JP6358578B2 - Personal information management system - Google Patents

Description

  The present invention relates to a personal information management system for protecting personal information leaked due to unauthorized access through a network communication network such as the Internet.

  With the recent increase in awareness of personal information protection, it is necessary to prevent the leakage, leakage and unauthorized use of personal information held by companies and local governments. Among these, a technique for distributing and storing personal information has been conventionally disclosed against unauthorized access such as hacking from the outside through a network (for example, Patent Document 1).

  The personal information management system disclosed in Patent Document 1 distributes user personal information into a plurality of partial data using a secret sharing technique, and distributes and stores these partial data on a plurality of data center servers. At this time, a copy of each partial data is further stored in a separate data center server for duplication. In this system, even if each data center is illegally accessed, only one partial data can be obtained, and personal information cannot be restored from the obtained partial data, thus preventing leakage of personal information. It is said.

JP2013-20314

  In the personal information management system disclosed in Patent Document 1, when a user himself or a user concerned obtains personal information of the user, it is required to collect and restore a plurality of distributed partial data. At this time, since it is necessary to input user IDs and other identification IDs to a plurality of data centers each time, restoration work is troublesome. In addition, the secret sharing technique for distributing personal information requires a cumbersome and complicated flow, and is not practical.

  The present invention has been made in consideration of the above-described conventional problems. Personal information can be concealed without being distributed to partial data, and the user and related parties can easily conceal private information. It is another object of the present invention to provide a personal information management system that can be obtained in the form of unnecessary information for unauthorized access.

In order to achieve the above object, a personal information management system of the present invention is a system in which a user terminal, a reception server that can communicate with the user terminal, and a storage server that can communicate with the reception server are connected via a network. Because
When the reception server receives a user ID and user personal information from the user terminal, the reception server stores only the user ID without storing the personal information, and then stores the user ID and personal information in the storage server. Send
When the storage server receives the personal information from the reception server, the storage server generates a plurality of dummy information irrelevant to the personal information for the personal information that is not distributed to partial data, Each of the dummy information is assigned an identification code and the personal information and a plurality of dummy information are stored in association with the identification code, and then only the identification code related to the personal information is transmitted to the reception server,
The reception server stores an identification code related to personal information from the storage server in association with the user ID, and then transmits an identification code related to personal information to the user terminal . Thereafter, the user ID and the identification code are transmitted from the user terminal. When the user ID and the identification code transmitted from the user terminal match the stored user ID and the identification code, it is verified whether the stored user ID and the identification code match. Is established, the personal information related to the identification code is requested from the storage server by transmitting an identification code related to the personal information to the storage server, and the personal information is sent to the user terminal when the personal information is received from the storage server. It is characterized by transmitting.

In this system,
The reception server selects an identification code stored in association with a user ID when a user ID and personal information for the second and subsequent times are input from the user terminal, and selects the selected identification code and personal information for the second and subsequent times. To the storage server,
When the identification code is input from the reception server, the storage server compares the stored identification code with the stored identification code, and when the identification code is the same , updates the personal information to the personal information for the second time or later. On the other hand, it is preferable to generate a plurality of dummy information and store the updated personal information and the plurality of dummy information by associating the updated personal information and the plurality of dummy information with an identification code .

In addition, the reception server
A selection unit that selects only the user ID from the user ID and user personal information transmitted from the user terminal;
A storage unit for storing the user ID and the identification code from the storage server in association with each other;
An authentication unit that authenticates the user terminal by comparing the user ID and the identification code received via the net communication network with the user ID and the identification code in the storage unit;
A first transmission unit on the receiving server side that requests the storage server to transmit the personal information when authentication by the authentication unit is established;
When receiving personal information from the storage server, the reception server side second transmission unit for transmitting the received personal information to the user terminal,
The storage server
A dummy information generation unit that generates a plurality of dummy information composed of character strings irrelevant to the character string of the user's personal information input from the reception server;
An identification code generating unit that assigns an identification code to each of the personal information and the plurality of dummy information;
An information storage unit for storing the personal information and a plurality of dummy information in association with the identification code;
A storage server side first transmission unit for transmitting only the identification code for the personal information from the identification code to the reception server;
It is preferable that the storage server side second transmission unit transmits the personal information to the reception server when the reception server requests transmission of the personal information.

In addition, the reception server
When a user ID and personal information for the second and subsequent times are input from the user terminal, an identification code stored in association with the user ID is selected from the storage unit, and the selected identification code and personal information from the user terminal are stored. A history transmission unit for transmitting to the server;
The storage server
When an identification code is input from the history transmission unit of the reception server, the identification code stored in the information storage unit is compared. When the input identification code is the same as the identification code of the information storage unit, the information storage unit An update unit that updates the personal information of
The dummy information generation unit generates a plurality of dummy information for the personal information updated by the updating unit, and the identification code generation unit assigns an identification code to the updated personal information and the generated plurality of dummy information, respectively. Is preferred.

In addition, the storage server
A dummy information storage unit that stores a plurality of character strings irrelevant to the character string of the constituent unit of the personal information;
The dummy information generation unit preferably generates a plurality of dummy information by picking up a plurality of character strings from the dummy information storage unit.

  According to the present invention, it is possible to conceal personal information without the need to distribute the partial data, and it is possible to easily acquire the personal information without having to collect the partial data distributed by the user terminal. Even if there is unauthorized access to the reception server via the network, and the information in the reception server is stolen, the reception server only stores the user ID and identification code, and there is no personal information. Information obtained through access is completely useless. On the other hand, even if there is unauthorized access to the storage server and the information in the storage server is stolen, the information is a mixture of personal information and multiple dummy information, and the number of dummy information is overwhelmingly large. It is difficult to determine whether the information is true personal information, and it is not practical. For this reason, even if the information in the storage server is obtained by unauthorized access, it cannot be actually used, and effective protection against unauthorized access can be performed.

It is a block diagram which shows the whole personal information management system of this invention. It is a block diagram which shows the connection system | line at the time of managing personal information. It is a block diagram which shows the structure of a personal information management system. It is a flowchart which shows the sequence at the time of registering personal information. It is a reference figure showing an example of a form which memorizes personal information and dummy information.

  1 and 2 show a personal information management system 1 according to an embodiment of the present invention. As shown in FIG. 1, in the personal information management system 1, a plurality of user terminals 2, 2a, a reception server 3, and a storage server 4 are connected via a network communication network such as the Internet. Among the plurality of user terminals 2 and 2a, the user terminal 2 is a terminal that requires management of personal information. FIG. 2 shows a connection form for managing personal information. The user terminal 2 is connected to the reception server 3 in a communicable manner, and the reception server 3 is connected to the storage server 4 in a communicable manner. In managing personal information, as shown in FIG. 2, the user terminal 2 and the storage server 4 are connected via the reception server 3, and the user terminal 2 and the storage server 4 are directly connected. Absent.

  An outline of management of personal information according to this embodiment will be described with reference to FIG. The user terminal 2 transmits a user ID and user personal information to the reception server 3. The user ID corresponds to a password set by the user or other encryption. The personal information includes contact information such as the user's name, date of birth, address, and telephone number, information about the user's business partners and customers, and other information.

  When receiving the user ID 6 and the personal information 7 from the user terminal 2, the reception server 3 stores only the user ID 6 without storing the personal information 7, and then transmits the user ID 6 and the personal information 7 to the storage server 4. When the storage server 4 receives the personal information 7 from the reception server 3, the storage server 4 generates a plurality of dummy information 8 irrelevant to the personal information 7. As the dummy information 8, the larger the number, the better. For example, 100 to 10,000 pieces of personal information 7 are generated.

  When the storage server 4 generates the plurality of dummy information 8, it assigns identification codes 9 and 9 a to the personal information 7 and the plurality of dummy information 8, respectively. The identification code 9 is a code given to the personal information 7, and the identification code 9 a is a dummy code given to the individual dummy information 8. One personal information 7 and a plurality of dummy information 8 generated in association with the personal information 7 are preferably collected, and therefore the identification codes 9 and 9a are generated so as to have a common flag. When the identification codes 9 and 9a have a flag, the personal information 7 and the plurality of dummy information 8 are associated with each other, and the storage server 4 stores the personal information 7 and the plurality of dummy information 8 in association with each other. As a result, the personal information 7 is stored in a state where the personal information and the plurality of dummy information 8 are mixed. After assigning the identification codes 9 and 9 a, the storage server 4 transmits the identification code 9 given to the personal information 7 to the reception server 3.

Personal information 7 from a plurality of different user terminals 2 is input to the storage server 4 from the reception server 3, and the storage server 4 applies to each personal information 7 that is not distributed to partial data. A plurality of dummy information 8 is generated, and identification codes 9 and 9a are assigned to the personal information 7 and the plurality of dummy information 8. When assigning the identification codes 9 and 9a, as described above, the identification codes 9 and 9a are generated so as to have a common flag for the one personal information 7 and the dummy information 8 related thereto, Let it be one associated file 10. The storage server 4 stores a plurality of files 10, 10 a.

  By transmitting the identification code 9 from the storage server 4, the reception server 3 receives the identification code 9 corresponding to the personal information 7 in addition to the user ID 6 from the user terminal 2, and corresponds to the user ID 6 and the personal information 7. The identification code 9 is stored. Accordingly, the reception server 3 does not store the personal information 7 but stores the user ID and the identification code 9 corresponding to the personal information 7. A plurality of identification codes 9 are input to the receiving server 3 from the storage server 4, and each identification code 9 is stored in association with the corresponding user ID 6. Then, the reception server 3 transmits an identification code 9 corresponding to the personal information 7 to the user terminal 2 and the user terminal 2 stores it.

  When the user acquires the personal information 7, the user ID 6 and the identification code 9 corresponding to the personal information 7 are transmitted to the reception server 3. The reception server 3 authenticates the user terminal 2 based on the stored user ID and identification code. When the user ID and the identification code 9 match, the reception server 3 authenticates that the user server is a legitimate user terminal, and confirms the establishment of the authentication. When the authentication is established, the reception server 3 transmits the identification code 9 related to the personal information 7 to the storage server 4 and requests the personal information 7 to which the identification code 9 is assigned. As a result, the storage server 4 transmits the personal information 7 related to the identification code 9 to the reception server 3. At this time, the storage server 4 does not transmit the dummy information 8 to which the dummy identification code 9 a is assigned to the reception server 3. When the reception server 3 receives the personal information 7 from the storage server 4, the reception server 3 transmits the personal information 7 to the user terminal 2. As a result, the user terminal 2 can acquire and restore the personal information 7.

  In such a system structure, the personal information can be concealed without having to be distributed to the partial data, and the user terminal 2 can easily acquire the personal information without having to collect the distributed partial data.

Even if there is unauthorized access to the reception server 3 via the network 5, and the information in the reception server 3 is stolen, the reception server 3 only stores the user ID 6 and the identification code 9, and is personal. Information 7 does not exist. For this reason, the information obtained by unauthorized access has no utility value.

On the other hand, even if there is unauthorized access to the storage server 4 and the information in the storage server 4 is stolen, the information is a mixture of the personal information 7 and the plurality of dummy information 8, and the number of dummy information 8 is overwhelming. Therefore, it is difficult to determine which information is true personal information, and it is not practical. That is, the personal information 7 is stolen by unauthorized access in a state where it is disabled by the large number of dummy information 8. For this reason, even if information in the storage server 4 is obtained by unauthorized access, it cannot be actually used.

  In the present invention, the personal information 7 and the dummy information 8 related to the personal information 7 are not associated with each other as one file 10, 10a,. 4 preferably stores. In this case, the identification code 9 given to the personal information 7 and the identification code 9a given to the dummy information 8 do not have a common flag, and all the personal information 7 and dummy information 8 are irrelevant to the storage server 4. Remembered. Even in such a case, since one identification code 9 is given to each personal information 7, it can be distinguished from other personal information and dummy information. Therefore, when an identification code is input from the reception server 3 based on a request from the user terminal 2, personal information corresponding to the identification code can be picked up, and true personal information is transmitted to the user terminal 2. can do. In the form of storing personal information and dummy information as separate information without having a common flag as described above, since the number of information further increases when the storage server 4 is accessed illegally, the true personal information There is a merit that it becomes more difficult to distinguish.

  FIG. 3 is a block diagram specifically explaining the personal information management system 1. The reception server 3 includes a reception unit 31, a transmission unit 32, a storage unit 33, a selection unit 34, an authentication unit 35, and a control unit 36, which are formed by being connected by a bus 37. In this case, the transmission unit 32 includes a first transmission unit 32a, a second transmission unit 32b, and a history transmission unit 32c. The storage server 4 includes a reception unit 41, a transmission unit 42 having a first transmission unit 42a and a second transmission unit 42b, a dummy information generation unit 43, an identification code generation unit 44, an information storage unit 45, a dummy information storage unit 46, The update unit 47 and the control unit 48 are provided and connected by a bus 49.

  First, the configuration of the reception server 3 will be described. The receiving unit 31 receives information from the user terminals 2 and 2 a input via the network communication network 5 and receives information from the storage server 4. When managing personal information, the user terminal 2 transmits the user ID 6 and the personal information 7 of the user to the reception server 3. On the other hand, the selection unit 34 of the user terminal 2 selects only the user ID 6 from the user ID transmitted from the user terminal 2 and the user personal information.

The storage unit 33 stores the user ID 6 selected by the selection unit 34. The storage unit 33 stores only the user ID without storing the personal information 7 even if the user ID 6 and the personal information 7 are transmitted as a set from the user terminal 2. The storage unit 33 stores the user identification code 9 transmitted from the storage server 4 as will be described later. This identification code 9 is stored in association with the user ID 6. That is, the user ID 6 of one user and the identification code 9 of that user are stored in association with each other. As described above, the reception server 3 of this embodiment stores the user ID 6 and the identification code 9, but does not store the personal information 7.

  The authentication unit 35 authenticates whether or not the user ID and the identification code received from the user terminal 2 via the network communication network 5 are authentic. This authentication is performed by comparing the user ID and identification code transmitted from the user terminal 2 after the second time with the user ID and identification code stored in the storage unit 33. When the user ID and the identification code match, the authentication unit 35 authenticates the user terminal as a regular one. If either the user ID or the identification code is different or both are different, the authentication unit 35 does not authenticate and authentication is not established.

  When the authentication by the authentication unit 35 is established, the first transmission unit 32a transmits a signal requesting the personal information 7 in the server 4 to the storage server 4. When receiving the personal information 7 from the storage server 4, the second transmission unit 32 b transmits the received personal information 7 to the user terminal 2. As a result, the personal information 7 can be restored and reproduced in the user terminal 2. The history transmitting unit 32c operates when the user ID 6 and the personal information 7 are input from the user terminal 2 for the second time and thereafter. The history transmitting unit 32c selects the identification code 9 corresponding to the user ID input after the second time from the storage unit 33, and transmits the selected identification code 9 and the personal information 7 input from the user terminal 2 to the storage server 4. To do. Thereby, the personal information is updated by the storage server 4 as will be described later.

  The control unit 36 controls the operations of the reception unit 31, the transmission unit 32, the storage unit 33, the selection unit 34, and the authentication unit 35.

  Next, the storage server 4 will be described. The receiving unit 41 in the storage server 4 directly receives information from the receiving server 3 in addition to receiving information from the network communication network 5. When the reception unit 41 receives the personal information 7 from the reception server 3, dummy information generation unit 43 generates dummy information and identification code generation unit 44 assigns an identification code.

  The dummy information generating unit 43 generates a plurality of dummy information unrelated to the personal information when the receiving unit 41 receives the personal information 7. Generation of dummy information is performed according to a predetermined algorithm by a program stored in the dummy information generation unit 43. In this embodiment, the dummy information generation unit 43 can generate dummy information by picking up a character string stored in the dummy information storage unit 46. This will be described later.

  The identification code generation unit 44 applies the identification codes 9 and 9a to the personal information 7 received by the reception unit 41 and the plurality of dummy information 8 generated by the dummy information generation unit 43 in relation to the personal information 7 by a predetermined algorithm. Give each. As described above, the identification code 9 is a code for the personal information 7, and the identification code 9 a is a code for the dummy information 8. The identification codes 9 and 9a generate the identification codes 9 and 9a so as to have a common flag for one personal information 7 and its dummy information 8. For example, as shown in FIG. 5, the flag can be formed by using a plurality of digits at the beginning of the identification codes 9 and 9a (“Y01”, three digits from the beginning) as a common key.

  Note that in the form of storing the personal information 7 and the dummy information 8 as separate information without making them files, a flag is not required for the identification code, so that the identification code can be easily generated. .

  The information storage unit 45 stores the personal information 7 and the plurality of dummy information 8 generated by the dummy information generation unit 43. At the time of storage, personal information and a plurality of dummy information 8 are stored in association with identification codes 9 and 9a. For example, as shown in FIG. 5, the flags (“Y01”) in the identification codes 9 and 9 a are used as a common key, and the information 7 and 8 serving as the common key are stored as one file 10. Generally, since personal information 7 is input from each of a plurality of different user terminals 2, 2a, the information storage unit 45 stores a plurality of files 10, 10a, 10b,.

  The dummy information storage unit 46 stores data for the dummy information generation unit 43 to generate dummy information. Since the personal information 7 on which the dummy information 8 is based is composed of a character string, the dummy information 8 is also generated from the character string. The dummy information storage unit 46 stores a plurality of character strings in advance. As a character string to be stored, Japanese surnames such as “Suzuki”, “Tanaka”, “Ito”,. The dummy information storage unit 46 stores the plurality of character strings, and the dummy information generation unit 43 picks up the plurality of character strings from the dummy information storage unit 46 by a predetermined algorithm and generates dummy information. The dummy information can be generated by other means.

  The first transmission unit 41 a in the transmission unit 42 picks up the identification code 9 corresponding to the personal information 7 from the identification codes 9 and 9 a generated by the identification code generation unit 44, and transmits this identification code 9 to the reception server 3. To do. When there is a request for transmission of personal information from the reception server 3, the second transmission unit 41 b picks up the personal information from the information storage unit 45 and then transmits the requested personal information to the reception server 3.

  The update unit 47 compares the identification code 9 stored in the information storage unit 45 when the identification code 9 of the user terminal 2 is input from the history transmission unit 32c of the reception server 3, and when these identification codes 9 are the same. The personal information 7 from the user terminal 2 transmitted via the reception server 3 is updated. As a result, the personal information stored in the information storage unit 45 is rewritten with new personal information 7 from the user terminal 2.

  When the personal information 7 is updated, the dummy information generation unit 46 generates a plurality of new dummy information 8 for the updated personal information 7. Generation of a plurality of new dummy information 8 is performed in the same manner as described above. Further, the identification code generation unit 44 assigns new identification codes 9 and 9a to the updated personal information 7 and the plurality of dummy information, respectively. The information storage unit 45 stores the updated personal information 7 and the plurality of dummy information 8 in association with the new identification codes 9 and 9a. Thereby, the personal information of one user terminal 2 and the dummy information 9 are not stored redundantly.

  The control unit 8 controls the operations of the reception unit 41, the transmission unit 42, the dummy information generation unit 43, the identification code generation unit 44, the information storage unit 45, and the update unit 47.

  FIG. 4 shows a flowchart when registering personal information with the above configuration.

  In step S <b> 1, the user ID 6 and the personal information 7 are transmitted from the user terminal 2 to the reception server 3. The receiving server 3 that has received them stores only the user ID 6 without storing the personal information 7 (step S2). Then, the reception server 3 transmits the personal information 7 and the user ID 6 to the storage server 4.

  The storage server 4 generates a plurality of dummy information 8 for the received personal information 7 (step S3). The plurality of dummy information is generated by selecting a plurality of irrelevant character strings from the dummy information storage unit 46 for the character information of the personal information 7.

FIG. 5 shows an example of generation of dummy information. When the personal information 7 is the character string “ABCD” (for example, “Suzuki”), the character information “ABMM” (for example, “Tanaka”) is stored from the dummy information storage unit 46. The dummy information 8 is generated by selecting a plurality of character strings unrelated to the character string “ABCD” of the personal information 7 such as the last name) and the character string “EDCR” (for example, “Ito”). The more dummy information 8 is, the more advantageous it is against unauthorized access.

  The identification code generation unit 44 assigns identification codes 9 and 9a to the personal information 7 and the plurality of generated dummy information (step S4). The identification code 9 is an identification code for the personal information 7, and 9a is an identification code for a plurality of dummy information. At the time of giving these identification codes, the identification code generation unit 44 generates the identification codes 9 and 9a so as to have a common flag for one personal information 7 and its dummy information 8. In FIG. 5, “Y010001”, “Y010002”, “Y010003”,..., “Y010300” are identification codes, and a plurality of digits on the leading side of the identification codes 9 and 9a (“Y01” that is three digits from the beginning). Is a common flag, and the code following the first three digits is a code for identifying the personal information 7 and the plurality of dummy information 8.

  Subsequent to step S4, the information storage unit 45 of the storage server 4 stores the personal information 7 and the plurality of dummy information 8 in association with the identification code to form one file 10 (step S5). For example, as shown in FIG. 5, the flags (“Y01”) in the identification codes 9 and 9 a are stored as a common key and the information 7 and 8 serving as the common key are stored as one file 10. Generally, since personal information 7 is input from each of a plurality of different user terminals 2, 2a, the information storage unit 45 stores a plurality of files 10, 10a, 10b,.

  Note that in the form of storing a plurality of pieces of personal information 7 and a plurality of pieces of dummy information 8 corresponding to the individual pieces of personal information 7 as separate information, a flag (“Y01”) as a common key is not necessary. Does not need to be stored for each file.

  Subsequent to step S <b> 5, the first transmission unit 42 a of the storage server 4 transmits the identification code 9 given to the personal information 7 to the reception server 3. At this time, the storage server 4 does not transmit the identification code 9 a given to the dummy information 8 to the reception server 3. The reception server 3 receives the identification code 9 related to the personal information 7, and the storage unit 33 of the reception server 3 stores the identification code 9 and the user ID in association with each other (step S7). That is, as shown in FIG. 2, the reception server 3 stores the user ID 6 from the user terminal 2 and the identification code 9 from the storage server 4 in association with each other. Thereafter, the first transmission unit 32 a of the reception server 3 transmits the identification code 9 to the user terminal 2. The user terminal 2 receives and stores the transmitted identification code 9 (step S9).

  In such a configuration, the reception server 3 only stores and stores the user ID 6 and the identification code 9 of the user terminal 2 and does not store the personal information 7. For this reason, even if there is an unauthorized access to the reception server 3 via the network 5, and the information in the reception server 3 is stolen, the personal information 7 does not exist. It will not be.

In the storage server 4, personal information 7 and dummy information 8 irrelevant to the personal information are stored as mixed information. Even if there is an unauthorized access to the storage server 4 and the information in the storage server 4 is stolen, the information is a mixture of personal information 7 and a plurality of dummy information 8, and the number of dummy information 8 is overwhelming. For this reason, it is difficult to determine which information is true personal information, and it is not practical. Therefore, even if information in the storage server 4 is obtained by unauthorized access, it cannot be actually used.

  On the other hand, when the user terminal 2 restores / reproduces the personal information 7, the user terminal 2 transmits the user ID 6 and the identification code 9 to the reception server 3. The authentication unit 35 of the reception server 3 performs authentication by comparing with the user ID and the identification code in the storage unit 33. When the user ID and the identification code 9 match, the reception server 3 authenticates that the user server is a legitimate user terminal, and confirms the establishment of the authentication. When the authentication is established, the second transmission unit 32b of the reception server 3 transmits the identification code 9 related to the personal information 7 to the storage server 4 and requests transmission of the personal information 7 to which the identification code 9 is assigned. As a result, the storage server 4 picks up the personal information 7 related to the identification code 9 from the information storage unit 45 and transmits it to the reception server 3. At this time, the storage server 4 does not transmit the dummy information 8 to which the dummy identification code 9 a is assigned to the reception server 3. When the reception server 3 receives the personal information 7 from the storage server 4, the reception server 3 transmits the personal information 7 to the user terminal 2. Thereby, the user terminal 2 can restore / reproduce the personal information 7. In such a personal information management system, since the personal information 7 can be concealed without having to be distributed to partial data, the user terminal 2 can easily acquire personal information without having to collect the distributed partial data. it can.

1 Personal Information Management System 2 User Terminal 3 Reception Server 4 Storage Server 5 Network Network 6 User ID
7 Personal information 8 Dummy information 9, 9a Identification code 31 41 Reception unit 32, 42 Transmission unit 33 Storage unit 34 Selection unit 35 Authentication unit 43 Dummy information generation unit 44 Identification code generation unit 45 Information storage unit 46 Dummy information storage unit 47 Update Part

Claims (5)

A system in which a user terminal, a reception server that can communicate with the user terminal, and a storage server that can communicate with the reception server are connected via a network.
When the reception server receives a user ID and user personal information from the user terminal, the reception server stores only the user ID without storing the personal information, and then stores the user ID and personal information in the storage server. Send
When the storage server receives the personal information from the reception server, the storage server generates a plurality of dummy information irrelevant to the personal information for the personal information that is not distributed to partial data, Each of the dummy information is assigned an identification code and the personal information and a plurality of dummy information are stored in association with the identification code, and then only the identification code related to the personal information is transmitted to the reception server,
The reception server stores an identification code related to personal information from the storage server in association with the user ID, and then transmits an identification code related to personal information to the user terminal . Thereafter, the user ID and the identification code are transmitted from the user terminal. When the user ID and the identification code transmitted from the user terminal match the stored user ID and the identification code, it is verified whether the stored user ID and the identification code match. Is established, the personal information related to the identification code is requested from the storage server by transmitting an identification code related to the personal information to the storage server, and the personal information is sent to the user terminal when the personal information is received from the storage server. A personal information management system characterized by transmitting. The personal information management system according to claim 1,
The reception server selects an identification code stored in association with a user ID when a user ID and personal information for the second and subsequent times are input from the user terminal, and selects the selected identification code and personal information for the second and subsequent times. To the storage server,
When the identification code is input from the reception server, the storage server compares the stored identification code with the stored identification code, and when the identification code is the same , updates the personal information to the personal information for the second time or later. A plurality of dummy information is generated, and the updated personal information and the generated plurality of dummy information are each assigned an identification code, and the updated personal information and the plurality of dummy information are stored in association with the identification code. Personal information management system. The personal information management system according to claim 1,
The reception server is
A selection unit that selects only the user ID from the user ID and user personal information transmitted from the user terminal;
A storage unit for storing the user ID and the identification code from the storage server in association with each other;
An authentication unit that authenticates the user terminal by comparing the user ID and the identification code received via the net communication network with the user ID and the identification code in the storage unit;
A first transmission unit on the receiving server side that requests the storage server to transmit the personal information when authentication by the authentication unit is established;
When receiving personal information from the storage server, the reception server side second transmission unit for transmitting the received personal information to the user terminal,
The storage server
A dummy information generation unit that generates a plurality of dummy information composed of character strings irrelevant to the character string of the user's personal information input from the reception server;
An identification code generating unit that assigns an identification code to each of the personal information and the plurality of dummy information;
An information storage unit for storing the personal information and a plurality of dummy information in association with the identification code;
A storage server side first transmission unit for transmitting only the identification code for the personal information from the identification code to the reception server;
A personal information management system comprising: a second transmission unit on a storage server side that transmits the personal information to the reception server when a request for transmission of the personal information is received from the reception server. The personal information management system according to claim 3,
The reception server is
When a user ID and personal information for the second and subsequent times are input from the user terminal, an identification code stored in association with the user ID is selected from the storage unit, and the selected identification code and personal information from the user terminal are stored. A history transmission unit for transmitting to the server;
The storage server
When an identification code is input from the history transmission unit of the reception server, the identification code stored in the information storage unit is compared. When the input identification code is the same as the identification code of the information storage unit, the information storage unit An update unit that updates the personal information of
The dummy information generation unit generates a plurality of dummy information for the personal information updated by the updating unit, and the identification code generation unit assigns an identification code to the updated personal information and the generated plurality of dummy information, respectively. Personal information management system characterized by The personal information management system according to claim 3,
The storage server
A dummy information storage unit that stores a plurality of character strings irrelevant to the character string of the constituent unit of the personal information;
The personal information management system, wherein the dummy information generation unit generates a plurality of dummy information by picking up a plurality of character strings from the dummy information storage unit.

Images