecting personal information transmitted and received between a client terminal and a WWW server via the Internet, wherein the WWW server uses a personal identifier, a WWW page name being accessed, and an access time. Generating an access ID from the above, transmitting the access ID to the client terminal, the client terminal receiving the access ID encrypts the personal information, and divides the encrypted personal information. Attaching the access information sent from the WWW server to the encrypted and divided personal information, and transmitting the access information to the WWW server by CGI processing.
Receiving the access ID transmitted by the process and the encrypted and divided personal information; and the client terminal attaches the access ID to the encrypted and divided remaining personal information and sends the W
Transmitting to the WW server, the WWW server receives the access ID transmitted as mail from the client terminal and the encrypted and divided remaining personal information, and the encrypted and divided Integrating and decrypting the encrypted and divided personal information received in the CGI process with the same access ID as the rest of the personal information;
And storing the decrypted personal information in a database.