JP3949384B2 - Information management system, communication method, program, and recording medium - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an information management system, a communication method, a program, and a recording medium.
[0002]
[Prior art]
Conventionally, transmission of personal information on the Internet has been accompanied by anxiety because security is not guaranteed. Also, in order to conduct transactions such as sales contracts outdoors, it was necessary to bring a card or the like on which personal information was recorded.
[0003]
[Problems to be solved by the invention]
Therefore, an object of the present invention is to enable transactions and the like in a state where security of information related to a user such as personal information is ensured.
[0004]
Also, it is possible to carry out transactions without bringing a card or the like on which personal information is recorded.
[0005]
[Means for Solving the Problems]
In order to achieve the above object, the invention according to claim 1 is an information management system for managing information related to a user, and calling number information management means for managing calling number information of a user's portable terminal, Means for receiving a password issuance request including user identification information, calling number information and a password expiration date from the mobile terminal; and the calling number information in the password issuance request is the user identification information in the password issuance request. Means for accessing and determining the calling number information management means to determine whether or not the relationship is correct, and when the calling number information in the password issuing request is correct, the user identification in the password issuing request Password generation means for generating a password corresponding to the information and having an expiration date in the password issuance request; and Means for transmitting the generated password to the mobile terminal by a password management means for managing the password generated by the password generating means together with the expiration date, and user-related information management means for managing user-related information A means for receiving a user-related information transmission request including user identification information and a password from a communication device, and a relationship between the password in the user-related information transmission request and the user identification information in the user-related information transmission request in whether or not correct, and whether the password has not expired, and means for determining access to the password management device, the correctly user related information password in the transmission request and if the password is not expired, the user-related information transmission necessity User-related information that are identified by the user identification information in the user related information managing means acquires access to the means, the user-related information password in the transmission request correctly, and is the password And means for transmitting the acquired user-related information to the communication device when it is within the expiration date .
[0006]
The invention according to claim 2 is the information management system according to claim 1, wherein the password issuance request further includes information indicating a correspondence relationship between the password and the user-related information, and the password management The means manages a password for each of a plurality of related information for one user, the user related information management means manages a plurality of related information for one user, and the information management system includes the user Related information password in the transmission request correctly, and if the password is not expired, among the user-related information identified by the user identification information in said user-related information transmission request, the password The related information corresponding to is transmitted to the communication device.
[0017]
The invention described in claim 3 is a calling number information managing means for managing calling number information of a user's portable terminal, a password generating means for generating a password corresponding to the user identification information and having an expiration date, and a password generating means. Password management means for managing the password generated together with the expiration date, user-related information management means for managing information related to a user , communication means, authentication of the user identification information and the calling number information. First determination means for performing authentication of the password and the user identification information, second determination means for determining whether or not the password is within an expiration date, and means for acquiring information related to the user with the door, a communication method in an information management system for managing user-related information, in the communication means, From band terminal, user identification information, receiving a password issuance request including the expiration date of the calling number information and password, in the first determination means, calling party number information in the password issuance request, issues the password and determining whether or not correct in relation to the user identification information in the request to access the caller ID information managing unit, if the calling party number information in the password issuance request is correct, the In the password generation means, a password generation step for generating a password corresponding to the user identification information in the password issue request and having an expiration date in the password issue request, and generated by the password generation means by the communication means transmitting been a password to the mobile terminal, to the communication unit Ri, from the communication device, the method comprising: receiving user-related information transmission request including the user identity and a password, in the second determination means, the password in said user-related information transmission request, the user-related information transmission request And determining whether the password is correct in relation to the user identification information and whether or not the password is within the validity period, and transmitting the user related information When the password in the request is correct and the password is within the expiration date, the user association identified by the user identification information in the user related information transmission request in the means for obtaining the user related information Obtaining information by accessing the user related information management means; and the user A transmission step of transmitting the acquired user related information to the communication device by the communication means when the password in the related information transmission request is correct and the password is within the expiration date. And
Invention of Claim 4 is the communication method of Claim 3, Comprising: The said password management means manages the password with respect to each of several relevant information about one user, The said user relevant information management The means manages a plurality of related information for one user, and the step of receiving the password issue request receives a password issue request further including information indicating a correspondence relationship between the password and the user related information. The step of accessing and acquiring the user related information management means includes the step of accessing the user related information transmission request when the password in the user related information transmission request is correct and the password is within the expiration date. Acquire related information corresponding to the password among the related information of the user identified by the user identification information. And wherein the Rukoto.
[0018]
The invention according to claim 5 is a program for causing a computer to execute the communication method according to claim 3 or 4 .
[0019]
The invention described in claim 6 is a computer-readable recording medium in which a program for causing a computer to execute the communication method according to claim 3 or 4 is recorded.
[0026]
According to the above configuration, transactions and the like can be performed in a state in which the security of information related to the user such as personal information is secured.
[0027]
Transactions can be performed without bringing a card or the like on which personal information is recorded.
[0028]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
[0029]
FIG. 1 is a diagram illustrating a configuration example of a communication system in the present embodiment. The terminal 10 is a user's terminal, and takes the form of a mobile terminal (for example, a mobile phone or PHS) in the present embodiment. However, a fixed terminal may be used instead of the portable terminal. The servers 20 and 60, the random password generating device 30, the password issuing storage device 40, and the user related information database 50 manage information related to the user (user related information) under the management of the communication carrier. These devices may be integrated or may communicate with each other as separate devices. The server 70 is a server of a sales company.
[0030]
FIG. 2 is a flowchart illustrating an example of an exchange between a user, a communication carrier, and a sales operator.
[0031]
First, acquisition of a user ID will be described. The user applies in advance to the communication carrier for user-related information to be registered (for example, personal information such as a bank, credit card, driver's license, and member information) by mail or at a handling window (steps S110 and S120). After completing the reception, the communication carrier issues a user ID (user identification information) (S130). In this way, the user can acquire the user ID (S140). The communication carrier registers user related information in the user related information database 50.
[0032]
Next, password acquisition will be described. The user uses the terminal 10 to transmit the acquired user ID and the calling number ID of the terminal 10 to the telecommunications carrier server 20 via the base station, the exchange, various servers, etc. (S210). In the present embodiment, the user can specify the password expiration date on the terminal 10. The specified expiration date is transmitted to the server 20. When a plurality of user related information are registered, the user can specify which related information in the terminal 10 is to be issued a password. The correspondence between the designated user-related information and the password is transmitted to the server 20.
[0033]
The server 20 authenticates the user ID and calling number ID (S220). If the authentication does not match, an error is notified to the terminal 10 and a password is not issued (S230). If the authentication is successful, the server 20 notifies the random password generation device 30 and the random password generation device 30 issues a password with an expiration date (S240). The issued password is notified to the terminal 10 (S250). The issued password is managed in the password issuing storage device 40. In this embodiment, the password issuing storage device 40 manages the correspondence between user identification information and password, the expiration date of the password, and the correspondence between password and user related information.
[0034]
FIG. 3 and FIG. 4 are diagrams showing examples of screen display on the terminal 10. When (3) is selected on the “Menu” screen in FIG. 3, the usage information can be registered. Here, information that has been applied for registration at a window or the like is registered in any order (in the terminal 10). In the example of FIG. 3, information of “XX bank”, “XX card”, and “driving license” is registered as user related information. The registered information can be deleted by selecting (4) on the “Menu” screen. Also, the usage status can be confirmed by selecting (1) on the “Menu” screen. In the example of FIG. 3, a password is issued for the information of “XX bank”, and the expiration date of the password is 70 hours remaining. A password is also issued for the information of “XX card”, and the expiration date of the password is 60 hours remaining. No password has been issued for the “driver's license” information.
[0035]
When (3) is selected on the “Menu” screen of FIG. 3, password issue, password use suspension, or automatic issue selection can be executed for user-related information (FIG. 4). When (1) password issuance is selected on the service selection screen of FIG. 4, the server 20 notifies the password. Here, the expiration date (application time) of the password can be designated. The specified expiration date is transmitted to the server 20. The expiration date can be changed at any time after the password is issued. If (2) password use suspension is selected on the service selection screen of FIG. 4, the already issued password can be invalidated. When receiving the password invalidation request from the terminal 10, the server 20 accesses the password issuing storage device 40 and invalidates the password. When (3) automatic issuance selection is selected on the service selection screen of FIG. 4, a password issuing method can be selected. When “automatic issuance” is selected, a new password is automatically selected when the expiration date selected when the password is issued. On the other hand, when “manual issue” is selected, even if the expiration date has passed, the password is not selected unless the reissue procedure is performed.
[0036]
Next, returning to FIG. 2, issuance of user related information will be described. The user informs the sales company of the acquired password and user ID when making a sale or contract on the Internet or at a general store (S310, S320). For example, the password and the user ID may be transmitted from the user terminal to the server 70, or the store clerk may be informed at the store and the store clerk may input the server 70. The server 70 of the sales company transmits the acquired password and user ID to the server 60 of the communication company (S330). The server 60 determines whether the acquired password is correct in relation to the acquired user ID, whether the password is within the expiration date, and which user related information the password is associated with. This is checked by accessing the password issuing storage device 40 (S340). If the password is incorrect or is not valid, the server 60 notifies the server 70 that the password is incorrect (S350). On the other hand, when the password is correct and within the expiration date, the server 60 accesses the user related information database 50 and acquires the user related information corresponding to the password (S360). Then, the acquired user-related information is transmitted to the server 70 via a dedicated line or the like (S370). The sales company can establish a contract using the user related information received by the server 70 (S380).
[0037]
The terminal 10, servers 20, 60, 70, random password generation device 30, password issuance storage device 40, user-related information database 50, etc. are communicated as described above according to the program stored in its own memory etc. It is possible to perform the following operations. Further, it is conceivable that the program is written on a recording medium (for example, CD-ROM, magnetic disk) or read from the recording medium.
[0038]
【The invention's effect】
As described above, according to the present invention, transactions and the like can be performed in a state in which security of information related to a user such as personal information is ensured.
[0039]
Transactions can be performed without bringing a card or the like on which personal information is recorded.
[Brief description of the drawings]
FIG. 1 is a diagram illustrating a configuration example of a communication system in an embodiment of the present invention.
FIG. 2 is a flowchart showing an example of an exchange between a user, a communication carrier, and a sales operator.
FIG. 3 is a diagram illustrating an example of a screen display on a terminal.
FIG. 4 is a diagram illustrating an example of a screen display on a terminal.
[Explanation of symbols]
10 Terminal 20, 60, 70 Server 30 Random password generation device 40 Password issue storage device 50 User related information database

Claims (6)

An information management system for managing information related to users,
Calling number information management means for managing the calling number information of the user's mobile device,
Means for receiving a password issuance request including user identification information, calling number information, and password expiration date from a mobile terminal;
Means for accessing the calling number information management means to determine whether the calling number information in the password issuing request is correct in relation to the user identification information in the password issuing request;
Password generation means for generating a password having an expiration date in the password issuance request corresponding to the user identification information in the password issuance request when the calling number information in the password issuance request is correct;
Means for transmitting the password generated by the password generation means to the portable terminal;
Password management means for managing the password generated by the password generation means together with the expiration date;
A user-related information management means for managing user-related information;
Means for receiving a user-related information transmission request including user identification information and a password from the communication device;
Whether the password in the user-related information transmission request is correct in relation to the user identification information in the user-related information transmission request, and whether the password is within the expiration date. Means for accessing and determining the password management means;
When the password in the user-related information transmission request is correct and the password is within the expiration date, the user-related information identified by the user identification information in the user-related information transmission request is displayed as the user-related information. Means for accessing and obtaining information management means;
Means for transmitting the acquired user-related information to the communication device when the password in the user-related information transmission request is correct and the password is within the expiration date. system.   The information management system according to claim 1, wherein the password issuance request further includes information indicating a correspondence relationship between the password and the user-related information, and the password management means A password for each of a plurality of related information is managed, the user related information management means manages a plurality of related information for one user, and the information management system is configured to store a password in the user related information transmission request. When the password is valid and within the expiration date, the related information corresponding to the password is transmitted to the communication device among the related information of the user identified by the user identification information in the user related information transmission request. An information management system characterized by Calling number information managing means for managing the calling number information of the user's mobile terminal, password generating means for generating a password corresponding to the user identification information and having an expiration date, and the password generated by the password generating means being the valid Password management means for managing together with a time limit, user-related information management means for managing information related to a user , communication means, first determination means for authenticating the user identification information and the calling number information, A second determination unit that authenticates a password and the user identification information and determines whether or not the password is within an expiration date; and a unit that acquires information related to the user, and manages the user-related information A communication method in an information management system,
In the communication means, receiving a password issuance request including user identification information, calling number information and a password expiration date from the mobile terminal;
In the first determination means, the calling number information management means is accessed to determine whether or not the calling number information in the password issuing request is correct in relation to the user identification information in the password issuing request. And determining,
If calling number information in the password issuance request is correct, Oite said password generating means, corresponding to the user identification information in the password issuance request, the password having an expiration date in the password issuance request A password generation step to generate;
Transmitting the password generated by the password generating means to the portable terminal by the communication means ;
Receiving a user-related information transmission request including user identification information and a password from the communication device by the communication means ;
In the second determination means, whether the password in the user related information transmission request is correct in relation to the user identification information in the user related information transmission request, and the password is valid Determining whether or not the password management means is accessed,
When the password in the user-related information transmission request is correct and the password is within the expiration date, the means for obtaining the user-related information is identified by the user identification information in the user-related information transmission request. Accessing the user related information management means to obtain the related information of the user to be
A transmission step of transmitting the acquired user-related information to the communication device by the communication means when the password in the user-related information transmission request is correct and the password is within the validity period. A characteristic communication method. 4. The communication method according to claim 3, wherein the password management unit manages a password for each of a plurality of related information for one user, and the user-related information management unit includes a plurality of passwords for one user. Manage relevant information for
Receiving the password issuance request, receiving a password issuance request further including information indicating a correspondence relationship between the password and the user related information;
The step of accessing and obtaining the user-related information management means includes the step of: obtaining a user in the user-related information transmission request when the password in the user-related information transmission request is correct and the password is within the expiration date. A communication method comprising: obtaining related information corresponding to the password among related information of a user identified by the identification information.   A program for causing a computer to execute the communication method according to claim 4.   A computer-readable recording medium on which a program for causing a computer to execute the communication method according to claim 5 is recorded.

Images