JP2004102913A - Personal information managing system and method therefor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To efficiently use the personal information of a service user while getting permission to use the information from the service user. <P>SOLUTION: In this system, a request of permission to use desired personal information by an information use applicant is inputted from an input/output part for the information use applicant (14) and transmitted to a use supporting server of personal information (10), and the request information is registered on a use permission request management part (13); the request information managed by the use permission request management part (13) is perused by a service user using a service user input/output part (12), the propriety of the use is transmitted to the use supporting server of personal information (10). The propriety condition of the service user to the request of permission to use is perused by the information use applicant using the input/output part for the information use applicant (14), and the permitted personal information is properly received by the applicant. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a personal information management technology for efficiently using personal information of a service user managed by an information system that provides a predetermined service to a user while protecting privacy.
[0002]
[Prior art]
Many information systems are provided on the Internet and intranets, and provide services to users. As personal information of service users registered in these information systems, in addition to registration information such as name and age, history information such as access log, message log, purchase log, etc. exists, which are used for organizational activity analysis, social surveys and It is used as data for market research.
[0003]
However, the use of such personal information is used without informed consent (explanation and consent) to the service user, and the service user can grasp the purpose for which his / her personal information is used. There is no fact. On the other hand, when an information use applicant who wants to use personal information for the purpose of organizational activity analysis, social research, market research, and the like uses such personal information, the purpose, method, range, and reward for providing the information, etc. of the use of the information are described on the Web. A method of obtaining the consent by presenting it to the target service user via a page, an e-mail, or the like is generally adopted, and the procedure takes time.
[0004]
It is desired to efficiently distribute the personal information of the user while protecting the privacy of the user.
[0005]
In addition, as a prior art related to the present invention, there are a user investigation method using an information system and a communication network (for example, Patent Documents 1 to 6). These prior arts do not provide a service function intended to provide informed consent for privacy protection of log data automatically compiled from information registered by a user and user activities.
[Patent Document 1]
JP 2001-216369A
[Patent Document 2]
JP-A-2002-24519
[Patent Document 3]
JP-A-2002-24474
[Patent Document 4]
JP-A-2002-49737
[Patent Document 5]
JP-A-2002-24673
[Patent Document 6]
JP-A-2002-24567
[0006]
[Problems to be solved by the invention]
The present invention has been made in consideration of the above circumstances, and has as its object to provide a technique for efficiently distributing personal information of a user while protecting the privacy of the user.
[0007]
[Means for Solving the Problems]
According to the present invention, in order to achieve the above-described object, a configuration as described in the claims is adopted.
[0008]
According to the principle configuration of the present invention, an information use applicant who wants to use the personal information of the service user, the information to be used, the purpose of use, the method, means for registering a use permission request such as a range or a reward, A means by which a service user can view the registered use permission request and input permission / non-permission of use, and an information use applicant can check the permission status of the use permission request, By means of obtaining the information collectively, the information use applicant can efficiently use the service user's personal information while receiving the use permission of the service user.
[0009]
Personal information obtained with the permission of the service user includes not only static information such as name and gender, but also logs accumulated in the information system that provides the service by using the daily service by the service user. The service usage information that is analyzed and changes gradually is included, and during the period permitted by the service user, the information use applicant can obtain the service usage information of the service user that changes.
[0010]
The service used by the service user is, for example, a portal service that is the main activity of the service user, an online shopping service in which the service user performs a purchase activity, and the like. In the case of the portal service, the service usage information includes, for example, usage service history information indicating which service the user has used in the portal service, and how long the service user provides the portal service. In the case of an online shopping service, the service usage information may be, for example, detailed browse product information such as which product detailed information was browsed from the product list information, and what product Purchased product information indicating whether or not the user has purchased is considered.
[0011]
Further, the present invention will be described.
[0012]
According to an aspect of the present invention, there is provided a personal information management device for managing personal information of a service user stored in an information system for providing a predetermined service to a service user in order to achieve the above object: A permission request registering means for receiving and registering from the terminal of the information use applicant the personal information that the information use applicant wants to use and identifying personal information; and a service permission request registration means in the service user terminal; A license request browsing information supply unit that supplies information for browsing a license request of a registered use applicant; and a license request registered in the license request registration unit from a service user terminal. Response registration means for receiving and registering a response to the permission of the user; and storing the information in the terminal of the information use applicant based on the permission information registered in the permission response registration means. And it is provided with a means for supplying information permitted by the service user Te.
[0013]
In this configuration, the personal information of the service user can be easily used based on the permission of use of the service user.
[0014]
In this configuration, a means for supplying information to the terminal of the information use applicant for confirming whether or not the use permission request can be accepted may be further provided.
[0015]
Further, the personal information may include information extracted from a log of the information system.
[0016]
Further, a response indicating whether or not the disclosure level of the personal information has been designated in response to the use permission request may be registered in the permission / response registration unit. As the disclosure level, an information group belonging to each level may be specified in advance, or the level may be determined based on a calculation based on a predetermined rule and its numerical value.
[0017]
Further, information on the information use applicant who has registered the use permission request may be provided to the service user.
[0018]
Also, an incentive may be given to a service user who has given permission to use personal information.
[0019]
The incentive may be given by the information use applicant.
[0020]
Further, a means may be further provided for the service user to set the range of the use permission request desired for browsing.
[0021]
Further, means for updating the contents of the use permission request of the information use applicant registered in the use permission request registration means may be further provided. In this case, the use permission request browsing information supply means may provide information that allows the use permission request whose contents have been updated to be browsed separately from other use permission requests.
[0022]
Further, the use permission request browsing information supply means may provide information that allows a newly registered use permission request to be browsed separately from other use permission requests.
[0023]
The present invention is not limited to the case where the present invention is implemented in the form of an apparatus or a system. It is apparent that the present invention can be implemented in the form of a method and at least a part thereof can be implemented as a computer program.
[0024]
The above aspects of the present invention and other aspects of the present invention are set forth in the following claims, and are described in detail below using examples.
[0025]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, an embodiment of a personal information use support system to which the present invention is applied will be described.
[0026]
FIG. 1 shows an embodiment of the present invention as a whole. In this embodiment, a personal information use support system is constructed by a network configuration including a personal information use support server (10). The personal information use support server (10) may serve as an information system for providing a service to a user, or may be configured separately from an information system for providing a service to a user. The personal information use support server (10) may be configured to manage user information of each of a plurality of information systems.
[0027]
In FIG. 1, a personal information use support server (10) includes a database for realizing a service user personal information management unit (11) and an information user use permission request management unit (13), and a service user input / output. And a Web server that realizes an input / output unit (14) for the information use applicant. Further, the network can be appropriately adopted to any network such as a corporate LAN, but the Internet (20) is taken as an example here. The personal information use support server (10), the service user terminal (21), and the information use applicant terminal (22) are network-connected via the Internet (20).
[0028]
The service user terminal (21) and the information use applicant terminal (22) may be, for example, a mobile phone with an Internet connection function, a PDA (Personal Digital Assistant), a TV with a Web browsing function, a game machine, or the like. Good. Here, the service user means a registrant registered in an information system that provides a service in order to use various services on the network. For the purpose of smooth use of the registrant and maintenance of the service, the information system administrator adds personal information of the registrant, such as access log, message log and purchase log, in addition to registration information such as name and age. Generally, management information is centrally managed. The information system is, for example, a system for performing electronic commerce, a system for performing information search, a system for performing file management, a system for providing Internet access, and the like for the user.
[0029]
The personal information use support server (10) of the present invention is provided with various databases, and transmits an HTTP request / response to the service user terminal (21) and the information use applicant terminal (22) accessed by designating a URL. Interact. HTTP (Hypertext Transfer Protocol) is a communication protocol for transmitting and receiving HTML documents between a Web server and a client computer via the Internet.
[0030]
In the present embodiment, for example, first, the information use applicant uses the information use applicant terminal (22) (client) to enter the URL (Uniform) of the information use applicant input / output unit (14) (described in the HTML document). Resource Locators are transmitted to the personal information use support server (10). On the other hand, the personal information use support server (10) sends an HTML document (for example, an “personal information use request application form” as shown in FIG. 4 as a display image of a WWW browser) to the input / output unit (14). Document) to the information use applicant terminal (22). The information use applicant inputs the use permission request for the desired personal information from the information use applicant input / output unit (14), and transmits the request to the personal information use support server (10) to manage the request information. Register in section (13).
[0031]
The service user browses the request information managed by the use permission request management unit (13) using the service user input / output unit (12), and determines whether or not the use is possible in the personal information use support server (10). send. The use permission request management unit (13) manages information on whether or not the service user is available for each request information. For example, as shown in FIG. 2, in the use permission request management unit (13), the request information is managed by the use permission request registration unit 131, and the availability of each service user's use permission request is managed by the availability response registration unit 132. I do. The use permission request registration unit 131 assigns a use permission request ID to each use permission request and describes the attribute of the requested personal information. The permission response registration unit 132 records the ID of the usage permission request, the ID of the service user, and the like for the response that permits the usage permission request. The response for permitting the use permission request may be managed by adding a content for specifying up to what level or what content is to be used. In addition, whether or not the use of the attribute of the personal information is permitted may be registered in advance in the permission / rejection registration unit 132. A usage permission request to be presented to the service user with the content in the pre-registration may be screened.
[0032]
The information use applicant browses the availability of the service user in response to the use permission request by using the information use applicant input / output unit (14), and appropriately acquires the permitted personal information.
[0033]
FIG. 3 shows a basic flow of service operation.
[0034]
In FIG. 3, first, the information use applicant performs login authentication from the information use applicant terminal (22) to access the personal information use support server (10), and from the information use applicant input / output unit (14). Then, a use permission request for desired personal information is input. In this case, it is necessary to know information such know in advance what kind of personal information available, and such that information is statistically processed information personal information management unit (11), to the extent that individual can not be identified , Type and quantity are displayed through the input / output unit (14) for the information use applicant.
[0035]
Subsequently, the service user accesses the personal information use support server (10) from the service user terminal (21), and from the service user input / output unit (12), the information requested to use the information and the permission Lists the availability status. Next, the service user performs new setting or change of the permission / non-permission status. Thereafter, the information use applicant confirms, from the information use applicant input / output unit (14), total information of permission / non-permission from the service user with respect to the request information registered in advance.
[0036]
Finally, if the number of authorized service users is the number required by the information use applicant, the information use applicant downloads data from the information use applicant input / output unit (14).
[0037]
In the system implemented in this embodiment, the service user and the information use applicant input / output the personal information use support server (10) after passing the login authentication.
[0038]
In addition, due to system management, a request for permission to use personal information such as personal information and service usage time registered at the time of new registration of a service user is set to the default of the usage permission request item before input from the information use applicant. The item is registered in the use permission request management unit as an item.
[0039]
In order to obtain a license from more service users, the information use applicant may include, in addition to the personal information they wish to use, the purpose, method, scope, Register and present rewards. As for the range of use, it is possible to present a plurality of levels or input a use permission period so that the service user can select appropriate contents. These pieces of information are input from the information use applicant input section (14) and are stored in the use permission request management section (13).
[0040]
On the other hand, when the service user checks the reward corresponding to the permission / non-permission of the use permission request, the service user input / output unit (12) generates a Web page based on the data of the use permission request management unit (13). In the items for which the service user has permitted the use, a quantitative reward (for example, points or electronic money) obtained by the service user is additionally displayed, or a material reward (for example, a book voucher, Phone cards, goods, etc.).
[0041]
In recent years, profiling using data mining technology has been performed. This is a method of performing statistical processing and multivariate analysis on a combination of a plurality of personal information such as gender, age, and purchase history, and estimating a user image to predict user behavior.
[0042]
The information user can register and present the profile information generated by the combination of such personal information as well as the individual personal information.
[0043]
On the other hand, the service user provides a means for setting the importance of each personal information by a numerical value and an arithmetic method (for example, a product or a sum), and when the personal information is used in combination, the personal information to be combined is provided. Is calculated by calculating these numerical values, and by setting a limit value on the numerical value of the calculation result, it is possible to automatically restrict whether or not the combination can be used.
[0044]
As an example of a simple calculation method,
[0045]
Set personal information, calculation method and numerical value as follows,
(Equation 1)
(Name (product 5))
(Age (Japanese 3))
(Gender (Japanese 2))
(Usage time (Japanese 1))
The upper limit of combination use is
(Operation result <15)
If you set
When age, gender, and usage time are combined, (sum 2 2 1) is obtained, and the calculation result becomes 5, which is possible.
[0046]
When the name and the age are combined, it becomes (product 5 (sum 3)) and the calculation result becomes 15, which is impossible.
[0047]
When the name and the usage time are combined, (product 5 (sum 1)) is obtained, and the calculation result becomes 5, which is possible.
[0048]
These numerical values of importance and calculation formulas are registered and managed in the use permission request management unit (13), and the calculation results are reflected when the information user checks the status of the use permission from the information use applicant terminal (22). And presented.
[0049]
Instead of using the above-mentioned numerical values or arithmetic expressions to determine whether or not a use request can be made, an HTML document (form of personal profile information) or FIG. 6 (personal use history information) as shown in FIG. ) May be used to register in advance the attribute of information that permits or prohibits use, and automatically determines whether or not a use request is permitted.
[0050]
In addition, the above-described numerical values, arithmetic expressions, and information attributes are registered in advance, and only the use requests screened by the registered contents can be browsed by the service user, or can be highlighted and browsed, and the limited range can be obtained. May be responded to the request for use of the request.
[0051]
The use permission request management unit (13) detects and notifies that the information has been changed so that the use permission request and the permission judgment can be smoothly performed. When the information use applicant adds or changes the use permission request, it notifies the service user. As a notification method, for example, a “new” mark is inserted into the added / changed item and blinked. In addition, when the service user logs in, a notification is sent to a dialog window. Alternatively, a notification message and a URL to the service user input / output unit are inserted into the portal page of the service user. Alternatively, in the case of a service that provides e-mail, there is a method of notifying a service user by e-mail. When the information use applicant changes the existing use permission request, the permission status set by the service user is reset (set to “no” as an initial value), and the change is notified in the same manner as described above.
[0052]
When the service user sets / changes the use permission judgment, the information use applicant is notified. As a notification method, for example, when an information use applicant who has registered a set / changed information use request item logs in, a notification is sent to a dialog window. Alternatively, a notification message and a URL to the information use applicant input / output unit are inserted into the portal page of the information use applicant. Alternatively, in the case of a service that provides e-mail, there is a method of notifying a person who wants to use information by e-mail.
[0053]
The information use applicant registers the target value of the permission in association with the request item of the use permission request management unit (13) as a method of quickly knowing that the desired number of permission has been obtained. Each time the information is updated, the use permission request management unit (13) compares the number of use permissions with the target value, and when the target value is reached, uses the notification means described above to notify the information use applicant. Notice.
[0054]
Finally, the information use applicant downloads the authorized personal information as a data file.
[0055]
The information use applicant refers to the permission items of the information use applicant input / output unit (14), confirms the permission status, and, if the number of objectives has been obtained, specifies the download and obtains the personal information. A file in which the personal information of the management unit (11) or data in the permitted range is converted into a table format is downloaded to the information use applicant terminal (22).
[0056]
In information systems such as medical services and legal services, in systems where there is a high risk that the use of personal information will be detrimental to the individual, by explicitly guaranteeing that the service user will cancel registration due to withdrawal etc. We can guarantee the trust and security of service users. In this case, an item "Erase all personal information when unsubscribing" is provided by default in the usage permission request item of the usage permission request management unit (13), and the setting value is set to "Yes" by default.
[0057]
Furthermore, as a setting in consideration of privacy, the personal information held in the system is included in the use permission request item of the use permission request management unit (13) by default irrespective of the presence or absence of the use permission request from the information use applicant. All are displayed, and the setting value is set to “not disclosed” by default.
[0058]
As an expansion means of the system, information of other services (for example, telephone usage fee, credit card history, etc.) can be input or referred to as information managed by the personal information management section (11), With regard to the permission to use personal information in the information system, it is possible to request the use permission of the information use applicant, instruct the service user whether or not to use the information system, and to confirm the permission of the information use applicant.
[0059]
【The invention's effect】
According to the present invention, personal information of a service user can be easily distributed while protecting privacy and the like of the service user.
[Brief description of the drawings]
FIG. 1 is a schematic diagram showing a network configuration including a personal information use support server according to an embodiment of the present invention.
FIG. 2 is a diagram illustrating a use request and an availability response according to the embodiment of the present invention.
FIG. 3 is a flowchart showing an operation procedure example according to the embodiment of the present invention.
FIG. 4 is an explanatory diagram showing an example of a screen on which an information use applicant applies for use of personal information.
FIG. 5 is an explanatory diagram showing an example of a screen on which a service user sets permission of registration information of an individual profile.
FIG. 6 is an explanatory diagram showing an example of a screen on which a service user sets permission for personal use history information.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 10 Personal information use server 11 Personal information management unit 12 Service user input / output unit 13 Use permission request management unit 14 Information use applicant input / output unit 20 Network 21 Service user terminal 22 Information use applicant terminal

Claims (14)

A personal information management device that manages personal information of the service user held in an information system that provides a predetermined service to a service user,
A use permission request registration unit that receives, from a terminal of the information use applicant, a use permission request that specifies personal information that the information use applicant wants to use, and registers the request;
Use permission request browsing information supply means for supplying, to a service user terminal, information for browsing a use permission request of a use applicant registered in the use permission request registration means,
A permission / rejection response registration unit for receiving a permission / rejection response to the use permission request registered in the use permission request registration unit from the service user terminal, and registering the response;
A personal information management device, comprising: means for supplying, to a terminal of an information use applicant, information permitted by a service user based on the information on the permission registered in the permission / rejection registration means. 2. The personal information management device according to claim 1, further comprising means for supplying information for confirming whether or not the use permission request has been accepted to the terminal of the information use applicant. 3. The personal information management device according to claim 1, wherein the personal information includes information extracted from a log of the information system. 4. The personal information management device according to claim 1, wherein a response indicating whether or not a disclosure level of the personal information is designated to the use permission request is registered in the permission response registration unit. 5. The personal information management device according to claim 1, wherein information about the information use applicant who has registered the use permission request is provided to the service user. 6. The personal information management device according to claim 1, wherein an incentive is given to a service user who has given permission to use personal information. 7. The personal information management device according to claim 6, wherein the incentive is given by the information use applicant. 8. The personal information management device according to claim 1, further comprising means for setting a range of a use permission request desired for browsing by a service user. 9. The information processing apparatus according to claim 1, further comprising: a means for updating the contents of the use permission request of the information use applicant registered in the use permission request registration means. Described personal information management device. 10. The personal information management device according to claim 9, wherein the use permission request browsing information supply means provides information that allows the use permission request whose contents have been updated to be viewed separately from other use permission requests. The personal information management device according to claim 1, wherein the use permission request browsing information supply unit provides information that allows a newly registered use permission request to be browsed separately from other use permission requests. A personal information management device that manages personal information of the service user held in an information system that provides a predetermined service to a service user,
Means for receiving and registering desired use attribute specifying information for specifying an attribute of personal information desired to be used from an information use applicant;
Means for receiving and registering, from a service user, use permission attribute specifying information for specifying an attribute of personal information that is permitted to be used by an information use applicant;
Means for supplying personal information of a service user to an information use applicant on the basis of the use desired attribute specification information and the use permission attribute specification information. A personal information management method for managing personal information of the service user held in an information system for providing a predetermined service to a service user,
A use permission request registration step of receiving, from a terminal of the information use applicant, a use permission request specifying personal information that the information use applicant wants to use, and registering the request;
A use permission request browsing information supply step of supplying information for browsing the use permission request of the use applicant registered in the use permission request registration step to the service user terminal;
A permission / rejection response registration step of receiving and accepting a response from the service user terminal to the permission request registered in the permission request registration step,
Supplying the information permitted by the service user to the terminal of the information use applicant based on the information of the propriety registered in the propriety response registration step. A personal information management computer program for managing the personal information of the service user held in the information system that provides a predetermined service to the service user,
A use permission request registration step of receiving, from a terminal of the information use applicant, a use permission request specifying personal information that the information use applicant wants to use, and registering the request;
A use permission request browsing information supply step of supplying information for browsing the use permission request of the use applicant registered in the use permission request registration step to the service user terminal;
A permission / rejection response registration step of receiving and accepting a response from the service user terminal to the permission request registered in the permission request registration step,
Supplying the information permitted by the service user based on the permission information registered in the permission response registration step to the terminal of the information use applicant. Computer program for managing personal information.

Images