JP2010140095A - Information acquisition system, information acquisition method, and information acquisition program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information acquisition system that is difficult for a third party to determine which user information is present in an electronic post office box. <P>SOLUTION: An electronic post office box server 30 obtains each user's personal information in advance from an information providing server, eg., a J1 information providing server 51, which creates unique user ID information for identifying each user and retains user personal information in association with the user ID information. The each user's personal information is registered as reference information in association with the user ID information in an electronic post office box provided for each information providing server. The each user's ID information in each information providing server required to obtain the reference information is registered for each user in association in an ID management server 60 that can be accessed only when mutual authentication with an IC card 10 recording information for personal authentication is successful. Only when a user terminal 20 with the normal IC card 10 installed therein requests the ID management server 60 to obtain information, the reference information about that user can be obtained at a time from the electronic post office box server 30. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to an information acquisition system, an information acquisition method, and an information acquisition program.

  Conventionally, in an information acquisition system for acquiring information using the Internet, when a user tries to acquire information that the user wants to use, the user himself / herself has a plurality of information holding organizations (service providers: In order to access the information provider server operated by the Service Provider) and efficiently refer to the information acquired from the information provider server, the portal site (Portal Site), which is a website serving as the entrance of the Internet, As an electronic post office box, each user to whom information is distributed is managed in a format that is associated with each user's information (personal information), and each user can collectively refer to each user's information (personal information) Such a configuration was adopted.

  Specifically, for example, a system configuration as shown in FIG. 10 described in Japanese Patent Laid-Open No. 2001-244961 “Electronic PO Box Method” of Patent Document 1 has been proposed. FIG. 10 is a block diagram showing a system configuration of a conventional information acquisition system, in which a user terminal 20B used by each user (FIG. 10 illustrates a user terminal used by user B), an Internet portal Each of the electronic post office box server 30A, information holding institution J1 (bank 1), information holding institution J2 (bank 2), information holding institution J3 (insurance company 3), information holding institution J4 (insurance company 4) A J1 information providing server 51, a J2 information providing server 52, a J3 information providing server 53, and a J4 information providing server 54 operated by service providers are connected to each other through networks 41 and 42 such as the Internet.

  The user terminal 20B is an authentication unit 21B that performs mutual authentication between a user to be used and an electronic post office box server 30A that is used by the user, a data transmission / reception unit 22B that transmits / receives information via the network 41, and a valid user. User B personal authentication information 231 including user B user ID information, authentication information such as a user B signature key and public key certificate, and the like is stored as information for user B mutual authentication (personal identification information). Information storage means 23B.

  Also, the electronic post office box server 30A provides data transmission / reception means 31A for transmitting / receiving information to / from the user terminal 20B via the network 41, information storage means 32A for storing information that the user wants to use together for each user, and J1 information provision Information acquiring means 33A for acquiring information requested from an information providing server operated by an information holding organization such as server 51, communication means 34A for communicating with an information providing server such as J1 information providing server 51 via network 42, and When an information acquisition request from a user is received, at least authentication means 35A is provided that performs mutual authentication with the requesting user regarding the information.

  As described above, the electronic post office box 30A of the electronic post office box server 30A is provided with an electronic post office box for each user to which information is to be distributed. As the user information about the bank, the deposit information is the information about the insurance company. For example, the contract insurance information is accumulated for each user in a state in which the policy insurance information is associated with the information providing server operated by the information holding organization.

  For example, the user A BOX 321A collectively stores information for the user A. The user ID information 321Aa of the user A is J1-d for the J1 information providing server, and J1 for the J2 information providing server. J2-a is stored for the J3 information providing server, and J4-s is stored for the J4 information providing server.

  Further, as the reference information 321Ab of the user A, J1-d information is personal information regarding the user A held in the J1 information providing server 51, and personal information regarding the user A held in the J2 information providing server 52 is used. About J2-a information, about personal information about the user A held in the J3 information providing server 53, about J3-w information about personal information about the user A held in the J4 information providing server 54 J4-s information is acquired from each information providing server and accumulated.

  Similarly, the user B BOX 321B collectively stores information for the user B. As the user ID information 321Ba of the user B, J1-b for the J1 information providing server is used for the J2 information providing server. Is stored in J2-e, J3-a for the J3 information providing server, and J4-d for the J4 information providing server.

  In addition, as the reference information 321Bb of the user B, J1-b information is personal information about the user B held in the J1 information providing server 51, and personal information about the user B held in the J2 information providing server 52 is used. For J2-e information, J3-a information for personal information about the user B held in the J3 information providing server 53, and J3-a information for personal information about the user B held in the J4 information providing server 54 J4-d information is acquired from each information providing server and accumulated.

  The user C BOX 321C collectively stores information for the user C. As user ID information 321Ca of the user C, J1-a for the J1 information providing server and J1-a for the J2 information providing server are used. J2-b, J3-f is stored for the J3 information providing server, and J4-c is stored for the J4 information providing server.

  In addition, as the reference information 321Cb of the user C, J1-a information is personal information regarding the user C held in the J1 information providing server 51, and personal information regarding the user C is held in the J2 information providing server 52. For J2-b information, for personal information related to the user C held in the J3 information providing server 53, for J3-f information, and for personal information related to the user C held in the J4 information providing server 54 J4-c information is acquired from each information providing server and accumulated.

  That is, in the information acquisition system shown in FIG. 10, the electronic post-office box (BOX) for each user that collectively stores information (personal information) for each user as the information distribution destination in the information storage means 32A of the electronic post-office server 30A. ). In each electronic post office box (BOX), information (personal information) for each corresponding user is acquired in advance from each information providing server, and each user serving as a distribution destination collects the information (personal information) of the user. It is stored as reference information for easy reference.

  For example, when the user B obtains information (personal information), information (personal information) about the user B is collectively stored as reference information for the user B in the user B BOX 321B of the electronic post office box server 30A. Accordingly, the user B can collectively read out the reference information for the user B, that is, information (personal information) about the user B, from the BOX 321B for the user B.

  That is, for the deposit information held in the J1 information providing server 51 operated by the information holding organization (bank 1), J1-b which is the user ID information of the user B and the user ID information acquired from the J1 information providing server 51 Is J1-b's deposit information (personal information), and the deposit information held in the J2 information providing server 52 operated by the information holding organization (bank 2) is user ID information of user B, J2 -E and deposit information (personal information) whose user ID information acquired from the J2 information providing server 52 is J2-e are associated with each other and stored in the BOX 321B for user B.

In addition, regarding the contract insurance information held in the J3 information providing server 53 operated by the information holding organization (insurance company 3), the user acquired from the user ID information J3-a and the J3 information providing server 53 For the contract insurance information (personal information) whose ID information is J3-a and the contract insurance information held in the J4 information providing server 54 operated by the information holding organization (insurance company 4), the user B user J4-d which is ID information and contract insurance information (personal information) whose user ID information acquired from the J4 information providing server 54 is J4-d are associated with each other and stored in the BOX 321B for user B.
Japanese Patent Laid-Open No. 2001-244961

  However, in the conventional information acquisition system as described in Patent Document 1, an electronic post-office box server is installed on a portal site or the like, and an electronic post-office box (BOX) is created for each user as a delivery destination. Personal information is stored together in an electronic post-office box (BOX) for each user. Therefore, if the system administrator of the information acquisition system is a malicious administrator, An electronic post office box (BOX) for each user is appropriately created by a third party such as a system administrator on a portal site, etc., and personal information of each user stored in the electronic post office box (BOX) can be easily referred to collectively. There is a risk of being.

  In addition, in the conventional information acquisition system as described in Patent Document 1, information in the electronic post office box (BOX) is encrypted with an encryption key recorded on a user terminal or IC card used by the user. Even if the personal information of the user cannot be decrypted by a third party, and the user cannot be identified or identified, the following problems occur depending on whether the encryption key is deposited or not deposited: Exists.

(1) When depositing If the administrator of the key depository that deposits the encryption key is a malicious administrator, if the administrator illegally acquires the deposited user's encryption key, It becomes possible to illegally refer to and decrypt the personal information of the user in the PO Box (BOX), and information that identifies or identifies the user is leaked to a malicious administrator. There is a problem.

(2) When not depositing, the personal information of the user is encrypted with the private key only so that it can be decrypted with the private key that exists only in the user terminal or IC card of the user, and the electronic post office box of the electronic post office box server When stored in (BOX), the right to refer to the personal information of the user even if it is not the user, such as a doctor who wants to obtain medical information at the time of disease treatment or a police who wants to obtain the investigation information at the time of investigation of crime There is a problem that a third party who has no access to the personal information of the user cannot be referred to.

  The present invention has been made in view of such circumstances, and for a third party, it is easy to determine to which user the information existing in the electronic post office box server installed in the portal site or the like belongs. For a third party who has the authority to refer to the personal information of a specific user and to be able to refer to the personal information of the user. It is an object of the present invention to provide an information acquisition system, an information acquisition method, and an information acquisition program having a mechanism capable of referring to personal information.

  The present invention comprises the following technical means in order to solve the above-mentioned problems.

  The first technical means uniquely generates user ID information for identifying a user and authentication information for the user ID information, and provides information that holds the personal information of the user in association with the user ID information. The personal information of each user held by the server and one or a plurality of the information providing servers is acquired in advance from the information providing server, and the user ID information is stored in the electronic post office box provided for each information providing server. An electronic post office box server that is set and registered as reference information in association with the user ID information for each information providing server for each user, as information necessary for acquiring the reference information for each user from the electronic post office box server, and The user ID information to be acquired in a format in which each authentication information for the user ID information is associated with the information type of the personal information. In response to a request for acquisition of personal information related to the user from the user, an ID management server that registers and manages the information providing server that holds the personal information in an association table and manages the ID management server. An external recording medium in which a user terminal that receives the reference information corresponding to the personal information related to the user from the electronic post office box server and personal authentication information for mutual authentication with the ID information that identifies the user is recorded In the information acquisition system configured to include at least the above-mentioned information recorded on the external recording medium from the user terminal that is requested to acquire personal information about the user by wearing the external recording medium possessed by the user When an information acquisition request with ID information is transmitted, the ID management server receives the received information. The user ID information searched by searching the association table for the user ID information for each of the information providing servers and authentication information for the user ID information related to the user specified by the ID information attached to the request. And by sending an information acquisition request with authentication information for the user ID information to the electronic post office box server, the electronic post office box server is associated with the user ID information and the authentication information for the user ID information. The reference information is received and returned to the requesting user terminal as the personal information regarding the requested user.

  The second technical means uniquely generates user ID information for identifying a user and authentication information for the user ID information, and provides information that holds the personal information of the user in association with the user ID information. The personal information of each user held by the server and one or a plurality of the information providing servers is acquired in advance from the information providing server, and the user ID information is stored in the electronic post office box provided for each information providing server. An electronic post office box server that is set and registered as reference information in association with the user ID information for each information providing server for each user, as information necessary for acquiring the reference information for each user from the electronic post office box server, and The user ID information to be acquired in a format in which each authentication information for the user ID information is associated with the information type of the personal information. An ID management server for setting and registering in the association table for each of the information providing servers in which the personal information of the user is held, and personal authentication information for mutual authentication with ID information for identifying a user are stored. And receiving the reference information corresponding to the personal information related to the user from the electronic post office box server via the ID management server in response to a request for acquiring the personal information related to the user from the user. In an information acquisition system comprising at least a user terminal, information acquisition with the ID information stored in the information storage means is received from the user terminal requested to acquire personal information about the user from the user. When the request is transmitted, the ID management server sends the I attached to the received information acquisition request. The user ID information and the authentication information for the user ID information for each of the information providing servers related to the user specified by the information are searched from the association table, and the searched user ID information and the user ID information By sending an information acquisition request with authentication information to the electronic post office box server, the user ID information and the reference information associated with the authentication information for the user ID information are received from the electronic post office box server, The personal information about the requested user is sent back to the requesting user terminal.

  According to a third technical means, in the information acquisition system according to the first or second technical means, the user terminal equipped with the external recording medium or the user terminal including the information storage means is When the user ID issuance request with the designation information of the information providing server is received, the user ID issuance request is transmitted to the ID management server, and the external recording medium, the designated information providing server, the ID When mutual authentication is performed between each of the management servers, or between each of the user terminal, the specified information providing server, and each of the ID management servers, and the mutual authentication is normal, The ID management server transmits the received user ID issuance request to the designated information providing server and receives the user ID issuance request. The information providing server that has the user ID and authentication information for the user ID information for requesting user generates the unique, characterized by returning to the ID management server.

  According to a fourth technical means, in the information acquisition system according to the third technical means, when there are a plurality of the electronic post office box servers, the ID management server sends the user ID issue request to the information providing server. When sending to the user ID issuance request, the information providing server that has sent the user ID issuance request with the information indicating the electronic post office box server used, and received the user ID issuance request, The received information indicating the electronic post office box server and the uniquely generated user ID information are associated with each other and stored as electronic post office box server identification information.

  According to a fifth technical means, in the information acquisition system according to the third or fourth technical means, the ID management server that has transmitted the user ID issuance request to the information providing server receives the user from the information providing server. When receiving the ID information and the authentication information for the user ID information, the user who has received the received user ID information and the authentication information for the user ID information from the other information providing server in the association table. The ID information and authentication information for the user ID information are set and registered in association with the information type, and the received user ID information and the authentication information for the user ID information together with information indicating the information providing server of the transmission source Sent to the electronic post office box server, and the electronic post office box server is provided for each information providing server. Of serial electronic PO Box, the electronic post office box provided for the the information providing server of the transmission source, and the user ID information and said setting register authentication information for the user ID information received.

  A sixth technical means is the information acquisition system according to the fifth technical means, wherein the electronic post office box server is related to the user ID information set and registered in the electronic post office box provided for each information providing server. When a predetermined acquisition condition is established as a condition for acquiring personal information, a request for acquiring the personal information related to the user ID information is sent to the information providing server that holds the personal information related to the user. By transmitting, the personal information related to the user ID information is received from the information providing server, and set and registered as the reference information in association with the user ID information in the electronic post office box for the information providing server. It is characterized by.

  A seventh technical means is the information acquisition system according to the fifth or sixth technical means, wherein the information providing server distributes the personal information relating to the user ID information generated uniquely to the electronic post office box server. When the distribution conditions set in advance as conditions for the above are satisfied, the personal information related to the user ID information is distributed to the electronic post office box server together with the user ID information, and the electronic post office box server receiving the personal information is Among the electronic post office boxes provided for each information providing server, the personal information distributed in the electronic post office box provided for the information providing server of the personal information distribution source corresponds to the user ID information. In addition, it is set and registered as the reference information.

  According to an eighth technical means, in the information acquisition system according to the seventh technical means, when there are a plurality of the electronic post office box servers, the information providing server requests the user ID information to be issued from the user terminal. The personal information related to the user ID information is distributed together with the user ID information to the electronic post office box server designated as the electronic post office box server to be used by the user terminal in the issue request when the user ID is received. To do.

  A ninth technical means is the information acquisition system according to any one of the first to eighth technical means, wherein the user terminal receives the information acquisition request when receiving the information acquisition request from the user. Is transferred to the ID management server, and the ID management server corresponds to the information type specified by the user as a target of the information acquisition request among the user ID information set and registered in the association table. The user ID information transmitted from the electronic post office box server is extracted by extracting all the user ID information related to the information type of personal information and transmitting an information acquisition request regarding each of the extracted user ID information to the electronic post office box server. The reference information associated with each is received, and the received reference information is used as the requesting user. Characterized in that it returns the end to.

  The tenth technical means uniquely generates user ID information for identifying a user and authentication information for the user ID information, and provides information that holds the personal information of the user in association with the user ID information. From the server, the electronic post office box server acquires the personal information of each user in advance, sets and registers as reference information in association with the user ID information in the electronic post office box provided for each information providing server, and identifies the user When an acquisition request for personal information about the user is received from a user terminal equipped with an external recording medium in which ID information to be authenticated and personal authentication information for mutual authentication is recorded, the electronic post office box server receives the user As information necessary for acquiring the reference information for each user, for each user, the user ID information for each information providing server and Each of the information providing servers holding the personal information of the user to be acquired is set and registered in the association table in a format in which each authentication information for user ID information is associated with the information type of the personal information. Via the ID management server to manage, read the reference information set and registered in each electronic post office box in association with each user ID information corresponding to the user set and registered in the electronic post office box, In the information acquisition method of returning to the user terminal of the request source, the external recording medium possessed by the user is attached and recorded on the external recording medium from the user terminal requested to acquire personal information about the user When the information acquisition request with the ID information is transmitted, the ID management server responds to the received information acquisition request. The user ID information for each of the information providing servers and the authentication information for the user ID information related to the user specified by the ID information obtained are searched from the association table, and the searched user ID information and the user The reference information associated with the user ID information and the authentication information for the user ID information is transmitted from the electronic post office box server by transmitting an information acquisition request with authentication information for ID information to the electronic post office box server. And is returned to the requesting user terminal as the personal information regarding the requested user.

  The eleventh technical means uniquely generates user ID information for identifying a user and authentication information for the user ID information, and provides information that holds the personal information of the user in association with the user ID information. From the server, the electronic post office box server acquires the personal information of each user in advance, sets and registers as reference information in association with the user ID information in the electronic post office box provided for each information providing server, and identifies the user When an acquisition request for personal information about the user is received from a user terminal provided with information storage means storing ID information to be used and personal authentication information for mutual authentication of the user, the electronic post office box server receives the user As the information necessary for acquiring the reference information for each user, the user ID information for each information providing server and the user ID information Each of the information providing servers holding the personal information of the user to be acquired is registered in the association table in a format in which each authentication information for user ID information is associated with the information type of the personal information. The reference information set and registered in each electronic post office box is read out in association with each user ID information corresponding to the user set and registered in the electronic post office box via the ID management server managed by In the information acquisition method of returning to the requesting user terminal, information acquisition with the ID information stored in the information storage means is received from the user terminal requested to acquire personal information about the user from the user. When the request is transmitted, the ID management server specifies the ID information attached to the received information acquisition request. The user ID information for each information providing server and the authentication information for the user ID information are searched from the association table, and the searched user ID information and the authentication information for the user ID information are attached. By transmitting the information acquisition request made to the electronic post office box server, the user ID information and the reference information associated with the authentication information for the user ID information are received from the electronic post office box server, and the request source It is returned to the user terminal as the personal information related to the requested user.

  A twelfth technical means is the information acquisition method according to the tenth or eleventh technical means, in which the user terminal with the external recording medium attached or the user terminal equipped with the information storage means is When the user ID issuance request with the designation information of the information providing server is received, the user ID issuance request is transmitted to the ID management server, and the external recording medium, the designated information providing server, the ID When mutual authentication is performed between each of the management servers, or between each of the user terminal, the specified information providing server, and each of the ID management servers, and the mutual authentication is normal, The ID management server transmits the received user ID issuance request to the designated information providing server, and the user ID issuance request is transmitted. The information providing server which signal is the user ID and authentication information for the user ID information for requesting user generates the unique, characterized by returning to the ID management server.

  A thirteenth technical means is the information acquisition method according to the twelfth technical means, wherein the ID management server that has transmitted the user ID issue request to the information providing server receives the user ID information and the user ID information from the information providing server. When the authentication information for the user ID information is received, the user ID information received from the other information providing server and the authentication information for the user ID information received in the association table The electronic post office box with the authentication information for the user ID information set and registered in association with the information type, and the received user ID information and the authentication information for the user ID information together with information indicating the information providing server of the transmission source The electronic post office box server sends the electronic private box server provided for each of the information providing servers. Of the box, the electronic post office box provided for the the information providing server of the transmission source, and the user ID information and said setting register authentication information for the user ID information received.

  A fourteenth technical means is the information acquisition method according to the thirteenth technical means, wherein the electronic post office box server relates to the user ID information set and registered in the electronic post office box provided for each information providing server. When a predetermined acquisition condition is established as a condition for acquiring personal information, a request for acquiring the personal information related to the user ID information is sent to the information providing server that holds the personal information related to the user. By transmitting, the personal information related to the user ID information is received from the information providing server, and set and registered as the reference information in association with the user ID information in the electronic post office box for the information providing server. It is characterized by.

  A fifteenth technical means is the information acquisition method according to the thirteenth or fourteenth technical means, wherein the information providing server distributes the personal information relating to the user ID information generated uniquely to the electronic post office box server. When the distribution conditions set in advance as conditions for the above are satisfied, the personal information related to the user ID information is distributed to the electronic post office box server together with the user ID information, and the electronic post office box server receiving the personal information is Among the electronic post office boxes provided for each information providing server, the personal information distributed in the electronic post office box provided for the information providing server of the personal information distribution source corresponds to the user ID information. In addition, it is set and registered as the reference information.

  Sixteenth technical means is the information acquisition method according to any one of the tenth to fifteenth technical means, wherein the user terminal receives the information acquisition request when receiving the information acquisition request from the user. Is transferred to the ID management server, and the ID management server corresponds to the information type specified by the user as a target of the information acquisition request among the user ID information set and registered in the association table. The user ID information transmitted from the electronic post office box server is extracted by extracting all the user ID information related to the information type of personal information and transmitting an information acquisition request regarding each of the extracted user ID information to the electronic post office box server. The reference information associated with each is received, and the received reference information is used as the request source user. Characterized in that it back to the terminal.

  The seventeenth technical means is an information acquisition program that implements the information acquisition method according to any one of the tenth to sixteenth technical means as a program executable by a computer.

  According to the information acquisition system, the information acquisition method, and the information acquisition program of the present invention, the following effects can be obtained.

  First, the user's personal information can be managed extremely safely.

  This is because user authentication information (user ID information and authentication information for the user ID information) used for referring to personal information related to each user himself / herself held in the information providing server operated by each information holding organization is: It is generated uniquely for each information providing server and is different for each information providing server even for the same user, and is acquired in advance from each information providing server and stores personal information about each user as reference information. This is because the electronic post-office box (BOX) of the electronic post-office box server is not appropriately created for each user to whom the personal information is distributed, but is associated with each information providing server that is the distribution source. is there.

  Thus, the third party can store the user information (personal information) stored in each information providing server and the user information (personal information) stored in advance as reference information in the electronic post office box (BOX). ) Cannot be performed, and the personal information owned by the user cannot be viewed in a lump.

  Furthermore, only the ID management server has information used for referring to personal information relating to the user himself / herself held in the information providing server operated by each information holding organization, and accesses the ID management server. In such a form, personal authentication information (personal identification information) for mutual authentication exists only in an external recording medium (such as an IC card) possessed by a legitimate user or only in a user terminal that can be used only by the legitimate user. Therefore, even if a malicious third party can obtain information registered in each electronic post-office box (BOX) of the electronic post-office box server, any information is personal information of which user. It is not possible to specify the name, and it is possible to obtain an effect that the name cannot be identified.

  Secondly, the electronic post office box server acquires personal information of each user in advance from the information providing server operated by each information holding organization and stores it as reference information in the electronic post office box (BOX) of the electronic post office box server. Therefore, the user can efficiently obtain the information he wants.

  Third, personal authentication information required for mutual authentication when accessing an ID management server that manages information for referring to the user's personal information is an IC card or the like possessed by a legitimate user. Since it is stored in an external recording medium or a user terminal that can be used only by legitimate users, a third party (such as the police or medical institution) who has the authority to access personal information can record external records such as IC cards of specific users. Borrow the media from the user and use a terminal installed in the third party's premises that is located in a safe place for other users, or borrow a user terminal used by the user. It is also possible to refer to the personal information of the user.

  Hereinafter, an exemplary embodiment of an information acquisition system, an information acquisition method, and an information acquisition program according to the present invention will be described in detail with reference to the drawings. In the following description, an example of the information acquisition system and the information acquisition method according to the present invention will be described in detail. However, the information acquisition system and the information acquisition method are merely examples, and depart from the spirit of the present invention. As long as it is not, the system configuration may be different.

  In addition, a plurality of components of the information acquisition system described below may be physically integrated as appropriate in the same apparatus, or a program that can be executed by a computer without being limited to hardware logic. It may be implemented as logic (information acquisition program), may be implemented as a program recording medium storing the program, or may be implemented by any method without departing from the gist of the present invention. Also good.

(Features of the present invention)
First, prior to the description of the embodiments of the present invention, the outline of the features of the present invention will be described.

  The present invention relates to an external recording medium (for example, an IC card) possessed by each user, a user terminal used by each user, information for the user to refer to the personal information of the user (user ID information and user ID information ID management server that manages authentication information), an electronic post office box server that stores personal information of each user to be acquired from an information holding organization (service provider) as reference information, and an information holding organization that holds each user's personal information Information providing servers operated by each other cooperate with each other, record information for associating each user's own information only on the ID management server, that is, information for associating each of a plurality of personal information and information types about the user himself, and Can be used only on an external recording medium (for example, an IC card) owned by the user or only by a legitimate user A user terminal only, it is mainly characterized in that to record the personal identification information for mutual authentication to determine access rights of the user to the ID management server.

  Further, when an IC card having a calculation function is used as an external recording medium possessed by the user, an authentication means for performing mutual authentication when accessing the user terminal, the information providing server, or the ID management server is used. It can also be placed inside.

  Therefore, in the present invention, as in a conventional information acquisition system, each user serving as an information distribution destination is an electronic post office box (BOX) of an electronic post office box server that acquires and stores personal information for each user in advance. There is no need to store them together, and for example, it is possible to obtain each user's personal information in advance for each information providing server that is the information provider and store it as reference information.

  Thus, even if a malicious third party accesses the information (personal information) of the information providing server or the electronic post office box server, it does not specify which user each information belongs to. This realizes a mechanism in which information (personal information) of a specific user is not collectively referred to.

  Furthermore, a third-party organization (for example, police or medical institution) having authority to refer to personal information borrows an external recording medium (for example, an IC card) possessed by a target user who wants to refer to personal information. For personal authentication, using a user terminal used by the user, using a terminal in the third-party organization that can be used safely, or only a user terminal that can be used only by a legitimate user When the information is stored, the user terminal is borrowed and the ID management server is accessed to use the user ID information on the ID management server and the authentication information for the user ID information. In addition, a mechanism that can extract the personal information (reference information) of the user from the electronic post office box server and refer to the personal information of the user is realized.

(System configuration example of the present invention)
Next, an embodiment of an information acquisition system according to the present invention will be described. First, a system configuration example of the information acquisition system according to the present invention will be described. FIG. 1 is a block diagram showing an example of a system configuration of an information acquisition system according to the present invention, which is installed in an IC card 10 possessed by each user, a user terminal 20 used by each user, an Internet portal site, etc. Operated by each service provider of electronic post office box server 30, information holding institution J1 (bank 1), information holding institution J2 (bank 2), information holding institution J3 (insurance company 3), and information holding institution J4 (insurance company 4) J1 information providing server 51, J2 information providing server 52, J3 information providing server 53, J4 information providing server 54, information for enabling the user's personal information to be referenced and associating a plurality of personal information of the user ID management servers 60 are connected to each other via networks 41 and 42 such as the Internet.

  Although FIG. 1 illustrates the case where the IC card 10 is used as an external recording medium possessed by the user, other external recording media or portable devices can also be used.

(IC card)
The IC card 10 records user ID information for identifying a user who possesses the IC card 10 and personal authentication information for mutual authentication of the user, and performs a mutual authentication operation of the IC card 10. It is also possible.

  For this reason, as shown in FIG. 1, the IC card 10 stores user ID information 111 for identifying a user who owns the IC card 10 and stores personal authentication information necessary for mutual authentication. The information storage unit 11 stores data, the data input / output unit 12 inputs / outputs data to / from the installed user terminal 20, and the authentication unit 13 performs mutual authentication of users.

  Here, in this embodiment, the IC card 10 for the user B is shown, and the information storage means 11 stores the user ID information 111 (ID-b) for identifying the user B holding the IC card 10. In addition, at least a user signature key 112 and a user public key certificate 113 are stored as personal authentication information (personal identification information) for mutual authentication on the user B side.

(User terminal)
Further, when the user terminal 20 is attached with the IC card 10 and receives a user ID issuance request from the user B, the user terminal 20 uses the user ID information for each information providing server for identifying the user and the user ID information In order to acquire authentication information for user ID information and authentication information for the user ID information generated for each information providing server by transmitting a request for issuing authentication information to each information providing server. The user ID information set and registered in the ID management server 60 when it is set and registered in the electronic post office box server 30 and the ID management server 60, or when a personal information acquisition request regarding the user is received from the user B. And using the authentication information for the user ID information, the electronic post office box server 30 is accessed and the user is Reference information associated with each user ID information corresponding are set and registered to each electron PO Box, and receives as personal information of the user.

  For this reason, as shown in FIG. 1, the user terminal 20 is connected to the electronic post-office box server 30 and the ID management server 60 via the IC card information reading / writing means 21 for reading / writing information in the mounted IC card 10 and the network 41. Data transmission / reception means 22 for transmitting / receiving information between them, and information display means 23 for displaying information received via the data transmission / reception means 22 on a screen.

  Note that the user terminal 20 is used not only by one but also by a plurality of users in the information acquisition system, and may be a unique terminal possessed by each user. May be shared terminals, and any number of terminals are installed.

(Electronic PO Box server)
Also, the electronic post office box server 30 acquires in advance the personal information of users held in one or a plurality of information providing servers from each information providing server via the network 42, and an electronic post office box provided for each information providing server. (BOX) is set and registered as reference information in a format associated with the user ID information and authentication information for the user ID information, and is attached to the information acquisition request in response to the information acquisition request from the user terminal 20 The reference information associated with the user ID information and the authentication information for the user ID information is extracted from the electronic post office box and returned to the requesting user terminal 20 as personal information regarding the requested user. To do.

  For this reason, as shown in FIG. 1, the electronic post office box server 30 includes a communication means 31 for transmitting / receiving information to / from the user terminal 20 via the network 41, and an electronic post office box server authentication for mutual authentication of the electronic post office box server 30. Refers to personal information that the user wants to refer to in the form of electronic post office box (BOX) provided for each information provision server such as J1 information provision server 51 etc. operated by each information holding organization and business information (electronic post office box server identification information) Information accumulating means 32 for accumulating information, information obtaining means 33 for obtaining information requested from an information providing server such as J1 information providing server 51 operated by each information holding organization, J1 information providing server 51 etc. via network 42 The communication means 34 for communicating with each information providing server, and mutual authentication and information providing service when receiving an information acquisition request from the user And at least an authentication means 35 for performing mutual authentication when communicating with server.

  The information acquisition unit 33, when acquiring the user personal information from the information providing server, based on the user ID information for identifying the user personal information in each information providing server and the authentication information for the user ID information, The personal information of the user is acquired as reference information from each information providing server such as the J1 information providing server 51. Further, the authentication means 35 is connected to the IC card 10 based on electronic post office box server authentication information (electronic post office box server identification information) comprising the public key certificate and signature key of the electronic post office box server 30 stored in the information storage means 32. Mutual authentication with each other, and mutual authentication with an information providing server operated by each information holding organization.

  Here, as shown in FIG. 2, the electronic post office box (BOX) of the information storage means 32 includes user ID information for each user in the information providing server such as the J1 information providing server 51 operated by the information holding organization and the user ID. The authentication information for information and the reference information acquired as personal information of each user from each corresponding information providing server are associated with each other and stored for each information providing server.

  That is, each electronic post-office box (BOX) of the information storage means 32 of the electronic post-office box server 30 is not created for each user but is arranged in association with the information providing server, and each electronic post-office box (BOX) It is impossible to determine which information is which user's information from the information stored in (), and for the first time referring to the association table 65 set and registered in the ID management server 60, Information for each user can be associated.

  FIG. 2 is a table showing an example of information stored in the information storage means 32 of the electronic post office box server 30 shown in FIG. 1, and is stored in an electronic post office box (BOX) provided for the information providing server. The information and the information of the authentication information 325 for the electronic post office box server used for mutual authentication of the electronic post office box server 30 are shown.

  More specifically, as shown in FIG. 2, the information storage means 32 of the electronic post office box server 30 collects information for each information providing server such as the J1 information providing server 51 operated by each information holding organization. Stores electronic post-office box (BOX) that stores personal information desired to be referred to as reference information, and electronic post-box server authentication information 325 for mutual authentication consisting of a public key certificate and a signature key of the electronic post-office box server 30. In the electronic post office box (BOX) prepared for each information providing server, user authentication information including user ID information of each user in each information providing server and authentication information related to the user ID information, acquired from each information providing server Reference information (personal information) of each user is stored in association with each other.

  For example, in the J1 BOX 321, information about each user related to the J1 information providing server 51 operated by the information holding organization J1 is collectively stored. As the user authentication information 321 a in the J1 information providing server 51, the user a user ID information J1-a, authentication information J1-a cert, user b user ID information J1-b and authentication information J1-b cert, user c user ID information J1-c, authentication information J1-c cert, user d User ID information J1-d, authentication information J1-d cert, user ID information J1-e of user e, and authentication information J1-e cert are stored, respectively.

  Further, as reference information 321b indicating personal information (deposit information) of each user acquired from the J1 information providing server 51, J1-a information and user ID information J1 which are reference information (personal information) regarding the user ID information J1-a. -J1-b information that is reference information (personal information) about -b, J1-c information that is reference information (personal information) about user ID information J1-c, and reference information (personal information) about user ID information J1-d J1-e information that is reference information (personal information) related to certain J1-d information and user ID information J1-e is stored.

  Similarly, in the J2 BOX 322, information of each user related to the J2 information providing server 52 operated by the information holding organization J2 is collectively stored. As the user authentication information 322a in the J2 information providing server 52, the user f's information is stored. User ID information J2-a and authentication information J2-a cert, User g user ID information J2-b and authentication information J2-b cert, User h user ID information J2-c and authentication information J2-c cert, User i User ID information J2-d and authentication information J2-d cert, user j user ID information J2-e and authentication information J2-e cert are respectively stored.

  Further, as reference information 322b indicating personal information (deposit information) of each user acquired from the J2 information providing server 52, J2-a information, which is reference information (personal information) regarding the user ID information J2-a, user ID information J2 -J2-b information that is reference information (personal information) about -b, J2-c information that is reference information (personal information) about user ID information J2-c, and reference information (personal information) about user ID information J2-d J2-e information that is reference information (personal information) related to certain J2-d information and user ID information J2-e is stored.

  Note that each of the users f, g, h, i, and j in the J2 BOX 322 may be the same user as any of the users a, b, c, d, and e in the J1 BOX 321 or a completely different user. Can be. In the case of this embodiment of FIG. 1, from the association table 65 of the ID management server 60, the user b whose user ID information in the J1 BOX 321 is J1-b and the user j whose user ID information is J2-e in the J2 BOX 322 are user j. It shows that they are the same user.

  That is, from the information stored in each electronic post office box (BOX) of the information storage means 32 of the electronic post office box server 30, it is not possible to determine which information is which user, and the ID management server. The information for each user can be associated for the first time with reference to the 60 association tables 65.

  The J3 BOX 323 stores information about each user related to the J3 information providing server 53 operated by the information holding organization J3. The user authentication information 323a in the J3 information providing server 53 is the user k's user. ID information J3-a and authentication information J3-a cert, user l user ID information J3-b and authentication information J3-b cert, user m user ID information J3-c and authentication information J3-c cert, user n's User ID information J3-d, authentication information J3-d cert, user o user ID information J3-e, and authentication information J3-e cert are stored.

  Further, as reference information 323b indicating personal information (contract insurance information) of each user acquired from the J3 information providing server 53, J3-a information and user ID information which are reference information (personal information) related to the user ID information J3-a. J3-b information that is reference information (personal information) about J3-b, J3-c information that is reference information (personal information) about user ID information J3-c, and reference information (personal information) about user ID information J3-d J3-d information and J3-e information which is reference information (personal information) related to the user ID information J3-e are respectively stored.

  Each of the users k, l, m, n, and o in the J3 BOX 323 may be the same user as any of the users a, b, c, d, and e in the J1 BOX 321 or may be a completely different user. Can be. In the case of the present embodiment of FIG. 1, from the association table 65 of the ID management server 60, the user b whose user ID information in the J1 BOX 321 is J1-b and the user k whose user ID information is J3 in the BOX 323 are J3-a. It shows that they are the same user.

  That is, from the information stored in each electronic post office box (BOX) of the information storage means 32 of the electronic post office box server 30, it is not possible to determine which information is which user, and the ID management server. The information for each user can be associated for the first time with reference to the 60 association tables 65.

  The J4 BOX 324 stores information about each user related to the J4 information providing server 54 operated by the information holding organization J4. The user authentication information 324a in the J4 information providing server 54 is the user p's user. ID information J4-a and authentication information J4-a cert, user q user ID information J4-b and authentication information J4-b cert, user r user ID information J4-c and authentication information J4-c cert, user s User ID information J4-d, authentication information J4-d cert, user ID information J4-e of user t, and authentication information J4-e cert are stored, respectively.

  Further, as reference information 324b indicating personal information (contract insurance information) of each user acquired from the J4 information providing server 54, J4-a information, user ID information, which is reference information (personal information) regarding the user ID information J4-a. J4-b information that is reference information (personal information) about J4-b, J4-c information that is reference information (personal information) about user ID information J4-c, and reference information (personal information) about user ID information J4-d J4-d information and J4-e information which is reference information (personal information) related to the user ID information J4-e are respectively stored.

  Note that each of the users p, q, r, s, and t in the J4 BOX 324 may be the same user as any of the users a, b, c, d, and e in the J1 BOX 321 or a completely different user. Can be. In the case of the present embodiment of FIG. 1, from the association table 65 of the ID management server 60, the user b whose user ID information in the J1 BOX 321 is J1-b and the user s whose user ID information is J4-d in the J4 BOX 324 are J4d. It shows that they are the same user.

  That is, from the information stored in each electronic post office box (BOX) of the information storage means 32 of the electronic post office box server 30, it is not possible to determine which information is which user, and the ID management server. The information for each user can be associated for the first time with reference to the 60 association tables 65.

  The number of electronic post office box servers 30 is not limited to one, and a plurality of electronic post office box servers 30 can be installed in the information acquisition system. The system configuration example of FIG. 1 shows only the electronic post office box server 30 that is the first electronic post office box server among the plurality of electronic post office boxes servers.

(Information providing server operated by each information holding organization)
An information providing server such as the J1 information providing server 51 operated by each information holding organization uniquely generates user ID information for identifying a user and authentication information for the user ID information, and the user ID information. The information providing server authentication information (public key certificate, signature key) is held as information for mutual authentication on the information providing server side.

  When a predetermined condition as an acquisition condition of the electronic post office box server 30 occurs (for example, when a predetermined time is reached, or when a predetermined period is reached, an individual of the information providing server from the user terminal 20) When a request for acquiring information is generated or when new user ID information and authentication information for the user ID information are set and registered in an electronic post office box (BOX), etc. When a request for acquiring personal information (reference information) of a user is received from 30, mutual authentication is performed with the requesting electronic post office box server 30 using the authentication information for the information providing server and the authentication information for the electronic post office box. Based on the result, the requested user's personal information (reference information) is distributed to the requesting electronic post office box server 30.

  That is, the information providing server such as the J1 information providing server 51 uses the information providing server authentication information for mutual authentication on the information providing server side and the electronic post office box server authentication information for mutual authentication on the electronic post office box server 30 side. When mutual authentication is performed with the post office box server 30, and the mutual authentication is normal, the personal information (reference information) of the user is transmitted to the requesting electronic post office box server 30 based on a request from the electronic post office box server 30. provide.

  In addition, for push-type information provision, when a predetermined condition as a distribution condition occurs in the information provision server (for example, when a predetermined time or period is reached, or when the user's personal information ( (Such as when deposit information, contract insurance information, etc.) change or when an acquisition request from the user occurs), the information storage means (for example, the J4 information providing server 54) In this case, the user ID information in the electronic post office box storage ID table (in the case of the J4 information providing server 54, the electronic post office box storage ID table 543) stored in the information storage means 542) and the electronic post office box identification information corresponding to the user ID information The electronic post office box storage ID table corresponding to each user ID information among a plurality of electronic post office box servers is referred to. The electronic post office box server described in the database is extracted, and mutual authentication with the extracted electronic post office box server is performed. Transfer reference information).

  If only one electronic post office box server is arranged in the information acquisition system, it is natural that each electronic information in the electronic post office box storage ID table in which electronic post office box identification information is recorded is stored in each information providing server. There is no need to set post office box identification information.

  Specifically, the J1 information providing server 51 includes information storing means for storing means for providing personal information (reference information) of a user and an electronic post office box storage ID table in which identification information of each electronic post office box server 30 is registered. In addition, the J1 information providing server 51 has J1 authentication information 511 including a J1 public key certificate and a signature key for mutual authentication, and the J2 information providing server 52 includes personal information (reference information) of the user. J2 public key certificate for mutual authentication related to the J2 information providing server 52, and information storage means for storing an electronic PO box storage ID table in which identification information of each electronic PO box server 30 is registered. It has J2 authentication information 521 consisting of a signature key.

  Further, the J3 information providing server 53 includes a means for providing personal information (reference information) of the user and an information storage means for storing an electronic post office box storage ID table in which identification information of each electronic post office box server 30 is registered. The J3 information providing server 53 has J3 authentication information 531 composed of a J3 public key certificate and a signature key for mutual authentication, and the J4 information providing server 54 provides personal information (reference information) of the user. In addition to the information storage means storing the electronic post office box storage ID table in which the identification information of each electronic post office box server 30 is registered, from the J4 public key certificate and signature key for mutual authentication related to the J4 information providing server 54 J4 authentication information 541.

  The information storage means storing the electronic post office box storage ID table in which the identification information of each electronic post office box server 30 is registered is shown in FIG. 1 only for the J4 information provision server 54, but other information provision is also provided. The same is true for the server.

  As shown in the information storage means 542 in the J4 information providing server 54, the electronic post office box storage ID table 543 includes a user indicating a user who is handled by each electronic post office box server as identification information of each electronic post office box server constituting the information acquisition system. ID information is registered.

  For example, as the first electronic post office box server identification information 543a for identifying user ID information using the first electronic post office box server, user ID information J4-a, J4-b,... Uses the second electronic post office box server. As the second electronic post office box server identification information 543b for identifying the user ID information to be performed, the user ID information J4-w, J4-x,... Identifies the user ID information for using the third electronic post office box server. User ID information J4-s, J4-t,... As server identification information 543c, user ID information J4- as fourth electronic post office box server identification information 543d that identifies user ID information using the fourth electronic post office box server. p, J4-q,... are registered respectively.

(ID management server)
Further, the ID management server 60 responds to a user ID information acquisition request from the user terminal 20 among the information providing servers such as the J1 information providing server 51 operated by each information holding organization (for example, the requested information type (for example, User ID information and authentication information for the user ID information generated uniquely in the information providing server in which the personal information corresponding to the deposit information, contract insurance information, etc. is held and stored, and the user terminal 20 In response to a personal information acquisition request from the user ID information corresponding to the requested information type (for example, deposit information, contract insurance information, etc.) and authentication information for the user ID information are searched, and the searched user ID information And personal information (reference information) corresponding to the user ID information from the electronic post office box server 30 using the authentication information for the user ID information. Obtained to be forwarded to the requesting user terminal 20.

  In other words, the ID management server 60 is necessary for acquiring the information necessary for referring to the personal information of each user held in each information providing server, that is, the reference information for each user from the electronic post office box server 30. It is a server for safely managing information (that is, user ID information uniquely generated by each information providing server and authentication information for the user ID information), and is information for personal information reference for each user. The user ID information and the authentication information for the user ID information are associated with the information type of the personal information and set and registered for all the information providing servers that hold the personal information of the user to be acquired. ing. Further, in order to ensure security when information is transmitted / received between the ID management server 60 and another device, the ID management server authentication information 66 used for mutual authentication on the ID management server 60 side is held. Yes.

  For this reason, as shown in FIG. 1, the ID management server 60 provides information necessary for referring to personal information for each user (user ID information generated by each information providing server and the user ID information). Authentication information), an association table 65 for associating information types, an ID storage server authentication information 66 for mutual authentication, an information storage unit 61 for storing information, and an information search unit for searching for information stored in the information storage unit 61 62, information acquisition means 63 for acquiring information necessary for referring to personal information from the user terminal 20 or the information providing server, information transmission / reception with the user terminal 20 via the network 41, or network 42 The number of communication means 64 for transmitting / receiving information to / from the information providing server such as the J1 information providing server 51 and the electronic post office box server 30 is reduced. Also it has a.

  Here, the ID management server authentication information 66 stored in the information storage means 61 includes a public key certificate and a signature key for the ID management server.

  Further, the association table 65 stored in the information storage means 61 is provided for each user in order to be used as name identification information regarding a plurality of personal information of the user. For example, FIG. The user A association table 65A and the user B association table 65B for user B are illustrated. The association table 65 for each user, that is, the association table 65A for the user A and the association table 65B for the user B are information types (deposits) of the user's personal information in each information providing server such as the J1 information providing server 51 operated by each information holding organization. Information, contract insurance information, etc.), user ID information in each information providing server and authentication information related to the user ID information are set and registered in association with each information providing server from which personal information is to be acquired. .

  More specifically, in the example of FIG. 1, for the information types stored in the association table 65, the contract insurance information is shown as the deposit information and the personal information about the insurance company as the user's personal information about the bank. .

  For example, in the case of the user B association table 65B related to the user B, the J1 information providing server 51 for the J1 authentication information 65B1 related to the deposit information held in the J1 information providing server 51 operated by the information holding organization (bank 1). J1-c which is the user ID information of the user generated uniquely and the authentication information J1-ccert relating to the user ID information J1-c are stored, and the J2 information operated by the information holding organization (bank 2) For the J2 authentication information 65B2 related to the deposit information held in the providing server 52, J2-a which is the user ID information of the user uniquely generated by the J2 information providing server 52 and the authentication related to the user ID information J2-a Information J2-a cert is stored.

  Furthermore, regarding the J3 authentication information 65B3 related to the contract insurance information held in the J3 information providing server 53 operated by the information holding organization (insurance company 3), the user of the user generated uniquely by the J3 information providing server 53 The ID information J3-b and the authentication information J3-b cert relating to the user ID information J3-b are stored and held in the J4 information providing server 54 operated by the information holding organization (insurance company 4). Regarding the J4 authentication information 65B4 related to the contract insurance information, J4-e which is the user ID information of the user uniquely generated by the J4 information providing server 54 and the authentication information J4-e cert related to the user ID information J4-e are Saved.

  Further, in the user B association table 65B related to the user B, user ID information 65B5 is stored as user ID information (ID-b) for uniquely identifying the user B.

  The same applies to other users. For example, in the case of the user A association table 65A for user A, the J1 authentication information 65A1 related to the deposit information held in the J1 information providing server 51 is the information holding organization. J1-b which is the user ID information of the user uniquely generated by the J1 information providing server 51 operated by (Bank 1) and the authentication information J1-b cert relating to the user ID information J1-b are stored,... The J4 authentication information 65A4 related to the contract insurance information held in the J4 information providing server 54 operated by the information holding organization (insurance company 4) is the user ID information of the user generated uniquely by the J4 information providing server 54. A certain J4-d and authentication information J4-d cert relating to the user ID information J4-d are stored, and User ID information 65A5 is stored as user ID information (ID-a) for uniquely identifying the user A.

(Operation example of the information acquisition system of the present invention)
Next, an example of the operation of the information acquisition system according to the embodiment of the present invention shown in FIG. 1 will be described in sequence with reference to the flowcharts shown in FIGS. Here, the flowcharts shown in FIGS. 3 to 8 also show an example of the information acquisition method according to the present invention. In the following description, a case where the IC card 10 to be mounted on the user terminal 20 is an IC card possessed by the user B will be described as an example. First, an example of the operation of the information acquisition system will be described using the flowchart of FIG. FIG. 3 is a flowchart showing an example of an operation of pre-writing personal authentication information (personal identification information) for mutual authentication in the IC card 10 among the operations of the information acquisition system shown in FIG.

  First, an IC card 10 that writes personal authentication information is attached to an issuing terminal that issues personal authentication information (personal identification information) for mutual authentication related to the user, and the user B who is the owner of the IC card 10 An issue request with user identification information such as name, date of birth, address, age, etc. is input (step S1). Here, the issuing terminal is connected directly or via a network to a CA server (certificate authority server) operated by a certification authority that issues public key certificates.

  When the issuing terminal receives the issuing request with the user specifying information, it generates a pair of the user public key and the signature key, and transmits the user public key and the user specifying information to the CA server (step S2).

  The CA server creates a public key certificate based on the received user public key and user identification information, and returns the certificate to the issuing terminal (step S3).

  The issuing terminal that has acquired the public key certificate from the CA server issues a write command for writing the acquired public key certificate and the generated user signature key to the mounted IC card 10 side. (Step S4).

  As shown in FIG. 1, the IC card 10 that has received the command for writing the user signature key and the user public key certificate from the issuing terminal by the data input / output unit 12 receives the user signature key 112 and the user public key certificate 113 as shown in FIG. The information is stored in the information storage unit 11 as personal authentication information (personal identification information) for the user B.

  Next, an example of another operation of the information acquisition system will be described using the flowcharts of FIGS. 4 and 5. FIG. 4 shows the operation of the information acquisition system shown in FIG. 1 by acquiring each user ID information and authentication information from an information providing server such as the J1 information providing server 51 operated by each information holding organization. FIG. 6 is a flowchart showing an example of an operation for setting and registering in the association table 65 of the management server 60 and the electronic post-office box (BOX) of the electronic post-office box server 30; from the J1 information providing server 51 and the J2 information providing server 52, the user ID information and An example of an operation for acquiring authentication information is shown.

  FIG. 5 is a flowchart showing an example of the remaining operation subsequent to the flowchart of FIG. 4, and an example of the operation of acquiring the respective user ID information and authentication information from the J3 information providing server 53 and the J4 information providing server 54. Is shown. 4 and 5 are flowcharts executed after the operation of the flowchart of FIG. 3 is executed.

  First, in the flowchart of FIG. 4, the IC card 10 in which information used for mutual authentication of the user B is held in the user terminal 20 used by the user B (that is, the user signature key 112 by the operation of the flowchart of FIG. 3). And the user public key certificate 113 with the IC card in which information is stored in the information storage unit 11 as personal authentication information is mounted, the name of the electronic post office box server used by the user terminal 20 of the user B (for example, FIG. 1) And the name of the information holding organization that requests the issuance of user ID information (for example, the information holding organization J1 (bank 1) and the information holding organization shown in FIG. 1). User with J2 (bank 2), information holding institution J3 (insurance company 3), and information holding institution J4 (insurance company 4)) The D issuance request, the user B inputs the user terminal 20 (step S11).

  If only one electronic post office box server 30 is arranged in the information acquisition system, it is needless to say that the electronic post office box server name need not be attached to the user ID issuance request.

  The user terminal 20 that has received the user ID issuance request transfers the user ID issuance request to the ID management server 60 that manages the user ID information (step S12), and also via the IC card information reading / writing means 21. Thus, the user ID issuance request is also transferred to the authentication means 13 of the mounted IC card 10. The authentication means 13 and the ID management server 60 that have received the user ID issue request are first held by the ID management server 60 via the user terminal 20 between the IC card 10 and the ID management server 60. Mutual authentication is performed using the ID management server authentication information 66 and the personal authentication information recorded on the IC card 10 (step S13).

  In other words, in order to perform mutual authentication between the IC card 10 and the ID management server 60, the authentication means 13 of the IC card 10 is a user disclosure stored as personal authentication information in the information storage means 11 shown in FIG. The ID management server 60 is read out of the ID management server authentication information 66 including the signature key and public key certificate on the ID management server 60 side via the user terminal 20 loaded with the IC card 10 by reading the key certificate 113. Exchange each other's public key certificate, for example, exchange random messages, send back the encrypted ones using the respective signature keys, and decrypt each other with each public key. Authenticate.

  If the mutual authentication result between the IC card 10 attached to the user terminal 20 and the ID management server 60 is normal, then the authentication means 13 of the IC card 10 and each information attached to the received user ID issue request The personal authentication information and the information providing server recorded on the IC card 10 are held via the user terminal 20 and the ID management server 60 with the information providing server operated by the information holding organization indicated by the holding organization name. The ID management server 60 holds mutual authentication between the ID management server 60 and the information providing server operated by the information holding organization indicated by each information holding organization name. Mutual authentication is performed using the ID management server authentication information and the information providing server authentication information held by the information providing server.

  That is, first, in order to perform mutual authentication between the IC card 10 and the J1 information providing server 51 operated by the information holding organization J1 (bank 1), personal authentication information for mutual authentication on the IC card 10 side and J1 Mutual authentication is performed using J1 information providing server authentication information (J1 public key certificate and signature key) for mutual authentication on the information providing server 51 side (step S14).

  If the mutual authentication result between the IC card 10 mounted on the user terminal 20 and the J1 information providing server 51 is normal, next, in order to perform mutual authentication between the ID management server 60 and the J1 information providing server 51, ID management server authentication information 66 (public key certificate and signature key of ID management server 60) for mutual authentication on the ID management server 60 side and J1 information providing server authentication for mutual authentication on the J1 information providing server 51 side Mutual authentication is performed using the information (J1 public key certificate, signature key) (step S15).

  If any of the mutual authentication results is normal, the ID management server 60 sends the received user ID issue request to the J1 information providing server 51 as an electronic post office box server used by the user terminal 20. The electronic post office box server name notified from (the name of the electronic post office box server 30 in the example of FIG. 1) and the user public key certificate 113 are attached and transmitted (step S16).

  The J1 information providing server 51 that has received the user ID issuance request from the ID management server 60 has unique user ID information (J1-c) and authentication information for the user ID information (J1-J1) in the J1 information providing server 51. c cert) and the generated user ID information (J1-c) and the electronic post-office box server name received from the ID management server 60 (in the example of FIG. 1, the first electronic post-office server 30 Is stored in the electronic post office box storage ID table of the information storage means.

  Further, the J1 information providing server 51 transmits the generated user ID information (J1-c) and the authentication information for the user ID information (J1-c cert) to the requesting ID management server 60 (step S17). ).

  The request source ID management server 60 selects the user B association table 65B related to the user B of the user ID issuance request source from the association table 65 provided for each user of the information storage unit 61, and the communication unit 64 The user ID information (J1-c) and the authentication information (J1-c cert) received from the J1 information providing server 51 are registered as J1 authentication information 65B1 related to the J1 information providing server 51.

  Further, the ID management server 60 is an electronic post office box server for mutual authentication on the electronic post office box server 30 side between the electronic post office box server 30 attached to the user ID issuance request as an electronic post office box server to be used and the ID management server. Mutual authentication is performed using the authentication information 325 for authentication and the ID management server authentication information 66 for mutual authentication on the ID management server 60 side (step S18).

  When the mutual authentication result is normal, the ID management server 60 sends the user ID information (J1-c) and authentication information (J1-c cert) received from the J1 information providing server 51 to the electronic post office box server 30. Is transmitted by the communication means 64 (step S19). The electronic post office box server 30 relates the user ID information (J1-c) and the authentication information (J1-c cert) received from the ID management server 60 to the J1 BOX 321 of the information storage means 32 and the J1 information providing server 51. Registered as user authentication information 321a.

  By the above operation, among the information providing servers operated by each information holding organization attached to the user ID issue request, the user ID information (J1-c) regarding the J1 information providing server 51 and the authentication information for the user ID information The issuance of (J1-c cert) and a series of registration processes are completed.

  In the above description, the example in which mutual authentication between the IC card 10 and the ID management server 60 or the information providing server is performed by the authentication unit 13 in the IC card 10 has been described. The means 13 performs mutual authentication between the IC card 10 and the user terminal 20, and the mutual authentication between the user terminal 20 and the ID management server 60 or the information providing server uses an authentication means provided in the user terminal 20. It may be a form that is performed.

  Hereinafter, in the flowcharts of FIGS. 4 and 5, the remaining information providing server of the information providing server operated by each information holding organization attached to the user ID issuance request also excludes step S18 in the J1 information providing server 51. Operations similar to steps S14 to S17 and step S19 (that is, the operation of steps S20 to S24 in FIG. 4 for the J2 information providing server 52, the operation of steps S31 to S35 in FIG. 5 for the J3 information providing server 53, For the J4 information providing server 54, the operations in steps S36 to S40 in FIG. 5 are executed.

  Note that step S18 is a step of performing mutual authentication between the ID management server 60 and the electronic post office box server 30, and in the acquisition operation of the user ID information in the J1 information providing server 51, the ID management server 60 and the electronic post office box server 30. The mutual authentication between the user ID information and the user ID information regarding the remaining information providing servers other than the J1 information providing server 51 does not need to be performed repeatedly.

  As a result of performing the acquisition operation of the user ID information regarding the remaining information providing servers, the electronic post office box storage ID table of the information storage means of each information providing server includes the electronic post office box server name specified in the user ID issue request and each User ID information uniquely generated by the information providing server is registered in association with it (for example, in the case of the J4 information providing server 54 shown in FIG. 1, the electronic post office box storage ID table 543 of the information storage unit 542 includes Each user ID information generated is registered in association with the identification name of the electronic post office box server 30 which is the first electronic post office box server) as the first electronic post office box server identification information 543a).

  Further, user ID information generated by each information providing server and authentication information for the user ID information (that is, in the case of the J2 information providing server 52, J2-a, J2-a cert, J3 information providing server 53 In this case, in the case of J3-b, J3-b cert, and J4 information providing server 54, J4-e and J4-e cert) are user B (user ID issue request source user) of information storage means 61 of ID management server 60. Is registered in the user B association table 65B as user authentication information (that is, J2 authentication information 65B2, J3 authentication information 65B3, J4 authentication information 65B4), and an electronic post office box server. Each of the 30 BOXes (that is, BOX 322 for J2, BOX 323 for J3, and BOX 324 for J4) Information for user authentication related information providing server (that is, user authentication information 322a, 323a, 324a) is registered as.

  When the acquisition process of the user ID information and the authentication information for the user ID information specified in the user ID issue request from the user B is completed, the ID management server 60 determines that the user ID issue request source Registration of the user ID information regarding the user B and the authentication information for the user ID information in the association table 65 of the ID management server 60 and the electronic post-office box (BOX) of the electronic post-office box server 30 is terminated. It is notified (step S41 in FIG. 5).

  The association table 65 of the information storage means 61 of the ID management server 60 includes ID management server authentication information 66 (public key certificate and signature key of the ID management server 60) used for mutual authentication of the ID management server 60. The information storage means 32 of the electronic post office box server 30 is registered in advance, and the electronic post office box server authentication information 325 (public key certificate and signature key of the electronic post office box server 30 is used for mutual authentication of the electronic post office box server 30. ) Is registered in advance.

  Next, an example of another operation of the information acquisition system will be described using the flowchart of FIG. FIG. 6 is a diagram illustrating the operation of the information acquisition system shown in FIG. 1 from the information providing server such as the J1 information providing server 51 operated by each information holding organization, with respect to each user registered in the electronic post office box server 30. 6 is a flowchart showing an example of an operation of acquiring personal information of each user held in the providing server in advance and setting it as reference information in the information storage means 32 of the electronic post office box server 30, and is a flowchart of FIGS. It is a flowchart performed after performing this operation | movement.

  In the case of the flowchart of FIG. 6, when a predetermined acquisition condition is satisfied in the electronic post office box server 30, for example, when a predetermined time is reached, a predetermined period is reached, or from the user terminal 20 The acquisition condition that is satisfied when a condition such as when a request for acquiring personal information is received or when new user ID information and authentication information for the user ID information are set and registered in an electronic post office box (BOX) is established As a trigger, personal information is acquired from the electronic post office box server 30 to the information providing server.

  Of the information providing servers registered in the information storage means 32 of the electronic post office box server 30 as information providing servers that hold the personal information of each user who uses the electronic post office box server 30, first, the information holding organization J1 (bank 1 The J1 information providing server 51 and the electronic information using the information providing server authentication information for mutual authentication of the J1 information providing server 51 and the electronic post office box server authentication information for mutual authentication of the electronic post office box server 30. Mutual authentication with the post office box server 30 is performed (step S51).

  That is, the J1 public key certificate constituting the J1 authentication information 511 of the J1 information providing server 51 and the public key certificate constituting the electronic post office box server authentication information 325 of the electronic post office box server 30 are exchanged, and PKI is exchanged. The electronic post office box server 30 and the J1 information providing server 51 perform mutual authentication by a procedure compliant with the (Public Key Infrastructure) method.

  If the mutual authentication result with the J1 information providing server 51 is normal as a result of the mutual authentication, the electronic post office box server 30 determines the user ID information issued by the J1 information providing server 51 (in the J1 information providing server 51). Each user ID information (for example, J1-a to J1-e) registered in the information storage means 32 of the electronic post office box server 30 as unique information generated uniquely, and authentication information for the user ID information (for example, , J1-a cert to J1-e cert), the information acquisition means 33 generates a distribution request for personal information of each corresponding user, and the generated distribution request is communicated to the J1 information providing server 51. 34 (step S52).

  The J1 information providing server 51 that has received the distribution request acquires personal information (for example, J1-a information to J1-e information) corresponding to the user ID information included in the distribution request, and obtains the request source Distribute to the electronic post office box server 30 (step S53).

  Alternatively, with reference to the electronic post office box storage ID table of the information storage means in the J1 information providing server 51, each user ID information associated with the requesting electronic post office box server 30 (first electronic post office box server) (for example, J1-a to J1-e) are extracted, collated with the user ID information included in the received distribution request, and held as personal information corresponding to any of the user ID information obtained by collation The personal information (for example, J1-a information to J1-e information) of the existing user is acquired and distributed to the requesting electronic post office box server 30.

  The electronic post office box server 30 sends the personal information (for example, J1-a information to J1-e information) received from the J1 information providing server 51 to the J1 BOX 321 of the information storage means 32 and each user ID information of the user authentication information 321a. (For example, J1-a to J1-e) are registered as reference information 321b.

  With the above operation, the process of pre-registering the personal information of each user related to the J1 information providing server 51 in the J1 BOX 321 as the reference information 321b among the information providing servers registered in the information storage unit 32 of the electronic post office box server 30 is completed. To do.

  Hereinafter, in the flowchart of FIG. 6, operations similar to steps S51 to S53 in the J1 information providing server 51 are also performed for the remaining information providing servers registered in the information storage unit 32 of the electronic post office box server 30 (that is, For the J2 information providing server 52, the operations of Steps S54 to S56, for the J3 information providing server 53, the operations of Steps S57 to S59, and for the J4 information providing server 54, the operations of Steps S60 to S62) are executed.

  As a result, each information providing server BOX (that is, BOX 322 for J2, BOX 323 for J3, and BOX 324 for J4) of the information storage means 32 of the electronic post office box server 30 has each user's information possessed by each information providing server. The personal information is reference information related to each information providing server (that is, reference information 322b for the J2 information providing server 52, reference information 323b for the J3 information providing server 53, and reference information 324b for the J4 information providing server 54). ) In advance.

  Next, an example of an operation different from the operation of FIG. 6 of the information acquisition system will be described using the flowchart of FIG. FIG. 7 shows the operations of the information acquisition system according to the present invention shown in FIG. 1 from the information providing server such as the J1 information providing server 51 operated by each information holding organization to each user registered in the electronic post office box server 30. 6 is a flowchart showing an example different from FIG. 6 of the operation of acquiring personal information of each user held in each information providing server in advance and setting it as reference information in the information storage means 32 of the electronic post office box server 30. FIG. 6 is a flowchart executed after the operations of the flowcharts of FIGS. 3 to 5 are executed.

  In the case of the flowchart of FIG. 7, the trigger for the distribution operation of each user's personal information from each information providing server to the electronic post office box server 30 is different from that in the flowchart of FIG.

  That is, in the case of the flowchart of FIG. 6, the personal information of each user is distributed to the electronic post office box server 30 in response to a distribution request from the electronic post office box server 30, but in the case of the flowchart of FIG. In each information providing server, when a predetermined distribution condition is satisfied, for example, when a predetermined time or period is reached, a change occurs in the stored personal information, or the user terminal 20 When a distribution condition such as when a predetermined event occurs such as when an acquisition request is generated from the information providing server, an electronic PO Box is established from the information providing server that satisfies the distribution condition. The case where the corresponding personal information is distributed to the server 30 is shown.

  In the flowchart of FIG. 7, among the information providing servers registered in the information storage means 32 of the electronic post office box server 30 as information providing servers holding personal information of each user who uses the electronic post office box server 30, first, information In the J1 information providing server 51 operated by the holding institution J1 (bank 1), when a predetermined distribution condition is satisfied, the information is established by referring to the electronic post office box storage ID table of the information storage means of the J1 information providing server 51. An electronic PO Box server corresponding to the delivery condition, for example, an electronic PO Box server 30 is extracted, and information providing server authentication information for mutual authentication of the J1 information providing server 51 operated by the information holding organization J1 (Bank 1) and the extracted electronic PO Box Using the electronic PO box server authentication information for mutual authentication of the server 30, the J1 information providing server 51 and It performs mutual authentication with the electronic post office box server 30 (step S71).

  That is, the J1 public key certificate constituting the J1 authentication information 511 of the J1 information providing server 51 and the public key certificate constituting the electronic post office box server authentication information 325 of the electronic post office box server 30 are exchanged, and PKI is exchanged. The electronic post office box server 30 and the J1 information providing server 51 perform mutual authentication by a procedure compliant with the (Public Key Infrastructure) method.

  If the mutual authentication result with the electronic post office box server 30 is normal as a result of the mutual authentication, the J1 information providing server 51 refers to the electronic post office box storage ID table of the information storage means, and the electronic corresponding to the established delivery condition is established. Each user ID information (for example, J1-a to J1-e) associated with the post office box server 30 (first electronic post office box server) is extracted, and the personal information of the user corresponding to each extracted user ID information The held information (for example, J1-a information to J1-e information) is acquired and distributed to the corresponding electronic post office box server 30 (step S72).

  The electronic post office box server 30 sends the information received from the J1 information providing server 51 (for example, J1-a information to J1-e information) to the J1 BOX 321 of the information storage means 32 for each user ID information ( For example, it is registered as reference information 321b in association with J1-a to J1-e).

  With the above operation, the process of pre-registering the personal information of each user related to the J1 information providing server 51 in the J1 BOX 321 as the reference information 321b among the information providing servers registered in the information storage unit 32 of the electronic post office box server 30 is completed. To do.

  Hereinafter, in the flowchart of FIG. 7, the J1 information providing server 51 is also provided when the predetermined distribution conditions are satisfied for each of the remaining information providing servers registered in the information storage unit 32 of the electronic post office box server 30. The same operations as in steps S71 and S72 in (i.e., the operations of steps S73 and S74 for the J2 information providing server 52, the operations of steps S75 and S76 for the J3 information providing server 53, and the J4 information providing server 54) Steps S77 and S78) are executed.

  As a result, each information providing server BOX (that is, BOX 322 for J2, BOX 323 for J3, and BOX 324 for J4) of the information storage means 32 of the electronic post office box server 30 has each user's information possessed by each information providing server. The personal information is reference information related to each information providing server (that is, reference information 322b for the J2 information providing server 52, reference information 323b for the J3 information providing server 53, and reference information 324b for the J4 information providing server 54). ) In advance.

  The reference information setting process in the electronic post office box server 30 in the flowcharts of FIGS. 6 and 7 may be performed by selecting only one of them according to the electronic post office box server or the user terminal, for example. Alternatively, both of the information setting methods in FIGS. 6 and 7 may be used in combination.

  In the flowcharts of FIGS. 6 and 7, the case is described in which the reference information setting process is performed when mutual authentication is obtained between the electronic post office box server 30 and each information providing server. In some cases, after mutual authentication between the electronic post office box server 30 and each information providing server is once obtained, unless there is an instruction from the operator of the information processing system, a change in the system configuration, or the like after the next time. When predetermined acquisition conditions and distribution conditions are established, the reference information setting process for the electronic post office box server 30 may be started without going through the mutual authentication procedure.

  Finally, an example of another operation of the information acquisition system will be described using the flowchart of FIG. FIG. 8 shows the operation of the information acquisition system according to the present invention shown in FIG. 1 in which the user terminal 20 is registered as reference information (for example, reference information 321b) in the information storage means 32 of the electronic post office box server 30. It is a flowchart which shows an example of the operation | movement which acquires a user's personal information and it displays on a screen, and is a flowchart performed after performing the operation | movement of the flowchart of FIG. 3 thru | or FIG.5, FIG.6 and / or FIG. .

  In FIG. 8, first, the IC card 10 possessed by the user B is attached to the user terminal 20 used by the user B, and an information acquisition request is input (step S81). Here, as described with reference to FIG. 3, the information storage means 11 of the IC card 10 mounted on the user terminal 20 includes the user signature key 112 and personal authentication information (personal identification information) for mutual authentication related to the user. A user public key certificate 113 is stored in advance.

  In addition, the user B association table 65B for the user B of the information storage means 61 of the ID management server 60 includes the user ID information for each information providing server and the user ID as described with reference to FIGS. Information for user authentication comprising authentication information for information (for example, in the case of a J1 information providing server, J1 information in which the user ID information is J1-c and the authentication information for the user ID information is J1-c cert) The J1 authentication information 65B1) related to the providing server is stored in advance.

  The user terminal 20 that has received the information acquisition request notifies the authentication means 13 of the IC card 10 and the ID management server 60 of the information acquisition request, and the user terminal 20 is connected between the IC card 10 and the ID management server 60. Thus, mutual authentication is performed using the ID management server authentication information 66 held by the ID management server 60 and the personal authentication information recorded on the IC card 10 (step S82). In other words, mutual public key certificates are exchanged between the IC card 10 and the ID management server 60, and mutual authentication is performed by a procedure compliant with the PKI (Public Key Infrastructure) system.

  If the mutual authentication result between the IC card 10 and the ID management server 60 is normal as a result of the mutual authentication, the user terminal 20 first identifies the user B from the IC card 10 by using the information reading / writing means 21 in the IC card. The user ID information (ID-b) is read (step S83), and then a request for returning the information type of personal information having the user ID information (ID-b) is transmitted to the ID management server 60 (step S84). ).

  Upon receiving the information type return request, the ID management server 60 returns the information type from the user ID information registered in the association table 65 for each user of the information storage means 61 by the information search means 62. The user ID information 65B5 that matches the user ID information (ID-b) attached to the request is searched, and the information type stored in the user B association table 65B in which the user ID information 65B5 is registered is extracted. To do. As shown in FIG. 1, the user B association table 65B includes J1 authentication information 65B1 to J4 authentication information 65B4 (that is, each information for referring to personal information related to two types of information, deposit information and contract insurance information). User ID information uniquely generated by the information providing server and authentication information for the user ID information) are set and registered.

  Accordingly, the ID management server 60 sends back to the requesting user terminal 20 that the two information types of deposit information and contract insurance information can be acquired as personal information of the user B based on the search result. (Step S85).

  The user terminal 20 that has received the information type returned from the ID management server 60 displays a selection screen for selecting whether the user B's deposit information or contract insurance information is to be acquired. To display.

  Here, for example, when the user selects a deposit information acquisition request (step S86), the user terminal 20 performs ID management on the user ID information (ID-b), that is, the information acquisition request regarding the deposit information of the user B. It transmits with respect to the server 60 (step S87).

  The ID management server 60 that has received the information acquisition request sends an IC between the IC card 10 mounted on the requesting user terminal 20 and the electronic post office box server 30 via the user terminal 20 and the ID management server 60. Information for personal authentication (user public key certificate 113, user signature key 112) for mutual authentication of the card 10 and authentication information 325 for electronic post office box server for mutual authentication of the electronic post office box server 30 (public key certificate of the electronic post office box server 30) Mutual authentication using the certificate and signature key) (step S88).

  If the mutual authentication result between the IC card 10 mounted on the user terminal 20 and the electronic post office box server 30 is normal, ID management is performed in order to perform mutual authentication between the ID management server 60 and the electronic post office box server 30. ID management server authentication information 66 (public key certificate and signature key of the ID management server 60) for mutual authentication on the server 60 side and electronic post office box server authentication information 325 (electronic post office box) for mutual authentication on the electronic post office box server 30 side Mutual authentication is performed using the public key certificate and signature key of the server 30 (step S89).

  If the mutual authentication result between the ID management server 60 and the electronic post-office box server 30 is normal, the ID management server 60 refers to the user B association table 65B stored in the information storage means 61, and starts with the first As the deposit information, user ID information (J1-c) and authentication information (J1-c cert) relating to the J1 information providing server 51 that holds the personal information of the user B is extracted, and user ID information relating to the J1 information providing server 51 is extracted. (J1-c) is transmitted to the electronic post office box server 30 as an information acquisition request for requesting acquisition of personal information, that is, a J1-c information acquisition request (step S90).

  Upon receiving the J1-c information acquisition request from the ID management server 60, the electronic post office box server 30 receives the user ID information (J1-c) and authentication information (J1-c cert) attached to the J1-c information acquisition request. And the user ID information (J1-c) and the authentication information (J1-c cert) registered as the user authentication information 321a in the J1 BOX 321 to verify whether the request is correct, If it is determined that the request is a correct information acquisition request, the J1-c information stored in advance in association with the user ID information (J1-c) is read out as reference information 321b in the J1 BOX 321 and the request is made. It transmits to the original ID management server 60 (step S91).

  The ID management server 60 that has acquired J1-c information, which is personal information (deposit information) held in the J1 information providing server 51, from the electronic post office box server 30 registered in advance as reference information 321b is still receiving an acquisition request. It is confirmed by referring to the user B association table 65B stored in the information storage means 61 whether or not other deposit information to be left remains. Then, the J1-c information from the electronic post office box server 30 is transferred to the user terminal 20 that is the information acquisition request source regarding the deposit information of the user B (step S92).

  The user terminal 20 that has received the J1-c information from the ID management server 60 is notified that there is still another deposit information subject to the acquisition request, and therefore temporarily stores the received J1-c information. To do.

  On the other hand, since other deposit information to be acquired still remains, the ID management server 60 has the user ID information (J2 information providing server 52 that holds the personal information of the user as the next deposit information) ( J2-a) and authentication information (J2-a cert) are taken out, and an information acquisition request for requesting acquisition of personal information of user ID information (J2-a) related to the J2 information providing server 52, that is, a J2-a information acquisition request, It transmits to the electronic post office box server 30 (step S93).

  Upon receiving the J2-a information acquisition request from the ID management server 60, the electronic post office box server 30 receives the user ID information (J2-a) and authentication information (J2-a cert) attached to the J2-a information acquisition request. And the user ID information (J2-a) and authentication information (J2-a cert) registered as the user authentication information 322a in the J2 BOX 322, and verifying whether or not the request is correct, If it is recognized that the request is a correct information acquisition request, the J2-a information stored in advance in association with the user ID information (J2-a) is read out as reference information 322b in the J2 BOX 322, and the request is made. It transmits to the original ID management server 60 (step S94).

  The ID management server 60 that has acquired J2-e information, which is personal information (deposit information) held in the J2 information providing server 52, from the electronic post office box server 30 registered in advance as the reference information 322b is still receiving an acquisition request. It is confirmed by referring to the user B association table 65B stored in the information storage means 61 whether other deposit information to be left remains, and no other deposit information to be acquired remains. Is confirmed, the J2-a information from the electronic post office box server 30 is attached to the user terminal 20 that is the information acquisition request source regarding the deposit information of the user B (step S95). .

  The user terminal 20 that has received the J2-a information from the ID management server 60 is notified that there is no other deposit information to be acquired, so that the personal information requested by the user B is not stored. Recognize that all personal information (deposit information) to be acquired is acquired for the information type (deposit information).

  Therefore, the user terminal 20 displays all the deposit information relating to the user B acquired from the ID management server 60, for example, J1-c information and J2-a information on the screen in a list display format using a predetermined screen format.

(Other embodiments)
In the above description, the case where the information acquired as the personal information of the user is the deposit information and the contract insurance information has been described. However, the present invention is not limited to such information. Information, supplier stock information, etc. may be used, and any information can be applied as long as it is information used as name identification information related to the user.

  In addition, the user possesses personal authentication information (that is, the user signature key 112 and the user public key certificate 113) for mutual authentication of the user and the external recording medium (external storage device) that stores the authentication means 13. However, the present invention is not limited to the IC card 10, and other external recording media (external storage devices) having a calculation function, such as a USB memory or a portable device (a mobile phone, a portable information device, etc.). May be. Alternatively, the personal authentication information described above may be stored in a simple memory card as an external recording medium possessed by the user.

  When storing personal authentication information in such a memory card, in order to ensure the security of the personal information, the user terminal is placed in a user terminal that can be safely used by the user wearing the memory card. Authentication means for performing mutual authentication between the user to be used and the information providing server operated by the information holding organization will be provided. Even when the IC card 10 is used, in some cases, as in the case of the memory card, it is used as a mere memory to store only personal authentication information, and an authentication unit is provided in the user terminal. May be.

  Furthermore, when there is a user terminal that can be safely used only by a legitimate user, as shown in the system configuration of FIG. 9, instead of an external recording medium such as a memory card or an IC card, Information for personal authentication (that is, user ID information 111, user signature key 112, and user public key certificate 113) may be stored in the information storage means in the user terminal. FIG. 9 is a block diagram showing another example of the system configuration of the information acquisition system according to the present invention. Unlike the system configuration of FIG. 1, the user terminal 20A has an information storage unit 24 built in the user terminal 20A. In addition, since personal authentication information about the user to be used is stored, an external recording medium such as the IC card 10 is not required to be attached to the user terminal 20A during use.

  As described above, even when the personal authentication information is stored in the information storage unit 24 in the user terminal 20A, in order to ensure the security of the personal information, the user terminal 20A that can be used only by a legitimate user An authentication unit 25 for performing authentication between a user who intends to use a user terminal and an information providing server operated by an information holding organization, an ID management server 60, and the like, and an individual stored in the information storage unit 24 Mutual authentication may be performed using the authentication information. When storing personal authentication information in the information storage means 24 in the user terminal 20A, other arbitrary user terminals cannot be used, and only the user terminal 20A provided with the authentication means 25 stores information. Using the personal authentication information stored in the means 24, the user's personal information held in the information providing server operated by the information holding organization is referred to via the electronic post office box server 30.

(Effect of this embodiment)
According to the embodiment described above, the following effects can be obtained.

  First, the user's personal information can be managed extremely safely.

  This is because user authentication information used for referring to personal information about each user himself / herself held in an information providing server operated by each information holding organization (that is, user ID information and authentication information for the user ID information, For example, in the case of FIG. 1, regarding the personal information of the J1 information providing server 51, the user ID information (J1-b) and the authentication information for the user ID information (J1-b cert)) are stored for each information providing server. The electronic post office box server 30 is generated uniquely and has different information for each information providing server for the same user, and is acquired in advance from each information providing server and stores personal information about each user as reference information. An electronic post office box (BOX) is not created for each user to whom personal information is distributed, but for each information providing server that is the distribution source. Only to it because of the a form to be installed.

  Thus, the third party can store user information (personal information) stored in each information providing server and user information (personal information) stored in advance in the electronic post office box (BOX) as reference information. ) Cannot be performed, and the personal information owned by the user cannot be viewed in a lump.

  Furthermore, only the ID management server 60 has an association table 65 for storing information used for referring to personal information related to the user himself / herself held in the information providing server operated by each information holding organization, and The personal authentication information (personal identification information) for mutual authentication for accessing the ID management server 60 exists only in an external recording medium (such as the IC card 10) possessed by a legitimate user.

  Thus, information registered in each electronic post box (BOX) of the information storage means 32 of the electronic post office box server 30 registered in each electronic post office box (BOX) of the electronic post office box server 30 (for example, in the case of BOX 321 for J1) For example, user authentication information 321a composed of user ID information (J1-b) and authentication information for user ID information (J1-b cert) and reference information 321b associated with the user authentication information 321a). Even if a malicious third party can acquire the information, it is not possible to specify which information is personal information of which user, and it is not possible to identify the names.

  Secondly, the electronic post office box server 30 collects personal information of each user from the information providing server operated by each information holding organization and stores it as reference information in the electronic post office box (BOX) of the electronic post office box server 30. Therefore, the user can efficiently obtain the information he wants.

  Third, personal authentication information for mutual authentication that is essential for accessing the ID management server 60 that manages the association table 65 is stored in an external recording medium such as the IC card 10 possessed by a legitimate user. Therefore, a third party (such as the police or medical institution) who has the authority to access personal information borrows an external recording medium such as an IC card 10 of a specific user from the user, thereby Refer to the personal information of the user using a terminal installed on the premises of the third party located in a safe place, or using the user terminal 20 that can be safely used only by the user. It is also possible to do.

It is a block diagram which shows an example of the system configuration | structure of the information acquisition system which concerns on this invention. It is a table which shows an example of the information stored in the information storage means of the electronic post office box server shown in FIG. It is a flowchart which shows an example of the operation | movement which writes the personal authentication information for mutual authentication beforehand in IC card among operation | movement of the information acquisition system shown in FIG. Among the operations of the information acquisition system shown in FIG. 1, the operation of acquiring each user ID information and authentication information from the information providing server operated by each information holding organization and setting and registering it in the association table of the ID management server. It is a flowchart which shows an example. FIG. 5 is a flowchart illustrating an example of remaining operations subsequent to the flowchart of FIG. 4. FIG. Among the operations of the information acquisition system shown in FIG. 1, for each user registered in the electronic post office box server from the information providing server operated by each information holding organization, the individual of each user held in each information providing server It is a flowchart which shows an example of the operation | movement which acquires information beforehand and sets as reference information to the information storage means of an electronic post office box server. Among the operations of the information acquisition system shown in FIG. 1, for each user registered in the electronic post office box server from the information providing server operated by each information holding organization, the individual of each user held in each information providing server It is a flowchart which shows the example different from FIG. 6 of the operation | movement which acquires information beforehand and sets as reference information to the information storage means of an electronic post office box server. Of the operations of the information acquisition system shown in FIG. 1, an example of an operation in which the user terminal acquires personal information of the user registered as reference information in the information storage unit of the electronic post office box server and displays it on the screen is shown. It is a flowchart. It is a block diagram which shows the other example of the system configuration | structure of the information acquisition system which concerns on this invention. It is a block diagram which shows the system configuration | structure of the conventional information acquisition system.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 ... IC card, 11 ... Information storage means, 12 ... Data input / output means, 13 ... Authentication means, 20, 20A, 20B ... User terminal, 21 ... Information reading / writing means in IC card, 21B ... Authentication means, 22, 22B ... Data transmission / reception means 23 ... Information display means 23B ... Information storage means 24 ... Information storage means 25 ... Authentication means 30, 30A ... Electronic post office box server 31 ... Communication means 31A ... Data transmission / reception means 32, 32A ... Information storage means, 33, 33A ... information acquisition means, 34, 34A ... communication means, 35, 35A ... authentication means, 41, 42 ... network, 51 ... J1 information provision server, 52 ... J2 information provision server, 53 ... J3 information Provision server 54... J4 information provision server 60... ID management server 61... Information storage means 62. 4 ... Communication means, 65 ... Association table, 65A ... User A association table, 65B ... User B association table, 65A1, 65B1 ... J1 authentication information, 65B2 ... J2 authentication information, 65B3 ... J3 authentication information, 65A4 , 65B4 ... J4 authentication information, 65A5, 65B5 ... user ID information, 66 ... ID management server authentication information, 111 ... user ID information, 231 ... personal authentication information, 321 ... J1 BOX, 321A ... user A BOX 321a ... User authentication information for J1, 321b ... Reference information for J1, 321Aa ... User ID information for user A, 321Ab ... Reference information for user A, 321B ... BOX for user B, 321Ba ... User ID for user B Information, 321Bb ... Reference information of user B, 321C ... BOX for user C, 32 Ca ... User C user ID information, 321Cb ... User C reference information, 322 ... J2 BOX, 322a ... J2 user authentication information, 322b ... J2 reference information, 323 ... J3 BOX, 323a ... J3 323b... J3 reference information, 324... J4 BOX, 324a... J4 user authentication information, 324b... J4 reference information, 325.

Claims (17)

  An information providing server that uniquely generates user ID information for identifying a user and authentication information for the user ID information and holds personal information of the user in association with the user ID information, and one or more The personal information of each user held in the information providing server is acquired in advance from the information providing server, and set as reference information in association with the user ID information in an electronic post office box provided for each information providing server The electronic ID box server to be registered, the user ID information for each information providing server, and the authentication for the user ID information for each user as information necessary for acquiring the reference information for each user from the electronic PO box server The personal information of the user to be acquired in a format in which each information is associated with the information type of the personal information An ID management server that registers and manages each of the held information providing servers in the association table, and the user through the ID management server in response to an acquisition request of personal information about the user from the user At least a user terminal that receives the reference information corresponding to personal information from the electronic post office box server, and an external recording medium on which personal identification information for mutual authentication and ID information for identifying the user is recorded In the information acquisition system to which the ID information recorded on the external recording medium is attached from the user terminal that is requested to acquire personal information about the user by wearing the external recording medium possessed by the user When the acquisition request is transmitted, the ID management server sends a request before the received information acquisition request. The user ID information and the authentication information for the user ID information for each of the information providing servers related to the user specified by the ID information are searched from the association table, and the searched user ID information and the user ID information By transmitting the information acquisition request with the authentication information to the electronic post office box server, the user ID information and the reference information associated with the authentication information for the user ID information are received from the electronic post office box server. An information acquisition system for returning to the requesting user terminal as the personal information regarding the requested user.   An information providing server that uniquely generates user ID information for identifying a user and authentication information for the user ID information and holds personal information of the user in association with the user ID information, and one or more The personal information of each user held in the information providing server is acquired in advance from the information providing server, and set as reference information in association with the user ID information in an electronic post office box provided for each information providing server The electronic ID box server to be registered, the user ID information for each information providing server, and the authentication for the user ID information for each user as information necessary for acquiring the reference information for each user from the electronic PO box server The personal information of the user to be acquired in a format in which each information is associated with the information type of the personal information An information storage means for storing an ID management server for managing each of the held information providing servers by setting and registering in the association table; and ID information for identifying a user and personal authentication information for mutual authentication A user terminal that receives the reference information corresponding to the personal information about the user from the electronic post office box server via the ID management server in response to a request for acquisition of the personal information about the user from the user. In the information acquisition system configured by the above, an information acquisition request with the ID information stored in the information storage means has been transmitted from the user terminal requested to acquire personal information about the user from the user. In this case, the ID management server is identified by the ID information attached to the received information acquisition request. The user ID information for each information providing server and the authentication information for the user ID information are searched from the association table, and the searched user ID information and the authentication information for the user ID information are attached. By transmitting the information acquisition request made to the electronic post office box server, the user ID information and the reference information associated with the authentication information for the user ID information are received from the electronic post office box server, and the request source An information acquisition system for returning to the user terminal as the personal information related to the requested user.   3. The information acquisition system according to claim 1, wherein the user terminal equipped with the external recording medium or the user terminal including the information storage unit is a user to whom designation information of the information providing server is attached from a user. When receiving the ID issuance request, the user ID issuance request is transmitted to the ID management server, and the external recording medium, the designated information providing server, the ID management server, or the user When the mutual authentication is performed between each of the terminal, the specified information providing server, and the ID management server, and the mutual authentication is normal, the ID management server receives the received user. The information providing server that transmits the ID issuance request to the designated information providing server and receives the user ID issuance request The authentication information for the user ID information and the user ID information for the original user generates the unique information acquisition system characterized in that to return to the ID management server.   4. The information acquisition system according to claim 3, wherein when there are a plurality of the electronic post office box servers, the ID management server transmits the user ID issue request to the information providing server when the user ID is issued. The information providing server that transmits the information indicating the electronic post-office box server used by the user terminal that is the transmission source of the issue request and receives the user ID issuance request is unique to the received information indicating the electronic post-office box server. An information acquisition system, wherein the generated user ID information is associated with and stored as electronic post office box server identification information.   5. The information acquisition system according to claim 3, wherein the ID management server that has transmitted the user ID issue request to the information providing server receives the user ID information and authentication information for the user ID information from the information providing server. When the user ID information and the authentication information for the user ID information are received in the association table, the user ID information and the authentication information for the user ID information received from the other information providing server. The user ID information and the authentication information for the user ID information transmitted to the electronic post office box server together with information indicating the information providing server of the transmission source, The server is the sender of the electronic post office box provided for each information providing server. Serial to the electronic PO Box provided for the information providing server, the user ID information and the information acquisition system and sets register authentication information for the user ID information received.   6. The information acquisition system according to claim 5, wherein the electronic post office box server is preliminarily set as a condition for acquiring the personal information related to the user ID information set and registered in the electronic post office box provided for each information providing server. By sending a request for acquiring the personal information related to the user ID information to the information providing server that holds the personal information related to the user when a predetermined acquisition condition is established, An information acquisition system that receives the personal information related to the user ID information and sets and registers it as the reference information in association with the user ID information in the electronic post office box for the information providing server.   7. The information acquisition system according to claim 5, wherein the information providing server satisfies a predetermined distribution condition as a condition for distributing the personal information relating to the user ID information generated uniquely to the electronic post office box server. The personal information regarding the user ID information is distributed to the electronic post office box server together with the user ID information, and the electronic post office box server receiving the personal information is provided with the electronic post office box provided for each of the information providing servers. The personal information distributed in the electronic post office box provided for the information providing server of the personal information distribution source is set and registered as the reference information in association with the user ID information. Characteristic information acquisition system.   8. The information acquisition system according to claim 7, wherein when there are a plurality of electronic post office box servers, the information providing server receives the issuance request for the user ID information from the user terminal. An information acquisition system that distributes the personal information related to the user ID information together with the user ID information to the electronic post office box server designated as the electronic post office box server used by the user terminal.   9. The information acquisition system according to claim 1, wherein when the user terminal receives an information acquisition request from a user, the user terminal transfers the received information acquisition request to the ID management server. The management server stores the user ID information related to the information type of the personal information corresponding to the information type specified by the user as the information acquisition request target among the user ID information set and registered in the association table. All the extracted user ID information is extracted and transmitted to the electronic post office box server to receive the reference information associated with each transmitted user ID information from the electronic post office box server. Then, the received reference information is returned to the requesting user terminal. Distribution acquisition system.   An electronic post office box server generates a user ID information for identifying a user and authentication information for the user ID information from an information providing server that holds personal information of the user in association with the user ID information. The personal information of each user is acquired in advance, and set and registered as reference information in association with the user ID information in an electronic post office box provided for each of the information providing servers. Acquire the reference information for each user from the electronic post office box server when there is a request for acquisition of personal information about the user from a user terminal equipped with an external recording medium in which personal authentication information for authentication is recorded For each user, the user ID information for each information providing server and the user ID information An ID management server that registers and manages each information providing server in which the personal information of the user to be acquired is stored in an association table in a format in which each certificate information is associated with the information type of the personal information The reference information set and registered in each of the electronic post office boxes is read in association with each of the user ID information corresponding to the user set and registered in the electronic post office box, and the requesting user In the information acquisition method of returning to the terminal, the ID information recorded on the external recording medium is attached from the user terminal that is requested to acquire personal information about the user by mounting the external recording medium possessed by the user. When the received information acquisition request is transmitted, the ID management server sends the ID information attached to the received information acquisition request. The user ID information and the authentication information for the user ID information for each of the information providing servers regarding the specified user are searched from the association table, and the searched user ID information and the authentication for the user ID information By sending an information acquisition request with information to the electronic post office box server, the user ID information and the reference information associated with the authentication information for the user ID information are received from the electronic post office box server, An information acquisition method comprising: returning to the original user terminal as the personal information related to the requested user.   An electronic post office box server generates a user ID information for identifying a user and authentication information for the user ID information from an information providing server that holds personal information of the user in association with the user ID information. The personal information of each user is acquired in advance, and set and registered as reference information in association with the user ID information in an electronic post office box provided for each of the information providing servers. Acquire the reference information for each user from the electronic post office box server when there is a request for acquisition of personal information about the user from a user terminal provided with information storage means storing personal authentication information for authentication For each user, the user ID information for each information providing server and the authorization for the user ID information An ID management server configured to register and manage each information providing server in which the personal information of the user to be acquired is stored in an association table in a format in which each information is associated with the information type of the personal information The reference information set and registered in each electronic post office box in association with each user ID information corresponding to the user set and registered in the electronic post office box, and the requesting user terminal When an information acquisition request with the ID information stored in the information storage means is transmitted from the user terminal from which the acquisition of personal information about the user is requested by the user In addition, the ID management server relates to a user specified by the ID information attached to the received information acquisition request. The user ID information for each information providing server and the authentication information for the user ID information are searched from the association table, and the obtained information is attached with the searched user ID information and the authentication information for the user ID information. By transmitting a request to the electronic post office box server, the user ID information and the reference information associated with the authentication information for the user ID information are received from the electronic post office box server, and the request is made to the user terminal. On the other hand, an information acquisition method of returning the personal information about the requested user.   12. The information acquisition method according to claim 10 or 11, wherein the user terminal equipped with the external recording medium or the user terminal including the information storage unit is a user who attaches designation information of the information providing server from a user. When receiving the ID issuance request, the user ID issuance request is transmitted to the ID management server, and the external recording medium, the designated information providing server, the ID management server, or the user When the mutual authentication is performed between each of the terminal, the specified information providing server, and the ID management server, and the mutual authentication is normal, the ID management server receives the received user. The information providing server that transmits the ID issuance request to the designated information providing server and receives the user ID issuance request The user ID and authentication information for the user ID information for the original user generates the unique information acquisition method characterized by returning to the ID management server.   13. The information acquisition method according to claim 12, wherein the ID management server that has transmitted the user ID issue request to the information providing server receives the user ID information and authentication information for the user ID information from the information providing server. The user ID information and the authentication information for the user ID information received in the association table, the user ID information and the authentication information for the user ID information received from the other information providing server, The user ID information and the authentication information for the user ID information received are transmitted to the electronic post office box server together with information indicating the information providing server of the transmission source, and the electronic post office box server Among the electronic post office boxes provided for each of the information providing servers, the information providing source Information acquisition method characterized in that said electronic PO Box provided for the server, sets registers the user ID and authentication information for the user ID information received.   14. The information acquisition method according to claim 13, wherein the electronic post office box server is preliminarily set as a condition for acquiring the personal information related to the user ID information set and registered in the electronic post office box provided for each information providing server. By sending a request for acquiring the personal information related to the user ID information to the information providing server that holds the personal information related to the user when a predetermined acquisition condition is established, Receiving the personal information related to the user ID information and setting and registering it as the reference information in association with the user ID information in the electronic post office box for the information providing server.   15. The information acquisition method according to claim 13, wherein the information providing server satisfies a predetermined distribution condition as a condition for distributing the personal information relating to the user ID information generated uniquely to the electronic post office box server. The personal information regarding the user ID information is distributed to the electronic post office box server together with the user ID information, and the electronic post office box server receiving the personal information is provided with the electronic post office box provided for each of the information providing servers. The personal information distributed in the electronic post office box provided for the information providing server of the personal information distribution source is set and registered as the reference information in association with the user ID information. A characteristic information acquisition method.   16. The information acquisition method according to claim 10, wherein when the user terminal receives an information acquisition request from a user, the user terminal transfers the received information acquisition request to the ID management server. The management server stores the user ID information related to the information type of the personal information corresponding to the information type specified by the user as the information acquisition request target among the user ID information set and registered in the association table. All the extracted user ID information is extracted and transmitted to the electronic post office box server to receive the reference information associated with each transmitted user ID information from the electronic post office box server. Then, the received reference information is returned to the requesting user terminal. Broadcast acquisition method.   17. An information acquisition program, wherein the information acquisition method according to claim 10 is implemented as a program executable by a computer.

Images