JP6798737B1 - Personal information management system and personal information management method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To utilize personal information as a shared information asset when a plurality of organizations provide a service by using the shared information asset. A personal information management system includes a distributed DB network system 1 and a plurality of organizational network systems 2. The distributed DB network system includes a first control unit and a first storage unit. The organization network system includes a second control unit and a second storage unit. The second control unit receives the personal information of the registrant, identifies the non-public personal information from the personal information, stores at least the non-public personal information among the personal information in the second storage unit, and also stores the public personal information and the public personal information. Of the non-public personal information, only the public personal information is transmitted to the distributed DB network system. The first control unit holds integrated public personal information based on the information transmitted from each organization network system in the first storage unit. [Selection diagram] Fig. 1

Description

The present invention relates to a personal information management system and a personal information management method.

With the development of information networks, services are being provided by utilizing information sent and received by users. With the sophistication of information networks and their applications, various existing operations have become more efficient and new value can be provided. However, when the information used there is personal information, there is a problem that it is difficult to handle it.

In response to such problems, for example, Patent Document 1 discloses a technique for storing information in each of a shared cabinet and a special cabinet in a server and enabling information utilization of personal information in an external service. ..

Further, Patent Document 2 is a technique for generating a team profile of a team to which a plurality of individuals belong and searching for a team instead of a single individual in order to prevent personal information from being disclosed to a person unknown to the person. Is disclosed.

Further, Patent Document 3 discloses a technique for determining and disclosing only information that can be disclosed to a user among personal information.

JP-A-2019-159970 Japanese Unexamined Patent Publication No. 2005-208945 JP-A-2002-328924

Personal information will be a problem if it leaks against the will of the individual or if it leaks without the individual's knowledge, while the scope licensed by the individual is provided to the licensed party. There is no problem with that.

The technology described in the cited document gives the range in which the provision of information is permitted in advance. For example, it is possible to set in advance whether or not to provide the information, and define the level, attributes, etc. of the person to be licensed. It would be complicated to keep.

In addition, in the technique described in the cited document, it is necessary to provide personal information to the service provider (server) in advance. Here, when a provider group consisting of multiple organizations provides services using shared information assets, and a new organization joins the provider group, the range permitted in advance by the individual. Information will be shared with the organizations that joined later. The citation does not disclose a solution to this situation.

In view of such a situation, the present invention provides a new technique for utilizing personal information as a shared information asset when a plurality of organizations provide services using the shared information asset. Is an issue.

In order to solve the above problems, the present invention is a personal information management system for sharing personal information with other organizations.
The personal information management system includes a distributed DB network system and a plurality of organizational network systems.
The distributed DB network system includes a first control unit and a first storage unit.
The organization network system includes a second control unit and a second storage unit.
The second control unit is configured to be able to receive the registrant's personal information transmitted from the registrant terminal device.
It is configured so that private personal information can be identified from the personal information.
At least the non-public personal information out of the personal information can be stored in the second storage unit, and at the same time.
Of the public personal information and the non-public personal information, only the public personal information can be transmitted to the distributed DB network system.
The first control unit is configured to be able to hold integrated public personal information based on the information transmitted from each of the organization network systems in the first storage unit.

Further, the present invention is a personal information management method using a personal information management system for sharing personal information with other organizations.
The personal information management system includes a distributed DB network system and a plurality of organizational network systems.
The step that the organization network system accepts the personal information of the registrant transmitted from the registrant terminal device,
Steps to identify private personal information from the personal information and
At least the step of storing private personal information out of the personal information,
The step of transmitting only the public personal information out of the public personal information and the non-public personal information to the distributed DB network system is executed.
The distributed DB network system performs a step of holding integrated public personal information based on the information transmitted from each of the organizational network systems.

With such a configuration, it is possible to share the range of personal information permitted by the registrant with other organizations, and use the integrated personal information data as a shared information asset. Can be done.

In a preferred embodiment of the present invention, the first control unit is configured to be able to accept a viewing request for the private personal information transmitted by the user.
The browsing request is at least for the user to browse the information that can identify the public personal information of the registrant who registered the private personal information that he / she wants to disclose and the private personal information. Have shipping information,
The first control unit further transmits the browsing request to the organization network system.
The second control unit provides the non-public personal information to the user so that it can be browsed based on the browsing request.
With such a configuration, personal information designated as private can be provided as necessary and encouraged to be used.

In a preferred embodiment of the present invention, the first control unit is configured to be able to store history information of the browsing request based on the browsing request.
The history information has a status attached according to the processing state of the browsing request.
With such a configuration, it is possible to provide a personal information management system that appropriately manages information such as the distribution amount and route of non-public personal information.

In a preferred embodiment of the present invention, the second storage unit is configured to be capable of storing mapping data associated with information for specifying the public personal information and information for specifying the non-public personal information.
The second control unit provides the non-public information to the user who has transmitted the browsing request based on the information for identifying the public personal information included in the browsing request and the mapping data. It is configured so that personal information can be identified.
With such a configuration, even if the private personal information is leaked, the correspondence between the individual public personal information and the individual private personal information can be made unclear. Therefore, for example, it is effective when confidentiality is generated or confidentiality is enhanced by combining public personal information and non-public personal information.

In a preferred embodiment of the present invention, the distributed DB network includes a plurality of first information processing devices including the first control unit and the first storage unit.
The first information processing device is configured to be communicable with some or all of the other first information processing devices.
The first control unit can integrate the public personal information input from the organizational network system and the public personal information held by the other first information processing device and hold it in the first storage unit. As well as being composed of
The public personal information held by the first storage unit can be updated based on the public personal information input from the organizational network system and the public personal information held by the other first information processing device. It is composed of.

In a preferred embodiment of the present invention, the distributed DB network includes a first information processing device including the first control unit and the first storage unit, and second information including the second control unit and the second storage unit. Equipped with a processing device.
With such a configuration, a personal information management system can be provided.

According to the present invention, when a plurality of organizations use shared information assets to provide services, it is possible to provide a new technique for utilizing personal information as shared information assets.

It is a system block diagram of the personal information management system in Embodiment 1 of this invention. It is a system block diagram of the organization network system 2 in Embodiment 1 of this invention. It is a figure which shows an example of the hardware composition of the 1st information processing apparatus 3 in Embodiment 1 of this invention. It is a figure which shows an example of the hardware composition of the 2nd information processing apparatus 4 in Embodiment 1 of this invention. It is a figure which shows an example of the hardware structure of the information processing apparatus CP in Embodiment 1 of this invention. It is a figure which shows an example of the functional structure of the 1st information processing apparatus 3 and 2nd information processing apparatus 4 in Embodiment 1 of this invention. It is a figure which shows an example of the information used in the personal information management system in Embodiment 1 of this invention. It is a figure which shows the flow at the time of registering personal information in Embodiment 1 of this invention. It is a figure which shows the flow at the time of browsing the non-public personal information in Embodiment 1 of this invention. It is a figure which shows an example of the functional structure of the personal information management system in Embodiment 2 of this invention.

<First Embodiment>
Hereinafter, the personal information management system of the present invention will be described with reference to the drawings. The embodiments shown below are examples of the present invention, and the present invention is not limited to the following embodiments, and various configurations can be adopted.

For example, in the present embodiment, the configuration, operation, and the like of the personal information management system will be described, but a method, an apparatus, a computer program, and the like having the same configuration can also exert the same effects. Further, the program may be stored in a recording medium. Using this recording medium, for example, a program can be installed on a computer. Here, the recording medium in which the program is stored may be a non-transient recording medium such as a CD-ROM.

The present invention relates to a personal information management system for managing personal information. In this embodiment, in particular, a case where a employment / recruitment support service is provided by registering a name, date of birth, skill, work history, etc. as personal information and providing information as necessary will be described. To do. The types and contents of personal information in the present invention are not limited to those exemplified in the specification, and the present invention is used for any information having properties that require preservation when used alone or in combination with other information. Good.

In the present embodiment, personal information is roughly classified into public personal information and non-public personal information. Here, the public personal information is personal information having a property that allows disclosure and sharing to an unspecified number of targets, for example, a nickname, initials, and a partial excerpt of non-public personal information. A partial excerpt of non-public personal information is, for example, a prefecture or city / ward / town / village in an address, an industry or an industry name in a work history, and the like.

Further, in the present embodiment, a person who registers personal information is referred to as a registrant, and a person who browses personal information is referred to as a user. Here, the registrant is typically a job seeker. A job seeker is a person who registers personal information in a personal information management system and waits for an offer from a company. In addition, the user is typically in charge of hiring a company. The hiring manager is a person who browses the personal information registered in the personal information management system and searches for a registrant who meets the desired conditions.

<Overall configuration>
FIG. 1 is a system configuration diagram of the personal information management system according to the present embodiment. As shown in FIG. 1, the personal information management system includes a distributed DB network system 1 and an organization network system 2 (2A to 2D), and the distributed DB network system 1 and the organization network system 2 are configured to be communicable. ..

<Distributed DB network system 1>
The distributed DB network system 1 includes first information processing devices 3 (3A to 3D) and network NT1. In the present embodiment, the network NT1 is the Internet, but it may be any network such as a LAN or a closed WAN, and any communication protocol may be used.

The first information processing device 3 of the present embodiment is a computer that functions as a communication node device constituting the distributed DB network system 1. In the present embodiment, the distributed DB network system 1 is used to use each of the personal information. Contains public personal information that can be provided to the organization.

In the present embodiment, the distributed DB network system 1 takes the form of a distributed ledger system that manages ledgers by a blockchain using distributed ledger technology (DLT: Distributed Ledger Technology). The mode of the distributed DB network system 1 is not limited to this, and may be a mode of a synchronous distributed database in which a plurality of first information processing devices 3 each manage individual ledgers, and for example, no blockchain is used. The same ledger may be managed by the distributed ledger technology in a broad sense.

More specifically, in the present embodiment, in the distributed DB network system 1, the block has an identifier of the block, transaction information, a hash of the immediately preceding block, and an electronic signature of the information stored in the block.

The digital signature is typically an encrypted hash value of the information stored in the block using the secret key of node A. One or more other nodes B (B, C, ...) Use the public key of node A, which has obtained this digital signature by a trivial method, for the unconfirmed block sent (broadcast). By verifying and confirming the authenticity of the information described in the block, an undetermined block whose authenticity is guaranteed can be added to the chain. The hash of the immediately preceding block is calculated, for example, by the node A requesting verification.

The transaction information may include, for example, a transaction related to addition, change, deletion, etc. of public personal information, a transaction related to a request for viewing private personal information, and the like, which will be described later.

Transactions related to public personal information include, for example, the identifier of the organization that received the request from the registrant (organization identification information), the identifier of the personal information that is the target of the transaction (public personal identification information), and the processing type (addition, change). , Deletion, etc.), processing content (after addition, change, deletion, etc., or before and after personal information, etc.) may include part or all.

Transactions related to browsing requests for private personal information include, for example, the identifier of the user who made the browsing request (identification information), the identifier of the organization that received the browsing request (organization identification information), and the personal information that is the target of the browsing request. Identifier (public personal identification information), identifier of the organization that manages the target personal information (organization identification information), status of browsing request (waiting for request processing, request processing, private personal information sent, private personal information May include some or all of (received, etc.).

Here, the number of the first information processing devices 3 constituting the distributed DB network system 1 is not limited. Further, in the illustrated example, in the distributed DB network system 1, the first information processing devices 3A to 3D are connected by a fully connected network topology, but any network topology may be used. The description of the above configuration will be omitted as long as it is not unclear.

<Organization network system 2>
Each organization network system 2 is a network of different organizations (A to D). In FIG. 1, four organization network systems 2 from organization network systems 2A to 2D are configured to be communicable with the distributed DB network system 1. Here, different organizations do not necessarily belong to different companies, and do not prevent different organizations in the same company from constructing the organization network system 2. Typically, different organizations within the same enterprise can occur when one organization is distinguished by a platform for registrants and users to register and view personal information.

FIG. 2 is a system configuration diagram of the organization network system 2 in the present embodiment. As shown in FIG. 2, the organization network system 2 (2A) includes a second information processing device 4 (4A). Further, the organization network system 2 (2A) is configured to be communicable with the administrator terminal device 7 (7A), and the registrant terminal device 5 (5A1, 5A2) and the user terminal device 6 are provided via the network NT2. It is configured to be able to communicate with (6A1, 6A2).

In the present embodiment, the network NT2 is the Internet, but it may be any network, and any communication protocol may be used.

The administrator terminal device 7 is an information processing device CP used by an administrator who manages the organization network system 2, and gives a processing command or permission to the organization network system 2. Further, the registrant terminal device 5 is an information processing device CP used by a user who registers personal information, and the user terminal device 6 is an information processing device CP used by a user who browses the personal information of the registrant. .. The information processing device CP is, for example, an arbitrary device such as a smartphone, a tablet terminal, a personal computer, or a wearable device, and is preferably an application for browsing a platform for registering / browsing personal information (typically). Has a web browser).

The first information processing device 3 and the second information processing device 4 according to the embodiment of the present invention may be one terminal device, one server device, and a plurality of terminal devices and / or. It may be a group of computers including a server device. Here, in the case of the aspect of the computer group, it is not necessary for a computer to be provided with all of the functional units described later. Further, the plurality of computers may be configured to be interconnected via a network.

Further, the number of the registrant terminal device 5, the user terminal device 6, and the administrator terminal device 7 according to the embodiment of the present invention may be one or a plurality, respectively. Here, for example, when the description is described as the registrant terminal device 5A, it means that the registrant terminal device 5A is an information processing device CP that uses the organization network system 2A of the organization A, which is a registrant. It does not prevent the terminal device 5A from being an information processing device CP that uses the organization network system 2 (for example, organization network system 2B) of another organization (for example, organization B).

<Hardware configuration>
FIG. 3 is a diagram showing an example of the hardware configuration of the first information processing device 3. As shown in FIG. 3, the first information processing apparatus 3 has a control unit (first control unit) 101, a storage unit (first storage unit) 102, and a communication unit (first communication unit) as hardware configurations. 105 and.

The control unit 101 is a CPU or the like and controls the entire first information processing device 3. The storage unit 102 is an HDD, ROM, RAM, or the like, and stores a program and data or the like used when the control unit 101 executes processing based on the program. When the control unit 101 executes the process based on the program stored in the storage unit 102, the functional configuration of the first information processing device 3 is realized as shown in FIG. 6, which will be described later. The communication unit 105 connects the first information processing device 3 to the network NT1 and controls communication with the distributed DB network system 1 (another first information processing device 3).

FIG. 4 is a diagram showing an example of the hardware configuration of the second information processing device 4. As shown in FIG. 4, the second information processing apparatus 4 has a control unit (second control unit) 201, a storage unit (second storage unit) 202, and a communication unit (second communication unit) as hardware configurations. 205 and.

The control unit 201 is a CPU or the like and controls the entire second information processing apparatus 4. The storage unit 202 is an HDD, ROM, RAM, or the like, and stores a program and data or the like used when the control unit 201 executes processing based on the program. When the control unit 201 executes the process based on the program stored in the storage unit 202, the functional configuration of the second information processing device 4 is realized as shown in FIG. 6, which will be described later. The communication unit 205 controls communication with the registrant terminal device 5, the user terminal device 6, and the administrator terminal device 7 by connecting the second information processing device 4 to the network NT2 or the like.

FIG. 5 is a diagram showing an example of the hardware configuration of the information processing apparatus CP. As shown in FIG. 5, the information processing apparatus CP includes a control unit 901, a storage unit 902, an input unit 903, an output unit 904, and a communication unit 905 as a hardware configuration.

The control unit 901 is a CPU or the like and controls the entire information processing apparatus CP. The storage unit 902 is an HDD, ROM, RAM, or the like, and stores a program and data or the like used when the control unit 901 executes processing based on the program. The input unit 903 is a touch panel, a mouse, a keyboard, or the like, and inputs user operations to the control unit 901. The output unit 904 is a display or the like, and displays the processing result or the like of the control unit 901. The communication unit 905 connects to the network NT2 and controls communication with the organization network system 2.

<Functional configuration>
FIG. 6 is a diagram showing an example of the functional configuration of the first information processing device 3 and the second information processing device 4. The first information processing device 3 includes a first receiving unit 11, a first storage unit 13, a first transmitting unit 15, a browsing transfer unit 17, and a first database 10 as functional configurations. Further, the second information processing device 4 includes a second receiving unit 21, a mapping unit 22, a second storage unit 23, a second transmitting unit 25, a reading unit 26, a viewing request unit 27, and a second database 20 as functional configurations. Be prepared. In these, information processing by software (stored in the storage unit 102 and storage unit 202) is specifically realized by hardware (control unit 101, control unit 201, etc.).

The registrant and the user use the registrant terminal device 5 and the user terminal device 6 to use a web service for registering and / or browsing personal information. In the present embodiment, the second information processing apparatus 4 functions as a web server for using this web service, and individual web services are provided in each organizational network system 2, but they are not necessarily separate web services. It does not have to be provided to registrants and users in the form of. In addition, an organization that provides a common web service and an organization that provides individual web services may coexist.

The registrant and the user are given personal identification information (personal ID in the present embodiment) unique to each user. Personal identification information (personal ID) is given to uniquely identify a user within at least one organizational network system 2 (that is, within each web service). The personal identification information may be a code for uniquely identifying a user in two or more organizations or all organizations (that is, in the personal information management system).

The second receiving unit 21 is configured to be able to receive the personal information of the registrant transmitted from the registrant terminal device 5. The second storage unit 23 is configured to be able to identify non-public personal information from personal information. The second storage unit 23 may specify all the personal information received by the second receiving unit 21 as non-public personal information. In the present embodiment, the second storage unit 23 is configured so that the public personal information and the non-public personal information can be specified, and at least the non-public personal information among the public personal information and the non-public personal information is stored in the second database. It is configured to be storable in 20.

FIG. 7 is a diagram showing an example of information used in the personal information management system. Reference numeral D0 is a diagram showing an example of information input from the registrant terminal device 5, and information D0 has personal identification information (personal ID), public personal information and non-public personal information which are personal information. .. The public personal information is information that can be disclosed, and includes, for example, a public personal name such as a nickname of a registrant, a public work history that is an outline of a registrant's work history, and the like. Private personal information is information that can be avoided from disclosure to a person who has not obtained prior consent from the registrant. For example, the private personal name that is the registrant's name and the details of the registrant's work history. Includes some private work history.

In the present embodiment, the second receiving unit 21 receives personal information in which public personal information and non-public personal information are distinguished, as illustrated as information D0. The distinction is possible, for example, on the input form side for inputting personal information, by giving an attribute name for identifying the input information to the input field of each information constituting the personal information. The second storage unit 23 is configured to be able to identify public personal information and non-public personal information based on this name.

Here, the control unit 201 of the second information processing device 4 includes a public personal information generation unit, and some public personal information and non-public personal information (or only non-public personal information) are registered as information D0. The personal information generation unit for public transmission, which is transmitted from the personal terminal device 5 to the second receiving unit 21, may be configured to generate a part (or all) of personal information for public use based on the received non-public personal information. Even with such a configuration, the public personal information and the non-public personal information can be identifiable from the personal information in the second storage unit 23.

The second receiving unit 21 does not necessarily have to store the received public personal information in the second database 20. When the public personal information is required, the second information processing device 4 makes a request for transmission of the public personal information to the distributed DB network system 1 (first information processing device 3) side, and the first database described later. By accepting the public personal information stored on the 10 side, the function of browsing the public personal information may be provided.

In the present embodiment, when the second receiving unit 21 receives the input of personal information, the second storage unit 23 stores the public personal information data and the non-public personal information data in the second database 20. Here, the mapping unit 22 is configured to generate and store mapping data of information for specifying public personal information and non-public personal information for each registrant. In the present embodiment, the mapping unit 22 associates the public personal identification information and the non-public personal identification information given to the public personal information and the non-public personal information by the second storage unit 23 to obtain mapping data.

In FIG. 7, reference numeral D1 is an example of mapping data D1 stored in the mapping unit 22. In the present embodiment, the mapping data D1 has personal identification information (personal ID), public personal identification information (public personal ID), and private personal identification information (non-public personal ID). Here, some or all of the personal identification information (personal ID) stored in a certain organization may be the same as the non-public personal identification information (non-public personal ID). As a result, for example, an organization that manages personal information by two ID systems, public and private personal identification information, before participating in the distributed DB network system 1, manages the personal information by the distributed DB network system 1. Can be migrated to.

Further, the reference numeral D2 is an example of the private personal information data D2 stored in the second database 20. The non-public personal information data D2 has non-public personal identification information (non-public personal ID) and non-public personal information.

Here, for example, non-public personal information is managed by personal identification information (personal ID), and instead of the above-mentioned mapping data D1 and non-public personal information data D2, personal identification information (personal ID) and public use The mapping data D1 having personal identification information (public personal ID) and the non-public personal information data D2 having personal identification information (personal ID) and non-public personal information may be stored in the second database 20. Further, the mapping data D1 and the private personal information data D2 may be stored in different databases.

The second transmission unit 25 transmits the public personal information to the distributed DB network system 1. As a result, transactions related to public personal information (registration, change, deletion, etc.) are transmitted to the distributed DB network system 1.

In the present embodiment, when a request for transmission of public personal information is made to the organization network system 2 via the administrator terminal device 7, the second transmission unit 25 makes public to the first information processing device 3. Send personal information data. Reference numeral D3 is an example of public personal information data D3 transmitted to the first information processing apparatus 3. The public personal information data D3 has public personal identification information (public personal ID), organization identification information (organization ID), and public personal information.

The organization identification information (organization ID) is information for identifying the organization that has transmitted the public personal information to the distributed DB network system 1. In the present embodiment, the second transmission unit 25 is given when transmitting the public personal identification information and the public personal information. The second receiving unit 21, the second storage unit 23, other functional component units, and the like may add the organization identification information. Further, when the second information processing device 4 for transmitting the public personal information to the first information processing device 3 is uniquely determined, the first information processing device 3 side is configured to associate the organization identification information with the public personal information. May be good.

Further, in the second information processing apparatus 4, when the second receiving unit 21 receives the update of the private personal information from the registrant who has already registered the private personal information, the second storage unit 23 receives the updated non-public personal information. The private personal information stored in the second database 20 can be updated based on the public personal information.

Here, when the public personal information is updated by the second receiving unit 21 accepting the update of the public personal information from the registrant who has registered the public personal information, the second storage unit 23 accepts it. The public personal information stored in the second database 20 can be updated based on the public personal information, and the second transmission unit 25 distributes the updated public personal information to the distributed DB network system 1. It is configured to be sendable to (transaction related to update of public personal information).

More specifically, the public personal information transmitted (updated) from the second transmission unit 25A of the second information processing device 4A belonging to the organization network system 2A of the organization A is the first of the first information processing device 3A. When the receiving unit 11A receives the information, the first storage unit 13A is configured to be able to update the public personal information stored in the first database 10A based on the (updated) public personal information. It is not always necessary for the same first receiving unit 11A to receive the public personal information transmitted from the second transmitting unit 25A every time, and another first receiving unit 11X may be configured to be receivable.

In this way, the first receiving unit 11 receives the public personal information data D3 transmitted from the organization network system 2, and stores the received public personal information data in the first database 10. Here, when the blockchain technology is used, the authenticity of a block containing information about one or a plurality of transactions is verified, and the block whose authenticity is guaranteed is stored in the first database 10. The first transmission unit 15A, which has received the personal information for disclosure from the organization network system 2A, stores the other first information processing devices 3 (for example, the first information processing devices 3B to 3D) in the first database 10A. Send personal information data for public use. This may be transmitted at the time of verification, or may be transmitted as information of the registered block after verification.

The first receiving unit 11 is configured to be able to hold the integrated public personal information data in the first database 10 by receiving the public personal information held by the other first information processing apparatus. As a result, the integrated public personal information is stored in the first databases 10A to 10D based on the public personal information obtained in each of the first information processing devices 3A to 3D.

Here, the first database 10 manages the version of the integrated public personal information data or the public personal information about each registrant, and even if the past public personal information is configured to be viewable and the like. Good. Further, the integrated public personal information stored in the first database 10 may be transmitted to the second databases 20A to 20D and stored in the second database 20.

The user accesses the web service using the user terminal device 6, and requests the distributed DB network system 1 or the organization network system 2 to browse the public personal information data. In the present embodiment, a request for viewing personal information for disclosure is made to the second information processing device 4 belonging to the specific organization network system 2 constituting the distributed DB network system 1. At this time, the browsing unit 26 processes the browsing request received from the user terminal device 6, acquires the integrated public personal information stored in the distributed DB network system 1, and refers to the user terminal device 6. Send it so that it can be viewed. The reading unit 26A of the second information processing device 4A belonging to the organization network system 2A acquires public personal information data from the first database 10A and provides it to the user terminal device 6 so that it can be viewed.

The user browses the public personal information using the web service, and requests the distributed DB network system 1 or the organizational network system 2 to browse the private personal information. As a result, the transaction related to the browsing request of the private personal information is transmitted to the distributed DB network system 1.

In the present embodiment, the user who uses the web service of the organization A designates a specific registrant by designating the personal information for disclosure via the user terminal device 6Am, and the second information processing device 4A. Request the browsing request unit 27A of the browsing request section 27A to browse the private personal information. The browsing request is associated with, for example, public personal identification information and personal identification information of the user making the request.

The browsing request unit 27 processes the browsing request from the user terminal device 6. If necessary, the browsing request unit 27 refers to the public personal information stored in the first database 10 or the second database 20 based on the public personal identification information included in the browsing request, so that the organization identification information can be obtained. May be configured to specify or accept the organization identification information as a browsing request. As a result, the organization N that provides the web service used by the registrant is specified, and the browsing request is forwarded to the browsing forwarding unit 17A (transaction related to the browsing request of private personal information).

The browsing transfer unit 17A further transfers a browsing request to the browsing transfer unit 17N. The transfer destination may be the specified first information processing device 3, or the browsing request may be broadcast to a plurality of first information processing devices 3 included in the distributed DB network system 1.

At this time, the organization identification information for identifying the organization A may be added to the browsing request as the destination of the non-public personal information. In addition, the second information processing device 4A and the first information processing device 3N, that is, the first information processing device 3 other than the first information processing device 3A can be configured to be communicable, and the browsing request can be directly transferred. Good. Further, the browsing request may be directly transferred from the second information processing device 4A to the second information processing device 4N.

The browsing transfer unit 17A may be configured to store history information in the first database 10 for a browsing request for private personal information. The history information may include, for example, the request ID of the browsing request, the identification information of the requesting user, the identification information of the requested registrant, and the status of the request. Here, the organization identification information used by the requested registrant may be added when the browsing request is transmitted from the user terminal device 6 to the browsing request unit 27, or the user terminal device 6 may be added. May be added to the browsing request by the first information processing device 3 or the second information processing device 4 after the transmission to the browsing request unit 27.

It is preferable that the history information is broadcast to a plurality of first information processing devices 3 and recorded in a plurality of distributed DB network systems 1. When using blockchain technology, historical information may be recorded in blocks, either in a block containing transactions related to public personal information, or in a block separate from the block containing transactions related to public personal information. , May be recorded in a chain containing blocks containing transactions related to public personal information, or at least in a chain separate from the chain containing blocks containing transactions related to public personal information. The change in status with respect to the browsing request may also be recorded in the distributed DB network system 1.

In the present embodiment, the combination of the organization identification information and the personal identification information of the user who made the browsing request is used as the destination information for the user to browse the private personal information. Here, the private personal information may be sent by using the user's e-mail address, push notification address, or the like as the destination information.

Upon receiving the browsing request, the browsing transfer unit 17N transmits a browsing request to the browsing request unit 27N. The browsing request unit 27N refers to the mapping data D1 to identify the corresponding personal identification information and the private personal identification information, and notifies the registrant that the browsing request has been made based on the browsing request. It is configured to be possible. In addition, permission from the registrant is obtained by accepting the availability of the browsing request from the registrant.

When the viewing request unit 27N receives permission, the second information processing device 4N provides the non-public personal information to the second information processing device 4A, and the viewing unit 26A allows the user to view the private personal information. It is configured to be possible. As a result, the user requests the second information processing device 4N to browse the private personal information from the web service provided by the second information processing device 4A, and browses the private personal information via the browsing unit 26A. be able to. The non-public personal information may be passed to the second information processing apparatus 4A via the browsing transfer unit 17N and the browsing transfer unit 17A. Further, the user may access the web service provided by the organization network system 2N instead of the organization network system 2A to browse the private personal information, or any first component of the distributed DB network system 1. The information processing device 3 may provide a function for viewing private personal information.

<Personal information registration flow>
Next, the flow of registering personal information will be described with reference to FIG. Here, the registrant n who uses the organization network system 2A registers personal information using the registrant terminal device 5An. In step S11, the registrant terminal device 5An accesses the web service provided by the second information processing device 4A and registers personal information. The second receiving unit 21A of the second information processing device 4A receives the information D0n of the registrant n transmitted from the registrant terminal device 5An. In step S12, the second storage unit 23A stores the public personal information data and the non-public personal information data D2n in the second database 20A.

When the registrant n registers the personal information for the first time, in step S13, the mapping unit 22A generates the mapping data D1n using the public personal identification information and the private personal identification information. In the case of input relating to the update of personal information, step S13 does not necessarily have to be executed.

In step S14, the administrator terminal device 7A determines the disclosure of the personal information data for disclosure, and if the disclosure is permitted, the permission for disclosure is transmitted to the second information processing device 4A. When the administrator terminal device 7A permits the sharing of the public personal information data, in step S15, the second transmission unit 25A transmits the public personal information data D3n to the distributed DB network system 1.

The first receiving unit 11A of the first information processing device 3A receives the public personal information data D3n, and the first storage unit 13A stores the received public personal information data D3n in the first database 10A. Further, in step S16, the first transmission unit 15A transmits the public personal information data D3n to the other first information processing device 3N, so that the public personal information is shared in the distributed DB network system 1. To. The first receiving unit 11A receives the public personal information received from the other first information processing device 3N, and the first storage unit 13A stores the public personal information in the first database 10A, so that the integrated public personal information is integrated. Is configured to be storable in the first database 10A.

<Browsing flow of private personal information>
Next, with reference to FIG. 9, the flow when browsing the private personal information will be described. Here, the user m who uses the organization network system 2B browses the private personal information using the user terminal device 6Bm. In step S21, the user terminal device 6Bm accesses the web service provided by the second information processing device 4B and browses the integrated public personal information provided via the browsing unit 26B.

In step S22, a browsing request for browsing the private personal information of a specific registrant An (user n of organization A) is made to the browsing request unit 27B. Upon receiving the browsing request, the browsing request unit 27B of the second information processing device 4B transmits a browsing request for browsing the private personal information to the distributed DB network system 1.

In step S23, the distributed DB network system 1 (browsing transfer unit 17B and browsing transfer unit 17A) that received the browsing request for browsing the private personal information transfers the browsing request to the second information processing device 4A. To do. In step S24, the browsing request unit 27A that has received the browsing request notifies the registrant terminal device 5An of the provision request for browsing the private personal information.

In step S25, the registrant terminal device 5An that has received the browsing request notification responds to the browsing request unit 27A with permission to browse the private personal information. In step S26, the browsing request unit 27A that has received the permission to browse the private personal information provides the private personal information to the second information processing device 4B. The browsing request unit 27B that has received the non-public personal information notifies the user terminal device 6Bm of the provision and receipt of the non-public personal information, and in step S28, the browsing unit 26B notifies the user terminal device 6Bm. , Make private personal information viewable.

The user Bm transmits a browsing request for browsing the private personal information of the registrant An to the second information processing device 4A via the browsing section 26B, and the browsing section 26A of the second information processing device 4A. Approves the request and returns the private personal information of the registrant An. As a result, the non-public personal information can be viewed on the user terminal device 6Bm.

<Second embodiment>
FIG. 10 is a diagram showing an example of the functional configuration of the personal information management system according to the second embodiment of the present invention. In the present embodiment, the information processing device 8 provided with each functional unit in the first embodiment functions as a communication node device constituting the distributed DB network system 1 and also as a web server constituting the organization network system 2.

In the present embodiment, the first transmission unit 15A of the information processing device 8A (first information processing device) transmits personal information for disclosure to another information processing device 8N or the like (second information processing device). Therefore, the integrated public personal information data in the first database 10 is configured. Even with such a configuration, the present invention can be preferably carried out.

At this time, in the present embodiment, the control unit (first control unit) of the information processing device 8A (first information processing device) is the first receiving unit 11A, the first storage unit 13A, the first transmitting unit 15A, and the second. It functions as a receiving unit 21A, a mapping unit 22A, a mapping unit 22A, a second storage unit 23A, a viewing unit 26A, and a viewing request unit 27A, and is a storage unit (first storage unit) of the information processing device 8A (first information processing device). ) Functions as the first database 10A and the second database 20A.

At this time, similarly, the control unit (second control unit) of the other information processing device 8N (second information processing device) is the first receiving unit 11B, the first storage unit 13B, the first transmitting unit 15B, and the second. The storage unit (second storage unit) of the information processing device 8B (second information processing device) functions as a receiving unit 21B, a mapping unit 22B, a second storage unit 23B, a browsing unit 26B, and a viewing requesting unit 27B. It functions as a database 10B and a second database 20B.

In the present embodiment, the first receiving unit 11 receives the public personal information data from the second database 20, but for example, the public individual from the second receiving unit 21, the second storage unit 23, and the like. It may be configured to receive information data. The browsing request unit 27 transmits a browsing request from the user to the browsing request unit 27 of another information processing device 8N (second information processing device).

At this time, preferably, the first virtual server having the functional configuration corresponding to the first information processing device 3 is configured to be operable in one of the network segments separated in the information processing device 8, and further, the other network. In the segment, a second virtual server having a functional configuration corresponding to the second information processing device 4 is configured to be operable. As a result, for example, the first virtual server behaves as a node of the distributed DB network system 1, and the second virtual server behaves as a web server.

1: Distributed DB network system 2: Organization network system 3: First information processing device 4: Second information processing device 5: Registered terminal device 6: User terminal device 7: Administrator terminal device 8: Information processing device 10: 1st database 11: 1st receiving unit 13: 1st storage unit 15: 1st transmitting unit 17: Browsing transfer unit 20: 2nd database 21: 2nd receiving unit 22: Mapping unit 23: 2nd storage unit 25: 1st 2 Transmission unit 26: Browsing unit 27: Browsing request unit 101, 201, 901: Control unit 102, 202, 902: Storage unit 903: Input unit 904: Output unit 105, 205, 905: Communication unit CP: Information processing device D0 : Information D1: Mapping data D2: Private personal information data D3: Public personal information data NT1: Network NT2: Network

Claims (7)

A personal information management system for sharing personal information with other organizations.
The personal information management system includes a distributed DB network system and a plurality of organizational network systems.
The distributed DB network system includes a first control unit and a first storage unit.
The organization network system includes a second control unit and a second storage unit.
The second control unit is configured to be able to receive the registrant's personal information transmitted from the registrant terminal device.
It is configured so that private personal information can be identified from the personal information.
At least the non-public personal information of the personal information can be stored in the second storage unit, and at the same time.
Of the public personal information and the non-public personal information, only the public personal information can be transmitted to the distributed DB network system.
The first control unit is configured to be able to hold integrated public personal information based on the information transmitted from each of the organization network systems in the first storage unit .
It is configured to be able to accept viewing requests for the private personal information sent by users.
It is configured to be able to send the browsing request to the organizational network system.
The browsing request is at least for the user to browse the information that can identify the public personal information of the registrant who registered the private personal information that he / she wants to disclose and the private personal information. Have shipping information,
The second control unit is a personal information management system that further provides the non-public personal information to the user so that it can be browsed based on the browsing request . The first control unit is configured to be able to store the history information of the browsing request based on the browsing request.
The personal information management system according to claim 1 , wherein the history information has a status attached according to the processing state of the browsing request. The second storage unit is configured to be able to store mapping data associated with information for specifying the public personal information and information for specifying the non-public personal information.
The second control unit provides the non-public information to the user who has transmitted the browsing request based on the information for identifying the public personal information included in the browsing request and the mapping data. The personal information management system according to claim 1 or 2 , which is configured to be able to identify personal information. The distributed DB network, according to claim 1, further comprising a second information processing apparatus having the first information processing apparatus and comprising a first control unit and the first memory unit, the second control unit and a second storage unit The personal information management system described in any of ~ 3 . A personal information management system for sharing personal information with other organizations.
The personal information management system includes a distributed DB network system and a plurality of organizational network systems.
The distributed DB network system includes a plurality of first information processing devices including a first control unit and a first storage unit.
The first information processing device is configured to be communicable with some or all of the other first information processing devices.
The organization network system includes a second control unit and a second storage unit.
The second control unit is configured to be able to receive the registrant's personal information transmitted from the registrant terminal device.
It is configured so that private personal information can be identified from the personal information.
At least the non-public personal information of the personal information can be stored in the second storage unit, and at the same time.
Of the public personal information and the non-public personal information, only the public personal information can be transmitted to the distributed DB network system.
The first control unit integrates the public personal information input from the organization network system and the public personal information held by the other first information processing device, and from each of the organization network systems. an integrated public personal information based on the transmitted information, Rutotomoni is holdable configured in the first storage unit,
The public personal information held by the first storage unit is updated based on the public personal information input from the organizational network system and the public personal information held by the other first information processing apparatus. A personal information management system that can be configured. It is a personal information management method that uses a personal information management system for sharing personal information with other organizations.
The personal information management system includes a distributed DB network system and a plurality of organizational network systems.
The step that the organization network system accepts the personal information of the registrant transmitted from the registrant terminal device,
Steps to identify private personal information from the personal information and
At least the step of storing private personal information out of the personal information,
The step of transmitting only the public personal information out of the public personal information and the non-public personal information to the distributed DB network system is executed.
A step in which the distributed DB network system holds integrated public personal information based on information transmitted from each of the organizational network systems .
The step of accepting the viewing request of the private personal information sent from the user, and
To execute the step of sending the browsing request to the organizational network system ,
The browsing request is at least for the user to browse the information that can identify the public personal information of the registrant who registered the private personal information that he / she wants to disclose and the private personal information. Have shipping information,
The organization network system is a personal information management method that further executes a step of providing the non-public personal information to the user in a viewable manner based on the browsing request . It is a personal information management method that uses a personal information management system for sharing personal information with other organizations.
The personal information management system includes a distributed DB network system and a plurality of organizational network systems.
The distributed DB network system includes a plurality of information processing devices.
The information processing device is configured to be communicable with some or all of the other information processing devices.
The step that the organization network system accepts the personal information of the registrant transmitted from the registrant terminal device,
Steps to identify private personal information from the personal information and
At least the step of storing private personal information out of the personal information,
The step of transmitting only the public personal information out of the public personal information and the non-public personal information to the distributed DB network system is executed.
The information processing device integrates the public personal information input from the organization network system and the public personal information held by the other information processing device, and is transmitted from each of the organization network systems. Steps to retain informed, integrated public personal information ,
An individual who executes a step of updating the held public personal information based on the public personal information input from the organizational network system and the public personal information held by another information processing device. Information management method.