JP2006085512A - Electronic form using system, server and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an electronic form using system for preventing a theft and leakage of individual information of a user on a server or a transmitting-receiving passage of an electronic form. <P>SOLUTION: An applicant 3 receives the receipt number, by registering individual information in an accepting system 5, before using the electronic form using system 1. The accepting system 5 disperses the registered individual information in an individual information dispersive storage database 19, to be stored together with the receipt number. The applicant 3 makes access to the accepting system 5 via a network 7 from an applicant terminal unit 9, and transmits and receives the electronic form. When transmitting and receiving the electronic form, the receipt number is transmitted and received instead of the individual information. The accepting system 5 integrates the application content and the individual information from the electronic form and the receipt number transmitted by the applicant 3. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an electronic form utilization system via a network, and more particularly to an electronic form utilization system capable of preventing leakage of personal information on a server and during communication between a server and a terminal device.

In recent years, many documents are managed and used as electronic data. Documents including prescribed forms and written items, such as applications to be submitted to ministries and agencies, and notification forms to be submitted to financial institutions are stored as electronic forms. When necessary, electronic forms are read, necessary items are entered, and printed. Application forms, notification forms, etc. can be created.
Furthermore, with the development of networks such as the Internet, there are several electronic form utilization systems that can submit such documents as electronic documents in the form of electronic data to ministries or financial institutions.
There are dangers due to false declarations, falsifications, viruses, etc. on the sending side and the receiving side in the notification of electronic documents via such networks, and systems and methods for dealing with this are also proposed. (For example, see [Patent Document 1] and [Patent Document 2]).

JP 2003-256615 A JP 2003-323527 A

  However, in the conventional electronic form utilization system, personal information such as name and address is generally included as items to be entered in the electronic form, and these items are sent or received via the electronic form network or on the server. There was a risk of personal information being stolen or leaked.

  The present invention has been made in view of such problems, and an object of the present invention is to provide an electronic form that prevents the user's personal information from being stolen or leaked on a server or an electronic form transmission / reception path in an electronic form utilization system. It is to provide a form usage system.

  In order to solve the above-described problems, the present invention is configured such that a server and a terminal device are connected via a network, the electronic form is transmitted and received between the server and the terminal device, and the electronic form transmitted from the terminal device is processed by the server. In the electronic form utilization system to be stored, prior to the use of the electronic form utilization system by the user, the server allows the user to register the user's personal information and gives a personal information receiving means for giving a reception number corresponding to the personal information registration; Personal information distributed storage means for distributing and storing personal information data, and personal information distributed and stored in the personal information distributed storage means from the reception number, and personal information that integrates electronic forms and personal information And a separate means for managing personal information and other information separately, as well as for electronic phoning between the terminal device and the server. Under no reception, using the reception number in place of the personal information is an electronic forms utilization system characterized in that it does not receive the personal information.

Prior to using the electronic form utilization system, the user directly registers personal information such as name and address in the electronic form utilization system without using communication means such as the Internet. In response to this personal information registration, the server issues a receipt number to the user, subdivides the registered personal information, and stores it in a plurality of storage media.
By storing personal information in multiple storage media, it is not easy to reconstruct personal information even if the storage media is stolen or leaked, and it is possible to prevent leakage of personal information. is there.

In addition, when using the electronic form utilization system, the user does not enter personal information such as name and address in the personal information column of the electronic form, but with the electronic form in which data other than personal information is entered. Send.
Thus, by not adding personal information to the electronic form, it is possible to prevent personal information from leaking even if the electronic form is stolen on the transmission / reception path.

  The server receives the electronic form and the reception number, performs necessary processing based on the reception number and the data entered in the electronic form, and stores the data together with the reception number. As a result, personal information and other information can be managed separately. If necessary, the personal information stored in a distributed manner is read based on the reception number, and the electronic form data and personal information are integrated, displayed, and printed. When the server sends the processed electronic form to the user, it sends data other than the receipt number and the personal information of the electronic form, and does not send the personal information. Thereby, it is possible to prevent leakage of personal information on the transmission / reception path.

  The electronic form utilization system according to the present invention stores personal information in a distributed manner on the server, thereby preventing leakage of personal information, and accepting instead of personal information when sending and receiving electronic forms between a server and a terminal device. By using the number, it is possible to provide an electronic form utilization system that can prevent theft and leakage of personal information on the transmission / reception path.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. FIG. 1 is a configuration diagram showing a configuration of an electronic form utilization system according to an embodiment of the present invention, FIG. 2 is a configuration diagram of a server 5 (acceptance system), and FIG. 3 is a processing flow of the electronic form utilization system. FIG. 4 is a flowchart illustrating an example of an electronic form.

  As shown in FIG. 1, an electronic form utilization system 1 according to an embodiment of the present invention includes a server 5 as a reception system and an applicant terminal device 9 used by an applicant 3 as a user, such as the Internet. The configuration is connected via the network 7.

As shown in FIG. 2, the server 5 is a computer or the like as a server, and a control unit 41, an input unit 43, a display unit 44, a storage unit 45, a communication unit 47, and the like are connected to each other via a system bus 49. Hardware configuration. The control unit 41 includes a CPU (Central Processing Unit), a ROM (Read Only Memory), and a RAM (Random
The CPU is configured to call a program stored in the storage unit 45, ROM, or the like into a work memory area on the RAM and execute the program, and implement various means described later by arithmetic processing and operation control processing. Execute the process.

  The input unit 43 includes, for example, a keyboard, a pointing device such as a mouse, an input device such as a numeric keypad, and the display unit 44 includes an output device such as a display and a printer. Perform output processing. The storage unit 45 includes a storage device such as a hard disk device and ROM / RAM, and constitutes a program for operating an electronic form utilization system, an electronic form database, application contents, and a database for storing personal information. The communication unit 47 is a communication interface for executing communication between the server 5 and the network 7 and includes a communication control device, a communication port, and the like.

  On the other hand, the applicant terminal device 9 can be a personal computer, an information form terminal (PDA), a mobile phone or the like. Like the server 5, a control unit, an input / output unit, a storage unit, a communication unit, etc. Have.

Next, the functional configuration of the electronic form utilization system 1 will be described.
The server 5 functions as a reception system for the electronic form utilization system 1. The server 5 includes a personal information reception number giving unit 13, a personal information distributed storage unit 17, a personal information distributed storage database 19, an electronic form processing unit 23, an electronic form database 29, an application content database 25, an application content / personal information integration unit. 27.
The personal information reception number giving means 13, the personal information distributed storage means 17, the electronic form processing means 23, and the application content / personal information integration means 27 are stored in the ROM and RAM of the control unit 41 of the server 5, and the storage unit 45. This is a program executed by the CPU of the control unit 41. The electronic form database 29 and the application content database 25 are created in the storage unit 45 of the server 5.
On the other hand, the applicant 3 uses the electronic terminal utilization system 1 using the applicant terminal device 9 and accesses the reception system (server) 5 via the network 7.

  The personal information reception number giving means 13 receives a reception number indicating that registration is accepted when the applicant 3 who uses the electronic form utilization system 1 registers personal information in the reception system (server) 5 prior to use. Award. The reception number may be unique to the applicant 3, and may be, for example, a numeric string such as a serial number or a character string. The reception number and personal information are managed as a pair.

The personal information distributed storage means 17 distributes the personal information registered by the applicant 3 and stores it in the personal information distributed storage database 19 together with the reception number. The personal information distributed storage database 19 includes, for example, a plurality of hard disk devices, and the personal information distributed storage means 17 stores personal information such as names and addresses in different hard disk devices in order, for example, divided for each character.
As a result, only a part of the personal information is stored in one hard disk device, so that the personal information cannot be easily restored.

The electronic form processing means 23 registers the personal information and calls the electronic form requested by the user 3 who has been given the receipt number from the applicant terminal device 9 via the network 7 from the electronic form database 29, and , The electronic form sent from the applicant terminal device 9 is processed, the application content is stored in the application content database 25, and the processing result is transmitted to the applicant terminal device 9.
At this time, personal information is not exchanged between the reception system (server) 5 and the applicant terminal device 9, and a reception number is transmitted and received instead of personal information.

The application content / personal information integration means executes processing for integrating the personal information and the application content and displaying or printing the application document in the reception system 5, for example, when it is desired to display or print the application document. That is, based on the receipt number, the personal information distributed and stored in the personal information distribution database 19 is reconstructed, and the reconstructed personal information and the application content are integrated and displayed or printed.
For example, if there is an entry for personal information in the electronic form, the reconstructed personal information is inserted into the field, and the electronic form is displayed or printed.

Next, the flow of processing according to the embodiment of the present invention will be described with reference to FIG.
The applicant 3 first applies for the personal information 111 to the reception system (server) 5 (step 100).
For example, if the electronic form utilization system 1 is a system that processes various applications of municipalities via a network, it is in a city office or a branch office. If the electronic form utilization system 1 is a system that processes income tax declarations via a network, a tax office For example, the applicant 3 goes and applies for the personal information 111 to the reception system (server) 5.

  The personal information 111 is, for example, a name, a zip code, an address, a telephone number, an account number, etc. In FIG. 3, for example, the name “Taro Dainippon”, the zip code “〒123-4567”, the address “Kawaguchi, Saitama "... City" and telephone number "048-2345-6789" shall be applied as personal information.

The personal information reception number giving means 13 of the reception system (server) 5 gives the reception number 151 to the applicant 3 in response to the application for the personal information 111 (step 101).
The reception number 151 is, for example, a serial number indicating a reception order, a random number string, or a character string, and is given so that the reception number 151 and the personal information 111 of the applicant 3 have a one-to-one correspondence. Here, it is assumed that “1234” is awarded to the applicant 3 as the reception number 151.

Next, the personal information distributed storage means 17 of the reception system 5 stores the received personal information 111 together with the reception number 151 in the personal information distributed storage database 19 (step 102).
That is, the personal information 111 is not stored as it is in one storage area, but the personal information 111 is divided and stored in a plurality of storage devices and storage areas.
For example, as shown in FIG. 3, characters are sequentially stored in four hard disk devices (disks 1 to 4). That is, first, “1234” that is the reception number 151 is stored in each of the disks 1 to 4, and then “large”, “day”, “book”, “thick” in the order of the disks 1, 2, 3, 4. And return to the disk 1 and store in the order of “Buro”, “〒”, “1”, “2”.

  In this way, by distributing and storing in a plurality of storage devices and storage areas, even if the contents of one of the plurality of storage devices or one storage area are read, it is only a fragment of personal information. Therefore, it is difficult to easily reconstruct the original personal information from these pieces of information, and leakage of personal information can be prevented.

  Through the above processing, the applicant 3 can use the electronic form utilization system 1.

Next, the applicant 3 uses the applicant terminal device 9 to access the reception system 5 via the network 7 and requests a necessary electronic form. On the other hand, the electronic form utilization means 23 of the reception system 5 reads out the electronic form requested by the applicant 3 from the electronic form database 29 and sends it to the applicant terminal device 9 via the network 7. 9, the necessary electronic form can be downloaded (step 103).
For example, it is assumed that an application such as “invoice for income tax correction” shown in FIG. 4 has been downloaded. This electronic form includes a personal information portion 31 and an application content portion 33.

The applicant 3 inputs the items of the electronic form downloaded by the applicant terminal device 9, and transmits the completed electronic form to the reception system 5 via the network 7 (step 104). At this time, only the application form portion 33 of the electronic form is filled in, and the personal information portion 31 is not filled in personal information such as address and name. A reception number 151 is transmitted to the reception system 5 as information for identifying an individual.
For example, the receipt number 151 may be written in a name field in the personal information portion 31 of the electronic form. When sending, a field for entering the receipt number 151 is provided, and the receipt number 151 is accepted in that field. The number 151 may be entered and transmitted.

  The electronic form processing means 23 of the reception system 5 receives the electronic form transmitted by the applicant 3, and stores the information entered in the application content portion 33 together with the reception number 151 in the application content database 25 (step 105). At this time, the information entered in the application content portion 33 is processed, and the result is also stored in the application content database 25. For example, in the portion 33 of the application contents of the income tax renewal invoice shown in FIG. 4, the tax amount is calculated for the electronic form that is sent by filling in only the income amount and the amount deducted from the income, The tax amount is stored in the application content database 25 together with the application content.

Through the above processing, the application content and processing result of the electronic form transmitted by the applicant 3 are stored in the application content database 25. Thereafter, the processing of transmitting the application content and processing result to the applicant 3, and Processing for confirming the application content is executed on the reception system 5 side (steps 106 to 108).
At this time, when transmitting the application contents and processing results to the applicant 3 (applicant 3 in step 106), the electronic form processing means 23 transmits the application contents or processing results together with the reception number 151 (step 108). . The personal information 111 is not transmitted.
Since the applicant 3 can identify his / her receipt number 151, he can recognize that the application content is his / her own even if the personal information is not displayed in the portion 31 of the personal information.
On the other hand, since only the receipt number 151 is sent and received and the personal information 111 is not sent and received on the route through which electronic forms are sent and received, even if a malicious third party steals information on the network 7, Can not be specified, and leakage of personal information can be prevented.

On the other hand, when viewing the application content and processing result on the reception system 5 side, the application content / personal information integration means 27 of the reception system 5 executes a process of integrating and displaying the application content and processing content and the personal information 151. (Step 107).
That is, the personal information distributed storage database 19 is searched using the receipt number 151 stored in the application content database 25 as a key, and the personal information 111 is integrated. Then, the application content or processing result corresponding to the reception number 151 stored in the application content database 25 and the personal information 111 are integrated and displayed on the display device of the reception system 4.
For example, in the case of the income correction invoice shown in FIG. 4, the application content stored in the application content database 25 is embedded in the application content portion 33 of the electronic form, and the personal information 111 corresponding to the reception number 151 is stored in the personal information. It is read from the distributed storage database 19 and embedded in the personal information portion 31 of the electronic form and displayed.
Only authorized persons can view the integrated information of the personal information and the application contents on the reception system 5 side. Thereby, leakage of integrated information of personal information and application contents can be prevented.

The present invention is not limited to the embodiment described above, and various modifications are possible, and these are also included in the technical scope of the present invention. For example, in the present embodiment, the personal information 111 is sequentially stored in the personal information distributed storage database 19 including four disk devices in a distributed manner for each character. However, the method for storing the personal information 111 in a distributed manner is limited to this. It is not a thing.
Further, the reception number 151 is not limited to a numerical value, and may be a character string that can identify an individual.

  With the electronic form utilization system of the present invention, it is possible to provide an electronic form utilization system that prevents the user's personal information from being stolen or leaked on the server or on the electronic form transmission / reception path.

The block diagram which shows the structure of the electronic form utilization system concerning embodiment of this invention Configuration diagram of server (reception system) 5 Flow chart showing the processing flow of the electronic form utilization system Figure showing an example of an electronic form

Explanation of symbols

1 ………… Electronic Form Usage System 3 ………… Applicant 5 ……… Reception System 7 ……… Network 9 ……… Applicant Terminal 19 ……… Personal Information Distributed Storage Database

Claims (3)

In the electronic form utilization system in which the server and the terminal device are connected via a network, and the server transmits and receives an electronic form between the terminal device and the server processes and stores the electronic form transmitted from the terminal device.
Prior to the use of the electronic form utilization system by a user, the server causes the user to register the personal information of the user, and gives a personal information receiving means for giving a reception number corresponding to the personal information registration;
Personal information distributed storage means for distributing and storing data of the personal information;
With
When sending and receiving an electronic form, the reception number is used instead of the personal information, and the personal information is distributed and managed in the server, and the personal information and information other than the personal information are separately managed. Electronic form utilization system. A server of an electronic form utilization system that is connected to a terminal device via a network and transmits / receives an electronic form to / from the terminal device for processing.
Prior to use of the electronic form utilization system by a user, personal information receiving means for causing the user to register personal information and giving a reception number corresponding to the personal information registration;
Personal information distributed storage means for distributing and storing data of the personal information;
With
When sending and receiving the electronic form, the reception number is used instead of the personal information, and the personal information is distributed and managed in the server, and the personal information and information other than the personal information are separately managed. A server characterized by A program that functions as an electronic form utilization system,
Prior to use of the electronic form utilization system by a user, personal information receiving means for causing the user to register personal information and giving a reception number corresponding to the personal information registration;
Personal information distributed storage means for distributing and storing data of the personal information;
With
Managing the personal information in a distributed manner, separately managing the personal information and information other than the personal information of the electronic form, and using the receipt number instead of the personal information when transmitting and receiving the electronic form. A featured program.

Images