JP2011141578A - Information management server and information management system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information management server and an information management system for eliminating the need for a user to directly input personal information such as address information and reducing a risk of the leakage of the personal information to an external part as much as possible when a service is provided via the Internet. <P>SOLUTION: The information management server 200 includes a storage part 220 for storing the personal information inputted and transmitted from a client device 100, an issuing program 213b for issuing a reference key to refer to the personal information stored in the storage part 220 to the client device 100 via a network 10, a re-issuing program 213c for updating the reference key issued to the client device 100 into a new reference key at prescribed timing so as to issue the new reference key to the client device 100 via the network 10, and an exclusion program 213d for excluding the reference of the personal information stored in the storage part 220 by any reference key other than the reference key when the new reference key is re-issued. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to an information management server and an information management system for preventing outside leakage of personal address information and the like on a network such as the Internet.

  Currently, in many product sales / distribution services via the Internet, a user accesses a web site for product sales in order to receive services such as shipping of purchased products, and then on the web site. It is necessary to input / send personal information such as address information.

However, while there is a request to receive services such as shipping of the above products, users who are worried about the external leakage of personal information and have resistance to directly entering personal information (especially,
There are many women and elderly people), and there is a problem that such users cannot receive the above services with peace of mind.

Therefore, for example, there is known an information providing system in which personal information transmitted from a terminal by a user is converted into an encrypted code on the server side, and the user can receive a predetermined service using the encrypted code (Patent Literature). 1 etc.).

JP 2002-77132 A

  However, in the information providing system described in Patent Document 1, once the encrypted code leaks from the terminal and is decrypted, there is a risk that personal information easily leaks outside in the subsequent service provision.

Accordingly, an object of the present invention is to provide a service via the Internet, and it is not necessary for the user to directly input personal information such as address information, and the information management server and information that reduce the risk of external leakage as much as possible To provide a management system.

  In order to solve the above problems, the invention according to claim 1 stores personal information input and transmitted from the terminal in an information management server connected to the terminal via a network and bidirectionally transmitting and receiving information. Information management server storage means, issuing means for issuing a reference key for referring to personal information stored by the information management server storage means to the terminal via the network, and the issuing means to the terminal Updating means for updating the issued reference key to a new reference key at a predetermined timing; reissuing means for reissuing the new reference key updated by the updating means to the terminal via the network; and When a new reference key is reissued by the reissuing means, it is stored in the information management server storage means by a reference key other than the reference key. And removing means for eliminating the reference personal information, characterized in that it comprises a.

  The invention according to claim 2 is an information management system configured to include a terminal and an information management server that is connected to the terminal via a network and bidirectionally transmits and receives information. Input means for inputting authentication information and personal information, terminal access means for accessing the information management server based on the authentication information input by the input means, and after accessing the information management server by the terminal access means Terminal first transmission means for transmitting the personal information input by the input means to the information management server via the network, wherein the information management server is transmitted by the terminal first transmission means Information management server storage means for storing personal information, and for referring to the personal information stored by the information management server storage means Issuing means for issuing a reference key to the terminal via the network, updating means for updating a reference key issued to the terminal by the issuing means to a new reference key at a predetermined timing, and updating by the updating means Reissue means for reissuing the new reference key to the terminal via the network, and when a new reference key is reissued by the reissue means, a reference key other than the reference key is used. And an excluding unit for excluding reference to the personal information stored in the information management server storage unit.

  The invention according to claim 3 is the information management system according to claim 2, wherein the product is connected to the terminal and the information management server via the network and manages the sale of the product designated by the terminal. A server, and a product shipping server that is connected to the product sales server and the information management server via the network and manages shipping of products specified by the terminal, and the terminal includes: Terminal storage means for storing the reference key issued by the issuing means of the information management server, and when the specified product is purchased, the reference key stored in the terminal storage means is stored in the product sales server via the network. Terminal second transmission means for transmitting, wherein the merchandise sales server sends the reference key transmitted by the terminal second transmission means to the network. Product sales server transmitting means for transmitting to the product shipping server via a network, the product shipping server storing personal information stored in the information management server storage means based on a reference key transmitted from the product sales server Reference means for referring to, and shipment arrangement means for arranging shipment of the product designated by the terminal based on the personal information referred to by the reference means, and the predetermined timing of the updating means The timing when the server refers to the personal information by the reference means, and the terminal includes a rewriting means for rewriting the reference key stored in the terminal storage means to the reference key reissued by the reissue means. It is characterized by.

According to the present invention, in an information management server connected to a terminal via a network, personal information (for example, name, age, address, telephone number, e-mail number, etc.) input and transmitted from the terminal is stored in the information management server. It is configured so that it can be referred to by a reference key stored in the storage means and issued by the information management server to the terminal.
In other words, a user can receive a service without directly entering personal information by providing the service through a network such as the Internet and transmitting the issued reference key to a predetermined service providing site. Is possible.
Further, the reference key is updated at a predetermined timing (for example, every time a series of product sales / distribution services is finished), reissued to the terminal, and a reference key other than the reissued reference key is used. The personal information reference is excluded. For this reason, even if an external / third party can know the reference key at a certain point in time, the reference key is sequentially updated at the predetermined timing, so that the risk that personal information is widely disseminated is low.
Therefore, the present invention provides an information management server and an information management system for providing services via the Internet, in which the user does not have to directly input personal information such as address information, and the risk of external leakage is reduced as much as possible. You can say that.

1 is a block diagram of an information management system according to the present invention. It is a flowchart regarding the reference key issuing process of the information management system which concerns on this invention. It is a flowchart regarding the goods purchase dispatch process of the information management system which concerns on this invention. It is a flowchart regarding the goods purchase dispatch process of the information management system which concerns on this invention.

  Hereinafter, embodiments of the present invention will be described with reference to FIGS.

  The information management system 1 includes, for example, a network 10, a client device 100 (terminal), an information management server 200, a product sales server 300, and a product shipping server 400, as shown in the block diagram of FIG. The system provides a product purchase / shipment service on the network 10.

  The network 10 is composed of, for example, a communication network for the Internet, and the client device 100, the information management server 200, the product sales server 300, and the product shipping server 400 communicate with each other via the network 10. It is possible to send and receive information in both directions.

  The client device 100 is an information terminal device having a communication function for the Internet such as a personal computer or a mobile phone, for example, and a control unit 110 that performs overall control of the client device 100 and an operation for inputting personal information and the like. An input operation unit 120 (input unit), a storage unit 130 (terminal storage unit) for storing predetermined information, and a communication unit 140 for communicating with the information management server 200 and the product sales server 300 via the network 10 (Terminal access means, terminal first transmission means, terminal second transmission means), and the like.

  The input operation unit 120 includes, for example, an input device such as a keyboard and a mouse, various switches / buttons, and the like, and enables a character input operation, a selection / determination operation, and the like by a user. The input operation unit 120 inputs authentication information (for example, login ID and login password) on the information management site displayed when the browser program 113a described later is executed and personal information (for example, name, age, address, (Phone number, e-mail number, etc.) can be entered / changed, and a product to be purchased can be specified on the product sales site.

  The storage unit 130 is composed of, for example, an HDD (Hard Disk Drive) or the like, and has a reference key for referring to personal information issued to the client device 100 by executing an issue program 213b of the information management server 200 described later. Remember. Further, the reference key stored in the storage unit 130 becomes a new reference key each time a reference key updated from the information management server 200 is reissued by executing a reference key storage program 113b described later. Rewritten.

  The control unit 110 includes, for example, a CPU (Central Processing Unit) 111, a RAM (Random Access Memory) 112, a ROM (Read Only Memory) 113, and the like, and comprehensively controls the configuration of each unit of the client device 100. To do.

  For example, the CPU 111 performs various control processes in accordance with a processing program for executing various functions provided in the client device 100 stored in the ROM 113.

  The RAM 112 includes, for example, a program storage area for developing a processing program executed by the CPU 111, a data storage area for storing a processing result generated when the input data and the processing program are executed, and the like.

  The ROM 113 is, for example, a system program that can be executed by the client device 100, various processing programs that can be executed by the system program, data that is used when these various processing programs are executed, and various processing results that are arithmetically processed by the CPU 111. The data etc. are memorized. Specifically, the ROM 113 stores a browser program 113a (terminal access means), a reference key storage program 113b (terminal storage means, rewriting means), and the like.

The browser program 113a is a program that causes the CPU 111 to execute a function for browsing a website or the like.
Specifically, when the CPU 111 executes the browser program 113a, for example, when the user designates a predetermined URL (Uniform Resource Locators) using the input operation unit 120, the information management site provided by the information management server 200, the product It is possible to access a product sales site (for example, a shopping site or an auction site) provided by the sales server via the network 10 and display the content on a display screen (not shown) of the client device 100. It has become.
Furthermore, since it is possible to input predetermined information on the display screen by the input operation unit 120 and transmit the information to the site being accessed, for example, the information is input via the input operation unit 120. It is possible to access the information management server 200 by inputting authentication information on the management site.
Therefore, the CPU 111 functions as a terminal access unit by executing the browser program 113a.

The reference key storage program 113b stores a reference key issued by the information management server 200 in the storage unit 130, and has a function of rewriting the stored reference key with a reference key reissued by the information management server 200 in the CPU 111. It is a program to be executed.
Specifically, for example, when an issue program 213b of the information management server 200 described later is executed and a reference key is received via the communication unit 140, the CPU 111 executes the reference key storage program 113b and receives the received reference. The key is stored in the storage unit 130. Furthermore, when the reissue program 213c of the information management server 200 described later is executed and the updated reference key is received via the communication unit 140, the CPU 111 updates the reference key stored in the storage unit 130 as described above. Rewrite the reference key.
Therefore, the CPU 111 functions as a terminal storage unit and a rewrite unit by executing the reference key storage program 113b.

The communication unit 140 is composed of a communication device for connecting to the network 10 such as a modem, for example, and enables the information management server 200, the product sales server 300, and the product shipping server 400 to communicate with each other. .
In addition, the communication unit 140 transmits personal information and authentication information to the information management server 200 via the network 10, and a reference key is transmitted from the information management server 200 to the reception / product sales server 300. Therefore, the communication unit 140 functions as a terminal access unit, a terminal first transmission unit, and a terminal second transmission unit.

The information management server 200 is, for example, a database server that stores / manages personal information input by the user, and includes a control unit 210 that performs overall control of the information management server 200 and a storage unit 220 that stores the personal information (information Management server storage means), a communication unit 230 (issuing means, reissuing means) for communicating with the client device 100, the product sales server 300, and the product shipping server 400 via the network 10, and the like.
The information management server 200 also functions as a web server that provides an information management site. The information management site inputs, changes, and deletes an authentication information input screen for inputting authentication information and personal information. To present personal information input screens, etc.

The storage unit 220 stores, for example, a database of personal information input / changed by the user via the input operation unit 120 of the client device 100 and stores a reference key (data) issued by executing an issue program 212b described later. The personal information can be referred to by a reference key).
In addition, the storage unit 220 stores user list data in which user identification information such as a user's name and name, and a login ID and a login password that constitute authentication information are associated with each user.
That is, the client device 100 (the user of the client device 100) and the product shipping server 400 (the operator of the product shipping server 400) each have unique authentication information, and information management is performed by executing an authentication confirmation program 213a described later. It is configured to uniquely identify users who access the site.
Here, the personal information stored in the storage unit 220 is subjected to encryption processing using a predetermined encryption method or the like. A decryption key for decrypting the encryption process is given only to the administrator of the information management server 200. Therefore, even a person who has the authority to access the information management server 200 cannot view the personal information unless a decryption key is obtained, so the confidentiality of the personal information in the storage unit 220 is ensured. The
The reference key may be any key that enables database reference, and may be, for example, a combination of alphabets and numbers, a barcode, or a QR code.

  The control unit 210 is configured to include, for example, a CPU 211, a RAM 212, a ROM 213, and the like, and comprehensively controls each unit configuration of the information management server 200.

  For example, the CPU 211 performs various control processes according to a processing program for executing various functions provided in the information management server 200 stored in the ROM 213.

  The RAM 212 includes, for example, a program storage area for developing a processing program executed by the CPU 211, a data storage area for storing input data, a processing result generated when the processing program is executed, and the like.

  The ROM 213 includes, for example, a system program that can be executed by the information management server 200, various processing programs that can be executed by the system program, data that is used when these various processing programs are executed, and various processes that are arithmetically processed by the CPU 211. The result data is stored. Specifically, the ROM 213 stores an authentication confirmation program 213a, an issue program 213b (issue means), a reissue program 213c (update means, reissue means), an exclusion program 213d (exclusion means), and the like. .

The authentication confirmation program 213a is authentication information input by the user at the information management site via the input operation unit 120 of the client device 100, or authentication that the product shipping server 400 transmits to the information management server 200 when the reference program 412a is executed. This is a program for causing the CPU 211 to execute a function of confirming the suitability of information.
Specifically, when the CPU 211 executes the authentication confirmation program 213a, a predetermined login ID and login password input by the user on the information management site, or a login transmitted from the product shipping server 400 to the information management server 200 It is confirmed whether or not the ID and login password match the login ID and login password of the user list data stored in the storage unit 220, and it is determined whether or not access to the information management site is appropriate.

The issuance program 213b is a program for causing the CPU 211 to execute a function of issuing a reference key for referring to personal information stored in the storage unit 220 to the client device 100 via the network 10.
Specifically, when personal information is transmitted from the client device 100 and stored in the storage unit 220 as a database, the CPU 211 executes the issuing program 213b and generates a reference key for referring to the personal information. Then, the CPU 211 issues the generated reference key to the client device 100 via the communication unit 230.
Therefore, the CPU 211 functions as an issuing unit by executing the issuing program 213b.

The reissue program 213c has a function of updating the reference key issued to the client device 100 by executing the issue program 213b to a new reference key at a predetermined timing and reissuing the client device 100 via the network 10 to the CPU 211. It is a program to be executed.
Specifically, for example, at the timing when the merchandise shipping server 400 executes a reference program 413a described later and refers to personal information using a reference key held by itself, the CPU 211 executes the reissue program 213c, and the storage unit The reference key for referring to the personal information stored in 220 is updated to a new reference key. Then, the CPU 211 reissues the updated reference key to the client device 100 via the communication unit 230.
Therefore, the CPU 211 functions as a reissue means and an update means by executing the reissue program 213c.

The exclusion program 213d has a function of excluding the reference of personal information stored in the storage unit 220 by a reference key other than the reference key when a new reference key is reissued by executing the reissue program 213c. This is a program to be executed.
Specifically, after the CPU 211 executes the reissue program 213c and issues an updated reference key to the client device 100, the personal information is referenced even if a reference key other than the reference key is transmitted to the communication unit 230. The setting of the database in the storage unit 220 is changed so that it cannot be performed. That is, the reference key used for the reference is invalidated and the updated reference key is reissued at the timing when the product shipping server 400 once refers to the personal information (the timing at which a series of product sales / distribution services ends). Since only the user (client device 100) can refer to the personal information, the security of the personal information is maintained.
Therefore, the CPU 211 functions as an exclusion unit by executing the exclusion program 213d.

The communication unit 230 includes, for example, a communication device for connecting to the network 10 such as a modem. The communication unit 230 communicates with the client device 100, the product sales server 300, and the product shipping server 400 together with the network 10. It is possible.
Further, since the reference key is issued / reissued to the client device 100 by the communication unit 230 via the network 10, the communication unit 230 functions as an issuing unit and a reissuing unit.

The merchandise sales server 300 includes, for example, a control unit 310 that performs overall control of the merchandise sales server 300, a storage unit 320 that stores predetermined information, and the client device 100, the information management server 200, and product shipping via the network 10. A communication unit 330 (commodity sales server transmission means) for communicating with the server 400, and the like.
The product sales server 300 also functions as a web server that provides a product sales site such as a shopping site or an auction site, and the product sales site provides a procedure for a user to purchase a product (for example, a product A product purchase screen for specifying the type / number of purchases, payment method, reference key transmission, etc. is presented.

  The control unit 310 includes, for example, a CPU 311, a RAM 312, a ROM 313, and the like, and comprehensively controls each unit configuration of the merchandise sales server 300.

  For example, the CPU 311 performs various control processes in accordance with a processing program for executing various functions provided in the commodity sales server 300 stored in the ROM 313.

  The RAM 312 includes, for example, a program storage area for developing a processing program executed by the CPU 311, a data storage area for storing input data, a processing result generated when the processing program is executed, and the like.

  The ROM 313 includes, for example, a system program that can be executed by the merchandise sales server 300, various processing programs that can be executed by the system program, data that is used when these various processing programs are executed, and various processes that are arithmetically processed by the CPU 311. The result data is stored. Specifically, the ROM 313 stores, for example, a transmission program 313a (product sales server transmission unit).

The transmission program 313a has a function of transmitting a reference key transmitted via the communication unit 140 of the client apparatus 100 to the commodity shipping server 400 via the network 10 when purchasing a commodity designated by the user on the commodity sales site. This program is executed by the CPU 311.
Specifically, when the user performs a product purchase procedure via the input operation unit 120 of the client device 100 on the product sales site and receives a reference key from the client device 100, the CPU 311 executes the transmission program 313a, The received reference key is transmitted to the information management server 200 via the communication unit 330, and it is confirmed whether or not the personal information stored in the storage unit 220 can be referred to by the reference key. If the reference can be made, the CPU 311 transmits the reference key to the product shipping server 400 via the network 10 together with purchase information input by the user during the product purchase procedure. Here, the purchase information is, for example, information necessary for the product shipping server 400 to perform a procedure for shipping the product, such as the type of purchased product, the number of purchases, and the shipping date of the product.
Therefore, the CPU 311 functions as a commodity sales server transmission unit by executing the transmission program 313a.

  The storage unit 320 is composed of, for example, an HDD, and the like, until the confirmation of whether or not the personal information can be referred to by the reference key received from the client device 100 when the transmission program 313a is executed. The reference key is temporarily stored.

The communication unit 330 includes a communication device for connecting to the network 10 such as a modem, for example. The communication unit 330 communicates with the client device 100, the information management server 200, and the product shipping server 400 together with the network 10. It is possible.
In addition, the communication unit 330 transmits the reference key stored in the storage unit 320 to the information management server 200 and the product shipping server 400 via the network 10. It functions as a sales server transmission means.

  The product shipping server 400 includes a control unit 410 that performs overall control of the product shipping server 400, a storage unit 420 that stores purchase information and reference keys transmitted from the product sales server 300, and the client device 100 via the network 10. And a communication unit 430 for communicating with the information management server 200 and the product sales server 300, and performs a procedure for shipping products purchased on the product sales site by the user.

  The storage unit 420 includes, for example, an HDD and the like, and is received via the communication unit 430 when executing the authentication information of the product shipping server 400 for accessing the information management site and the transmission program 313a of the product sales server 300. Stored purchase information, reference keys, and the like.

  The control unit 410 is configured to include, for example, a CPU 411, a RAM 412, a ROM 413, and the like, and comprehensively controls each unit configuration of the commodity shipping server 400.

  For example, the CPU 411 performs various control processes in accordance with a processing program for executing various functions provided in the commodity shipping server 400 stored in the ROM 413.

  The RAM 412 includes, for example, a program storage area for expanding a processing program executed by the CPU 411, a data storage area for storing a processing result generated when the input data and the processing program are executed, and the like.

  The ROM 413 is, for example, a system program that can be executed by the product shipping server 400, various processing programs that can be executed by the system program, data that is used when these various processing programs are executed, and various processes that are arithmetically processed by the CPU 411. The result data is stored. Specifically, the ROM 413 includes, for example, a reference program 413a (reference means), a shipment arrangement program 413b (shipment arrangement means), and the like.

The reference program 413 a is a program that causes the CPU 411 to execute a function of referring to personal information stored in the storage unit 220 of the information management server 200 based on the reference key transmitted from the merchandise sales server 300.
Specifically, when purchase information or a reference key is received from the product sales server 300 via the communication unit 430, the CPU 411 executes the reference program 412 a and the authentication information of the product shipping server 400 stored in the storage unit 420. To access the information management site via the communication unit 430. The CPU 411 transmits the reference key to the information management server 200 and refers to the personal information stored in the storage unit 220.
Therefore, the CPU 411 functions as a reference unit by executing the reference program 413a.

The shipping arrangement program 413b is a program that causes the CPU 411 to execute a function of arranging the shipping of the product designated by the client device 100 based on the personal information referred to by the execution of the reference program 413a.
Specifically, when the CPU 411 executes the reference program 413a and personal information is referred to, based on the address and telephone number described in the personal information or purchase information stored in the storage unit 420, the product is shipped. Prepare a shipping slip for the customer and arrange for shipping.
Therefore, the CPU 411 functions as a shipping arrangement unit by executing the shipping arrangement program 413b.

The communication unit 430 includes a communication device for connecting to the network 10 such as a modem, for example. The communication unit 430 communicates with the client device 100, the information management server 200, and the product sales server 300 together with the network 10. It is possible.
The communication unit 430 is configured to access the information management server 200 via the network 10 and transmit a reference key to the information management server 200.

(Reference key issue processing)
Next, reference key issuing processing according to the present invention will be described with reference to the flowchart of FIG.

  First, the CPU 111 of the client device 100 executes the browser program 113a, accesses the information management site of the information management server 200, and the user inputs authentication information via the input operation unit 120 (step S1).

Then, the CPU 211 of the information management server 200 executes the authentication confirmation program 213a to determine whether or not the authentication information input by the user is appropriate (step S2).
When the CPU 211 determines that the authentication information is not appropriate (step S2; No), a predetermined error screen is displayed on the information management site (step S3), and the processes after step S1 are repeated.
On the other hand, when the CPU 211 determines that the authentication information is appropriate (step S2; Yes), a personal information input screen is displayed on the information management site (step S4).

  Next, the user performs new input or change of personal information on the personal information input screen by the input operation unit 120 of the client device 100, and transmits the information to the information management server 200 by the communication unit 140 (step S5). The transmitted personal information is received by the information management server 200 via the communication unit 230 and stored in the storage unit 220.

  Next, the CPU 211 of the information management server 200 executes the issue program 213b, creates a reference key for referring to the personal information transmitted in step S5, and issues it to the client device 100 via the communication unit 230. (Step S6).

  Next, the CPU 111 of the client device 100 executes the reference key storage program 113b and stores the reference key transmitted from the information management server 200 in step S6 in the storage unit 130 (step S7).

(Product purchase shipping process)
Next, the merchandise purchase shipping process based on the reference key issued to the client device 100 in the above (reference key issuing process) will be described with reference to the flowcharts of FIGS.

First, the CPU 111 of the client device 100 executes the browser program 113a and accesses the product sales site of the product sales server 300, and the user selects from the products sold on the product sales site via the input operation unit 120. Suppose that a predetermined product is designated (step S11).
Then, the product sales server 300 displays a product purchase screen on the product sales site (step S12).

  Next, the user performs a purchase procedure for the product specified in step S11 by using the input operation unit 120 of the client device 100, and transmits purchase information and a reference key to the product sales server 300 via the communication unit 140 (step S13). .

Next, the CPU 311 of the merchandise sales server 300 executes the reference key transmission program 312a, and transmits the reference key transmitted in step S13 to the information management server 200 (step S14).
Then, the CPU 211 of the information management server 200 confirms the consistency of the reference key transmitted in step S14 (determines whether the personal information stored in the storage unit 220 can be referred to by the reference key), The confirmation result is transmitted to the product sales server 300 (step S15).
Next, when the CPU 311 of the product sales server 300 transmits a result indicating that the consistency is not confirmed from the information management server 200 in step S15 (step S16; No), a predetermined error screen is displayed on the product sales site. Is displayed (step S17), and the processing after step S13 is repeated.
On the other hand, when the CPU 311 of the product sales server 300 transmits a result indicating that the consistency is confirmed from the information management server 200 in step S15 (step S16; Yes), the product sales server 300 includes the communication unit 330. Then, the reference key and purchase information are transmitted to the product shipping server 400 (step S18).

Next, the CPU 411 of the product shipping server 400 executes the reference program 413a, accesses the information management server 200 using the authentication information in the storage unit 420, executes the acquisition program 412b, and in step S18, the product sales server The reference key acquired from 300 is transmitted to the information management server 200 (step S19).
Then, the CPU 211 of the information management server 200 discloses (refers to) the merchandise shipping server 400 with the personal information stored in the storage unit 220 using the reference key transmitted in step S19 (step S20).

  Next, the CPU 411 of the merchandise shipping server 400 executes the shipping arrangement program 413b, and arranges the shipping of the merchandise purchased in step S13 to the user based on the personal information and the purchase information referred to in step S20 ( Step S21).

  Next, when the CPU 211 of the information management server 200 causes the product shipping server 400 to refer to the personal information in step S20, the reissue program 213c is executed, and a reference key for referring to the personal information stored in the storage unit 220 Is updated to a new reference key and reissued to the client device 100 via the communication unit 230 (step S22).

  Next, the CPU 111 of the client device 100 executes the reference key storage program 113b, and rewrites the reference key stored in the storage unit 130 in step S7 with the reference key reissued in step S22 (step S23).

  Next, when the CPU 211 of the information management server 200 reissues the reference key to the client device 100 in step S22, the CPU 211 executes the exclusion program 213d and uses the reference key other than the reissued reference key to store the storage unit 220. The setting of the database is changed so that the reference to the personal information stored in (2) is excluded (step S24).

  As described above, the information management server 200 according to the present invention is connected to the client device 100 via the network 10 and stores the personal information input and transmitted from the client device 100 and the storage unit 220. The issue program 213b for causing the CPU 211 to execute a function of issuing a reference key for referring to the personal information to the client device 100 via the network 10 and a new reference key issued to the client device 100 at a predetermined timing. The reissue program 213c that updates the reference key and issues the function issued to the client apparatus 100 via the network 10 to the CPU 211, and when a new reference key is reissued, the reference key other than the reference key is used. Eliminate references to personal information stored in storage unit 220 And elimination program 212d to perform that function in CPU 211, configured with a.

In other words, according to the information management server 200, the user provides service via the network 10 such as the Internet, and directly inputs personal information by transmitting the issued reference key to a predetermined service providing site or the like. Even without this, it is possible to receive services.
Further, the reference key is updated at a predetermined timing (for example, every time a series of product sales / distribution services is completed), reissued to the client device 100, and a reference key other than the reissued reference key is used. In such a case, reference to personal information is excluded. For this reason, even if an external / third party can know the reference key at a certain point in time, the reference key is sequentially updated at the predetermined timing, so that the risk that personal information is widely disseminated is low.
Therefore, the information management server 200 is an information management server that provides services via the Internet and does not require the user to directly input personal information such as address information, and reduces the risk of external leakage as much as possible. It can be said.

In the information management system 1 including the client device 100 and the information management server 200, the client device 100 includes an input operation unit 120 that inputs authentication information and personal information, and an input operation unit 120. A browser program 113a that causes the CPU 111 to execute a function of accessing the information management server 200 (information management site) based on the input authentication information, and an individual input by the input operation unit 120 after accessing the information management server 200 And a communication unit 140 that transmits information to the information management server 200 via the network 10.

That is, according to the information management system 1, the input operation unit 120 can be obtained before the personal information is transmitted from the client device 100 to the information management server 200, as well as the same effect as the information management server 200 described above. Since it is necessary to access the information management server 200 based on the authentication information input in step 3, the risk of personal information being viewed or falsified by a third party against the user's will can be avoided. I can do it.

  In addition, the information management system 1 is connected to the client device 100 and the information management server 200 via the network 10, and manages a product sales server 300, a product sales server 300, and information that manage sales of products specified by the client device 100. A product shipping server 400 that is connected to the management server 200 via the network 10 and manages the shipping of products specified by the client device 100. The client device 100 is issued by the information management server 200. And a communication unit 140 that transmits the reference key stored in the terminal storage unit to the product sales server via the network when the designated product is purchased. The product sales server 300 is referred to by the communication unit 140. A transmission program 313a for causing the CPU 311 to execute a function of transmitting the message to the product shipping server 400 via the network 10, and the product shipping server 400 uses the reference key transmitted from the product sales server 300 to A reference program 413a for causing the CPU 411 to execute a function for referring to the personal information stored in the storage unit 220, and a dispatch for causing the CPU 411 to execute a function for arranging shipment of a product designated by the client device 100 based on the referenced personal information. A predetermined timing related to the execution of the reissue program 213c of the CPU 211 is a timing when the commodity shipping server 400 refers to the personal information, and the client device 100 refers to the reference stored in the storage unit 130. Reissue the key above A function for rewriting the reference key comprises a reference key storage program 113b to be executed by the CPU 111.

  In other words, in the information management system 1 including the product sales server 300 and the product shipping server 400 and capable of providing a product purchase / shipment service on the network 10, the information management server 200 updates the reference key. Since the timing is the timing at which the merchandise shipping server 400 that has received the reference key from the merchandise sales server 300 arranges the shipping of the merchandise (refers to the personal information), a series of merchandise purchase / shipping services by the information management system 1 is performed. It can be said that the reference key is updated every time the process ends. Therefore, even if the reference key is illegally acquired / distributed from the product sales server 300 (on the product sales site) after the product purchase / shipment service ends, the reference key for the personal information in the information management server 200 has already been updated. Therefore, personal information is not leaked from the information management server 200.

  Note that the present invention is not limited to the above-described embodiment, and may be modified as appropriate without departing from the spirit of the present invention.

For example, in the above-described embodiment, the predetermined timing is the timing at which the product shipping server 400 refers to the personal information. For example, when the product dispatched by the product shipping server 400 is delivered to the user, the client device 100 The information management server 200 may be further notified that the information has been delivered, and the timing at which the notification is received may be a predetermined timing.
Further, the product sales server 300 and the product shipping server 400 are not necessarily servers provided in the information management system 1, and may be servers that provide services such as product sales and shipping in an external system. Of course.
In the above-described embodiment, the product sales / distribution service is exemplified as a service via a network such as the Internet. However, as long as it is a service that transmits / receives personal information managed by the information management server 200 via the network Can be applied.

1 Information management system 10 Network 100 Client device (terminal)
110 control unit 111 CPU (terminal access means, terminal storage means, rewrite means)
113 ROM
113a Browser program (terminal access means)
113b Reference key storage program (terminal storage means, rewrite means)
120 Input operation unit (input means)
130 Storage unit (terminal storage means)
140 Communication unit (terminal access means, terminal first transmission means, terminal second transmission means)
200 Information management server 210 Control unit 211 CPU (conversion means, reverse conversion means, issue means, confirmation means, personal information transmission means)
213 ROM
213a Authentication confirmation program 213b Issuing program (issuing means)
213c Reissue program (update means, reissue means)
213d Exclusion program (exclusion means)
220 Storage unit (information management server storage means)
230 Communication unit (issuing means, reissuing means)
300 Product Sales Server 310 Control Unit 311 CPU (Product Sales Server Transmission Unit)
313 ROM
313a transmission program (product sales server transmission means)
320 storage unit 330 communication unit (product sales server transmission means)
400 commodity shipping server 410 control unit 411 CPU (reference means, shipping arrangement means)
413 ROM
413a Reference program (reference means)
413b Shipping arrangement program (shipment arrangement means)
420 storage unit 430 communication unit

Claims (3)

In an information management server that is connected to a terminal via a network and performs bidirectional transmission and reception of information,
Information management server storage means for storing personal information input and transmitted from the terminal;
Issuing means for issuing a reference key for referring to the personal information stored by the information management server storage means to the terminal via the network;
Updating means for updating the reference key issued to the terminal by the issuing means to a new reference key at a predetermined timing;
Reissuing means for reissuing the new reference key updated by the updating means to the terminal via the network;
When a new reference key is reissued by the reissuing means, an excluding means for excluding reference to personal information stored in the information management server storage means by a reference key other than the reference key;
An information management server comprising: In an information management system comprising a terminal and an information management server connected to the terminal via a network and bidirectionally transmitting and receiving information,
The terminal
An input means for inputting authentication information and personal information;
Terminal access means for accessing the information management server based on the authentication information input by the input means;
Terminal first transmission means for transmitting personal information input by the input means to the information management server via the network after accessing the information management server by the terminal access means;
With
The information management server
Information management server storage means for storing personal information transmitted by the terminal first transmission means;
Issuing means for issuing a reference key for referring to the personal information stored by the information management server storage means to the terminal via the network;
Updating means for updating the reference key issued to the terminal by the issuing means to a new reference key at a predetermined timing;
Reissuing means for reissuing the new reference key updated by the updating means to the terminal via the network;
When a new reference key is reissued by the reissuing means, an excluding means for excluding reference to personal information stored in the information management server storage means by a reference key other than the reference key;
An information management system comprising: In the information management system according to claim 2,
Connected to the terminal and the information management server via the network, and connected to the product sales server for managing the sale of the product designated by the terminal, the product sales server and the information management server via the network. A product shipping server that manages the shipping of products specified by the terminal, and
The terminal
Terminal storage means for storing the reference key issued by the issuing means of the information management server;
Terminal second transmission means for transmitting a reference key stored in the terminal storage means to the product sales server via the network when purchasing the designated product;
With
The commodity sales server is
Product sales server transmission means for transmitting the reference key transmitted by the terminal second transmission means to the product shipping server via the network,
The product shipping server is
Reference means for referring to personal information stored in the information management server storage means based on a reference key transmitted from the product sales server;
Dispatch arrangement means for arranging shipment of a product designated by the terminal based on the personal information referred to by the reference means;
With
The predetermined timing of the updating means is a timing when the commodity shipping server refers to the personal information by the referring means,
The terminal
An information management system comprising: rewriting means for rewriting a reference key stored in the terminal storage means with a reference key reissued by the reissue means.

Images