JP4017591B2 - Service provision / billing system - Google Patents

Description

  The present invention provides a service providing / billing system capable of providing a service via the Internet in response to a user's service provision request via the Internet and charging the user while maintaining anonymity of the user. About.

  As a service provision to the user via the Internet, for example, instead of the user, a large amount of information of the user is accumulated and managed, or various information is provided to the user. While provision of such services becomes easier and more common, it is important to protect personal data of users who use the services.

  Arbitrary information can be considered as personal data to be protected. For example, health data can be cited as information that is large and personal and has a high demand for storage and management. In recent years, sensors in which sensors such as a pedometer (registered trademark), a sphygmomanometer, an electrocardiograph, a heart rate meter, a thermometer, and a positioning meter are integrated with a portable terminal are known. A system is also known in which measurement data from these sensors is transmitted to a server via a mobile terminal and stored in the server. Such health management systems are disclosed in JP 2000-333918 A, JP 2002-157336 A, JP 2002-24404 A, and the like.

  In Japanese Patent Laid-Open No. 2000-333918, a pedometer, a sphygmomanometer, and a GPS are combined with a portable terminal, and a user wears a blood pressure, a pedometer, and a GPS on the body, and acquires these data at regular intervals. The data is transferred from the mobile terminal to the hospital server computer, and the server computer considers the correlation between the data from the pedometer and the blood pressure data, and if the blood pressure measurement value is abnormal, A continuous health management system that can be verified is disclosed.

  Similarly, in Japanese Patent Laid-Open No. 2002-157336, a health management sensor group of a body temperature sensor, a blood pressure sensor, a pulse sensor, and a pedometer is connected to a mobile phone, and an information signal from the health management sensor group is transmitted to the mobile phone. A health management system is disclosed in which a diagnostic mail or the like is delivered to a mobile phone based on the transmitted information signal.

  In Japanese Patent Laid-Open No. 2002-24404, as a registration unit for registering exercise amount data in a server, a method of automatically transmitting measurement data at fixed intervals using a pedometer integrated portable information terminal, a GPS portable information terminal is provided. WEB site input method that measures the distance traveled, automatically transmits the measurement data, measures the number of walks with a pedometer, accesses a predetermined WEB site from a personal computer at home, and transmits the measurement data As a registration unit for registering food and beverage data, a method for transmitting data directly from the store register via the Internet, an external storage medium to the store register A method of transmitting from a portable information terminal, or entering a WEB site that accesses a predetermined WEB site from a personal computer at home and transmits its food / drink amount data A food information registration unit having a registration unit corresponding to each of the force methods, and further, advice based on information registered in the server to send advice on exercise and food to a portable information terminal or computer by e-mail An integrated health information management system comprising a department is disclosed.

  However, in any of the above health management systems, it is essential that alarms, diagnosis, advice, etc. are fed back from the server to the user by e-mail etc. based on the personal data transmitted to the server. There is a problem that anonymity of the user cannot be secured. In the case of a patient who needs monitoring, it is not necessary to place importance on anonymity, but for many healthy users, there is a demand for recording personal data without disclosing their attributes.

  In addition, as another means for protecting personal data, it is possible to associate the personal data of the user with an ID and password that are not related to the user's attributes assigned to the user without requesting disclosure of attribute information at all. . The user can send personal data to the host computer or obtain information from a predetermined site using an ID and password that have nothing to do with the user's attributes.

  However, when considering a business using the Internet, how to perform billing and settlement from the user is another important problem. This is because charging / settlement cannot be made to an anonymous user while maintaining the user's anonymity.

JP 2000-333918 A JP 2002-157336 A Japanese Patent Laid-Open No. 2002-24404

  The problem to be solved by the present invention is to provide a system that can charge a user who uses an Internet service while ensuring the anonymity of the user. Another object of the present invention is to provide a system that can easily manage an identification code necessary for using a service of the Internet when the user uses the service.

In order to solve the above-described problem, the invention according to claim 1 records user ID data for identifying a user and global address data uniquely assigned to hardware necessary for making a payment. A service for protecting personal data and charging for a user of a portable terminal having a storage means and capable of wireless data communication and a telephone call through a wireless communication carrier A service provision / billing system,
The user ID data, having the global address data and a second memory means for communicating the carrier type data is Ru stored associated identifying the communication carrier to be used, and the mediation server,
A service providing server having third storage means for storing global address data and personal data related to the service in association with each other;
A communication carrier management device having fourth storage means for storing the user ID data and charging data imposed on the user in association with each other;
Have
The intermediary server registers user ID data, global address data, and communication carrier type data for identifying a communication carrier to be used in the second storage unit, and transmits the registered global address data to the service providing server. Has a user registration department,
The service providing server includes:
A personal data registration unit for registering the global address data transmitted from the user registration unit in the third storage unit;
When there is a service provision request via the Internet using the global address data as a key, it is determined whether or not the global address data is registered in the third storage device, and the global address data is registered in the third storage device If are those, a service providing section for storing personal data relating to the service in association with its global address data in the third storage means,
A payment requesting unit that associates billing data according to service to the user, global address data, and identification data for identifying the service providing server, and transmits the data to the mediation server,
When the intermediary server receives the billing data, the global address data, and the identification data for identifying the service providing server from the settlement request unit, the intermediate server refers to the second storage means, and from the global address data, the user ID data and the communication carrier indexing and classification data, in association with the user ID data and the billing data includes a settlement intermediation unit for the transmitting to the communication carrier managing apparatus corresponding to the communication carrier type data indexing,
The communication carrier managing apparatus, the charging data from the settlement intermediation unit has a settlement accepting unit for recording in the fourth storage means in association with the user ID data,
The service providing server does not hold the user ID data, and the service providing unit and the settlement request unit of the service providing server do not transmit / receive user ID data at all,
The settlement mediation unit of the mediation server does not transmit identification data for identifying the service providing server in association with user ID data to the communication carrier management device;
It is characterized by that.

  The invention described in claim 2 is characterized in that the user ID data described in claim 1 is a telephone number or a mail address.

  According to a third aspect of the present invention, the service provided by the service providing unit of the service providing server according to the first or second aspect is a presentation of personal data of a user stored in the third storage means via the Internet. It is characterized by.

The invention according to claim 4 is data in which the personal data according to claim 3 is generated by a personal data generation unit mounted on the mobile terminal,
The personal data generated by the personal data generation unit is transmitted to the service providing server using global address data as a key, and recorded in the third storage means of the service providing server in association with the global address data. It is characterized by being.

  The invention according to claim 5 is characterized in that the personal data of the user stored in the third storage means of the service providing server according to claim 1 or 2 is service usage history data of the user.

  According to the present invention, when the user requests the service providing server to provide a service, the global address data is used as a key, so that the anonymity of the user can be maintained. On the other hand, when charging the service from the service providing server to the user, the charging data is associated with the global address data and sent to the mediation server. The mediation server calculates user ID data from the global address data and sends it to the communication carrier management device. Thus, in the communication carrier management apparatus, the user ID data for identifying the user necessary for performing the payment is used, and the processing necessary for performing the payment is performed in the same manner as the payment for the use of the user's communication carrier. Will be able to. In this way, the user who uses the Internet service can be charged while ensuring the anonymity of the user.

  Global address data is used as a key to use services over the Internet, and it is assigned to hardware. Therefore, users do not have to remember the data, and it takes time and effort to manage it. Can be omitted.

  According to the second aspect of the present invention, the user ID data can be easily remembered by the user by using a telephone number or an e-mail address, and the labor required for the management can be saved.

  According to the third aspect of the present invention, a large amount of personal data can be recorded in the third storage means regardless of the limitation of the memory capacity of the portable terminal. Even if the power of the portable terminal is lost and the battery is replaced, personal data is recorded in the third storage means, so that loss of data can be prevented and data continuity can be maintained.

  If the mobile terminal is exchanged and stolen or lost, the global address data can be changed by the mediation server and the service providing server to maintain data continuity.

  According to the fourth aspect of the present invention, a large amount of personal data generated by the personal data generation unit mounted on the mobile terminal can be recorded in the third storage means regardless of the memory capacity limitation of the mobile terminal. it can. The user can store the personal data generated by the personal data generation unit in the third storage unit while keeping anonymity.

  According to the fifth aspect of the present invention, a service providing server that can use a service while providing anonymity to personal data such as what service is used by the user and provides the service On the side, it is possible to charge for service use while maintaining the anonymity of the user.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. The following embodiments do not limit the present invention.

(First embodiment)
FIG. 1 is a block diagram showing the overall configuration of the service providing / billing system according to the first embodiment of the present invention. In the figure, 10 is a mobile terminal carried by a user, 20 is a mediation server (PASP) for personal data protection and settlement, and 30 is a service providing server that provides a service that the user desires to use. In this case, it is a service providing server (referred to as HASP) that accumulates and manages a large amount of user information. Reference numeral 40 denotes a payment execution apparatus or a communication carrier management apparatus that actually performs payment or manages data necessary for payment.

  The mobile terminal 10 is a mobile terminal such as a mobile phone or a PHS, and includes a communication unit and a memory 14. The memory 14 may be a memory that can be removed from the mobile terminal 10 in addition to a memory that is fixedly built in the mobile terminal 10. For example, an SD card, a SIM card (Subscriber Identity Module Card), a UIM card (User Identity) It can be a small card type memory that can be mounted on a portable terminal such as a module card. A telephone number or a user-specific mail address is recorded in a memory built into the mobile terminal 10 or a memory card that can be mounted on the mobile terminal 10.

  Furthermore, the mobile terminal 10 is equipped with a personal data generation unit 16 for generating data that is personal data. As the personal data generation unit 16, for example, user personal data relating to health such as a pedometer (registered trademark) and time series data of an electrocardiograph may be acquired and stored. Alternatively, the personal data generation unit 16 may be a GPS that measures the current position and outputs latitude / longitude data, and a camera that captures the surroundings and outputs image data, and acquires user personal data related to the action. Thus, the accumulation process can be performed.

  The PASP 20, the HASP 30 and the communication carrier management device 40 are configured by computer devices, and each includes a CPU, RAM, ROM, communication interface circuit, storage device such as a fixed disk, etc., not shown. These operators may be the same, but are generally different. Although only one PASP 20, HASP 30, and communication carrier management device 40 are shown in the figure, there may be a plurality of them. However, the user and the PASP 20 have a one-to-one correspondence, and it is considered that one service providing / charging system is configured for each PASP 20.

  A contract has been made in advance between the user and the operator of the PASP 20 to use the service providing / billing system. In addition, a contract for configuring this service providing / billing system is made with a single PASP 20 operator with a plurality of HASP 30 operators. However, there is no direct contract between the user and the HASP 30 operator. Between the user and the operator of the communication carrier management device 40, the user can make wireless data communication and call using the communication carrier and pay for the use according to a predetermined contract. The user is assigned a telephone number and a mail address for using the service from the communication carrier management device 40, and between the user and the operator of the communication carrier management device 40, A settlement means using automatic deduction from a bank account for payment, credit card payment, and the like has been established.

  Next, data managed and stored in the storage devices of the mobile terminal 10, the PASP 20, the HASP 30, and the communication carrier management device 40 will be described together with reference to FIG.

  The memory 14 of the mobile terminal 10 stores user ID data, object ID data, personal data, and communication carrier type data. The user ID data is the aforementioned telephone number or mail address assigned by the communication carrier management device 40 or its operator. This is because this telephone number or e-mail address becomes an identification code necessary for making a payment in the communication carrier management device 40. Alternatively, the user ID data may be any user ID data separately allocated with the communication carrier management device 40, but may be a telephone number or an email address as a code that can be easily stored by the user. The object ID data is a unique ID assigned to the hardware of the mobile terminal 10 and can be global IP address data. For example, when IPv6 is used, it is a 2 32 digit number string. The personal data is data acquired from the personal data creation unit, and is time-series data associated with time. The communication carrier type data is a code for identifying the communication carrier management device 40 with which the user has a contract among the plurality of communication carrier management devices 40 or the operator thereof.

  The storage device 24 of the PASP 20 stores a database 240 in which user ID data, object ID data, communication carrier type data, billing data, and HASP identification data are recorded for users who have signed a contract. In principle, the personal data of the user is not stored in the PASP 20. The billing data is data calculated by the HASP 30 described later. The HASP identification data is a code for identifying the HASP 30.

  The storage device 34 of the HASP 30 stores a database 340 in which object ID data and personal data, PASP identification data, and billing data are recorded in association with the object ID data. The personal data is time-series data acquired by the personal data generation unit 16 of the mobile terminal 10 described above. The PASP identification data is a code for identifying the PASP 20. The object ID data and the PASP identification data are provided from the PASP 20 for each user who has signed a contract with the PASP 20 after the contract of the operators of the PASP 20 and the HASP 30 has been signed. The billing data is calculated according to the charge system of the HASP 30. For example, when the charge system is based on the data amount of the personal data, the value corresponding to the personal data is automatically calculated.

  The storage device 44 of the communication carrier management device 40 stores a database 440 in which user ID data and billing data are recorded in association with each other. The billing data here can include not only billing data for using the service of the HASP 30 but also a communication carrier usage fee.

  The memory 14 of the mobile terminal 10 stores a program for executing the service providing / billing system of the present invention. The program includes the personal data transmitting unit 110 and the personal data browsing unit 120. To function as.

  The storage device 24 of the PASP 20 stores a program for executing the service providing / billing system of the present invention, and this program causes the PASP 20 to function as the user registration unit 210 and the payment mediation unit 220.

  The storage device 34 of the HASP 30 stores a program for executing the service providing / billing system of the present invention. This program stores the HASP 30 in the personal data registration unit 310, the personal data presentation unit (service providing unit) 320. And function as the settlement request unit 330.

  The storage device 44 of the communication carrier management device 40 stores a program for executing the service providing / billing system of the present invention, and this program causes the communication carrier management device 40 to function as the payment accepting unit 410.

  The operation of the service providing / billing system configured as described above will be described.

In the following specific example, a pedometer (registered trademark) is used as the personal data generation unit 16 mounted on the mobile terminal 10 and the step count data obtained by the personal data generation unit 16 is personal data. This will be described with reference to FIG.
(1) Initial registration Initial registration is registration performed at the PASP 20 after the contract between the user of the mobile terminal 10 and the operator of the PASP 20 is performed. The user registration unit 210 includes user ID data and objects provided by the user. The ID data and the communication carrier type data are registered in the storage device 24, and the object ID data registered together with its own PASP identification data is transmitted to the HASP 30. The personal data registration unit 310 of the HASP 30 registers the PASP identification data and the object ID data in the storage device 34 in association with each other.
(2) Use of Service When the personal data generation unit 16 of the mobile terminal 10 measures the step count data for a predetermined period (for example, one day), the step count data and date data are stored in the memory 14 of the mobile terminal 10 ( Step S10). The personal data transmission unit 110 of the portable terminal 10 transmits the step count data and date data stored in the memory 14 in association with the object ID data for each predetermined period (step S12) (step S14). Further, the personal data transmission unit 110 organizes data stored in the memory 14, deletes old data, arranges memory areas in the memory 14 (step S16), and the capacity in the memory 14 is reduced. Avoid overflow.

  Data transmitted from the mobile terminal 10 is transmitted to a predetermined site of the HASP 30 via a communication carrier provided by the communication carrier management device 40 and via the Internet.

  When the HASP 30 receives the data, the personal data registration unit 310 is activated and determines whether or not the object ID data is registered in the storage device 34 (step S30). Stores the sent personal data in the database 340 in association with the object ID data (step S32).

In this way, the step count data is sequentially accumulated in the storage device 34 of the HASP 30. When the user wants to use the personal data stored in the HASP 30, that is, when he / she wants to browse, the user browses the personal data stored in the HASP 30 from the mobile terminal 10 that has transmitted (2-1) personal data. And (2-2) browsing from an Internet device such as a computer or a television.
(2-1) When browsing from the mobile terminal 10 that sent the personal data In this case, the personal data browsing unit 120 accesses the dedicated site of the HASP 30 and sends its object ID to the HASP 30 to send the personal data. A browsing request is made (step S18). The personal data presentation unit 320 of the HASP 30 determines whether or not the object ID data is registered and appropriate (step S34). If the object ID data is appropriate, the individual corresponding to the object ID received from the database 340 is determined. Data is extracted and sent in a format that can be displayed on the mobile terminal 10 (step S36).

For example, the number of steps for a predetermined period (one day today), the number of steps taken in a month, the average number of steps taken in a month, the calorie consumption, etc. are displayed on the screen of the mobile terminal 10.
(2-2) When browsing from an Internet device such as another computer or TV that is not the mobile terminal 10 that transmitted the personal data In this case, the mobile device 10 is connected to the Internet device, and the mobile device 10 is connected to the mobile device 10 from the Internet device. The object ID data is read, and the read object ID data is used to access a dedicated site different from that for the mobile terminal 10 of the HASP 30, and the object ID is transmitted to the HASP 30 to make a personal data browsing request. . The personal data presentation unit 320 of the HASP 30 extracts personal data corresponding to the received object ID from the database 340, and transmits it in a format that can be displayed on the Internet device.

  For example, on the screen of the Internet device, the number of steps for a predetermined period (today, today), the number of steps taken in a month, the average number of steps taken in a month, the calorie consumption, etc. are displayed. In general, since it is possible to display a variety of displays on the Internet device rather than to display on the mobile terminal 10, a display with various edits may be displayed, and a step count graph or the like is also displayed. (See, for example, FIG. 5).

When the user browses his / her own personal data stored in the storage device 34 of the HASP 30, the following effects are obtained.
The object ID uniquely assigned to the mobile terminal 10 is used as a key for managing data in the HASP 30 and a key for requesting data browsing from the user. The object ID is related to the user. Therefore, the user's anonymity with respect to the HASP 30 can be ensured.
A large amount of personal data can be recorded in the database 340 regardless of the capacity limitation of the memory 14 in the mobile terminal 10.
Even if the power of the mobile terminal 10 is lost and the battery is replaced, personal data is recorded in the database 340, so that loss of data can be prevented and data continuity can be maintained.
Since the object ID uniquely assigned to the portable terminal 10 is used as a key for a data browsing request to the HASP 30, the object ID is used for the same / non-identity between the personal data transmission source and the browsing requester. Can be determined reliably. In addition, the user does not have the trouble of managing passwords.
(3) Replacement of mobile terminal, loss or theft When the user uses another mobile terminal 10 due to replacement of the mobile terminal 10 or loss / theft of the mobile terminal 10, the object ID is changed. In this case, the portable terminal 10 makes a registration change request to the PASP 20, the PASP 20 updates the object ID of the database 240, and the PASP 20 makes a registration change request to the HASP 30. Then, the HASP 30 updates the object ID data in the database 340. Thus, the continuity of the personal data is maintained by updating the object ID data.
(4) Billing / settlement Next, billing / settlement will be described. The settlement request unit 330 of the HASP 30 obtains billing data for each object ID at a predetermined time period (step S37), and transmits the billing data and the HASP identification data to the corresponding PASP 20 in association with the object ID (step S38). ).

  When the PASP 20 receives the data, the payment intermediary unit 220 is activated, refers to the object ID data from the received data, and retrieves the user ID data and communication carrier associated with the object ID data from the database 240. The type data is extracted (step S20), and the user ID, the communication carrier type data, and the billing data are transmitted to the communication carrier management device 40 toward the communication carrier management device 40 corresponding to the communication carrier type data (step S20). S22). The processing in the PASP 20 may be batch processing, and charging data for the same user from a plurality of HASPs 30 may be aggregated and then sent to the communication carrier management device 40. Further, billing data obtained by adding the brokerage fee in the PASP 20 to the billing amount from the HASP 30 may be sent to the communication carrier management device 40.

  In the communication carrier management device 40, when the data is received by the payment accepting unit 410, the charging data is recorded in association with the user ID in the database 440 of the storage device 44 (step S40), and the payment means corresponding to the user ID The settlement is performed (step S42).

  The price corresponding to the billing data collected from the user by the operator of the communication carrier management device 40 is paid to the operator of the HASP 30 via the operator of the PASP 20.

  In this way, the user pays a usage fee for the HASP 30, while maintaining anonymity for the HASP 30.

(Second Embodiment)
Next, FIG. 6 is a block diagram showing the overall configuration of the service providing / billing system according to the second embodiment of the present invention. Portions similar to those in the first embodiment are denoted by the same reference numerals.

  In the figure, reference numeral 60 denotes a service providing server that the user desires to use, and the service providing server in this embodiment is a server (referred to as CSP) that provides various contents to the user.

  The storage device 64 of the CSP 60 stores object ID data and a database 640 in which personal data and billing data are recorded in association with the object ID data. The personal data is history data of contents distributed to the user. The billing data is calculated according to the fee system of the CSP 60. For example, in the case of a fee system corresponding to the data amount of the distributed content, a value corresponding to the personal data is automatically calculated.

  The storage device 64 of the CSP 60 stores a program for executing the service providing / billing system according to the present invention. The program stores the CSP 60 in the personal data registration unit 610 and the content providing unit 620 (service providing unit). ) And the settlement request unit 630.

  The operation of the service providing / billing system configured as described above will be described.

The first embodiment and (1) initial registration are the same. When the PASP identification data and the object ID data are sent from the PASP 20 to the CSP 60, the personal data registration unit 610 registers the object ID data in the storage device 64.
(5) Service Use After registration, when a user uses a service, the user may use the service from the mobile terminal 10 or may use the service from another computer other than the mobile terminal 10 or an Internet device such as a television.
(5-1) Using from the mobile terminal 10 that has transmitted the personal data In this case, the site of the CSP 60 is directly accessed, the object ID data is transmitted, and a content download request is made (step S19). The content providing unit 620 of the CSP 60 determines whether or not the object ID data is registered properly (step S60). If the object ID data is appropriate, the mobile terminal 10 can receive the requested content. In this way, transmission is performed (step S62). Further, the usage history of the content is recorded in the database 640 in association with the object ID data (step S63).

(5-2) When using from another computer or Internet device such as a TV that is not the mobile terminal 10 that transmitted the personal data In this case, the mobile device 10 is connected to the Internet device, and the mobile device 10 is connected to the mobile device 10 from the Internet device. The object ID is read, and the read object ID is used to access a dedicated site different from that for the mobile terminal 10 of the CSP 60, and the object ID is transmitted to the CSP 60 to make a content download request. The content providing unit 620 of the CSP 60 determines whether or not the object ID data is registered and is appropriate, and if so, transmits the requested content in a format that can be received by the Internet device. To do. Further, the usage history of the content is recorded in the database 640 in association with the object ID data.
(6) Billing / Payment The payment request unit 630 of the CSP 60 obtains billing data for each object ID at a predetermined time period (Step S64), and transmits the billing data in association with the object ID to the PASP 20 (Step S66). ). The accounting data can be determined based on the usage history recorded in the database 640.

  When the PASP 20 receives the data, the payment intermediary unit 220 is activated, refers to the object ID from the received data, and stores the user ID and communication carrier type data associated with the object ID from the database 240. Is extracted (step S20), and the user ID, communication carrier type data, and billing data are transmitted to the communication carrier management device 40 toward the communication carrier management device 40 corresponding to the communication carrier type data (step S22).

  In the communication carrier management device 40, when the data is received by the payment accepting unit 410, the charging data is recorded in association with the user ID in the database 440 of the storage device 44 (step S40), and the payment means corresponding to the user ID The settlement is performed (step S42).

  The price corresponding to the billing data collected from the user by the operator of the communication carrier management device 40 is paid to the operator of the CSP 60 via the operator of the PASP 20.

  In this way, the user pays a usage fee for the CSP 60, while maintaining anonymity for the CSP 60.

It is a block diagram showing the whole structure of the service provision and charging system concerning the 1st Embodiment of this invention. It is explanatory drawing of the data managed and stored in each memory | storage device of the portable terminal 10, PASP20, HASP30, and the communication carrier management apparatus 40. FIG. It is explanatory drawing explaining the data flow of the portable terminal 10, PASP20, HASP30, and the communication carrier management apparatus 40. FIG. 4 is a flowchart showing processing of the mobile terminal 10, the PASP 20, the HASP 30, and the communication carrier management device 40. It is an example of a display when data browsing of personal data is performed. It is a block diagram showing the whole structure of the service provision and charging system concerning the 2nd Embodiment of this invention. It is a flowchart showing the process of the portable terminal 10, PASP20, CSP60, and the communication carrier management apparatus 40 in 2nd Embodiment.

Explanation of symbols

10 mobile terminal 14 memory (first storage means)
16 Personal data generator 20 Mediation server (PASP)
24 storage device (second storage means)
30 Service providing server (HASP)
34 Storage device (third storage means)
320 Personal data presentation department (service provision department)
330 payment request unit 40 communication carrier management device 44 storage device (fourth storage means)
410 Settlement acceptance unit 60 Service providing server (CSP)
64 storage device (third storage means)
620 Content providing unit (service providing unit)
630 Settlement request section

Claims (5)

It has first storage means for recording user ID data for identifying a user and global address data uniquely assigned to hardware, which are necessary for making a settlement, and wirelessly via a wireless communication carrier. A service provision / billing system for providing a service while protecting personal data for a user of a mobile terminal capable of data communication and a telephone call,
The user ID data, having the global address data and a second memory means for communicating the carrier type data is Ru stored associated identifying the communication carrier to be used, and the mediation server,
A service providing server having third storage means for storing global address data and personal data related to the service in association with each other;
A communication carrier management device having fourth storage means for storing the user ID data and charging data imposed on the user in association with each other;
Have
The intermediary server registers user ID data, global address data, and communication carrier type data for identifying a communication carrier to be used in the second storage unit, and transmits the registered global address data to the service providing server. Has a user registration department,
The service providing server includes:
A personal data registration unit for registering the global address data transmitted from the user registration unit in the third storage unit;
When there is a service provision request via the Internet using the global address data as a key, it is determined whether or not the global address data is registered in the third storage device, and the global address data is registered in the third storage device If are those, a service providing section for storing personal data relating to the service in association with its global address data in the third storage means,
A payment requesting unit that associates billing data according to service to the user, global address data, and identification data for identifying the service providing server, and transmits the data to the mediation server,
When the intermediary server receives the billing data, the global address data, and the identification data for identifying the service providing server from the settlement request unit, the intermediate server refers to the second storage means, and from the global address data, the user ID data and the communication carrier indexing and classification data, in association with the user ID data and the billing data includes a settlement intermediation unit for the transmitting to the communication carrier managing apparatus corresponding to the communication carrier type data indexing,
The communication carrier managing apparatus, the charging data from the settlement intermediation unit has a settlement accepting unit for recording in the fourth storage means in association with the user ID data,
The service providing server does not hold the user ID data, and the service providing unit and the settlement request unit of the service providing server do not transmit / receive user ID data at all,
The settlement mediation unit of the mediation server does not transmit identification data for identifying the service providing server in association with user ID data to the communication carrier management device;
Service provision / billing system characterized by this.   2. The service providing / billing system according to claim 1, wherein the user ID data is a telephone number or a mail address.   The service providing / billing according to claim 1 or 2, wherein the service provided by the service providing unit of the service providing server is a presentation of personal data of the user stored in the third storage means via the Internet. system. The personal data is data generated by a personal data generator mounted on the mobile terminal,
The personal data generated by the personal data generation unit is transmitted to the service providing server using global address data as a key, and recorded in the third storage means of the service providing server in association with the global address data. 4. The service providing / billing system according to claim 3, wherein:   3. The service providing / billing system according to claim 1, wherein the personal data of the user stored in the third storage means of the service providing server is user service usage history data.

Images