JP2014235708A - Information processing apparatus, information processing method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To reduce a modification amount of an existing system in an information retention institution, and improve efficiency of personal information inquiry processing.SOLUTION: A personal number storage unit 112 stores therein a personal number management table that shows encrypted personal numbers obtained by encrypting personal numbers stored in a plurality of information retention institution apparatuses, and that indicates two or more encrypted personal numbers of the same person while being associated with one another. A communication unit 113 receives an inquiry message, from one of the information retention institution apparatuses, to request transmission of personal information including the encrypted personal numbers obtained by encrypting the personal numbers stored in the information retention institution apparatus and stored in the other information retention institution apparatuses. A persona number management unit 111 extracts the encrypted personal numbers stored in the other information retention institution apparatuses associated with the encrypted personal numbers in the inquiry message, and replaces the encrypted personal numbers in the inquiry message with the extracted encrypted personal numbers. The communication unit 113 transmits the inquiry message after replacement to the other information retention institution apparatuses.

Description

  The present invention relates to a technology for linking personal information held by a plurality of information holding organizations.

As shown in Non-Patent Document 1, the conventional personal number linkage system is composed of a plurality of information holding organizations each holding personal information and an information linkage platform for performing information linkage between a plurality of information holding organizations. ing.
Each information holding organization manages a code, a personal number, and personal information in association with each other.
The information linkage platform converts the personal code into a code for each individual of the information holding organization that is inquired when there is an inquiry from a certain information holding organization about personal information held by another information holding organization. The received code is notified to the information holding organization of the inquiry destination.
For this reason, the individual number managed by the information holding organization of the inquiry destination is not notified to the information holding organization of the inquiry source, and even if the information holding organizations collide, the personal numbers managed by each other are the same person The information holding organization can inquire personal information to other information holding organizations without being able to determine that the number is the same number.

Cabinet Secretariat Social Security Reform Office, “Information provision network system overall function configuration diagram (draft)”, Information Collaboration Technology WG (8th), March 23, 2012

In the conventional personal number linkage method, when an information holding organization intends to perform new information linkage, the information holding organization will set the code assigned to each individual issued by the information linkage base for each information holding organization and each information holding organization. A function to manage a table that associates personal numbers managed in the system must be constructed.
For this reason, there is a problem that the amount of renovation of the existing system for information cooperation is large for the information holding organization.

  In addition, when an information holding organization inquires of another information holding organization for personal information, (1) a search for a corresponding code from the personal number at the inquiry source, and (2) a personal code from the inquiry source code at the information linkage platform Numbers are linked in four steps: (3) calculation from the personal code in the information linkage platform to the corresponding code of the inquired information holding organization, and (4) retrieval of the personal number from the code in the inquiry destination There has been a problem that the inquiry processing of personal information is inefficient.

  The main object of the present invention is to solve the above-mentioned problems, and the main object is to reduce the amount of modification of an existing system in an information holding organization and to improve the efficiency of personal information inquiry processing.

An information processing apparatus according to the present invention includes:
Each of the information processing devices connected to a plurality of information holding devices each storing a personal number and personal information,
A plurality of encrypted personal numbers obtained by encrypting a plurality of personal numbers stored in the plurality of information holding devices are indicated, and two or more encrypted personal numbers for the same person are shown in association with each other. An encrypted personal number information storage unit for storing personal number information;
A transmission request for requesting transmission of personal information stored in another information holding device, including an encrypted personal number obtained by encrypting the personal number stored in the information holding device from any information holding device A receiver for receiving the message;
An encrypted personal number extracting unit that extracts an encrypted personal number of the other information holding device associated with the encrypted personal number included in the transmission request message from the encrypted personal number information;
A message generating unit that includes the encrypted personal number extracted by the encrypted personal number extracting unit, and that generates a transmission instruction message instructing transmission of personal information requested in the transmission request message;
And a transmission unit that transmits the transmission instruction message generated by the message generation unit to the other information holding device.

Since the information processing apparatus according to the present invention stores two or more encrypted personal numbers for the same person in association with each other, it is not necessary to use a code for each person.
For this reason, it is not necessary to associate the code with the personal number in the information holding device, and it is not necessary to change the information managed in the information holding device even when performing new cooperation.
The information processing apparatus according to the present invention instructs other information holding apparatuses to transmit personal information using the encrypted personal number associated with the encrypted personal number included in the transmission request message.
Therefore, query source code search using the query source personal number, query source code to personal code conversion, personal code to query destination code, query destination code using query destination code The process of searching for a personal number can be made unnecessary.

1 is a diagram illustrating a configuration example of a personal information exchanging system according to Embodiment 1. FIG. FIG. 3 is a diagram illustrating a configuration example of an information cooperation infrastructure device according to the first embodiment. FIG. 4 is a diagram showing an example of a personal number management table according to the first embodiment. The figure which shows the structural example of the information holding engine apparatus which concerns on Embodiment 1. FIG. FIG. 4 is a diagram showing an example of a personal information management table according to the first embodiment. FIG. 3 is a flowchart showing a processing procedure in the personal information exchange system according to the first embodiment. The figure which shows the structural example of the personal number registration system which concerns on Embodiment 2. FIG. FIG. 4 is a diagram illustrating a configuration example of a personal code management device according to a second embodiment. The figure which shows the example of the personal code management table which concerns on Embodiment 2. FIG. The figure which shows the structural example of the information cooperation infrastructure apparatus which concerns on Embodiment 2. FIG. The figure which shows the example of the personal number management table which concerns on Embodiment 2. FIG. The figure which shows the example of the information holding engine apparatus which concerns on Embodiment 2. FIG. The flowchart figure which shows the process sequence in the personal number registration system which concerns on Embodiment 2. FIG. The figure which shows the hardware structural example of the information cooperation infrastructure apparatus which concerns on Embodiment 1 and 2. FIG.

Embodiment 1 FIG.
FIG. 1 shows a configuration example of a personal information exchange system according to the present embodiment.

In FIG. 1, the information linkage infrastructure device 101 manages the association of personal numbers managed by each information holding organization and converts them to each other as necessary.
The information holding institution apparatus A 102 manages personal information held by the information holding institution A, and inquires other information holding institution apparatuses for personal information as necessary.
The information holding institution apparatus B103 is an apparatus owned by the information holding institution B having the same function as the information holding institution apparatus A102.
Each of the information holding institution apparatus A102 and the information holding institution apparatus B103 stores a personal number and personal information in association with each other.
The information cooperation infrastructure apparatus 101 corresponds to an example of an information processing apparatus, and the information holding institution apparatus A102 and the information holding institution apparatus B103 correspond to an example of an information holding apparatus.
In FIG. 1, the number of information holding institution apparatuses included in the personal information exchange system is two, but the number of information holding institution apparatuses may be three or more.

  FIG. 2 shows a configuration example of the information cooperation infrastructure device 101.

In FIG. 2, the personal number storage unit 112 stores a personal number management table in which encrypted personal numbers for each information holding organization for the same individual are shown in association with each other.
That is, in the personal number management table, an encrypted personal number in which the personal number stored in the information holding institution apparatus A102 is encrypted and an encryption in which the personal number stored in the information holding institution apparatus B103 is encrypted. And an encrypted personal number of the same person are shown in association with each other.
The personal number storage unit 112 corresponds to an example of an encrypted personal number information storage unit.

The communication unit 113 transmits personal information stored in a certain information holding institution apparatus (hereinafter referred to as information holding institution apparatus A102) to another information holding institution apparatus (hereinafter referred to as information holding institution apparatus B103). An inquiry message (corresponding to a transmission request message) requesting transmission is received.
This inquiry message includes an encrypted personal number obtained by encrypting the personal number stored in the information holding institution A 102 that is the inquiry source.
Further, the communication unit 113 transmits an inquiry message (corresponding to a transmission instruction message) generated by the personal number management unit 111 described later to the information holding institution apparatus B103.
Furthermore, the communication unit 113 receives an answer message (corresponding to a transmission instruction response message) that is a response to the inquiry message from the information holding institution apparatus B103.
The communication unit 113 transmits an answer message (corresponding to a transmission request response message) generated by the personal number management unit 111 described later to the information holding institution apparatus A102.
The communication unit 113 corresponds to an example of a reception unit and a transmission unit.

The personal number management unit 111 reads the personal number management table from the personal number storage unit 112, refers to the personal number management table, and refers to the encrypted personal number of the inquiry destination corresponding to the encrypted personal number of the inquiry source included in the inquiry message. Extract the number.
Then, the personal number management unit 111 includes the extracted encrypted personal number of the inquiry destination, and an inquiry message (corresponding to a transmission instruction message) requesting transmission of personal information requested by the information holding institution apparatus A102 of the inquiry source. Is generated.
Further, referring to the personal number management table, the encrypted personal number of the inquiry source corresponding to the encrypted personal number of the inquiry destination included in the reply message (corresponding to the transmission instruction response message) received by the communication unit 113 is extracted. .
Then, the personal number management unit 111 includes an answer message (corresponding to a transmission request response message) including the extracted encrypted personal number of the inquiry source and including the personal information provided by the information holding institution device B 103 of the inquiry destination. Generate.
The personal number management unit 111 corresponds to an example of an encrypted personal number extraction unit and a message generation unit.

  FIG. 3 shows an example of a personal number management table held by the personal number storage unit 112.

In FIG. 3, each row (horizontal direction) corresponds to one individual and holds an encrypted personal number for each information holding organization assigned to the individual.
The encrypted personal number in the information holding organization B indicating the same individual as the encrypted personal number A (n) converted from the personal number A (n) assigned by the information holding organization A is the encrypted personal number B (n). It shows that there is.

FIG. 4 shows a configuration example of the information holding institution apparatus A102.
The information holding institution apparatus B103 is also configured by means equivalent to the information holding institution apparatus A102.

  In FIG. 4, a personal information inquiry unit 121 makes an inquiry about personal information held by another information holding organization and an inquiry from another information holding organization to another information holding organization.

  The personal number conversion unit 122 performs conversion processing between the personal number and the encrypted personal number of the information holding institution apparatus A102 in issuing a personal information query, receiving a query, receiving a query, and receiving a response.

  In the personal information inquiry, the personal information management unit 123 performs an inquiry process with respect to the other information holding institution B103, and in accepting the inquiry, the personal information management unit 123 refers to the personal information management table of the personal information storage unit 124 and applies the corresponding personal information. Implement the process of answering.

  The personal information storage unit 124 stores the personal information held by the information holding organization A in association with the personal number assigned by the information holding organization A.

  The communication unit 125 transmits and receives messages to and from the information cooperation infrastructure device 101.

The conversion process between the personal number and the encrypted personal number by the personal number conversion unit 122 is a reversible conversion, and a common key encryption method such as AES (Advanced Encryption Standard) is used, for example.
In this case, the personal number conversion unit 122 does not disclose the keys for encryption and decryption to other institutions, and uses them individually for each information holding institution.
It is assumed that the encryption system to be used is a deterministic encryption system (an encryption system whose ciphertext is uniquely determined by plaintext is a deterministic encryption system).

  FIG. 5 shows an example of a personal information management table held in the personal information storage unit 124 of the information holding institution apparatus A102.

In FIG. 5, each row (horizontal direction) corresponds to one individual, and holds personal information corresponding to attributes of each information holding organization assigned to the individual.
The personal information corresponding to the attribute A (m) of the individual corresponding to the personal number A (n) assigned by the information holding organization A is personal information A (n, m).
The personal information storage unit 124 of the information holding institution apparatus B also has a similar table composed of values managed by the information holding institution B.

Next, the operation according to the present embodiment will be described.
The operation is shown in the flowchart of FIG.

First, the personal information management unit 123 of the information holding institution apparatus A102 generates an inquiry message for another information holding institution (S101).
Here, consider a situation in which the information holding organization B is inquired about personal information corresponding to the attribute B (m) of the individual corresponding to the personal number A (n).
At this time, the inquiry message includes an individual number A (n), an attribute B (m), inquiry source information (in this case, information indicating the information holding organization A), and inquiry destination information (in this case, information indicating the information holding organization B). Is included.

Next, the personal number conversion unit 122 of the information holding institution apparatus A102 encrypts the personal number A (n) included in the inquiry message generated by the personal information management unit 123 by conversion processing by reversible conversion. (S102).
At this time, the inquiry message includes the encrypted personal number A (n), attribute B (m), inquiry source information (in this case, information indicating the information holding organization A), and inquiry destination information (in this case, the information holding organization B). Information).
For reversible conversion, a key held by the personal number conversion unit 122 is used as necessary.

  Next, the personal information inquiry unit 121 of the information holding institution apparatus A102 sends an inquiry message to the information cooperation infrastructure apparatus 101 via the communication unit 125 (S103).

Next, the personal number management unit 111 of the information cooperation infrastructure apparatus 101 refers to the personal number management table held by the personal number storage unit 112 and determines the encrypted personal number A (n) included in the inquiry message as inquiry destination information. Based on (in this case, information indicating the information holding institution B), the information is replaced with the encrypted personal number B (n) of the inquiry destination and sent to the information holding institution device B 103 as the inquiry destination (S104).
That is, in the information cooperation infrastructure device 101, the communication unit 113 receives the inquiry message, the personal number management unit 111 refers to the personal number management table held in the personal number storage unit 112, and the information holding institution device A102 is encrypted. The encrypted personal number B (n) of the information holding institution apparatus B103 associated with the personal number A (n) is extracted.
The personal number management unit 111 replaces the encrypted personal number A (n) of the inquiry message with the encrypted personal number B (n), and the communication unit 113 sends the replaced inquiry message to the information holding institution apparatus B103.

  Next, the personal information inquiry unit 121 of the information holding institution apparatus B103 receives an inquiry message via the communication unit 125 (S105).

Next, the personal number conversion unit 122 of the information holding institution apparatus B103 performs the personal number B (n) by converting the encrypted personal number B (n) included in the inquiry message received by the personal information inquiry unit 121 by reversible conversion. And converted to (S106).
At this time, the inquiry message includes personal number B (n), attribute B (m), inquiry source information (in this case, information indicating the information holding organization A), and inquiry destination information (in this case, information indicating the information holding organization B). ) Is included.
For reversible conversion, a key held by the personal number conversion unit 122 is used as necessary.

Next, the personal information management unit 123 of the information holding institution apparatus B103 refers to the personal information management table held by the personal information storage unit 124, and attributes the individual corresponding to the personal number B (n) included in the inquiry message. The personal information B (n, m) corresponding to B (m) is acquired and a reply message is generated (S107).
The reply message includes personal number B (n), personal information B (n, m), and inquiry source information (in this case, information indicating the information holding organization A).

Next, the personal number conversion unit 122 of the information holding institution apparatus B103 encrypts the personal number B (n) included in the reply message generated by the personal information management unit 123 by conversion processing by reversible conversion. It replaces by converting to (S108).
At this time, the inquiry message includes an encrypted personal number B (n), personal information B (n, m), inquiry source information (in this case, information indicating the information holding organization A), and inquiry destination information (in this case, information holding) Information indicating the organization B) is included.
For reversible conversion, a key held by the personal number conversion unit 122 is used as necessary.

  Next, the personal information inquiry unit 121 of the information holding institution apparatus B103 sends an answer message to the information cooperation infrastructure apparatus 101 via the communication unit 125 (S109).

Next, the personal number management unit 111 of the information cooperation infrastructure apparatus 101 refers to the personal number management table held by the personal number storage unit 112 and obtains the encrypted personal number B (n) included in the reply message as inquiry source information. Based on (in this case, information indicating the information holding institution A), the encrypted personal number A (n) of the inquiry source is replaced and sent to the information holding institution device A 102 as the inquiry destination (S110).
That is, in the information cooperation infrastructure device 101, the communication unit 113 receives the reply message, and the personal number management unit 111 refers to the personal number management table held by the personal number storage unit 112, and encrypts the information holding institution device B103. The encrypted personal number A (n) of the information holding institution apparatus A102 associated with the personal number B (n) is extracted.
The personal number management unit 111 replaces the encrypted personal number B (n) in the reply message with the encrypted personal number A (n), and the communication unit 113 sends the replaced inquiry message to the information holding institution apparatus A102. .

  Next, the personal information inquiry unit 121 of the information holding institution apparatus A102 receives the reply message via the communication unit 125 (S111).

Next, the personal number conversion unit 122 of the information holding institution apparatus A102 converts the encrypted personal number A (n) included in the reply message received by the personal information inquiry unit 121 into the personal number A (n) by conversion processing by reversible conversion. Convert and replace (S112).
At this time, the inquiry message includes personal number A (n), personal information B (n, m), inquiry source information (in this case, information indicating information holding organization A), and inquiry destination information (in this case, information holding organization B). Information).
For reversible conversion, a key held by the personal number conversion unit 122 is used as necessary.

  Next, the personal information management unit 123 of the information holding institution apparatus A102 refers to a reply message to another information holding institution (S113).

  As described above, the conversion process by reversible conversion of the personal number is performed in the information holding institution apparatus, and the corresponding encrypted personal number can be extracted in the information holding institution apparatus. Conventionally, four steps are required for number linkage. However, according to the present embodiment, there are three steps (encryption of the personal number at the inquiry source, extraction of the encrypted personal number at the information linkage infrastructure device, and encryption at the inquiry destination while maintaining safety). Only the decryption of the number) is required.

  In addition, since the information-retaining institution device performs number linkage by reversible conversion, it is possible to eliminate the need for management of the number conversion table, and to reduce the amount of modification of the existing system while maintaining safety. be able to.

In the present embodiment, the personal information exchanging apparatus provided with the following means has been described.
(A) An information holding institution apparatus provided with personal number conversion means by reversible conversion.
(B) An information cooperation infrastructure apparatus comprising personal number storage means that manages mapping between encrypted personal numbers and can directly associate encrypted personal numbers between information holding organizations (without using personal codes).

Embodiment 2. FIG.
In the first embodiment described above, the present invention is applied to a business flow in which personal information is inquired to another information holding organization from the information holding organization. An embodiment applied to a business flow in the case where number registration is performed will be described.

Conventionally, in the initial number registration, (1) a request for registration of a number from an information holding organization, (2) a request for generation of a personal code from an information linkage base to a personal code generation organization, (3) from a personal code generation organization There is a problem that the communication efficiency is poor because it requires notification of the personal code to the information cooperation platform and (4) generation and transmission of a code for the information holding organization from the personal code on the information collaboration platform.
In the present embodiment, such a problem is solved.

  FIG. 7 shows a configuration example of the personal number registration system according to the present embodiment.

In FIG. 7, a personal code management apparatus 201 generates a personal code that is uniquely assigned to all target individuals, and manages the personal code in association with basic information related to the individual.
The information cooperation infrastructure device 202 manages the association of personal numbers managed by each information holding organization and converts them to each other as necessary.
The information holding institution apparatus A 203 manages personal information held by the information holding institution A, and inquires the other information holding institution apparatus for personal information as necessary.
Furthermore, the information holding institution apparatus A 203 registers personal information managed by the information holding institution A in the information cooperation infrastructure apparatus 202.
In the present embodiment, the information cooperation infrastructure device 202 corresponds to an example of an information processing device, and the information holding institution device A 203 corresponds to an example of an information holding device.

  FIG. 8 shows a configuration example of the personal code management device 201.

In FIG. 8, the personal code management unit 211 refers to the personal code management table managed by the personal code storage unit 212, processes the personal code request message sent from the information cooperation infrastructure device 202, and responds to the corresponding personal code. Return the code.
The personal code storage unit 212 stores basic information related to an individual and a personal code in association with each other.
The communication unit 213 communicates with the information cooperation infrastructure device 202.

FIG. 9 is a personal code management table held by the personal code storage unit 212.
In FIG. 9, the personal code is a code (number, symbol, etc.) that is uniquely assigned to all targeted individuals, and the basic information is information about the individual (address, name, gender, date of birth, etc.) The correspondence between the two is held by the personal code management table.

  FIG. 10 shows a configuration example of the information cooperation infrastructure device 202.

  The personal number management unit 111 is the same as that shown in FIG.

The communication unit 113 is the same as that shown in FIG.
However, in the present embodiment, the communication unit 113 receives the encrypted personal number registration request message from the information holding institution apparatus A203, and receives the personal code request message generated by the personal number registration unit 221 as the personal code management apparatus. To 201.
Further, the communication unit 113 receives a personal code from the personal code management device 201.

The personal number registration unit 221 receives the encrypted personal number registration request message from the information holding institution apparatus A 203, requests a personal code from the personal code management apparatus 201, and stores the encrypted personal number and the personal number in the personal number storage unit 222. The personal code is associated and registered.
More specifically, the personal number registration unit 221 generates a personal code request message from the encrypted personal number registration request message received from the information holding institution apparatus A203.
Also, the personal number registration unit 221 registers the personal code received from the personal code management device 201 and the encrypted personal number in the personal number storage unit 222 in association with each other.
The encrypted personal number registration request message is a message that contains the basic encrypted information obtained by encrypting the basic information of a specific individual and the encrypted personal number obtained by encrypting the personal number of the specific individual. This message requests registration of a personal number.
The personal code request message is a message that includes the basic encryption information included in the encrypted personal number registration request message and requests the personal code management apparatus 201 to transmit a personal code.
The personal number registration unit 221 corresponds to an example of an encrypted personal number registration unit and a message generation unit.

  The personal number storage unit 222 stores a personal code for the same individual and the encrypted personal number of each information holding organization in association with each other.

FIG. 11 is a personal number management table held by the personal number storage unit 222.
In FIG. 11, each row (horizontal direction) corresponds to one individual, and holds a personal code assigned to the individual and an encrypted personal number for each information holding organization.
The encrypted personal number of the information holding institution A indicating the same individual as the personal code (n) is the encrypted personal number A (n), and the encrypted personal number in the information holding institution B indicating the same individual is encrypted. Indicates personal number B (n).

FIG. 12 is a configuration diagram of the information holding engine apparatus A203.
In FIG. 12, the personal information inquiry unit 121, personal number conversion unit 122, personal information management unit 123, and personal information storage unit 124 are the same as those shown in FIG.
The personal number registration request unit 231 requests the information cooperation infrastructure device 202 to register an encrypted personal number.

Next, the operation according to the present embodiment will be described.
The operation is shown in the flowchart of FIG.

First, the personal number registration request unit 231 of the information holding institution apparatus A203 acquires the personal number A (n) and basic information (n) assigned by the information holding institution A of the individual to be registered, and the personal number is the personal number. The conversion unit 122 converts it into an encrypted personal number A (n), and the basic information (n) is encrypted in the personal number registration request unit 231 and both are included in the encrypted personal number registration request message in the information cooperation base unit 202. Send (S201).
At this time, the basic information (n) is encrypted by an encryption method that cannot be decrypted by the information cooperation infrastructure device 202 but can be decrypted only by the personal code management device 201.
The encrypted personal number registration request message includes basic encryption information (n), encrypted personal number A (n), and registration request source information (in this case, information indicating the information holding organization A).

Next, the personal number registration unit 221 of the information linkage infrastructure apparatus 202 receives the personal number registration request message via the communication unit 113, and requests a personal code including the encrypted basic information (n) of the received personal number registration request message. Generate a message.
Then, the personal number registration unit 221 sends a personal code request message to the personal code management device 201 via the communication unit 113 (S202).

  Next, the personal code management unit 211 of the personal code management apparatus 201 decrypts the basic encryption information (n) included in the personal code request message and refers to the personal code management table managed by the personal code storage unit 212. Then, the corresponding personal code (n) is acquired and sent to the information cooperation infrastructure apparatus 202 (S203).

  Next, the personal number registration unit 221 of the information cooperation infrastructure device 202 receives the personal code (n) via the communication unit 113, and the encrypted personal number A (n) that received the received personal code (n) first. And stored in the personal number storage unit 222.

  As described above, since the information holding institution apparatus performs the conversion process by reversible conversion of the personal number and the encrypted personal number is registered in the information holding institution apparatus, conventionally, four communications are required for the number registration. However, according to the present embodiment, three communications (number registration request from the information holding institution device, request to generate a personal code from the information cooperation infrastructure device to the personal code management device, and personal communication while maintaining safety) Only the notification of the personal code from the code management device to the information linkage infrastructure device) can be required.

  In addition, after the information linkage infrastructure device registers and associates the encrypted personal number of each information holding institution device via a personal code according to the procedure shown in this embodiment, each information holding institution device has another information holding Transmission of personal information held by the engine apparatus can be requested to the information cooperation infrastructure apparatus by the procedure shown in the first embodiment.

In the present embodiment, the personal information exchanging apparatus provided with the following means has been described.
(A) An information holding institution apparatus having a personal number registration requesting means capable of making a personal number registration request led by an information holding institution because it is provided with a personal number conversion means by reversible conversion.
(B) Personal number registration means for managing mapping between encrypted personal numbers and performing number registration in response to a registration request from an information holding organization.
(C) Personal number registration means that does not require disclosure of personal basic information for number registration.

As mentioned above, although embodiment of this invention was described, you may implement in combination of 2 or more among these embodiment.
Alternatively, one of these embodiments may be partially implemented.
Alternatively, two or more of these embodiments may be partially combined.
In addition, this invention is not limited to these embodiment, A various change is possible as needed.

Finally, an example of the hardware configuration of the information cooperation infrastructure apparatuses 101 and 202 shown in the first and second embodiments will be described with reference to FIG.
The information collaboration platform apparatuses 101 and 202 are computers, and each element of the information collaboration platform apparatuses 101 and 202 can be realized by a program.
As a hardware configuration of the information cooperation infrastructure devices 101 and 202, an arithmetic device 901, an external storage device 902, a main storage device 903, a communication device 904, and an input / output device 905 are connected to the bus.

The arithmetic device 901 is a CPU (Central Processing Unit) that executes a program.
The external storage device 902 is, for example, a ROM (Read Only Memory), a flash memory, or a hard disk device.
The main storage device 903 is a RAM (Random Access Memory).
The communication device 904 corresponds to the physical layer of the communication unit 113.
The input / output device 905 is, for example, a mouse, a keyboard, a display device, or the like.

The program is normally stored in the external storage device 902, and is loaded into the main storage device 903 and sequentially read into the arithmetic device 901 and executed.
The program is a program that realizes a function described as “˜unit” (excluding “personal number storage unit” shown in FIGS. 2 and 10, and the same applies hereinafter).
Further, an operating system (OS) is also stored in the external storage device 902. At least a part of the OS is loaded into the main storage device 903. ”Is executed.
In the description of the first and second embodiments, “determination of”, “determination of”, “extraction of”, “detection of”, “setting of”, “registration of”, “ Information, data, signal values, and variable values indicating the results of the processing described as “selection”, “generation of”, “input of”, “output of”, and the like are stored in the main storage device 903 as a file. Has been.
Further, the encryption key / decryption key, random number value, and parameter may be stored in the main storage device 903 as a file.

14 is merely an example of the hardware configuration of the information cooperation infrastructure apparatuses 101 and 202, and the hardware configuration of the information cooperation infrastructure apparatuses 101 and 202 is not limited to the configuration illustrated in FIG. Other configurations may be used.
Further, the information holding institution apparatus and the personal code shown in the first and second embodiments may have the hardware configuration shown in FIG. 14 or other hardware configurations.

  Further, the information processing method according to the present invention can be realized by the procedure shown in the first and second embodiments.

  DESCRIPTION OF SYMBOLS 101 Information cooperation base apparatus, 102 Information holding organization apparatus A, 103 Information holding organization apparatus B, 111 Personal number management part, 112 Personal number storage part, 113 Communication part, 121 Personal information inquiry part, 122 Personal number conversion part, 123 Individual Information management unit 124 Personal information storage unit 125 Communication unit 201 Personal code management device 202 Information linkage infrastructure device 203 Information holding institution device A 211 Personal code management unit 212 Personal code storage unit 213 Communication unit 221 Personal number registration unit, 222 Personal number storage unit, 231 Personal number registration request unit.

Claims (10)

Each of the information processing devices connected to a plurality of information holding devices each storing a personal number and personal information,
A plurality of encrypted personal numbers obtained by encrypting a plurality of personal numbers stored in the plurality of information holding devices are indicated, and two or more encrypted personal numbers for the same person are shown in association with each other. An encrypted personal number information storage unit for storing personal number information;
A transmission request for requesting transmission of personal information stored in another information holding device, including an encrypted personal number obtained by encrypting the personal number stored in the information holding device from any information holding device A receiver for receiving the message;
An encrypted personal number extracting unit that extracts an encrypted personal number of the other information holding device associated with the encrypted personal number included in the transmission request message from the encrypted personal number information;
A message generating unit that includes the encrypted personal number extracted by the encrypted personal number extracting unit, and that generates a transmission instruction message instructing transmission of personal information requested in the transmission request message;
An information processing apparatus comprising: a transmission unit that transmits the transmission instruction message generated by the message generation unit to the other information holding device. The receiver is
The personal information corresponding to the acquired personal number is included from the other information holding device that received the transmission instruction message and decrypted the encrypted personal number included in the received transmission instruction message to acquire the personal number. Receive the send instruction response message,
The message generator is
Generating a transmission request response message including an encrypted personal number of an information holding device that is a transmission source of the transmission request message and personal information included in the transmission instruction response message;
The transmitter is
The information processing apparatus according to claim 1, wherein the transmission request response message generated by the message generation unit is transmitted to an information holding apparatus that is a transmission source of the transmission request message. The encrypted personal number information storage unit is
It stores encrypted personal number information indicating a plurality of encrypted personal numbers encrypted by a specific encryption method that can be decrypted by each information holding device but cannot be decrypted by the information processing device. The information processing apparatus according to claim 1 or 2. The information processing apparatus includes:
The information processing apparatus according to any one of claims 1 to 3, wherein each of the information processing apparatuses is connected to a plurality of information holding apparatuses used in different information holding institutions and used on an information cooperation base. An information processing device connected to an information holding device that manages a personal number and a personal code management device that manages a personal code,
Registration of the encrypted personal number including the encrypted basic information obtained by encrypting the basic information of a specific individual and the encrypted personal number obtained by encrypting the personal number of the specific individual from the information holding device. A receiving unit for receiving a requesting encrypted personal number registration request message;
An encrypted personal number registration unit for registering the encrypted personal number included in the encrypted personal number registration request message;
A message generator for generating a personal code request message that includes the encrypted basic information included in the encrypted personal number registration request message and requests the personal code management device to transmit a personal code;
A transmission unit that transmits the personal code request message generated by the message generation unit to the personal code management device;
The receiver is
Receiving a personal code corresponding to the encrypted basic information included in the personal code request message from the personal code management device;
The encrypted personal number registration unit
An information processing apparatus, wherein the personal code received by the receiving unit and the encrypted personal number included in the encrypted personal number registration request message are registered in association with each other. The receiver is
Encryption basic information encrypted by an encryption method that can be decrypted by the personal code management device but cannot be decrypted by the information processing device, and encryption by an encryption method that cannot be decrypted by either the personal code management device or the information processing device 6. The information processing apparatus according to claim 5, wherein the encrypted personal number registration request message including the encrypted encrypted personal number is received. The information processing apparatus includes:
The information processing apparatus according to claim 5, wherein the information processing apparatus is connected to an information holding apparatus used in an information holding organization and the personal code management apparatus, and is used on an information linkage base. An information processing method performed by a computer connected to a plurality of information holding devices each storing a personal number and personal information,
A plurality of encrypted personal numbers obtained by encrypting a plurality of personal numbers stored in the plurality of information holding devices are indicated, and two or more encrypted personal numbers for the same person are shown in association with each other. An encrypted personal number information reading step for the personal number information to be read by the computer;
The computer transmits from one of the information holding devices an encrypted personal number obtained by encrypting the personal number stored in the information holding device, and transmits the personal information stored in the other information holding device. A receiving step for receiving a request to send request message;
An encrypted personal number extraction step for extracting, from the encrypted personal number information, an encrypted personal number of the other information holding device, wherein the computer is associated with an encrypted personal number included in the transmission request message;
A message generating step for generating a transmission instruction message that includes the encrypted personal number extracted by the encrypted personal number extracting step and instructing transmission of personal information requested by the transmission request message;
An information processing method comprising: a transmission step in which the computer transmits the transmission instruction message generated in the message generation step to the other information holding device. An information processing method performed by a computer connected to an information holding device that manages a personal number and a personal code management device that manages a personal code,
The encrypted personal information includes the encrypted basic information obtained by encrypting the basic information of a specific individual and the encrypted personal number obtained by encrypting the personal number of the specific individual from the information holding device. A receiving step for receiving an encrypted personal number registration request message requesting registration of a number;
An encrypted personal number registration step in which the computer registers the encrypted personal number included in the encrypted personal number registration request message;
A message generating step for generating a personal code request message for requesting the personal code management device to transmit a personal code, wherein the computer includes the encrypted basic information included in the encrypted personal number registration request message; ,
The computer has a transmission step of transmitting the personal code request message generated by the message generation step to the personal code management device;
In the receiving step,
The computer
Receiving a personal code corresponding to the encrypted basic information included in the personal code request message from the personal code management device;
In the encrypted personal number registration step,
The computer
An information processing method comprising: registering the personal code received in the receiving step in association with the encrypted personal number included in the encrypted personal number registration request message.   A program for causing a computer to function as the information processing apparatus according to claim 1 or 5.

Images