JP2009122952A - Attribute information disclosure system and attribute information disclosure method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To appropriately disclose attribute information. <P>SOLUTION: A main disclosure device obtains master attribute information on a user using the main disclosure device from a master attribute information storage section, outputs the obtained master attribute information to an output section, accepts input information at its input section to determine attribute information to be disclosed to a disclosure information-receiving device based upon the output master attribute information, encrypts the accepted disclosure attribute information in such a way that it can be decrypted by the main disclosure device as well as the disclosure information-receiving device, and transmits the encrypted disclosure attribute information to an attribute control device which is communicably connected with each of the main disclosure device and the disclosure information-receiving device. The attribute control device, having a storage section for storing the encrypted disclosure attribute information, stores the transmitted encrypted disclosure attribute information, which is then obtained by the disclosure information-receiving device to be decrypted. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to an attribute information disclosure system and an attribute information disclosure method.

  In recent years, with the spread of communication networks, not only personal computers and mobile phone terminals, but also communication devices connected to the network, such as digital broadcast TVs, 1Seg compatible mobile phone terminals, and kiosk terminals, are increasing. Furthermore, with such a change in communication environment, the market of electronic commerce (EC) using these communication devices is expanding. For example, when an advertisement for a product is included in digital broadcast data and an advertisement for the product is displayed on the screen of the digital broadcast TV, the user accesses the EC site using a mobile phone terminal and purchases the product. It is something like that.

  By the way, when using such an EC site, a user generally has to input user attribute information (for example, an address, a telephone number, etc.) every time using a mobile phone terminal or the like. When using a plurality of EC sites, the user is repeatedly requested to input attribute information from each EC site. For this reason, for example, Patent Document 1 discloses a technique for avoiding the input of the same attribute information in such a case. Specifically, in Patent Document 1, an EC site that provides a catalog shopping service stores attribute information for each user so that the user can use the EC site again when the EC site is used again. This prevents the user from inputting attribute information again.

Japanese Patent Laid-Open No. 10-254957

  By the way, the above-described conventional technique cannot appropriately disclose attribute information. That is, for example, the technique disclosed in Patent Document 1 does not save the effort of inputting attribute information for the EC site in general. Even if attribute information is input on a personal computer, if the attribute information is disclosed on a plurality of EC sites, the user can grasp where and what information is disclosed. It becomes impossible (for example, it becomes difficult to grasp which attribute information was disclosed to which EC site when the user's e-mail address changed due to the change of provider or when the address changed), barriers to disclosure of attribute information It is thought that it becomes.

  Therefore, the present invention has been made to solve the above-described problems of the prior art, and an object thereof is to provide an attribute information disclosure system and an attribute information disclosure method that can appropriately disclose attribute information. To do.

  In order to solve the above-described problems and achieve the object, the invention according to claim 1 is an attribute information disclosure system for disclosing attribute information related to a user who uses a disclosure main apparatus to a disclosure destination apparatus. An apparatus includes: master attribute information acquisition means for acquiring master attribute information that is original attribute information relating to a user who uses the disclosure main apparatus from a master attribute information storage unit; and a master acquired by the master attribute information acquisition means. Information received by the decision accepting means for outputting attribute information to the output unit, and accepting input of information for determining attribute information disclosed to the disclosure destination device from the output master attribute information at the input unit; The disclosure attribute information determined by the encryption is encrypted so that it can be decrypted only by the disclosure main device and the disclosure destination device. The attribute information encryption unit and the encrypted disclosure attribute information encrypted by the disclosure attribute information encryption unit are transmitted to the attribute management device communicably connected to the disclosure main device and the disclosure destination device. Disclosure attribute information transmission means, the attribute management device, the disclosure attribute information storage means for storing the encrypted disclosure attribute information, and the encrypted disclosure attribute information transmitted by the disclosure attribute information transmission means, Disclosure attribute information storage means for storing in the disclosure attribute information storage means, wherein the disclosure destination device acquires disclosure attribute information acquisition means for acquiring encrypted disclosure attribute information stored by the disclosure attribute information storage means; And disclosed attribute information decrypting means for decrypting the encrypted disclosed attribute information acquired by the disclosed attribute information acquiring means.

  Further, in the invention according to claim 2, in the above invention, the disclosure attribute information transmitting means of the main disclosure device is determined as the encrypted disclosure attribute information when transmitting the encrypted disclosure attribute information. The link destination information indicating in which order each of the plurality of attribute information stored in association with one item of the attribute information is linked to the item is stored together with the encrypted disclosure attribute information. The disclosure attribute information storage unit of the attribute management device stores the encrypted disclosure attribute information together with the link destination information, and the disclosure attribute information storage unit of the attribute management device uses the disclosure attribute information transmission unit. Storing the transmitted encrypted disclosure attribute information in the disclosure attribute information storage unit together with the link destination information transmitted together with the encrypted disclosure attribute information. And features.

  Further, in the invention according to claim 3, in the above invention, the disclosed main device is configured to disclose the disclosed attribute information items disclosed in the attribute management device as the disclosed attribute information and the link destination. Further comprising disclosed attribute information search means for transmitting information to the attribute management apparatus as a search condition, wherein the attribute management apparatus stores the disclosed attribute information storage means in accordance with the search condition transmitted by the disclosed attribute information search means. Disclosed attribute information search means for searching, and search result transmission means for transmitting the disclosed attribute information searched by the disclosed attribute information search means to the main disclosure apparatus.

  Further, in the invention according to claim 4, in the above invention, the disclosed main apparatus includes a new attribute information receiving unit that receives an input of new attribute information to be newly stored in the master attribute information storage unit at the input unit, When the new attribute information received by the new attribute information receiving means is attribute information for adding an item to the master attribute information acquired from the master attribute information storage unit, the item is added and the new attribute information Is added to the master attribute information, and the new attribute information is attribute information to be added to an existing item of the master attribute information acquired from the master attribute information storage unit, the new attribute information The master attribute information adding means to be added to the master attribute information of the item and the master attribute information added by the master attribute information adding means And additional master attribute information transmitting means for transmitting the data attribute information storage unit, and further comprising a.

  Further, in the invention according to claim 5, in the above invention, the master attribute information storage unit stores encrypted master attribute information encrypted so that it can be decrypted only in the main disclosure device, The disclosed main apparatus further includes a master attribute information decrypting unit that decrypts the encrypted master attribute information, and the master attribute information acquiring unit acquires the encrypted master attribute information from the master attribute information storage unit. The master attribute information decrypting means decrypts the encrypted master attribute information acquired by the master attribute information acquiring means, and the decision accepting means is a master attribute decrypted by the master attribute information decrypting means. The information is output to the output unit, and the input of the information is received in the input unit.

  Further, in the invention according to claim 6, in the above invention, the disclosed main apparatus includes a new attribute information accepting unit that accepts input of new attribute information to be newly stored in the master attribute information storage unit at the input unit, When the new attribute information received by the new attribute information receiving means is attribute information for adding an item to the master attribute information acquired from the master attribute information storage unit, the item is added and the new attribute information Is added to the master attribute information, and the new attribute information is attribute information to be added to the existing item of the master attribute information acquired from the master attribute information storage unit. Master attribute information adding means for adding the attribute information after encrypting it to the master attribute information of the existing item, and adding the master attribute information by the master attribute information adding means. Has been the encrypted master attribute information, wherein the additional master attribute information transmitting means for transmitting to the master attribute information storage unit, further comprising a.

  The invention according to claim 7 is an attribute information disclosure system for disclosing attribute information related to a user who uses a disclosure main apparatus to a disclosure destination apparatus, wherein the disclosure main apparatus uses the disclosure main apparatus. Master attribute information that is the original attribute information related to the person, the master attribute information acquisition unit that acquires from the master attribute information storage unit, and the master attribute information acquired by the master attribute information acquisition unit is output to the output unit and output A determination receiving unit that receives input of information for determining attribute information to be disclosed to the disclosure destination device from the master attribute information, and disclosure attribute information determined by the information received by the determination receiving unit A disclosure attribute information transmitting unit configured to transmit to a cryptographic processing device communicably connected to the main device, the cryptographic processing device comprising: Disclosure attribute information encryption means for encrypting disclosure attribute information transmitted by disclosure attribute information transmission means so that it can be decrypted only by the encryption processing device and the disclosure destination device, and by the disclosure attribute information encryption means Encrypted disclosure attribute information transmitting means for transmitting the encrypted encrypted disclosure attribute information to an attribute management device communicably connected to each of the encryption processing device and the disclosure destination device, and the attribute The management apparatus stores disclosure attribute information storage means for storing encrypted disclosure attribute information, and encrypted disclosure attribute information transmitted by the encrypted disclosure attribute information transmission means in the disclosure attribute information storage means. Disclosure attribute information storage means, and the disclosure destination device acquires the encrypted disclosure attribute information stored by the disclosure attribute information storage means And disclose the attribute information acquiring means, characterized in that and a disclosure attribute information decoding means for decoding the acquired encrypted disclosed attribute information by the disclosure attribute information acquiring unit.

  In the invention according to claim 8, in the above invention, the encrypted disclosure attribute information transmitting unit of the cryptographic processing apparatus transmits the encrypted disclosure attribute information when transmitting the encrypted disclosure attribute information. Link destination information indicating in what order each of a plurality of attribute information stored in association with one item of attribute information determined as is linked to the item is stored in the encrypted disclosure The attribute information is transmitted together with the disclosure attribute information storage unit of the attribute management device, the encrypted disclosure attribute information is stored with the link destination information, and the disclosure attribute information storage unit of the attribute management device is the disclosure attribute information Encrypted disclosure attribute information transmitted by the transmission unit is stored in the disclosure attribute information storage unit together with the link destination information transmitted together with the encrypted disclosure attribute information. Characterized in that it pay.

  Further, in the invention according to claim 9, in the above invention, the disclosed main device includes, for the disclosed attribute information disclosed to the attribute management device as the disclosed attribute information, the item of the disclosed attribute information and the link destination Further comprising disclosed attribute information search means for transmitting information to the attribute management apparatus as a search condition, wherein the attribute management apparatus stores the disclosed attribute information storage means in accordance with the search condition transmitted by the disclosed attribute information search means. Disclosed attribute information search means for searching, and search result transmission means for transmitting the disclosed attribute information searched by the disclosed attribute information search means to the main disclosure apparatus.

  Further, in the invention according to claim 10, in the above invention, the disclosed main apparatus includes new attribute information receiving means for receiving input of new attribute information to be newly stored in the master attribute information storage unit at the input unit, When the new attribute information received by the new attribute information receiving means is attribute information for adding an item to the master attribute information acquired from the master attribute information storage unit, the item is added and the new attribute information Is added to the master attribute information, and the new attribute information is attribute information to be added to an existing item of the master attribute information acquired from the master attribute information storage unit, the new attribute information Master attribute information adding means to be added to the master attribute information of the item, and master attribute information added by the master attribute information adding means, And additional master attribute information transmitting means for transmitting the static attribute information storage unit, and further comprising a.

  The invention according to claim 11 is the above invention, wherein the master attribute information storage unit stores encrypted master attribute information encrypted so that it can be decrypted only by a cryptographic processing device, The cryptographic processing device includes a master attribute information acquisition unit that acquires the encrypted master attribute information from the master attribute information storage unit, and a decryption of the encrypted master attribute information acquired by the master attribute information acquisition unit. Master attribute information decrypting means, and the master attribute information obtaining means of the main disclosure device obtains the master attribute information by obtaining the master attribute information decrypted by the master attribute information decrypting means. It is acquired from the master attribute information storage unit.

  Further, in the invention according to claim 12, in the above invention, the disclosed main apparatus includes new attribute information receiving means for receiving input of new attribute information to be newly stored in the master attribute information storage unit at the input unit, When the new attribute information received by the new attribute information receiving means is attribute information for adding an item to the master attribute information acquired from the master attribute information storage unit, the item is added and the new attribute information Is added to the master attribute information, and the new attribute information is attribute information to be added to the existing item of the master attribute information acquired from the master attribute information storage unit. Master attribute information adding means for encrypting and adding attribute information to the master attribute information of the existing item, and the master attribute information adding means Pressurized been encrypted master attribute information, characterized in that it further comprises an additional master attribute information transmitting means for transmitting to the master attribute information storage unit.

  In the invention according to claim 13, in the above invention, the attribute information is an item obtained by dividing the attribute information for each attribute type and / or an item obtained by further subdividing the item for each element. The master attribute information acquisition unit of the disclosure main apparatus includes attribute information for requesting the disclosure destination apparatus to disclose the master attribute information to the disclosure main apparatus. It is acquired together with the disclosure request attribute item that is an item, and the determination receiving unit of the main disclosure device determines from the master attribute information corresponding to the disclosure request attribute item acquired by the master attribute information acquisition unit.

  In the invention according to claim 14, in the above invention, the disclosure attribute information storage means of the attribute management device sets an expiration date indicating a time limit for disclosing the disclosure attribute information to the disclosure destination device. The encrypted disclosure attribute information is stored together with information defined for each disclosure destination device, and the disclosure attribute information acquisition unit of the disclosure destination device stores the encrypted disclosure attribute information only when the expiration date is satisfied. It is characterized by acquiring.

  In the invention according to claim 15, in the above invention, the main disclosure device discloses attribute information to a plurality of disclosure destination devices, and the disclosure attribute information is stored in the disclosure attribute information storage unit. Acquisition information transmission means for transmitting the acquisition information necessary for acquisition from a representative disclosure destination apparatus among a plurality of disclosure destination apparatuses, wherein the representative disclosure destination apparatus includes the acquisition information transmission means The disclosure attribute information acquisition of each of the disclosure destination devices is provided with notification means for notifying each of the other disclosure destination devices of the acquisition information transmitted by the above, or sequentially circulating and notifying among the plurality of disclosure destination devices. Means for acquiring the encrypted disclosure attribute information from the disclosure attribute information storage means using the acquisition information transmitted by the acquisition information transmission means or the acquisition information notified by the notification means; And acquiring.

  The invention according to claim 16 is the above invention, wherein the main disclosure device discloses attribute information to a plurality of disclosure destination devices, and the disclosure attribute information is stored in the disclosure attribute information storage means. Disclosure destination apparatus that is representative of a plurality of disclosure destination apparatuses, and obtains information required when acquiring from the first verification information capable of verifying that the transmission source of the information is the disclosure main apparatus The representative disclosure destination device notifies the other disclosure destination devices of the acquisition information and the first verification information transmitted by the acquisition information transmission unit. Or a notification unit that sequentially circulates and notifies among a plurality of disclosure destination devices, wherein the disclosure attribute information acquisition unit of each of the disclosure destination devices includes the acquisition information transmitted by the acquisition information transmission unit and the first verification Information The disclosure attribute information storage unit uses the acquired information and the first verification information notified by the notification unit, and the second verification information capable of verifying that the transmission source of the information is a disclosure destination device. The encrypted disclosure attribute information is obtained from the following.

  The invention according to claim 17 is an attribute information disclosure method in an attribute information disclosure system that discloses attribute information relating to a user who uses a disclosure main device to a disclosure destination device, wherein the disclosure main device is the disclosure main device. Master attribute information that is the original attribute information related to the user who uses the device is acquired from the master attribute information storage unit, and the master attribute information acquired by the master attribute information acquisition step is output to the output unit. A decision receiving step that receives an input of information for determining attribute information to be disclosed to the disclosure destination device from the output master attribute information, and a disclosure attribute determined by the information received by the decision receiving step Disclosure attribute information for encrypting information so that it can be decrypted only by the disclosure main device and the disclosure destination device A disclosure attribute for transmitting the encrypted disclosure attribute information encrypted by the encoding step and the disclosure attribute information encryption step to an attribute management device communicably connected to each of the disclosure main device and the disclosure destination device The attribute management device includes a disclosure attribute information storage step for storing encrypted disclosure attribute information, and a disclosure attribute information encrypted by the disclosure attribute information transmission step. Disclosure attribute information storage step for storing in the attribute information storage step, the disclosure destination device, the disclosure attribute information acquisition step for acquiring the encrypted disclosure attribute information stored by the disclosure attribute information storage step, A disclosure attribute information decrypting step for decrypting the encrypted disclosure attribute information acquired by the disclosure attribute information acquiring step.

  The invention according to claim 18 is an attribute information disclosure method in an attribute information disclosure system that discloses attribute information related to a user who uses a disclosure main device to a disclosure destination device, wherein the disclosure main device is the disclosure main device. Master attribute information that is the original attribute information related to the user who uses the device is acquired from the master attribute information storage unit, and the master attribute information acquired by the master attribute information acquisition step is output to the output unit. A decision receiving step that receives an input of information for determining attribute information to be disclosed to the disclosure destination device from the output master attribute information, and a disclosure attribute determined by the information received by the decision receiving step A disclosure attribute information transmission step for transmitting the information to a cryptographic processing apparatus communicably connected to the main disclosure apparatus. The encryption processing device encrypts the disclosure attribute information transmitted by the disclosure attribute information transmission step so that the disclosure attribute information can be decrypted only by the disclosure main device and the disclosure destination device. Encrypted disclosure attribute information transmission for transmitting the encrypted disclosure attribute information encrypted by the disclosure attribute information encryption step to an attribute management device communicably connected to each of the encryption processing device and the disclosure destination device The attribute management device includes a disclosure attribute information storage step for storing encrypted disclosure attribute information, and a disclosure attribute information transmitted by the disclosure attribute information transmission step of the cryptographic processing device. A disclosure attribute information storage step for storing in the disclosure attribute information storage step, wherein the disclosure destination device stores the darkness stored in the disclosure attribute information storage step. A disclosure attribute information obtaining step for obtaining the disclosed disclosure attribute information, and a disclosure attribute information decrypting step for decrypting the encrypted disclosure attribute information obtained by the disclosure attribute information obtaining step. To do.

  According to the invention of claim 1 or 17, there is provided an attribute information disclosure system for disclosing attribute information relating to a user who uses the disclosure main device to the disclosure destination device, wherein the disclosure main device is a user who uses the disclosure main device. Master attribute information that is the original attribute information about the master attribute information is acquired from the master attribute information storage unit, the acquired master attribute information is output to the output unit, and attribute information to be disclosed to the disclosure destination device is determined from the output master attribute information Information input is received at the input unit, disclosure attribute information determined by the received information is encrypted so that it can be decrypted only by the disclosure main apparatus and the disclosure destination apparatus, and the encrypted disclosure attribute information is converted to the disclosure main apparatus. And the attribute management device communicably connected to each of the disclosure destination devices, the attribute management device includes a storage unit that stores the encrypted disclosure attribute information, The received encrypted disclosure attribute information is stored in the storage unit, and the disclosure destination apparatus acquires the encrypted disclosure attribute information stored in the storage unit, and decrypts the acquired encrypted disclosure attribute information Therefore, it becomes possible to disclose attribute information appropriately.

  According to the invention of claim 2, when transmitting the encrypted disclosure attribute information, each of the plurality of attribute information stored in association with one item of the attribute information determined as the encrypted disclosure attribute information, Link destination information indicating in what order the items are linked and stored is transmitted together with the encrypted disclosure attribute information, and the attribute management device stores the encrypted disclosure attribute information together with the link destination information, Since the attribute management device stores the transmitted encrypted disclosure attribute information in the storage unit together with the link destination information transmitted together with the encrypted disclosure attribute information, the disclosure main device can search the disclosure attribute information. Become.

  According to the invention of claim 3, the disclosed main apparatus transmits the disclosed attribute information items and link destination information to the attribute management apparatus as search conditions for the disclosed attribute information disclosed to the attribute management apparatus as disclosed attribute information. Then, the attribute management device searches the storage unit according to the transmitted search condition and transmits the searched disclosure attribute information to the disclosure main device, so that the disclosure main device can search the disclosure attribute information.

  According to the invention of claim 4, the disclosure main apparatus accepts input of new attribute information newly stored in the master attribute information storage unit at the input unit, and the accepted new attribute information is acquired from the master attribute information storage unit. If the attribute information is to add an item to the master attribute information, the item is added and the new attribute information is added to the master attribute information, and the new attribute information is acquired from the master attribute information storage unit. If the attribute information is to be added to the existing item, the new attribute information is added to the master attribute information of the existing item, and the added master attribute information is transmitted to the master attribute information storage unit. It becomes possible to cope with the update of attribute information.

  According to the invention of claim 5, the master attribute information storage unit stores the encrypted master attribute information encrypted so that it can be decrypted only in the disclosure main device, and the disclosure main device Decrypted master attribute information, obtain encrypted master attribute information from the master attribute information storage unit, decrypt the obtained encrypted master attribute information, and output the decrypted master attribute information to the output unit for information Therefore, the attribute information can be disclosed appropriately.

  According to the invention of claim 6, the disclosure main apparatus receives input of new attribute information to be newly stored in the master attribute information storage unit at the input unit, and the received new attribute information is acquired from the master attribute information storage unit. If the attribute information is to add an item to the master attribute information, the item is added and the new attribute information is encrypted and added to the master attribute information, and the new attribute information is acquired from the master attribute information storage unit. If it is attribute information to be added to the existing item of the master attribute information that has been added, the new attribute information is encrypted and added to the master attribute information of the existing item, and the added encrypted master attribute information is Since the data is transmitted to the master attribute information storage unit, it is possible to cope with the update of the master attribute information.

  According to the invention of claim 7 or 18, an attribute information disclosure system for disclosing attribute information related to a user who uses a disclosure main device to a disclosure destination device, wherein the disclosure main device is a user who uses the disclosure main device. Master attribute information that is the original attribute information about the master attribute information is acquired from the master attribute information storage unit, the acquired master attribute information is output to the output unit, and attribute information to be disclosed to the disclosure destination device is determined from the output master attribute information The input of information is received at the input unit, and the disclosure attribute information determined by the received information is transmitted to a cryptographic processing device that is communicably connected to the main disclosure device, and the cryptographic processing device transmits the transmitted disclosure attribute information. The encryption processing device and the disclosure destination device are encrypted so that they can be decrypted only, and the encrypted disclosure attribute information is communicated to each of the encryption processing device and the disclosure destination device. The attribute management device includes a storage unit that stores the encrypted disclosure attribute information, stores the transmitted encrypted disclosure attribute information in the storage unit, and Since the apparatus acquires the encrypted disclosure attribute information stored in the storage unit and decrypts the acquired encrypted disclosure attribute information, the attribute information can be appropriately disclosed.

  According to the invention of claim 8, when transmitting the encrypted disclosure attribute information, the cryptographic processing device stores a plurality of items stored in association with one item of the attribute information determined as the encrypted disclosure attribute information. Link attribute information indicating in what order each attribute information is linked and stored with the item is transmitted together with the encrypted disclosure attribute information, and the attribute management apparatus transmits the encrypted disclosure attribute information to the link destination. The attribute management device stores the transmitted encrypted disclosure attribute information in the storage unit together with the link destination information transmitted together with the encrypted disclosure attribute information, so that the disclosure main device searches for the disclosure attribute information. It becomes possible to do.

  According to the invention of claim 9, the disclosed main device transmits the disclosed attribute information items and link destination information to the attribute management device as the search conditions for the disclosed attribute information disclosed to the attribute management device as disclosed attribute information. Then, the attribute management device searches the storage unit according to the transmitted search condition and transmits the searched disclosure attribute information to the disclosure main device, so that the disclosure main device can search the disclosure attribute information.

  According to the invention of claim 10, the disclosure main apparatus accepts input of new attribute information newly stored in the master attribute information storage unit at the input unit, and the accepted new attribute information is acquired from the master attribute information storage unit. If the attribute information is to add an item to the master attribute information, the item is added and the new attribute information is added to the master attribute information, and the new attribute information is acquired from the master attribute information storage unit. If the attribute information is to be added to the existing item, the new attribute information is added to the master attribute information of the existing item, and the added master attribute information is transmitted to the master attribute information storage unit. It becomes possible to cope with the update of attribute information.

  According to the invention of claim 11, the master attribute information storage unit stores the encrypted master attribute information encrypted so that it can be decrypted only in the encryption processing device, and the encryption processing device Master attribute information is acquired from the master attribute information storage unit, the acquired encrypted master attribute information is decrypted, and the disclosure main device acquires the master attribute information thus decrypted, thereby mastering the master attribute information. Since the attribute information is acquired from the attribute information storage unit, the attribute information can be appropriately disclosed.

  According to the invention of claim 12, the disclosure main apparatus accepts input of new attribute information newly stored in the master attribute information storage unit at the input unit, and the accepted new attribute information is acquired from the master attribute information storage unit. If the attribute information is to add an item to the master attribute information, the item is added and the new attribute information is encrypted and added to the master attribute information, and the new attribute information is acquired from the master attribute information storage unit. If it is attribute information to be added to the existing item of the master attribute information that has been added, the new attribute information is encrypted and added to the master attribute information of the existing item, and the added encrypted master attribute information is Since transmission is performed toward the master attribute information storage unit, transmission is performed toward the master attribute information storage unit, so that it is possible to cope with the update of the master attribute information.

  According to the invention of claim 13, the attribute information is composed of items obtained by dividing the attribute information according to attribute types and / or small items that are items obtained by further subdividing the items into elements. The disclosure main apparatus acquires the master attribute information together with the disclosure request attribute item that is an item of attribute information that the disclosure destination apparatus requests to disclose to the disclosure main apparatus, and the disclosure main apparatus acquires the acquired disclosure. Since it determines from the master attribute information corresponding to a request | requirement attribute item, it becomes possible to manage attribute information appropriately in disclosing attribute information appropriately.

  According to the fourteenth aspect of the invention, the attribute management device includes the encrypted disclosure together with the information specifying the expiration date indicating the time limit for disclosing the disclosure attribute information to the disclosure destination device for each disclosure destination device. Since the attribute information is stored and the disclosure destination apparatus acquires the encrypted disclosure attribute information only when the expiration date is satisfied, the disclosure can be managed by the expiration date when the attribute information is disclosed.

  According to the invention of claim 15, the disclosure main device discloses attribute information to a plurality of disclosure destination devices, and obtains the acquisition information necessary for obtaining the disclosure attribute information from the storage unit. The representative disclosure destination device transmits the acquired acquisition information to each of the other disclosure destination devices, or a plurality of disclosures. Since each disclosure destination device acquires encrypted disclosure attribute information using the acquired acquisition information or the notified acquisition information, a plurality of disclosure destination devices When the attribute information is disclosed, the information can be efficiently disclosed.

  According to the invention of claim 16, the disclosure main device discloses attribute information to a plurality of disclosure destination devices, and acquisition information required when acquiring the disclosure attribute information from the storage unit; First verification information capable of verifying that the information transmission source is the disclosure main apparatus is transmitted to a representative disclosure destination apparatus among a plurality of disclosure destination apparatuses, and the representative disclosure destination apparatus transmits The obtained acquisition information and the first verification information are notified to each of the other disclosure destination devices, or sequentially circulated among a plurality of disclosure destination devices, and each disclosure destination device is transmitted. Store using the acquired information and the first verification information, or the notified acquisition information and the first verification information, and the second verification information that can verify that the transmission source of the information is the disclosure destination device Multiple disclosure destinations In disclosing the attribute information to the location, it is possible to efficiently disclosure.

  Exemplary embodiments of an attribute information disclosure system and attribute information disclosure method according to the present invention will be described below in detail with reference to the accompanying drawings. Here, in the first embodiment, an attribute information disclosure system including an attribute management device, a disclosure main device, and a disclosure destination device (a form in which attribute information is disclosed using an attribute information disclosure dedicated application in the disclosure main device). In the second embodiment, an attribute information disclosure system in which a cryptographic processing device is added to the above configuration (a general-purpose browser or the like is used without using an attribute information disclosure dedicated application in the main disclosure device) In the following description, the attribute information is disclosed. In the following, first, the main terms used in the embodiment, the outline and features of the attribute information disclosure system according to the first embodiment, the configuration and processing procedure of the attribute information disclosure system according to the first embodiment, and the effects of the first embodiment are sequentially described. Next, the second embodiment and other embodiments will be described.

[Explanation of terms]
First, main terms used in the following examples will be described. “Attribute information” means, for example, basic information such as address, name, e-mail address, age, and gender, company-related information such as employee number and job title, credit information such as credit payment status, or points It is various information recognized as attributes relating to a person, such as usage right information. Such “attribute information” is disclosed between the parties even in normal transactions, but when transactions and various communications on networks such as electronic commerce (EC) are actively performed, The “attribute information” is disclosed between parties on the network. For example, when purchasing a product sold on an EC site, basic information such as the address and name of the purchaser is disclosed from the purchaser to the seller (EC site) via the network.

  In the following embodiments, among the parties that disclose the “attribute information” on the network, a device that discloses the “attribute information” to the other party (for example, a mobile phone terminal) is referred to as a “disclosure main device”. A device (for example, EC site) on which “attribute information” is disclosed by the “main device” is referred to as a “disclosure destination device”. That is, the “attribute information disclosure system” is a system that discloses “attribute information” related to a user who uses the “disclosure main apparatus” to the “disclosure destination apparatus”.

  By the way, when disclosing the “attribute information” from the “disclosure main apparatus” to the “disclosure destination apparatus”, for example, the user uses the “disclosure main apparatus” such as a mobile phone or a remote controller to send the “attribute information” each time. Must be entered. In addition, since the item of “attribute information” requested to be disclosed by the “disclosure destination device” is generally different for each “disclosure destination device”, the user must "Attribute information" must be entered in Such input of “attribute information” is troublesome for the user. The “attribute information disclosure system” in the following embodiments is configured so as to omit the trouble of inputting “attribute information”.

  In the following embodiments, the attribute management device includes a master attribute information storage unit that stores master attribute information (original attribute information), and the disclosure main device receives the master attribute information from the master attribute information storage unit of the attribute management device. However, the present invention is not limited to this. A device other than the attribute management device (for example, a device that specializes in managing master attribute information) has a master attribute information storage unit, and the disclosure main device acquires master attribute information from the master attribute information storage unit of such a device. May be. Alternatively, the disclosure main apparatus may include a master attribute information storage unit in the own apparatus, and the disclosure main apparatus may acquire master attribute information from the master attribute information storage unit of the own apparatus. In other words, in the attribute information disclosure system according to the present invention, the master attribute information may be managed by any device as long as the disclosure main device can be acquired as necessary.

  In the following embodiments, the master attribute information storage unit stores the encrypted master attribute information encrypted so that it can be decrypted only in the disclosure main apparatus, and the disclosure main apparatus (or encryption processing) Device) acquires the encrypted master attribute information, and describes the case where the disclosed master device (or the cryptographic processing device) decrypts the encrypted master attribute information. However, the present invention is not limited to this. Absent. The master attribute information storage unit may store unencrypted master attribute information. For example, when the disclosed main apparatus includes a master attribute information storage unit in its own apparatus, it can be considered that the master attribute information storage unit stores unencrypted master attribute information.

  Note that “decoding is possible only in the main disclosure device” does not mean that decoding is possible only by the same main disclosure device. This has the same meaning as that the user who owns the master attribute information can decrypt. That is, for example, assuming that the disclosed main device is a mobile phone terminal, it can be said that the mobile phone terminal is highly likely to be lost or changed in model, but in such a case, the user can also use his / her own key. Is transferred to a new mobile phone terminal, and becomes “decryptable in the main disclosure device” again.

[Outline and Features of Attribute Information Disclosure System According to Embodiment 1]
Next, the outline and characteristics of the attribute information disclosure system according to the first embodiment will be described with reference to FIG. FIG. 1 is a diagram for explaining the outline and features of the attribute information disclosure system according to the first embodiment.

  As described above, the attribute information disclosure system according to the first embodiment is mainly disclosed to disclose attribute information related to a user who uses the disclosure main apparatus to the disclosure destination apparatus, and the attribute information is appropriately disclosed. And

  This main feature will be briefly described. First, as shown in FIG. 1, the attribute information disclosure system according to the first embodiment includes an attribute management device, a disclosure main device, and a disclosure destination device. Here, the attribute management apparatus is communicably connected to each of the disclosure main apparatus and the disclosure destination apparatus.

  As shown in FIG. 1, the attribute management device stores master attribute information in the master attribute management DB. Here, the master attribute information is original attribute information regarding a user who uses the main disclosure apparatus. In the first embodiment, the master attribute information is encrypted so that it can be decrypted only by the user of the disclosure main apparatus in the disclosure main apparatus.

  For example, the attribute management device can decrypt the attribute information of the item “name” and the item “Email” as master attribute information about the user only in the disclosure main device used by the user who owns the attribute information. Stored in the master attribute management DB (in FIG. 1, the expressions “(name) * encrypted” and “(Email) * encrypted” mean an encrypted state). ing. The attribute management apparatus stores such encrypted master attribute information in advance by, for example, being registered in advance by the user via the disclosure main apparatus.

  As shown in FIG. 1, the attribute management apparatus stores the encrypted disclosure attribute information in the disclosure attribute storage DB. Here, the encrypted disclosure attribute information is attribute information disclosed by a user who uses the disclosure main apparatus, and is attribute information encrypted in the disclosure main apparatus. In the first embodiment, the encrypted disclosure attribute information is encrypted so that it can be decrypted only by the main disclosure device and the disclosure destination device.

  For example, the attribute management device is a disclosure main device that uses the attribute information of the item “name” as the disclosure attribute information disclosed by the user, and the disclosure destination of the attribute information. It is stored in the disclosure attribute storage DB in an encrypted state so that it can be decrypted only by the disclosure destination device. The attribute management apparatus stores such encrypted disclosure attribute information in the disclosure attribute storage DB in the course of the processing described below.

  Under such a configuration, the disclosure main apparatus acquires encrypted master attribute information (see (1) in FIG. 1). For example, when using a EC site, a disclosure main device such as a portable information terminal is requested to disclose attribute information from a disclosure destination device that is an EC site, and triggered by accessing the disclosure destination device. Master attribute information stored in the master attribute management DB of the device is acquired.

  Next, the disclosure main apparatus decrypts the acquired encrypted master attribute information (see (2) in FIG. 1), outputs the decrypted master attribute information to the display, and discloses from the output master attribute information. Input of information for determining attribute information disclosed to the destination device is accepted (see (3) in FIG. 1).

  For example, the disclosure main apparatus decrypts the encrypted master attribute information as “nickname: Dendentaro” and “mail address: dendentaro @...”. In addition, for example, the disclosure main device outputs information on the determination reception screen created from the decrypted master attribute information to the display, and receives attribute information by selecting a user's click on the determination reception screen. Accepts input. In the example of FIG. 1, it is assumed that the disclosure main apparatus receives an input of information for determining (selecting) “nickname: Denden Taro” by the user (note that determination of all attribute information may be received). In some cases, the information to be determined may simply be that the “send” icon is clicked by the user).

  Subsequently, the disclosure main apparatus encrypts the determined disclosure attribute information so that it can be decrypted only by the disclosure main apparatus and the disclosure destination apparatus (see (4) in FIG. 1), and the encrypted disclosure attribute information is obtained. Is transmitted to the attribute management apparatus (see (5) in FIG. 1).

  Then, the attribute management device acquires the encrypted disclosure attribute information transmitted by the main disclosure device (see (6) in FIG. 1) and stores it in the disclosure attribute storage DB.

  Thereafter, the disclosure destination device acquires the encrypted disclosure attribute information stored in the disclosure attribute storage DB of the attribute management device (see (7) in FIG. 1), and decrypts the acquired encrypted disclosure attribute information. (Refer to (8) in FIG. 1). For example, the disclosure destination device decrypts the encrypted disclosure attribute information and obtains “nickname: Denden Taro”. In this way, the disclosure destination device that is the EC site has attributes relating to the user who uses the disclosure main device (the user who intends to use the EC site) from the disclosure main device that is the portable information terminal trying to use the EC site. As information, “Nickname: Denden Taro” is acquired, and “Nickname: Denden Taro” is disclosed from the disclosure main device to the disclosure destination device.

  For this reason, the attribute information disclosure system according to the first embodiment can appropriately disclose attribute information.

  That is, first, the user can determine the disclosure attribute information from the attribute information (master attribute information) managed in advance by the attribute management device or the like and disclose it to the disclosure destination such as the EC site. The trouble of having to input attribute information every time it is used can be avoided.

  Also, the attribute information (master attribute information, disclosure attribute information) managed by the attribute management device is a key that can be decrypted only by the user, a key that can be decrypted only by the user and the disclosure destination of the attribute information, or the like. Since it is encrypted, the attribute management device can reduce the risk of managing attribute information.

  In addition, since the disclosed attribute information is managed by the attribute management device, for example, even when the mobile phone terminal is lost or when the model is changed, the user can continuously use the attribute information disclosure service, The content of the attribute information can be continuously confirmed (for example, the user can confirm what attribute information is disclosed to which EC site even after several decades).

  In addition, since the disclosure attribute information is managed by a server (attribute management apparatus) that can always communicate, the attribute information can be disclosed to a plurality of disclosure destinations, and the disclosure destinations are at a convenient timing. Attribute information can be obtained.

  Moreover, since the attribute information of the user is managed by a server (attribute management apparatus) that can always communicate, the disclosure destination can be confirmed at a necessary timing.

[Configuration of Attribute Information Disclosure System According to Embodiment 1]
Next, the configuration of the attribute information disclosure system according to the first embodiment will be described with reference to FIGS. FIG. 2 is a diagram for explaining the overall configuration of the attribute information disclosure system, and FIG. 3 is a block diagram illustrating the configuration of the attribute information disclosure system according to the first embodiment.

  First, the attribute information disclosure system according to the first embodiment is applied, for example, with an overall configuration as shown in FIG. Here, the network 1 is a communication network represented by the Internet, a dedicated line, and the like, and the network 2 is a network such as a digital broadcasting network. As shown in FIG. 2, a disclosure main device 200 that discloses attribute information, a disclosure destination device 300 that requests attribute information, and an attribute management device 100 that manages attribute information related to a user who uses the disclosure main device 200. Each is connected to the network 1. As shown in FIG. 2, the disclosure destination apparatus 300 is also connected to the network 2.

  Further, as the disclosure main device 200 that discloses attribute information, for example, a mobile phone terminal 200a such as a mobile phone or a PHS (Personal Handyphone System), a PDA (Personal Digital Assistants) 200b, or the like is assumed. Further, as the device 500 that gives the disclosure main device 200 an opportunity to disclose attribute information, a digital TV 500a, a one-segment mobile phone 500b, a PC (Personal Computer) 500c, a cash register 500d, a vending machine, a kiosk terminal 500e, and the like are assumed. . These devices 500 have a display function such as a two-dimensional barcode, and a function of transmitting information to the disclosed main device 200 such as RFID (Radio Frequency Identification).

  Next, the configuration of each of the attribute management apparatus 100, the disclosure main apparatus 200, and the disclosure destination apparatus 300 will be briefly described with reference to FIG.

[Attribute management apparatus 100]
As shown in FIG. 3, the attribute management apparatus 100 according to the first embodiment includes a communication unit 110, a storage unit 120, and a control unit 130 as those particularly closely related to the present invention.

  The communication unit 110 includes a general interface and library for IP (Internet Protocol) communication, and transmits and receives information to and from the disclosure main apparatus 200 and the disclosure destination apparatus 300.

  The storage unit 120 stores information used for various controls in the control unit 130, and particularly as closely related to the present invention, as shown in FIG. 3, an attribute request information storage DB (DataBase) 121 and a master An attribute management DB 122 and a disclosure attribute storage DB 123 are provided. Here, in FIG. 3, the master attribute management DB 122 is surrounded by a dotted line. This is because the master attribute management DB 122 is related to the master attribute information among the units included in the storage unit 120 of the attribute management apparatus 100. It is a part. That is, as described above, the master attribute management DB 122 can be provided in other devices other than the attribute management device 100, and this point is clearly indicated by a dotted line. The master attribute management DB 122 corresponds to “master attribute information storage unit” recited in the claims, and the disclosure attribute storage DB 123 corresponds to “disclosure attribute information storage unit” recited in the claims.

  The attribute request information storage DB 121 stores attribute request information. Specifically, when the attribute request information created by the disclosure destination device 300 (attribute request information creation unit 331 described later) is notified from the disclosure destination device 300, the attribute request information storage DB 121 receives the session ID. The attribute request information given and stored is used for processing by the master attribute information transmission unit 131 described later. Here, the attribute request information is information such as items (address, name, etc.) of attribute information requested to be disclosed to the disclosure main apparatus 200 by the disclosure destination apparatus 300.

  The master attribute management DB 122 stores master attribute information. Specifically, the master attribute management DB 122 stores encrypted master attribute information that has been encrypted by being registered in advance by the main disclosure device 200, and the stored master attribute information is a master attribute that will be described later. It is used for processing by the information transmission unit 131. Here, in the first embodiment, encryption means that encryption is performed so that only the disclosed main apparatus 200 can be decrypted. That is, the master attribute information regarding the user who uses the disclosure main apparatus 200 is encrypted so that it can be decrypted only by the disclosure main apparatus 200 used by the user. The master attribute information is original attribute information registered in advance by the disclosure main apparatus 200 and is distinguished from the disclosure attribute information disclosed in the disclosure destination apparatus 300.

  The disclosure attribute storage DB 123 stores disclosure attribute information. Specifically, the disclosure attribute storage DB 123 stores disclosure attribute information acquired by a disclosure attribute information acquisition unit 132 (to be described later), and the stored disclosure attribute information is used for processing by a disclosure attribute information transmission unit 133 (to be described later). And so on. Here, the disclosure attribute information is attribute information determined by the disclosure main apparatus 200 as attribute information disclosed to the disclosure destination apparatus 300, and is distinguished from the master attribute information.

  The control unit 130 performs various controls in the attribute management apparatus 100, and as particularly closely related to the present invention, as shown in FIG. 3, a master attribute information transmission unit 131, a disclosure attribute information acquisition unit 132, A disclosure attribute information transmission unit 133, a disclosure attribute information search unit 134, and a master attribute information update unit 135 are provided. Here, in FIG. 3, the master attribute information transmission unit 131 and the master attribute information update unit 135 are surrounded by a dotted line, and this is the master attribute among the units included in the control unit 130 of the attribute management apparatus 100. It shows that the information transmission part 131 and the master attribute information update part 135 are parts relevant to master attribute information. That is, as described above, since the master attribute management DB 122 can be provided in other devices other than the attribute management device 100, the master attribute information transmission unit 131 and the master attribute information update unit 135 are linked with this. Further, other devices other than the attribute management device 100 can be provided, and the point is clearly indicated by a dotted line. The disclosure attribute information acquisition unit 132 corresponds to the “disclosure attribute information acquisition unit” described in the claims, and the disclosure attribute information search unit 134 includes the “disclosed attribute information search unit” described in the claims. "And" search result transmission means ".

  The master attribute information transmission unit 131 transmits master attribute information. Specifically, the master attribute information transmission unit 131 transmits the encrypted master attribute information stored in the master attribute management DB 122 to the disclosure main apparatus 200 that is the disclosure subject of the encrypted master attribute information.

  The disclosure attribute information acquisition unit 132 acquires disclosure attribute information. Specifically, the disclosure attribute information acquisition unit 132 acquires the disclosure attribute information from the disclosure main apparatus 200 that is the disclosure subject of the disclosure attribute information.

  The disclosure attribute information transmission unit 133 transmits disclosure attribute information. Specifically, the disclosure attribute information transmission unit 133 transmits the disclosure attribute information stored in the disclosure attribute storage DB 123 to the disclosure destination apparatus 300 that is the disclosure destination of the disclosure attribute information.

  The disclosure attribute information search unit 134 searches for disclosure attribute information. Specifically, upon receiving a search request from the main disclosure device 200 (disclosure attribute information search unit 237 described later), the disclosure attribute information search unit 134 searches the disclosure attribute information stored in the disclosure attribute storage DB 123, The searched disclosure attribute information is transmitted to the disclosure attribute information search unit 237.

  The master attribute information update unit 135 updates the master attribute information. Specifically, when the master attribute information update unit 135 receives a master attribute information update request from the disclosure main apparatus 200 (master attribute information update unit 238), the master attribute information update unit 135 updates the master attribute information stored in the master attribute management DB 122. .

[Disclosure main device 200]
As shown in FIG. 3, the main device 200 disclosed in the first embodiment is particularly closely related to the present invention, and includes a communication unit 210, an input unit 211, an output unit 212, and an input / output control I / F. A unit 213 and a control unit 230.

  The communication unit 210 includes a general interface and library for IP communication, and transmits / receives information to / from the attribute management apparatus 100.

  The input unit 211 inputs information used for various processes by the control unit 230, operation instructions for performing the various processes, and the like using number keys, a keyboard, a mouse, and the like. Specifically, the input unit 211 inputs information for selecting disclosure attribute information, and the input information is used for processing by the determination receiving unit 234 described later.

  The output unit 212 outputs the results of various processes by the control unit 230 and operation instructions for performing various processes to a display, a printer, or the like. Specifically, the output unit 212 outputs a determination reception screen for selecting disclosure attribute information from master attribute information.

  The input / output control I / F unit 213 controls data transfer among the input unit 211, the output unit 212, the communication unit 210, the storage unit 220 (not shown), and the control unit 230.

  The control unit 230 performs various controls in the disclosed main apparatus 200, and particularly those closely related to the present invention include an access request unit 231, a master attribute information acquisition unit 232, a master attribute, as shown in FIG. An information decryption unit 233, a determination reception unit 234, a disclosure attribute information encryption unit 235, a disclosure attribute information transmission unit 236, a disclosure attribute information search unit 237, and a master attribute information update unit 238 are provided. The master attribute information acquisition unit 232 corresponds to the “master attribute information acquisition unit” described in the claims, and the master attribute information decryption unit 233 includes the “master attribute information decryption unit” described in the claims. The determination receiving unit 234 corresponds to the “decision receiving unit” described in the claims, and the disclosure attribute information encryption unit 235 corresponds to the “disclosure attribute information encryption” described in the claims. The disclosure attribute information transmission unit 236 corresponds to the “disclosure attribute information transmission unit” described in the claims, and the disclosure attribute information search unit 237 corresponds to the “disclosure completed”. Corresponding to “attribute information search means”, the master attribute information update unit 238 includes “new attribute information reception means”, “master attribute information addition means”, and “additional master attribute information transmission means” described in the claims. Correspond.

  The access request unit 231 transmits an access request. Specifically, the access request unit 231 transmits an access request for requesting access to the disclosure destination apparatus 300 to the disclosure destination apparatus 300 or the attribute management apparatus 100.

  The master attribute information acquisition unit 232 acquires master attribute information. Specifically, the master attribute information acquisition unit 232 is a master that is original attribute information that is currently stored in the attribute management apparatus 100 (master attribute management DB 122) as attribute information about a user who uses the main disclosure apparatus 200. Get attribute information. In the first embodiment, since the master attribute information acquisition unit 232 acquires encrypted master attribute information, the acquired master attribute information is used for processing by the master attribute information decryption unit 233.

  The master attribute information decoding unit 233 decodes the master attribute information. Specifically, the master attribute information decryption unit 233 decrypts the encrypted master attribute information acquired by the master attribute information acquisition unit 232, and uses the decrypted master attribute information for processing by the decision reception unit 234. And so on.

  The determination receiving unit 234 receives input of information for selecting disclosure attribute information. Specifically, the determination reception unit 234 outputs the master attribute information acquired by the master attribute information acquisition unit 232 and decoded by the master attribute information decoding unit 233 to the output unit 212. The input unit 211 receives input of information for determining disclosure attribute information to be disclosed to the disclosure destination device 300 from the output master attribute information. Further, the information received by the determination receiving unit 234 is used for processing by the disclosure attribute information encryption unit 235.

  The disclosure attribute information encryption unit 235 encrypts the disclosure attribute information. Specifically, the disclosure attribute information encryption unit 235 encrypts the attribute information determined by the information received by the determination reception unit 234 so that only the disclosure main device 200 and the disclosure destination device 300 can decrypt the attribute information. The encrypted disclosure attribute information is used for processing by the disclosure attribute information transmission unit 236.

  The disclosure attribute information transmission unit 236 transmits disclosure attribute information. Specifically, the disclosure attribute information transmission unit 236 is disclosure attribute information determined by the information received by the determination reception unit 234, and includes the disclosure attribute information encrypted by the disclosure attribute information encryption unit 235. It transmits toward the attribute management apparatus 100.

  The disclosed attribute information search unit 237 searches for disclosed attribute information. Specifically, the disclosure attribute information search unit 237 transmits the attribute information items and link destination information that have already been disclosed to the disclosure destination apparatus 300 as the disclosure attribute information to the attribute management apparatus 100 as a search condition, and the attribute management apparatus 100 The disclosure attribute information stored in the 100 disclosure attribute storage DB 123 is searched.

  The master attribute information update unit 238 updates the master attribute information. Specifically, the master attribute information update unit 238 receives input of new attribute information to be newly stored in the master attribute management DB 122 of the attribute management device 100 at the input unit, and sends the received new attribute information to the attribute management device 100. Send.

[Disclosure destination apparatus 300]
As shown in FIG. 3, the disclosure-destination apparatus 300 according to the first embodiment includes a communication unit 310 and a control unit 330 as particularly closely related to the present invention.

  The communication unit 310 includes a general interface and library for IP communication, and transmits / receives information to / from the attribute management apparatus 100.

  The control unit 330 performs various controls in the disclosure destination apparatus 300, and particularly as closely related to the present invention, as shown in FIG. 3, an attribute request information creation unit 331, a disclosure attribute information acquisition unit 332, A disclosure attribute information decoding unit 333. The disclosure attribute information acquisition unit 332 corresponds to the “disclosure attribute information acquisition unit” described in the claims, and the disclosure attribute information decoding unit 333 includes the “disclosure attribute information decoding unit” described in the claims. Corresponds to “means”.

  The attribute request information creation unit 331 creates attribute request information (information such as attribute information items (address, name, etc.) that the disclosure destination device 300 requests to disclose to the disclosure main device 200). Specifically, when receiving an access request from the disclosure main apparatus 200, the attribute request information creation unit 331 creates attribute request information, and the created attribute request information is notified to the attribute management apparatus 100.

  The disclosure attribute information acquisition unit 332 acquires disclosure attribute information. Specifically, the disclosure attribute information acquisition unit 332 acquires the encrypted disclosure attribute information transmitted by the attribute management device 100 (disclosure attribute information transmission unit 133), and the acquired encrypted disclosure attribute information is disclosed. It is used for processing by the attribute information decoding unit 333.

  The disclosure attribute information decryption unit 333 decrypts the disclosure attribute information. Specifically, the disclosure attribute information decryption unit 333 decrypts the encrypted disclosure attribute information acquired by the disclosure attribute information acquisition unit 332.

[Procedure for Processing by Attribute Information Disclosure System According to Embodiment 1]
Next, a processing procedure by the attribute information disclosure system according to the first embodiment will be described with reference to FIGS. FIG. 4 is a sequence diagram showing a processing procedure (two-dimensional barcode method) until acquisition of master attribute information, FIG. 5 is a diagram for explaining attribute request information, and FIGS. 6 and 7 are encryption diagrams. FIG. 8 is a sequence diagram showing a procedure (No. 1) of processing up to attribute information disclosure, and FIG. 9 is a diagram for explaining a decision acceptance screen. 10 is a diagram for explaining the encrypted disclosure attribute information, FIG. 11 is a diagram for explaining the disclosure attribute index information, and FIG. 12 is a process until acquisition of master attribute information. FIG. 13 is a sequence diagram showing a processing procedure (non-contact type IC card method 2) up to acquisition of master attribute information, and FIG. , Processing until attribute information disclosure FIG. 15 is a sequence diagram showing a disclosure attribute information search processing procedure, and FIG. 16 is a diagram for explaining a disclosure attribute information search screen. FIG. 17 is a sequence diagram illustrating a procedure of master attribute information update processing.

  As shown in FIG. 4, first, the access request unit 231 of the main disclosure device 200 (such as a portable information terminal) accesses a specified URL (Uniform Resource Locator), thereby disclosing the disclosure destination device 300 (such as an EC site). Is accessed (step S101).

  For example, it is assumed that a broadcasting station (disclosure destination apparatus 300) that broadcasts a digital broadcast program is going to conduct a questionnaire with respect to a viewer of the digital broadcast program (a user who uses the main disclosure apparatus 200). At this time, the disclosure-destination apparatus 300 is a two-dimensional system in which the URL of the homepage is set in the broadcast signal of the digital broadcast program for the purpose of inducing access by the disclosure main apparatus 200 to the homepage that the user answers the questionnaire. A barcode is placed and the two-dimensional barcode is displayed on the digital TV being viewed by the user. Then, the user who wants to answer the questionnaire reads the two-dimensional barcode displayed on the digital TV using the two-dimensional barcode reading function of the disclosure main apparatus 200, and the disclosure main apparatus 200 reads the read bar code. The code accesses the specified URL.

  Next, the attribute request information creation unit 331 of the disclosure destination apparatus 300 creates attribute request information (step S102). For example, as shown in FIG. 5, the attribute request information creation unit 331 includes an attribute information item (disclosure request attribute item) that is requested to be disclosed to the main disclosure device 200, and a public key (“EC site”) of the disclosure destination device 300. ”), And the usage rules, which are the operating conditions of the attribute information, are converted into data as attribute request information with the digital signature of the disclosure destination apparatus 300 (“ signature of EC site ”). Here, the disclosure request attribute item is an item of attribute information that the disclosure destination device 300 requests to disclose to the disclosure main device 200 when the disclosure main device 200 uses the EC site. , “Name”, “Email”, etc. The disclosure request attribute item is attached when the attribute display name (“nickname”, “email address”, etc.) to be shown to the user of the main disclosure device 200 or explanation information (explains about each item). Information).

  Here, as shown in FIG. 5, in the attribute request information, the usage rule and the digital signature of the disclosure destination apparatus 300 are optional. In other words, the usage agreement may be attached as appropriate when the operating condition of the attribute information needs to be presented to the user of the disclosure main apparatus 200, and the digital signature of the disclosure destination apparatus 300 includes the attribute If the disclosure main device 200 needs to confirm that the request information is certainly transmitted from the disclosure destination device 300 or that the attribute request information has not been falsified, it may be attached as appropriate. Is. On the other hand, in the attribute request information, the public key of the disclosure destination apparatus 300 may be considered to be attached in principle. That is, the public key of the disclosure destination apparatus 300 is required when the disclosure main apparatus 200 encrypts the disclosure attribute information. However, when the public key of the disclosure destination apparatus 300 has already been provided to the disclosure main apparatus 200, the public key of the disclosure destination apparatus 300 may not be attached.

  Although not shown in FIG. 5, in the first embodiment, the attribute request information further includes identification information (user ID) that can uniquely identify the user of the disclosure main apparatus 200. To do. As will be described later, in the attribute information disclosure system according to the first embodiment, a series of processes for disclosing attribute information among the attribute management device 100, the disclosure main device 200, and the disclosure destination device 300 is performed by “session ID”. Identified. However, for example, when the same user discloses attribute information to the same disclosure destination device 300 a plurality of times, only the “session ID” allows the disclosure destination device 300 to disclose the attribute information by the same user. I can't tell if there was. Therefore, the disclosure destination device 300 sets “user ID” as identification information that can uniquely identify the disclosure main device 200, and attaches the set “user ID” to the attribute request information. The session ID ”and the“ user ID ”can be associated with each other (step S106 to be described later), and the disclosure destination apparatus 300 can distinguish whether or not the attribute information has been disclosed by the same user. Become. The disclosure destination apparatus 300 acquires the “user ID” when the “user ID” is given to the URL in the access in step S101.

  Then, the attribute request information creation unit 331 of the disclosure destination apparatus 300 notifies the created attribute request information to the attribute management apparatus 100 (step S103). For example, the attribute request information creation unit 331 stores the created attribute request information in advance in the storage unit of the disclosure destination device 300 as the URL specified in advance as the URL of the attribute management device 100 (the URL of the attribute management device 100. URL) is notified.

  Note that the method by which the disclosure destination apparatus 300 knows the URL of the attribute management apparatus 100 is not limited to the above method. For example, the attribute request information creation unit 331 may know the URL of the attribute management device 100 from the URL specified as the parameter in the access in step S101 by the main disclosure device 200 (the URL of the attribute management device 100 is 2). It may be embedded as a parameter in the dimension barcode, or may be embedded as a parameter when the disclosure main apparatus 200 accesses the disclosure destination apparatus 300).

  Then, the master attribute information transmission unit 131 of the attribute management device 100 gives a session ID for uniquely identifying the attribute request information to the attribute request information notified from the disclosure destination device 300 (step S104), The request information is stored in the attribute request information storage DB 121 together with the session ID (step S105).

  Subsequently, the master attribute information transmission unit 131 associates the session ID given to the attribute request information with the user ID attached to the attribute request information in the disclosure destination device 300 and notifies the disclosure destination device 300 ( Step S106). Since steps S103 to S106 are a series of transactions, if the program of the disclosure destination apparatus 300 has a mechanism that can associate step S103 with step S106, the disclosure destination apparatus 300 It is not necessary to further add “user ID” to the attribute request information in step S103, and it is not necessary for the attribute management apparatus 100 to transmit “session ID” and “user ID” in association with each other in step S106.

  Next, the attribute request information creation unit 331 of the disclosure destination apparatus 300 transmits information with the session ID as a response to the URL access by the disclosure main apparatus 200 to the disclosure main apparatus 200 using the attribute management apparatus 100 as a redirect destination. (Step S107).

  Then, the master attribute information acquisition unit 232 of the disclosure main device 200 re-establishes the session with respect to the redirect destination (attribute management device 100) received from the disclosure destination device 300, and transmits the session ID to the attribute management device 100. (Step S108). At this time, if the disclosure main apparatus 200 stores the session ID in the storage unit of the disclosure main apparatus 200 by using, for example, a browser function (such as a cookie), the disclosure main apparatus is used in subsequent processing procedures. 200 can handle the session ID as a known one. However, in the following embodiments, the disclosure main apparatus 200 will be described as not storing a session ID in step S108.

  Then, the master attribute information transmission unit 131 of the attribute management apparatus 100 checks the session ID according to the master attribute information request from the disclosure main apparatus 200 (request to transmit master attribute information to the disclosure main apparatus 200). (Step S109). The master attribute information transmission unit 131 of the attribute management apparatus 100, when the session ID is valid (for example, that the session ID is within the validity period, or that the session ID is surely paid out), the disclosure main apparatus 200 HTML (HyperText Markup Language) for starting the attribute information disclosure dedicated application is created (step S110), and the created HTML file is transmitted to the disclosure main apparatus 200 (step S111).

  Then, the master attribute information acquisition unit 232 of the disclosure main apparatus 200 displays a screen (HTML file) with a link in which parameters for launching the attribute information disclosure dedicated application are described, and then the user clicks the link. Thus, the designated attribute information disclosure dedicated application is activated (step S112). Here, the parameter for launching the attribute information disclosure dedicated application is, for example, a session ID. That is, in principle, the main information disclosure apparatus 200 cannot share information between the browser and the attribute information disclosure dedicated application. For this reason, in the main disclosure apparatus 200, the browser must pass the session ID to the attribute information disclosure dedicated application. Therefore, the session ID is described as a parameter for starting the attribute information disclosure dedicated application, and when the user clicks the link, the attribute information disclosure dedicated application is started and the session ID is passed to the attribute information disclosure dedicated application. It is.

  Subsequently, the master attribute information acquisition unit 232 uses the activated application to authenticate the attribute management apparatus 100 with a session ID and authentication information for performing authentication between the disclosure main apparatus 200 and the attribute management apparatus 100 ( A so-called ID, password, etc.) are transferred (step S113).

  Next, the master attribute information transmission unit 131 of the attribute management apparatus 100 uses the session ID transmitted from the disclosure main apparatus 200 as a search key and the attribute request information (disclosure request attribute item, A public key of the disclosure destination apparatus 300, a use rule if necessary, etc.) are acquired (step S114).

  Then, the master attribute information transmission unit 131 identifies the user using the user authentication information delivered from the disclosure main apparatus 200 in step S113, and uses the identified user as a search key to attribute the user. The encrypted master attribute information that is information (“address”, “name”, “Email”, etc.) is acquired from the master attribute management DB 122 (step S115), and the acquired encrypted master attribute information is disclosed to the disclosure main device. 200 (step S116). At this time, if the disclosure main apparatus 200 has not acquired the public key of the disclosure destination apparatus 300, the public key of the disclosure destination apparatus 300 is transmitted.

  At this time, if the encrypted master attribute information is encrypted for each item such as “address”, “name”, “Email”, as shown in FIG. The transmission unit 131 uses the session ID as a search key and the disclosure request attribute item acquired from the attribute request information storage DB 121 and the unencrypted item name (“address”, “name” included in the encrypted master attribute information). ”,“ Email ”, etc.), only the master attribute information of the item that needs to be disclosed is transmitted to the disclosure main apparatus 200. Alternatively, as illustrated in FIG. 7, when all items are encrypted together, all encrypted master attribute information is transmitted to the disclosure main apparatus 200.

  In addition, as shown in FIG. 6B, the encrypted master attribute information includes items such as “address”, “postal code”, “prefecture”, “city”, “building name”, etc. In the case where encryption is performed for each sub-item that is an item subdivided for each element, the master attribute information transmission unit 131 uses the session ID as a search key as a disclosure request attribute item (this In the case of the disclosure request attribute item, it is assumed that the item requiring disclosure is specified not only at the item level but also at the small item level) and the encryption included in the encrypted master attribute information. By matching the item name (or small item name) that has not been performed, only the encrypted master attribute information of the item (or small item) that needs to be disclosed is transmitted to the main disclosure device 200. Good.

  Subsequently, as illustrated in FIG. 8, the master attribute information decoding unit 233 of the main disclosure device 200 decodes the acquired master attribute information (step S117). Specifically, the master attribute information decryption unit 233 uses the key stored in the disclosure main apparatus 200 to store the encrypted master attribute information received from the attribute management apparatus 100 (in a general encryption scheme). (Use a common key, secret key, etc.) and decrypt. At this time, considering the speed of decryption, the common key may be decrypted with the secret key, and the encrypted master attribute information may be decrypted with the common key.

  Then, the determination reception unit 234 of the main disclosure device 200 displays a determination reception screen (decoded master attribute information) on the output unit 212 (step S118) and receives input of information for determining the disclosure attribute information (step S118). S119). Specifically, the decision receiving unit 234 collects the decrypted master attribute information for each attribute item such as “address” and “name”, and displays them in a pull-down manner as shown in FIG. At this time, if the disclosure request attribute item does not include attribute information, the determination receiving unit 234 displays a text box that prompts the user to input a value, as indicated by 9-2 in FIG. In addition, when the usage agreement is received, the determination receiving unit 234 may be provided with a button such as 9-3 in FIG. 9 so that the usage agreement can be confirmed.

  Subsequently, when the user selects attribute information from the pull-down menu on the determination reception screen and presses the send button (the user simply confirms the master attribute information displayed on the determination reception screen. The determination accepting unit 234 of the main disclosure device 200 checks whether there are any excess or deficiency between the disclosure request attribute item and the selected disclosure attribute information item. If there is an excess or deficiency, the information for prompting the user to pay attention and the decision acceptance screen in FIG. On the other hand, when there is no excess or deficiency, the disclosure attribute information encryption unit 235 of the main disclosure device 200 encrypts the disclosure attribute information selected or input by the user with a randomly generated common key. Then, the disclosure attribute information encryption unit 235 encrypts the disclosure attribute information encrypted with the common key and the common key obtained by encrypting the disclosure attribute information with the user's key (which may be a public key or a common key). "Decryption key for user" and "Decryption key for disclosure destination" obtained by encrypting the common key that has encrypted the disclosure attribute information with the public key of disclosure destination device 300, respectively, to create encrypted disclosure attribute information (Step S120). For example, the disclosure attribute information encryption unit 235 creates encrypted disclosure attribute information as shown in FIG.

  As shown in FIG. 10, the user's digital signature is optional in the encrypted disclosure attribute information. That is, the user's digital signature indicates that the encrypted disclosure attribute information is certainly transmitted from the user, that the encrypted disclosure attribute information has not been tampered with, etc. 100 or the disclosure destination apparatus 300 may be attached as appropriate when it is necessary to check the information.

  Also, the disclosure attribute information encryption unit 235 discloses the disclosure attribute information item (the item disclosed to the disclosure destination apparatus 300) and the item for the purpose of enabling the disclosed disclosure attribute information to be searched later. Disclosure attribute index information including the link destination information indicating what number the attribute information has been registered in is created (step S121). For example, the disclosure attribute information encryption unit 235 creates disclosure attribute index information as shown in FIG.

  Here, the link destination information will be further described. A plurality of attribute information may be stored in association with one item of attribute information. For example, the item “address” includes “home address”, “work address”, or “return address”. However, since the attribute management apparatus 100 that manages the disclosure attribute information only manages the encrypted disclosure attribute information, it can be understood that the attribute information of the item “address” is managed. It is impossible to grasp whether it is “home address”, “work address”, or “home address” in “address”.

  If this is the case, when the disclosure main apparatus 200 later searches the attribute management apparatus 100 for the disclosed disclosure attribute information, any disclosure attribute information in the item “address” is determined according to some information. It is necessary to be able to specify to the attribute management apparatus 100 whether or not to search. In order to meet such needs, in the attribute information disclosure system according to the first embodiment, when the disclosure main device 200 transmits the encrypted disclosure attribute information to the attribute management device 100, the disclosure attribute index information is generated and transmitted. It is doing.

  In other words, the link destination information indicates in what order each of a plurality of pieces of attribute information stored in association with one item of attribute information is stored linked to the item (positioned in the master attribute information). In this order, for example, “Home Address”, “Work Address”, and “Home Return Address” are associated with the item “Address” in this order. If the link information is stored in the link, the link information “1” of the item “address” means “home address”, and the link information “2” of the item “address” is “work address”. The link destination information “3” of the item “address” means “home address”.

  Such link destination information may be held as a part of the master attribute information, or, in the decision reception screen as shown in FIG. 9, the display order simply corresponds to the link destination information. As long as the user who uses the disclosure main apparatus 200 can grasp the order of the disclosure attribute information disclosed by the user, any specific implementation form of the link destination information may be used. .

  Returning to FIG. 11, for example, in the disclosure attribute index information of FIG. 11, the disclosure attribute information disclosed by the main disclosure device 200 is attribute information indicated by the link destination information “1” of the item “address”, and the item “name”. Attribute information indicated by the link destination information “2” of the item, attribute information indicated by the link destination information “1” of the item “Email”, and information indicated by the link destination information “1” of the item “TEL”. . As will be described later, the attribute management device 100 manages the disclosure attribute index information together when managing the disclosure attribute information. For example, the user later links the link destination information “1” of the item “address”. Is used as a search key, the attribute management apparatus 100 returns the disclosed attribute information disclosed in association with the link destination information “1” of the item “address” as a search result.

  Returning to FIG. 8, thereafter, the disclosure attribute information transmission unit 236 of the disclosure main apparatus 200 sends the encrypted disclosure attribute information created in step S120 and the disclosure attribute index information created in step S121 to the attribute management apparatus 100. Transmit (step S122).

  Then, the disclosure attribute information acquisition unit 132 of the attribute management device 100 stores the encrypted disclosure attribute information and the disclosure attribute index information received from the main disclosure device 200 in the disclosure attribute storage DB 123 (step S124). At this time, the disclosure attribute information acquisition unit 132 checks the consistency between the disclosure request attribute item and the disclosure attribute information item transmitted from the main disclosure device 200 before storing the disclosure attribute information in the disclosure attribute storage DB 123. May be performed (step S123). After storing the disclosure attribute information in the disclosure attribute storage DB 123, the disclosure attribute information acquisition unit 132 transmits uploaded information indicating that the storage of the disclosure attribute information is completed to the disclosure main apparatus 200 (step S125).

  At this time, in the first embodiment, the URL of the disclosure destination apparatus 300 is included in the uploaded information. That is, as described above, in principle, the main information disclosure apparatus 200 cannot share information between the browser and the attribute information disclosure dedicated application. For this reason, in the main disclosure apparatus 200, the browser cannot pass the URL of the disclosure destination apparatus 300 to the attribute information disclosure dedicated application. Therefore, in the first embodiment, the uploaded information in step S125 serves to notify the URL of the disclosure destination apparatus 300 from the attribute management apparatus 100 to the attribute information disclosure dedicated application of the disclosure main apparatus 200.

  In addition, as a method of notifying the URL of the disclosure destination apparatus 300 to the attribute information disclosure dedicated application of the disclosure main apparatus 200, in addition to this, by including the URL of the disclosure destination apparatus 300 in the parameter of step S111, step S112 The URL of the disclosure destination apparatus 300 may be passed to the attribute information disclosure dedicated application. Note that where the attribute management device 100 originally knows the URL of the disclosure destination device 300, for example, the disclosure destination device 300 notifies the attribute management device 100 of the attribute request information in step S103 of FIG. At this time, the attribute management apparatus 100 may be notified by attaching the URL of the disclosure destination apparatus 300 to the attribute request information. If the URL of the disclosure destination apparatus 300 is stored in the storage unit of the disclosure main apparatus 200, it may be used.

  Next, the disclosure attribute information transmission unit 236 of the main disclosure device 200 receives the transmitted information, and uniquely identifies the URL of the disclosure destination device 300 and the disclosure attribute information stored in the disclosure attribute storage DB 123. An access URL including the ID is created (step S126). After the attribute information disclosure dedicated application is terminated, HTTP (Hyper Text Transfer Protocol) access is made to the access URL (step S127).

  Subsequently, the disclosure attribute information acquisition unit 332 of the disclosure destination apparatus 300 receives the session ID from the disclosure main apparatus 200 and stores the URL (or the disclosure main apparatus 200) of the attribute management apparatus 100 stored in the disclosure destination apparatus 300. The received session ID is transmitted to the URL of the attribute management apparatus 100 transmitted as a parameter from (step S128). Here, when the signature of the user is attached to the session ID received from the disclosure main apparatus 200 in step S127, the disclosure main apparatus 300 surely uses the received session ID by checking the signature. It may be checked that it has been transmitted from the user or that the session ID has not been tampered with. Further, the disclosure destination apparatus 300 may further transmit the signature ID of the disclosure destination apparatus 300 to the attribute management apparatus 100 after attaching the signature of the disclosure destination apparatus 300 to the session ID to which the user's signature is attached.

  Then, the disclosure attribute information transmission unit 133 of the attribute management apparatus 100 searches the disclosure attribute storage DB 123 for the encrypted disclosure attribute information to be transmitted to the disclosure destination apparatus 300 using the session ID received from the disclosure destination apparatus 300 as a search key. (Step S130), the encrypted disclosure attribute information is transmitted to the disclosure destination apparatus 300 (Step S131). When the attribute management apparatus 100 receives a session ID from the disclosure destination apparatus 300, if the signature is attached to the session ID, the validity of the signature is examined. For example, when a user's signature is attached, by verifying the validity of the signature, whether the session ID is surely transmitted from the user, whether the session ID is falsified, etc. Validate. Further, for example, when the signature of the disclosure destination apparatus 300 is attached, the validity of the signature is verified so that the session ID is surely transmitted from the disclosure destination apparatus 300 or the session ID is falsified. Verify that it has not been done.

  Also, the disclosure attribute information transmission unit 133 of the attribute management device 100, for example, when the disclosure main device 200 transmits the encrypted attribute information with the URL of the disclosure destination device 300 attached in step S122. By checking the consistency between this URL and the content verified in the signature of the disclosure destination device 300 attached to the session ID in step S129, the attribute management device 100 can be sure that the disclosure main device 200 is the disclosure destination. It can be verified that it is the designated disclosure destination apparatus 300. Then, the disclosure attribute information transmission unit 133 of the attribute management apparatus 100 may transmit the encrypted disclosure attribute information to the disclosure destination apparatus 300 only when it is correct.

  Thus, the disclosure destination device 300 decrypts the encrypted disclosure attribute information received from the attribute management device 100 with the secret key of the disclosure destination device 300, and receives the attribute information (step S132).

[Processing procedure until master attribute information acquisition (non-contact IC card system 1)]
By the way, the method (two-dimensional barcode method) where the master attribute information acquisition process is started when the disclosure main apparatus 200 reads the two-dimensional barcode and accesses the disclosure destination apparatus 300 has been described so far. However, the present invention is not limited to this. For example, when the disclosed main device 200 having an IC reader / writer function is tricked into a cash register or vending machine having an IC reader / writer function, such as a non-contact type IC card, or a PC or the like, The present invention can be similarly applied to a technique in which a parameter for starting an attribute information disclosure-dedicated application, necessary HTML, and the like are transmitted to the main disclosure apparatus 200 and master attribute information acquisition processing is started. .

  As shown in FIG. 12, first, when a disclosed main apparatus 200 having an IC reader / writer function is tricked into a cash register or vending machine having an IC reader / writer function, such as a non-contact type IC card, or a PC. The disclosure main apparatus 200 activates the attribute information disclosure dedicated application (step S201). At this time, a service request ID such that the URL of the disclosure destination apparatus 300, the URL of the attribute management apparatus 100, and the disclosure request attribute item can be identified is assigned to the activation parameter.

  The activation parameter may include the URL of the disclosure destination apparatus 300 and the service request ID, and the URL of the attribute management apparatus 100 may be stored in the attribute information disclosure dedicated application of the disclosure main apparatus 200.

  Next, the access request unit 231 of the disclosure main apparatus 200 notifies the attribute management apparatus 100 of the access destination URL and the service request ID by using the activated application (step S202).

  Then, the master attribute information transmission unit 131 of the attribute management apparatus 100 notifies the service request ID to the URL of the disclosure destination apparatus 300 transmitted from the disclosure main apparatus 200 (step S203).

  Subsequently, the attribute request information creation unit 331 of the disclosure destination apparatus 300 includes the disclosure request attribute item searched using the service request ID notified from the attribute management apparatus 100 as a search key, the public key of the disclosure destination apparatus 300, and attribute information. The usage rule, which is the operation condition, is converted into attribute request information with a digital signature of the disclosure destination apparatus 300 (step S204), and the created attribute request information is notified to the attribute management apparatus 100 (step S205). In the first embodiment, a user ID is further attached to the attribute request information.

  Then, the master attribute information transmission unit 131 of the attribute management apparatus 100 gives a session ID for uniquely identifying the attribute request information to the attribute request information notified from the disclosure destination apparatus 300 (step S206). The request information is stored in the attribute request information storage DB 121 together with the session ID (step S207).

  Subsequently, the master attribute information transmission unit 131 of the attribute management apparatus 100 associates the session ID assigned to the attribute request information with the user ID received from the disclosure destination apparatus 300 and notifies the disclosure destination apparatus 300 ( Step S208).

  As described above, according to the contactless IC card system 1, the attribute information disclosure dedicated application has already been started in the disclosure main apparatus 200, and a session has already been established between the disclosure main apparatus 200 and the attribute management apparatus 100. Thus, Steps S107 to S113 required in the two-dimensional barcode method are not necessary.

  That is, the master attribute information transmission unit 131 of the attribute management apparatus 100 immediately acquires the attribute request information stored in the attribute request information storage DB 121 using the session ID as a search key (step S209), and the encrypted master attribute Information is acquired from the master attribute management DB 122 (step S210), and the acquired encrypted master attribute information is transmitted to the disclosure main apparatus 200 (step S211).

[Processing procedure until master attribute information acquisition (non-contact type IC card system 2)]
By the way, the master attribute information is triggered by the fact that the disclosed main device 200 having the IC reader / writer function is tricked into a cash register or vending machine having an IC reader / writer function such as a non-contact type IC card or a PC. Although the method of starting the acquisition process (non-contact type IC card method 1) has been described, the non-contact type IC card method 2 in which other information is set in the activation parameter may be used.

  As shown in FIG. 13, first, when a disclosed main apparatus 200 having an IC reader / writer function is tricked into a cash register or vending machine having an IC reader / writer function, such as a non-contact type IC card, or a PC. The disclosure main apparatus 200 activates the attribute information disclosure dedicated application (step S301). At this time, the URL of the disclosure destination apparatus 300, the URL of the attribute management apparatus 100, the public key of the disclosure destination apparatus 300, and the disclosure request attribute item are assigned to the activation parameters. The URL of the attribute management device 100 may be stored in the attribute information disclosure dedicated application of the main disclosure device 200.

  Next, the access request unit 231 of the disclosure main apparatus 200 notifies the attribute management apparatus 100 of the value specified for the activation parameter by the activated application (step S302). Specifically, the access request unit 231 notifies the URL of the disclosure destination apparatus 300, the public key of the disclosure destination apparatus 300, and the disclosure request attribute item.

  Then, since the master attribute information transmission unit 131 of the attribute management apparatus 100 has already been notified of the public key and the disclosure request attribute item of the disclosure destination apparatus 300, the information for uniquely identifying the information is included in these pieces of information. A session ID is assigned (step S303), and the information is stored in the attribute request information storage DB 121 together with the session ID (step S304).

  Thereafter, as in the non-contact IC card system 1, the master attribute information transmission unit 131 notifies the disclosure destination device 300 of the session ID assigned to the attribute request information (step S305), and the session ID is searched for. Then, the information stored in the attribute request information storage DB 121 is acquired (step S306), the encrypted master attribute information is acquired from the master attribute management DB 122 (step S307), and the acquired encrypted master attribute information is acquired. Then, it is transmitted to the disclosed main apparatus 200 (step S308).

[Processing procedure until attribute information disclosure (part 2)]
By the way, until now, a method (part 1) in which the attribute management apparatus 100 stores the disclosure attribute information received from the disclosure main apparatus 200 in the disclosure attribute storage DB 123 and then transmits the uploaded information to the disclosure main apparatus 200 will be described. However, the present invention is not limited to this. A technique (part 2) of transferring attribute information by transmitting the uploaded information to the disclosure destination apparatus 300 instead of the disclosure main apparatus 200 may be used.

  Steps S117 to S124 in FIG. 14 are the same as the above-described method (part 1), and therefore, step S125-2 and subsequent steps will be described. The uploaded information including the session ID that uniquely identifies the disclosed attribute information stored in the information is transmitted to the disclosure destination apparatus 300 (step S125-2).

  Then, the disclosure attribute information acquisition unit 332 of the disclosure destination apparatus 300 receives the uploaded information transmitted from the attribute management apparatus 100, and attaches the signature of the disclosure destination apparatus 300 to the session ID included therein ( Step S126-2) responds (Step S127-2).

  Subsequently, the disclosure attribute information transmission unit 133 of the attribute management device 100 checks the signature of the disclosure destination device 300), and verifies the consistency between the signature and the disclosure destination device 300 (the signature of the disclosure destination device 300). After confirming that the information has been transmitted from the disclosure destination device 300 and that it has not been altered (step S128-2), the encrypted disclosure attribute information is disclosed using the session ID as a search key. A search is performed from the attribute storage DB 123 (step S129-2), and the encrypted disclosure attribute information is acquired. The disclosure attribute information transmission unit 133 transmits the acquired encrypted disclosure attribute information to the disclosure main device 300 (step S130-2), and the disclosure attribute information decryption unit 333 of the disclosure main device 300 performs the encryption. Already disclosed attribute information is decrypted (step S131-2).

[Search for disclosure attribute information]
By the way, attribute information may be changed, for example, an email address change associated with a provider change or an address change associated with a move. For this reason, the user often needs to search where and what information has been disclosed in the past. Hereinafter, a method for searching for attribute information disclosed in the past by the user in the attribute information disclosure system will be described.

  As shown in FIG. 15, first, when the attribute information disclosure dedicated application in the main disclosure apparatus 200 is activated by the user (step S401), the disclosure attribute information search unit 237 of the main disclosure apparatus 200 uses the attribute management apparatus. The attribute management apparatus 100 is requested to transmit the encrypted master attribute information stored in the 100 master attribute management DB 122 to the disclosure main apparatus 200 (step S402). At this time, the disclosure attribute information search unit 237 transmits authentication information (including so-called ID, password, etc.) for performing authentication between the disclosure main apparatus 200 and the attribute management apparatus 100 to the attribute management apparatus 100. . Note that this authentication information may be used in the attribute management apparatus 100 for the purpose of simply specifying a user, or may be used for the purpose of performing higher-level authentication (for purposes). The content of the authentication information sent in response to this will also be different).

  Next, the disclosed attribute information search unit 134 of the attribute management apparatus 100 specifies a user using the user authentication information received in step S402, and uses the specified user as a search key in the master attribute management DB 122. The stored encrypted master attribute information is searched (step S403), and the searched encrypted master attribute information is transmitted to the disclosure attribute information search unit 237 of the main disclosure device 200 (step S404). At this time, the attribute management apparatus 100 may authenticate the user using the authentication information transmitted from the user, and may interrupt the process as an error if the authentication result fails.

  Subsequently, the disclosure attribute information search unit 237 of the disclosure main apparatus 200 decrypts the encrypted master attribute information transmitted from the attribute management apparatus 100 with a key (a key obtained by encrypting the encrypted master attribute information). (Step S405), master attribute information is acquired. Then, the disclosure attribute information search unit 237 generates a disclosure attribute information search screen as shown in FIG. 16 using the acquired master attribute information, and displays it on the output unit 212 (step S406).

  When the user checks the attribute information and presses the search button, the disclosure attribute information search unit 237 accepts the press of the search button (step S407), and displays the checked attribute information item and link destination information. The information is acquired and transmitted to the attribute management apparatus 100 together with information for identifying the user (such as a user ID) (step S408).

  Here, the link destination information will be briefly explained again. In the link destination information, a plurality of pieces of attribute information stored in association with one item of attribute information are linked and stored in any order. For example (in order of positioning in the master attribute information), for example, “home address”, “work address”, “return home address” in association with the item “address” When the “address” is stored in the order linked to the item “address”, the link destination information “1” of the item “address” means “home address”, and the item “address” The link destination information “2” means “work address”, and the link destination information “3” of the item “address” means “home address”.

  As described in step S <b> 121 of FIG. 8, the disclosure main device 200 creates disclosure attribute index information and transmits it together with the encrypted disclosure attribute information when transmitting the encrypted disclosure attribute information to the attribute management device 100. In step S124, the attribute management apparatus 100 stores the received disclosure attribute index information in the disclosure attribute storage DB 123 together with the received encrypted disclosure attribute information. For this reason, when the disclosure main device 200 searches for the disclosed disclosure attribute information with respect to the attribute management device 100, the attribute management device 100 side stores the disclosure attribute as long as the item and the link destination information are specified. Of the disclosed attribute information stored in the DB 123, it is possible to grasp which attribute information stored in which order of which items should be searched.

  Returning to FIG. 15, the disclosure attribute information search unit 134 of the attribute management apparatus 100 uses the user ID, the attribute information item, and the link destination information as search keys to store the encrypted disclosure attribute information in the disclosure attribute storage DB 123. The user ID set in the disclosure attribute index information, the attribute information item, and the link destination information are matched, and the encrypted disclosure attribute information is searched (step S409) and transmitted to the disclosure main device 200 (step S409). S410). When a plurality of encrypted disclosure attribute information hits in the above search, a plurality of disclosure attribute information may be transmitted to the disclosure main apparatus 200 (see the right diagram in FIG. 16).

  The disclosure attribute information search unit 237 of the disclosure main apparatus 200 decrypts the received encrypted disclosure attribute information with the user's private key (step S411), and displays the disclosure attribute information on the disclosure main apparatus 200. That is, for example, the user clicks “Search” in the left diagram of FIG. 16 to change “Name Dendentaro” and “Email address dendentaro@**.ne.jp” to “Rakumaru Shoten”. Disclosure on “2000/6/23”, disclosure on “Rakumaru Shoten” on “January 11”, disclosure on “Bookstore” on “1998/7/29”, "2006/9/15" can be acquired as a search result. In other words, the user can choose what attribute information (name Dendentaro and e-mail address dendentaro@**.ne.jp) and what EC site (Rakumaru Shoten, )), It is possible to confirm when it was disclosed. Furthermore, since the disclosure attribute information is managed by the attribute management device 100, the user can confirm where and what was disclosed even after several decades. Note that the user can also know the detailed information of the disclosure attribute information by clicking “detailed display” in the right diagram of FIG. 16, for example.

  In the above processing procedure, the disclosure attribute information search unit 237 of the main disclosure device 200 firstly explained the method of downloading the master attribute information from the attribute management device 100. However, the present invention is not limited to this. is not. As long as the user of the main disclosure device 200 can grasp the latest master attribute information, any specific method may be used as to how to obtain the latest master attribute information.

[Update master attribute information]
By the way, for example, the master attribute information may be updated when the user registers new attribute information that is not stored in the master attribute management DB 122 of the attribute management apparatus 100. Hereinafter, a method in which the user updates the master attribute information in the attribute information disclosure system will be described.

  As shown in FIG. 17, first, when an attribute information disclosure dedicated application in the main disclosure apparatus 200 is activated by the user (step S501), the master attribute information update unit 238 of the main disclosure apparatus 200 uses the attribute management apparatus. The attribute management apparatus 100 is requested to transmit the encrypted master attribute information stored in the 100 master attribute management DB 122 to the disclosure main apparatus 200 (step S502). At this time, the master attribute information update unit 238 transmits authentication information (including so-called ID, password, and the like) for performing authentication between the disclosure main apparatus 200 and the attribute management apparatus 100 to the attribute management apparatus 100. . Note that this authentication information may be used in the attribute management apparatus 100 for the purpose of simply specifying a user, or may be used for the purpose of performing higher-level authentication (for purposes). The content of the authentication information sent in response to this will also be different).

  Next, the master attribute information update unit 135 of the attribute management apparatus 100 identifies a user using the user authentication information received in step S502, and uses the identified user as a search key in the master attribute management DB 122. The stored encrypted master attribute information is searched (step S503), and the searched encrypted master attribute information is transmitted to the master attribute information update unit 238 of the disclosure main apparatus 200 (step S504). At this time, the attribute management apparatus 100 may authenticate the user using the authentication information transmitted from the user, and may interrupt the process as an error if the authentication result fails.

  Subsequently, the master attribute information update unit 238 of the disclosure main apparatus 200 decrypts the encrypted master attribute information transmitted from the attribute management apparatus 100 with a key (a key obtained by encrypting the encrypted master attribute information). (Step S505), master attribute information is acquired. Then, the master attribute information update unit 238 displays the acquired master attribute information on the output unit 212 (step S506).

  Subsequently, the master attribute information update unit 238 of the disclosure main apparatus 200 receives input of new attribute information (step S502). Then, the master attribute information update unit 238 checks the attribute information item of the newly input attribute information (whether the input attribute information is “address” or “phone number”). In the case of a new item, a new item is added to the master attribute information (an initial value of link destination information is given if necessary. Note that a plurality of attribute information may be associated with each other. For items that cannot be obtained, link destination information need not be given). If the item is not a new item, the maximum link destination information of the corresponding item is checked, and the value is incremented.

  Subsequently, the master attribute information update unit 238 performs encryption for each added item (new item added, existing item added with attribute information) (step S503), and differential encryption is completed. Master attribute information, disclosure attribute type information indicating the added item (attribute item disclosed by the user as master attribute information), and user authentication information for identifying the owner of the attribute information to be added, It transmits to the attribute management apparatus 100 (step S504). Note that the encrypted master attribute information of only the difference is transmitted in consideration of the data amount reduction, but all the encrypted master attribute information may be transmitted to the attribute management apparatus 100.

  The master attribute information update unit 135 of the attribute management apparatus 100 checks the authentication information (step S505). If the authentication is successful, the disclosure attribute type information and differential encryption of the corresponding user in the master attribute management DB 122 are obtained. The updated master attribute information is updated (the differentially encrypted master attribute information is reflected in the encrypted master attribute information) (step S506). Some processing may be performed via HTML, or all processing may be performed within the application without going through HTML.

  In the above processing procedure, the disclosure attribute information search unit 237 of the main disclosure device 200 firstly explained the method of downloading the master attribute information from the attribute management device 100. However, the present invention is not limited to this. is not. As long as the user of the main disclosure device 200 can grasp the latest master attribute information, any specific method may be used as to how to obtain the latest master attribute information.

[Method for Disclosing Attribute Information to Multiple Disclosure Devices]
By the way, for example, only “name” and “Email” are disclosed to the EC site 1, and “name”, “address” and “phone number” are disclosed to the EC site 2 (for example, delivery company). As described above, attribute information may be disclosed to a plurality of EC sites. In the following, a method for disclosing attribute information for a plurality of disclosure destination devices will be described. FIG. 18 is a diagram for explaining attribute request information when attribute information is disclosed to a plurality of disclosure destination devices, and FIG. 19 is a case of attribute information disclosure to a plurality of disclosure destination devices. FIG. 20 is a diagram for explaining a decision reception screen, FIG. 20 is a diagram for explaining encrypted disclosure attribute information when attribute information is disclosed to a plurality of disclosure destination devices, and FIG. FIG. 22 is a diagram for explaining disclosure attribute index information when attribute information is disclosed to a plurality of disclosure destination devices, and FIG. 22 is a hub disclosure method when attribute information is disclosed to a plurality of disclosure destination devices. FIG. 23 is a diagram for explaining a multistage disclosure method when attribute information is disclosed to a plurality of disclosure destination devices, and FIG. 24 is an encryption using a hub disclosure method. Explained disclosure attribute information FIG. 25 is a diagram for explaining disclosure attribute index information by the hub disclosure method, and FIG. 26 is a diagram for explaining encrypted disclosure attribute information by the multistage disclosure method. FIG. 27 is a diagram for explaining disclosure attribute index information by the multistage disclosure method.

  When disclosing attribute information to a plurality of disclosure destination devices 300, each attribute request information is created by each attribute request information creation unit 331 of each disclosure destination device 300 (step S102 in FIG. 4), and disclosure to be disclosed The attribute request information for the number of destination devices 300 is notified to the attribute management device 100 (step S103).

  The master attribute information transmission unit 131 of the attribute management apparatus 100 assigns a session ID for uniquely identifying the plurality of attribute request information to the plurality of attribute request information notified from each disclosure destination apparatus 300 (step S104). The attribute request information storage DB 121 stores the attribute request information as shown in FIG. 18 (step S105).

  Thereafter, in step S115 in FIG. 4, the master attribute information transmission unit 131 obtains encrypted master attribute information, which is attribute information about the user, from the acquired disclosure request attribute item and authentication information indicating the user. Obtained from the attribute management DB 122. If there are duplicate disclosure request attribute items among a plurality of disclosure destination devices 300, encrypted master attribute information is obtained from the master attribute management DB 122 so that the items are not duplicated.

  In step S118 of FIG. 8, when the determination reception unit 234 of the disclosure main apparatus 200 generates a determination reception screen, based on the data of attribute request information (FIG. 18) for a plurality of disclosure destination apparatuses 300, FIG. As described above, for each disclosure destination apparatus 300, a screen that allows the user to select necessary attribute information is generated.

  When the user determines attribute information to be disclosed to each disclosure destination apparatus 300 and presses the transmission button, the disclosure attribute information encryption unit 235 of the disclosure main apparatus 200 displays the disclosure attribute information for each disclosure destination apparatus 300. Then, encryption is performed with each of the randomly generated common keys, and the respective common keys are encrypted with the respective public keys (step S120). As shown in FIG. 21, the encrypted disclosed attribute information as shown in FIG. Information index information is created.

  Thereafter, in step S128, the representative predetermined disclosure destination apparatus 300 determines the session ID known by the disclosure destination apparatus 300, URL information of the attribute management apparatus 100, and the like (for example, in step S127 of FIG. Information transmitted from the disclosure main apparatus 200) to the other disclosure destination apparatus 300. At this time, a predetermined disclosure main device 300 may become a hub (center), and information (session ID, URL, etc.) may be notified (hub notification method) to each of a plurality of other disclosure destination devices 300 (see FIG. 22). The other disclosure destination apparatus 300 may notify to another disclosure destination apparatus 300 (successfully circulate and notify, etc.) in a multistage notification method (see FIG. 23). At this time, the encrypted disclosure attribute information and the disclosure attribute index information may be in a data format as shown in FIGS. 20 and 21, or as shown in FIGS. Information indicating whether the notification method is a hub notification method or a multistage notification method may be added (eg, hierarchical management expressed by a dotted line).

  For example, as shown in FIG. 22, the attribute management apparatus 100 that has received the encrypted disclosure attribute information request attached with the signature of the user, the signature of the disclosure destination apparatus 300, or the like, Check sex.

[Effect of Example 1]
As described above, according to the first embodiment, an attribute information disclosure system that discloses attribute information related to a user who uses a disclosure main apparatus to a disclosure destination apparatus, and the disclosure main apparatus uses the disclosure main apparatus. The master attribute information that is the original attribute information about the user is acquired from the master attribute information storage unit, the acquired master attribute information is output to the output unit, and the attribute information disclosed to the disclosure destination device is output from the output master attribute information. The input of information to be determined is received at the input unit, the disclosure attribute information determined by the received information is encrypted so that it can be decrypted only by the disclosure main device and the disclosure destination device, and the disclosed disclosure attribute information is disclosed. The attribute management device is provided with a storage unit for storing the encrypted disclosure attribute information. The transmitted encrypted disclosure attribute information is stored in the storage unit, and the disclosure destination apparatus acquires the encrypted disclosure attribute information stored in the storage unit, and decrypts the acquired encrypted disclosure attribute information Therefore, it becomes possible to appropriately disclose attribute information.

  In other words, since the user only has to disclose the attribute information managed by the attribute management device to the disclosure site such as the EC site, the user has to input the attribute information every time the EC site is used. It can be avoided.

  In addition, attribute information managed by the attribute management device is encrypted with a key that can be decrypted only by the user or a key that can be decrypted only by the user and the disclosure destination of the attribute information. The device can reduce the risk when managing attribute information.

  Moreover, since the disclosed disclosure attribute information is managed by the attribute management device, the service can be continuously used even when the mobile phone terminal is lost or the model is changed. (For example, the user can confirm where and what was disclosed even after several decades).

  In addition, since the disclosure attribute information is managed by a server (attribute management apparatus) that can always communicate, the attribute information can be disclosed to a plurality of disclosure destinations, and the disclosure destinations are at a convenient timing. Attribute information can be obtained.

  Further, since the attribute information of the user is managed by a server (attribute management apparatus) that can always communicate, the influence of the change of the attribute information of the user can be confirmed at a timing when the disclosure destination is necessary.

  As described above, according to the first embodiment, as a result of the disclosure and management of the attribute information led by the user, it does not depend on a plurality of information providing devices, websites, terminals in use, and the like. Attribute information can be disclosed without the need for data input for general purposes. For example, it is safe and versatile by omitting data input by one-touch input and centrally managing the attribute information by the attribute management apparatus, and can be relieved by managing the history of the disclosed attribute information.

  Further, according to the first embodiment, the attribute information is appropriately disclosed in a configuration in which the disclosure main device has general encryption and decryption functions (without providing a special device in addition to the disclosure main device). It becomes possible to do.

  Further, according to the first embodiment, when transmitting the encrypted disclosure attribute information, each of the plurality of attribute information stored in association with one item of the attribute information determined as the encrypted disclosure attribute information is Link destination information indicating in what order the items are linked and stored is transmitted together with the encrypted disclosure attribute information, and the attribute management device stores the encrypted disclosure attribute information together with the link destination information, Since the attribute management device stores the transmitted encrypted disclosure attribute information in the storage unit together with the link destination information transmitted together with the encrypted disclosure attribute information, the disclosure main device can search the disclosure attribute information. Become.

  Further, according to the first embodiment, the disclosed main device transmits the disclosed attribute information items and link destination information to the attribute management device as the search conditions for the disclosed attribute information that has already been disclosed to the attribute management device as the disclosure attribute information. Then, the attribute management device searches the storage unit according to the transmitted search condition and transmits the searched disclosure attribute information to the disclosure main device, so that the disclosure main device can search the disclosure attribute information.

  Further, according to the first embodiment, the disclosure main apparatus receives input of new attribute information newly stored in the master attribute information storage unit at the input unit, and the received new attribute information is acquired from the master attribute information storage unit. If the attribute information is to add an item to the master attribute information, the item is added and the new attribute information is added to the master attribute information, and the new attribute information is acquired from the master attribute information storage unit. If the attribute information is to be added to the existing item, the new attribute information is added to the master attribute information of the existing item, and the added master attribute information is transmitted to the master attribute information storage unit. It becomes possible to cope with the update of attribute information.

  Further, according to the first embodiment, the master attribute information storage unit stores the encrypted master attribute information encrypted so that it can be decrypted only in the disclosure main apparatus. Decrypted master attribute information, obtain encrypted master attribute information from the master attribute information storage unit, decrypt the obtained encrypted master attribute information, and output the decrypted master attribute information to the output unit for information Therefore, the attribute information can be disclosed appropriately.

  Further, according to the first embodiment, the disclosure main apparatus receives input of new attribute information newly stored in the master attribute information storage unit at the input unit, and the received new attribute information is acquired from the master attribute information storage unit. If the attribute information is to add an item to the master attribute information, the item is added and the new attribute information is encrypted and added to the master attribute information, and the new attribute information is acquired from the master attribute information storage unit. If it is attribute information to be added to the existing item of the master attribute information that has been added, the new attribute information is encrypted and added to the master attribute information of the existing item, and the added encrypted master attribute information is Since the data is transmitted to the master attribute information storage unit, it is possible to cope with the update of the master attribute information.

  Further, according to the first embodiment, the attribute information includes items obtained by classifying the attribute information for each attribute type and / or small items that are items obtained by further subdividing the items into elements. The disclosure main apparatus acquires the master attribute information together with the disclosure request attribute item that is an item of attribute information that the disclosure destination apparatus requests to disclose to the disclosure main apparatus, and the disclosure main apparatus acquires the acquired disclosure. Since it determines from the master attribute information corresponding to a request | requirement attribute item, it becomes possible to manage attribute information appropriately in disclosing attribute information appropriately.

  In addition, according to the first embodiment, the attribute management apparatus encrypts the disclosure together with the information that defines the expiration date for each disclosure destination apparatus indicating the expiration date for which the disclosure attribute information can be disclosed to the disclosure destination apparatus. Since the attribute information is stored and the disclosure destination apparatus acquires the encrypted disclosure attribute information only when the expiration date is satisfied, the disclosure can be managed by the expiration date when the attribute information is disclosed.

  Further, according to the first embodiment, the disclosure main device discloses attribute information to a plurality of disclosure destination devices, and obtains acquisition information necessary for obtaining disclosure attribute information from the storage unit. The representative disclosure destination device transmits the acquired acquisition information to each of the other disclosure destination devices, or a plurality of disclosures. Since each disclosure destination device acquires encrypted disclosure attribute information using the acquired acquisition information or the notified acquisition information, a plurality of disclosure destination devices When the attribute information is disclosed, the information can be efficiently disclosed.

  Further, according to the first embodiment, the disclosure main device discloses attribute information to a plurality of disclosure destination devices, and acquisition information required when acquiring the disclosure attribute information from the storage unit, First verification information capable of verifying that the information transmission source is the disclosure main apparatus is transmitted to a representative disclosure destination apparatus among a plurality of disclosure destination apparatuses, and the representative disclosure destination apparatus transmits The obtained acquisition information and the first verification information are notified to each of the other disclosure destination devices, or sequentially circulated among a plurality of disclosure destination devices, and each disclosure destination device is transmitted. Store using the acquired information and the first verification information, or the notified acquisition information and the first verification information, and the second verification information that can verify that the transmission source of the information is the disclosure destination device Obtains the encrypted disclosure attribute information from the In disclosing the attribute information to, it is possible to efficiently disclosure.

  So far, as the first embodiment, an attribute information disclosure system (attribute information is disclosed using an attribute information disclosure dedicated application in the disclosure main apparatus) including the attribute management apparatus, the disclosure main apparatus, and the disclosure destination apparatus. However, the present invention is not limited to this, and a configuration in which a cryptographic processing device is added to the above configuration (not using an attribute information disclosure dedicated application in the disclosure main device, and a general purpose) The present invention can be similarly applied to an embodiment in which attribute information is disclosed using a browser or the like. Therefore, in the following, a configuration in which a cryptographic processing device is added will be described as a second embodiment.

  That is, for example, when attribute information is disclosed using a browser of a portable information terminal, it may be difficult to perform encryption or decryption of attribute information in the portable information terminal due to browser restrictions. Therefore, when attribute information is disclosed using a browser, an encryption processing device that encrypts and decrypts encrypted master attribute information, creates encrypted disclosed attribute information, and the like is separately provided. Note that the function of the cryptographic processing apparatus may be in the home gateway (HGW) at the user's home or on the network side of the communication carrier.

[Outline and Features of Attribute Information Disclosure System According to Second Embodiment]
First, the outline and characteristics of the attribute information disclosure system according to the second embodiment will be described with reference to FIG. FIG. 28 is a diagram for explaining the outline and features of the attribute information disclosure system according to the second embodiment.

  Similar to the first embodiment, the attribute information disclosure system according to the second embodiment is mainly disclosed to disclose attribute information about a user who uses the main disclosure device to the disclosure destination device, and mainly discloses the attribute information appropriately. Features.

  This main feature will be briefly described. First, the attribute information disclosure system according to the second embodiment includes an encryption processing device in addition to the attribute management device, the disclosure main device, and the disclosure destination device, as shown in FIG. Is done. Here, the cryptographic processing device is communicably connected to the attribute management measure and the disclosure main device. As shown in FIG. 28, the attribute management apparatus stores master attribute information in the master attribute management DB, as in the first embodiment.

  Under such a configuration, in the second embodiment, first, the cryptographic processing apparatus acquires encrypted master attribute information (see (1) in FIG. 28). For example, when a disclosure main device such as a portable information terminal uses an EC site, it is requested to disclose attribute information from a disclosure destination device that is an EC site, and an encryption process is triggered when the disclosure destination device is accessed. The device acquires master attribute information stored in the master attribute management DB of the attribute management device.

  Next, the cryptographic processing device decrypts the acquired encrypted master attribute information (see (2) in FIG. 28), and transmits the decrypted master attribute information to the disclosure main device.

  Then, the disclosure main apparatus acquires the decrypted master attribute information (see (3) in FIG. 28), outputs the acquired master attribute information to the display, and outputs the acquired master attribute information to the disclosure destination apparatus. An input of information for determining the attribute information to be disclosed is accepted (see (4) in FIG. 28).

  Subsequently, the disclosure main apparatus transmits the selected disclosure attribute information to the cryptographic processing apparatus (see (5) in FIG. 28). Then, when receiving the disclosure attribute information, the cryptographic processing device encrypts the received disclosure attribute information so that it can be decrypted only by the cryptographic processing device and the disclosure destination device (see (6) in FIG. 28). The disclosed disclosure attribute information is transmitted to the attribute management device (see (7) in FIG. 28).

  Thereafter, as in the first embodiment, the attribute management device acquires the encrypted disclosure attribute information transmitted by the main disclosure device (see (8) in FIG. 28), stores it in the disclosure attribute storage DB, and discloses the disclosure destination. The device acquires the encrypted disclosure attribute information stored in the disclosure attribute storage DB of the attribute management device (see (9) in FIG. 28), and decrypts the acquired encrypted disclosure attribute information (FIG. 28). (See (10)).

  For this reason, the attribute information disclosure system according to the second embodiment can appropriately disclose attribute information.

[Configuration of Attribute Information Disclosure System According to Second Embodiment]
Next, the configuration of the attribute information disclosure system according to the second embodiment will be described with reference to FIGS. FIG. 29 is a diagram for explaining the overall configuration of the attribute information disclosure system according to the second embodiment, and FIG. 30 is a block diagram illustrating the configuration of the attribute information disclosure system according to the second embodiment.

  First, the attribute information disclosure system according to the second embodiment is applied with, for example, an overall configuration as shown in FIG. Here, the difference from the attribute information disclosure system according to the first embodiment is that a cryptographic processing device 400 is added.

  Next, the configuration of each of the main disclosure apparatus 250 and the cryptographic processing apparatus 400 according to the second embodiment will be briefly described with reference to FIG. Note that the attribute management device 100 and the disclosure destination device 300 according to the second embodiment are configured in substantially the same manner as in the first embodiment, and thus description thereof is omitted.

[Disclosure main device 250]
The disclosed main apparatus 250 according to the second embodiment does not include the units corresponding to the master attribute information decryption unit 233 and the disclosure attribute information encryption unit 235 in the control unit 280.

[Cryptographic processing device 400]
On the other hand, in the second embodiment, the cryptographic processing apparatus 400 includes units corresponding to the master attribute information decryption unit 233 and the disclosure attribute information encryption unit 235. Specifically, the control unit 430 is particularly closely related to the present invention, and as shown in FIG. 30, a master attribute information receiving unit 431, a master attribute information decoding unit 432, and a master attribute information transmitting unit. 433, disclosure attribute information reception unit 434, disclosure attribute information encryption unit 435, and disclosure attribute information transmission unit 436. The master attribute information decoding unit 432 corresponds to the “master attribute information decoding unit” described in the claims, and the master attribute information transmission unit 433 includes the “master attribute information transmission” described in the claims. The disclosure attribute information encryption unit 435 corresponds to the “disclosure attribute information encryption unit” described in the claims, and the disclosure attribute information transmission unit 436 corresponds to the “means”. This corresponds to “disclosure attribute information transmitting means”.

  The master attribute information receiving unit 431 receives master attribute information. Specifically, the master attribute information receiving unit 431 receives the encrypted master attribute information transmitted by the master attribute information transmitting unit 131 of the attribute management apparatus 100, and the received encrypted master attribute information is the master attribute information. It is used for processing by the information decoding unit 432.

  The master attribute information decoding unit 432 decodes the master attribute information. Specifically, the master attribute information decryption unit 432 decrypts the encrypted master attribute information acquired by the master attribute information reception unit 431, and the decrypted master attribute information is processed by the master attribute information transmission unit 433. It is used for.

  The master attribute information transmission unit 433 transmits master attribute information. Specifically, the master attribute information transmission unit 433 transmits the master attribute information decrypted by the master attribute information decryption unit 432 to the disclosure main device 250.

  The disclosure attribute information receiving unit 434 receives disclosure attribute information. Specifically, the disclosure attribute information receiving unit 434 receives the disclosure attribute information transmitted by the main disclosure device 250, and the received disclosure attribute information is used for processing by the disclosure attribute information encryption unit 435. .

  The disclosure attribute information encryption unit 435 encrypts the disclosure attribute information. Specifically, the disclosure attribute information encryption unit 435 encrypts and encrypts the attribute information received by the disclosure attribute information reception unit 434 so that only the disclosure main device 250 and the disclosure destination device 300 can decrypt them. The disclosed disclosure attribute information is used for processing by the disclosure attribute information transmission unit 436.

  The disclosure attribute information transmission unit 436 transmits disclosure attribute information. Specifically, the disclosure attribute information transmission unit 236 transmits the disclosure attribute information encrypted by the disclosure attribute information encryption unit 435 to the attribute management apparatus 100.

[Procedure for Processing by Attribute Information Disclosure System According to Second Embodiment]
Next, a processing procedure by the attribute information disclosure system according to the second embodiment will be described with reference to FIGS. FIG. 31 is a sequence diagram showing a processing procedure (two-dimensional barcode method) until acquisition of master attribute information, and FIG. 32 is a sequence diagram showing a processing procedure (part 1) until attribute information disclosure. FIG. 33 is a sequence diagram illustrating a procedure (No. 2) of processing up to disclosure of attribute information.

  As illustrated in FIG. 31, first, as in the first embodiment, the access request unit 281 of the disclosure main apparatus 250 accesses the disclosure destination apparatus 300 (step S801), and the attribute request information generation unit of the disclosure destination apparatus 300 331 creates attribute request information as in the first embodiment (step S802).

  Then, the attribute request information creation unit 331 notifies the created attribute request information to the attribute management apparatus 100 (step S803), as in the first embodiment, and the master attribute information transmission unit 131 of the attribute management apparatus 100 performs the first embodiment. Similarly, a session ID is assigned to the attribute request information notified from the disclosure destination device 300 (step S804), and the attribute request information is stored in the attribute request information storage DB 121 together with the session ID (step S805).

  Subsequently, the master attribute information transmission unit 131 of the attribute management apparatus 100 notifies the disclosure destination apparatus 300 of the session ID given to the attribute request information (step S806), as in the first embodiment. Similar to the first embodiment, the information creation unit 331 transmits information to which the session ID is assigned to the disclosure main device 250 using the attribute management device 100 as a redirect destination (step S807).

  Then, as in the first embodiment, the master attribute information acquisition unit 282 of the main disclosure device 250 re-establishes the session to the attribute management device 100 and transmits the session ID to the attribute management device 100 (step S808).

  Here, the attribute management apparatus 100 receives a master attribute information request from the disclosure main apparatus 250 and performs authentication between the cryptographic processing apparatus 400 and the disclosure main apparatus 250. Specifically, the attribute management apparatus 100 receives a master attribute information request from the disclosure main apparatus 250, creates a screen for entering a login ID and password (step S809), the session ID, and the URL of the cryptographic processing apparatus 400 At the same time, it responds to the disclosed main device 250 (step S810). At this time, it is assumed that the URL of the encryption processing device 400 is stored in the attribute management device 100 for each user or the system-specific encryption processing URL, and the value is used. The URL specified in step S801 by the disclosure main apparatus 250 may be used as the URL of the cryptographic processing apparatus 400.

  The master attribute information acquisition unit 282 of the disclosure main apparatus 250 displays the received authentication screen (step S811), and prompts the user to input a login ID or password that is authentication information. And master attribute information acquisition part 282 will transmit session ID and authentication information to encryption processing device 400, if authentication information is received (Step S812) (Step S813).

  Then, the master attribute information receiving unit 431 of the cryptographic processing device 400 performs login authentication using the authentication information transmitted from the disclosure main device 250 (step S814). Specifically, the cryptographic processing device 400 includes the login ID and password set in the cryptographic processing device 400 and the login ID and password transmitted from the disclosure main device 250 (the ones entered by the user). ) And the session ID and the authentication information are transmitted to the attribute management apparatus 100 (step S814 and step S815).

  Then, the master attribute information transmission unit 131 of the attribute management apparatus 100 acquires attribute request information stored in the attribute request information storage DB 121 using the session ID transmitted from the cryptographic processing apparatus 400 as a search key (step S816). .

  Subsequently, the master attribute information transmission unit 131 acquires encrypted master attribute information, which is attribute information about the user, from the master attribute management DB 122 from the acquired disclosure request attribute item and authentication information indicating the user. (Step S817), the acquired encrypted master attribute information is transmitted to the cryptographic processing device 400 (Step S818). When transmitting the encrypted master attribute information, the attribute information usage rule, the signature of the disclosure destination apparatus 300, and the like may be transmitted to the cryptographic processing apparatus 400 as necessary.

  Then, the master attribute information receiving unit 431 of the cryptographic processing device 400 receives the encrypted master attribute information, and the master attribute information decrypting unit 432 stores the received encrypted master attribute information in the cryptographic processing device 400. The key is decrypted (using a common encryption key, a secret key, etc.) (step S819). At this time, considering the speed of decryption, the common key may be decrypted with the secret key, and the encrypted master attribute information may be decrypted with the common key.

  The master attribute information transmission unit 433 of the cryptographic processing apparatus 400 collects the decrypted master attribute information for each attribute item such as “address” and “name”, and generates a screen such as 9-1 in FIG. And transmitted to the disclosure main apparatus 250 (step S820). At this time, if the disclosure request attribute item does not include attribute information, the master attribute information transmission unit 433 displays a text box that prompts the user to input a value, as indicated by 9-2 in FIG. Further, when the usage rule is received, the master attribute information transmission unit 433 may be provided with a button such as 9-3 in FIG. 9 so that the usage rule can be confirmed.

  The decision accepting unit 283 of the main disclosure device 250 displays a decision accepting screen on the output unit 262 (step S821), and accepts input of information for determining disclosure attribute information (step S822).

  Subsequently, when the user selects attribute information from the pull-down menu on the determination reception screen and presses the transmission button, the determination reception unit 283 of the disclosure main apparatus 250 causes the disclosure request attribute item and the selected disclosure attribute to be selected. Whether there is an excess or deficiency in the information items is checked. If there is an excess or deficiency, the information for calling attention and the decision reception screen in FIG. 9 are redisplayed. On the other hand, when there is no excess or deficiency, the disclosure attribute information transmission unit 284 of the main disclosure device 250 transmits the disclosure attribute information to the cryptographic processing device 400 (step S823).

  Next, the disclosure attribute information receiving unit 434 of the cryptographic processing device 400 receives the disclosure attribute information, and the disclosure attribute information encryption unit 435 encrypts the received disclosure attribute information with a randomly generated common key. Then, the disclosure attribute information encryption unit 435 encrypts the disclosure attribute information encrypted with the common key and the common key obtained by encrypting the disclosure attribute information with the user's key (public key, common key, etc. A “decryption key for the user” encrypted with the key assigned by the device) and a “decryption key for the disclosure destination” obtained by encrypting the common key obtained by encrypting the disclosure attribute information with the public key of the disclosure destination device 300, In summary, the encrypted disclosure attribute information is created (step S824).

  Also, the disclosure attribute information encryption unit 435 creates disclosure attribute index information including items disclosed in the disclosure attribute information and link destination information so that the disclosure attribute information can be searched later (step S825).

  Thereafter, the disclosure attribute information transmission unit 436 of the cryptographic processing device 400 transmits the encrypted disclosure attribute information created in step S824 and the disclosure attribute index information created in step S825 to the attribute management device 100 (step S826). ).

  Then, the disclosure attribute information acquisition unit 132 of the attribute management device 100 stores the disclosure attribute information received from the cryptographic processing device 400 in the disclosure attribute storage DB 123 (step S828). At this time, the disclosure attribute information acquisition unit 132 checks the consistency between the disclosure request attribute item and the disclosure attribute information item transmitted from the disclosure main device 250 before storing the disclosure attribute information in the disclosure attribute storage DB 123. May be performed (step S827).

  Subsequently, after the disclosure attribute information is stored in the disclosure attribute storage DB 123, the disclosure attribute information acquisition unit 132 transmits the uploaded information indicating that the storage of the disclosure attribute information is completed to the cryptographic processing device 400 (step S1). S829).

  Next, the disclosure attribute information transmission unit 436 of the cryptographic processing device 400 receives the uploaded information and uniquely identifies the URL of the disclosure destination device 300 and the disclosure attribute information stored in the disclosure attribute storage DB 123. An access URL including the ID is created (step S830), and a screen including the URL of the disclosure destination apparatus 300 to be redirected and the parameter of the session ID is created and transmitted to the disclosure main apparatus 250. Note that the URL of the disclosure destination apparatus 300 used by the cryptographic processing apparatus 400 at this time may be, for example, the one transmitted from the attribute management apparatus 100 by being included in the uploaded information in step S829.

  The disclosure attribute information transmission unit 284 of the main disclosure device 250 receives the response from the cryptographic processing device 400, receives the information including the session ID information, information that can identify the user if necessary, and the attribute management device 100. To the disclosure destination apparatus 300 that is the redirect destination (step S831).

  Subsequently, the disclosure attribute information acquisition unit 332 of the disclosure destination apparatus 300 receives the session ID from the disclosure main apparatus 250 and transmits the URL (or the disclosure destination apparatus 300) of the attribute management apparatus 100 transmitted as a parameter from the disclosure main apparatus 200. The received session ID is transmitted to the URL of the attribute management apparatus 100 stored in (step S832). Here, when the user's signature is attached to the session ID received from the disclosure main apparatus 250 in step S831, the disclosure main apparatus 300 confirms the received session ID by checking the signature. It may be checked that it has been transmitted from the user or that the session ID has not been tampered with. Further, the disclosure destination apparatus 300 may further transmit the signature ID of the disclosure destination apparatus 300 to the attribute management apparatus 100 after attaching the signature of the disclosure destination apparatus 300 to the session ID to which the user's signature is attached.

  Then, the disclosure attribute information transmission unit 133 of the attribute management apparatus 100 searches the disclosure attribute storage DB 123 for the encrypted disclosure attribute information to be transmitted to the disclosure destination apparatus 300 using the session ID received from the disclosure destination apparatus 300 as a search key. (Step S834), the encrypted disclosure attribute information is transmitted to the disclosure destination device 300 (step S835). When the attribute management apparatus 100 receives a session ID from the disclosure destination apparatus 300, if the signature is attached to the session ID, the validity of the signature is examined. For example, when a user's signature is attached, by verifying the validity of the signature, whether the session ID is surely transmitted from the user, whether the session ID is falsified, etc. Validate. Further, for example, when the signature of the disclosure destination apparatus 300 is attached, the validity of the signature is verified so that the session ID is surely transmitted from the disclosure destination apparatus 300 or the session ID is falsified. Verify that it has not been done.

  Thus, the disclosure destination device 300 decrypts the encrypted disclosure attribute information received from the attribute management device 100 with the secret key of the disclosure destination device 300, and receives the attribute information (step S836).

[Processing procedure until attribute information disclosure (part 2)]
By the way, a method (part 1) in which the attribute management apparatus 100 stores the disclosure attribute information received from the disclosure main apparatus 250 in the disclosure attribute storage DB 123 and then transmits the uploaded information to the disclosure main apparatus 250 has been described. However, the present invention is not limited to this. A method (part 2) of transferring attribute information by transmitting the uploaded information to the disclosure destination apparatus 300 instead of the disclosure main apparatus 250 may be used.

  Since steps S819 to S828 of FIG. 33 are the same as the above-described method (part 1), step S829-2 and subsequent steps will be described. The uploaded information including the session ID that uniquely identifies the disclosure attribute information stored in the information is transmitted to the disclosure destination apparatus 300 (step S829-2).

  Then, the disclosure attribute information acquisition unit 332 of the disclosure destination apparatus 300 receives the uploaded information transmitted from the attribute management apparatus 100, and attaches the signature of the disclosure destination apparatus 300 to the session ID included therein ( Step S830-2) responds (Step S835-2).

  Subsequently, the disclosure attribute information transmission unit 133 of the attribute management apparatus 100 checks the signature of the disclosure destination apparatus 300 and confirms the consistency between the signature and the disclosure destination apparatus 300 (by verifying the signature of the disclosure destination apparatus 300). In step S831-2), and using the session ID as a search key, the encrypted disclosure attribute information is used as the disclosure attribute. A search is performed from the storage DB 123 (step S833-2), and the encrypted disclosure attribute information is acquired. The disclosure attribute information transmission unit 133 transmits the acquired encrypted disclosure attribute information to the disclosure destination device 300 (step S834-2), and the disclosure attribute information decryption unit 333 of the disclosure destination device 300 performs encryption. The already disclosed attribute information is decrypted (step S835-2).

  Note that, in the attribute information disclosure system according to the second embodiment, similarly to the first embodiment, search for disclosure attribute information and update of master attribute information are applied. In this case, in the first embodiment, the encryption processing device 400 performs the encryption and decryption processing and the various screen generation processing performed by the attribute information disclosure dedicated application in the disclosure main device 250. Only the difference will be made.

[Effect of Example 2]
As described above, according to the second embodiment, it is possible to appropriately disclose attribute information even if the main disclosure device does not have an encryption or decryption function.

  Further, according to the second embodiment, an attribute information disclosure system that discloses attribute information related to a user who uses a disclosure main device to a disclosure destination device, wherein the disclosure main device is an attribute related to a user who uses the disclosure main device. The master attribute information that is the original information is acquired from the master attribute information storage unit, the acquired master attribute information is output to the output unit, and the attribute information to be disclosed to the disclosure destination device is determined from the output master attribute information. The input is received at the input unit, and the disclosure attribute information determined by the received information is transmitted to a cryptographic processing device that is communicably connected to the main disclosure device, and the cryptographic processing device encrypts the transmitted disclosure attribute information. Encrypt so that only the processing device and the disclosure destination device can decrypt, and connect the encrypted disclosure attribute information to the encryption processing device and the disclosure destination device so that they can communicate with each other The attribute management device includes a storage unit that stores the encrypted disclosure attribute information, stores the transmitted encrypted disclosure attribute information in the storage unit, and the disclosure destination device includes: Since the encrypted disclosure attribute information stored in the storage unit is acquired and the acquired encrypted disclosure attribute information is decrypted, the attribute information can be appropriately disclosed.

  Further, according to the second embodiment, when transmitting the encrypted disclosure attribute information, the cryptographic processing apparatus stores a plurality of items stored in association with one item of attribute information determined as the encrypted disclosure attribute information. Link attribute information indicating in what order each attribute information is linked and stored with the item is transmitted together with the encrypted disclosure attribute information, and the attribute management apparatus transmits the encrypted disclosure attribute information to the link destination. The attribute management device stores the transmitted encrypted disclosure attribute information in the storage unit together with the link destination information transmitted together with the encrypted disclosure attribute information, so that the disclosure main device searches for the disclosure attribute information. It becomes possible to do.

  Further, according to the second embodiment, the disclosed main device transmits the disclosed attribute information items and link destination information to the attribute management device as the search conditions for the disclosed attribute information that has been disclosed to the attribute management device as disclosed attribute information. Then, the attribute management device searches the storage unit according to the transmitted search condition and transmits the searched disclosure attribute information to the disclosure main device, so that the disclosure main device can search the disclosure attribute information.

  According to the second embodiment, the disclosure main apparatus accepts input of new attribute information to be newly stored in the master attribute information storage unit at the input unit, and the accepted new attribute information is acquired from the master attribute information storage unit. If the attribute information is to add an item to the master attribute information, the item is added and the new attribute information is added to the master attribute information, and the new attribute information is acquired from the master attribute information storage unit. If the attribute information is to be added to the existing item, the new attribute information is added to the master attribute information of the existing item, and the added master attribute information is transmitted to the master attribute information storage unit. It becomes possible to cope with the update of attribute information.

  Further, according to the second embodiment, the master attribute information storage unit stores encrypted master attribute information encrypted so that it can be decrypted only in the encryption processing device. Master attribute information is acquired from the master attribute information storage unit, the acquired encrypted master attribute information is decrypted, and the disclosure main device acquires the master attribute information thus decrypted, thereby mastering the master attribute information. Since the attribute information is acquired from the attribute information storage unit, the attribute information can be appropriately disclosed.

  According to the second embodiment, the disclosure main apparatus accepts input of new attribute information to be newly stored in the master attribute information storage unit at the input unit, and the accepted new attribute information is acquired from the master attribute information storage unit. If the attribute information is to add an item to the master attribute information, the item is added and the new attribute information is encrypted and added to the master attribute information, and the new attribute information is acquired from the master attribute information storage unit. If it is attribute information to be added to the existing item of the master attribute information that has been added, the new attribute information is encrypted and added to the master attribute information of the existing item, and the added encrypted master attribute information is Since transmission is performed toward the master attribute information storage unit, transmission is performed toward the master attribute information storage unit, so that it is possible to cope with the update of the master attribute information.

[Other embodiments]
The embodiments of the present invention have been described so far, but the present invention may be implemented in various different forms other than the above-described embodiments.

[expiration date]
In the above-described first and second embodiments, there is little mention of introducing an “expiration date” when disclosing the disclosure attribute information to the disclosure destination apparatus. For example, it is assumed that an expiration date indicating a time limit during which disclosure attribute information can be disclosed to a disclosure destination device is defined for each disclosure destination device. For example, a disclosure attribute storage DB of an attribute management device stores disclosure attribute information and information related to the expiration date in association with each other, and the attribute management device requests disclosure attribute information from the disclosure destination device. When an attribute information acquisition request is received, it is determined whether or not the expiration date associated with the disclosure attribute information that is the target of the request is satisfied, and only when the expiration date is satisfied, the disclosure attribute is disclosed to the disclosure destination apparatus. It is possible to perform operations such as transmitting information.

[System configuration, etc.]
In the first and second embodiments described above, for convenience of explanation, an attribute information disclosure system configured with a correspondence relationship of “one attribute management device, one disclosure main device, one disclosure destination device” Although described, the present invention is not limited to this. The present invention can be similarly applied to an attribute information disclosure system having a correspondence relationship of “a single attribute management device, a plurality of disclosure main devices, a plurality of disclosure destination devices”. Such a correspondence relationship (such as which disclosure main device is managed by one attribute management device) is appropriately selected according to the form of operation.

  In addition, among the processes described in this embodiment, all or part of the processes described as being performed automatically can be performed manually, or the processes described as being performed manually can be performed. All or a part can be automatically performed by a known method. In addition, the processing procedure, control procedure, specific name, and information including various data and parameters shown in the above-described document and drawings can be arbitrarily changed unless otherwise specified.

  Each component of each illustrated device is functionally conceptual, and does not necessarily need to be physically configured as illustrated (such as FIG. 2). In other words, the specific form of distribution / integration of each device is not limited to that shown in the figure, and all or a part thereof may be functionally or physically distributed or arbitrarily distributed in arbitrary units according to various loads or usage conditions. Can be integrated and configured. Further, all or any part of each processing function performed in each device may be realized by a CPU and a program analyzed and executed by the CPU, or may be realized as hardware by wired logic.

  The attribute information disclosure method described in this embodiment can be realized by executing a program prepared in advance on a computer such as a personal computer or a workstation. This program can be distributed via a network such as the Internet. The program can also be executed by being recorded on a computer-readable recording medium such as a hard disk, a flexible disk (FD), a CD-ROM, an MO, and a DVD and being read from the recording medium by the computer.

  As described above, the attribute information disclosure system and attribute information disclosure method according to the present invention are useful for disclosing attribute information related to a user who uses a main disclosure device to a disclosure destination device, and in particular, appropriate attribute information. It is suitable for disclosure.

It is a figure for demonstrating the outline | summary and characteristic of the attribute information disclosure system which concern on Example 1. FIG. It is a figure for demonstrating the whole structure of an attribute information disclosure system. 1 is a block diagram illustrating a configuration of an attribute information disclosure system according to Embodiment 1. FIG. It is a sequence diagram which shows the procedure (two-dimensional barcode system) of processing until master attribute information acquisition. It is a figure for demonstrating attribute request information. It is a figure for demonstrating encrypted master attribute information. It is a figure for demonstrating encrypted master attribute information. It is a sequence diagram which shows the procedure (the 1) of the process until attribute information disclosure. It is a figure for demonstrating a determination reception screen. It is a figure for demonstrating encrypted disclosure attribute information. It is a figure for demonstrating disclosure attribute index information. It is a sequence diagram which shows the procedure (non-contact type IC card system 1) until the master attribute information acquisition. It is a sequence diagram which shows the procedure (non-contact type IC card system 2) until the master attribute information acquisition. It is a sequence diagram which shows the procedure (the 2) of the process until attribute information disclosure. It is a sequence diagram which shows the procedure of the process of a disclosure attribute information search. It is a figure for demonstrating a disclosure attribute information search screen. It is a sequence diagram which shows the procedure of a master attribute information update process. It is a figure for demonstrating the attribute request information in the case of performing attribute information disclosure with respect to a plurality of disclosure destination apparatuses. It is a figure for demonstrating the determination reception screen in the case of performing attribute information disclosure with respect to a some disclosure destination apparatus. It is a figure for demonstrating the encryption disclosure attribute information in the case of performing attribute information disclosure with respect to several disclosure destination apparatus. It is a figure for demonstrating the disclosure attribute index information in the case of performing attribute information disclosure with respect to a plurality of disclosure destination devices. It is a figure for demonstrating the hub disclosure system in the case of performing attribute information disclosure with respect to a some disclosure destination apparatus. It is a figure for demonstrating the multistage disclosure system in the case of performing attribute information disclosure with respect to a some disclosure destination apparatus. It is a figure for demonstrating the encryption disclosed attribute information by a hub disclosure system. It is a figure for demonstrating the disclosure attribute index information by a hub disclosure system. It is a figure for demonstrating the encryption disclosed disclosure attribute information by a multistage disclosure system. It is a figure for demonstrating the disclosure attribute index information by a multistage disclosure system. It is a figure for demonstrating the outline | summary and the characteristic of the attribute information disclosure system which concern on Example 2. FIG. It is a figure for demonstrating the whole structure of the attribute information disclosure system which concerns on Example 2. FIG. It is a block diagram which shows the structure of the attribute information disclosure system which concerns on Example 2. FIG. It is a sequence diagram which shows the procedure (two-dimensional barcode system) of processing until master attribute information acquisition. It is a sequence diagram which shows the procedure (the 1) of the process until attribute information disclosure. It is a sequence diagram which shows the procedure (the 2) of the process until attribute information disclosure.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Communication network 100 Attribute management apparatus 110 Communication part 120 Storage part 121 Attribute request information storage DB
122 Master attribute management DB
123 Disclosure attribute storage DB
DESCRIPTION OF SYMBOLS 130 Control part 131 Master attribute information transmission part 132 Disclosure attribute information acquisition part 133 Disclosure attribute information transmission part 134 Disclosure attribute information search part 135 Master attribute information update part 200 Disclosure main apparatus 210 Communication part 211 Input part 212 Output part 213 Input / output control I / F unit 230 Control unit 231 Access request unit 232 Master attribute information acquisition unit 233 Master attribute information decryption unit 234 Decision reception unit 235 Disclosure attribute information encryption unit 236 Disclosure attribute information transmission unit 237 Disclosure attribute information search unit 238 Master attribute Information update unit 300 Disclosure destination device 310 Communication unit 330 Control unit 331 Attribute request information creation unit 332 Disclosure attribute information acquisition unit 333 Disclosure attribute information decryption unit

Claims (18)

An attribute information disclosure system for disclosing attribute information about a user who uses a main disclosure device to a disclosure destination device,
The disclosed main apparatus is:
Master attribute information acquisition means for acquiring master attribute information, which is the original attribute information related to a user who uses the disclosure main device, from the master attribute information storage unit;
Determination receiving means for outputting master attribute information acquired by the master attribute information acquisition means to an output unit, and receiving input of information for determining attribute information disclosed to the disclosure destination device from the output master attribute information at the input unit When,
Disclosure attribute information encryption means for encrypting the disclosure attribute information determined by the information received by the determination reception means so that it can be decrypted only by the disclosure main apparatus and the disclosure destination apparatus;
Disclosure attribute information transmitting means for transmitting the encrypted disclosure attribute information encrypted by the disclosure attribute information encryption means to an attribute management apparatus communicably connected to each of the disclosure main apparatus and the disclosure destination apparatus;
With
The attribute management device
Disclosure attribute information storage means for storing encrypted disclosure attribute information;
Disclosure attribute information storage means for storing the encrypted disclosure attribute information transmitted by the disclosure attribute information transmission means in the disclosure attribute information storage means;
With
The disclosure destination device is:
Disclosure attribute information acquisition means for acquiring encrypted disclosure attribute information stored by the disclosure attribute information storage means;
Disclosure attribute information decryption means for decrypting the encrypted disclosure attribute information acquired by the disclosure attribute information acquisition means;
An attribute information disclosure system characterized by comprising: The disclosure attribute information transmitting means of the disclosure main device, when transmitting the encrypted disclosure attribute information, a plurality of items stored in association with one item of attribute information determined as the encrypted disclosure attribute information Link information indicating in what order each attribute information is linked to the item and stored together with the encrypted disclosure attribute information,
Disclosure attribute information storage means of the attribute management device stores the encrypted disclosure attribute information together with the link destination information,
Disclosure attribute information storage means of the attribute management device includes the disclosed attribute information together with the link destination information transmitted together with the encrypted disclosure attribute information and the encrypted disclosure attribute information transmitted by the disclosure attribute information transmission means. The attribute information disclosure system according to claim 1, wherein the attribute information disclosure system is stored in a storage unit. The disclosed main apparatus is:
Disclosed attribute information search means for transmitting the disclosed attribute information and the link destination information to the attribute management apparatus as search conditions for the disclosed attribute information already disclosed to the attribute management apparatus as the disclosed attribute information ,
The attribute management device
A disclosed attribute information search unit for searching the disclosed attribute information storage unit according to a search condition transmitted by the disclosed attribute information search unit;
3. The attribute information disclosure system according to claim 2, further comprising search result transmission means for transmitting the disclosed attribute information searched by the disclosed attribute information search means to the main disclosure apparatus. The disclosed main apparatus is:
New attribute information accepting means for accepting input of new attribute information to be newly stored in the master attribute information storage unit at the input unit;
When the new attribute information received by the new attribute information receiving means is attribute information for adding an item to the master attribute information acquired from the master attribute information storage unit, the item is added and the new attribute is added. Information is added to the master attribute information, and the new attribute information is attribute information to be added to an existing item of the master attribute information acquired from the master attribute information storage unit, the new attribute information is Master attribute information adding means for adding to the master attribute information of an existing item,
Master attribute information added by the master attribute information adding means, additional master attribute information transmitting means for transmitting to the master attribute information storage unit,
The attribute information disclosure system according to claim 1, further comprising: The master attribute information storage unit stores encrypted master attribute information encrypted so that it can be decrypted only in the main disclosure device,
The disclosed main apparatus is:
Master attribute information decrypting means for decrypting the encrypted master attribute information is further provided,
The master attribute information acquisition means acquires encrypted master attribute information from the master attribute information storage unit,
The master attribute information decryption means decrypts the encrypted master attribute information acquired by the master attribute information acquisition means,
The determination accepting means outputs the master attribute information decrypted by the master attribute information decrypting means to an output section and accepts the input of the information at the input section. The attribute information disclosure system according to one. The disclosed main apparatus is:
New attribute information accepting means for accepting input of new attribute information to be newly stored in the master attribute information storage unit at the input unit;
When the new attribute information received by the new attribute information receiving means is attribute information for adding an item to the master attribute information acquired from the master attribute information storage unit, the item is added and the new attribute is added. When the information is encrypted and added to the master attribute information, and the new attribute information is attribute information to be added to an existing item of the master attribute information acquired from the master attribute information storage unit, Master attribute information adding means for adding new attribute information after encrypting the master attribute information of the existing item,
Additional master attribute information transmitting means for transmitting the encrypted master attribute information added by the master attribute information adding means to the master attribute information storage unit;
The attribute information disclosure system according to claim 5, further comprising: An attribute information disclosure system for disclosing attribute information about a user who uses a main disclosure device to a disclosure destination device,
The disclosed main apparatus is:
Master attribute information acquisition means for acquiring master attribute information, which is the original attribute information related to a user who uses the disclosure main device, from the master attribute information storage unit;
Determination receiving means for outputting master attribute information acquired by the master attribute information acquisition means to an output unit, and receiving input of information for determining attribute information disclosed to the disclosure destination device from the output master attribute information at the input unit When,
Disclosure attribute information transmitting means for transmitting disclosure attribute information determined by the information received by the determination receiving means to a cryptographic processing apparatus communicably connected to the main disclosure apparatus;
With
The cryptographic processing device includes:
Disclosure attribute information encryption means for encrypting disclosure attribute information transmitted by the disclosure attribute information transmission means so that only the encryption processing device and the disclosure destination device can decrypt the disclosure attribute information;
Encrypted disclosure attribute information transmission for transmitting the encrypted disclosure attribute information encrypted by the disclosure attribute information encryption means to an attribute management device communicably connected to each of the encryption processing device and the disclosure destination device Means,
With
The attribute management device
Disclosure attribute information storage means for storing encrypted disclosure attribute information;
Disclosure attribute information storage means for storing the encrypted disclosure attribute information transmitted by the encrypted disclosure attribute information transmission means in the disclosure attribute information storage means;
With
The disclosure destination device is:
Disclosure attribute information acquisition means for acquiring encrypted disclosure attribute information stored by the disclosure attribute information storage means;
Disclosure attribute information decryption means for decrypting the encrypted disclosure attribute information acquired by the disclosure attribute information acquisition means;
An attribute information disclosure system characterized by comprising: The encrypted disclosure attribute information transmitting means of the cryptographic processing device stores the encrypted disclosure attribute information in association with one item of attribute information determined as the encrypted disclosure attribute information when transmitting the encrypted disclosure attribute information. A plurality of pieces of attribute information are transmitted together with the encrypted disclosure attribute information indicating link order information indicating in what order the items are linked and stored in the items,
Disclosure attribute information storage means of the attribute management device stores the encrypted disclosure attribute information together with the link destination information,
Disclosure attribute information storage means of the attribute management device includes the disclosed attribute information together with the link destination information transmitted together with the encrypted disclosure attribute information and the encrypted disclosure attribute information transmitted by the disclosure attribute information transmission means. The attribute information disclosure system according to claim 7, wherein the attribute information disclosure system is stored in a storage unit. The disclosed main apparatus is:
Disclosed attribute information search means for transmitting the disclosed attribute information and the link destination information to the attribute management apparatus as search conditions for the disclosed attribute information already disclosed to the attribute management apparatus as the disclosed attribute information ,
The attribute management device
A disclosed attribute information search unit for searching the disclosed attribute information storage unit according to a search condition transmitted by the disclosed attribute information search unit;
9. The attribute information disclosure system according to claim 8, further comprising search result transmission means for transmitting the disclosed attribute information searched by the disclosed attribute information search means to the main disclosure apparatus. The disclosed main apparatus is:
New attribute information accepting means for accepting input of new attribute information to be newly stored in the master attribute information storage unit at the input unit;
When the new attribute information received by the new attribute information receiving means is attribute information for adding an item to the master attribute information acquired from the master attribute information storage unit, the item is added and the new attribute is added. Information is added to the master attribute information, and the new attribute information is attribute information to be added to an existing item of the master attribute information acquired from the master attribute information storage unit, the new attribute information is Master attribute information adding means for adding to the master attribute information of an existing item,
Master attribute information added by the master attribute information adding means, additional master attribute information transmitting means for transmitting to the master attribute information storage unit,
The attribute information disclosure system according to claim 7, further comprising: The master attribute information storage unit stores encrypted master attribute information encrypted so that it can be decrypted only in a cryptographic processing device,
The cryptographic processing device includes:
Master attribute information acquisition means for acquiring the encrypted master attribute information from the master attribute information storage unit;
Master attribute information decrypting means for decrypting the encrypted master attribute information acquired by the master attribute information acquiring means,
The master attribute information acquisition unit of the disclosure main apparatus acquires the master attribute information from the master attribute information storage unit by acquiring the master attribute information decoded by the master attribute information decoding unit. The attribute information disclosure system according to any one of claims 7 to 10. The disclosed main apparatus is:
New attribute information accepting means for accepting input of new attribute information to be newly stored in the master attribute information storage unit at the input unit;
When the new attribute information received by the new attribute information receiving means is attribute information for adding an item to the master attribute information acquired from the master attribute information storage unit, the item is added and the new attribute is added. When the information is encrypted and added to the master attribute information, and the new attribute information is attribute information to be added to an existing item of the master attribute information acquired from the master attribute information storage unit, Master attribute information adding means for adding new attribute information after encrypting the master attribute information of the existing item,
Additional master attribute information transmitting means for transmitting the encrypted master attribute information added by the master attribute information adding means to the master attribute information storage unit;
The attribute information disclosure system according to claim 11, further comprising: The attribute information includes items obtained by classifying the attribute information for each attribute type, and / or small items that are items obtained by further subdividing the item into elements,
The master attribute information acquisition unit of the main device disclosed above,
The master attribute information is acquired together with a disclosure request attribute item that is an item of attribute information that the disclosure destination device requests to disclose to the disclosure main device,
The determination accepting means of the main disclosure device is:
The attribute information disclosure system according to claim 1, wherein the attribute information disclosure system is determined from master attribute information corresponding to a disclosure request attribute item acquired by the master attribute information acquisition unit. The disclosure attribute information storage unit of the attribute management device includes the encrypted disclosure together with information specifying an expiration date for each disclosure destination device indicating a time limit for disclosing the disclosure attribute information to the disclosure destination device. Remember attribute information,
The attribute according to any one of claims 1 to 13, wherein the disclosure attribute information acquisition unit of the disclosure destination apparatus acquires the encrypted disclosure attribute information only when the expiration date is satisfied. Information disclosure system. The disclosure main device discloses attribute information to a plurality of disclosure destination devices,
An acquisition information transmitting unit that transmits the acquisition information necessary for acquiring the disclosure attribute information from the disclosure attribute information storage unit to a disclosure destination device that is a representative of a plurality of disclosure destination devices;
The representative disclosure destination device is:
The acquisition information transmitted by the acquisition information transmission unit is notified to each other disclosure destination device, or comprises a notification unit that sequentially circulates and notifies among a plurality of disclosure destination devices,
The disclosure attribute information acquisition unit of each of the disclosure destination devices uses the acquisition information transmitted by the acquisition information transmission unit or the acquisition information notified by the notification unit, from the disclosure attribute information storage unit. The attribute information disclosure system according to claim 1, wherein the attribute information disclosure information is acquired. The disclosure main device discloses attribute information to a plurality of disclosure destination devices,
A plurality of disclosures including acquisition information necessary for acquiring the disclosure attribute information from the disclosure attribute information storage unit and first verification information capable of verifying that a transmission source of the information is a disclosure main apparatus An acquisition information transmitting means for transmitting to a disclosure destination device as a representative of the destination devices;
The representative disclosure destination device is:
Notifying means for notifying each of the other disclosure destination devices of the acquisition information and the first verification information transmitted by the acquisition information transmitting means, or sequentially circulating and notifying among a plurality of disclosure destination devices. Prepared,
The disclosure attribute information acquisition unit of each of the disclosure destination devices includes the acquisition information and first verification information transmitted by the acquisition information transmission unit, or the acquisition information and first verification information notified by the notification unit, 2. The encrypted disclosure attribute information is acquired from the disclosure attribute information storage unit using second verification information capable of verifying that an information transmission source is a disclosure destination device. The attribute information disclosure system according to any one of -14. An attribute information disclosure method in an attribute information disclosure system for disclosing attribute information related to a user who uses a disclosure main device to a disclosure destination device, wherein the disclosure main device includes:
Master attribute information acquisition step of acquiring master attribute information that is the original attribute information related to the user who uses the disclosure main device from the master attribute information storage unit;
A determination acceptance step of outputting master attribute information acquired by the master attribute information acquisition step to an output unit, and receiving input of information for determining attribute information disclosed to the disclosure destination device from the output master attribute information at the input unit When,
Disclosure attribute information encryption step for encrypting the disclosure attribute information determined by the information received by the determination reception step so that it can be decrypted only by the disclosure main device and the disclosure destination device;
A disclosure attribute information transmission step of transmitting the encrypted disclosure attribute information encrypted by the disclosure attribute information encryption step to an attribute management device communicably connected to each of the disclosure main device and the disclosure destination device;
Including
The attribute management device
A disclosure attribute information storage step of storing encrypted disclosure attribute information;
A disclosure attribute information storage step of storing the encrypted disclosure attribute information transmitted by the disclosure attribute information transmission step in the disclosure attribute information storage step;
Including
The disclosure destination device is:
A disclosure attribute information acquisition step of acquiring encrypted disclosure attribute information stored by the disclosure attribute information storage step;
A disclosure attribute information decryption step for decrypting the encrypted disclosure attribute information acquired by the disclosure attribute information acquisition step;
The attribute information disclosure method characterized by including An attribute information disclosure method in an attribute information disclosure system that discloses attribute information related to a user who uses a disclosure main device to a disclosure destination device,
The disclosed main apparatus is:
Master attribute information acquisition step of acquiring master attribute information that is the original attribute information related to the user who uses the disclosure main device from the master attribute information storage unit;
A determination acceptance step of outputting master attribute information acquired by the master attribute information acquisition step to an output unit, and receiving input of information for determining attribute information disclosed to the disclosure destination device from the output master attribute information at the input unit When,
A disclosure attribute information transmitting step of transmitting the disclosure attribute information determined by the information received by the determination receiving step to a cryptographic processing device connected to the main disclosure device in a communicable manner;
Including
The cryptographic processing device includes:
A disclosure attribute information encryption step for encrypting the disclosure attribute information transmitted by the disclosure attribute information transmission step so that it can be decrypted only by the disclosure main device and the disclosure destination device;
Encrypted disclosure attribute information transmission for transmitting the encrypted disclosure attribute information encrypted by the disclosure attribute information encryption step to an attribute management device communicably connected to each of the encryption processing device and the disclosure destination device Process,
Including
The attribute management device
A disclosure attribute information storage step of storing encrypted disclosure attribute information;
A disclosure attribute information storage step of storing the encrypted disclosure attribute information transmitted by the disclosure attribute information transmission step of the cryptographic processing device in the disclosure attribute information storage step;
Including
The disclosure destination device is:
A disclosure attribute information acquisition step of acquiring encrypted disclosure attribute information stored by the disclosure attribute information storage step;
A disclosure attribute information decryption step for decrypting the encrypted disclosure attribute information acquired by the disclosure attribute information acquisition step;
The attribute information disclosure method characterized by including

Images