JP2009223899A - Address information updating system based on remove information - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide technology for suppressing illegal leakage of remove information and obtaining a result of using each remove information at a remove information provider. <P>SOLUTION: A center server 12 includes a first remove information DB 24 for registering the remove information composed of the name of a person who removes, old address, and new address in association with unique remove ID, a management program 22 for transmitting the encrypted remove information to a local server 14, and a result management DB 26 for storing the result of use transmitted from the local server 14, and the local server 14 includes a second remove information DB 34 for storing the remove information transmitted from the central server 12, and an updating program 32, and a use result DB 38 for recording the remove information used for updating in association with a user ID. The updating program 32 decodes the remove information, updates the remove information of the user, and transmits the use result information to the central server 12. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to an address information update system based on moving information, and in particular, based on moving information provided by a moving person held by a postal company or the like, necessary update processing is performed on address information presented by a user. It relates to the system to be executed.

  Currently, by posting the new and old addresses on the postcard for notice of moving, and posting them on the post, the moving person can receive a postal transfer service for free, but this is a one-year limited service, After this period, the mail sent to the old address will be sent back without knowing the destination.

Recently, there are increasing opportunities to send documents by routes other than postal mail, such as courier services. In this case, of course, the above transfer service cannot be received.
For this reason, for companies that regularly send large numbers of documents to a large number of customers, such as mail-order companies, keeping their address information up-to-date can lead to lost sales opportunities and This is a serious issue for avoiding unnecessary costs.

In contrast, in other countries, so-called cleaning services for address information based on relocation information are being implemented.
This is because the postal service provider provides paying service information to multiple service providers with the consent of the mover, and each service provider was presented by the client company based on the latest relocation information. A necessary update process is executed for the address information.

  As a result, the customer company can send DMs, bills, etc. based on the latest address information. In addition, the postal service provider can save the trouble of the transfer service and can obtain an information providing fee. In addition, the relocation worker can save the trouble of notifying the address change for each trading company.

  As described above, since the address information cleaning service based on the move-in information has a great merit for each person, it can be said that there is a high possibility that it will be lifted along the flow of deregulation in the near future in Japan.

  In relation to this, the sixth embodiment in Patent Document 1 discloses a cleaning service for address information.

JP 2003-50845 A

However, in the case of existing services in other countries, several problems have been pointed out from the viewpoint of personal information protection.
First, move information is provided from the postal service to the service provider in a lump, and each service provider provides services to the client company based on this information. It is difficult to respond immediately when there is a request for disclosure regarding the destination and date / time of provision of the new mover's information, and in some cases it is difficult to grasp the user's clue. There is no possibility.

  In addition, there is a possibility that service companies, etc., forge fictitious address information by combining the existing address information and name information in a brute force manner and present it to the service provider to obtain genuine address information illegally There is a risk that personal privacy may be harmed.

  Further, once the relocation person agrees to use the relocation information, the information automatically flows to a number of service utilization companies through a plurality of service providers, and it becomes difficult for the relocation person to control this. Originally, the mover would like to send the move information only to the companies that need it, but not the other companies, but he cannot place such a detailed order.

  In addition, postal service providers generally receive information charges according to the frequency of use of moving information, but the usage status such as usage frequency and the number of information provided depends on self-reporting by the service provider, It is difficult for business owners to see the underdeclaration of contractors.

  Incidentally, the address information cleaning service described in Patent Document 1 only transmits customer address data of a user company to the address information management center and is updated collectively by a server. It must be said that the service itself. Therefore, each of the above problems is included.

  The present invention was made to solve the above-mentioned problems of the prior art, suppresses unauthorized movement of moving information by a user company, etc. The purpose of the present invention is to provide a technique that can be flexibly dealt with, and that enables the moving information provider to grasp the actual usage of each moving information.

  In order to achieve the above object, the address information update system based on the moving information described in claim 1 registers the moving information including at least the name, the old address, and the new address of the moving person in association with the unique moving information ID. The address information file containing address information consisting of a combination of the name and current address that the user wishes to update, and a combination of different current addresses with the same name, or different names with the same current address It is determined whether or not a predetermined number or more of combinations are included, and when the predetermined number or more are included, a means for rejecting the update of the address information, and when the predetermined number or more is not included, the address information Compared with the above moving information, if the address information contains a moving person, the means for updating the current address of the address information to the new address of the moving person and the moving address used for the update Information, and usage record database to record in association with the ID of the user, the user is characterized by comprising means for transmitting a notification to be able to download updated processed address book file.

  In this way, each move information is assigned an ID, and each move information is used in an address information update process, so that the mover information is used in a disorderly manner by recording it in association with the user. Can be prevented.

Further, even when there is an inquiry about the usage status from the moving person, it is possible to immediately disclose the usage record information.
In addition, by encrypting and storing the moving information in the moving information database and providing a means for decrypting the moving information at the time when the update process is performed, it is possible to reduce unauthorized copying of the moving information. .

The above "update" not only replaces (overwrites) the current address in the address information with the new address of the new resident, but also adds the new address with a certain correspondence with the current address while leaving the current address. This is also a concept including the same (hereinafter the same).

  In addition, when one or more pieces of address information are input from the client terminal operated by the user, the new address may be displayed on the screen of the client terminal instead of the current address, or the new address may be displayed together with the current address. It shall be included in “update” (the same shall apply hereinafter).

Furthermore, the address information transmitted from the terminal operated by the user includes means for determining whether or not a predetermined number or more combinations of different current addresses with the same name or different names with the same current address are included. And a means for refusing to update the address information.
As a result, it becomes impossible for the user to present the address information created by combining the address and the name in a brute force manner and to acquire the genuine moving information illegally.

  The address information update system based on the moving information described in claim 2 is based on the system of claim 1, and further stores a one-time ID in which a limited number of address information is set in association with the user. And means for comparing the limit number set in the one-time ID with the number of address information transmitted when address information specifying the one-time ID is transmitted from the terminal operated by the user, And a means for rejecting the update of the address information when the number exceeds the limit number of the one-time ID.

  In this case, since the user is allowed to update the address information only within the limit number set in the one-time ID, he / she presents a large amount of address information created by combining the address and name in a brute force manner. It becomes impossible to obtain the move information of the fraudulently.

The address information update system based on the moving information described in claim 3 is based on the system of claim 2, and further, an expiration date is set for the one-time ID, and the one-time ID is received from the user's client terminal. Means for determining whether or not the expiration date set for the one-time ID has passed, and updating the address information if the expiration date has passed. And a means for refusal.
As a result, it is possible to effectively prevent a user from accumulating a plurality of one-time IDs and using them in order to illegally acquire genuine moving information based on a large amount of forged information.

The address information update system based on the moving information described in claim 4 is based on the system according to claims 1 to 3, and further includes a database for registering information on the user of the moving information, and a terminal operated by the moving person. A means for prompting the user to select a user who is permitted to use or rejects the use of his / her moving information, and the user's selection information transmitted from the above terminal are used as a moving information ID. If the moving person is included in the address information presented by the user and the means for registering in the predetermined database in association with the user, whether the user is permitted to use by the moving person, A means for determining whether or not the user has been denied use, and if the use is permitted, the address information is updated. If the use is denied, the address information is updated. Reject update Is characterized in that a means for.
As a result, the relocation person can flow his / her relocation information only to a specific user, and personal information can be prevented from flowing to an unwilling user.

The address information update system based on the move information described in claim 5 is based on the system of claims 1 to 4, and further, a request for browsing information related to the user of the own move information is transmitted from a terminal operated by the mover. If it is done, refer to the above-mentioned usage record database, means for extracting a user who has a usage record for the moving information of the moving person, means for transmitting the list of users to the terminal, and moving from the terminal When selection information of a user who refuses to use information is transmitted, a means for registering the selection information in a predetermined database in association with the moving information ID, and the moving person in the address information presented by the user And a means for adding information indicating that the addressee has refused to use the address information.
As a result, the relocation person can prevent future use by the user even after his / her relocation information has been leaked to the unwilling user.

The address information update system based on the moving information described in claim 6 is based on the system of claims 1 to 5 and further registers the e-mail address of the moving person who wishes to contact in advance when using the moving information. If the address information provided by the user is included in the database and the user, generate a confirmation e-mail that contains at least the user's name, reply deadline, and reply destination. A means for transmitting to the e-mail address of the moving person, and a means for rejecting updating of the address information when a signal indicating that the moving person refuses to use the moving information is received within the reply deadline. It is characterized by having prepared.
As a result, the relocation person can determine whether or not his / her relocation information is used, and can prevent personal information from being randomly distributed.

  An address information update system based on moving information described in claim 7 is a system comprising a center server and a local server connected to the center server via a communication network, wherein the center server A first moving information database in which moving information including at least a name, an old address, and a new address is registered in association with a unique moving information ID, and at least a part of the moving information is encrypted and transmitted to the local server. A second move information database that stores the move information transmitted from the center server, and a record management database that stores the use record information transmitted from the local server. And means for decrypting the moving information and the name and current address of the user who wishes to update Judgment is made on whether or not a predetermined number or more of combinations of means for obtaining an address book file including address information consisting of a combination and different current addresses with the same name or different names with the same current address are included. If there is not a predetermined number or more, the address information is compared with the above moving information, and the moving person is included in the address information. In this case, the means for updating the current address of the address information to the new address of the moving person, the usage record database for storing the moving information used for the update in association with the user ID, and the above-mentioned usage record information in the center It is characterized by comprising means for sending to the server and means for sending a notification so that the user can download the updated address book file.

  If the above-mentioned center server is operated by a moving information provider such as Japan Post, and the operation of the above local server is entrusted to a service provider, the moving information provider can fully grasp the usage record of the moving information. As a result, there is no room for the service provider to underreport the usage record that is the basis of the billing process.

Moreover, since the moving information is encrypted and stored in the local server, it is possible to prevent unauthorized use of personal information by the service provider.
Further, the local server determines whether or not the address information transmitted from the terminal operated by the user includes a predetermined number of combinations of different current addresses with the same name or different names with the same current address. And, if included, means for rejecting the update of the address information.
As a result, it is possible to prevent the user from presenting the address information created by combining the address and the name in a brute force manner and obtaining the genuine moving information illegally.

The address information update system based on the moving information described in claim 8 is based on the system of claim 7, and the center server registers a one-time ID in which a limit number of address information is set in association with the user. And when the information indicating the number of one-time IDs, users, and address information is transmitted from the local server, the number of address information is compared with the limit number set for the one-time ID. And a means for transmitting, to the local server, an instruction to reject the update of the address information when the number of address information exceeds the limit number of the one-time ID, and the local server operates by the user When the address information specifying the one-time ID is transmitted from the terminal, information indicating the one-time ID, the number of users and the address information is transmitted to the center server, and Means for querying whether to update the information, is characterized in that a means for rejecting the update of the address information when the instruction of rejection from the center server is sent.

  In this case, since the user is allowed to update the address information only within the limit number set in the one-time ID, he / she presents a large amount of address information created by combining the address and name in a brute force manner. It becomes impossible to obtain the move information of the fraudulently.

The address information update system based on the moving information described in claim 9 is based on the system of claim 8, and further, an expiration date is set in the one-time ID, and the center server transmits it from a local server. Means for determining whether or not the expiry date of the one-time ID that has been passed has passed, and means for transmitting, to the local server, an instruction to reject the update of the address information when the expiry date of the one-time ID has passed. It is characterized by having.
As a result, it is possible to effectively prevent a user from accumulating a plurality of one-time IDs and using them in order to illegally acquire genuine moving information based on a large amount of forged information.

The address information update system based on the move information described in claim 10 is based on the system of claims 7 to 9, and further includes a database in which the center server registers information related to the user of the move information, and the move Means for sending a list of users to the terminal operated by the user and prompting the user to select a user who is permitted or denied to use his / her moving information, and user selection information transmitted from the terminal Means for registering in the predetermined database in association with the moving information ID, and means for transmitting the selection information to the local server, wherein the local server registers the selection information in the predetermined database; If the above address is included in the address information presented by the user, whether the user has been permitted to use the A means for determining whether the person has been rejected and, if the user is permitted to use, update the address information, and if the user has been denied use, update the address information. And a means for refusal.
As a result, the relocation person can flow his / her relocation information only to a specific user, and personal information can be prevented from flowing to an unwilling user.

The address information update system based on the move information described in claim 11 is based on the system of claims 7 to 10, and the center server further provides information on the user of the own move information from the terminal operated by the mover. Means for referring to the result management database and extracting a user who has a use record with respect to the moving information of the moving person, and a means for transmitting the list of users to the terminal when the browsing request is transmitted When the selection information of the user who refuses to use the moving information is transmitted from the terminal, means for registering the selection information in a predetermined database in association with the moving information ID and the selection information to the local server Means for transmitting, and the local server includes means for registering the selection information in a predetermined database and address information presented by the user. In a case where the moving person is included, is characterized in that a means for adding information indicating that the use by the moving user concerning said address information is denied.
As a result, the relocation person can prevent future use by the user even after his / her relocation information has been leaked to the unwilling user.

  The address information update system based on the moving information described in claim 12 is based on the system of claims 7 to 11, and further, the e-mail address of the moving person that the center server wishes to contact in advance when using the moving information. If there is an inquiry about whether or not the local server can use the move information related to the mover who wishes to contact in advance, the database for registering the information, the means for transmitting information identifying the mover to the local server, and the local server Generate a confirmation e-mail containing the user's name, reply deadline, and reply destination, send it to the e-mail address of the new mover, and refuse to use the move information within the reply deadline Means for transmitting the use refusal information to a local server when a signal indicating the input is received, and the local server is provided by the user. If the address information that has been sent includes a mover who wishes to contact in advance, the means for inquiring whether or not the center server can be updated and the address information when the use refusal information is sent from the center server And means for rejecting the update.

  As a result, the relocation person can determine whether or not his / her relocation information is used, and can prevent personal information from being randomly distributed.

  In the address information update system based on the relocation information described in claim 1, an ID is assigned to each relocation information, and each relocation information is recorded in association with the user each time it is used for address information update processing. Therefore, it is possible to prevent the resident information from being used randomly.

In addition, even when a moving person makes an inquiry about the usage status, information on the usage status can be disclosed in a short time.
In addition, if the address information contains a combination of different current addresses with the same name, or combinations of different names with the same current address, it will be recognized as suspected of fraud and the update of the address information will be rejected. It is possible to effectively prevent the user from acquiring address information created by combining the address and the name in a brute force manner and illegally acquiring genuine move-in information.

  According to the address information update system based on the relocation information described in claims 2 and 8, the user is allowed to update the address information only within the limited number set in the one-time ID. A large amount of address information that has been forged by combining brute force is presented, and authentic move-out information cannot be obtained illegally.

  According to the address information update system based on the relocation information described in claims 3 and 9, the user stores a plurality of one-time IDs, and uses these in order to obtain genuine relocation information based on a large amount of forgery information. It is possible to effectively prevent unauthorized acquisition.

  According to the address information update system based on the relocation information described in claims 4 and 10, the relocation person can flow his / her relocation information only to a specific user, and personal information is sent to an unwilling user. Can be prevented from flowing.

  According to the address information update system based on the relocation information described in claims 5 and 11, even if the relocation person once leaked his relocation information to an unwilling user, It becomes possible to prevent the use.

  According to the address information update system based on the relocation information described in claims 6 and 12, the relocation person can decide whether or not his / her relocation information is used, and personal information diffuses randomly. Can be prevented.

  According to the address information update system based on the moving information described in claim 7, the moving information providing company operates the center server and entrusts the operation of the local server to the service provider. It becomes possible for the moving information provider to fully understand. For this reason, there is no room for a service provider to underreport the usage record that is the basis of the billing process.

  Moreover, since the moving information is encrypted and stored in the local server, it is possible to prevent unauthorized use of personal information by the service provider.

It is a conceptual diagram which shows the whole image of the address information update system based on the moving information which concerns on this invention. It is a block diagram for demonstrating the function structure of this system. It is explanatory drawing which shows the data item example of a 1st moving information database. It is explanatory drawing which shows the example of a data item of a one-time ID database. It is a flowchart explaining the process sequence in an address information update service. It is a flowchart explaining the process sequence in an address information update service. It is a flowchart explaining the control method of the own moving information by a moving person. It is a layout figure which shows the web page for company selection. It is a flowchart which shows the process sequence at the time of a moving person browsing the utilization track record regarding own moving information. It is a flowchart which shows the process sequence in case a moving person receives prior notice at the time of use of own moving information.

  FIG. 1 is a conceptual diagram showing an overall image of an address information updating system 10 based on moving information. This address information updating system 10 is a moving information providing company such as Japan Post, or a company entrusted with the moving information (Referred to as “IT partner”), a plurality of local servers 14 managed by a service provider, and a plurality of client terminals 16 managed by a service using company.

  The center server 12 and the local server 14 and the local server 14 and the client terminal 16 are connected via a communication network 18 such as the Internet or a dedicated line.

  The center server 12 stores information on the moving contact form 20 provided by mail by the moving person α, and each local server 14 stores a copy of the moving information.

Further, the difference data of the moving information is periodically distributed from the center server 12 to the local server 14.
The client terminal 16 transmits the address book file to the local server 14 in a timely manner, and requests an address information update process (cleaning) based on the moving information.

Receiving this, the local server 14 matches the latest address information and the information in the address book file, and after making necessary corrections, returns it to the client terminal 16.
In return, the service provider collects a fee according to the number of times the move information is used from the user company, and transfers a part of the fee to the account of the move information provider company.

  Note that the exchange of address information and address book files is not limited to being realized online via a communication network as described above, and can also be performed offline via a recording medium such as a magnetic tape or a hard disk.

In addition, the service usage fee collection method is not limited to the above. For example, the moving information provider collects a predetermined amount from the user and returns a part of it to the service provider according to the results. It can also be used.
In addition, instead of adopting the above-mentioned pay-as-you-go system for the amount, a fixed amount system that is constant regardless of the usage record may be employed.

  FIG. 2 is a block diagram for explaining a functional configuration of the address information update system 10.

  First, the center server 12 includes a management program 22, a first moving information database 24, a results management database 26, a first user company database 28, and a one-time ID database 29.

  In the first moving information database 24, as shown in FIG. 3, the moving information ID is the first, the moving person's name, password, old address, new address, moving date, e-mail address, use permitted company, use refusal. Data items such as company and necessity of e-mail notification are set.

  In the first user company database 28, attribute information (user company ID, password, name, address, industry category, e-mail address, presence / absence of privacy mark acquisition) related to all user companies traded by each local server 14 Etc.) are stored.

  The performance management database 26 stores information (service provider ID, moving information ID, usage company ID, usage date, etc.) indicating usage history of the moving information in each local server 14.

  In the one-time ID database 29, as shown in FIG. 4, data items such as a user company ID, a service provider ID, an issue date, a processing limit number, an expiration date, and a use date and time are set with the one-time ID at the top. Has been.

  In the storage device of each local server 14, a module 30 for updating address information is stored in advance by a move information provider company or its IT partner, and the service for the client terminal 16 can be performed only through this module 30. Can be provided.

  The module 30 includes an update processing program 32, a second moving information database 34, a second user company database 36, and a usage record database 38.

  Although not shown in the second moving information database 34, each of the moving person information ID, the old address, the new address, the use permitted company, the use refusal company, and the necessity of e-mail notification are included. A data item is set.

The second user company database 36 stores attribute information (user company ID, name, address, industry category, e-mail address, etc.) regarding the user company that the service provider trades.

  The usage record database 38 stores information (transfer information ID, use company ID, use date, etc.) indicating the use record of the move information in the local server 14.

Next, an example of a processing procedure in the address information update service will be described with reference to the flowcharts of FIGS.
First, the management program 22 of the center server 12 periodically distributes the difference data of the encrypted moving information to the module 30 of each local server 14 (S01).
The update processing program 32 of the local server 14 that has received this stores it in the second moving information database 34 and updates the moving information (S02).

  Next, when a one-time ID issuance request is transmitted from the client terminal 16 (S03), the update processing program 32 of the local server 14 transfers the request to the management program 22 of the center server 12 (S04). ).

  Receiving this, the management program 22 transmits a Web page for input of ID and password to the client terminal 16 via the local server 14 (S05, S06).

  On the other hand, when the ID and password are transmitted from the client terminal 16 via the local server 14 (S07, S08), the management program 22 performs authentication by referring to the first user company database 28 (S09).

  Next, the management program 22 refers to the one-time ID database 29 and checks whether there is a one-time ID that has been issued and is currently valid for the user company (S10).

  If an existing one-time ID exists, the management program 22 recognizes an error and rejects the issuance of the one-time ID (S11). This result is transmitted to the client terminal 16 via the local server 14 and displayed on the screen.

  On the other hand, if there is no currently valid one-time ID, the management program 22 issues a one-time ID for the user company and registers it in the one-time ID database 29 (S12).

This one-time ID is transmitted from the management program 22 to the user's client terminal 16 via the local server 14 (S13, S14).
As a result, a Web page on which the one-time ID is described is displayed on the screen of the client terminal 16. At the same time, the management program 22 can generate an e-mail with a one-time ID and send it to the e-mail address of the user company.

In this one-time ID, an available service provider, a processing limit number, and an expiration date (for example, 3 days) are set.
Here, the “processing limit” means the number of address information records that can be inquired in one update process. The size, nominal customer number, past usage record of the user company (for example, dispatched in the past half year) Taking into account the number of mail items), a specific number is set.

It is also possible to set the processing limit number in advance when the user company makes a contract to use the service.
The person in charge of the user company who has received the one-time ID connects to the local server 14 from the client terminal 16 within the validity period, and requests an address book file update processing service (S15).

  On the other hand, the local server 14 transmits a Web page for requesting input of the user company ID and the one-time ID (S16), and is displayed on the Web browser of the client terminal 16.

  In response to this, the person in charge inputs necessary information, designates an address book file desired to be updated stored in the hard disk of the client terminal 16, and clicks a send button.

As a result, the address book file is uploaded to the local server 14 together with the one-time ID or the like (S17).
Next, the update processing program 32 of the local server 14 transmits to the center server 12 information including the service company ID of the company, the service company ID input from the service company, the one-time ID, and the number of records in the address book file. Then, an inquiry is made as to whether or not updating is possible (S18).

  Receiving this, the management program 22 of the center server 12 confirms that the one-time ID is within the expiration date and that the number of records in the address book file is within the limit (S19, S20).

When the confirmation step is cleared, a signal permitting update processing is transmitted from the management program 22 to the local server 14 (S21).
The management program 22 records information indicating that the one-time ID is being used in the one-time ID database 29 (S22).

  The update processing program 32 that has received the signal permitting the update processing, the latest moving information (name and old address) stored in the second moving information database 34 and address information (name and current address) of the address book file, If a new person is detected, an update process for replacing the old address with the new address is executed (S23).

  When the update process is completed for all address information, the record information (used move information ID, use company ID, one-time ID, processing date and time) is registered in the use record database 38 (S24).

  At a later date, a usage fee corresponding to the number of update processes is charged from the service provider to the user company. In addition, a part of the fee collected from the user company is transferred to the moving information providing company.

After completion of the address book file update processing, the update processing program 32 sends an e-mail to the user company and notifies the completion of the processing (S25).
In this e-mail, a URL indicating the location where the updated address book file is stored is described. When the person in charge of the user company clicks this URL, the address book is displayed on the Web browser of the client terminal 16. A web page for downloading the file is displayed.

When the person in charge clicks on the file name in this Web page to request download (S26), the updated address book file is transmitted from the update processing program 32 of the local server 14 (S27) and is sent to the hard disk of the client terminal 16 Stored (S28).

  In the confirmation step of S19, if it is found that the one-time ID has expired, the management program 22 of the center server 12 determines an error (S29) and rejects the update process to the local server 14. Command.

  Receiving this, the update processing program 32 of the local server 14 transmits an error message indicating the expiration date to the client terminal 16 of the user company, and causes a pop-up display on the screen. In this case, the person in charge of the user company requests the center server 12 to issue a new one-time ID via the local server 14.

  Further, in the confirmation step of S20, even when the number of records included in the address book file transmitted from the client terminal 16 exceeds the limit set in the one-time ID, the management program 22 of the center server 12 Makes an error determination (S29) and instructs the local server 14 to reject the update process.

  Receiving this, the update processing program 32 of the local server 14 transmits an error message indicating that the limit number has been exceeded to the client terminal 16 of the user company, and causes a pop-up display on the screen. In this case, the person in charge generates a file with a reduced number of records, and requests update processing again.

The record information accumulated in the use record database 38 is periodically transmitted to the center server 12 through the update processing program 32 (S30).
Upon receiving this, the management program 22 of the center server 12 registers the result information in the result management database 26 in association with the service provider ID (S31), and the one-time ID database 29 has already used the one-time ID. Is recorded (S32).

  The record information accumulated in the local server 14 can be collected by the administrator of the center server 12 while being recorded on a medium such as a magnetic tape or a magnetic disk and stored offline in the record management database 26.

  In the case of this system, the moving information in the local server 14 is encrypted and can be decrypted only through the update processing program 32 of the module 30, so that the service provider cannot illegally use the moving information.

  In addition, since the user company can receive the update process only within the limit set in the one-time ID issued each time it receives the service, it is recorded in address information and name dictionary etc. distributed in the bag. It is possible to prevent a vast number of address information from being forged by combining the name information in a brute force manner and obtaining unauthorized move information based on this address information.

  In addition, a use time limit is set for the one-time ID, and the next one-time ID is not issued until the one-time ID has been used or expired. It is also possible to prevent one-time IDs from being stored, requesting an update process for a large amount of address information fabricated as described above, and illegally acquiring moving information.

Since the usage record information is also stored in the usage record database 38 by the update processing program 32 and automatically transmitted to the center server 12, the moving information providing company that manages the center server 12 receives a service provider from the service provider. Without waiting for the report, it is possible to always grasp the exact actual usage.

As a result, the billing process for the service provider is facilitated, and the usage status of the moving information can be immediately answered in response to an inquiry from the moving person.
Note that the update processing program 32 of the local server 14 preferably executes the following check processing during the address information update processing.

  (1) If the address book file contains more than a predetermined number (for example, 10) of combinations of different addresses with the same name, it is determined that the probability of unauthorized use is high, and update processing for the address book file is performed. Reject.

  (2) If the address book file contains more than a predetermined number (for example, 10) of combinations of different names at the same address, it is determined that the probability of unauthorized use is high, and update processing for the address book file is performed. Reject.

  As a result, even when the number of address information included in the address book file is within the limit number of the one-time ID, it is possible to reliably eliminate unauthorized acquisition of moving information by the user company.

  As described above, the management program 22 of the center server 12 uses the ID and usage of the service provider that can be used instead of associating the usage limit number and expiration date with the one-time ID in the one-time ID database 29. A character string indicating the limit number and the expiration date can be used as a one-time ID obtained by encrypting a character string indicating the use company ID and a unique encryption key.

  In this case, the update processing program 32 decrypts the one-time ID using the user company ID and the unique decryption key, and recognizes the ID of the service provider that can be used, the usage limit number, and the expiration date.

Next, according to the flowchart of FIG. 7, a method for controlling the own moving information by the moving person will be described.
First, the person who moved will write the name, old address, new address, moving date, consent to the distribution of moving information through this system, and e-mail address, and mail or submit it to the moving information provider. .

The moving information providing company registers the information described in the contact form in the first moving information database 24 (S40).
Next, the management program 22 outputs a registration notification document addressed to the new address of the moving person through the printer 42 (S41). In this registration notification, the URL of the service providing website is described in addition to the moving information ID and password.

The relocation person who has received the registration notice mailed to the new address accesses the Web site from the personal computer 44 at home via the Internet.
Then, when the authentication step with the input of the moving information ID and password is cleared (S42, S43), the management program 22 transmits a Web file for selecting a company to the personal computer 44 (S44).

As a result, as shown in FIG. 8, a web page 46 for selecting a company is displayed on the web browser of the personal computer 44 (S45).
On this Web page 46, a large number of user company names stored in the first user company database 28 are displayed in a selectable state.

  That is, in the first user company database 28 of the center server 12, all the client companies of each service provider that is a member of the address information update system 10 are registered, and the mover designates the location and the type of business. As a result, a list of user companies that meet the conditions is displayed in the Web page 46.

  The mover can positively specify the name of the company to which his / her move information is to be notified from this company list. For example, if only the “Nikken BP Company” and “Western Economic Company” belonging to the business category of the publisher want to be notified of the address change, the “Notify” button 48 is selected after checking the check box of the corresponding company. Is transmitted to the center server 12 (S46).

As a result, a confirmation screen on which the name of the user company selected by the moving person is written is transmitted from the management program 22 (S47) and displayed on the personal computer 44 (S48).
On the other hand, when the mover clicks the “agree” button displayed on the same screen (S49), the management program 22 registers this selection information (use permitted company information) in the first move information database 24. (S50).

Thus, when a specific company is positively selected as a use-permitted company, other companies are automatically recorded in the first moving information database 24 as “use-rejected companies”.
When the mover checks the “Purchase privacy mark acquisition company” check box in the Web page 46, the management program 22 extracts only companies that have acquired the privacy mark from the first user company database 28 and displays the list. Let

  This Privacy Mark is certified by the Japan Information Processing Development Corporation (JIPDEC), an external organization of the Ministry of Economy, Trade and Industry, for businesses that have established a system for taking appropriate protective measures for personal information. Thus, by providing check items for narrowing down to the companies that have acquired the privacy mark on the Web page 46 for selecting a company, it becomes possible for the relocation person to identify a company that can disclose his / her moving information with confidence.

  The moving person can also passively select a company that does not want to be notified of the moving information on the Web page 46 for selecting a using company in FIG. For example, when it is desired to exclude a mail-order company that is persistently solicited from the notification target, the check box of the corresponding company is checked and the “not notify” button 50 is clicked.

  As a result, a confirmation screen is displayed on the screen of the personal computer 44, and when the mover clicks the “agree” button, this selection information (use refusal company information) is converted into the first move information database by the management program 22. 24.

As described above, when a specific company is passively selected as a use refusal company, other companies are automatically recorded in the first moving information database 24 as “use permitted companies”.
The use-permitted company information and the use-rejected company information are transmitted from the center server 12 to each local server 14 at a predetermined timing (S51) and registered in the respective second moving information database 34 (S52).

This company selection information functions as a restriction condition when the address information update process is executed by the update process program 32 of each local server 14.
That is, if the name and old address of the new mover are listed in the address book file of the user company, if the user company falls under the use permitted company of the new mover (S53), the update processing program 32 uses the new address. The process of rewriting to is executed (S54).

  On the other hand, when the user company falls under the use refusal company, the update process to the new address is not executed, but instead, some error process, for example, a code indicating that the update is rejected by the resident It is described (S55).

  The mover can change the company selection information at any time by accessing the Web site.

In addition, the relocation person can also request browsing of the usage record regarding his / her relocation information. The processing procedure in this case will be described below with reference to the flowchart of FIG.
First, the moving person accesses the Web site of the moving information providing company from the personal computer 44 via the Internet, and selects “view usage record” from the service menu (S60).
After clearing the authentication steps of S61 to S63, the management program 22 extracts the usage record information associated with the mover information ID of the mover from the track record management database 26 and transmits it to the personal computer 44 (S64).

As a result, a list of company names that have used the moving information of the moving person so far is displayed on the Web browser of the moving person (S65).
On the other hand, the relocation person selects a specific company from the listed user companies and clicks the “reject use of address information” button (S66), so that his / her address information can be used in the future. You can refuse.

That is, the management program 22 that has received this newly registers this company as a use refusal company in the first moving information database 24 (S67).
This rejection information is transmitted the next time the center server 12 transmits the difference data of the move information to each local server 14 (S68), and is registered in the second move information database 34 of the local server 14 ( S69).

  For this reason, when the use refusal company next requests the local server 14 to update the address book file (S70), the update processing program 32 confirms that the mover has refused to use the address information of the mover. The information shown is added (S71). As for a company whose use has not been refused by the moving person, the address information of the moving person is naturally maintained as it is (S72).

  In addition, in order to shorten the time lag until the rejection information is reflected in the second moving information database 34 of each local server 14 from the intention display of the use refusal by the moving person, each time the address information is updated, the local server It is also possible to operate so that the latest use refusal information is inquired from the 14 update processing program 32 to the management program 22 of the center server 12.

  Also, the management program 22 of the center server 12 sends an e-mail to the user company clearly indicating the mover who has indicated his intention to reject the use when the use refusal information is sent from the personal computer 44 of the mover. It is desirable to request voluntary deletion.

  In the above case, information indicating rejection of use is only added to the address book file transmitted from the client terminal 16 of the user company, and the user company cannot be forced to delete the moving information. For this reason, it is possible for the user company to continue to send DMs etc. to the relocation.

  However, if a DM is sent to a new mover and a complaint from the new mover is sent to a moving information provider, there is a risk that the address information update service through this system will not be available. Users can expect to comply with the above requirements.

  Further, in order to promote the voluntary deletion of address information by the user company, the update processing program 32 of the local server 14 generates a list of moving information on which intention of use refusal is displayed, and also via mail or e-mail It is desirable to send it to the user company.

  The mover can also receive a prior notice by e-mail when his / her move information is used and reserve the right to decide whether to use it. The processing procedure in this case will be described below with reference to the flowchart of FIG.

First, the moving person accesses the website of the moving information providing company from the personal computer 44 via the Internet, and selects “Register Mail Notification” from the service menu (S80).
On the other hand, after clearing the authentication steps S81 to S83, the management program 22 registers e-mail notification regarding the moving information of the moving person stored in the first moving information database 24 (S84).

  The necessity information of this mail notification is transmitted from the management program 22 to each local server 14 at a predetermined timing (S85), and is registered in the second moving information database 34 by the update processing program 32 (S86).

  Then, when the name and old address of the moving person are described in the address book file transmitted from the user company (S87), the update processing program 32 of the local server 14 adds information identifying the user company. Then, the center server 12 is inquired of whether the moving information can be used (S88).

Receiving this, the management program 22 transmits a confirmation e-mail addressed to the e-mail address of the moving person (S89).
The following contents are described in the body of the e-mail.

Name of company that wishes to use: XX Publisher Contact URL in case of refusal to use: http: // www. ~
Response deadline: 10:00 on June 10, 2003
When refusing the use, the moving person accesses the URL specified within the response deadline (for example, 24 hours from the shipping date and time) described in the e-mail, and clicks the “reject” button displayed on the Web page. (S90).

Receiving this, the management program 22 of the center server 12 notifies the local server 14 that has made the inquiry that the use has been refused by the mover (S91).
As a result, the update processing program 32 of the local server 14 describes a code indicating that the use of the moving information is rejected for the record of the moving person in the address book file of the user company. At the same time, a list of those who have been rejected is generated and notified to the user company by e-mail or the like (S92).

If there is no contact from the relocated person within the response time limit, it is interpreted that the consent has been obtained, and an update process based on the relocation information is executed in the address book file of the user company.
In addition, the relocation person can call the relocation information providing company and answer whether the use is possible. In this case, a signal indicating use refusal is input to the management program 22 of the center server 12 from a terminal operated by the staff in charge of the moving information providing company.

The present invention is not limited to the configuration described in each of the above embodiments, and can be changed without departing from the spirit of the invention.
For example, in the above-described embodiment, an example in which the address information update process is executed by the local server 14 that has received supply of the moving information from the center server 12 has been described. However, the center server 12 operated by a moving information providing company or the like. Accordingly, it is naturally possible to operate so that the update process is directly executed on the address information of the user company. In this case, a program having the same function as the update processing program 32 of the local server 14 may be set up in the center server 12.

  In the above embodiment, an example has been described in which the update processing program 32 of the local server 14 performs batch update processing on the address book file presented by the user company. However, the present invention is not limited to this. It is not something.

  For example, the person in charge of the user company accesses the website for individual update processing of the local server 14 from the client terminal 16 and inputs one or several pieces of address information so that the one-time ID limit number and the time limit are met. You can also receive an update service individually.

  In this case, the update processing program 32 of the local server 14 searches the second moving information database 34 using the address information (a set of name and current address) transmitted from the client terminal 16 as a key, and stores the corresponding moving information in the client terminal. 16 to display on the screen.

10 Address Information Update System Based on Moving Information 12 Center Server 14 Local Server 16 Client Terminal 18 Communication Network 20 Moving Contact Form 22 Management Program 24 First Moving Information Database 26 Results Management Database 28 First User Company Database 29 One Time ID Database 30 Module for updating address information 32 Update processing program 34 Second move-in information database 36 Second user company database 38 Usage record database 44 PC 46 Company selection Web page

Claims (12)

A move information database that registers at least the name, the old address, and the new address of the mover in association with the unique move information ID,
Means for obtaining an address book file containing address information consisting of a combination of a name and current address for which update processing is desired;
A means for deciding whether or not a predetermined number of combinations of different current addresses with the same name or different names with the same current address are included, and if more than a predetermined number is included, means for refusing to update the address information;
If the address information is not included more than a predetermined number, the address information is compared with the moving information. If the moving person is included in the address information, the current address of the address information is changed to the new address of the moving person. A means of updating;
A usage record database that records the moving information used for the update in association with the user ID,
An address information updating system based on moving information, comprising means for transmitting a notification so that the user can download an address book file that has been updated. A database in which a one-time ID in which a limit number of address information is set is registered in association with a user;
Means for comparing the limited number set in the one-time ID with the number of transmitted address information when the address information specifying the one-time ID is transmitted from the terminal operated by the user;
Means for refusing to update address information when the number of address information exceeds the limit of one-time ID;
The address information update system based on the moving information according to claim 1. The one-time ID has an expiration date,
Means for determining whether or not the expiration date set for the one-time ID has elapsed when address information specifying the one-time ID is transmitted from a terminal operated by the user;
A means to refuse to update the address information if the expiration date has passed,
The address information update system based on the moving information according to claim 2, further comprising: A database that stores information about users of moving information;
A means of sending a list of users to the terminal operated by the moving person and prompting them to select a user who is permitted or denied to use his / her moving information;
Means for registering the user selection information transmitted from the terminal in a predetermined database in association with the moving information ID;
When the above addressee is included in the address information presented by the user, it is determined whether the user is a person who has been permitted use by the mover or has been denied use Means,
A means for updating the address information if the person is permitted to use, and a means for rejecting the updating of the address information if the person is denied use;
The address information update system based on moving information according to any one of claims 1 to 3. When a request for browsing information related to a user of his / her moving information is transmitted from the terminal operated by the moving person, the above-mentioned usage record database is referred to, and a user who has a history of using the moving information of the moving person is extracted. Means,
Means for sending the list of users to the terminal;
Means for registering the selection information in a predetermined database in association with the moving information ID when the selection information of the user who refuses to use the moving information is transmitted from the terminal;
A means for adding information indicating that use of the addressee has been rejected by the mover when the address information presented by the user is included in the addressee;
The address information update system based on moving information according to any one of claims 1 to 4. A database for registering the e-mail address of the mover who wishes to contact in advance when using the move information,
If the address information presented by the user includes the new mover, generate a confirmation e-mail with at least the user's name, reply deadline, and answer destination, Means for sending to an email address;
A means for refusing to update the address information when a signal indicating that the mover refuses to use the relocation information within the response deadline;
The address information update system based on moving information according to any one of claims 1 to 5. An address information updating system based on moving information comprising a center server and a local server connected to the center server via a communication network,
The center server includes a first moving information database in which moving information including at least a name, an old address, and a new address of a moving person is registered in association with a unique moving information ID;
Means for encrypting at least part of the moving information and transmitting it to the local server;
A performance management database for storing usage record information transmitted from the local server,
The local server has a second moving information database for storing moving information transmitted from the center server;
Means for decrypting the moving information;
Means for obtaining an address book file containing address information consisting of a combination of a name and current address for which update processing is desired;
A means for deciding whether or not a predetermined number of combinations of different current addresses with the same name or different names with the same current address are included, and if more than a predetermined number is included, means for refusing to update the address information;
If the address information is not included more than a predetermined number, the address information is compared with the moving information. If the moving person is included in the address information, the current address of the address information is changed to the new address of the moving person. A means of updating;
A usage record database that records the moving information used for the update in association with the user ID,
Means for transmitting the usage record information to the center server;
An address information updating system based on moving information, comprising means for transmitting a notification so that the user can download an address book file that has been updated. The center server includes a database that registers a one-time ID in which a limit number of address information is set in association with a user;
When the information indicating the number of one-time ID, user and address information is transmitted from the local server, means for comparing the number of address information with the limit number set for the one-time ID;
In the case where the number of address information exceeds the limit number of one-time ID, a means for sending an instruction to reject the update of the address information to the local server is provided.
When the address information specifying the one-time ID is transmitted from the terminal operated by the user, the local server transmits information indicating the number of the one-time ID, the user and the address information to the center server, Means for inquiring whether the address information can be updated;
8. The address information updating system based on moving information according to claim 7, further comprising means for rejecting updating of address information when a rejection instruction is transmitted from the center server. The one-time ID has an expiration date,
The center server determines whether or not the expiration date of the one-time ID transmitted from the local server has passed;
Means for transmitting, to the local server, an instruction to reject address information update when the one-time ID has expired;
The address information update system based on the moving information according to claim 8. The center server has a database for registering information about users of moving information,
A means of sending a list of users to the terminal operated by the moving person and prompting them to select a user who is permitted or denied to use his / her moving information;
Means for registering the user selection information transmitted from the terminal in a predetermined database in association with the moving information ID;
Means for transmitting the selection information to the local server,
Means for registering the selection information in a predetermined database;
When the above addressee is included in the address information presented by the user, it is determined whether the user is a person who has been permitted to use by the new person or has been denied use Means,
A means for updating the address information if the person is permitted to use, and a means for rejecting the updating of the address information if the person is denied use;
The address information update system based on moving information according to any one of claims 7 to 9. The center server refers to the results management database when a request for browsing information on the user of the own relocation information is transmitted from the terminal operated by the relocation, and has a record of using the relocation information of the relocation A means of extracting users;
Means for sending the list of users to the terminal;
Means for registering the selection information in a predetermined database in association with the moving information ID when the selection information of the user who refuses to use the moving information is transmitted from the terminal;
Means for transmitting the selection information to a local server,
Means for registering the selection information in a predetermined database;
A means for adding information indicating that use of the addressee has been rejected by the mover when the address information presented by the user is included in the addressee;
The address information update system based on moving information according to any one of claims 7 to 10. The above-mentioned center server has a database for registering an e-mail address of a mover who wishes to contact in advance when using the move information,
Means for transmitting information identifying the person moving to the local server;
When there is an inquiry from the local server about whether or not to use the relocation information related to the person who wishes to contact in advance, generate a confirmation e-mail with at least the user's name, reply deadline, and reply destination, and move Means for sending to the e-mail address of the person,
A means for transmitting the use refusal information to the local server when there is an input of a signal indicating that the use of the relocation information is refused within the reply deadline;
The local server has means for inquiring whether or not the center server can be updated when the address information presented by the user includes a prior move-in mover,
Means for refusing to update the address information when use refusal information is sent from the center server;
The address information update system based on moving information according to any one of claims 7 to 11, characterized by comprising:

Images