JP2022108858A - Personal information management apparatus, personal information management system, terminal, and terminal program - Google Patents

Abstract

To provide a personal information management apparatus configured to improve usability of reliable personal information, a personal information management system, a terminal, and a terminal program.SOLUTION: In a personal information management system 100, a personal information management server 1 connected to communicate with a user terminal 4 and each of company servers of companies which provide services to a user of the user terminal 4 includes a personal information DB 8 storing personal information of the user identified through identification processing performed with the user terminal 4. The server receives an update notification regarding personal information from a company server, and specifies the personal information related to the received update notification from the personal information DB 8, and stops providing the specified personal information to the companies.SELECTED DRAWING: Figure 6

Description

The present invention relates to a personal information management device, a personal information management system, a terminal, and a terminal program.

Conventionally, a person who wants to use a certain service on the Internet first accesses the site of the service, registers as a user, registers necessary information including personal information such as his/her name, and sets a password. Then, the user can use the service by inputting the user ID and password set by the user or given by the system from the terminal. In this manner, a system of registering and using various types of information required for each service is common.

However, it is troublesome for users to register information for each service.
Therefore, "personal device composed of information of a plurality of attribute items related to a service providing device that provides a service via a network, a user device that uses the service provided by the service providing device, and a user of the user device. an attribute information management device for managing attribute information, and controlling disclosure of personal attribute information from the attribute information management device to the service providing device, wherein the user device manages the attribute information; Setting means for setting permission attribute items for identifying personal attribute information permitted to be disclosed for each service providing device permitted to disclose personal attribute information, and permitting disclosure of the permission attribute items. a reply reply means for replying a reply indicating whether or not to permit disclosure to the service providing device when a disclosure confirmation request requesting confirmation of whether or not to disclose the attribute information is received from the attribute information management device; The management device specifies the service providing device permitted to disclose the personal attribute information for each user information specifying the user of each user device based on the settings received from the user of the user device. a disclosure policy management means for managing a disclosure policy including the service providing device information and the permission attribute item; Both service providing device information for identifying the service providing device that is the source of the personal attribute information request and user information included in the personal attribute information request, with reference to the disclosure policy managed by the policy management means Disclosure policy determination means for determining and acquiring an attribute item that matches an attribute item for which a personal attribute information request is made, among the permitted attribute items corresponding to Disclosure confirmation request transmission means for transmitting a disclosure confirmation request to the user device to confirm whether or not to permit disclosure of personal attribute information corresponding to the permitted attribute item acquired by the disclosure policy determination means; In response to the disclosure confirmation request transmitted by the disclosure confirmation request transmission means, based on a response indicating whether or not to permit disclosure of personal attribute information corresponding to the permission attribute item returned from the user device, and attribute information providing means for providing a service providing device with personal attribute information corresponding to a permitted attribute item.” (for example, Patent Document 1).

JP 2009-199573 A

The personal attribute information provided by the system described in Patent Literature 1 is, for example, the e-mail address, address, gender, hobby, etc. of the person who registered the personal attribute information. By the way, these information can be changed. For example, when a person registrant of personal attribute information moves, his or her address or telephone number may change, or his or her name may change due to marriage or the like. However, Patent Document 1 assumes that personal attribute information is the latest.
User's personal information is basic information used for various services. Therefore, it must be reliable information. In particular, when the service provider is, for example, a financial institution, etc., a higher degree of reliability is required for the information to be handled.

SUMMARY OF THE INVENTION Accordingly, it is an object of the present invention to provide a personal information management device, a personal information management system, a terminal, and a terminal program that improve the convenience of reliable personal information.

The present invention solves the above problems by means of the following solutions. In order to facilitate understanding, reference numerals corresponding to the embodiments of the present invention are used for explanation, but the present invention is not limited to these. Also, the configurations described with reference numerals may be improved as appropriate, and at least a part of them may be replaced with other components.

In a first invention, a user terminal (4) and a provider device (9) of each provider that provides services to the user of the user terminal are communicably connected to manage personal information. a personal information database (8) that stores personal information of the user whose identity has been verified by the identity verification process performed between the device (1) and the user terminal; contact receiving means (22) for receiving update occurrence contact relating to information; information specifying means (22) for specifying, from the personal information database, the personal information relating to the update occurrence contact received by the contact receiving means; A personal information management device, comprising a provision stop means (23) for stopping provision of the personal information specified by the information specifying means to each business operator.
In the second invention, in the personal information management device (1) of the first invention, provision of held information held by each business operator for the item of personal information provided to each business operator is performed by each business operator. possessed information requesting means (22) for making a request to a trader apparatus (9); and possessed information receiving means (22) for receiving the possessed information from the operator's apparatus of each operator as a request result of the possessed information requesting means. ), and information collating means (22) for collating the retained information received by the retained information receiving means with the personal information in the personal information database (8) corresponding to the retained information, wherein the providing A stopping means (23) stops providing the personal information in the personal information database collated by the information collating means to each business operator when the collation result by the information collating means is inconsistent. is.
A third invention is the personal information management device (1) of the first invention or the second invention, in which information about whether or not to provide the personal information to each business operator is associated with the user and stored. a permission storage unit (33); a utilization request receiving means (17) for receiving a utilization request of the personal information from the business operator device (9); and the personal information satisfying the utilization request received by the utilization request receiving means. provision status confirmation means (18) for confirming the utilization status of the provision status confirmation means (18); provision failure notifying means (19) for notifying of impossibility; personal information providing means (19) for extracting the satisfying personal information from the personal information database (8) with reference to the provision propriety storage unit (33) and transmitting the extracted personal information to the business operator apparatus; and a personal information management device.
In a fourth invention, in the personal information management device (1) according to any one of the first invention to the third invention, the user of the user corresponding to the personal information specified by the information specifying means (22) Provision suspension notification means (23) for notifying the terminal (4) of suspension of provision of the personal information to each business operator; and update request reception for receiving an information update request from the user terminal that transmitted the provision suspension notification means. means (24); personal information updating means (24) for updating said personal information database (8) using said personal information of said user included in said information update request received by said update request receiving means; A personal information management apparatus, comprising: a suspension release means (24) for releasing suspension of provision of the personal information of the user in the personal information database updated by the personal information update means.
In a fifth invention, in the personal information management device (1) of the fourth invention, the personal information of each user registered in the personal information database (8) is authenticated by a certification authority (6) that authenticates the personal information. ) and requesting the certification authority to authenticate the personal information of the user included in the information update request received by the update request receiving means (24). The personal information updating means (24) is a personal information management device for registering the personal information authenticated by the certification authority requested by the authentication requesting means in the personal information database.
According to a sixth aspect of the invention, there is provided a user terminal (4), a business operator device (9) of a service provider, and personal information communicably connected to each of the user terminal and the business operator device. A personal information management system (100) comprising a management device (1), wherein the personal information management device is a personal A personal information database (8) storing information is provided, the business operator device comprises communication transmission means for transmitting update occurrence communication related to the personal information, and the personal information management device receives information received from the business operator device. Information specifying means (22) for specifying the personal information related to the update occurrence notification from the personal information database, and provision stopping means (22) for stopping provision of the personal information specified by the information specifying means to each business operator ( 23), and a personal information management system.
According to a seventh aspect of the invention, there is provided a user terminal (4), a business operator device (9) of a service providing business operator, and personal information communicably connected to each of the user terminal and the business operator device. A personal information management system (100) comprising a management device (1), wherein the personal information management device is a personal Personal information database (8) storing information and provision of retained information held by each business operator to the business device of each business operator with respect to the items of the personal information provided to each business operator and a possessed information requesting means for requesting, wherein the operator apparatus of each operator transmits the possessed information held by the operator apparatus to the personal information management apparatus in response to a request from the personal information management apparatus. wherein the personal information management device includes retained information receiving means for receiving the retained information from the business device of each business operator, and the retained information received by the retained information receiving means; , information collating means for collating the personal information of the personal information database corresponding to the possessed information; A personal information management system comprising: provision stopping means for stopping provision of personal information to each business operator.
An eighth invention is a terminal (4) communicably connected to a personal information management device (1) for managing personal information of a user, wherein the terminal (4) notifies each business operator of the suspension of provision of the personal information. a notification receiving means (46) for receiving the above, receiving input of the new personal information based on the notification received by the notification receiving means, and sending an information update request including the received new personal information to the personal information and update request transmission means (48) for transmitting to the management device.
In a ninth invention, a computer, which is a terminal (4) communicably connected to a personal information management device (1) for managing user's personal information, is used to stop providing the personal information to each business operator. a notification receiving means for receiving a notification; receiving input of the new personal information based on the notification received by the notification receiving means; and transmitting an information update request including the received new personal information to the personal information management device and a terminal program (51a) that functions as an update request transmission means to transmit to.

According to the present invention, it is possible to provide a personal information management device, a personal information management system, a terminal, and a terminal program that improve the convenience of reliable personal information.

It is a figure showing the whole personal information management system composition concerning this embodiment. It is a figure which shows the functional block of the personal information management server based on this embodiment. It is a figure which shows the example of the memory|storage part of the personal information management server which concerns on this embodiment. It is a figure which shows the functional block of the user terminal which concerns on this embodiment. It is a figure which shows the example of an item of personal information DB which concerns on this embodiment. It is a figure for demonstrating the personal information registration process in the personal information management system which concerns on this embodiment. 8 is a flowchart showing identity verification request processing of the user terminal according to the present embodiment; It is a figure which shows the example of a display of the user terminal which concerns on this embodiment. It is a figure which shows the example of a display of the user terminal which concerns on this embodiment. It is a figure which shows the example of a display of the user terminal which concerns on this embodiment. It is a figure which shows the example of a display of the user terminal which concerns on this embodiment. It is a flow chart which shows the personal identification processing of the personal information management server concerning this embodiment. 4 is a flowchart showing personal information processing of the personal information management server according to the embodiment; It is a figure which shows the example of a display of the user terminal which concerns on this embodiment. It is a figure which shows the example of a display of the user terminal which concerns on this embodiment. It is a figure for demonstrating transaction processing in the personal information management system which concerns on this embodiment. It is a flow chart which shows information use confirmation processing of a personal information management server concerning this embodiment. It is a figure for demonstrating the update process of the personal information in the personal information management system which concerns on this embodiment. It is a flowchart which shows the information provision stop processing of the personal information management server which concerns on this embodiment.

EMBODIMENT OF THE INVENTION Hereafter, the form for implementing this invention is demonstrated, referring a figure. This is just an example, and the technical scope of the present invention is not limited to this.

(embodiment)
FIG. 1 is a diagram showing the overall configuration of a personal information management system 100 according to this embodiment.
The personal information management system 100 allows the personal information management server 1 (personal information management device) to verify the identity of the user on behalf of each business operator, thereby reducing the input burden on the user and each business operator, and , is a platform system for personal information that manages reliable personal information.
The personal information management system 100 includes a personal information management server 1, a biometric authentication server 3, a user terminal 4 (terminal), a first authentication server 6, a second authentication server 7, and a personal information DB (database) 8. , and an operator server 9 (operator device). The personal information management server 1, the biometric authentication server 3, the first authentication server 6, the second authentication server 7, the personal information DB 8, and the business operator server 9 are communicably connected via a communication network N. ing. Also, the user terminal 4 can be connected to the communication network N via the base station R. FIG.

The personal information management server 1 is owned by, for example, a company specializing in managing personal information, which is different from each business operator. The personal information management server 1 performs identity verification processing of users on behalf of each business operator, and acts as a proxy for part of the identity verification processing. In addition, the personal information management server 1 registers the user's personal information acquired in the personal identification process in the personal information DB 8 . Furthermore, the personal information management server 1 manages personal information registered in the personal information DB 8 .

Here, the difference between identity confirmation and identity authentication in this specification will be explained. Identity verification refers to verification using a public certificate such as a driver's license or My Number card, for example. On the other hand, identity authentication is performed at the time of transaction, etc., when the identity has already been confirmed, and refers to confirmation to prevent impersonation.

The biometric authentication server 3 is a server used for confirming the identity of the user by using the user's face image (biometric information) acquired in the course of the identity verification process and the face photograph image contained in the identity verification document. Examples of personal identification documents include my number cards and driver's licenses. The biometric authentication server 3 confirms whether or not the person is the same person using a facial image matching program that calculates the degree of matching between the facial image and the facial photograph image as a score. The biometric authentication server 3 includes a control unit, a storage unit, a communication interface unit, etc., although not shown.

A user terminal 4 is a terminal used by a user who wants to use a service provided by each business operator. The user terminal 4 is, for example, a mobile phone having computer functions represented by a smart phone. The user terminal 4 may be a tablet, a personal computer (PC), or the like.

The first authentication server 6 is a server of a first certification authority (certification authority) that authenticates the personal information of the user who has been confirmed by the personal identification process. The first certification authority is, for example, a third-party certification authority that gives time stamps, issues electronic certificates, and the like. The first authentication server 6 includes a control section, a storage section, a communication interface section, etc., although not shown.

The second authentication server 7 is a server of a second certification authority used for confirming the existence of identity verification documents obtained from users in the course of identity verification processing. In this example, the personal identification document is registered with the second certification authority in association with personal identification information and personal identification information. If the identification document is a My Number card, the identification information is the My Number, and if the identification document is a driver's license, the identification information is the driver's license number. The personal identification information is, for example, an 8-digit number determined and registered by the user when the personal identification document is issued to the user.
The second certification authority is the server of J-LIS (Japan Agency for Local Authority Information Systems) if the identity verification document is a My Number card, and the driver's license information if the identity verification document is a driver's license. The server of the system of the National Police Agency etc. which manages corresponds. As described above, the second authentication server 7 has an information DB that stores personal identification information and password information in association with each other. The second authentication server 7 also includes a control unit, a storage unit, a communication interface unit, etc., although not shown.

The personal information DB 8 is a database that stores personal information of users managed by the personal information management server 1 . The personal information DB 8 may be provided independently of the personal information management server 1 as shown in FIG. Also, the personal information DB 8 may be a cloud.

The business server 9 is, for example, a server managed by each business. The business server 9 performs processing in each business. In the example of FIG. 1, the device managed by the business operator A is described as the business server 9A, and the device managed by the business operator B is described as the business server 9B. In the following description, the provider server 9 is simply used when the provider is not specified. If the business operator is, for example, a bank, the business operator server 9 is a server that performs transaction processing such as account opening, transfer, and balance inquiry. The provider server 9 includes a control section, a storage section, a communication interface section, etc., although not shown.

The base station R is a wireless communication base station and performs a relay for the user terminal 4 to communicate with the personal information management server 1 and the business server 9 . The base station R is, for example, a wireless LAN (Local Area Network) base station or a mobile terminal communication network base station of a carrier.
The communication network N is a network between various servers or between various servers and the base station R, such as an Internet line or a mobile terminal communication network.

Next, the functional configuration of the personal information management server 1 will be explained.
FIG. 2 is a diagram showing functional blocks of the personal information management server 1 according to this embodiment.
FIG. 3 is a diagram showing an example of the storage unit 30 of the personal information management server 1 according to this embodiment.

The personal information management server 1 shown in FIG. 2 includes a control section 10 , a storage section 30 and a communication interface section 39 .
The control unit 10 is a CPU (central processing unit) that controls the entire personal information management server 1 . The control unit 10 reads and executes an operating system (OS) and various application programs stored in the storage unit 30 as appropriate, thereby realizing various functions in cooperation with the hardware described above.
The control unit 10 includes a registration processing unit 11 , a usage processing unit 16 and an update processing unit 21 .

The registration processing unit 11 verifies the identity of the user. Then, the registration processing unit 11 performs a process of registering the user's personal information in the personal information DB 8 when the person can be verified. Further, the registration processing unit 11 performs a process of registering permission/prohibition of provision of personal information to each business operator when the identification is successfully completed.
The registration processing unit 11 includes a personal identification processing unit 12 (confirmation information receiving means, document confirmation means, personal identification processing means), a personal information processing unit 13 (authentication requesting means, personal information registration means), and a provision availability processing unit. 14 (inquiry transmission means, provision availability information reception means, provision availability information registration means).

The personal identification processing unit 12 performs personal identification processing in response to receiving the personal identification request from the user terminal 4 . More specifically, the identity verification processing unit 12 receives personal information input by the user from the user terminal 4, password information related to the user's identity verification document, an image of the identity verification document taken by the user, and the user's own face. receiving confirmation information including an image; Then, in order to confirm whether or not the user of the identity verification document actually exists, the identity verification processing unit 12 transmits the identity identification information and the personal identification information to the second authentication server 7, and requests authentication. . Here, the personal identification information can be obtained, for example, from the image of the personal identification document.

In addition, the identity verification processing unit 12 asks the biometric authentication server 3 to confirm whether or not the face photo image included in the received identity verification document image and the user's own face image are the same person. Then, the user transmits the image of the face photograph included in the image of the personal identification document and the face image of the user himself/herself to request collation.
The personal identification processing unit 12 can confirm the existence of the person using the second authentication server 7, and if it can confirm that the person is the same person by collating the images using the biometric authentication server 3, the personal identification has been completed. judge things.

The personal information processing unit 13 performs processing when the identity verification processing unit 12 successfully verifies the identity. More specifically, the personal information processing unit 13 requests the first authentication server 6 to authenticate the personal information of the user whose identity has been verified. Then, the personal information processing section 13 registers the personal information authenticated by the first authentication server 6 in the personal information DB 8 .
The provision propriety processing unit 14 causes the provision propriety storage unit 33 to store user registration information as to whether or not the personal information registered in the personal information DB 8 is to be provided to each business operator. More specifically, the provision approval/disapproval processing unit 14 inquires of the user terminal 4 about permission to provide personal information for each business operator. When the provision permission/prohibition processing unit 14 receives the provision permission/prohibition information for each business operator from the user terminal 4 as an answer to the inquiry, the provision permission/prohibition processing unit 14 registers the received provision permission/prohibition information in the provision permission/prohibition storage unit 33 in association with the user.

The usage processing unit 16 performs processing for a usage request for a user's personal information from a business operator.
The usage processing unit 16 includes a usage request receiving unit 17 (utilization request receiving means), a status checking unit 18 (providing status checking means), and a result processing unit 19 (personal information providing means, provision failure notifying means, user notifying means). and
The use request receiving unit 17 receives a use request for personal information from the operator server 9 so that the operator server 9 performs processing using the user's personal information. The usage request includes, for example, a user ID (IDentifier) and items. A user ID is identification information that identifies a user who wants to use personal information. The user ID may be uniquely assigned by the personal information management server 1, or may be the terminal ID of the user terminal 4 or the like. The items are name, address, and the like. Examples of items will be described later.

The status confirming unit 18 confirms the utilization/providing status of the personal information of the target user of the utilization request. Specifically, the status confirmation unit 18 refers to the provision status storage unit 34 and checks whether or not the provision status corresponding to the user ID included in the usage request is available.

The result processing unit 19 performs processing according to the confirmation result of the usage/providing status of the status confirmation unit 18 . If the confirmation result of the usage provision status of the status confirmation unit 18 indicates that provision is possible, the result processing unit 19 refers to the provision permission/prohibition storage unit 33 and stores the personal information of the user that satisfies the use request in the personal information DB 8. Extract from Then, it transmits the extracted personal information to the provider server 9 . The result processing unit 19 refers to the provision availability storage unit 33, and if the personal information of the user that satisfies the usage request cannot be extracted, the result processing unit 19 notifies the provider server 9 that there is no information to be provided.
On the other hand, when the confirmation result of the utilization/providing status of the status confirmation unit 18 indicates that the provision is not possible, the result processing unit 19 transmits to the provider server 9 that the provision is stopped and the provision is not possible.
Then, the result processing unit 19 notifies the user terminal 4 that there is a usage request and that information is provided or not.

The update processing unit 21 updates personal information registered in the personal information DB 8 .
The update processing unit 21 includes an information specifying unit 22 (contact receiving means, information specifying means, possessed information requesting means, possessed information receiving means, information collating means) and a provision stop processing unit 23 (provision stop means, provision stop notifying means). and an update information reception processing unit 24 (update request reception means, authentication request means, personal information update means, suspension cancellation means).

The information specifying unit 22 performs a process of specifying personal information that is not the latest among the personal information of each user registered in the personal information DB 8 . Specifically, when the information specifying unit 22 receives an update occurrence notification related to personal information from the provider server 9 , the information specifying unit 22 specifies the personal information related to the update occurrence notification from the personal information DB 8 . The update occurrence notification includes at least the user ID, and may include updated items and contents corresponding to the items.
Further, for example, at a predetermined timing, the information specifying unit 22 requests provision of held information including items and contents of personal information of each user held in the provider server 9 . Then, the information specifying unit 22 checks the held information received from the provider server 9 against the personal information in the personal information DB 8 corresponding to the held information, thereby specifying the contents of the mismatched items.

The provision stop processing unit 23 stops providing the personal information related to the update occurrence notification received by the information specifying unit 22 to each provider server 9 .
In addition, the provision stop processing unit 23 stops providing the personal information in the personal information DB 8 related to the item with the content specified by the information specifying unit 22 that does not match to each business operator server 9 .
Here, the range of suspension of provision of the personal information in the personal information DB 8 may be only the items that do not match, or may be all of the user's personal information.
The provision stop processing unit 23 then updates the provision status storage unit 34 . More specifically, the provision stop processing unit 23 changes the provision status of the user ID of the user in the provision status storage unit 34 to non-provisionable.
Further, the provision stop processing unit 23 notifies the user terminal 4 that the provision of its own personal information to each business operator has been stopped.

Upon receiving an information update request from the user terminal 4, the update information reception processing unit 24 updates the personal information DB 8 using the user's personal information included in the information update request. At this time, the update information reception processing unit 24 requests the first authentication server 6 to authenticate the received personal information of the user. Then, the update information reception processing unit 24 updates the personal information DB 8 with the personal information authenticated by the first authentication server 6 .
Then, the update information reception processing unit 24 cancels the suspension of provision of the user's personal information. The update information reception processing unit 24 changes the provision status of the user ID of the user in the provision status storage unit 34 to "Providable".

The storage unit 30 is a storage area such as a hard disk or a semiconductor memory device for storing programs, data, etc. necessary for the control unit 10 to execute various processes.
The storage unit 30 includes a program storage unit 31 , an item level storage unit 32 , a provision availability storage unit 33 , a provision status storage unit 34 and a business operator information storage unit 35 .
The program storage unit 31 is a storage area that stores various programs. The program storage unit 31 stores, for example, programs for performing various functions executed by the control unit 10 of the personal information management server 1 . The program for performing various functions executed by the control unit 10 of the personal information management server 1 may be composed of a plurality of programs for each function.

The item level storage unit 32 stores a level related to handling of personal information and each item of the personal information DB 8 in association with each other. FIG. 3A shows an example of the item level storage unit 32. As shown in FIG.
The item level storage unit 32 shown in FIG. 3A has three levels of security from 1 to 3, with level 1 being the highest security level. Level 1 requires handling of personal information as confidential information of the highest order. In the example of FIG. 3A, level 1 corresponds to items such as biometric information, terminal information, and a combination of a number and an expiration date described in an identification document. On the other hand, level 3 corresponds to items with relatively low confidentiality, including items such as purchase history and tastes and preferences. Note that the item level storage unit 32 shown in FIG. 3A is merely an example, and may or may not include other items. The level of each item is also an example.

The provision permission/prohibition storage unit 33 stores permission/prohibition information regarding provision of personal information to a business operator for each user. FIG. 3B shows an example of the provision availability storage unit 33. As shown in FIG.
The provision permission/prohibition storage unit 33 shown in FIG. 3B stores the user ID, the provider ID, and the permission level in association with each other. In this example, the user can set the permission level for each business. A user ID is identification information that identifies a user. The operator ID is identification information that identifies the operator. The permission level corresponds to the level of the item level storage unit 32, and is used to specify items to be provided with personal information. If the permission level is "1, 2, 3", the content for each item corresponding to level 1, 2, 3 of the item level storage unit 32 among the personal information stored in the personal information DB 8 is sent to the business operator. Indicates availability. The permission level "2" indicates that the contents of each item corresponding to level 2 in the item level storage unit 32 among the personal information stored in the personal information DB 8 can be provided to the business operator. show. In this case, the personal information management server 1 does not provide the business operator with the contents of the items corresponding to the levels 1 and 3 of the item level storage unit 32 . When the permission level of the item level storage unit 32 is "None", it indicates that no personal information is provided to the business operator.

The provision status storage unit 34 stores the provision status of personal information for each user to the business operator. FIG. 3C shows an example of the provision status storage unit 34. As shown in FIG.
The provision status storage unit 34 shown in FIG. 3C stores user IDs and provision statuses in association with each other. A user ID is identification information that identifies a user. The provision status is, for example, flag information indicating whether provision is possible or not.
The business operator information storage unit 35 is a storage area that stores information related to each business operator. The business operator information storage unit 35 stores various types of information about the business operator, using the business operator ID as a key.
The communication interface unit 39 is an interface for communicating with the personal information DB 8, various servers such as the business server 9, the user terminal 4, and the like via the communication network N. FIG.

Next, the functional configuration of the user terminal 4 will be described.
FIG. 4 is a diagram showing functional blocks of the user terminal 4 according to this embodiment.
As shown in FIG. 4 , the user terminal 4 includes a control section 40 , a storage section 50 , a camera 54 , a touch panel display 55 and a communication interface section 59 .

The control unit 40 is a CPU that controls the entire user terminal 4 . The control unit 40 reads and executes the OS and various application programs stored in the storage unit 50 as appropriate, thereby cooperating with the above-described hardware and executing various functions.
The control unit 40 includes a registration processing unit 41 and an update processing unit 45 .
The registration processing unit 41 performs processing related to registration of personal information. The registration processing unit 41 includes an identity verification requesting unit 42 (confirmation information transmitting means), an identity verification result receiving unit 43 (result receiving means), and a provision propriety request processing unit 44 (provision propriety information transmitting means).

The personal identification requesting unit 42 performs processing related to personal identification performed when personal information is registered. The personal identification requesting unit 42 sends confirmation information used for personal identification to the personal information management server 1 to request personal identification.
The personal identification result receiving unit 43 receives the result of personal identification processing performed by the personal information management server 1 from the personal information management server 1 .
When the processing result received by the personal identification result receiving unit 43 indicates that personal identification has been successfully performed, the provision permission/refusal request processing unit 44 provides provision permission/refusal information regarding whether or not personal information can be provided to each business operator. Send to management server 1. Then, the provision permission/refusal request processing unit 44 receives the registration result of the provision permission/refusal information from the personal information management server 1 .

The update processing unit 45 performs processing related to updating of personal information. The update processing unit 45 includes a notification receiving unit 46 (notification receiving means), an update screen output unit 47, and an update request processing unit 48 (update request transmitting means).
The notification receiving unit 46 receives from the personal information management server 1 a notification of suspension of provision of personal information to each business operator.
The update screen output unit 47 outputs an update screen for updating personal information based on the notification received by the notification reception unit 46 .
The update request processing unit 48 transmits to the personal information management server 1 an information update request including new personal information that has been input as new personal information on the update screen. Also, the update request processing unit 48 receives update results related to the information update request from the personal information management server 1 .

The storage unit 50 is a storage area such as a semiconductor memory device for storing programs, data, etc. necessary for the control unit 40 to execute various processes.
The storage unit 50 has a program storage unit 51 .
The program storage unit 51 is a storage area that stores various application programs (hereinafter, application programs are referred to as applications, applications, programs, or the like). The program storage unit 51 stores a personal information registration application 51a (terminal program) and a transaction application 51b.

The personal information registration application 51a and the transaction application 51b are installed in the user terminal 4 in advance, or downloaded to the user terminal 4 by communicating with an application distribution server (not shown) via the communication network N.
The personal information registration application 51a is a program for performing various functions executed by the control unit 40 of the user terminal 4. FIG. More specifically, the personal information registration application 51a is a program used, for example, when applying for personal information in opening an account or performing user registration when receiving services.
The transaction application 51b is a program for performing various transactions by the business operator server 9. FIG. More specifically, the transaction application 51b is, for example, a program used for financial transactions and payment transactions. Here, one transaction application 51b is exemplified, but the program storage unit 51 may store a plurality of transaction applications that are different for each business operator.

Camera 54 is a photographing device. The camera 54 has an in-camera 54a and an out-camera 54b. The in-camera 54 a is a camera provided on the touch panel display 55 side of the user terminal 4 . The out-camera 54 b is a camera provided on the back side of the user terminal 4 .
The touch panel display 55 has a function as a display section configured by a liquid crystal panel or the like, and a function as an input section for performing various operation inputs with a user's finger.
The communication interface unit 59 is an interface for communicating with various servers via the communication network N, and functions as a transmitting unit and a receiving unit.

Next, an example of items of personal information stored in the personal information DB 8 will be described.
FIG. 5 is a diagram showing an example of items in the personal information DB 8 according to this embodiment.
The personal information DB 8 stores, for example, a user ID as a key, name, date of birth, address, identification classification, number, identification image, face image, and the like.
A user ID is identification information that identifies a user.
The name is the name of the user. Note that the name (hiragana) may be included as an item separate from the name.
The date of birth is the date of birth of the user, and the address is the address of the user. The postal code may be included as an item separate from the address. Also, the address may be divided into separate items such as prefectures and municipalities.
The voucher category is the voucher used for identity verification, and is a category of identity verification documents such as a driver's license and my number card.
The number is a number obtained from a voucher, such as a driver's license number or my number.
The evidence image is the image itself of the personal identification document.
The face image is the user's face image itself.
In addition, the personal information DB 8 has each item of the item level storage unit 32 . Each user's personal information may not have data for all items.
Also, each item is stored in association with a date. Date stores the latest registration date. For example, the date is the registration date of personal information immediately after identity verification, and the update date is the date when the information for the item is updated.

Here, the computer means an information processing device equipped with a control unit, a storage device, etc., and the personal information management server 1, the user terminal 4, the first authentication server 6, the second authentication server 7, and the business operator server 9 are Each of them is an information processing device having a control unit, a storage unit, etc., and is included in the concept of a computer.

Next, processing of the personal information management system 100 will be described.
First, the flow of processing for registering user's personal information will be described.
FIG. 6 is a diagram for explaining personal information registration processing in the personal information management system 100 according to this embodiment.
FIG. 7 is a flowchart showing identity verification request processing of the user terminal 4 according to this embodiment.
8 to 11 are diagrams showing display examples on the user terminal 4 according to this embodiment.
FIG. 12 is a flow chart showing the personal identification process of the personal information management server 1 according to this embodiment.
FIG. 13 is a flowchart showing personal information processing of the personal information management server 1 according to this embodiment.
14 and 15 are diagrams showing display examples on the user terminal 4 according to this embodiment.

First, a user who wants to use the service provided by the personal information management system 100 activates the personal information registration application 51 a installed on the user terminal 4 .
Then, the user selects for new registration from a menu screen (not shown), thereby controlling the user terminal 4 in step S (hereinafter, "step S" is simply referred to as "S") 1 in FIG. The unit 40 (registration processing unit 41) performs identity verification request processing.
As the personal identification request process, the registration processing unit 41 outputs a guidance screen (not shown) related to personal information registration to the touch panel display 55 . Thereafter, the user terminal 4 performs processing according to the guidance screen.

Here, the personal identification request processing of the user terminal 4 will be described with reference to FIG.
First, in S101 of FIG. 7, the registration processing unit 41 outputs the personal identification document selection screen 60 shown in FIG. A selection screen 60 shown in FIG. 8 is a screen for selecting either a My Number card or a driver's license as an identification document. In the example of FIG. 8, the user has just selected the driver's license selection area 60a. When selected by the user, a check is added to selection area 60a indicating that selection area 60a has been selected. Also, a button 60b for transitioning to the next screen is displayed in a selectable manner.

When the button 60b in FIG. 8 is selected, in S102 in FIG. 7, the registration processing unit 41 outputs the document photographing screen 61 for photographing the personal identification document shown in FIG. 54b. In the example of FIG. 9, the user's driver's license is about to be photographed while the document photographing screen 61 is being displayed. The user positions the user terminal 4 so that the driver's license fits within the frame of the document photographing screen 61 . Then, when the user touches the button 61a, which is the shutter button, in S103 of FIG. The image of the obtained driver's license is temporarily stored in the storage unit 50.例文帳に追加

In S104 of FIG. 7, the registration processing unit 41 reads the image of the driver's license and extracts the text. Then, registration processing unit 41 outputs to touch panel display 55 a reading confirmation screen (not shown) for confirming the text of each item such as name, date of birth, address, license number, and the like. While looking at the reading confirmation screen, the user puts a check in the appropriate item.
Then, the registration processing unit 41 outputs the information input screen 62 shown in FIG. 10 to the touch panel display 55 . In the example of FIG. 10, the input for the name is shown, and the characters read from the driver's license and confirmed by the user are shown in an identifiable manner. The user uses the information input screen 62 to input personal information to be registered in the personal information DB 8 .

In S105 of FIG. 7, the registration processing unit 41 receives the selection and outputs, for example, the face image capturing screen 63 shown in FIG. start up. Therefore, while checking the touch panel display 55, the user positions his or her face on the face frame 63b of the through screen 63a.
In S106 of FIG. 7, the registration processing unit 41 performs known face recognition processing on the captured image acquired from the in-camera 54a to detect eyes.
In S107, the registration processing unit 41 determines whether or not blinking has been detected. When blinking is detected (S107: YES), the control unit 40 shifts the process to S108. On the other hand, if blinking is not detected (S107: NO), control unit 40 stays in this process until blinking is detected.
In S<b>108 , the registration processing unit 41 temporarily stores in the storage unit 50 the face image captured after the blink is detected.

When the series of inputs by the user is completed and the user performs an operation to proceed to the next process, in S109 of FIG. 7, the registration processing unit 41 receives each information that has been confirmed and input. After that, in S2 of FIG. 6, the control unit 10 (identity verification requesting unit 42) sends confirmation information to the personal information management server 1 to request identity verification.
It should be noted that the order of guidance on the guidance screen described above is an example, and for example, changes may be made to the processes before and after.
In S3, when the control unit 10 (registration processing unit 11) of the personal information management server 1 receives the confirmation information from the user terminal 4, it performs identity verification processing.

Here, the personal identification process will be described with reference to FIG.
In S11 of FIG. 12, the control unit 10 (personal identification processing unit 12) of the personal information management server 1 converts the facial image included in the confirmation information and the facial photograph image included in the driver's license image into a biometric image. It is transmitted to the authentication server 3.
In S12, the control unit of the biometric authentication server 3 compares the received facial image with the facial photograph image. The control unit of the biometric authentication server 3 performs image matching processing using a face image matching program, and calculates the degree of matching between the face image and the image of the face photograph as, for example, a score.
Then, the control unit of the biometric authentication server 3, for example, transmits the calculated score to the personal information management server 1 as a result of identity, and terminates this process.

At S<b>13 , the control unit 10 (personal identification processing unit 12 ) of the personal information management server 1 transmits the personal identification information and the personal identification information to the second authentication server 7 .
At S14, the control unit of the second authentication server 7 confirms the existence based on the received information. More specifically, whether or not the combination of received information is registered in the information DB (not shown) of the second authentication server 7 confirms whether or not the information actually exists. do. Then, the control unit of the second authentication server 7 transmits the confirmation result to the personal information management server 1, and ends this processing.

In S15, the control unit 10 (identity confirmation processing unit 12) determines whether or not the existence and the same person have been confirmed. For example, when the score received from the biometric authentication server 3 is equal to or greater than a predetermined value and the confirmation result received from the second authentication server 7 is real, the control unit 10 (personal identification processing unit 12 ) is judged to have confirmed the existence and identity of the same person. Here, the score received from the biometric authentication server 3 is represented by, for example, a numerical value from 0 to 100, and the higher the degree of matching, the higher the numerical value. Then, if the score is equal to or greater than a predetermined value, the identity verification processing unit 12 determines that they are the same person. On the other hand, if either the existence or the same person cannot be confirmed, the control unit 10 (personal identification processing unit 12) determines that the existence and the same person cannot be confirmed.
If the existence and the same person can be confirmed (S15: YES), the control unit 10 moves the process to S16. On the other hand, if the existence and the same person cannot be confirmed (S15: NO), the control unit 10 shifts the process to S17.

In addition, when the score received from the biometric authentication server 3 is less than the predetermined value, the process of S13 may not be performed, and the process of S15 may be performed after receiving the process result of S12.
Moreover, the order of the process of S11 and the process of S13 is not limited to this. The process of S13 may be performed first, and then the process of S11 may be performed.

In S16, the control unit 10 (identity verification processing unit 12) determines that the identity verification has been completed, and shifts the process to S4 in FIG.
On the other hand, in S17, the control unit 10 (identity verification processing unit 12) determines that the identity verification has failed, and terminates this process. Note that the control unit 10 (identity verification processing unit 12) notifies the user terminal 4 that the identity verification has failed. By doing so, the control unit 40 (registration processing unit 41) of the user terminal 4 outputs to the touch panel display 55 that the personal identification could not be performed, so the user takes measures such as registering again.

In S4 of FIG. 6, the control unit 10 (registration processing unit 11) of the personal information management server 1 performs personal information processing after completing the personal identification process.
Personal information processing will now be described with reference to FIG.
In S21 of FIG. 13, the control unit 10 (personal information processing unit 13) requests the first authentication server 6 to authenticate the personal information.

Upon receiving the personal information, the control unit of the first authentication server 6 adds authentication information to the received personal information in S22.
At S<b>23 , the control unit of the first authentication server 6 transmits the personal information to which the authentication information has been added to the personal information management server 1 .
Upon receiving the personal information to which the authentication information has been added, the personal information processing unit 13 of the personal information management server 1 registers the received personal information in the personal information DB 8 in S24. After that, the personal information processing unit 13 shifts the processing to S5 in FIG.

In S5 of FIG. 6, the control unit 10 (registration processing unit 11) of the personal information management server 1 transmits to the user terminal 4 the result of the personal identification request.
When the user terminal 4 receives a result indicating that the personal information has been registered from the personal information management server 1 and that the personal information has been registered, the user terminal 4 outputs a completion screen 65 shown in FIG. The completion screen 65 is a screen indicating that the personal identification has been completed and the personal information has been registered. When the user selects the button 65a for setting the provider on the completion screen 65, in S6 of FIG. 6, the control unit 40 (provision permission/refusal request processing unit 44) performs provision permission/refusal request processing.

The provision propriety request processing unit 44 outputs the provider setting screen 66 shown in FIG. 15 to the touch panel display 55 . The business operator setting screen 66 is a screen on which it is possible to set whether or not to provide personal information for each business operator. The user sets whether or not to provide by sliding the slide bar for each business operator shown in the setting area 66a left and right. Although not shown, the permission level may be set by outputting a permission level setting screen for each business operator set to allow provision. Then, when the user selects the button 66b for registration, in S7 of FIG. 6, the control unit 40 (provision permission/prohibition request processing unit 44) transmits the provision permission/prohibition information to the personal information management server 1 and requests registration. do.

In S<b>8 , the control unit 10 (provision permission/prohibition processing unit 14 ) of the personal information management server 1 registers the provision permission/prohibition information in the provision permission/prohibition storage unit 33 in response to receiving the provision permission/prohibition information. After that, the control unit 10 (provision permission/prohibition processing unit 14) transmits to the user terminal 4 that the setting of the provision permission/prohibition information has been completed as a processing result, and ends this processing.
The control unit 40 (provision permission/prohibition request processing unit 44) of the user terminal 4 outputs to the touch panel display 55 that the setting of the provision permission/prohibition information has been completed, and ends this processing.

In the above example, the user activates the personal information registration application 51a. However, it is not limited to this. When the user activates the transaction application 51b described below, the personal information registration application 51a may be activated from the transaction application 51b if personal information registration processing has not been performed.

Next, the flow of processing for using the user's personal information will be described.
FIG. 16 is a diagram for explaining transaction processing in the personal information management system 100 according to this embodiment.
FIG. 17 is a flowchart showing information usage confirmation processing of the personal information management server 1 according to this embodiment.
Here, an example will be described in which the user uses the transaction application 51b to perform transaction processing at the business operator A. FIG. However, transactions in other operators can be done as well.

First, the user activates the transaction application 51b installed in the user terminal 4. FIG. Then, the user performs an operation for requesting a transaction. In this example, in order to request a transaction, the user selects a transaction type and photographs his/her own face for identity verification. By doing so, in S31 of FIG. 16, the control unit 40 of the user terminal 4 transmits the transaction request to the business operator A's business operator server 9A. The transaction request includes transaction type and user's facial image.

When the business operator server 9 receives the transaction request from the user terminal 4, in S32, the control unit of the business operator server 9 performs personal authentication request processing.
In the personal authentication request process, the controller of the provider server 9 sends the user's face image to the personal information management server 1 to request the personal information management server 1 to perform personal authentication.
At S33, the control unit 10 of the personal information management server 1 performs personal authentication processing. More specifically, the control unit 10 of the personal information management server 1 retrieves the user's facial image (this facial image is stored in the personal information DB 8) managed by the personal information management server 1 and used in the identity verification process. and the user's face image received from the provider server 9 are transmitted to the biometric authentication server 3 . In the biometric authentication server 3, the control unit collates the two received face images. The control unit of the biometric authentication server 3 performs image matching processing using a face image matching program, and calculates the degree of matching between the two face images as, for example, a score. Then, the control unit of the biometric authentication server 3, for example, transmits the calculated score to the personal information management server 1 as a matching result, so the control unit 10 of the personal information management server 1 transmits the matching result to the business operator server 9. do.

When the operator server 9 successfully authenticates the user based on the received collation result, the controller of the operator server 9 transmits an information use request to the personal information management server 1 in S34.
In S35, the control unit 10 (usage processing unit 16) of the personal information management server 1 performs information usage confirmation processing.

Here, the information use confirmation processing will be described with reference to FIG. 17 .
In S41 of FIG. 17, the control unit 10 (use request receiving unit 17) of the personal information management server 1 receives a use request from the business operator server 9. FIG.
In S<b>42 , the control unit 10 (status confirmation unit 18 ) refers to the provision status storage unit 34 to confirm the use/provide status of the personal information of the target user of the use request.
In S43, the control unit 10 (situation confirmation unit 18) determines whether personal information can be provided as a result of the confirmation. If it can be provided (S43: YES), the control unit 10 moves the process to S44. On the other hand, if the provision is not possible (S43: NO), the control unit 10 shifts the process to S48.

In S<b>44 , the control unit 10 (result processing unit 19 ) extracts the personal information of the target user of the usage request from the personal information DB 8 . At that time, the result processing unit 19 refers to the provision availability storage unit 33 and confirms the permission level of the target user for the business operator A. Then, the result processing unit 19 refers to the item level storage unit 32 to confirm the item corresponding to the permission level, and extracts the contents of the confirmed item from the personal information DB 8 .
In S45, the control unit 10 (result processing unit 19) determines whether predetermined personal information has been extracted. Predetermined personal information refers to the items of personal information included in the usage request among the extracted personal information. Here, if the content of even one item among the items included in the usage request can be extracted, it is assumed that the predetermined personal information has been extracted. If the predetermined personal information can be extracted (S45: YES), the control unit 10 shifts the process to S46. On the other hand, if the predetermined personal information could not be extracted (S45: NO), the control unit 10 moves the process to S47.

In S46, the control unit 10 (result processing unit 19) transmits predetermined personal information to the provider server 9, and ends this process.
In S47, the control unit 10 (result processing unit 19) transmits to the provider server 9 that the personal information could not be extracted, and ends this process.
On the other hand, in S48, the control unit 10 (result processing unit 19) transmits to the provider server 9 that the provision of personal information has been stopped, and ends this processing.
Note that the control unit 10 (result processing unit 19) notifies the user terminal 4 of the fact that there is a use request for the personal information and the presence or absence of information provision.

In FIG. 16, the control unit of the provider server 9 receives the result of the request for use from the personal information management server 1 . If a usable flag or personal information is received as a result of the request for use, it means that the personal information has been provided. process.
On the other hand, if a flag indicating that use is not possible or personal information has not been received as a result of the request for use, this means that the personal information has not been provided. After receiving necessary personal information individually and directly from the user terminal 4 , the department performs transaction processing with the user terminal 4 .

In the above example, a transaction request is made from the user terminal 4, but the same applies even if there is no transaction request from the user terminal 4. FIG. For example, when the business server 9 performs processing using the user's personal information, such as batch processing, the control unit of the business server 9 may perform the processing after S34. In that case, the transaction processing of S36a or S36b is the processing of the provider server 9 only.

Next, the flow of processing related to updating the user's personal information will be described.
FIG. 18 is a diagram for explaining personal information update processing in the personal information management system 100 according to this embodiment.
FIG. 19 is a flowchart showing information provision stop processing of the personal information management server 1 according to this embodiment.
For example, when the user terminal 4 transmits the user's personal information to the operator server 9A, in S61 of FIG. , the user's personal information held in the provider server 9A is updated.

The user's personal information here is information that has been changed among the personal information, and for example, it is assumed that there is a change in the user's address or e-mail address.
Further, the user terminal 4 may transmit the personal information to the business operator server 9A using the transaction application 51b, or may use e-mail, or may use an electronic mail provided by the operator of the business operator server 9A. You may transmit by inputting from HP (homepage) etc. It also includes mailing or facsimile from the user to the business operator A.

In S<b>62 , the control unit (communication sending means) of the provider server 9</b>A transmits an update occurrence notification relating to personal information to the personal information management server 1 .
In S63, the control unit 10 (update processing unit 21) of the personal information management server 1 performs information provision stop processing.

Here, information provision stop processing will be described with reference to FIG. 19 .
In S71 of FIG. 19, the control unit 10 (information specifying unit 22) of the personal information management server 1 receives an update occurrence notification relating to personal information from the provider server 9A.
In S72, the control unit 10 (information specifying unit 22) specifies the personal information in the personal information DB 8 related to the update occurrence notification.
In S73, the control unit 10 (provision stop processing unit 23) updates the provision status of the provision status storage unit 34 corresponding to the specified user of personal information to "provision prohibited".
In S74, the control unit 10 (the provision stop processing unit 23) notifies each business operator server 9 of the stop of provision of the specified personal information.
In S75, the control unit 10 (provision stop processing unit 23) transmits a stop of provision of personal information to the provider server 9 to the user terminal 4 corresponding to the personal information, and ends this process.

When the control unit 40 (notification receiving unit 46) of the user terminal 4 receives the notification related to the suspension of provision of personal information to the provider server 9, the control unit 40 (update request processing unit 48) in S64 of FIG. , the personal information management server 1 is requested to update the personal information. Upon receiving the notification, the control unit 40 (update screen output unit 47) of the user terminal 4 automatically activates the personal information registration application 51a and outputs an update screen (not shown) to the touch panel display 55. You may When the user inputs the latest (new) personal information according to the update screen, the control section 40 (update request processing section 48) may transmit an information update request to the personal information management server 1. FIG.

In S65, the control unit 10 (update information reception processing unit 24) of the personal information management server 1 performs personal information processing upon receiving the information update request. As personal information processing, the update information reception processing unit 24 updates the personal information DB 8 using the user's personal information included in the information update request. Here, the information update request includes the user's face image in addition to the user's personal information. The update information reception processing unit 24 first performs personal authentication processing using the received face image of the user. In the personal authentication process, the received user's face image and the user's face image (this face image is stored in the personal information DB 8) managed by the personal information management server 1 and used in the personal identification process are biometrically generated. It is transmitted to the authentication server 3. In the biometric authentication server 3, the control unit compares the two received face images and calculates the degree of matching between the two face images as, for example, a score. Then, the control unit of the biometric authentication server 3 transmits, for example, the calculated score to the personal information management server 1 as a collation result. When the personal information management server 1 successfully authenticates the user based on the received collation result, the update information reception processing unit 24 then requests the first authentication server 6 to authenticate the received personal information of the user. Then, when authenticated by the first authentication server 6, the update information reception processing unit 24 updates the authenticated personal information in the personal information DB 8. FIG.

Then, in S66, the control unit 10 (update information reception processing unit 24) of the personal information management server 1 cancels the suspension of provision of the user's personal information. The update information reception processing unit 24 changes the provision status of the user ID of the user in the provision status storage unit 34 to "Providable". Further, the control unit 10 of the personal information management server 1 notifies each business operator server 9 of restarting the provision of personal information.
By doing so, the personal information of the user for whom the suspension of provision of personal information has been canceled can be provided to the provider server 9 again.

In the above process, when an update occurs, the control unit 10 of the personal information management server 1 specifies the personal information related to the notification of update occurrence, and notifies each business operator server 9 of suspension of provision. , but is not limited to this. For example, when an update occurs, the control unit 10 of the personal information management server 1 does not notify each business operator server 9 of the suspension of provision, and when the provision of personal information is restarted, each business operator server 9 may be notified to.

Thus, according to this embodiment, the personal information management system 100 has the following effects.
(1) The personal information management server 1 performs identity verification processing of the user, and registers the personal information of the user whose identity has been verified in the personal information DB 8 . In addition, the personal information management server 1 registers whether or not personal information can be provided to each business operator for each user.
Therefore, since the user can decide whether or not to provide personal information for each business operator and register it, it is possible to construct a system in which personal information can be provided only to business operators approved by the user. In addition, since each business operator can receive the personal information of the user by using the personal information management system 100, there is no need for each business operator to collect or manage the personal information, which improves convenience. is good.
With such a mechanism of the personal information management system 100, a personal information platform can be provided to each business operator.

(2) The personal information management server 1 receives from the user terminal 4, requests the first certification authority to authenticate the personal information of the user whose identity has been confirmed, and transfers the authenticated personal information to the personal information Register in DB8.
Therefore, if the personal information registered in the personal information DB 8 is falsified or spoofed, it can be found, so that it can be held as information with high security.
(3) The personal information management server 1 transmits the personal identification information and password information received from the user terminal 4 for personal identification processing to the second certification authority, and the second certification authority to confirm. Then, when the existence is confirmed, the personal information is registered in the personal information DB8.
Therefore, the personal information registered in the personal information DB 8 becomes the personal information authenticated by the second certification authority, and the information stored as the personal information becomes highly reliable.

(4) The personal information management server 1 can construct a mechanism that allows a user to register whether or not to provide personal information for each business operator. Therefore, the user can more finely set whether or not to provide personal information for each business operator, which is convenient.
(5) The personal information management server 1 has an item level storage unit 32 that associates each item of personal information with a level indicating importance, and the user can provide personal information for each business operator. Set the level of personal information you provide when:
Therefore, by assigning levels to information stored as personal information, personal information can be managed according to the level, and management becomes easier.

(6) When the personal information management server 1 receives a personal information use request from the business operator server 9 , it extracts personal information that is permitted to be provided from the personal information DB 8 and transmits it to the business operator server 9 .
Therefore, the enterprise server 9 can compare the user's personal information held by its own server with the user's personal information stored in the personal information DB 8, and obtain the latest information.
(7) When the personal information management server 1 receives an update occurrence notification relating to personal information from the business operator server 9, it identifies the relevant personal information in the personal information DB 8, and sends the identified personal information to the business operator server 9. stop providing.
Therefore, when it is determined that the personal information is not the latest, the provision to all the business operator servers 9 is stopped, so that the old information can be prevented from being used.

(8) When the personal information management server 1 determines that the personal information is not the latest, it notifies the user terminal 4 and requests the provision of the personal information. Therefore, a mechanism for obtaining the latest personal information from the user terminal 4 can be constructed.
(9) If the personal information management server 1 receives a use request from the provider server 9 while the provision of personal information is stopped, the personal information management server 1 notifies the provider server 9 of the impossibility of provision. Therefore, information that cannot be provided can be prevented from being provided to the provider server 9 .
(10) When receiving a personal information update request from the user terminal 4, the personal information management server 1 updates the personal information DB 8 and cancels the suspension of personal information provision. Also, the personal information management server 1 updates the personal information DB 8 using the personal information authenticated by the first authentication server 6 . Therefore, even when personal information in the personal information DB 8 is updated, it can be updated by a mechanism with high security.

Although the embodiments of the present invention have been described above, the present invention is not limited to the above-described embodiments. Moreover, the effects described in the embodiments are merely enumerations of the most suitable effects produced by the present invention, and the effects of the present invention are not limited to those described in the embodiments. The above-described embodiments and modifications described later can be used in combination as appropriate, but detailed description thereof will be omitted.

(deformed form)
(1) In the present embodiment, each user sets the permission level of personal information for each business operator, but the present invention is not limited to this. Each user may set personal information provision items for each business operator. By doing so, you can make more detailed settings. It is desirable that the setting of personal information provision items should be done by setting the permission level, and from among the permission levels, the items to be provided and the items to be prohibited from being provided can be easily registered by checking or the like.

(2) In the present embodiment, an example has been described in which whether or not personal information can be provided from the user terminal to the provider server is registered in advance, but the present invention is not limited to this. By transmitting the items that the provider server wants the user to approve to the personal information management server, the inquiry transmission means of the personal information management server inquires the user terminal about permission to provide personal information, and the user By obtaining an answer to an inquiry from the terminal, the provision propriety information may be obtained from the user terminal.

(3) In the present embodiment, an example has been described in which both authentication by the first certificate authority and authentication by the second certificate authority are performed, but the present invention is not limited to this. For example, if there is no system (mechanism) that corresponds to the second certification authority, processing by the second certification authority may not be performed.

(4) In the present embodiment, an example of receiving a personal information update occurrence notification from a provider server has been described, but the present invention is not limited to this. The possessed information requesting means of the personal information management server 1 may request each business operator server 9 to provide the possessed information. In this case, the held information transmission means of each business server 9 transmits the held information held by the business server 9 to the personal information management server 1 in response to a request from the personal information management server 1 . Then, when the retained information receiving means of the personal information management server 1 receives the retained information from each business operator server 9, the information matching means of the personal information management server 1 receives the retained information received from the business operator server 9. and personal information in the personal information DB 8 are collated. If there is no match as a result of collation, the provision stop means of the personal information management server 1 may stop the provision of personal information.

(5) In this embodiment, it was explained that the personal information DB 8 is a database. The personal information DB 8 may be provided as a database server, or may be distributed among a plurality of computers using blockchain technology.
(6) In the present embodiment, the biometric authentication server performs the process of confirming whether or not the user is the same person based on the image of the personal identification document and the face image of the user himself/herself. not. The personal information management server may have a face matching program, and the personal information management server may extract the image of the face photograph from the image of the personal identification document and compare it with the face image to confirm whether it is the same person. . Also, although the collation result is obtained as a score indicating the degree of collation, it is not limited to this, and may be obtained by other methods.

1 personal information management server 3 biometric authentication server 4 user terminal 6 first authentication server 7 second authentication server 8 personal information DB
9, 9A, 9B Provider server 10, 40 Control unit 11, 41 Registration processing unit 12 Identity verification processing unit 13 Personal information processing unit 14 Provision availability processing unit 16 Usage processing unit 17 Usage request reception unit 18 Status confirmation unit 19 Result processing Units 21, 45 Update processing unit 22 Information specifying unit 23 Provision stop processing unit 24 Update information reception processing unit 30, 50 Storage unit 32 Item level storage unit 33 Provision availability storage unit 34 Provision status storage unit 42 Identity verification request unit 43 Identity verification Result reception unit 44 Provision availability request processing unit 46 Notification reception unit 47 Update screen output unit 48 Update request processing unit 51a Personal information registration application 54a In-camera 54b Out-camera 55 Touch panel display 100 Personal information management system

Claims (9)

A personal information management device communicatively connected to each of a user terminal and a provider device of each provider that provides services to the user of the user terminal,
a personal information database that stores personal information of the user whose identity has been verified by identity verification processing performed with the user terminal;
contact receiving means for receiving an update occurrence contact relating to the personal information from the business operator device;
information identifying means for identifying, from the personal information database, the personal information related to the update occurrence notification received by the communication receiving means;
a provision stop means for stopping provision of the personal information specified by the information specifying means to each business operator;
A personal information management device. In the personal information management device according to claim 1,
possessed information requesting means for requesting the provider device of each business operator to provide the held information held by each business operator with respect to the items of the personal information provided to each business operator;
possessed information receiving means for receiving the possessed information from the operator device of each operator as a request result by the possessed information requesting means;
information collating means for collating the held information received by the held information receiving means with the personal information in the personal information database corresponding to the held information;
with
The personal information management apparatus, wherein the provision stopping means stops providing the personal information in the personal information database collated by the information collating means to each business operator when the collation result by the information collating means is inconsistent. In the personal information management device according to claim 1 or claim 2,
a provision permission/prohibition storage unit that stores provision permission/prohibition information regarding provision permission/prohibition of the personal information to each business operator in association with the user;
a use request receiving means for receiving a use request of the personal information from the business operator device;
provision status confirmation means for checking the utilization and provision status of the personal information that satisfies the utilization request received by the utilization request receiving means;
provision failure notifying means for notifying the provider apparatus of the impossibility of provision when provision of the personal information is stopped as a result of confirmation by the provision status confirmation means;
As a result of confirmation by the provision status confirmation means, if the provision of the personal information has not been stopped, the personal information that satisfies the use request received by the use request receiving means is checked by referring to the provision availability storage unit. Personal information providing means for extracting from the personal information database and transmitting the extracted personal information to the business operator device;
A personal information management device. In the personal information management device according to any one of claims 1 to 3,
provision stop notification means for notifying the user terminal of the user corresponding to the personal information specified by the information specifying means to stop providing the personal information to each business operator;
update request receiving means for receiving an information update request from the user terminal that has transmitted the provision stop notification means;
personal information updating means for updating the personal information database using the personal information of the user included in the information update request received by the update request receiving means;
suspension release means for releasing suspension of provision of the personal information of the user in the personal information database updated by the personal information update means;
A personal information management device. In the personal information management device according to claim 4,
The personal information of each user registered in the personal information database is authenticated by a certification authority that authenticates the personal information,
authentication requesting means for requesting the certification authority to authenticate the personal information of the user included in the information update request received by the update request receiving means;
The personal information management device, wherein the personal information updating means registers the personal information authenticated by the certification authority requested by the authentication requesting means in the personal information database. a user terminal;
an operator device of an operator that provides the service;
a personal information management device communicably connected to each of the user terminal and the business operator device;
A personal information management system comprising
The personal information management device
A personal information database that stores personal information of users whose identities have been verified by identity verification processing performed with the user terminal,
The business operator device comprises contact transmission means for transmitting an update occurrence contact related to the personal information,
The personal information management device
information specifying means for specifying, from the personal information database, the personal information related to the update occurrence notification received from the business operator device;
a provision stop means for stopping provision of the personal information specified by the information specifying means to each business operator;
A personal information management system. a user terminal;
an operator device of an operator that provides the service;
a personal information management device communicably connected to each of the user terminal and the business operator device;
A personal information management system comprising
The personal information management device
a personal information database that stores personal information of users whose identities have been verified by identity verification processing performed with the user terminal;
possessed information requesting means for requesting the provider device of each business operator to provide the held information held by each business operator with respect to the items of the personal information provided to each business operator;
with
The business device of each business includes retained information transmission means for transmitting the retained information held by the business device to the personal information management device in response to a request from the personal information management device,
The personal information management device
possessed information receiving means for receiving the possessed information from the operator device of each operator;
information collating means for collating the held information received by the held information receiving means with the personal information in the personal information database corresponding to the held information;
provision stopping means for stopping provision of the personal information in the personal information database collated by the information collating means to each business operator when the collation result by the information collating means is inconsistent;
A personal information management system. A terminal communicably connected to a personal information management device that manages user's personal information,
Notification receiving means for receiving a notification of suspension of provision of the personal information to each business operator;
update request transmission means for receiving input of the new personal information based on the notification received by the notification receiving means and transmitting an information update request including the received new personal information to the personal information management device;
terminal. A computer, which is a terminal communicably connected to a personal information management device that manages user's personal information,
Notification receiving means for receiving a notification of suspension of provision of the personal information to each business operator;
update request transmission means for receiving input of the new personal information based on the notification received by the notification receiving means and transmitting an information update request including the received new personal information to the personal information management device;
A terminal program that functions as a

Images