JP5948472B1 - Information management system and business system - Google Patents

Abstract

Provided is a technique for safely utilizing an ID having high confidentiality such as My Number (registration information). A business system 103 is connected via a communication network 101 to a My Number management server 102 that manages My Number (registered trademark) given by an administrative institution. The derived ID (hash value) generated by the my number management server 102 from the my number (registered trademark) by a hash function and the employee number are associated in the ID storage unit 126, and the derived ID and the personal information are the intellectual property information storage unit 136, etc. Are associated with each other. When the employee number is designated, the data processing unit 124 and the data processing unit 134 detect the derivation ID and personal information and generate form data. The form data is transmitted from the communication unit 123, and the form data including the My Number (registered trademark) is received from the My Number Management Server 102. [Selection] Figure 1

Description

  The present invention relates to information management, and more particularly, to a method for managing IDs assigned by administrative agencies.

  From October 2015, each citizen will be given a social security / tax number called My Number (registered trademark). My Number (registered trademark) is composed of 12 digits and, as a rule, will not be changed for a lifetime. Starting in 2016, My Number (registered trademark) is required for administrative procedures for social security, tax, and disaster countermeasures. Since private companies also use the employee's My Number (registered trademark) in social security and tax procedures, the employee notifies the employee of the My Number (registered trademark) (Patent Document 1).

JP 2014-41490 A

  In principle, My Number (registered trademark), which is not changed, is convenient, but easy and unintended use is restricted. Even private companies are required to take measures such as restricting the right to access My Number (registered trademark) only to employees who are involved in the above procedures, for example, members in charge of the accounting department. Private companies that keep My Number (registered trademark) need to be very careful so that My Number (registered information) is not leaked.

  The present invention has been made in view of the above problems, and its main purpose is to provide a technique for safely utilizing an ID with high confidentiality such as My Number (registration information).

An information management system according to an aspect of the present invention includes a basic ID management system and one or more business systems connected to the basic ID management system via a communication network.
The basic ID management system associates and holds a first data processing unit that generates a derived ID from a basic ID given to an individual by an administrative institution using an irreversible function, and the basic ID and the derived ID. A basic ID storage unit, and a first communication unit that transmits the derived ID to the business system.
The business system generates a form data including a personal information storage unit that holds a derivative ID and personal information in association with each other, and a personal data associated with the derivative ID and the derivative ID when the derivative ID is designated. 2 data processing part, and the 2nd communication part which transmits form data to a basic ID management system.
When receiving the form data, the first communication unit of the basic ID management system assigns the basic ID corresponding to the derivative ID included in the form data to the form data and sends it back to the business system.

Another aspect of the present invention is also an information management system.
This information management system includes a basic ID management system and one or more business systems connected to the basic ID management system via a communication network.
The basic ID management system associates and holds a first data processing unit that generates a derived ID from a basic ID given to an individual by an administrative institution using an irreversible function, and the basic ID and the derived ID. A basic ID storage unit, and a first communication unit that transmits the derived ID to the business system.
The business system includes a personal ID storage unit that associates and holds a derivative ID and a personal ID for specifying an individual different from the basic ID, a personal information storage unit that associates and holds a personal ID and personal information, When a personal ID is specified, a second data processing unit that detects a derivative ID and personal information associated with the personal ID and generates form data including the personal information and the derivative ID; and basic ID management of the form data A second communication unit that transmits to the system.
When receiving the form data, the first communication unit of the basic ID management system assigns the basic ID corresponding to the derivative ID included in the form data to the form data and sends it back to the business system.

Yet another aspect of the present invention is a basic ID management system.
This basic ID management system is connected to a plurality of business systems respectively operated by a plurality of companies via a communication network, and a derived ID is obtained by a nonreciprocal function from a basic ID given to identify an individual from an administrative organization. A first data processing unit to be generated; a basic ID storage unit that stores the basic ID and the derived ID in association with each other; and a first communication unit that transmits the derived ID to the business system.
When receiving the form data including the derivative ID from the business system, the first communication unit assigns the basic ID corresponding to the derivative ID to the form data and sends it back to the business system.

Yet another aspect of the present invention is a business system.
This business system is connected to a basic ID management system that manages a basic ID assigned to identify an individual from an administrative institution via a communication network, and the basic ID management system is derived from the basic ID by an irreversible function. A personal ID storage unit that associates and holds an ID and a personal ID for identifying an individual different from the basic ID, a personal information storage unit that associates and holds the personal ID and personal information, and a personal ID are designated. A second data processing unit that detects a derivative ID and personal information associated with the personal ID, generates form data including the personal information and the derivative ID, and transmits the form data to the basic ID management system. And 2 communication units.
The second communication unit receives form data to which a basic ID corresponding to the derived ID is assigned from the basic ID management system.

  According to the present invention, it is possible to secure the safety of IDs that require strict security and to utilize them.

It is a functional block diagram of an information management system. It is a data structure figure of the my number storage part of the my number management server. It is a data structure figure of ID storage part of my number management server. It is a data structure figure of ID storage part of an organization management server. It is a data structure figure of the intellectual property information storage part of an intellectual property server. It is a data structure figure of the salary information storage part of a salary server. It is a figure which shows the salary details information before my number provision. It is a figure which shows the salary details information after my number provision. It is a schematic diagram which shows the connection of derivative ID and personal information. It is a flowchart which shows the initial registration process of the personal information in a my number management server. It is a flowchart which shows the production | generation process of derivative ID. It is a flowchart which shows the process in which an employee number is changed in an organization management server. It is a flowchart which shows the information search processing process of a salary server. It is a screen figure which shows an information search result.

[First Embodiment]
FIG. 1 is a functional block diagram of the information management system 100.
In the information management system 100, a my number management server 102 (basic ID management system) and a plurality of business systems 103 are connected by the my number management server 102. Hereinafter, the business system 103 operated by the company A will be described.

  In the business system 103 of the company A, the organization management server 118, the intellectual property server 130, the salary server 138, and the user terminals 148a and 148b are connected to each other via the intranet 128. The user terminals 148a and 148b are client terminals operated by employees of the company A. The user accesses each server in the business system 103 via the user terminal 148. Other servers and user terminals 148 (not shown) are also connected to the intranet 128. Hereinafter, the IP server 130 and the salary server 138 will be described as representatives of in-house business servers.

  Each component of the my number management server 102, the organization management server 118, the intellectual property server 130, and the salary server 138 is a CPU, a memory, and a program that realizes the components of this figure loaded in the memory, and the program It is realized by an arbitrary combination of hardware and software, centering on a storage unit such as a hard disk for storing the data, and a network connection interface. It will be understood by those skilled in the art that there are various modifications to the implementation method and apparatus. Each figure described below shows functional unit blocks, not hardware unit configurations.

In the present embodiment, a description will be given assuming that the basic ID given by the administrative institution is My Number (registered trademark).
The my number management server 102 is operated by a specialist. The my number management server 102 manages my number (registered trademark). The my number management server 102 includes a U / I (user interface) unit 104, a data processing unit 106 (first data processing unit), and a communication unit 110 (first communication) in charge of communication with an external device via the communication network 101. A data storage unit 112 for storing various data. The data processing unit 106 functions as an interface between the U / I unit 104, the communication unit 110, and the data storage unit 112, and executes various data processing.

  The U / I unit 104 is in charge of information display and operation input. The U / I unit 104 may provide a user interface to an external device via the communication network 101. The data processing unit 106 includes a conversion unit 108. The conversion unit 108 generates a derivative ID from My Number (registered trademark) (described later).

  The data storage unit 112 includes a my number storage unit 114 (basic ID storage unit) and an ID storage unit 116. My number storage unit 114 holds My Number (registered trademark) and a derivative ID in association with each other. Details of the my number storage unit 114 will be described later with reference to FIG. The ID storage unit 116 associates and holds the derivative ID and a personal ID (here, referred to as an employee number) that is used in the company A and uniquely identifies the individual (including the corporation) in the company A. Details of the ID storage unit 116 will be described in detail with reference to FIG.

  The my number management server 102 is a server with the highest security level that can be directly accessed only by an operator of the my number management server 102 (hereinafter referred to as “privileged user”). Although details will be described later, a user who has an access right to the organization management server 118 in the company A (hereinafter referred to as a “first type user”) indirectly accesses the My Number management server 102 via the organization management server 118. Can be accessed. In the present embodiment, the first type user is a person who is given special authority in the accounting department of company A.

  The organization management server 118 is operated by the first type user of the company A. The organization management server 118 manages the derived ID. The organization management server 118 stores a U / I unit 121, a data processing unit 124 (second data processing unit), a communication unit 123 in charge of communication with an external device connected to the communication network 101, the intranet 128, and the like, and a derivative ID. An ID storage unit 126 (personal ID storage unit) is included. The U / I unit 121 is in charge of information display and operation input. The U / I unit 121 may provide a user interface to an external device via the communication network 101 or the intranet 128. The data processing unit 124 functions as an interface of the U / I unit 121, the communication unit 123, and the ID storage unit 126, and executes various data processing. Details of the ID storage unit 126 will be described in detail with reference to FIG.

  The IP server 130 is operated by an IP member of company A. The IP server 130 manages IP reward information. The IP server 130 includes a U / I unit 132, a data processing unit 134, a communication unit 133 in charge of communication with external devices connected to the intranet 128, and an IP information storage unit 136 (personal information) for storing IP reward information. Storage section). The U / I unit 132 is in charge of information display and operation input. The U / I unit 132 may provide a user interface to the user terminal 148 via the intranet 128. The data processing unit 134 functions as an interface of the U / I unit 132, the communication unit 133, and the intellectual property information storage unit 136, and executes various data processing. Details of the intellectual property information storage unit 136 will be described in detail with reference to FIG. The data processing unit 134 includes a search unit 135.

  The salary server 138 is operated by the accounting member of the company A. The salary server 138 manages employee salary information. The salary server 138 includes a U / I (user interface) unit 140, a data processing unit 142, a communication unit 144 in charge of communication with an external device connected to the intranet 128, and a salary information storage unit 146 (personal information storage) that stores salary information. Part). The U / I unit 140 is in charge of information display and operation input. The U / I unit 140 may provide a user interface to the user terminal 148 via the intranet 128. The data processing unit 142 functions as an interface of the U / I unit 140, the communication unit 144, and the salary information storage unit 146, and executes various data processing. Details of the salary information storage unit 146 will be described in detail with reference to FIG. The data processing unit 142 includes a search unit 145.

  The user of the company A is classified into a first type user having an access right to the organization management server 118 and a second type user having no access right. The first type user can register the employee number of the employee via the U / I unit 121 of the organization management server 118. For example, when a new employee joins the company, the first type user collectively inputs the new employee's My Number (registered trademark) and the employee number. In addition to the employee number, various information such as name, gender, educational background, and work history may be registered, but such information is linked to the employee number, but not directly to the My Number. In the present embodiment, when an employee is newly registered, the communication unit 123 of the organization management server 118 transmits the My Number (registered trademark) and the employee number of the employee to the My Number management server 102. The conversion unit 108 of the my number management server 102 generates a derivative ID from the my number (registered trademark), and the my number storage unit 114 stores the my number (registered trademark) and the derivative ID in association with each other. The communication unit 110 of the my number management server 102 returns the generated derivative ID to the organization management server 118.

FIG. 2 is a data structure diagram of the my number storage unit 114.
The conversion unit 108 of the my number management server 102 converts a my number (registered trademark) composed of 12-digit numbers with a hash function to generate a derivative ID. Here, it is assumed that the derivative ID is a 5-digit number. The hash function is a so-called irreversible function, and the same derivation ID can always be generated from the same My Number (registered trademark), while the original My Number (registered trademark) cannot be obtained from the derivation ID. Therefore, even if the derivative ID leaks, the My Number (registered trademark) is not known.

The my number storage unit 114 stores a my number (registered trademark) and a derivative ID (hash value) in association with each other. In order to hold my number (registration information) that requires sufficient security management, direct access to the my number storage unit 114 is restricted to privileged users. In other words, the my number management server 102 has a list (first list) of users (privileged users) that can directly access the my number storage unit 114, and only users registered in the first list are privileged users. As described above, access to the my number storage unit 114 is permitted. User authentication is executed by the data processing unit 106.
On the other hand, the organization management server 118 has a list (second list) of users (first type users) that can directly access the ID storage unit 126, and only users registered in the second list are of the first type. As a user, access to the ID storage unit 126 is permitted. User authentication is executed by the data processing unit 124.
The same user is not registered in both the first list and the second list. That is, the user group (first user group) registered in the first list and the user group (second user group) registered in the second list are set so as not to overlap each other.
In summary, the privileged user can access only the my number management server 102. The first type user can access only the business system 103 (the organization management server 118, the intellectual property server 130, and the salary server 138). The second type user can access the intellectual property server 130 and / or the salary server 138, but access to the organization management server 118 and the my number management server 102 is prohibited.
In FIG. 2, a derivative ID “14238” is generated from My Number (registered trademark) “4123456 ***”.

  Even if information is leaked from the my number storage unit 114, only my number (registered trademark) and derivative ID are leaked, and personal information is not leaked. That is, even if the My Number (registered trademark) is leaked from the My Number storage unit 114, it is not known who My Number (registered trademark) is, so security can be maintained.

FIG. 3 is a data structure diagram of the ID storage unit 116.
After generating the derivation ID, the data processing unit 106 associates the derivation ID with the employee number and records them in the ID storage unit 116. The employee ID (personal ID) “M7051” of company A is associated with the derived ID “14238”. The employee numbers of Company B and Company C are also associated with the same derived ID. That is, it is generated from the derivative ID generated from the employee number “M7051” of the employee A of the company A and the derived number ID of the employee b1 of the employee number “8750” of the company B. The derived IDs coincide by chance. In this way, the same derivative ID may be generated from different My Numbers (registered trademark). Such a match rarely occurs, but if the two belong to different companies, they can be identified by the company name, so this is not a problem. If the same derivative ID is generated from the different My Number (registered trademark) of two employees a1 and a2 of Company A, the distinctiveness is lost. A countermeasure for this problem will be described later.

  Even if information is leaked from the ID storage unit 116, only the derived ID and employee number are leaked, and neither personal information nor my number (registered trademark) is leaked. Since the My Number (registered trademark) cannot be obtained from the derived ID, security can be maintained.

FIG. 4 is a data structure diagram of the ID storage unit 126 of the organization management server 118.
When a new employee is registered, the organization management server 118 transmits the My Number (registered trademark) and the employee number to the My Number management server 102 and receives the derivative ID from the My Number management server 102. The data processing unit 124 of the organization management server 118 registers the originally transmitted My Number (registered trademark) and the received derivative ID in the ID storage unit 126 in association with each other. As shown in FIG. 2 and FIG. 3, when an employee with My Number (registered trademark) “4123456 ****” and employee number “M7051” is newly registered, this My Number (registered trademark) is registered. Corresponding derivative ID “14284” is transmitted from My Number Management Server 102. In the ID storage unit 126, the derivative ID “14284” and the employee number “M7051” are registered in association with each other.
In addition to the derived ID and the employee number, the ID storage unit 126 may register the employee name in association with each other. In the present embodiment, in the business system 103, information management is performed using an employee number as a key, and a derivative ID is used as necessary.

The organization management server 118 does not manage My Number (registered trademark) by itself even if My Number (registered trademark) is input. Management of my number (registered trademark) is entrusted to the my number management server 102. This frees up most of the management burden of My Number (registered trademark). Since the organization management server 118 does not have My Number (registered trademark), there is no possibility that My Number (registered trademark) will flow out of the organization management server 118.
The my number management server 102 is preferably operated by an administrative agency or a designated trader that has been authenticated by the administrative agency.

FIG. 5 is a data structure diagram of the intellectual property information storage unit 136 of the intellectual property server 130.
In Company A, a reward is paid to the employee when the employee applies for a patent or when the patent application is granted. The administrator of the intellectual property server 130 inputs the reward information together with the employee number via the U / I unit 132. The data processing unit 134 registers the employee number, name, and reward information in the intellectual property information storage unit 136 in association with each other.

  The intellectual property information storage unit 136 manages the reward information based on the employee number. For this reason, the user who accesses the intellectual property server 130 does not need to recognize not only My Number (registered trademark) but also the derived ID.

FIG. 6 is a data structure diagram of the salary information storage unit 146 of the salary server 138.
The salary server 138 manages the basic salary of employees. The administrator of the salary server 138 inputs salary information together with the employee number via the U / I unit 140. The data processing unit 142 registers the employee number, name, and salary information in the salary information storage unit 146 in association with each other.

  The salary information storage unit 146 manages salary information based on the employee number. For this reason, the user who accesses salary server 138 does not need to recognize not only My Number (registered trademark) but also derivative ID.

  In summary, the intellectual property server 130 and the salary server 138 handle highly confidential information such as bounty information and salary information, but these information are handled in the company using the employee number (or name) as a key. The organization management server 118 associates the derived ID with the employee number, but does not manage “content” such as reward information. My number management server 102 outside each company collectively manages My Number (registered trademark). The my number management server 102 does not directly associate the my number (registered trademark) with the employee number, but divides it into two databases (a my number storage unit 114 and an ID storage unit 116) via a derivative ID, Trademark), derivative ID, and employee number. Such distributed management reduces the risk of leaking My Number (registered trademark) and personal information together.

FIG. 7 shows salary detail information 150 a transmitted to the my number management server 102.
A salary statement is created in the salary server 138. At this time, My Number (registered trademark) is required for tax processing. The salary server 138 first transmits personal information (salary information) including the employee number to the organization management server 118. The data processing unit 124 of the organization management server 118 generates salary detail information 150a (form data) from the salary detail information. Alternatively, the data processing unit 142 of the salary server 138 may generate the salary detail information 150a, and the communication unit 144 may transmit the salary detail information 150a to the organization management server 118. The organization management server 118 transmits the salary detail information 150a to which the derivative ID corresponding to the employee number is assigned to the my number management server 102. At this time, secret information 152 such as salary is masked. FIG. 7 shows salary detail information 150a corresponding to the derivative ID “14238”.

FIG. 8 shows the salary details information 150b after it is returned from the my number management server 102.
The data processing unit 106 of the my number management server 102 searches the my number storage unit 114 and detects the my number (registered trademark) from the derived ID. Then, the derivative ID “14238” of the salary detail information 150 a is rewritten to My Number (registered trademark) “4123456 ***” and returned to the organization management server 118. The organization management server 118 cancels the masking of the secret information 152 and transmits the salary detail information 150 b to the salary server 138. By such a processing method, the formal salary detail information 150b to which the My Number (registered trademark) is given can be created without presenting the secret information 152 to the My Number management server 102. That is, the business system 103 does not manage My Number (registered trademark), but can access the My Number management server 102 and acquire My Number (registered trademark) only when necessary. The same applies to IP bounties.
Instead of rewriting the derived ID, a method of adding a My Number (registered trademark) in addition to the derived ID may be used.

FIG. 9 is a schematic diagram showing a connection between a derivative ID and personal information.
In the organization management server 118 and the salary server 138, one or more personal information 122 is associated with the derivative ID 120. The personal information 122 in FIG. 9 includes two pieces of personal information, that is, an employee number and a basic salary.

  The derivative ID 120a “14284” is generated from My Number (registered trademark) of Taro Sato (employee number: M7051). The personal information 122a is Taro Sato's employee number and salary information. Taro Sato joined the company in 2004. At the time of joining the company, the organization management server 118 and the salary server 138 register My Number (registered trademark), employee number “M7051”, name “Taro Sato” and initial salary “228,000 yen” (basic salary for the first year). Is done.

  The derivative ID is transmitted from the my number management server 102 to the organization management server 118. The salary server 138 receives the new basic salary of Taro Sato every year. Thus, basic salary information after 2004 is added as personal information 122a of Taro Sato.

  The derivative ID 120b “30046” is generated from My Number (registered trademark) of Hanako Suzuki (employee number: M1023). The personal information 122b is Hanako Suzuki's employee number and salary information. Hanako Suzuki joined the company in 2006. At the time of joining the company, the organization management server 118 and the salary server 138 register My Number (registered trademark), employee number “M1023”, name “Suzuki Hanako”, and initial salary “228,000 yen”. Similar to Taro Sato, the salary server 138 adds the basic salary of Hanako Suzuki to the personal information 122b every year.

  Hanako Suzuki was seconded to a wholly-owned subsidiary of Company A in 2008, and the employee number “R4824” of the subsidiary was newly granted. At this time, the first type user designates the derivative ID and inputs a new employee number “R4824” to the organization management server 118. Thus, the ID storage unit 126 is updated. The set of the new employee number and derivative ID is notified from the organization management server 118 to the my number management server 102, and the ID storage unit 116 is updated.

  On the other hand, the organization management server 118 notifies the IP server 130 and the salary server 138 of the new employee number “R4824”. Thereafter, new personal information 122c for “Hanako Sato” is added to the salary server 138, the intellectual property server 130, and the like. In salary server 138, the subsequent basic salary is registered in personal information 122c of Hanako Sato (employee number: R4824). It is specified by the derivative ID (30046) that the employee number “M1023” and the employee number “R4824” are the same person. That is, in the salary server 138, the personal information 122b is handled separately as salary information of the employee number “M1023” and the personal information 122c is handled separately as salary information of the employee number “R4824”, but these are information of the same person. This can be confirmed by the derivative ID managed by the organization management server 118.

  According to the above processing method, since the derivative ID remains unchanged even if the employee number is changed, the personal information 122b and the personal information 122c can be associated with each other with a single derivative ID.

  Here, the derivative ID, employee number, and basic salary are described as a set, but personal information 122 may be added in response to information changes other than the employee number. For example, a plurality of pieces of personal information 122 can be connected to one derivative ID by adding the personal information 122 instead of overwriting past personal information even when the job title, job title, and surname are changed. For example, the personal information 122 when “Jiro Takahashi” is the section manager and the personal information 122 after the promotion of the manager may be linked by one derivative ID.

FIG. 10 is a flowchart showing an initial registration process of personal information in the my number management server 102.
When a new employee is registered, the first type user inputs the new employee's My Number (registered trademark) and employee number, and the My Number management server 102 receives this (S10). The conversion unit 108 generates a derivative ID from My Number (registered trademark) (S12). S12 will be described in detail later with reference to FIG. The conversion unit 108 registers the My Number (registered trademark) and the derived ID in the My Number storage unit 114 in association with each other (S14). The communication unit 110 transmits the derivative ID and the employee number to the organization management server 118 (S16).
The organization management server 118 registers the derived ID and employee number in the ID storage unit 126.

FIG. 11 is a flowchart showing a process of generating a derivative ID. FIG. 11 corresponds to S12 of FIG.
The conversion unit 108 converts the My Number (registered trademark) with a predetermined hash function and generates a derivative ID (S20). If the same derived ID is not registered in the ID storage unit 116 in the same company (N in S22), the process in S12 is completed as it is. If the same derivation ID is already registered in the same company (Y in S22), the hash function is changed (S24), and the derivation ID is generated again (S20). Specifically, the conversion unit 108 prepares a plurality of hash functions 1 to n in advance, and when the derivative ID generated by the hash function 1 is already registered (Y in S22), the data processing unit 106 uses another hash. A derivative ID is generated by function 2. If the hash function 2 also collides, the hash function 3 is adopted. The same applies hereinafter.
The hash function generates a new derivative ID as a 5-digit number string regardless of the data amount before conversion.

  When the derivative ID collides, information may be added to My Number (registered trademark) and the derivative ID may be generated again. For example, a derivative ID may be newly generated by adding 1 to a My Number (registered trademark) for a male and 2 to a 13-digit number for a female. Such additional information may be obtained from the organization management server 118 as necessary. Specifically, when the derivation ID is already registered (Y in S22), the data processing unit 106 requests additional information from the organization management server 118, and the data processing unit 124 of the organization management server 118 receives the IP server 130 and the salary. Request additional information from server 138. The additional information obtained in this way or personal information (gender, name, etc.) (not shown) managed by the organization management server 118 may be transmitted to the my number management server 102.

  A derivative ID can be created from my number (registration information), but a my number (registered trademark) cannot be obtained from the derivative ID. However, the possibility that the same derivative ID is generated from different My numbers (registration information) is not zero. In this case, as described above, information such as “man and woman” may be added to My Number (registered trademark), and a derivative ID that does not cause a collision may be generated again. In addition to gender, it is desirable to add information that does not change throughout the lifetime, such as birthplace, date of birth, and school of origin.

FIG. 12 is a flowchart showing a process of changing the employee number in the business system 103.
Since the process of FIG. 12 is executed after the employee registration is completed, it is assumed that the derivative ID has been acquired. In the organization management server 118, the derivative ID and a new employee number are input (S30). If the entered derivative ID is not registered (N in S32), the U / I unit 121 displays an error and the process ends (S36).

  When the input derivative ID is already registered (Y in S32), a new personal information field is added to the intellectual property information storage unit 136 and the salary information storage unit 146 (S38). Then, basic salary and the like are added as new personal information (S40).

FIG. 13 is a flowchart showing the information search process of the salary server 138.
The salary server 138 can search for personal information by inputting arbitrary search conditions. Search conditions may be set for personal information, such as “Sato”, “Hanako”, “basic salary of 400,000 or more in 2008”, or may be set for employee numbers.

  First, the second type user inputs search conditions (S50). The search unit 145 of the salary server 138 searches the salary information storage unit 146. If the search is not hit (N in S52), the search process is terminated. When the search is hit (Y in S52), the U / I unit 132 displays the personal information and the employee number (S54).

If there is no related information (N in S56), the process ends. The related information here refers to personal information when another personal information is further associated with the derivative ID associated with the individual who hit the search condition. For example, it is assumed that personal information of Hanako Sato hits the employee number “M1023” as a search condition. At this time, the search unit 145 of the salary server 138 makes an inquiry to the organization management server 118 and detects that another employee number “R4824” is also associated with the derived ID “30046” associated with M1023. At this time, not only salary information associated with the employee number “M1023” but also salary information associated with the employee number “R4824” is detected in the salary information storage unit 146.
If there is related information (Y in S56), a plurality of personal information of Hanako Sato is displayed together on the screen as shown in FIG. 14 (S58).

  Information search in the intellectual property server 130 is executed by the search unit 135 of the data processing unit 134.

The information management system 100 has been described above based on the embodiment.
In this embodiment, My Number (registered trademark) is stored only in the My Number management server 102. Access to the My Number (registered trademark) of the My Number management server 102 is limited to privileged users. Inquiries regarding My Number (registered trademark) to the My Number Management Server 102 are limited to first-type users. A derivative ID is generated from My Number (registered trademark), personal information of the employee is managed by the employee number, and the employee number is associated with the derivative ID. Since, in principle, My Number (registered trademark) is an ID that can identify an individual for a lifetime, a derived ID can also identify an individual for a lifetime. For this reason, even if My Number (registered trademark) is not directly used, the same convenience as My Number (registered trademark) can be enjoyed.

  Information identifying an individual includes an employee number and a name. However, the employee number may change due to a job change or secondment, and the name may change due to marriage or divorce. There is also the problem of the same name and the same name. On the other hand, a derivative ID created from My Number (registered trademark) is not only invariant and distinguishable, but also has higher security than using My Number (registered trademark) directly. In addition, by managing a plurality of personal information with a unique invariant derivative ID, the searchability of information can be improved.

[Second Embodiment]
In the first embodiment, the My Number (registered trademark) and the derived ID are managed by the My Number management server 102, and the business system 103 manages the derived ID and personal information. Furthermore, the business system 103 has a one-to-one correspondence between employee numbers and derivative IDs. Basically, the business system 103 manages personal information with employee numbers, obtains a derivative ID from the employee number, if necessary, and uses the derivative ID to transfer My Number (registered trademark) to the My Number Management Server 102. I have an inquiry.

  In the second embodiment, the employee number and the derived ID are the same. That is, the derivative ID may be used as an employee number as it is. In this case, the configuration of the my number storage unit 114 is not changed. In the ID storage unit 116, the derived ID and the company ID are directly associated with each other. Further, a database for associating the derived ID with the employee number such as the ID storage unit 126 is not necessary. The column of “employee number” in the intellectual property information storage unit 136 is a derivative ID as it is. The same applies to the salary information storage unit 146 of FIG.

  Referring to FIG. 10, My Number Management Server 102 receives only My Number (registered trademark) (S10), generates a derivative ID from My Number (registered trademark) (S12), registers (S14), and derives ID is transmitted (S16). The process of FIG. 11 is the same as in the first embodiment. In S30 of FIG. 12, the derived ID is directly input as the employee number.

  The present invention has been described based on the embodiments. The embodiments are exemplifications, and it will be understood by those skilled in the art that various modifications can be made to combinations of the respective constituent elements and processing processes, and such modifications are within the scope of the present invention. .

  In the present embodiment, the personal identification by My Number (registered trademark) has been described. However, the present invention can be applied to various basic IDs other than My Number (registered trademark). For example, any ID assigned by an administrative organization such as a corporate corporation number, patent attorney identification number, or military identification number can be applied.

  DESCRIPTION OF SYMBOLS 100 Information management system, 101 Communication network, 102 My number management server, 104 U / I part, 106 Data processing part, 108 Conversion part, 110 Communication part, 112 Data storage part, 114 My number storage part, 116 ID storage part, 118 Organization Management Server, 120 Derived ID, 121 U / I Unit, 122 Personal Information, 123 Communication Unit, 124 Data Processing Unit, 126 ID Storage Unit, 128 Intranet, 130 Intellectual Property Server, 132 U / I Unit, 133 Communication Unit 134 data processing unit 136 intellectual property information storage unit 138 salary server 140 U / I unit 142 data processing unit 144 communication unit 146 salary information storage unit 148 user terminal 150 salary detail information 152 secret information .

Claims (5)

A basic ID management system; and one or more business systems connected to the basic ID management system via a communication network,
The basic ID management system includes:
A first data processing unit that generates a derived ID by a non-reversible function from a basic ID assigned to identify an individual from an administrative institution;
A basic ID storage that holds the basic ID and the derived ID in association with each other;
A first communication unit that transmits the derivative ID to the business system,
The business system is
A personal ID storage unit that associates and holds the derived ID and a personal ID for specifying an individual different from the basic ID;
A personal information storage unit that stores the personal ID and personal information in association with each other;
A second data processing unit that detects a derivative ID and personal information associated with the personal ID when the personal ID is specified, and generates form data including the personal information and the derivative ID;
A second communication unit for transmitting the form data to the basic ID management system;
A search unit ,
When the first communication unit of the basic ID management system receives the form data, the first communication unit assigns a basic ID corresponding to a derivative ID included in the form data to the form data and returns it to the business system ,
The personal ID storage unit of the business system retains a personal ID before the change and a personal ID after the change in association with the derivative ID of the certain individual when the personal ID of the certain person is changed,
The personal information storage unit of the business system retains the personal information of the certain individual before the personal ID is changed in correspondence with the personal ID before the change, and changes the personal information of the certain individual after the personal ID is changed. Keep it associated with the personal ID later,
The search unit of the business system detects first personal information that matches a search condition specified by a user from the personal information storage unit, and is associated with the first personal information in the personal information storage unit. An inquiry is made to the personal ID storage unit based on the first personal ID, and a second personal ID associated with the same derivative ID as the derivative ID associated with the first personal ID in the personal ID storage unit. , Further detecting second personal information associated with the second personal ID from the personal information storage unit, and outputting both the first personal information and the second personal information. An information management system characterized by A first user group is permissions set by the business system, wherein the second user group are permissions set by the basic ID management system, to claim 1, characterized in that it is set not to overlap each other The information management system described. The irreversible function information management system according to claim 1 or 2, characterized in that a hash function. The first data processing unit is different from the first irreversible function when a derivative ID generated by the first irreversible function from the basic ID is already registered in the basic ID storage unit. information management system according to any of claims 1 3, characterized in that to generate a derivative ID by irreversible function. Connected via a communication network with a basic ID management system that manages basic IDs assigned to identify individuals from administrative agencies,
A personal ID storage unit that associates and holds a derivative ID generated by the basic ID management system from the basic ID by an irreversible function and a personal ID for identifying a person different from the basic ID;
A personal information storage unit that stores the personal ID and personal information in association with each other;
When specifying the personal ID, and the personal ID to detect the derived ID and personal information are associated, to generate a form data including the derived ID and the personal information Lud over data processing unit,
Communicates unit that sends the document data to the basic ID management system,
A search unit ,
Before SL communications unit from the base ID management system, it receives form data granted the basic ID corresponding to the derived ID,
The personal ID storage unit stores a personal ID before the change and a personal ID after the change in association with the derivative ID of the certain individual when the personal ID of the certain person is changed,
The personal information storage unit holds the personal information of the certain individual before the personal ID is changed in correspondence with the personal ID before the personal ID is changed, and the personal information of the certain individual after the personal ID is changed is the personal ID after the change. In association with
The search unit detects first personal information that matches a search condition designated by a user from the personal information storage unit, and the first personal information stored in the personal information storage unit is associated with the first personal information. An inquiry is made to the personal ID storage unit based on the personal ID, and a second personal ID associated with the same derivative ID as the derivative ID associated with the first personal ID is detected in the personal ID storage unit. , Further detecting second personal information associated with the second personal ID from the personal information storage unit, and outputting both the first personal information and the second personal information. Business system.

Images