JP4588529B2 - Service system and optimum service providing method - Google Patents

Description

  The present invention relates to a service system and an optimal service providing method for optimizing and providing contents of a service provided via a network or the like based on personal information.

Personal information includes various items such as name, address, gender, date of birth, email address, telephone number, physical characteristics (height, weight, blood type), hobbies / preferences, and family structure. In a conventional system in which a service corresponding to each user is provided by a server via a network using such personal information, a PKI (Public Key Infrastructure: public key cryptography) such as a terminal-side IC card or a mobile phone is used. Personal information is held as a client certificate in a token having a (base) function, and when using the service, the client certificate is presented to the service provider for any service. Since the necessary personal information varies depending on the service, using a common certificate for all services means that items that are unnecessary for a service are also disclosed to the service provider. To do. This is not preferable from the viewpoint of protection of personal information, and holds an extra risk for the service provider.
Therefore, in Patent Document 1, in order to limit the items of personal information to be disclosed, a combination of some items of personal information called category information is set, and personal information corresponding to each category information is set on the terminal side. Keep the stored client certificate. Service providers avoid acquiring unnecessary personal information as much as possible by acquiring client certificates containing personal information necessary for providing services by specifying the classification information for the terminal. . Also, in Patent Document 2, leakage of secret information is prevented by using a group signature.
JP 2003-345930 A JP 2004-320562 A

  However, in the system shown in Patent Document 1, it is necessary to hold a client certificate for each classification information, and in order to be able to handle any service, client certificates for all combinations are previously stored. There is a problem that it is not realistic to prepare. Moreover, since the information specified by the service provider is sent to the server, the classification information itself has a problem in that the user himself / herself does not determine whether or not personal information can be sent. Further, the system shown in Patent Document 2 has a problem that it cannot be used without a tamper resistant device.

  The present invention has been made in view of such circumstances, and its purpose is not to prepare a large number of client certificates, no tamper-proof device is required, and personal information is provided according to the service contents. It is an object of the present invention to provide a service system and an optimum service providing method that can suppress unnecessary disclosure.

The present invention has been made to solve the above-described problems, and one aspect of the present invention includes a service providing server, a certificate management server, and a terminal connected by a communication path, and the terminal is owned by a user. In the service system for providing a service to a user via the terminal, the terminal receives the personal information certificate describing the personal information of the user and the personal information necessary for the execution of the service. And an optimization module that converts the information into specific information that is necessary and sufficient for the implementation of the service, and confirms the validity of the personal information certificate, and the personal information that is input to the optimization module Execution means for executing a certificate verification module extracted from the personal information certificate, and a conversion result of the optimization module are displayed to the user, and the user is displayed. An execution result confirmation unit that changes the contents of the execution result according to the instruction and outputs the result to the service providing server, and the service providing server downloads the optimization module to the terminal. Means for receiving the output of the execution result confirmation means, and a service execution means for executing the service, wherein the certificate management server downloads the certificate verification module to the terminal. A service system comprising means.

One aspect of the present invention is the service system described above , wherein the terminal includes certificate management means for notifying the service providing server of an item name of personal information described in the personal information certificate. The service providing server includes a storage unit that stores an association between an item name of personal information, which is an input item of the optimization module, and the optimization module, and the item name notified from the certificate management unit. among them, a field selection means for extracting and outputting the item name of the personal information necessary for executing the service, wherein the optimization module management unit refers to the correspondence of said storage means to store the the personal information item name received from the item selection means to identify the optimization module to the input item, and downloaded to the terminal, the certificate verification module tube Means the certificate verification module for extracting personal information item name the item selection means is outputted from the personal information certificate, and wherein the downloading to the terminal.

One aspect of the present invention includes a service providing server, a certificate management server, and a terminal connected by a communication path, the terminal is owned by a user, includes a personal information certificate of the user, and passes through the terminal. In the optimum service providing method in a service system that provides the user with a service according to the content of the personal information certificate, the certificate management server downloads a certificate verification module to be executed by the terminal to the terminal. And the terminal executes the certificate verification module to confirm the validity of the personal information certificate, and obtains the personal information necessary for the implementation of the service from the personal information certificate. The second process of extracting and outputting, and the service providing server downloads the optimization module executed in the terminal to the terminal Step 3 and the terminal executes the optimization module, and the personal information output by the second step is necessary and sufficient for the implementation of the service, and is specific to the implementation of the service. A fourth process of converting the information into the information, and the terminal displays the conversion result of the fourth process to the user, changes the contents in accordance with the instruction of the user, and outputs to the service providing server An optimal service providing method comprising: a process; and a sixth process in which the service providing server receives the output of the fifth process and implements the service.

Another aspect of the present invention includes a service providing server, a certificate management server, and a terminal connected by a communication path, the terminal is owned by a user and includes a personal information certificate of the user, and the terminal In the optimum service providing method in a service system for providing a service according to the content of the personal information certificate to the user via the terminal, the terminal uses the item name of the personal information described in the personal information certificate as the item name. A first step of notifying the service providing server; and a second step of extracting an item name of an item necessary for performing the service from the item names received by the service providing server from the first step. And a certificate verification module that receives the item name output in the second step and extracts the personal information of the item name from the personal information certificate. A third step of downloading to the terminal, and the terminal executes the certificate verification module to confirm the validity of the personal information certificate and extract personal information from the personal information certificate. And the service providing server receives the item name output in the second step, and the association stored in the storage means, the item name of the personal information as the input item of the optimization module, , Referring to the association with the optimization module, identifying an optimization module that uses the personal information of the item name as an input item, and downloading it to the terminal; and The sixth process of converting the personal information extracted in the fourth process into specific information that is necessary and sufficient for the implementation of the service and that is suitable for the implementation of the service is executed. And the terminal displays the conversion result of the sixth process to the user, changes the content according to the user's instruction, and outputs it to the service providing server, and the service providing server, An optimal service providing method comprising: an eighth process of receiving the output of the seventh process and performing the service.

According to the present invention, the optimization module for handling personal information is downloaded from the service providing server to the terminal and executed, and only the common part of the service is executed by the service providing server. Services that depend on personal information while ensuring privacy.
Further, according to the invention described in claim 2, since the optimization module conforms to the items described in the personal information certificate by the user, the personal information is obtained in accordance with the intention of disclosure of each individual user. You can implement the services you use.

  Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a schematic block diagram showing the configuration of a service system that provides an electronic shopping service according to an embodiment of the present invention. FIG. 2 is a diagram showing data held by each device in the present embodiment. Reference numeral 100 denotes a portable terminal owned by the user and used to use the electronic shopping service, and includes a product / personal information selection unit 101, a module execution unit 102, and a certificate management unit 103. The module execution means 102 is an environment for downloading and executing the optimization module 130 and the certificate verification module 140. The merchandise / personal information selection unit 101 is a function for displaying the result of executing the optimization module 130 by the module execution unit 102 to the user and selecting / confirming the result. The certificate management unit 103 is a function that downloads and stores a personal information certificate 104 in which personal information of the user is described, and requests the certificate management server 120 to update the personal information certificate 104 as necessary. . The certificate management unit 103 has a function of outputting the item name of personal information described in the stored personal information certificate 104. The personal information certificate 104 describes the personal information of the owning user of the portable terminal 100 that stores the certificate.

  Further, the mobile terminal 100 stores therein a mobile ID 200, a module execution mode 201, a personal information certificate update flag 202, and a storage optimization module list 203 shown in FIG. The mobile ID 200 is an ID unique to the mobile terminal 100 and is given when the mobile terminal 100 is manufactured. The mobile ID 200 is ID information associated with the mobile terminal 100 or the user, and may be ID information described in a user certificate different from the personal information certificate 104, for example. The module execution mode 201 is a flag for managing online / offline of the connection state of the mobile terminal 100 to the network 150 when the module execution unit 102 executes the certificate verification module 140 and the optimization module 130. . The personal information certificate update flag 202 is a flag that is set when the expiration date or fraud of the personal information certificate 104 is detected, and is cleared when the certificate management unit 103 successfully updates the personal information certificate 104. The The storage optimization module list 203 is a list in which module names, recording locations, and the like are recorded in order to manage the optimization modules 130 when they are stored in the mobile terminal 100 without deleting them.

  The certificate verification module 140 is a module that is downloaded from the certificate management server 120 to the mobile terminal 100 and operates in the module execution unit 102. The certificate verification module 140 includes, as data, a revoked personal information certificate number list 222 shown in FIG. A personal information certificate verification certificate 223, a personal information certificate verification date and time 240, an output personal information item name 241 and a certificate management server URL 211 are stored. The revoked personal information certificate number list 222 is a list in which personal information certificate numbers of personal information certificates revoked due to unauthorized use are described, and proves the latest state when the certificate verification module 140 is downloaded. Acquired from the document management server 120 and described. The personal information certificate verification certificate 223 is a certificate of the certificate management server 120, and describes a public key for verifying the personal information certificate issued by the certificate management server 120. The personal information certificate verification date and time 240 is written with the date and time when the certificate verification module 140 is downloaded, and is used as the current date and time when the expiration date of the personal information certificate 104 is confirmed. The output personal information item name 241 is an item name of personal information that the certificate verification module 140 should obtain from the personal information certificate 104 and output. The certificate management server URL 211 is a URL (Uniform Resource Locator) indicating the location of the certificate management server 120 on the network 150. The certificate verification module 140 checks the expiration date of the personal information certificate 104 using the personal information certificate verification date and time 240, and adds the personal information certificate of the personal information certificate 104 to the revoked personal information certificate number list 222. Confirm that the personal information certificate 104 has not been revoked by using the public key described in the personal information certificate verification certificate 223 and confirm that the personal information certificate 104 has not been revoked. It is confirmed that the document 104 has not been falsified and is authentic, and the personal information of the item described in the output personal information item name 241 is extracted from the personal information certificate 104 and output.

  The optimization module 130 is a module that is downloaded from the service providing server 110 to the mobile terminal 100 and operates on the module execution unit 102 in the same manner as the certificate verification module 140. The comparison parameter 231, essential output information 232, service providing server URL 233, and product information 234 are held. The comparison parameter 231 is a parameter such as a threshold when converting personal information such as height and chest circumference into information for selecting a product such as clothes size. The essential output information 232 is a list of information items that are at least necessary for the service provider to perform the service. The service providing server URL 233 is a URL representing the position of the service providing server 110 on the network 150. The merchandise information 234 is a merchandise name and merchandise number regarding the merchandise for which the user has instructed purchase. The optimization module 130 receives the personal information output from the certificate verification module 140 described above, creates information for product selection such as the product size described in the product information 234 based on the comparison parameter 231, Personal information necessary for service provision is extracted, and the information is sent to the service provision server URL 233.

The service providing server 110 is a server that provides an electronic shopping service to a user who owns the mobile terminal 100, and includes a personal information item selection / notification unit 111, an optimization module management unit 112, and a service execution unit 113. The personal information item selection / notification 111 extracts the item name of the item used by the service provider from the personal information item name received from the mobile terminal 100 and outputs it as the item name of the personal information to be used. When the optimization module management unit 112 receives the item name of the personal information to be used from the personal information item selection / notification unit 111, the optimization module management unit 112 downloads the optimization module 130 that operates using the item as an input to the portable terminal 100. The service execution unit 113 communicates with the optimization module 130 downloaded and executed on the mobile terminal 100 to provide an electronic shopping service.
In addition, the service providing server 110 stores therein a personal information item-optimization module correspondence list 210, a certificate management server URL 211, and a storage optimization module list 212 shown in FIG. The personal information item-optimization module correspondence list 210 is a correspondence table between item names of personal information, which are input items of the optimization module 130, and optimization module names. The stored optimization module list 212 includes the mobile ID of the download destination mobile terminal 100 stored in the mobile terminal 100 without being immediately deleted after execution, the name of the optimization module 130, the date and time of download. Is a list that stores

The certificate management server 120 is a server that manages the personal information certificate 104 and includes a certificate verification module management unit 121 and a certificate issuance unit 122. Upon receiving the designation of the item name of the personal information to be used, the certificate verification module management unit 121 generates a certificate verification module 140 and downloads it to the mobile terminal 100. The certificate issuing unit 122 issues a personal information certificate in response to a request from the mobile terminal 100 that has confirmed the mobile ID 200 and the personal identification number in the case where the signed personal information certificate 104 is issued to the mobile terminal 100 and the expiration date has expired. The document 104 is updated.
Further, the certificate management server 120 includes, as data, an issued personal information certificate list 220, a private information certificate issuance private key 221, a revoked personal information certificate number list 222, a personal information certificate shown in FIG. The certificate verification certificate 223 is held. In the issued personal information certificate list 220, the mobile ID 200 of the mobile terminal 100 to which the personal information certificate 104 issued by the certificate management server 120 is issued, the expiration date of the personal information certificate 104, and the personal information that is the serial number thereof. The certificate number is stored. The private information certificate issuing private key 221 is a private key used when creating a signature added to the personal information certificate 104.
The network 150 is a network that connects the mobile terminal 100, the service providing server 110, and the certificate management server 120.

  When the user contracts with this service, the personal information certificate 104 is used by the certificate management server 120 to verify the personal information presented by the user along with the identity of the bank account or credit card. It is issued with a number and a signature by a private key for issuing a personal information certificate, and is downloaded to the portable terminal 100. At the time of issuance, the certificate management server 120 describes in the issued personal information certificate list 220 the mobile ID 200 of the mobile terminal 100 purchased by the user as the download destination and the issued personal information certificate 104. Record the expiration date, personal information certificate number, and PIN. Note that data obtained by applying a hash function or the like to a personal identification number may be recorded instead of the personal identification number.

Next, the operation of this service system will be described using the sequence diagram shown in FIG. In the sequence of FIG. 3, the mobile terminal 100 has a WWW (World Wide Web) system browser function, and the service providing server 110 has a WWW system server function. The information is transmitted by the function, and the user operates the browser function of the mobile terminal 100 to acquire and display a list of products sold by the electronic shopping service from the service providing server 110. For example, it starts with a decision to buy a T-shirt and a purchase input. When the user inputs the purchase to the portable terminal 100, the certificate management unit 103 uses all the item names described in the stored personal information certificate 104, for example,
"Name, date of birth, blood type, height, weight, address, phone number, credit card number" ... (1)
In this way, the personal information item selection / notification means 111 is notified (S10). When the personal information item selection / notification means 111 receives the item name shown in (1) from the certificate management means 103, the item name of the personal information used for T-shirt purchase of the electronic shopping service from the received item names. "Name, height, weight, address, phone number, credit card number" ... (2)
Is output to the optimization module management unit 112 (S11), and the URL of the certificate management server 120 is acquired from the certificate management server URL 211 and notified to the certificate verification module management unit 121 via the network 150 (S12). ). Upon receiving the item names shown in (2) from the personal information item selection / notification unit 111, the certificate verification module management unit 121 stores these item names in the output personal information item name 241 and stores the current date and time in the personal information. The certificate verification date / time 240 is stored in the certificate verification module 140 after the revoked personal information certificate number list 222 stored in the certificate management server 120 is stored. Download to 102 (S13).

Upon receiving the certificate verification module 140 from the certificate verification module management unit 121, the module execution unit 102 executes this. That is, first, after disconnecting from the network 150 and registering offline in the module execution mode 201, the following three points are confirmed as to the validity of the personal information certificate 104. The first point is that the personal information certificate verification date / time 240 of the certificate verification module 140 does not exceed the expiration date of the personal information certificate 104. The second point is to confirm the validity of the signature, that is, that the personal information certificate 104 has not been forged or tampered with. The public key paired with the private information certificate issuance private key 221 is extracted from the verification certificate 223, and the personal information certificate 104 has the correct signature, that is, the personal information is described in the personal information certificate 104. This is performed by confirming that a signature is created with the certificate issuing private key 221. The third point is that the personal information certificate 104 has not been revoked. This is because the personal information certificate number of the personal information certificate 104 is the revocation personal information certificate number list of the certificate verification module 140. Confirm that there is not. Next, the personal information of each item name stored in the output personal information item name 241 is extracted from the personal information certificate 104, for example,
“Name: Taro Yamada, Height: 172 cm, Weight: 65 Kg, Address: Tokyo XXX, Phone Number: 03-XXXX, Credit Card Number: 1234XXXX” (3)
Is obtained (S14).

  If the validity check of the personal information certificate 104 fails, the module execution unit 102 sets the personal information certificate update flag 202 and issues a certificate update request to the certificate management unit 103. (S15). Upon receiving a certificate update request with reference to the personal information certificate update flag 202, the certificate management unit 103 causes the user to input the personal information shown in (1) and the personal identification number registered when the portable terminal 100 is purchased. Instead of the personal identification number, the personal authentication may be performed using a personal identification number (PIN) of the mobile terminal 100 or an IC chip attached to the mobile terminal 100, or a biometric personal authentication method may be used instead. Upon receipt of the personal information and password entered by the user, the certificate management unit 103 connects to the network 150, refers to the certificate management server URL 211 of the certificate verification module 140, and stores the certificate management server 120. A personal information certificate issuance request is notified to the certificate issuing means 122 together with the mobile ID 200 of the portable terminal 100, the input personal information and the personal identification number (S16). The certificate issuing unit 122 confirms the consistency between the mobile ID 200 received from the portable terminal 100 and the personal identification number in the issued personal information certificate list 220, and then, based on the personal information received from the portable terminal 100, A personal information certificate 104 is created and downloaded to the certificate management means 103 of the portable terminal 100 (S17). When the new personal information certificate 104 is downloaded, the certificate management means 103 clears the personal information certificate update flag 202, and thereafter, from the step S14, as in the case where the validity of the personal information certificate 104 is confirmed. The following sequence is executed.

  On the other hand, the optimization module management unit 112 receives the item name shown in (2) as the item name of the personal information to be used from the personal information item selection / notification unit 111 (S11), and the personal information item-optimization From the module correspondence list 210, the optimization module 130 in which the item shown in (2) matches the personal information item to be input is searched, and the T-shirt size threshold (here, the T-shirt as the product information 234 and the comparison parameter 231) For example, if the height is 165 to 175 cm and the weight is 50 to 65 kg, “size: M”) is stored, and this is downloaded to the module execution means 102 (S18). The module execution unit 102 receives the optimization module 130 from the certificate verification module management unit 121. When the above-described certificate verification module 140 has been executed, the module execution unit 102 executes this and executes step Sa101 shown in FIG. Then, one item is fetched from the personal information shown in (3), which is the execution result of the certificate verification module 140. Here, it is assumed that the first item “name: Taro Yamada” is incorporated. In step Sa102, since the acquisition of all personal information has not been completed, the condition is not satisfied, and the process proceeds to step Sa103. In step Sa103, the name is necessary for product delivery and is an item to be directly output to the service providing server 110. Therefore, the condition is satisfied, and the process proceeds to step Sa108. In step Sa108, the name is not personal information to be substituted, so the condition is not satisfied, and the process proceeds to step Sa109. Here, the substitute personal information indicates, for example, information corresponding to a mail address when the user refuses to disclose a telephone number and discloses a mail address as a substitute contact.

In step Sa109, “name: Taro Yamada” is added to the personal information list. Next, returning to step Sa101, the second item “height 172 cm” is taken from the personal information shown in (3). In step Sa102, as in the first item, since the acquisition of all personal information has not been completed, the condition is not satisfied, and the process proceeds to step Sa103. In step Sa103, since the height is not directly output, the condition is not satisfied. In step Sa104, the size of the T-shirt is selected as the comparison parameter calculation. In this step Sa104, referring to the comparison parameter 231, if the height is 165 to 175 cm and the weight is 50 to 65 kg, “size: M” is assumed. Although the height is within the range of size M, but the weight has not yet been captured, the condition that “weight” is necessary as another item is established in step Sa105, and step Sa101 is executed again, “weight: 65 kg”. Take in. In the same manner as in the case where the height is captured in steps Sa102 and Sa103, in step Sa104, “size: M” is selected from “height: 172 cm, weight 65: Kg”. Then, in the next step Sa105, since no other items are required for size selection, the condition is not satisfied, and the process proceeds to step Sa106, and “T-shirt” and “size: M” of the product information 234 are added to the product information list. to add. After that, as in the case of the name, the information shown in (3) is taken in as an address, a telephone number, and a credit card number and added to the personal information list. Here, the personal information list and the product information list are as follows.
Personal information list; “Name: Taro Yamada, Address: Tokyo XXX, Phone number: 03-XXXX, Credit card number: 1234XXXX” (4)
Product information list; “Product: T-shirt, Size: M” (5)

  When all the personal information shown in (3) is taken in, the condition for ending the taking of all personal information is established in step Sa102, and the process proceeds to step Sa111 in FIG. In step Sa111, it is confirmed whether or not the product information list shown in (5) can be changed. If there is an item for which a parameter has been set in the optimization module 130, it can be changed and the process moves to step Sa112. Here, since the optimization module 130 has selected the size of the T-shirt based on the height and weight, which are personal information, the process proceeds to Step Sa112, assuming that the size can be changed. In step Sa112, “product: T-shirt, size: M” which is the product information list shown in (5) is output to the product / personal information selection means 101 (S19). Upon receiving “product: T-shirt, size: M” from the module execution unit 102, the product / personal information selection unit 101 displays this on the screen of the portable terminal. The user confirms this and changes it to an arbitrary size according to his / her preference. Here, the description will be made assuming that it is left unchanged. The product / personal information selection means 101 returns “product: T-shirt, size: M” to the module execution means 102 as it is.

  When the module execution unit 102 receives the response from the product / personal information selection unit 101, the module execution unit 102 proceeds to the next step Sa <b> 113 and stores the product information list “product: T-shirt, size: M” again in the product / personal information selection unit 101. Output (S20). Upon receiving the product information list “product: T-shirt, size: M” from the module execution unit 102, the product / personal information selection unit 101 displays this on the screen of the portable terminal. In this case, since only one product has been purchased, the same process is repeated twice. However, when a plurality of products are to be purchased, the first time the optimization module 130 is used for each product. The user is requested to confirm the selection results, and the second time is the final confirmation, in which the user is confirmed whether to purchase them all. Here, since what is purchased is only one T-shirt, it will be described that purchase is selected as it is. The product / personal information selection means 101 returns “product: T-shirt, size: M” to the module execution means 102 as it is. Here, it is assumed that there is an optimization module 130 for each product. For example, one product may be substituted for the same type of product. Confirmation may be omitted.

  Upon receiving the response from the product / personal information selection unit 101, the module execution unit 102 proceeds to the next step Sa114, and outputs the personal information list shown in (4) to the product / personal information selection unit 101 (S21). . Upon receiving the personal information list from the module execution unit 102, the product / personal information selection unit 101 displays the personal information list on the screen of the mobile terminal 100. The user selects an item that may be disclosed to the service provider from the personal information. Here, it is assumed that all items can be disclosed, and the case where the user refuses to disclose items necessary for service implementation will be described in detail later. When the user selects all items, the product / personal information selection unit 101 returns the personal information list shown in (4) to the module execution unit 102 as it is. When the module execution means 102 receives the response from the product / personal information selection means 101, the module execution means 102 moves to step Sa115, and in the optimization module 130, the personal information list (4) and the product information list (5), which are the transmission contents. Compared with the essential output information 232 that is the data held in, it is confirmed that the information necessary for purchase is available.

  Here, since the information is prepared, the condition of step Sa116 is satisfied, the process proceeds to the next step Sa117, the module execution mode 201 is set to online, and then connected to the network 150. In step Sa117, next, referring to service providing server URL 233, personal information list (4) and product information list (5) confirmed in step Sa115 are transmitted to service implementing means 113 of service providing server 110 (S22). ). Upon receiving (4) and (5) from the module execution unit 102, the service execution unit 113 sells the product specified in the product information list in (5) to the customer specified in the personal information list in (4). Perform processing (settlement processing, delivery arrangement, etc.). When the sales process ends normally, the service execution unit 113 transmits a notification of normal end and module deletion to the module execution unit 102. When the module execution unit 102 receives a notification of normal termination and module deletion from the service execution unit 113 in step Sa118, the condition of step Sa119 is satisfied, and thus the process proceeds to step Sa120 and the optimization module being executed 130 is terminated and deleted.

  In the case of a service that continuously provides information or a service that takes time to provide information, not a service that delivers goods, the service execution unit 113 stores the storage optimization module list. In 212, the mobile ID 200 of the mobile terminal 100, the module name of the optimization module 130, and the download date and time are registered, and the module execution means 102 of the mobile terminal 100 is notified of normal termination and module storage. Then, in step Sa119, since the response is not module deletion, the condition is not satisfied, the process proceeds to step Sa121, and is registered in the saved optimization module list 203, and the optimization module 130 is saved (Sa121). When using the service, the stored optimization module list 212 is referred to and activated.

Here, as an example of converting personal information into information suitable for service implementation in the optimization module 130, an example of obtaining the size of the T-shirt from the height and weight is given. Depending on the occupation, minor purchase restrictions, silver discounts, and student discounts may be provided.
Further, the optimization module 130 and the certificate verification module 140 are downloaded to the mobile terminal 100 via the network 150. However, local communication such as infrared communication or short-range wireless communication provided in the mobile terminal 100 may be used. In this case, instead of downloading a general-purpose application that operates in response to the command into the mobile terminal 100 in advance, and downloading the optimization module 130 and the certificate verification module 140, the command and parameters are transferred to the mobile terminal 100. The same function may be realized by transmitting to.
Further, although the personal information certificate 104 is stored in the mobile terminal 100, an IC chip to be attached to the mobile terminal 100 may be prepared and stored therein. In this case, the certificate verification module 140 may be executed by this IC chip instead of the portable terminal 100.
Furthermore, a mechanism for verifying the validity of the certificate verification module 140 and the optimization module 130 may be included in the mobile terminal 100 or the IC chip.

As described above, since the mobile terminal 100 simply holds one personal information certificate 104 and downloads and executes the optimization module 130 according to the stored personal information and service contents, various types of information are available. In addition to being able to deal with various services, the user does not need to input information every time, so it is suitable for services using portable terminals. Also, the personal information is not disclosed directly to the service provider, but the optimization module 130 operates on the mobile terminal 100 while offline, and the personal information is converted into information suitable for the service implementation to provide the service. Since the information is transmitted to the server 110, even if personal information is leaked by the service provider, the leaked information can be minimized. For this reason, as personal information, for example, a service utilizing personal information with high privacy such as issuing a prescription according to personal illness information can be realized.
Further, since the optimization module management unit 112 creates the optimization module 130 based on the items described in the personal information certificate 104, it is assumed that different items are described in the personal information certificate 104 for each user. Can also cope with these.

  In the description of step Sa114, it is described that the user has selected disclosure of all personal information lists, and the case where the user refuses to disclose items necessary for the implementation of the service will be described in detail later. explain. For example, an outline in the case where the user refuses to disclose the address to the service provider but may be disclosed if it is a delivery company will be described with reference to the flowchart of FIG. In this figure, 160 is a delivery company server in which the user's ID and address are registered in advance and delivery can be arranged by receiving notification of the ID.

Since the user refuses to disclose the address to the service provider, that is, the address is refused to be disclosed in step Sb200, the product / personal information selection means 101 of the mobile terminal 100 removes the address according to the user's instruction. Generate personal information list,
“Name: Taro Yamada, Phone number: 03-XXXX, Credit card number: 1234XXXX” (6)
This is transmitted to the service providing server 110 in step Sb202. In response to this, the service providing server 110 confirms in step Sb203 whether or not all items necessary for service implementation are included in the personal information list shown in (6). Here, since an address is insufficient as an item, information indicating that another delivery company can be used as a restriction item and substitute service in that case is transmitted in step Sb205. In response to this, the portable terminal 100 displays restrictions, so the user confirms this (Sb206), and as another method of receiving the service without disclosing the address to the service provider, other delivery companies And the user's own ID (substitute ID) registered in advance with the address or the like in order to use this delivery company is displayed on the portable terminal 100, and this is confirmed.

  Next, when the user transmits a substituteable ID to the delivery company server 160 (Sb209), and the substituteable ID is not disclosed to the service provider (Sb212), between the portable terminal 100 and the delivery company server 160 Thus, mutual authentication and key exchange are performed (Sb215). Further, the delivery company server 160 generates a signature permitting receipt of the substituteable ID via the service providing server 110, and transmits the signature to the portable terminal 100 (Sb216). Upon receiving this signature, the portable terminal 100 encrypts its substituteable ID with the key exchanged with the delivery company server 160 and transmits it to the service providing server 110 together with the signature (Sb217). Upon receiving this signature and the encrypted substituteable ID, the service providing server 110 verifies the signature and then transmits the substituteable ID that has been encrypted to the delivery company server 160. Here, since the service providing server 110 does not have a key, it cannot decrypt the substituteable ID. Upon receiving this, the delivery company server 160 decrypts it with the key exchanged with the portable terminal 100, obtains a substituteable ID, and delivers based on the address registered in advance. In addition, this is notified to the service providing server 110 (Sb219). In response to this, the service providing server 110 continues the product sales process (Sb220).

It is a block diagram which shows the structure of the service system of the electronic shopping service by one Embodiment of this invention. It is a figure which shows the data which each apparatus in this embodiment hold | maintains. It is a sequence diagram which shows the sequence at the time of goods purchase in this embodiment. It is a flowchart (the 1) of the optimization module 130 in this embodiment. It is a flowchart (the 2) of the optimization module 130 in this embodiment. It is a figure explaining the case where an address etc. are disclosed only to the delivery company in this embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 ... Portable terminal 101 ... Merchandise / personal information selection means 102 ... Module execution means 103 ... Certificate management means 104 ... Personal information certificate 110 ... Service providing server 111 ... Personal information item selection / notification means 112 ... Optimization module management means DESCRIPTION OF SYMBOLS 113 ... Service implementation means 120 ... Certificate management server 121 ... Certificate verification module management means 122 ... Certificate issuing means 130 ... Optimization module 140 ... Certificate verification module 150 ... Network 160 ... Delivery company server 200 ... Mobile ID
201: Module execution mode 202 ... Personal information certificate update flag 203 ... Stored optimization module list 210 ... Personal information item-optimization module correspondence list 211 ... Certificate management server URL
212 ... Storage optimization module list 220 ... Issued personal information certificate list 221 ... Private information certificate issuance private key 222 ... Revoked personal information certificate number list 223 ... Personal information certificate verification certificate 231 ... Comparison parameter 232 ... Mandatory output information 233 ... Service providing server URL
234 ... Product information 240 ... Date and time of verification of personal information certificate 241 ... Output personal information item name

Claims (2)

In a service system comprising a service providing server, a certificate management server, and a terminal connected by a communication path, the terminal being owned by a user and providing a service to the user via the terminal,
The terminal
A personal information certificate describing the personal information of the user;
Certificate management means for notifying the service providing server of the item name of the personal information described in the personal information certificate;
An optimization module that converts personal information necessary for the implementation of the service into specific information that is necessary and sufficient for the implementation of the service and is suitable for the implementation of the service, and the validity of the personal information certificate. Executing means for executing a certificate verification module for confirming and extracting the personal information to be input to the optimization module from the personal information certificate;
An execution result confirmation unit that displays the conversion result of the optimization module to the user, changes the content of the execution result according to the user's instruction, and outputs the result to the service providing server;
The service providing server includes:
Storage means for storing an association between an item name of personal information which is an input item of the optimization module and the optimization module;
Among the item names notified from the certificate management means, item selection means for extracting and outputting the item name of personal information necessary for carrying out the service;
Referring to the association stored in the storage means , identifying the optimization module having the personal information of the item name received from the item selection means as its input item, and downloading the optimized module to the terminal; ,
Service execution means for receiving the output of the execution result confirmation means and executing the service, and
The certificate management server
A service system comprising: a certificate verification module management unit that downloads the certificate verification module that extracts the personal information of the item name output by the item selection unit from the personal information certificate to the terminal. The terminal comprises a service providing server, a certificate management server, and a terminal connected by a communication path, the terminal is owned by a user and includes a personal information certificate of the user, and the personal information is transmitted to the user via the terminal. In an optimal service providing method in a service system that provides a service according to the contents of a certificate,
A first process in which the terminal notifies the service providing server of an item name of personal information described in the personal information certificate;
A second step in which the service providing server extracts item names of items necessary to implement the service from among the item names received from the first step;
A third process in which the certificate management server receives the item name output in the second process and downloads to the terminal a certificate verification module that extracts personal information of the item name from the personal information certificate; ,
A fourth process in which the terminal executes the certificate verification module to confirm the validity of the personal information certificate and extracts personal information from the personal information certificate;
The service providing server receives the item name output in the second step and stores the information stored in the storage unit. The item name of the personal information, which is an input item of the optimization module, and the optimization A fifth step of referring to the association with the module, identifying an optimization module having the personal information of the item name as an input item, and downloading to the terminal;
The terminal executes the optimization module, and converts the personal information extracted in the fourth process into specific information that is necessary and sufficient for the implementation of the service and is suitable for the implementation of the service. Sixth process,
A seventh step in which the terminal displays the conversion result of the sixth step to the user, changes the content in accordance with the user's instruction, and outputs it to the service providing server;
The service providing server includes an eighth process of receiving the output of the seventh process and performing the service.

Images