JP4167540B2 - Disclosure identifier generation / restoration method, rewrite method, invalidation method, identity confirmation method and apparatus thereof - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
In the present invention, the user identifier can be uniquely identified, and the user identifier can be used in place of the user identifier that can request a service related to the user to the service providing system by presenting the user. The present invention relates to a technique for generating an identifier for disclosure to be disclosed to the three parties, restoring, rewriting, invalidating, and confirming the identity.
[0002]
[Prior art]
Conventionally, a user identifier that can uniquely identify a user and that can present a service related to the user to the service providing system by presenting the user has been used.
[0003]
For example, if a telephone number of the other party is transmitted from a telephone to a public telephone network operated by a telecommunications carrier, a telephone call can be made with the other party, and a computer or the like can be connected to a server operated by an Internet service provider. When an e-mail describing the e-mail address of the other party is transmitted from the terminal device, it is possible to send the e-mail to the other party's terminal device, and for an information providing system provided with a database in which personal information is registered When the other party's ID is input, it is possible to access the other party's personal information.
[0004]
By the way, the above-mentioned user identifier may be notified as a contact address when a user applies for a sweepstakes or applies for mail order, and the user identifier disclosed by such user's own actions However, it may be illegally leaked to a third party without the user's permission.
[0005]
Once the user identifier is known to such a third party, use such as spam calls and spam mails for sales and solicitation frequently appearing and personal information leaked There was a problem that it would be used for purposes other than the user's expectation.
[0006]
As a method for solving such a problem, the callee identifier and the callee identifier are generated in association with each other, and only when the caller requests communication by presenting an access ticket that can be verified by the communication service provider, the callee There has been a method for enabling communication with a computer (see Patent Document 1).
[0007]
[Patent Document 1]
JP 2000-201169 A
[0008]
[Problems to be solved by the invention]
However, in the conventional method described above, there is a problem that in order to prevent the occurrence of annoying communication or the like, it is necessary to limit who can issue an access ticket, that is, who can set a provided service. In addition, the conventional method requires an access ticket in addition to the user identifier, and there is a problem that it is difficult to use in a situation where an e-mail address is registered in an existing EC site or the like.
[0009]
An object of the present invention is to solve such a conventional problem, so that anyone who knows a user identifier can set a service to be provided and can be used in the same way as a normal user identifier. The purpose is to realize a technique for preventing the user from using it for an unexpected purpose.
[0010]
[Means for Solving the Problems]
In the present invention, a user having a uniquely identifiable identifier, a third party (hereinafter referred to as a user) who wants to use the identifier, a service request specifying the user identifier, and a service related to the user In a system comprising a service providing system for providing information, a device (disclosure identifier generating device) for generating a disclosure identifier T for disclosing to a user using a user identifier R is provided and used together with a service request. The problem is solved by providing a device (disclosure identifier restoration device) for restoring the user identifier R from the disclosure identifier T.
[0011]
The disclosure identifier generating device includes additional information C including a condition for the user identifier R transmitted from the user terminal device and information C0 that can be obtained by the disclosure identifier restoring device or the service providing system when a third party service is requested. And a means for receiving a request for generating a disclosure identifier designating at least a part of the user identifier R together with additional information C so that it can be decrypted only by a disclosure identifier restoring device, and disclosed based on the encryption result And a means for generating a use identifier T (disclosure identifier generation means).
[0012]
Further, the disclosure identifier restoring device receives a service request specifying the disclosure identifier T transmitted from a third party terminal device directly or through a service providing system together with the information C0 (service request receiving unit); , Means for decrypting the disclosure identifier T to obtain a user identifier R and additional information C (restoration means), and means for selecting a service request processing method based on the additional information C and information C0 (service request Processing determination means).
[0013]
Here, the disclosure identifier restoring apparatus may be integrated with the service providing system. FIG. 1 shows a basic configuration of the present invention when it is integrated with a service providing system as a disclosure identifier restoring apparatus.
[0014]
In FIG. 1, 1 is a user terminal device (user terminal), 2 is a user terminal device (user terminal), 3 is a disclosure identifier generating device, and 4 is a service providing system (disclosure identifier restoring device). These are communicably connected via a network (not shown).
[0015]
The disclosure identifier generating device 3 includes the disclosure identifier generation request receiving unit 31, the disclosure identifier generating unit 32, and the disclosure identifier notifying unit 33 for notifying the terminal device 1 of the disclosure identifier T. The service providing system 4 includes a service according to the service request receiving means 41, the restoring means 42, the service request processing determining means 43, and a service request processing method selected by the service request processing determining means 43. Service execution means 44 for executing the following.
[0016]
The service provided by the service providing system 4 includes a communication service such as telephone connection to a user and electronic mail delivery, a search service for information related to the user, and the like.
[0017]
In the above configuration, the disclosure identifier generation request receiving means 31 of the disclosure identifier generation device 3 includes the identifier R of the user transmitted from the user terminal 1 and the disclosure identifier restoration device or service at the time of a third party service request. A request for generating an identifier for disclosure specifying the additional information C including the condition for the information C0 available to the providing system is received. Regarding the transmission of the generation request designating the user identifier R and the additional information C, when the user voluntarily transmits to the disclosure identifier generation device 3, the request on the user side is directly or the disclosure identifier generation device 3 In this case, it is possible to transmit the information in a form that is transmitted to the user through the user's permission and approved by the user.
[0018]
Here, information C0 that can be obtained by the disclosure identifier restoring apparatus or the service providing system at the time of a third party service request (for example, the name or identifier of a user who is usually requested to input at the time of the service request, the date and time at the time of the service request, etc. As the additional information C including the condition for), information limiting the user (third party) or user terminal and information limiting the usable period of the identifier T for disclosure can be considered. The usage conditions of the service identifier T can be limited. Examples of information that limits a user or user terminal include an identifier of the user or user terminal and a hash value calculated from this identifier. Also, examples of information that limits the usable period include the expiration date of the disclosure identifier T, the effective time zone (night prohibition, etc.), and the like.
[0019]
When the user identifier R and the additional information C are received, the disclosure identifier generating means 32 of the disclosure identifier generating device 3 encrypts at least a part of the user identifier R together with the additional information C so that it can be decrypted only by the service providing system 4. The disclosure identifier T is generated based on the encryption result, and the disclosure identifier notifying unit 33 notifies (discloses) this to the user terminal 1. After this, the identifier T for disclosure is notified (disclosed) from the user terminal 1 to the user terminal 2. As a specific method at that time, the user directly communicates to the user. Alternatively, it may be by telephone, FAX, mail or the like, or may be communicated through an intermediary.
[0020]
On the other hand, the user terminal 2 that has received the disclosure identifier T designates it and requests a service from the service providing system 4. At this time, the service request receiving means 41 of the service providing system 4 receives the request for disclosure. Information C0 is received together with identifier T. The restoring means 42 of the service providing system 4 decodes the disclosure identifier T to obtain the user identifier R and the additional information C.
[0021]
The additional information C and the information C0 are sent to the service request processing determination unit 43 of the service providing system 4, and the service request processing determination unit 43 selects a service request processing method based on these, for example, selects the requested service. Select whether or not to provide. The service execution unit 44 of the service providing system 4 provides the service using the user identifier R, for example, when the service is provided based on the selection result in the service request processing determination unit 43, and rejects the service. If you do nothing.
[0022]
As an example of a method for generating the disclosure identifier T, an information string formed by concatenating at least a part of the recipient identifier R and the additional information C is used as a disclosure identifier restoring device, here a public key disclosed by the service providing system 4 The encryption method can be considered. In this case, the service providing system 4 decrypts the disclosure identifier with the secret key corresponding to the public key, and acquires the user identifier R and the additional information C.
[0023]
Further, instead of the public key, the disclosure identifier generating device 3 and the disclosure identifier restoring device, here, the common key shared by the service providing system 4 may be used for encryption / decryption. Either or both of the user identifier R and the predetermined additional information C may be compression-encoded before conversion, and decompression decoding may be performed after decoding.
[0024]
FIG. 2 shows an example of the process of generating the disclosure identifier T. Here, the user identifier R is the user's mail address, and the additional information C limits the user (disclosure destination) terminal and the usable period. A case where information is included will be described.
[0025]
Here, the user's e-mail address R is tanaka @ ocn, and a hash value (Sa = hash (suzuki @ ntt) calculated from the e-mail address S (= suzuki @ ntt) of the user terminal as information for limiting the user terminal. )) And encryption using the expiry date April 30, 2003 (Tp = 2003.04.30) as information that limits the usable period, for example,
cryptopt ( tanaka @ ocn , Sa = hash ( suzuki @ ntt ), Tp = 2003.04.30)
If the result obtained as is encoded into text data, for example
h4Bsc6TuPGeFSW / fl + p323iNVii + LQG4
It becomes. By adding a domain name of a service providing system as a mail relay server, for example, “adhoc-mail.ne.jp” to this,
h4Bsc6TuPGeFSW / fl + p323iNVii + LQG4 @ adhoc-mail. ne. jp
Is obtained.
[0026]
Here, the additional information C and the information C0 may be sent to the user terminal, and the service request processing method may be selected on the user terminal side.
[0027]
FIG. 3 shows an example of a system for realizing such a disclosure identifier generating / restoring method. The user terminal 1 selects a service request processing method based on the additional information C and the information C0. The service providing system 4 includes information notifying means 45 for notifying the user terminal 1 of the additional information C and the information C0. Other configurations are the same as those in FIG.
[0028]
In the above configuration, a disclosure identifier T is generated and notified by the disclosure identifier generation device 3 in accordance with a request from the user terminal 1, and this is disclosed from the user terminal 1 to the user terminal 2. The operation until the service providing system 4 is requested by specifying the disclosure identifier T is the same as that shown in FIG.
[0029]
When the user terminal 2 specifies the disclosure identifier T and requests a service from the service providing system 4, the service request receiving unit 41 of the service providing system 4 receives the information C0 together with the disclosure identifier T. The restoration means 42 of the service providing system 4 decodes the disclosure identifier T to obtain the user identifier R and additional information C, and the information notification means 45 of the service providing system 4 receives the additional information C and information C0 from the user terminal. 1 is notified.
[0030]
Upon receiving the additional information C and information C0, the service request processing determination unit 11 of the user terminal 1 selects a service request processing method based on these, for example, selects whether to provide the requested service. The selection result is returned to the service providing system 4. Note that the selection at this time is not only automatically performed, but the user's own input from an input means (not shown) may be reflected.
[0031]
The service execution unit 44 of the service providing system 4 provides the service using the user identifier R when providing a service based on the selection result in the service request processing determination unit 11 of the user terminal 2, for example. If you refuse the service, do nothing.
[0032]
Further, if additional information Cs related to the disclosure of the disclosure identifier T is included as additional information, for example, an identifier of a disclosure destination (user) of the disclosure identifier T, an annoying telephone call or mail addressed to the disclosure identifier T, When an information search request using the disclosure identifier T as an ID is received, it is possible to recognize through which the disclosure identifier T has been leaked, so that leakage of the user identifier can be suppressed.
[0033]
FIG. 4 shows an example of a system for realizing such a disclosure identifier generating / restoring method. The user terminal 1 includes information requesting means 12 for requesting additional information Cs from the service providing system 4, and The service providing system 4 includes information providing means 46 for providing the additional information Cs to the user terminal 1 in accordance with a request from the user terminal 1. Other configurations are the same as those in FIG.
[0034]
In the above configuration, a disclosure identifier T is generated and notified by the disclosure identifier generation device 3 in accordance with a request from the user terminal 1, and this is disclosed from the user terminal 1 to the user terminal 2. The operation until the service providing system 4 is requested by specifying the disclosure identifier T is the same as the case of FIG. 1 except that the additional information C is replaced by the additional information Cs.
[0035]
When the user terminal 2 specifies the disclosure identifier T and requests a service from the service providing system 4, the service request receiving means 41 of the service providing system 4 receives the disclosure identifier T. The restoration means 42 of the service providing system 4 decodes the disclosure identifier T to obtain the user identifier R and additional information Cs, sends them to the information providing means 46, and sends the user identifier R to the service providing system 4. The service is sent to the service execution means 44 to provide the service.
[0036]
Further, the information providing means 46 of the service providing system 4 uses the user identifier R and the additional information Cs to identify the service provided by the service executing means 44 (for example, if the provided service is mail forwarding, mail It is held for a certain period as an item of service provision history together with Is).
[0037]
Here, when the provided service is a service undesirable for the user, the information requesting means 12 of the user terminal 1 determines the user identifier R and the service providing system 4 based on the operation of the user. The additional information Cs is requested by designating information relating to the provided service (for example, the transmission date and time in the received mail) Is ′.
[0038]
When the information providing means 46 of the service providing system 4 receives the request, the information providing means 46 searches the service providing history using the user identifier R and the information Is ′ as a key, and if there is a corresponding item, the additional information Cs therein is used as the user. Provide to terminal 1. From the additional information Cs, the user terminal 1 can identify to whom the disclosure identifier T used for the undesired service is disclosed, and can then specify an appropriate action, for example, the disclosure identifier T The invalidation process (to be described later) can be performed, the transaction with the third party of the corresponding disclosure destination can be stopped, and the like.
[0039]
By the way, there is a case where it is desired to change at least a part of the additional information C for the disclosed disclosure identifier T, for example, to extend the expiration date.
[0040]
In the present invention, the above-mentioned problem is solved by providing a disclosure identifier rewriting device for rewriting additional information C in response to a request from a device of a person who requests rewriting of a disclosure identifier.
[0041]
FIG. 5 shows the basic configuration of the disclosure identifier rewriting device 5, which includes a rewrite request receiving means 51, a restoring means 52, a disclosure identifier generating means 53, and a disclosure identifier notifying means 54.
[0042]
The rewrite request receiving unit 51 accepts a rewrite request for a disclosure identifier specifying a rewrite target disclosure identifier T and rewritten additional information C2 transmitted from a device of a person who requests rewriting of the disclosure identifier. The restoration means 52 decodes the disclosure identifier T to obtain the user identifier R and the additional information C.
[0043]
The disclosure identifier rewriting means 53 encrypts the acquired user identifier R together with the additional information C2 so that it can be decrypted only by the disclosure identifier restoration device, and generates a new disclosure identifier T ′. The disclosure identifier notifying unit 54 notifies the new disclosure identifier T ′ to the device of the person who requests rewriting of the disclosure identifier.
[0044]
Here, the user terminal 1 is used as a device of a person who requests rewriting.
[0045]
In the above configuration, the user terminal 1 requests the rewriting device 5 to rewrite the disclosure identifier by specifying the user identifier R, the disclosure identifier T to be rewritten, and the rewritten additional information C2. In the rewrite device 5, when the rewrite request receiving unit 51 receives the request, the restoring unit 52 decodes the disclosure identifier T to obtain the user identifier R and the additional information C.
[0046]
Next, the disclosure identifier rewriting means 53 encrypts the acquired user identifier R together with the additional information C2 so that it can be decrypted only by the disclosure identifier restoration device, for example, using the public key of the service providing system 4 as described above. To generate a new disclosure identifier T ′.
[0047]
When a new disclosure identifier T ′ is generated, the disclosure identifier notification means 54 notifies the user terminal 1 of this. Thereafter, the user terminal 1 notifies (discloses) a new disclosure identifier T ′ to a third-party terminal device (user terminal) by the method described above.
[0048]
At this time, the rewriting device 5 may be provided with means (authentication means) 55 for judging whether or not a person who requests rewriting of the disclosure identifier has the qualification, and rejecting the request if there is no qualification. Thus, it is possible to prevent the additional information C of the disclosure identifier T from being rewritten with contents that are disadvantageous to the user.
[0049]
As a method for determining whether or not the user has the qualification, for example, a user identifier R0 (“0” is added to distinguish from the user identifier R restored from the disclosure identifier T) as a specified item when requesting. .)) And the user identifier R acquired from the disclosure identifier T, and rewriting is performed only when they match. If they do not coincide with each other, the process is terminated, and a rewrite refusal is returned to the device of the person who requested rewriting as necessary.
[0050]
In addition, when a user who has been given a disclosure identifier performs a nuisance to the user, the use of the disclosure identifier is prohibited, or when a new disclosure identifier is disclosed, the old disclosure identifier is prohibited. There is a case where it is desired to invalidate the disclosed identifier T once disclosed.
[0051]
In the present invention, a disclosure identifier invalidation device that invalidates a disclosure identifier T in response to a request from a device of a person who requests invalidation of a disclosure identifier, and a valid identifier list database in which valid disclosure identifiers T are registered. By providing the above, the above-mentioned problem is solved.
[0052]
FIG. 6 shows a basic configuration of the disclosure identifier invalidating device 6 together with a valid identifier list database (DB) 7. The disclosure identifier invalidating device 6 includes an invalidation request receiving means 61, a restoring means 62, an invalid identifier. Deleting means 63.
[0053]
The invalidation request receiving means 61 accepts an invalidation request for a disclosure identifier T that specifies a user identifier R0 and a disclosure identifier T to be invalidated, which are transmitted from the device of the person who requests invalidation of the disclosure identifier. . The restoration means 62 decrypts the disclosure identifier T to obtain the user identifier R. The invalid identifier deleting unit 63 compares the designated user identifier R0 and the acquired user identifier R, and deletes the disclosure identifier T from the valid identifier list DB 7 if they match.
[0054]
It is assumed that the valid identifier list DB 7 is created by registering all the disclosure identifiers T generated or rewritten by the disclosure identifier generation device or the disclosure identifier rewriting device described above. Here, the user terminal 1 is used as a device of a person who requests invalidation.
[0055]
In the above configuration, the user terminal 1 requests the invalidation device 6 to invalidate the disclosure identifier by designating the user identifier R0 and the disclosure identifier T to be invalidated. In the invalidation device 6, when the invalidation request receiving unit 61 receives the request, the restoration unit 62 decodes the disclosure identifier T to obtain the user identifier R.
[0056]
Next, the invalid identifier deleting unit 63 compares the acquired user identifier R with the designated user identifier R0 and determines whether or not they match. If they match, the disclosure identifier T is deleted from the valid identifier list DB 7. If the identifiers R0 and R do not match, the process is terminated, and if necessary, the invalidation rejection is responded to the device of the person who requested the invalidation.
[0057]
Further, the present invention can be similarly realized by using an invalid identifier list database in which invalid disclosure identifiers T are registered instead of the valid identifier list database and a corresponding disclosure identifier invalidation device.
[0058]
FIG. 7 shows a basic configuration of the disclosure identifier rewriting device 6 corresponding to the invalid identifier list database (DB) 8. The disclosure identifier invalidation device 6 includes an invalidation request receiving unit 61, a restoring unit 62, The invalid identifier registration means 64 is provided.
[0059]
The invalidation request receiving means 61 accepts an invalidation request for a disclosure identifier T that specifies a user identifier R0 and a disclosure identifier T to be invalidated, which are transmitted from the device of the person who requests invalidation of the disclosure identifier. . The restoration means 62 decrypts the disclosure identifier T to obtain the user identifier R. The invalid identifier registration unit 64 compares the designated user identifier R0 and the acquired user identifier R, and if they match, registers the disclosure identifier T in the invalid identifier list DB8.
[0060]
Here, the user terminal 1 is used as the device of the person who requests invalidation.
[0061]
In the above configuration, the user terminal 1 requests the invalidation device 60 to invalidate the disclosure identifier by designating the user identifier R0 and the disclosure identifier T to be invalidated. In the invalidation device 60, when the invalidation request receiving unit 61 receives the request, the restoration unit 62 decodes the disclosure identifier T to obtain the user identifier R.
[0062]
Next, the invalid identifier registration means 64 compares the designated user identifier R0 with the acquired user identifier R, and if they match, Invalid The disclosure identifier T is registered in the identifier list DB 8. If the identifiers R0 and R do not match, the process is terminated, and if necessary, the invalidation rejection is responded to the device of the person who requested the invalidation.
[0063]
Here, in order to make use of the above-described valid identifier list DB and invalid identifier list DB, a mechanism for eliminating service requests due to invalid disclosure identifiers is required.
[0064]
In the present invention, when a service request is received, a disclosure identifier restoring device having a function of determining whether a disclosure identifier is valid or invalid using the valid identifier list DB or the invalid identifier list DB is provided. Solve the problem.
[0065]
FIG. 8 shows a basic configuration of the present invention including a disclosure identifier restoring device integrated with a service providing system having such a function. The service providing system 4 specifies a service request specifying a disclosure identifier T. When the valid identifier list DB7 or invalid identifier list DB8 is searched and the received disclosure identifier T is registered in the valid identifier list DB7 or only when the valid identifier list DB8 is not registered. Validity determining means 47 for determining that the request can be accepted is provided. Other configurations are the same as those in FIG.
[0066]
In the above configuration, a disclosure identifier T is generated and notified by the disclosure identifier generation device 3 in accordance with a request from the user terminal 1, and this is disclosed from the user terminal 1 to the user terminal 2. The operation until the service providing system 4 is requested by specifying the disclosure identifier T is the same as that shown in FIG.
[0067]
When the user terminal 2 specifies the disclosure identifier T and requests a service from the service providing system 4, the service request receiving unit 41 of the service providing system 4 receives the information C0 together with the disclosure identifier T.
[0068]
When receiving a service request specifying the disclosure identifier T from the user terminal 2 together with the information C0, the service request receiving unit 41 of the service providing system 4 sends the disclosure identifier T to the validity determining unit 47.
[0069]
The validity determination unit 47 of the service providing system 4 searches the valid identifier list DB7 or the invalid identifier list DB8 using the disclosure identifier T as a key, and when the disclosure identifier T is registered in the valid identifier list DB7 or invalid If it is not registered in the identifier list DB 8, a determination result indicating that the service request can be accepted is returned to the service request receiving means 41, and the subsequent processing is continued. If the disclosure identifier T is not registered in the valid identifier list DB 7 or registered in the invalid identifier list DB 8, a determination result indicating that the service request cannot be accepted is returned to the service request receiving means 41, and the processing is terminated. Further, a service rejection is returned to the user terminal 2 as necessary.
[0070]
In FIG. 5, both the valid identifier list DB7 and the invalid identifier list DB8 are shown, but only one of them is actually required. Further, although an example applied to the system of FIG. 1 is shown here, the present invention can be similarly applied to the systems of FIGS.
[0071]
Further, the valid identifier list DB 7 and the invalid identifier list DB 8 described above have a problem that they are enlarged as the disclosure identifier T generated / disclosed increases or the disclosure identifier T invalidated increases. .
[0072]
The present invention solves this problem by providing a disclosure identifier management device that deletes an expired disclosure identifier T from the list when the additional information C of the disclosure identifier T includes an expiration date.
[0073]
FIG. 9 shows a basic configuration of the disclosure identifier management device 9, which includes an identifier reading unit 91, a restoring unit 92, and an expired identifier deleting unit 93.
[0074]
The identifier reading unit 91 periodically and sequentially reads the disclosure identifier T registered in the valid identifier list database 7 or the invalid identifier list database 8. The restoration unit 92 obtains the additional information C by decoding the disclosure identifier T. The expiration identifier deletion means 93 compares the expiration date in the acquired additional information C with the date and time at that time, and deletes the disclosure identifier T that has passed the expiration date from the list 7 or 8.
[0075]
In the configuration described above, in the management device 9, the identifier reading means 91 periodically reads the disclosure identifier T in the valid identifier list DB7 or the invalid identifier list DB8 and sends it to the restoring means 92, which is described above. The additional information C is obtained by decoding as described above. The expiration identifier deleting unit 93 checks whether or not the acquired additional information C includes an expiration date. If it is included, the expiration identifier deletion unit 93 compares it with the time of the date and time. Delete from the list DB 7 or the invalid identifier list DB 8. Note that the case where the expiration date has not passed or the additional information C does not include the expiration date is left as it is.
[0076]
As described above, when a new disclosure identifier in which additional information is rewritten is disclosed, two or more disclosure identifiers T1, T2,. .. May exist, and the user may want to confirm whether or not these disclosure identifiers T1, T2,...
[0077]
The present invention solves this problem by providing a disclosure identifier identity confirmation device that confirms the identity of a plurality of disclosure identifiers T1, T2,... In response to a request from a predetermined user terminal.
[0078]
FIG. 10 shows the basic configuration of the disclosure identifier identity confirmation apparatus 10, which includes an identity confirmation request receiving means 101, a restoration means 102, and an identity determination means 103.
[0079]
The identity confirmation request receiving unit 101 receives an identity confirmation request designating a plurality of disclosure identifiers T1, T2,... Transmitted from a predetermined third party terminal device. The restoring means 102 decrypts the plurality of disclosure identifiers T1, T2,... To obtain user identifiers R1, R2,. The identity determination means 103 determines the identity of the acquired user identifiers R1, R2,... And notifies the result to a predetermined third party terminal device.
[0080]
Here, the user terminal 2 is used as a predetermined third-party terminal device.
[0081]
In the above configuration, the user terminal 2 requests the identity confirmation device 10 to confirm the identity of the disclosure identifier by specifying a plurality of disclosure identifiers T1, T2,. In the identity confirmation device 10, when the identity confirmation request receiving means 101 receives the request, the restoration means 102 decrypts the plurality of disclosure identifiers T1, T2,... And user identifiers R1, R2,. To get.
[0082]
Next, the identity determination means 103 determines the identity of the acquired user identifiers R1, R2,... And notifies the result to the user terminal 2, that is, the user identifiers R1, R2,. If these are the same, a message to that effect is sent to the user terminal 2 and if not, the user terminal 2 is notified to that effect.
[0083]
Note that the generation device, restoration device, rewrite device, invalidation device, management device, and identity confirmation device described so far can be configured by integrating any two or more of these devices. It is also useful to integrate with a service providing system because a secret key or a common key is required for restoring the identifier.
[0084]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, the embodiment of the present invention will be described in detail based on the above-described configuration.
[0085]
<First Embodiment>
First, an embodiment in which the disclosure identifier is applied to a network address, particularly an e-mail address will be described.
[0086]
In the following description, the recipient (user) of the e-mail address “tanaka @ ocn” (= R) is notified of the e-mail address “suzuki @ ntt” (= S) from the sender (user) 2003. A case will be described as an example in which an electronic mail communication service is provided using a disclosure identifier (disclosure email address) whose deadline is April 30th.
[0087]
Further, as shown in FIG. 11, the service providing system is an electronic mail relay server 4A having an address restoration function and a request processing function based on the present invention (the service providing system in FIG. 1, FIG. 3, FIG. 4 or FIG. 8). 4) and electronic mail relay servers 4B and 4C to which the recipient and the sender are subordinate. The host names of the relay servers 4A, 4B, and 4C are “adhoc-mail.ne.jp”, “ocn”, and “ntt”, respectively.
[0088]
FIG. 12 is a sequence diagram showing the first embodiment of the present invention. Hereinafter, the operation will be described together with FIG. 11. The relay server 4A prepares a public key and a secret key in advance, and discloses the public key. It shall be. When the common key encryption method is used as the encryption method, it is assumed that the relay server 4A prepares a common key in advance and notifies the disclosure identifier generation device 3 of the common key and shares it.
[0089]
Step 11: The recipient terminal 1 uses the user identifier, that is, the original e-mail address R and the hash value (= Sa) and the expiration date of the e-mail address S of the sender for limiting the sender as additional information C. A request for generating a disclosure e-mail address T designating “April 30, 2003” (= Tp) is transmitted to the disclosure identifier generating apparatus 3.
[0090]
Step 12: The disclosure identifier generating device 3 receives the above-described generation request for the disclosure email address T from the recipient terminal 1.
[0091]
Step 13: The disclosure identifier generating device 3 encrypts at least a part of the mail address R together with the additional information C so that it can be decrypted only by the relay server 4A, and generates a disclosure mail address T based on the encryption result. .
[0092]
More specifically, a character string composed of the mail address R of the recipient who uses the recipient terminal 1, the hash value Sa of the sender's email address, and the expiration date Tp is used using the public key of the relay server 4A. The e-mail address T for disclosure obtained by adding “@ adhoc-mail.ne.jp” to the character string obtained by converting the text into a text, for example, “h4Bsc6TuPGeFSW/fl+p323iNVii+LQG4@adhoc-mail.ne.jp” described above. Is generated.
[0093]
Here, either or both of the mail address R and the additional information C are compression-encoded with a Huffman code, encrypted using the public key of the relay server 4A, and then converted into a text “@ The disclosure email address T to which “adhoc-mail.ne.jp” is added may be generated.
[0094]
Further, only the domain part (character string part after @) of the e-mail address may be used as the information for limiting the caller. In this case, the e-mail address T for disclosure is given to the caller in units of the domain. Will be disclosed.
[0095]
Step 14: The disclosure identifier generating device 3 notifies the recipient terminal 1 of the generated disclosure email address T.
[0096]
Step 15: The receiver terminal 1 notifies (discloses) the e-mail address T for disclosure to the sender terminal 2. This notification may be sent directly to the caller by the receiver, may be sent by telephone, FAX, mail, etc., or may be sent through an intermediary.
[0097]
Step 16: The caller terminal 2 designates the disclosure mail address T as a destination, and sends an email in which its own email address S is designated as a transmission source to the relay server 4C.
[0098]
More specifically, the caller terminal 2 transmits an e-mail to the e-mail relay server 4C to which the caller terminal 2 is subordinate, based on an Internet standard e-mail transmission procedure. The electronic mail relay server 4C relays electronic mail based on the Internet standard. Since the address of the e-mail after @ is “adhoc-mail.ne.jp”, the e-mail passes through several e-mail relay servers, and the e-mail relay server (adhoc-mail.ne.jp) 4A. Relayed to.
[0099]
Step 17: The relay server 4A receives the e-mail described above, and at this time, acquires the e-mail address S of the transmission source and the date and time of reception as information C0.
[0100]
Step 18: The relay server 4A decrypts the destination mail address T using the secret key, and acquires the user identifier R and the additional information C.
[0101]
More specifically, the relay server 4A decodes the part before @ of the destination of the received mail address into binary data, decodes it using a secret key, and receives the recipient identifier R and the sender's email address. And the additional information C consisting of the hash value Sa and the expiration date Tp.
[0102]
It should be noted that if either or both of the mail address R and the additional information C is compression-encoded with Huffman code before encryption, it goes without saying that the decryption is performed after decryption using the secret key. Absent.
[0103]
Step 19: The relay server 4A determines, based on the acquired information C0 and the additional information C, whether or not to transfer the service request to the recipient terminal 1, in this case, the processing method of the service request.
[0104]
More specifically, the relay server 4A calculates the hash value of the sender's email address S in the email, and compares this with the hash value Sa of the sender's email address in the additional information C. Further, the expiration date in the additional information C is compared with the reception time of the e-mail, and if the hash values match and the reception time is within the expiration date, it is determined that transfer is possible.
[0105]
Step 20: When the transfer is possible, the relay server 4A transmits the electronic mail with the user identifier R acquired in Step 18 as a destination.
[0106]
More specifically, the relay server 4A transmits an e-mail based on an Internet standard e-mail transmission procedure. Since the e-mail address after the @ is “ocn”, the e-mail includes several e-mails. Through the e-mail relay server, the recipient terminal 1 is relayed to the subordinate e-mail relay server (ocn) 4B, and the recipient terminal 1 receives the e-mail from the relay server 4B.
[0107]
Further, when transfer is impossible, that is, when the addresses do not match or when the reception time exceeds the expiration date, the relay server 4A rejects the request, that is, discards the electronic mail.
[0108]
<Second Embodiment>
Next, in the first embodiment, an embodiment in the case of selecting a service request processing method on the user terminal side will be described. The outline of the system is the same as that of the first embodiment shown in FIG.
[0109]
FIG. 13 is a sequence diagram showing the second embodiment of the present invention. Hereinafter, the operation will be described together with FIG. 11, but the relay server 4A prepares a public key and a secret key in advance and publishes the public key. Also, Step 11 to Step 18 are the same as those in the first embodiment shown in FIG.
[0110]
Step 21: The relay server 4A notifies the receiver terminal 1 of the acquired information C0 and additional information C.
[0111]
Step 22: Based on the received information C0 and additional information C, the receiver terminal 1 determines whether or not the service request processing method, here, the e-mail can be transferred to the receiver terminal 1, and the result is determined by the relay server 4 Return to
[0112]
More specifically, the receiver terminal 1 calculates the hash value of the sender's email address S in the information C0, and compares this with the hash value Sa of the sender's email address in the additional information C. Further, the expiration date in the additional information C is compared with the reception time of the electronic mail in the information C0, and if the hash values match and the reception time is within the expiration date, it is determined that the transfer is possible, and the hash If the values do not match or the reception time is after the expiration date, it is determined that transfer is not possible, and the result is returned to the relay server 4.
[0113]
Step 20: When the relay server 4A receives the determination result indicating that transfer is possible, the relay server 4A transmits the e-mail as described above with the user identifier R acquired in Step 18 as the destination, and receives the determination result indicating that transfer is not possible. , Reject the request, i.e. discard the e-mail.
[0114]
<Third Embodiment>
Next, in the first embodiment, the additional information Cs related to the disclosure of the disclosure identifier T as the additional information, here the e-mail address “suzuki @ ntt” (= S) of the user terminal 2 is used. An embodiment will be described. The outline of the system is the same as that of the first embodiment shown in FIG.
[0115]
FIG. 14 is a sequence diagram showing a third embodiment of the present invention. The operation will be described below with reference to FIG. 11. The relay server 4A prepares a public key and a secret key in advance, and discloses the public key. Steps 11 to 18 are omitted because they are the same as those in the first embodiment shown in FIG. 12 except that the additional information C is replaced with the additional information Cs.
[0116]
Step 20: As described above, the relay server 4A receives the electronic mail received in Step 17 (however, this mail is not actually transmitted from the caller terminal 2) with the user identifier R acquired in Step 18 as a destination. Send. At this time, the information Is for identifying the transmitted electronic mail, for example, the transmission date and time in the mail is stored as one item of the service provision history together with the user identifier R and the additional information Cs.
[0117]
Step 23: When the received electronic mail is a spam mail, the receiver terminal 1 informs the relay server 4A of the user identifier R and information Is ′ that can identify the electronic mail, here the transmission date and time in the mail Is specified and additional information Cs is requested.
[0118]
Step 24: When the relay server 4A receives the request, the relay server 4A searches the service provision history using the user identifier R and the information Is ′ as a key. If there is a corresponding item, the additional information Cs therein, that is, the user terminal 2 Is provided to the user terminal 1 with the email address “suzuki @ ntt”.
[0119]
The receiver terminal 1 can specify that the disclosure identifier T used for the spam mail is disclosed to the user terminal 2 from the email address “suzuki @ ntt” of the user terminal 2, Appropriate measures thereafter, for example, a process of invalidating the disclosure identifier T can be performed, or a transaction with a third party of the corresponding disclosure destination can be stopped.
[0120]
Note that the information request from the receiver terminal 1 and the provision of information in the relay server 4A described above are realized in such a form that a WWW server installed in the relay server 4A makes an inquiry from a WWW browser installed in the receiver terminal 1. You can also.
[0121]
<Fourth embodiment>
Next, in the first embodiment, an embodiment will be described in which processing for determining whether a disclosure identifier is valid or invalid is performed using the valid identifier list DB 7 or the invalid identifier list DB 8 described in FIG. . The outline of the system is the same as that of the first embodiment shown in FIG.
[0122]
FIG. 15 is a sequence diagram showing the fourth embodiment of the present invention. Hereinafter, the operation will be described together with FIG. 11, but the relay server 4A prepares a public key and a secret key in advance and discloses the public key. Further, Step 11 to Step 17 are the same as those in the first embodiment shown in FIG.
[0123]
Step 25: The relay server 4A determines the validity of the disclosure e-mail address T attached to the e-mail received in Step 17 using the valid identifier list DB7 or the invalid identifier list DB8.
[0124]
More specifically, the effective identifier list DB7 or the invalid identifier list DB8 is searched using the disclosure email address T as a key, and the disclosure email address T is registered in the valid identifier list DB7 or in the invalid identifier list DB8. If it is not registered, the request can be accepted and the subsequent processing, that is, the processing after Step 18 is continued.
[0125]
If the disclosure mail address T is not registered in the valid identifier list DB 7 or registered in the invalid identifier list DB 8, the process is terminated as a request cannot be accepted, and a mail acceptance rejection is transmitted as necessary. Respond to the user terminal 2.
[0126]
<Fifth embodiment>
Next, an embodiment in which the disclosure identifier is applied to a personal ID, particularly a personal ID for searching a personal information database (DB) will be described.
[0127]
In the following description, an EC company with a vendor ID “61212-3156” (= S) is stored in a personal information DB in which personal information of a user (user) with a personal ID “71002-2192” (= R) is registered. A personal information search service based on a disclosure identifier (disclosure personal ID for personal information search) that permits only disclosure of contact IDs as a condition for mail-order companies with a deadline of April 30th from users) This will be described as an example.
[0128]
Further, as shown in FIG. 16, the service providing system includes an information providing server 4D having an ID restoration function and a request processing function based on the present invention (the service providing system 4 in FIG. 1, FIG. 3, FIG. And the personal information database 4E.
[0129]
FIG. 17 is a sequence diagram showing the fifth embodiment of the present invention. Hereinafter, the operation will be described together with FIG. 16, but the information providing server 4D prepares a public key and a secret key in advance and publishes the public key. It shall be. When the common key encryption method is used as the encryption method, the information providing server 4D prepares a common key in advance and notifies the disclosure identifier generating apparatus 3 to share the common key.
[0130]
Step 31: The user terminal 1 discloses a hash value (= Sa) of a merchant ID S of an EC company for limiting an information searcher as additional information C together with a user identifier, that is, an original information search personal ID R A request for generating the disclosure identifier T specifying the type “for mail order companies” (= Cp) and the expiration date “April 30, 20003” (= Tp) for limiting the information is transmitted to the disclosure identifier generation device 3 To do.
[0131]
Step 32: The disclosure identifier generating device 3 receives the above-described request for generating the disclosure identifier T from the user terminal 1.
[0132]
Step 33: The disclosure identifier generating device 3 encrypts at least a part of the user identifier R together with the additional information C so that it can be decrypted only by the disclosure identifier restoring device 3, and based on the encryption result, the disclosure identifier T is generated.
[0133]
More specifically, a character string composed of the personal ID R of the user who uses the user terminal 1, the hash value Sa of the merchant ID of the EC company server, the type Cp for mail order merchants, and the expiration date Tp is provided as the information providing server. After encryption using the 4D public key, a disclosure personal ID T, for example, “23h4Bsc6TuPeFSW / fl + p3GG4iNWsi + LQ”, which is obtained by text conversion, is generated.
[0134]
Step 34: The disclosure identifier generation device 3 notifies the user terminal 1 of the generated disclosure personal ID T.
[0135]
Step 35: The user terminal 1 notifies (disclosures) the disclosure personal ID T to the EC company server 2. This notification may be sent directly to the EC company by the user, may be sent by telephone, FAX, mail, etc., or may be sent through an intermediary.
[0136]
Step 36: The EC company server 2 designates the disclosure personal ID T as a search key, and transmits an information disclosure request designating its own vendor ID S as a request source to the information providing server 4D.
[0137]
Step 37: The information providing server 4D receives the above-described request, and at this time, acquires the request source ID S and the date and time of reception as information C0.
[0138]
Step 38: The information providing server 4D decrypts the disclosure personal ID T using the secret key, and acquires the user identifier R and the additional information C.
[0139]
More specifically, the information providing server 4D decodes the received disclosure personal ID into binary data, decrypts it using a secret key, and the user's personal ID R (= “71002-2192”), EC The hash value Sa of the company ID of the company, the type Cp for mail order companies, and the expiration date Tp are acquired.
[0140]
Step 39: The information providing server 4D determines, based on the acquired information C0 and the additional information C, whether or not information search is possible in the service request processing method, here the personal information DB 4E.
[0141]
More specifically, the information providing server 4D calculates the hash value of the requesting vendor ID S in the request, compares this with the hash value Sa of the vendor ID in the additional information C, and adds the additional information. The expiration date in C is compared with the reception time of the request, and if the hash values match and the reception time is within the expiration date, it is determined that information can be disclosed.
[0142]
Step 40: When the information can be disclosed, the information providing server 4D searches the personal information DB 4E using the user identifier R acquired in Step 38, that is, the personal ID “71002-2192” as a search key, and among the search results, the type “ Only the information suitable for “for mail order companies” is returned to the EC company server 2 here, such as the contact ID of the user terminal 1, such as a mail address or telephone number. If there is no corresponding item in the search result, the EC company server 2 is notified of this.
[0143]
Further, when information cannot be disclosed, that is, when the hash values do not match or when the reception time exceeds the expiration date, the information providing server 4D notifies the EC company server 2 of rejection of the request.
[0144]
<Sixth Embodiment>
Next, an embodiment in the case where the additional information C of the disclosure identifier is rewritten, here, an embodiment in which the expiration date of the e-mail address described in the first embodiment is extended will be described.
[0145]
In the following description, it is assumed that the person who requests rewriting is a user (recipient), and there is a disclosure identifier rewriting device 5 that is independent of the generation device and the relay server, as shown in FIG.
[0146]
FIG. 19 is a sequence diagram showing the sixth embodiment of the present invention. The operation will be described below with reference to FIG. 18, but the receiver terminal 1 is processed by the same processing as Steps 11 to 15 in the first embodiment. Is disclosed to the receiver terminal 1 and is disclosed to the sender terminal 2, and a secret key is passed to the rewriting device 5 from the relay server 4A together with the public key. It shall be.
[0147]
Step 41: The recipient terminal 1 rewrites the disclosure mail address to the disclosure identifier rewriting device 5 to limit the disclosure mail address T to be rewritten and the additional information C2 after rewriting, that is, the sender. A request is made by designating the hash value (= Sa) of the sender's e-mail address S and the expiration date “until May 31, 2003” (= Tp2) together with its original e-mail address R0.
[0148]
Step 42: The disclosure identifier rewriting device 5 receives the above-described rewriting request for the disclosure mail address T from the recipient terminal 1.
[0149]
Step 43: The disclosure identifier rewriting device 5 decrypts the disclosure e-mail address T to be rewritten by the same processing as that of the relay server 4A described above using the secret key, and sends the e-mail address R and the additional information C, that is, transmission The hash value Sa of the e-mail address S and the expiration date “until April 30, 2003” (= Tp) are acquired. The acquired mail address R and the requested mail address R0 may be compared to determine the qualification of the person who requests rewriting.
[0150]
Step 44: The disclosure identifier rewriting device 5 encrypts at least a part of the acquired mail address R together with the additional information C2 after rewriting so that it can be decrypted only by the relay server 4A, and after rewriting based on the encryption result A disclosure email address T is generated.
[0151]
More specifically, after encrypting a character string composed of the recipient's email address R, the sender's email address hash value Sa, and the expiration date Tp2 using the public key of the relay server 4A, the text An e-mail address for disclosure T in which “@ adhoc-mail.ne.jp” is added to the character string obtained by converting the character string, for example, “h4Bsc6TuPGeFSW/fl+p323iNVii+LQG5@adhoc-mail.ne.jp” is generated.
[0152]
Step 45: The disclosure identifier rewriting device 5 notifies the recipient terminal 1 that has requested rewriting of the disclosed e-mail address T ′ after rewriting.
[0153]
Step 46: The receiver terminal 1 notifies (disclosures) the disclosed e-mail address T ′ after rewriting to the sender terminal 2. The notification method may be the same as that for normal generation.
[0154]
<Seventh embodiment>
Next, an embodiment in the case where the disclosure identifier is invalidated, here, an embodiment in which the e-mail address described in the first embodiment is invalidated using the valid identifier list database (DB). explain.
[0155]
In the following description, a person who requests invalidation is a user (recipient). As shown in FIG. 20, the disclosure identifier invalidation device 6 and the valid identifier list DB 7 are independent of the generation device and the relay server. It shall exist.
[0156]
FIG. 21 is a sequence diagram showing the seventh embodiment of the present invention. The operation will be described below with reference to FIG. 20, but the receiver terminal 1 is processed by the same processing as Steps 11 to 15 in the first embodiment. Is disclosed to the sender terminal 2 and is registered as a valid disclosure mail address in the valid identifier list DB 7 (Step 14 ′). Further, it is assumed that a secret key is passed from the relay server 4A to the disclosing identifier invalidating device 6.
[0157]
Step 51: The recipient terminal 1 designates the disclosure email address invalidation for the disclosure identifier invalidation device 6 by designating the disclosure email address T to be invalidated and its original email address R0. Request.
[0158]
Step 52: The disclosure identifier invalidation device 6 receives the above-described invalidation request for the disclosure email address T from the recipient terminal 1.
[0159]
Step 53: The disclosure identifier invalidating device 6 decrypts the disclosure email address T to be invalidated by the same process as that of the relay server 4A described above using the secret key, and acquires the email address R.
[0160]
Step 54: The disclosure identifier invalidating device 6 compares the acquired mail address R with the designated mail address R0 and determines whether or not they match.
[0161]
Step 55: The disclosure identifier invalidating device 6 requests the registration deletion by designating the disclosure email address T to the valid identifier list DB 7 when the comparison results in a match. In the valid identifier list DB7, the registration of the disclosure email address T is deleted. Further, the processing result is notified to the recipient terminal 1 as necessary.
[0162]
If the mail addresses R and R0 do not match, the process is terminated, and an invalidation rejection is responded to the recipient terminal 1 as necessary.
[0163]
<Eighth Embodiment>
Next, an embodiment in the case of invalidating the disclosure identifier, here, an embodiment in which the e-mail address described in the first embodiment is invalidated by using the invalid identifier list database (DB) will be described. explain.
[0164]
In the following description, the person who requests invalidation is a user (recipient). As shown in FIG. 22, the disclosure identifier invalidation device 6 and invalid identifier list DB 8 independent of the generation device and the relay server are provided. It shall exist.
[0165]
FIG. 23 is a sequence diagram showing the eighth embodiment of the present invention. Hereinafter, the operation will be described together with FIG. 22, but the receiver terminal 1 is processed by the same processing as Steps 11 to 15 in the first embodiment. An e-mail address T for disclosure of the sender terminal 2 is generated and notified to the receiver terminal 1 and disclosed to the sender terminal 2, and a secret key is passed from the relay server 4A to the disclosure identifier invalidating device 6. It is assumed that
[0166]
Step 61: The receiver terminal 1 designates the disclosure email address invalidation for the disclosure identifier invalidation device 6, and designates the disclosure email address T to be invalidated and its original email address R0. Request.
[0167]
Step 62: The disclosure identifier invalidation device 6 receives the above-described invalidation request for the disclosure email address T from the recipient terminal 1.
[0168]
Step 63: The disclosure identifier invalidating device 6 decrypts the disclosure email address T to be invalidated by the same process as that of the relay server 4A described above using the secret key, and acquires the email address R.
[0169]
Step 64: The disclosure identifier invalidating device 6 compares the acquired mail address R with the designated mail address R0 and determines whether or not they match.
[0170]
Step 65: The disclosure identifier invalidating device 6 requests the registration by designating the disclosure email address T to the invalid identifier list DB 8 when they match as a result of the comparison. In the invalid identifier list DB8, the disclosure email address T is registered as an invalid email address. Further, the processing result is notified to the recipient terminal 1 as necessary.
[0171]
If the mail addresses R and R0 do not match, the process is terminated, and an invalidation rejection is responded to the recipient terminal 1 as necessary.
[0172]
<Ninth embodiment>
Next, an embodiment in which an expired disclosure identifier is deleted from the valid identifier list database will be described.
[0173]
In the following description, the person who requests invalidation is a user (recipient), and as shown in FIG. 24, there is a disclosure identifier management device 9 and a valid identifier list DB 7 independent of the generation device and the relay server. It shall be.
[0174]
FIG. 25 is a sequence diagram showing the ninth embodiment of the present invention. The operation will be described below with reference to FIG. 24, but the receiver terminal 1 is processed by the same processing as Steps 11 to 15 in the first embodiment. Is disclosed to the sender terminal 2 and is registered as a valid disclosure mail address in the valid identifier list DB 7 (Step 14 ′). It is assumed that the secret key is passed from the relay server 4A to the disclosure identifier management device 9.
[0175]
Step 71: The disclosure identifier management device 9 sequentially reads disclosure email addresses T in the valid identifier list DB7.
[0176]
Step 72: The disclosure identifier management device 9 obtains the additional information C by decrypting the read disclosure email address T using the secret key by the same process as that of the relay server 4A described above.
[0177]
Step 73: The disclosure identifier management device 9 checks whether or not the expiration date Tp is included in the acquired additional information C, and if it is included, compares it with the time of the date and time.
[0178]
Step 74: If the expiration date has passed as a result of the comparison, the disclosure identifier management device 9 requests the validity identifier list DB 7 to delete the disclosure email address T. In the valid identifier list DB7, the disclosure email address T is deleted. If the expiration date has not passed and the additional information C does not contain an expiration date, nothing is done as it is.
[0179]
The embodiment in the case of deleting an expired disclosure identifier from the invalid identifier list database is exactly the same.
[0180]
<Tenth Embodiment>
Next, an embodiment for confirming the identity of a plurality of disclosure identifiers, that is, the e-mail address described in the first embodiment and the after-rewrite described in the sixth embodiment An embodiment for confirming the identity with the e-mail address will be described.
[0181]
In the following description, a person who requests confirmation of identity is a user (sender), and as shown in FIG. 26, a disclosure identifier identity confirmation device 10 independent of the generation device and the relay server is provided. Shall.
[0182]
FIG. 27 is a sequence diagram showing the tenth embodiment of the present invention. Hereinafter, the operation will be described together with FIG. 26. Steps 11 to 15 in the first embodiment and Steps 41 to 15 in the sixth embodiment will be described. 46, a disclosure email address T for the sender terminal 2 of the receiver terminal 1 and a disclosure email address T ′ after rewriting are generated and notified to the receiver terminal 1 and disclosed to the sender terminal 2. In addition, it is assumed that a secret key is passed from the relay server 4A to the disclosure identifier identity confirmation apparatus 10.
[0183]
Step 81: The caller terminal 2 requests the disclosure identifier identity confirmation device 10 to confirm the identity of the disclosure identifier by designating the disclosure identifiers T and T to be confirmed.
[0184]
Step 82: The disclosure identifier identity confirmation device 10 receives the identity confirmation request for the disclosure email addresses T and T ′ described above from the sender terminal 2.
[0185]
Step 83: The disclosure identifier identity confirmation device 10 decrypts the disclosure email addresses T and T ′ to be confirmed using the secret key by the same process as that of the relay server 4A described above, and sends the email addresses R1, R2 To get.
[0186]
Step 84: The disclosure identifier identity verification device 10 compares the acquired mail addresses R1 and R2 and determines whether or not they are the same.
[0187]
Step 85: The disclosure identifier identity confirmation device 10 notifies the caller terminal 2 of the determination result, that is, if they are the same, and if not, notifies the caller terminal 2.
[0188]
【The invention's effect】
As described above, according to the present invention, even if the user has to give up the identifier for disclosure due to spam or the like, there is no need to acquire a new user identifier. Therefore, it is no longer necessary to notify a plurality of users of changes in contact information and ID. Further, according to the present invention, it is possible to create a plurality of disclosure identifiers for one user identifier, thereby making it possible to separately use one user terminal for a huge number of uses. .
[Brief description of the drawings]
FIG. 1 is a configuration diagram showing an example of a system for realizing a disclosure identifier generating / restoring method of the present invention.
FIG. 2 is a flowchart showing an example of a disclosure identifier generation process.
FIG. 3 is a block diagram showing another example of a system for realizing the disclosure identifier generating / restoring method of the present invention.
FIG. 4 is a block diagram showing still another example of a system for realizing the disclosure identifier generating / restoring method of the present invention.
FIG. 5 is a block diagram showing an example of a system for realizing the disclosed identifier rewriting method of the present invention.
FIG. 6 is a block diagram showing an example of a system that implements the disclosed identifier invalidation method of the present invention.
FIG. 7 is a block diagram showing another example of a system for realizing the disclosing identifier invalidation method of the present invention.
FIG. 8 is a configuration diagram showing still another example of a system for realizing the disclosure identifier generating / restoring method of the present invention.
FIG. 9 is a block diagram showing an example of a system for realizing the disclosure identifier management method of the present invention.
FIG. 10 is a block diagram showing an example of a system that implements the disclosed identifier identity confirmation method of the present invention.
FIG. 11 is a system outline diagram showing the first embodiment of the present invention;
FIG. 12 is a sequence diagram for explaining the first embodiment of the present invention;
FIG. 13 is a sequence diagram for explaining a second embodiment of the present invention;
FIG. 14 is a sequence diagram for explaining a third embodiment of the present invention;
FIG. 15 is a sequence diagram for explaining a fourth embodiment of the present invention;
FIG. 16 is a system outline diagram showing a fifth embodiment of the present invention;
FIG. 17 is a sequence diagram for explaining a fifth embodiment of the present invention;
FIG. 18 is a system outline diagram showing a sixth embodiment of the present invention;
FIG. 19 is a sequence diagram for explaining the sixth embodiment of the present invention;
FIG. 20 is a system outline diagram showing a seventh embodiment of the present invention;
FIG. 21 is a sequence diagram for explaining the seventh embodiment of the present invention;
FIG. 22 is a system outline diagram showing an eighth embodiment of the present invention;
FIG. 23 is a sequence diagram for explaining an eighth embodiment of the present invention;
FIG. 24 is a system outline diagram showing a ninth embodiment of the present invention;
FIG. 25 is a sequence diagram for explaining the ninth embodiment of the present invention;
FIG. 26 is a system outline diagram showing a tenth embodiment of the present invention.
FIG. 27 is a sequence diagram for explaining the tenth embodiment of the present invention;
[Explanation of symbols]
1: User terminal (receiver terminal, user terminal), 2: User terminal (sender terminal, EC company server), 3: Disclosure identifier generation device, 4, 4A, 4B, 4C, 4D, 4E: Service Provision system (relay server, information provision server, personal information database), 5: Disclosure identifier rewriting device, 6: Disclosure identifier invalidation device, 7: Valid identifier list database, 8: Invalid identifier list database, 9: Disclosure Identifier management device, 10: identifier identity confirmation device for disclosure.

Claims (10)

A third party who wants to use the user identifier R instead of the user identifier R that can uniquely identify the user and can present a service related to the user to the service providing system by presenting the user. A disclosure identifier generating / restoring method for generating / restoring a disclosure identifier T for disclosure in
Additional information C including conditions for the user identifier R transmitted from the terminal device of the disclosure by the disclosure identifier generation device and the information C0 that can be obtained by the disclosure identifier restoration device or the service providing system at the time of a third party service request A disclosure identifier generation request reception stage for receiving a specified disclosure identifier generation request;
A disclosure identifier generating step of encrypting at least a part of the user identifier R together with the additional information C so as to be decryptable only by a disclosure identifier restoring device, and generating a disclosure identifier T based on the encryption result;
A service request receiving stage in which the disclosure identifier restoring device receives a service request specifying the disclosure identifier T transmitted from a third party terminal device directly or through a service providing system together with the information C0;
A disclosure identifier restoration stage in which a disclosure identifier restoration device obtains a user identifier R and information C by decoding the disclosure identifier T;
An information notifying step in which the disclosure identifier restoring device or the service providing system notifies the user's terminal device of the additional information C and the information C0;
A service request processing determination stage in which the user terminal device selects a service request processing method based on the additional information C and the information C0;
A for Disclosure identifier rewriting process for rewriting the additional information C to another additional information C2 which <br/> corresponding disclosure identifier T generated by for Disclosure identifier generating and recovery method comprising,
A request accepting stage for accepting a request for rewriting a disclosure identifier designating a disclosure identifier T to be rewritten and a rewritten additional information C2 transmitted from a device of a person who requests rewriting of the disclosure identifier by the disclosure identifier rewriting device; ,
A disclosure identifier restoring stage in which a disclosure identifier rewriting device decrypts the disclosure identifier T to obtain a user identifier R and additional information C;
A disclosure identifier generating stage in which the disclosure identifier rewriting device encrypts the acquired user identifier R together with the additional information C2 so as to be decryptable only by the disclosure identifier restoration device, and generates a new disclosure identifier T ′;
A disclosure identifier rewriting method comprising: a disclosure identifier notifying step in which a disclosure identifier rewriting device notifies the new disclosure identifier T ′ to a device of a person who requests rewriting of a disclosure identifier. A third party who wants to use the user identifier R instead of the user identifier R that can uniquely identify the user and can present a service related to the user to the service providing system by presenting the user. A disclosure identifier generating / restoring method for generating / restoring a disclosure identifier T for disclosure in
Additional information C including conditions for the user identifier R transmitted from the terminal device of the disclosure by the disclosure identifier generation device and the information C0 that can be obtained by the disclosure identifier restoration device or the service providing system at the time of a third party service request A disclosure identifier generation request reception stage for receiving a specified disclosure identifier generation request;
A disclosure identifier generating step of encrypting at least a part of the user identifier R together with the additional information C so as to be decryptable only by a disclosure identifier restoring device, and generating a disclosure identifier T based on the encryption result;
And the service request receiving step for Disclosure identifier recovery device that will receive the service request specifying the disclosure identifier T that is sent either directly or through a service providing system from a third-party terminal as well as the information C0,
A disclosure identifier restoration stage in which a disclosure identifier restoration device obtains a user identifier R and information C by decoding the disclosure identifier T;
An information notifying step in which the disclosure identifier restoring device or the service providing system notifies the user's terminal device of the additional information C and the information C0;
A service request processing determination stage in which the user terminal device selects a service request processing method based on the additional information C and the information C0;
A disclosure identifier invalidating process for invalidating the disclosure identifier T is rewritten by the generated or claim 1 discloses identifier rewriting method according at <br/> disclosure identifier generation and recovery method comprising,
A valid identifier list database creation stage for registering a disclosure identifier T disclosed by a disclosure identifier generating device or a disclosure identifier rewriting device to a third party in a valid identifier list database;
Request for accepting an invalidation request for a disclosure identifier T in which a disclosure identifier invalidation device designates a user identifier R0 and a disclosure identifier T to be invalidated transmitted from the device of the person requesting invalidation of the disclosure identifier The reception stage,
A disclosure identifier restoring stage in which a disclosure identifier invalidating device decrypts the disclosure identifier T to obtain a user identifier R;
The disclosure identifier invalidation device compares the designated user identifier R0 and the acquired user identifier R, and if they match, the disclosure identifier invalidation deletes the disclosure identifier T from the valid identifier list database. A method for disabling identifiers for disclosure. A third party who wants to use the user identifier R instead of the user identifier R that can uniquely identify the user and can present a service related to the user to the service providing system by presenting the user. A disclosure identifier generating / restoring method for generating / restoring a disclosure identifier T for disclosure in
Additional information C including conditions for the user identifier R transmitted from the terminal device of the disclosure by the disclosure identifier generation device and the information C0 that can be obtained by the disclosure identifier restoration device or the service providing system at the time of a third party service request A disclosure identifier generation request reception stage for receiving a specified disclosure identifier generation request;
A disclosure identifier generating step of encrypting at least a part of the user identifier R together with the additional information C so as to be decryptable only by a disclosure identifier restoring device, and generating a disclosure identifier T based on the encryption result;
A service request receiving stage in which the disclosure identifier restoring device receives a service request specifying the disclosure identifier T transmitted from a third party terminal device directly or through a service providing system together with the information C0;
A disclosure identifier restoration stage in which a disclosure identifier restoration device obtains a user identifier R and information C by decoding the disclosure identifier T;
An information notifying step in which the disclosure identifier restoring device or the service providing system notifies the user's terminal device of the additional information C and the information C0;
A service request processing determination stage in which the user terminal device selects a service request processing method based on the additional information C and the information C0;
A disclosure identifier invalidating process for invalidating the disclosure identifier T is rewritten by the generated or claim 1 discloses identifier rewriting method according at <br/> disclosure identifier generation and recovery method comprising,
Request for accepting an invalidation request for a disclosure identifier T in which a disclosure identifier invalidation device designates a user identifier R0 and a disclosure identifier T to be invalidated transmitted from the device of the person requesting invalidation of the disclosure identifier The reception stage,
A disclosure identifier restoring stage in which a disclosure identifier invalidating device decrypts the disclosure identifier T to obtain a user identifier R;
The disclosure identifier invalidating device compares the designated user identifier R0 and the acquired user identifier R, and if they match, the disclosure identifier T is registered in the invalid identifier list database for registering an invalid disclosure identifier. A disclosing identifier invalidating step for registering a disclosing identifier. A third party who wants to use the user identifier R instead of the user identifier R that can uniquely identify the user and can present a service related to the user to the service providing system by presenting the user. A disclosure identifier generating / restoring method for generating / restoring a disclosure identifier T for disclosure in
Additional information C including conditions for the user identifier R transmitted from the terminal device of the disclosure by the disclosure identifier generation device and the information C0 that can be obtained by the disclosure identifier restoration device or the service providing system at the time of a third party service request A disclosure identifier generation request reception stage for receiving a specified disclosure identifier generation request;
A disclosure identifier generating step of encrypting at least a part of the user identifier R together with the additional information C so as to be decryptable only by a disclosure identifier restoring device, and generating a disclosure identifier T based on the encryption result;
A service request receiving stage in which the disclosure identifier restoring device receives a service request specifying the disclosure identifier T transmitted from a third party terminal device directly or through a service providing system together with the information C0;
A disclosure identifier restoration stage in which a disclosure identifier restoration device obtains a user identifier R and information C by decoding the disclosure identifier T;
An information notifying step in which the disclosure identifier restoring device or the service providing system notifies the user's terminal device of the additional information C and the information C0;
A service request processing determination stage in which the user terminal device selects a service request processing method based on the additional information C and the information C0;
It is generated by the disclosure identifier generating / restoring method of the disclosure identifier or rewritten by the disclosure identifier rewriting method of claim 1 , and the disclosure identifier T that is disclosed to a third party is effective for disclosure. In the disclosure identifier management method for managing the valid identifier list database in which the identifier T is registered or the invalid identifier list database in which the invalid disclosure identifier T is registered,
The disclosure identifier management device acquires the additional information C by decoding the disclosure identifier T in the valid identifier list database or the invalid identifier list database;
The disclosure identifier management device compares the expiration date in the acquired additional information C with the date and time at that time, and periodically repeats the step of deleting the disclosure identifier T that has expired from the list. An identifier management method for disclosure. A third party who wants to use the user identifier R instead of the user identifier R that can uniquely identify the user and can present a service related to the user to the service providing system by presenting the user. A disclosure identifier generating / restoring method for generating / restoring a disclosure identifier T for disclosure in
Additional information C including conditions for the user identifier R transmitted from the terminal device of the disclosure by the disclosure identifier generation device and the information C0 that can be obtained by the disclosure identifier restoration device or the service providing system at the time of a third party service request A disclosure identifier generation request reception stage for receiving a specified disclosure identifier generation request;
A disclosure identifier generating step of encrypting at least a part of the user identifier R together with the additional information C so as to be decryptable only by a disclosure identifier restoring device, and generating a disclosure identifier T based on the encryption result;
And the service request receiving step for Disclosure identifier recovery device that will receive the service request specifying the disclosure identifier T that is sent either directly or through a service providing system from a third-party terminal as well as the information C0,
A disclosure identifier restoration stage in which a disclosure identifier restoration device obtains a user identifier R and information C by decoding the disclosure identifier T;
An information notifying step in which the disclosure identifier restoring device or the service providing system notifies the user's terminal device of the additional information C and the information C0;
A service request processing determination stage in which the user terminal device selects a service request processing method based on the additional information C and the information C0;
Generated in <br/> for Disclosure identifier generating and recovery method comprising, or claim 1 rewritten by for Disclosure identifier rewriting method according, for more of the disclosed disclosed a predetermined third party identifier T1, T2, A method for confirming identity of an identifier for confirming identity of ...
A request accepting stage for accepting an identity confirmation request specifying a plurality of disclosure identifiers T1, T2,... Transmitted from a predetermined third party terminal device by the disclosure identifier identity confirmation device;
A disclosure identifier restoration stage in which a disclosure identifier identity confirmation device decrypts the plurality of disclosure identifiers T1, T2,... To obtain user identifiers R1, R2,.
The identity verification device for disclosure includes the identity verification step of determining the identity of the acquired user identifiers R1, R2,... And notifying the result to a predetermined third party terminal device. Disclosure identifier identity confirmation method. A third party who wants to use the user identifier R instead of the user identifier R that can uniquely identify the user and can present a service related to the user to the service providing system by presenting the user. A disclosure identifier generating device for generating a disclosure identifier T for disclosure to a user identifier R transmitted from a user's terminal device and a disclosure identifier restoring device or service provision upon a third party service request Means for receiving a disclosure identifier generation request designating additional information C including a condition for information C0 available to the system, and decoding at least a part of the user identifier R together with the additional information C only by a disclosure identifier restoring device A disclosure identifier generating device or means for generating a disclosure identifier T based on the encryption result and a user uniquely identified. Disclosure for disclosing to a third party who wishes to use the user identifier R instead of the user identifier R that can request a service related to the user to the service providing system by presenting this A disclosure identifier generation device for generating a disclosure identifier T, which receives a disclosure identifier generation request specifying a user identifier R transmitted from a user terminal device and additional information Cs related to disclosure of the disclosure identifier T And means for encrypting at least a part of the user identifier R together with the additional information Cs so that it can be decrypted only by the disclosure identifier restoring device, and generating the disclosure identifier T based on the encryption result. A disclosure identifier rewriting device for rewriting additional information C corresponding to a disclosure identifier T generated by a disclosure identifier generation device into another additional information C2, comprising: A means for accepting a renewal request for a disclosure identifier designating the rewriting target disclosure identifier T and the rewritten additional information C2 transmitted from the device of the person who requests rewriting, and decrypting and using the disclosure identifier T Means for acquiring a user identifier R and additional information C, and means for encrypting the acquired user identifier R together with the additional information C2 so that it can be decrypted only by a disclosure identifier restoring device to generate a new disclosure identifier T ′ And a means for notifying the device of the person who requests rewriting of the disclosure identifier of the new disclosure identifier T ′. A third party who wants to use the user identifier R instead of the user identifier R that can uniquely identify the user and can present a service related to the user to the service providing system by presenting the user. A disclosure identifier generating device for generating a disclosure identifier T for disclosure to a user identifier R transmitted from a user's terminal device and a disclosure identifier restoring device or service provision upon a third party service request Means for receiving a disclosure identifier generation request designating additional information C including a condition for information C0 available to the system, and decoding at least a part of the user identifier R together with the additional information C only by a disclosure identifier restoring device A disclosure identifier generating device or means for generating a disclosure identifier T based on the encryption result and a user uniquely identified. Disclosure for disclosing to a third party who wants to use the user identifier R instead of the user identifier R that can request a service related to the user to the service providing system by presenting this A disclosure identifier generation device for generating a disclosure identifier T, which receives a disclosure identifier generation request specifying a user identifier R transmitted from a user terminal device and additional information Cs related to disclosure of the disclosure identifier T And means for encrypting at least a part of the user identifier R together with the additional information Cs so that it can be decrypted only by the disclosure identifier restoring device, and generating the disclosure identifier T based on the encryption result. generated in disclosed identifier generating apparatus, or claim 6 discloses identifier invalidating device invalidates the disclosure identifier T is rewritten at disclosed identifier rewriting device according There,
Means for accepting an invalidation request for a disclosure identifier T specifying a user identifier R0 and a disclosure identifier T to be invalidated transmitted from a device of a person requesting invalidation of the disclosure identifier; and the disclosure identifier T And the specified user identifier R0 and the acquired user identifier R are compared, and if they match, the valid identifier in which the valid disclosure identifier T is registered. A disclosure identifier invalidating apparatus comprising: means for deleting the disclosure identifier T from a list database. A third party who wants to use the user identifier R instead of the user identifier R that can uniquely identify the user and can present a service related to the user to the service providing system by presenting the user. A disclosure identifier generating device for generating a disclosure identifier T for disclosure to a user identifier R transmitted from a user's terminal device and a disclosure identifier restoring device or service provision upon a third party service request Means for receiving a disclosure identifier generation request designating additional information C including a condition for information C0 available to the system, and decoding at least a part of the user identifier R together with the additional information C only by a disclosure identifier restoring device A disclosure identifier generating device or means for generating a disclosure identifier T based on the encryption result and a user uniquely identified. Disclosure for disclosing to a third party who wants to use the user identifier R instead of the user identifier R that can request a service related to the user to the service providing system by presenting this A disclosure identifier generation device for generating a disclosure identifier T, which receives a disclosure identifier generation request specifying a user identifier R transmitted from a user terminal device and additional information Cs related to disclosure of the disclosure identifier T And means for encrypting at least a part of the user identifier R together with the additional information Cs so that it can be decrypted only by the disclosure identifier restoring device, and generating the disclosure identifier T based on the encryption result. generated in disclosed identifier generating apparatus, or claim 6 discloses identifier invalidating device invalidates the disclosure identifier T is rewritten at disclosed identifier rewriting device according Means for accepting an invalidation request for a disclosure identifier T specifying a user identifier R0 and a disclosure identifier T to be invalidated transmitted from a device of a person who requests invalidation of the disclosure identifier; The means for decrypting the user identifier T to acquire the user identifier R is compared with the specified user identifier R0 and the acquired user identifier R, and if they match, an invalid disclosure identifier T is registered. A disclosure identifier invalidating device comprising: means for registering the disclosure identifier T in an invalid identifier list database. A third party who wants to use the user identifier R instead of the user identifier R that can uniquely identify the user and can present a service related to the user to the service providing system by presenting the user. A disclosure identifier generating device for generating a disclosure identifier T for disclosure to a user identifier R transmitted from a user's terminal device and a disclosure identifier restoring device or service provision upon a third party service request Means for receiving a disclosure identifier generation request designating additional information C including a condition for information C0 available to the system, and decoding at least a part of the user identifier R together with the additional information C only by a disclosure identifier restoring device A disclosure identifier generating device or means for generating a disclosure identifier T based on the encryption result and a user uniquely identified. Disclosure for disclosing to a third party who wishes to use the user identifier R instead of the user identifier R that can request a service related to the user to the service providing system by presenting this A disclosure identifier generating device for generating a disclosure identifier T, which receives a disclosure identifier generation request specifying a user identifier R transmitted from a user terminal device and additional information Cs related to the disclosure of the disclosure identifier T And means for encrypting at least a part of the user identifier R together with the additional information Cs so that it can be decrypted only by the disclosure identifier restoring device, and generating the disclosure identifier T based on the encryption result. generated in disclosed identifier generating apparatus, or rewritten at disclosed identifier rewriting device of claim 6, wherein, among the disclosure identifier T disclosed to third parties, effective disclosure An identifier for disclosure registered in the valid identifier list database or the invalid identifier list database in the disclosure identifier management apparatus for managing the valid identifier list database in which the identifier T is registered or the invalid identifier list database in which the invalid disclosure identifier T is registered Means for periodically reading out T, means for decrypting the disclosure identifier T to acquire additional information C, and comparing the expiration date in the acquired additional information C with the date and time at that time, A disclosure identifier management apparatus comprising: means for deleting a disclosure identifier T past the list from the list. A third party who wants to use the user identifier R instead of the user identifier R that can uniquely identify the user and can present a service related to the user to the service providing system by presenting the user. A disclosure identifier generating device for generating a disclosure identifier T for disclosure to a user identifier R transmitted from a user's terminal device and a disclosure identifier restoring device or service provision upon a third party service request Means for receiving a disclosure identifier generation request designating additional information C including a condition for information C0 available to the system, and decoding at least a part of the user identifier R together with the additional information C only by a disclosure identifier restoring device A disclosure identifier generating device or means for generating a disclosure identifier T based on the encryption result and a user uniquely identified. Disclosure for disclosing to a third party who wishes to use the user identifier R instead of the user identifier R that can request a service related to the user to the service providing system by presenting this A disclosure identifier generating device for generating a disclosure identifier T, which receives a disclosure identifier generation request specifying a user identifier R transmitted from a user terminal device and additional information Cs related to the disclosure of the disclosure identifier T And means for encrypting at least a part of the user identifier R together with the additional information Cs so that it can be decrypted only by the disclosure identifier restoring device, and generating the disclosure identifier T based on the encryption result. generated in disclosed identifier generating apparatus, or rewritten at disclosed identifier rewriting device of claim 6, wherein a plurality of disclosed identifier disclosed a predetermined third parties T1, T ,... Is a disclosure identifier identity confirmation device for confirming the identity of a plurality of disclosure identifiers T1, T2,... Transmitted from a predetermined third-party terminal device. A means for receiving a request, a means for obtaining the user identifiers R1, R2,... By decoding the plurality of disclosure identifiers T1, T2,..., And the obtained user identifiers R1, R2,. An identifier identity confirmation device for disclosure, comprising: means for determining identity and notifying a result to a predetermined third party terminal device.

Images